last executing test programs: 12m7.131580442s ago: executing program 3 (id=739): openat$auto_ftrace_formats_fops_trace_printk(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/printk_formats\x00', 0x244000, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, 0x0, 0x101002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/smaps_rollup\x00', 0x1a3000, 0x0) pread64$auto(r1, 0x0, 0x12a, 0x8) ioctl$auto(r0, 0x5403, r0) 12m6.855052175s ago: executing program 3 (id=742): r0 = socket(0x2b, 0x6, 0x4000001) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000100), r0) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000280), 0x42440, 0x0) socket(0x2c, 0x80003, 0x0) setsockopt$auto(0x3, 0x11b, 0x2, 0xffffffffffffffff, 0x9) r1 = prctl$auto_PR_SET_VMA_ANON_NAME(0x4, 0x0, 0x0, 0x7a, 0x7) poll$auto(&(0x7f0000000180)={r1, 0x72d7, 0x7}, 0xffffffff, 0x80) writev$auto(r1, &(0x7f0000000140)={&(0x7f00000000c0)="bbc69f44294e96f44775c8ae2f799d5b6cd3299545567a43016b6aec10e08a4fb9dbbca984cc42f44cdd54999180d823053a2bcc3081d962d5d7782de2cd2ad59a53569f780f1c9034ccad3581883cc6b1a76687a38c9eeb864081f5aa5c16157d43f44f0da3d1f57668fd3b292a2de512328f62", 0x3}, 0x8) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0xa2741, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x618b40, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40000) recvfrom$auto(0x3, 0x0, 0x2395, 0x40000100, 0x0, 0xfffffffffffffffd) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) write$auto_ftrace_set_event_notrace_pid_fops_trace_events(r2, &(0x7f0000000340)="953061f68a8c9b2b4c1b5f59f6657c6b8c86097003190f28a192556619af53b6bd94aace8ea0eedf68a7ee62670072c35a4843b0e7a61ececf0e7d1906e72152f624c23def5929e0cf1a2630978181842d6bff639ae2bb57092e4282f3b588b925a7257f0428b681c7ef2aaec8ae085a3c02a6970802ea9dbe370b6eebf92537c78b35d1ca", 0x85) 12m5.383541291s ago: executing program 3 (id=747): syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_MON_PEER_GET(r0, &(0x7f0000006140)={0x0, 0x0, &(0x7f0000006100)={&(0x7f00000034c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4401}, 0x4c848) 12m5.310010169s ago: executing program 3 (id=748): r0 = socket(0xa, 0x801, 0x106) (async) unshare$auto(0x40000080) (async) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(0x0, 0x0, 0x700) (async) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), r0) (async) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0x40000100000001}, 0x6, 0x0) (async) r3 = setfsuid$auto(0xee00) (async) r4 = setfsuid$auto(0xee01) setresuid$auto(r3, r4, r3) (async) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r5, 0x4, 0x7ff) (async) wait4$auto(r5, 0x0, 0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r6, 0x4, 0x7ff) r7 = set_tid_address$auto(&(0x7f0000000080)) (async, rerun: 32) r8 = gettid() (rerun: 32) syz_open_procfs$namespace(r8, &(0x7f0000000040)) (async) shmctl$auto_SHM_INFO(0x4, 0xe, &(0x7f0000000180)={{0x40, 0xee01, 0xee01, 0x3, 0x4, 0x3ff, 0x2}, 0xffff, 0x7, 0x4, 0x8, @raw=0x8000, @inferred=0xffffffffffffffff, 0x3, 0x0, &(0x7f00000000c0), &(0x7f0000000140)="3f3fd7bc277e1d391e735f7de79d0d25de5578060724d67bd3ae1deb393187ab031e721ba1da95704de1ba269a"}) sendmsg$auto_IPVS_CMD_NEW_DEST(r0, &(0x7f0000001c80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001c40)={&(0x7f0000000200)={0x1a20, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x288, 0x1, 0x0, 0x1, [@nested={0x38, 0xb, 0x0, 0x1, [@typed={0x7, 0x139, 0x0, 0x0, @str=';*\x00'}, @nested={0x4, 0xc6}, @typed={0x5, 0x102, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x88}, @nested={0x4, 0x11b}, @typed={0x4, 0x1e}, @nested={0x4, 0xd4}, @typed={0x9, 0x11d, 0x0, 0x0, @str='}%*-\x00'}, @nested={0x4, 0x150}]}, @nested={0x130, 0x7, 0x0, 0x1, [@nested={0x4, 0x5b}, @generic="af90e6db6f2bdf2c3d27cde02f2ea68ed40fce2c899714137df9ef5924f95ab4984d07aff4026acd217d1633d847bc1178fa1ac2be18f74e140b988a8fe54bc5c6890d08e6121989bb55a7c5f1484492546aa6ba4442ad182e332d49c0855e353712332a54d60fb28ba89773dafa5f9868619d1d", @generic="f2092cf55a7b4281623edf62af044d194f779785d40906bafd0628bc4f5cab32f0f56ea08e80a2d54c34b97f505086ee74d57e68ef8df64107623b45a5f926e1ec456eb8444bb287ead12c57f7d4b92784cfab42de113270cdfe70bd6da24357091fac246cc95cb11dd15db27340f8b773a0e2ca27b56f174d984e32469bdf831d7fc104e706f94b016dffd6056d2369e9c17126ff2f81a73af52c513a71dabb", @nested={0x4, 0x105}, @typed={0x8, 0xd0, 0x0, 0x0, @pid=r2}, @typed={0x8, 0x10f, 0x0, 0x0, @uid=r4}]}, @generic="1aa847edb68fbd1c43ea5c53e19421124862e3317c25a91f6bf4e87bf0ced8a4b7145899de3f7dbb4e5d768622f2ce044804d3077da7df67fa0d970169e9dbc9bb13c4917d112711a5a6a3c85e2f1b353af6cf748917236e1ff5c31f282c1f652705aeceef8b5fdbadbede65541da58cec6ccdc02e67d239e20a35479a89557e715d941fd7762edf480bff6824a158fd1b4cd6600634948745cffd9bb4d8", @generic="25a896f215059890014749586ac33265510f99ea4c047501d8feed9e73d01a87b4473cb003021cfb3ad8c51af80a47fd2d58a806d1665139ab287de153d0cccdef4b0546bfcfb0dac3607cfb11631163f4407b5013a8e9b5ea28b1f22ec82597766ad38a75589fced34c20da95deb92a82024ca67bbb031427631e321763"]}, @IPVS_CMD_ATTR_DEST={0x270, 0x2, 0x0, 0x1, [@nested={0x269, 0xac, 0x0, 0x1, [@typed={0x6, 0x54, 0x0, 0x0, @str='\'\x00'}, @nested={0x4, 0x121}, @generic="7fa3c4d40873855c49160914f83e2bff0aa4662dcf929dc860bdcecac0f102010b63a62fe06c9db87dbb9f9d76616a47e0db7debc8c9d484", @generic="9b38dff34a45d2717563d6a905c500b9fb4e54ef89797c5c7d2054629158e97ed9698a440d954b2aae967c395ea584cf6f1d860190a66f648db399da8bb7f00ec03997551f123e15539d7653504e4fbafac278a3c82c7c", @generic="ecfff98783e1eaca00504f450b985dd7152d1fbfd4c3521b6edfe0b8c707e3a625c72afef12dde315c2aa852b3eb46eb", @nested={0x4, 0xcb}, @generic="fcc105a651b000b8c588094f4404534966b4242741c1f4aa9759dece5ae85e78f89546121839d502daf671c45db76fe3d3348eb94377f2927637d6a8981dbe6c1cf529151a665af4714c20c0201decc910000ec3727f28c2b33be1d0daaf1aba887a4adc363909fc13fc835c16e42481becf467b63f69d65333948dc250e8e8539f554ba2cd7a5609f17b21ea4aeb6534c95dd79b5c709739d88b2702dfa73305d656bc4be80318e4d83db1e35325bd15b74c8415ef0d319f58132de7590b072e7bd4ec97e2d98c5f92a9c442129986cbf90f3348e0fc9b1e765b428890589be056d0843255764c49a64c64aa3ea2c59f33f", @typed={0xa2, 0x11f, 0x0, 0x0, @binary="796c3aa08e2701c205538cf571116730886960354ba4c7d70da3eaace042695d1f11d143946cfae3f7f29cb70a1355f0326c4c52b974e559ba01eebf2b8be99f8d834fe64ea7be0411e346c5df96116b865148406e689ca4d11e7a81578f7f3824733e3d262a0dc64b57baf55eedb8ac6f4df4a8f3239cd9e604f1f9ef2bdd7ac15b1423f7f0c1a64ca06fb3267871c87feae396f8bf529ed136ec9d9fcb"}]}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@typed={0xc, 0x5c, 0x0, 0x0, @u64=0x1}, @typed={0x8, 0x18, 0x0, 0x0, @pid=r5}, @typed={0x8, 0x10e, 0x0, 0x0, @uid=0xee00}]}, @IPVS_CMD_ATTR_SERVICE={0x12b0, 0x1, 0x0, 0x1, [@typed={0x8, 0xe2, 0x0, 0x0, @pid=r6}, @typed={0x8, 0x89, 0x0, 0x0, @pid=r7}, @nested={0xe1, 0x106, 0x0, 0x1, [@generic="9de7652ed9b3ca86ee63f02d59a1cb2f0356b17e448f3d4289d75835fab1901ebf5cc7420f179a2e985ea37181f7119295c0be51584bf7b305aab04a3aa4edcf8b1a4d2590c88a0815387e7d9a228d590a88fa55d0ecd139b64ab89c3ded40369079541d0ad07c235c48b2da09c5791466edc3f8a2aa6d4b32e4a1320f065f956ed5ed51cb1877ce2293f3b6114a7193e82da158bd3bbbe7b92d23072c918ea6440b295000e222e1c1228836d9e25e3c528a5c8efe5dc6ab70be043f6fb186e190718992d6e6ce19e1b68995a8685b74fbfa12bcaf303a221d793eacc1"]}, @nested={0x1167, 0x134, 0x0, 0x1, [@generic="dbb684a14e59e1c9e8b6f6c43a3273da94602cfa8c579c63eb8e9880bd996a2276b6ac7b5cf3f2345ae9eacb7b87a64dbde9481b2db9348f", @typed={0x8, 0xd3, 0x0, 0x0, @pid=r8}, @nested={0x4, 0x42}, @nested={0x4, 0xb3}, @generic="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", @typed={0x14, 0x6, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x19}}, @generic="e7d560b14cfc44372becdc3defecc231c0cf4033a88a0131c7ead5d729d6bceabffa4cbdae68e0e565770cd9f7ccef001e0de7daa27e8617f37023eb59dd13524063b85b8b25d41931217cc6a5a603f23d562950de54b0fefa1ee4b81e99b412914aec88c26f903f749bf16606ccd0200d9477ee0f4c6e95d0a0c7547e6ddf2b666297c6730d31d61991631a0bb5126ffb05f80f1cd0cf858ef17fb7db7659437c4cc41cff217ddcf6acefe686aa0113b73ee6226f328c80bbaee63109835ef953d7fca46832c5465011b45089d3c941c5d85d25ff5e0737753cf9abd76747073cd120b46285f0bfa732e9297fb52232c5896d394a97f3", @typed={0xc, 0xb1, 0x0, 0x0, @u64=0x9}, @nested={0x4, 0xab}]}, @nested={0x4d, 0xfa, 0x0, 0x1, [@generic="662e54bf54296aa981957429155fef5dedb276f51ef7465e679039f66434026e26f0fcad0e3fc6231fb4912575addf333d7ae05a30cc8d8f378b02624af8da845bef4e39474e5b86dc", @generic]}]}, @IPVS_CMD_ATTR_SERVICE={0x1c9, 0x1, 0x0, 0x1, [@nested={0x10, 0x72, 0x0, 0x1, [@nested={0x4, 0x14}, @typed={0x8, 0xa7, 0x0, 0x0, @uid=r9}]}, @nested={0x112, 0x75, 0x0, 0x1, [@generic="8cd09fad41a800059342d2f6b05466c81f720f20fe1602484bceb56716eed118677d06869ade37a0aeff1ad91ae639b186f106a168701c5c823fe4897725925bb869cd2777c5930bc81ab8037a4f6a0e38315e05af6fa79648921ca32bc4c2b93d120ea0cd3a99aea7ede676b684d61e35ae931c0adff78e9b05b4ae45ce3ee3", @typed={0x14, 0x13a, 0x0, 0x0, @ipv6=@mcast1}, @generic="22abdb1d6877db97bfc7793c5070965a678cb1a14c735d6fb566bab2cf974749fc2d332f463c0df1950df186e236c8e8de61b4020b8e2b4c4065945ee1246f8094adf61a4e166afb6afd3b7280fac494ba14c4dc22071adb1562f61e4f78baed36913427f6799a2e6d6df249edece1a94a3f", @nested={0x4, 0x39}, @nested={0x4, 0xca}]}, @generic="130efb089b8fd62149c7d2b908fffe09a7eea898a7be3b0c6bba95d66d196be7c7fc063861a78fc21d6055a5bd18e5697248361c8e45f557960f542e480cc3ce79d4b7bac6d22fc4cf96f43544939849bc0817a4a24797326f9b1dcedde324c5c49c41546324427f8cd6c2d8809509759acb73632c71a78622766eda7f4dd68b6779f8ff848edb3fc520f7b48a5d19a3359c8f118dfd3adc0e637a8a9eb871f95c"]}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@generic="5a4ab82cebaa9441ee907ef5daadb7b691fbff54fd7e592736a3947cb9e3548c46ece4df1cc966c75edf5694671984280aa6b9e51fd0c8d420cbe76a910980ac10588042f63cbc39df43409514610e06968fd80a2c19a93e8140fc5d389e94a6e95b4a13741c19af39ec5081a196faf8c49b80d6"]}]}, 0x1a20}, 0x1, 0x0, 0x0, 0x10}, 0x20049080) (async) socket(0xa, 0x5, 0x0) (async) ioctl$auto(0x1, 0x8941, 0x8) 12m3.749190045s ago: executing program 3 (id=756): syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_MON_PEER_GET(r0, &(0x7f0000006140)={0x0, 0x0, &(0x7f0000006100)={&(0x7f00000034c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4401}, 0x4c848) 12m3.418250007s ago: executing program 3 (id=757): close_range$auto(0x2, 0x8, 0x0) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000280), 0x42440, 0x0) r0 = prctl$auto_PR_SET_VMA_ANON_NAME(0x4, 0x0, 0x0, 0x79, 0x10000) sendmsg$auto_NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x1, 0x40000000004, 0x4000000020df, 0x40eb1, 0x402, 0x300000000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) socket(0xa, 0x2, 0x0) setsockopt$auto(0x3, 0x0, 0x7, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) mount_setattr$auto(0x5, 0x0, 0x8000, 0x0, 0x283) r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000100), r0) ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={"59595ba99c0250fcf252d9df4a6c79067f7649c8366ae4dacb4221c94dd7d18b", 0x1, 0xa, 0x43, 0x70, 0x5f0, 0xffffffffffffffff}) r6 = ioctl$auto_NS_GET_TGID_IN_PIDNS(r0, 0x8004b709, &(0x7f0000000140)=0x8) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0x41, &(0x7f0000000480)={&(0x7f00000003c0)={0x44, r4, 0x200, 0x70bd28, 0x25dfdbff, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, r5}, @OVS_DP_ATTR_NAME={0x7, 0x1, '#!\x00'}, @OVS_DP_ATTR_NAME={0xb, 0x1, '$\xdd!\'+\\\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, r6}, @OVS_DP_ATTR_NAME={0xc, 0x1, 'nl80211\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x801}, 0x40000) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2f212dbd7000fcdbdf252100000008000300", @ANYRES32=r3], 0x24}}, 0x4000000) unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x1, 0x100) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/bonding/primary_reselect\x00', 0x1e2142, 0x0) r8 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) select$auto(0x800, 0x0, 0x0, &(0x7f0000000580)={[0xe83, 0x8, 0xfffffffffffffc01, 0x0, 0xfff9, 0x9, 0x14, 0x7fffffff, 0x8, 0x3fe, 0x4, 0x3, 0x5, 0x2, 0x5]}, 0x0) sendmmsg$auto(r8, &(0x7f00000003c0)={{0x0, 0x8f, 0x0, 0x5, &(0x7f0000000380), 0x100, 0x8}, 0x1a}, 0x3, 0x6) write$auto(r8, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) sendfile$auto(r7, r7, 0x0, 0x7fff) unshare$auto(0xa4) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) r9 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r9, 0xc0045002, 0x0) 11m48.053402419s ago: executing program 32 (id=757): close_range$auto(0x2, 0x8, 0x0) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000280), 0x42440, 0x0) r0 = prctl$auto_PR_SET_VMA_ANON_NAME(0x4, 0x0, 0x0, 0x79, 0x10000) sendmsg$auto_NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x1, 0x40000000004, 0x4000000020df, 0x40eb1, 0x402, 0x300000000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) socket(0xa, 0x2, 0x0) setsockopt$auto(0x3, 0x0, 0x7, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) mount_setattr$auto(0x5, 0x0, 0x8000, 0x0, 0x283) r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000100), r0) ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={"59595ba99c0250fcf252d9df4a6c79067f7649c8366ae4dacb4221c94dd7d18b", 0x1, 0xa, 0x43, 0x70, 0x5f0, 0xffffffffffffffff}) r6 = ioctl$auto_NS_GET_TGID_IN_PIDNS(r0, 0x8004b709, &(0x7f0000000140)=0x8) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0x41, &(0x7f0000000480)={&(0x7f00000003c0)={0x44, r4, 0x200, 0x70bd28, 0x25dfdbff, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, r5}, @OVS_DP_ATTR_NAME={0x7, 0x1, '#!\x00'}, @OVS_DP_ATTR_NAME={0xb, 0x1, '$\xdd!\'+\\\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, r6}, @OVS_DP_ATTR_NAME={0xc, 0x1, 'nl80211\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x801}, 0x40000) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2f212dbd7000fcdbdf252100000008000300", @ANYRES32=r3], 0x24}}, 0x4000000) unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x1, 0x100) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/bonding/primary_reselect\x00', 0x1e2142, 0x0) r8 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) select$auto(0x800, 0x0, 0x0, &(0x7f0000000580)={[0xe83, 0x8, 0xfffffffffffffc01, 0x0, 0xfff9, 0x9, 0x14, 0x7fffffff, 0x8, 0x3fe, 0x4, 0x3, 0x5, 0x2, 0x5]}, 0x0) sendmmsg$auto(r8, &(0x7f00000003c0)={{0x0, 0x8f, 0x0, 0x5, &(0x7f0000000380), 0x100, 0x8}, 0x1a}, 0x3, 0x6) write$auto(r8, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) sendfile$auto(r7, r7, 0x0, 0x7fff) unshare$auto(0xa4) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) r9 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r9, 0xc0045002, 0x0) 11.539965353s ago: executing program 0 (id=2968): ioperm$auto(0x7, 0x6, 0x2) timer_create$auto(0x8, 0x0, &(0x7f0000000040)=0x200) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) bpf$auto(0x6, &(0x7f00000003c0)=@link_update={0xa, @new_map_fd=r0, 0x7, @old_map_fd}, 0x1ff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = seccomp$auto(0x8, 0x6, &(0x7f0000000080)="61184b6523664d3c97e870692a708c6ce1ca15dc7e40fa9d5cc3d95571f7f2e5982567b439f7930500f7a2e83e7cb1e10726c6fc543149241e922802277ff6") ioctl$auto_TIOCVHANGUP(r1, 0x5437, &(0x7f0000000300)="d015ab6118092bb0c9599e2e03fc5215d8fd551b8338ff6c35a94e409455bceb6cc5f00558e256084cfd544af3d59fa12d4bbf74a64343113739742ce1bacda885634454a49559713da12fb31435327440b13f90c50e661f2cd2184e468155f80baf046af29fa3cd9232a6cfb964d2ba6ac02880ecb9d64c079956a3af45ac5db8951b3c906d5904d5b4e4d9befe438ae98a787bf052096a72cec677e38bdba0b91093c9202a5ef4e1d449235c597366dd1433faffb7ca0796ffbf3911f9d9df5d54a8127e5f8c2d7f6d01e071f603feeefcf852c8d96fd4328f3123d88651658105913dc8") socket(0x2, 0x6, 0x0) pidfd_open$auto(0x0, 0x0) socket(0x10, 0x0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) r3 = socket(0xa, 0x3, 0x100) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/dev/cdrom/autoclose\x00', 0x202, 0x0) sendfile$auto(r4, r4, 0x0, 0x1) close_range$auto(0x2, 0x8000, 0x0) r5 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_FUSE_DEV_IOC_BACKING_OPEN(0xffffffffffffffff, 0x4010e501, &(0x7f0000000000)={r3, 0x4}) bpf$auto(0x0, &(0x7f00000000c0)=@link_update={r2, @new_map_fd=r3, 0xa, @old_map_fd=r5}, 0x10) 9.886226262s ago: executing program 0 (id=2972): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000280)=""/175, 0xaf) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x109000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000005c80)=""/154, 0x9a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0xa0942, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x200000000000001, 0x368e, 0x2, {0x100000000, 0x4}, 0xff, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x8000000c, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) r4 = socket(0x15, 0x5, 0x0) ustat$auto(0x801, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) sendmsg$auto(r4, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x858) sysfs$auto(0x2, 0x23, 0x0) socket(0x11, 0xa, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'nicvf0\x00'}) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200) listmount$auto(&(0x7f0000000040)={0x200, @inferred=r0, 0x7f, 0x81, 0x400}, &(0x7f0000000140)=0x10000, 0xf, 0x5) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) r5 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000003c00), 0x1a9901, 0x0) write$auto(r5, &(0x7f0000004240)='\x01', 0x10000000004) 9.462800824s ago: executing program 1 (id=2974): statmount$auto(0x0, 0x0, 0x7ffffffff000, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x60020000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0xdef, 0x0) 9.081582558s ago: executing program 1 (id=2975): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open$dir(0x0, 0xa00, 0x100) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000480), 0x101100, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0180, 0x0) timerfd_create$auto_CLOCK_MONOTONIC(0x1, 0x9) preadv$auto(0x3, 0x0, 0x3, 0x1, 0x80000001) r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$auto_I2C_FUNCS(r0, 0x705, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0xe) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) splice$auto(0x4, 0x0, r1, 0x0, 0x1000, 0xf) fcntl$auto(r1, 0x408, 0xffffffff80000000) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 8.723669203s ago: executing program 0 (id=2977): mmap$auto(0x0, 0x2020009, 0x4d6bc983, 0xebd, 0xfffffffffffffffa, 0xfffffffffffffeff) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r0, 0x2, 0x9) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram8\x00', 0x81, 0x0) semctl$auto(0xc, 0x2, 0x13, 0x4) ioctl$auto_BLKDISCARD(r2, 0x1277, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xaece, 0xffffffffffffffff) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop10/queue/atomic_write_unit_min_bytes\x00', 0x60240, 0x0) read$auto(r3, &(0x7f0000000240)='/\x00', 0x100000001) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(r4, 0x0, 0x1f40) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) io_uring_register$auto(r4, 0xffff5594, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) fcntl$auto_F_WRLCK(r3, 0x1, 0x1) close_range$auto(0x2, 0x8, 0x0) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) shutdown$auto(0x200000003, 0x2) setsockopt$auto(r6, 0x110, 0x4, 0x0, 0x4) r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nbd11\x00', 0x210863, 0x0) ioctl$auto_BLKZEROOUT(r7, 0x127f, 0x0) r8 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x100e42, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE2(r8, 0x2272, &(0x7f0000000000)) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_udc.6/udc/dummy_udc.6/state\x00', 0x2000, 0x0) 7.261816021s ago: executing program 0 (id=2978): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r0, 0x301, 0x0) madvise$auto(0x39bf, 0x8, 0x17) madvise$auto_MADV_SEQUENTIAL(0x1ff, 0x9, 0x2) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff) waitid$auto_P_ALL(0x0, 0x9, &(0x7f00000000c0)={@_si_pad}, 0x8, &(0x7f0000000140)={{0x1400000000000, 0x1}, {0xf, 0x4}, 0x3, 0x8, 0xffff, 0x7, 0x6, 0xfffffffffffffff7, 0x1, 0x2, 0x656a, 0x7, 0x0, 0x6, 0x7}) gettid() mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x2dc08f24db163610, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368a, 0x2, {0x100000000, 0x10000}, 0x5, 0x8, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xdfffffffffff628e, 0x6, 0xdeb1, 0x808}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) open(&(0x7f00000003c0)='./file0\x00', 0x14d443, 0x100) mount$auto(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='xfs\x00', 0x5, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$auto(r2, 0x5453, r2) msgctl$auto_IPC_INFO(0xbf, 0x3, &(0x7f0000000280)={{0xbc, 0xee00, 0xffffffffffffffff, 0xb, 0xf, 0x83c3, 0xbc5c}, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x2, 0x8, 0x9, 0xb, 0x8, 0x2, 0x200, 0x23, 0x101, @inferred, @raw=0x101}) syz_clone(0x5000400, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC1\x00', 0x40, 0x0) msgctl$auto_IPC_SET(0xffffffff, 0x1, &(0x7f00000003c0)={{0x10000, r3, 0x0, 0xa, 0x2, 0x7, 0x40}, &(0x7f0000000340)=0x1, &(0x7f0000000380)=0x6, 0x7, 0x2, 0xa, 0x5, 0x3, 0x5, 0x7, 0xff, @inferred=0xffffffffffffffff, @raw=0x9}) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/tracing/tracing_on\x00', 0x258040, 0x0) r4 = setfsuid$auto(0xee01) setresuid$auto(0x0, r4, 0x0) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) 6.527051928s ago: executing program 1 (id=2979): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r0, 0x301, 0x0) madvise$auto(0x39bf, 0x8, 0x17) madvise$auto_MADV_SEQUENTIAL(0x1ff, 0x9, 0x2) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff) waitid$auto_P_ALL(0x0, 0x9, &(0x7f00000000c0)={@_si_pad}, 0x8, &(0x7f0000000140)={{0x1400000000000, 0x1}, {0xf, 0x4}, 0x3, 0x8, 0xffff, 0x7, 0x6, 0xfffffffffffffff7, 0x1, 0x2, 0x656a, 0x7, 0x0, 0x6, 0x7}) gettid() mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x2dc08f24db163610, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368a, 0x2, {0x100000000, 0x10000}, 0x5, 0x8, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xdfffffffffff628e, 0x6, 0xdeb1, 0x808}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) open(&(0x7f00000003c0)='./file0\x00', 0x14d443, 0x100) mount$auto(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='xfs\x00', 0x5, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$auto(r2, 0x5453, r2) r3 = syz_clone(0x5000400, 0x0, 0x0, 0x0, 0x0, 0x0) wait4$auto(r3, 0x0, 0xc0000000, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC1\x00', 0x40, 0x0) msgctl$auto_IPC_SET(0xffffffff, 0x1, &(0x7f00000003c0)={{0x10000, 0x0, 0x0, 0xa, 0x2, 0x7, 0x40}, &(0x7f0000000340)=0x1, &(0x7f0000000380)=0x6, 0x7, 0x2, 0xa, 0x5, 0x3, 0x5, 0x7, 0xff, @inferred=0xffffffffffffffff, @raw=0x9}) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/tracing/tracing_on\x00', 0x258040, 0x0) r4 = setfsuid$auto(0xee01) setresuid$auto(0x0, r4, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) 6.526554314s ago: executing program 2 (id=2980): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, 0x0, 0x102, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_ENABLE(r0, 0x40095505, 0x0) 6.347707475s ago: executing program 2 (id=2982): mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xe) 6.233711151s ago: executing program 0 (id=2983): statmount$auto(0x0, 0x0, 0x7ffffffff000, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x60020000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0xdef, 0x0) 5.98948843s ago: executing program 2 (id=2985): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) epoll_wait$auto(r0, &(0x7f0000000000)={0xffff, 0x10000}, 0x10001, 0x8) 5.894468024s ago: executing program 0 (id=2986): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x2df, 0x500, 0x81, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) mmap$auto(0x0, 0x20009, 0x7, 0xeb1, 0x405, 0x8000) ioperm$auto(0x7fb, 0x1, 0x4000007) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0xa, 0x801, 0x106) setsockopt$auto(r1, 0x6, 0x21, 0x0, 0x10) setsockopt$auto(0x3, 0x6, 0x21, 0x0, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x7, 0x8000) r2 = socket(0x2, 0x3, 0x100) sendto$auto(0x3, 0x0, 0xfdef, 0xf950, &(0x7f0000000140), 0x1d) mremap$auto(0x48, 0x0, 0x3, 0x2, 0x1) flistxattr$auto(r1, &(0x7f0000000180)='{}\'\x00', 0x9) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) sysfs$auto(0x2, 0x6, 0x0) r3 = socket(0xa, 0x1, 0x84) getsockopt$auto(r3, 0x84, 0x14, 0x0, 0x0) io_uring_enter$auto(r2, 0x4320, 0x4, 0x2, &(0x7f0000000000)="0ca257b5f8242289fb5ff3341e419bb95ae1d7474651d93736", 0x4) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) pidfd_getfd$auto(0x3, 0x1, 0x100000000) r4 = socket(0xa, 0x2, 0x0) setsockopt$auto(r4, 0x29, 0x30, 0x0, 0x56b) r5 = openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x200600, 0x0) pread64$auto(r5, 0x0, 0x1, 0x70) 5.449152143s ago: executing program 2 (id=2989): r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000003c00), 0x1a9901, 0x0) write$auto(r0, &(0x7f0000004240)='\x01', 0x10000000004) 5.047738643s ago: executing program 2 (id=2991): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/lapb2/threaded\x00', 0x0, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x7, 0x4a}) io_setup$auto(0x8afc, &(0x7f0000000000)) io_setup$auto(0x7ffe, &(0x7f0000000000)) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000080), 0x49}, 0x5, &(0x7f00000003c0), 0x5, 0x1000}, 0x5}, 0x2, 0x100) socket(0x23, 0x800, 0x9) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, 0x0, 0x4, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/uprobe_events\x00', 0x20003, 0x0) r0 = ioctl$auto_TUNSETVNETHDRSZ2(0xffffffffffffffff, 0x400454d8, &(0x7f00000000c0)=0x70080b1e) ioctl$auto_TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000140)=0xe) socket(0xa, 0x6, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto_console_fops_tty_io(r0, &(0x7f00000002c0)="94ec66ed466b1567dcf2835799196c33b849e892285d747197fff386d053316af243e3ba06277664ae60fd3898b3f5c098d96f91a1349a72d543add4ebaba24357d11638b403f0a452dfdfa4d79adc2de04ff21a4e376bc26289e49b71d32156cadea8c979b80043c9d727c59d7379c1f0e79eda8cf217a07185fdf44dea2b0f7a26967e2248940d1f9e0de23a491f08a7ff56926cab", 0x96) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pppoe\x00', 0x28000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000e80)=""/215, 0xd7) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40802, 0x0) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x9, 0x100000000, 0x63, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x400, 0x7ffffff9, 0x5, 0xffffffff80000000, 0x9, 0x61, 0x105}) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40400c4) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 4.263846661s ago: executing program 1 (id=2992): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r0, 0x301, 0x0) madvise$auto(0x39bf, 0x8, 0x17) madvise$auto_MADV_SEQUENTIAL(0x1ff, 0x9, 0x2) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff) waitid$auto_P_ALL(0x0, 0x9, &(0x7f00000000c0)={@_si_pad}, 0x8, &(0x7f0000000140)={{0x1400000000000, 0x1}, {0xf, 0x4}, 0x3, 0x8, 0xffff, 0x7, 0x6, 0xfffffffffffffff7, 0x1, 0x2, 0x656a, 0x7, 0x0, 0x6, 0x7}) gettid() mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x2dc08f24db163610, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368a, 0x2, {0x100000000, 0x10000}, 0x5, 0x8, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xdfffffffffff628e, 0x6, 0xdeb1, 0x808}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) open(&(0x7f00000003c0)='./file0\x00', 0x14d443, 0x100) mount$auto(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='xfs\x00', 0x5, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$auto(r2, 0x5453, r2) msgctl$auto_IPC_INFO(0xbf, 0x3, &(0x7f0000000280)={{0xbc, 0xee00, 0xffffffffffffffff, 0xb, 0xf, 0x83c3, 0xbc5c}, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x2, 0x8, 0x9, 0xb, 0x8, 0x2, 0x200, 0x23, 0x101, @inferred, @raw=0x101}) syz_clone(0x5000400, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC1\x00', 0x40, 0x0) msgctl$auto_IPC_SET(0xffffffff, 0x1, &(0x7f00000003c0)={{0x10000, r3, 0x0, 0xa, 0x2, 0x7, 0x40}, &(0x7f0000000340)=0x1, &(0x7f0000000380)=0x6, 0x7, 0x2, 0xa, 0x5, 0x3, 0x5, 0x7, 0xff, @inferred=0xffffffffffffffff, @raw=0x9}) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/tracing/tracing_on\x00', 0x258040, 0x0) r4 = setfsuid$auto(0xee01) setresuid$auto(0x0, r4, 0x0) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) 3.596108409s ago: executing program 4 (id=2994): mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r0, 0x0, 0xe) 3.140899535s ago: executing program 4 (id=2995): statmount$auto(0x0, 0x0, 0x7ffffffff000, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x60020000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0xdef, 0x0) 2.809123352s ago: executing program 4 (id=2996): ioperm$auto(0x7, 0x6, 0x2) timer_create$auto(0x8, 0x0, &(0x7f0000000040)=0x200) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) bpf$auto(0x6, &(0x7f00000003c0)=@link_update={0xa, @new_map_fd=r0, 0x7, @old_map_fd}, 0x1ff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = seccomp$auto(0x8, 0x6, &(0x7f0000000080)="61184b6523664d3c97e870692a708c6ce1ca15dc7e40fa9d5cc3d95571f7f2e5982567b439f7930500f7a2e83e7cb1e10726c6fc543149241e922802277ff6") ioctl$auto_TIOCVHANGUP(r1, 0x5437, &(0x7f0000000300)="d015ab6118092bb0c9599e2e03fc5215d8fd551b8338ff6c35a94e409455bceb6cc5f00558e256084cfd544af3d59fa12d4bbf74a64343113739742ce1bacda885634454a49559713da12fb31435327440b13f90c50e661f2cd2184e468155f80baf046af29fa3cd9232a6cfb964d2ba6ac02880ecb9d64c079956a3af45ac5db8951b3c906d5904d5b4e4d9befe438ae98a787bf052096a72cec677e38bdba0b91093c9202a5ef4e1d449235c597366dd1433faffb7ca0796ffbf3911f9d9df5d54a8127e5f8c2d7f6d01e071f603feeefcf852c8d96fd4328f3123d88651658105913dc8") socket(0x2, 0x6, 0x0) pidfd_open$auto(0x0, 0x0) socket(0x10, 0x0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x3, 0x100) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/dev/cdrom/autoclose\x00', 0x202, 0x0) sendfile$auto(r2, r2, 0x0, 0x1) 2.691684789s ago: executing program 1 (id=2997): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, 0x0, 0x102, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_ENABLE(r0, 0x40095505, 0x0) 2.302404861s ago: executing program 1 (id=2998): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x1a, 0x2, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0xe983, 0xdd, 0x18, r0, 0x40000008000) r1 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ubifs/tst_recovery\x00', 0x40aa2, 0x0) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x400008, 0xb, 0x9b75, 0x2, 0x8000) r2 = socket(0xa, 0x3, 0x3a) ioctl$auto_RTC_PARAM_GET(0xffffffffffffffff, 0x40187013, &(0x7f0000000040)={0x38, @uvalue=0x7, 0x9}) r3 = socketpair$auto(0x1, 0x7, 0x8000000000000000, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x567) socket(0x15, 0x5, 0x0) mmap$auto(0xfffffffffffffffa, 0xb, 0xdf, 0x8b56, 0x7, 0x2fdffffff) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) ustat$auto(0x801, 0x0) r4 = socket(0xa, 0x1, 0x84) sendmsg$auto(r1, &(0x7f0000000100)={&(0x7f0000000140)="09f0f50f5a002d7230dba93053e22c5905a766a5cfeb154986a446affdacb6eb25d1394347f80d37f1c7e9d1a2847ff0589df7f2b93275231c7d07c375ef5d1ed6e99812246dae", 0x8007fc, 0x0, 0x8, 0x0, 0xa9, 0x3ff}, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r2, 0x2285, r3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) prctl$auto_PR_SET_CHILD_SUBREAPER(0x24, 0x3e, 0x0, 0x20000009, 0xfffffffffffffffe) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ram12\x00', 0x16d603, 0x0) write$auto(r5, 0x0, 0xfffffdef) madvise$auto(0x0, 0x20499d, 0x9) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) 2.292587527s ago: executing program 4 (id=2999): write$auto(0xffffffffffffffff, &(0x7f0000004240)='\x01', 0x10000000004) 1.929187517s ago: executing program 4 (id=3001): r0 = prctl$auto_PR_SET_SECCOMP(0x16, 0xfffffffffffffffe, 0x10000, 0x8, 0x2) mmap$auto(0x0, 0x2020009, 0xb2, 0xeb1, r0, 0x8000) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) capset$auto(0x0, 0xfffffffffffffffe) setsockopt$auto(0x3, 0x10000000084, 0x72, 0x0, 0xc) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) r2 = socket(0x2, 0x5, 0x0) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0xc00, 0x0) ioctl$auto_EVIOCSMASK(r3, 0x40104593, &(0x7f0000000080)={0x2, 0x80000000, 0x7f}) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) ioctl$auto(0xc8, 0x800454dd, 0x5) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x1, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0x4048aec9, r4) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0x5}, 0x5, 0x0, 0x1, 0x9}, 0xffffffff}, 0x3, 0x0) read$auto_dfs_cpu_ops_debugfs(r1, &(0x7f0000000180)=""/4096, 0x1000) 206.922771ms ago: executing program 4 (id=3002): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x0, 0x5, 0xa) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) r2 = syz_open_procfs$namespace(0x0, 0x0) fstat$auto(r2, 0x0) r3 = syz_genetlink_get_family_id$auto_gtp(&(0x7f00000000c0), r0) sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="db6263c64300000528bd7000fcdbdf2500000000080001000a0000000600060006000000060006000a000000080007", @ANYRES32=r2, @ANYBLOB="14000c00ff010000000000000000000000000001080001000500000014000c0020010000000000000000000000000001"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) fsconfig$auto(0xffffffffffffffff, 0x8, &(0x7f00000003c0)='\x00*\xbc\xf5\'\xde\xf1\xd2`{\x87e\xf1\x9e\xba\x10X\xe3r\x82\x81e\xaal\x8f\xcf\xed~0c\xeb\xd5|\xffB\xf1\xc0?@\x16\xed\x8a\xfbm\xbf\x00\x99\xb1\xd4:s]\xccs\xc5\xe6\x8c\x9b\x85\xdc\xd2\tIP\x90L\x9bo\xe1}u\t\xe1.C\f\xe5\x1cb\xd0|\x8f\xb1LB\xfa\xcf>N\xac\xe9\xf6\x9e\x83p\xff\xe8\x8d\xbf\xe6>\xd5sG\x8c\xdb\xe6J@\x93?z\xb36\xb8H\xd2\xc7J\x8d\x9d5\xdc\x03xS\xe4\xfc,\x11<\xb3a\xbe\x8d1\x9cu\xcdt\xe9\x7f\r\tXb\x94\xb5\xb0\x17\nT\x15\xd8\x15\xe2\xda,B\xe5)\xd4\x99e\xac\x1d\xf9\x84m{\xea_Y\x1d\xedD\a\x9f\xae\xd3\x05\x9aA\x96\x12Q+', &(0x7f00000002c0)="ccbe28c7e6fe0387d2afa160a010b6c39491faf1347cc720f16fe22a75a19a49b4b7b21cb60cb72ef82f18b2ca9d92808dd8690cb7b370b62af49b47c67a58f6e64ee40e715cda689d56515de044d05bf33769eafb0d5f7369857173a386e14b31053c5be5d08cb8a15406fba232eee55f9747f936be8e511239e77695de1c3c173d025df63789b321c9c7584159424b", 0x0) read$auto_ftrace_enable_fops_trace_events(r4, &(0x7f0000000200)=""/34, 0x22) ioctl$auto(0x3, 0x40081271, 0x38) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x580f, 0xffb, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xfffffffffff70001, 0x1) preadv$auto(r1, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x3f, 0x5) mmap$auto(0x401, 0x2820009, 0x3, 0x33, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x6, 0x0) socket(0x1, 0x2, 0x0) socket(0xa, 0x2, 0x0) setsockopt$auto(0x2, 0x1, 0x50, &(0x7f0000000000)='\x00', 0x40) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a25, 0x1000, 0x0, 0x3, 0x0) 0s ago: executing program 2 (id=3003): mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r0, 0x0, 0xe) kernel console output (not intermixed with test programs): 0000000000000000 [ 776.417935][T20806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 776.417952][T20806] R13: 0000000000000000 R14: 00007fde25db5fa0 R15: 00007ffc75b4f308 [ 776.417986][T20806] [ 776.688714][ C1] vkms_vblank_simulate: vblank timer overrun [ 776.863873][T20805] nbd62: detected capacity change from 0 to 68719476736 [ 776.885243][ T5859] block nbd62: Send control failed (result -22) [ 776.923503][ T5859] block nbd62: Request send failed, requeueing [ 776.957067][T12367] block nbd62: Receive control failed (result -32) [ 777.012519][ T44] block nbd62: Dead connection, failed to find a fallback [ 777.020192][T20825] : Can't lookup blockdev [ 777.027225][ T44] block nbd62: shutting down sockets [ 777.034529][ T5859] ldm_validate_partition_table(): Disk read failed. [ 777.105987][ T5859] Dev nbd62: unable to read RDB block 0 [ 777.132419][ T5859] nbd62: unable to read partition table [ 777.191146][ T5859] ldm_validate_partition_table(): Disk read failed. [ 777.212698][ T5859] Dev nbd62: unable to read RDB block 0 [ 777.243253][ T5859] nbd62: unable to read partition table [ 777.279382][T12199] ldm_validate_partition_table(): Disk read failed. [ 777.288279][T12199] Dev nbd62: unable to read RDB block 0 [ 777.356681][T12199] nbd62: unable to read partition table [ 777.433451][T12199] ldm_validate_partition_table(): Disk read failed. [ 777.440761][T12199] Dev nbd62: unable to read RDB block 0 [ 777.512591][T12199] nbd62: unable to read partition table [ 778.156999][T20849] : Can't lookup blockdev [ 779.520353][T20920] : Can't lookup blockdev [ 780.539503][T20969] : Can't lookup blockdev [ 781.572028][T20979] nbd63: detected capacity change from 0 to 68719476736 [ 781.597270][T12199] block nbd63: Send control failed (result -22) [ 781.615325][T12199] block nbd63: Request send failed, requeueing [ 781.642320][T12367] block nbd63: Receive control failed (result -32) [ 781.650487][ T5981] block nbd63: Dead connection, failed to find a fallback [ 781.658144][ T5981] block nbd63: shutting down sockets [ 781.663622][ T5981] blk_print_req_error: 92 callbacks suppressed [ 781.663643][ T5981] I/O error, dev nbd63, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 781.680774][ T5981] buffer_io_error: 89 callbacks suppressed [ 781.680796][ T5981] Buffer I/O error on dev nbd63, logical block 0, async page read [ 781.694848][T12199] I/O error, dev nbd63, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 781.741676][T12199] Buffer I/O error on dev nbd63, logical block 0, async page read [ 781.749733][T12199] I/O error, dev nbd63, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 781.779990][T12199] Buffer I/O error on dev nbd63, logical block 0, async page read [ 781.791909][T12199] I/O error, dev nbd63, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 781.821413][T12199] Buffer I/O error on dev nbd63, logical block 0, async page read [ 781.874728][T12199] I/O error, dev nbd63, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 781.941760][T12199] Buffer I/O error on dev nbd63, logical block 0, async page read [ 781.949869][T12199] I/O error, dev nbd63, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 782.051675][T12199] Buffer I/O error on dev nbd63, logical block 0, async page read [ 782.108131][T12199] I/O error, dev nbd63, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 782.124203][T12364] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 782.143489][T12364] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 782.154136][T12364] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 782.169220][T12364] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 782.171737][T12199] Buffer I/O error on dev nbd63, logical block 0, async page read [ 782.197749][T12364] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 782.238525][T12199] I/O error, dev nbd63, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 782.248663][T12199] Buffer I/O error on dev nbd63, logical block 0, async page read [ 782.261841][T12199] ldm_validate_partition_table(): Disk read failed. [ 782.455997][T12199] I/O error, dev nbd63, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 782.501706][T12199] Buffer I/O error on dev nbd63, logical block 0, async page read [ 782.539531][T12199] I/O error, dev nbd63, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 782.628664][T12199] Buffer I/O error on dev nbd63, logical block 0, async page read [ 782.669530][T12199] Dev nbd63: unable to read RDB block 0 [ 782.707602][T12199] nbd63: unable to read partition table [ 782.756598][T12199] ldm_validate_partition_table(): Disk read failed. [ 782.795686][T12199] Dev nbd63: unable to read RDB block 0 [ 782.842515][T12199] nbd63: unable to read partition table [ 782.973662][T21011] FAULT_INJECTION: forcing a failure. [ 782.973662][T21011] name failslab, interval 1, probability 0, space 0, times 0 [ 782.986708][T21011] CPU: 0 UID: 0 PID: 21011 Comm: syz.1.2356 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 782.986753][T21011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 782.986772][T21011] Call Trace: [ 782.986783][T21011] [ 782.986795][T21011] dump_stack_lvl+0x16c/0x1f0 [ 782.986842][T21011] should_fail_ex+0x512/0x640 [ 782.986877][T21011] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 782.986911][T21011] should_failslab+0xc2/0x120 [ 782.986948][T21011] __kmalloc_cache_noprof+0x6a/0x3e0 [ 782.986979][T21011] ? tty_alloc_file+0x3f/0xa0 [ 782.987008][T21011] ? __pfx_ptmx_open+0x10/0x10 [ 782.987060][T21011] tty_alloc_file+0x3f/0xa0 [ 782.987101][T21011] ptmx_open+0x61/0x360 [ 782.987149][T21011] ? __pfx_ptmx_open+0x10/0x10 [ 782.987195][T21011] chrdev_open+0x231/0x6a0 [ 782.987234][T21011] ? __pfx_apparmor_file_open+0x10/0x10 [ 782.987289][T21011] ? __pfx_chrdev_open+0x10/0x10 [ 782.987330][T21011] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 782.987392][T21011] do_dentry_open+0x741/0x1c10 [ 782.987430][T21011] ? __pfx_chrdev_open+0x10/0x10 [ 782.987473][T21011] vfs_open+0x82/0x3f0 [ 782.987515][T21011] path_openat+0x1e5e/0x2d40 [ 782.987555][T21011] ? __pfx_path_openat+0x10/0x10 [ 782.987591][T21011] do_filp_open+0x20b/0x470 [ 782.987620][T21011] ? __pfx_do_filp_open+0x10/0x10 [ 782.987670][T21011] ? alloc_fd+0x471/0x7d0 [ 782.987704][T21011] do_sys_openat2+0x11b/0x1d0 [ 782.987741][T21011] ? __pfx_do_sys_openat2+0x10/0x10 [ 782.987792][T21011] __x64_sys_openat+0x174/0x210 [ 782.987831][T21011] ? __pfx___x64_sys_openat+0x10/0x10 [ 782.987873][T21011] ? rcu_is_watching+0x12/0xc0 [ 782.987909][T21011] do_syscall_64+0xcd/0x230 [ 782.987951][T21011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.987983][T21011] RIP: 0033:0x7fde25b8e169 [ 782.988031][T21011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 782.988059][T21011] RSP: 002b:00007fde2698b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 782.988084][T21011] RAX: ffffffffffffffda RBX: 00007fde25db5fa0 RCX: 00007fde25b8e169 [ 782.988111][T21011] RDX: 0000000000020540 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 782.988129][T21011] RBP: 00007fde25c10a68 R08: 0000000000000000 R09: 0000000000000000 [ 782.988147][T21011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 782.988164][T21011] R13: 0000000000000000 R14: 00007fde25db5fa0 R15: 00007ffc75b4f308 [ 782.988198][T21011] [ 784.251957][T12367] Bluetooth: hci5: command tx timeout [ 784.710327][T21136] Invalid ELF header magic: != ELF [ 785.312089][T21180] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 785.774877][T20992] chnl_net:caif_netlink_parms(): no params data found [ 786.327837][T12367] Bluetooth: hci5: command tx timeout [ 786.542292][T20992] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.549556][T20992] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.592298][T20992] bridge_slave_0: entered allmulticast mode [ 786.615452][T20992] bridge_slave_0: entered promiscuous mode [ 786.646148][T20992] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.666072][T20992] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.686128][T20992] bridge_slave_1: entered allmulticast mode [ 786.725841][T20992] bridge_slave_1: entered promiscuous mode [ 786.946856][T20992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 786.987607][T20992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 787.189312][T20992] team0: Port device team_slave_0 added [ 787.276123][T20992] team0: Port device team_slave_1 added [ 787.484427][T20992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 787.510398][T20992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 787.609397][T20992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 787.686849][T21374] : Can't lookup blockdev [ 787.694012][T20992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 787.726238][T20992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 787.795221][T20992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 788.294191][T20992] hsr_slave_0: entered promiscuous mode [ 788.300941][T20992] hsr_slave_1: entered promiscuous mode [ 788.337539][T21425] : Can't lookup blockdev [ 788.342093][T20992] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 788.354550][T21337] FAULT_INJECTION: forcing a failure. [ 788.354550][T21337] name fail_futex, interval 1, probability 0, space 0, times 0 [ 788.366651][T20992] Cannot create hsr debugfs directory [ 788.380152][T21337] CPU: 1 UID: 0 PID: 21337 Comm: syz.1.2363 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 788.380196][T21337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 788.380216][T21337] Call Trace: [ 788.380226][T21337] [ 788.380239][T21337] dump_stack_lvl+0x16c/0x1f0 [ 788.380290][T21337] should_fail_ex+0x512/0x640 [ 788.380335][T21337] get_futex_key+0x49e/0x1000 [ 788.380377][T21337] ? __pfx_get_futex_key+0x10/0x10 [ 788.380413][T21337] ? pick_eevdf+0x3be/0x5b0 [ 788.380452][T21337] ? update_curr_se+0x8b/0x270 [ 788.380497][T21337] ? update_curr+0x74/0x800 [ 788.380532][T21337] futex_wait_setup+0x78/0x290 [ 788.380587][T21337] __futex_wait+0x266/0x3c0 [ 788.380635][T21337] ? __pfx___futex_wait+0x10/0x10 [ 788.380680][T21337] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 788.380730][T21337] ? __pfx_futex_wake_mark+0x10/0x10 [ 788.380800][T21337] futex_wait+0xe8/0x380 [ 788.380846][T21337] ? __pfx_futex_wait+0x10/0x10 [ 788.380913][T21337] do_futex+0x229/0x350 [ 788.380953][T21337] ? __pfx_do_futex+0x10/0x10 [ 788.380990][T21337] ? sock_ioctl+0x3a9/0x6b0 [ 788.381030][T21337] __x64_sys_futex+0x1e0/0x4c0 [ 788.381071][T21337] ? __fget_files+0x20e/0x3c0 [ 788.381103][T21337] ? __pfx___x64_sys_futex+0x10/0x10 [ 788.381157][T21337] do_syscall_64+0xcd/0x230 [ 788.381207][T21337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.381240][T21337] RIP: 0033:0x7fde25b8e169 [ 788.381266][T21337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 788.381299][T21337] RSP: 002b:00007fde2698b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 788.381330][T21337] RAX: ffffffffffffffda RBX: 00007fde25db5fa8 RCX: 00007fde25b8e169 [ 788.381353][T21337] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fde25db5fa8 [ 788.381374][T21337] RBP: 00007fde25db5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 788.381395][T21337] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fde25db5fac [ 788.381415][T21337] R13: 0000000000000000 R14: 00007ffc75b4f220 R15: 00007ffc75b4f308 [ 788.381455][T21337] [ 788.590918][ C1] vkms_vblank_simulate: vblank timer overrun [ 788.681691][T12367] Bluetooth: hci5: command tx timeout [ 790.023055][T20992] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.047559][T21518] : Can't lookup blockdev [ 790.464805][T20992] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.721831][T12367] Bluetooth: hci5: command tx timeout [ 790.925180][T21544] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2370'. [ 791.119041][T20992] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.542855][T20992] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.039673][T20992] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 792.074405][T20992] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 792.120242][T20992] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 792.208481][T20992] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 792.938561][T20992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 793.046697][T20992] 8021q: adding VLAN 0 to HW filter on device team0 [ 793.133550][T19496] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.140708][T19496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 793.362430][T19496] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.369642][T19496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 794.124310][T20992] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 794.154954][T20992] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 794.994961][T20992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 795.266931][T21672] : Can't lookup blockdev [ 795.507417][T20992] veth0_vlan: entered promiscuous mode [ 795.670100][T20992] veth1_vlan: entered promiscuous mode [ 795.909471][T20992] veth0_macvtap: entered promiscuous mode [ 795.947260][T20992] veth1_macvtap: entered promiscuous mode [ 796.044999][T20992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.066407][T20992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.101647][T20992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.132933][T20992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.199581][T20992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.241741][T20992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.281734][T20992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.321816][T20992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.364094][T20992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 796.423050][T20992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.457903][T21693] blk_print_req_error: 24 callbacks suppressed [ 796.457928][T21693] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 796.471673][T20992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.521637][T20992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.562571][T20992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.583378][T21693] buffer_io_error: 23 callbacks suppressed [ 796.583403][T21693] Buffer I/O error on dev nbd11, logical block 0, async page read [ 796.601689][T20992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.633786][T20992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.681689][T20992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.692279][T21693] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 796.702317][T21693] Buffer I/O error on dev nbd11, logical block 0, async page read [ 796.710921][T21693] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 796.731640][T20992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.774905][T20992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 796.816370][T20992] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.861700][T20992] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.864869][T21693] Buffer I/O error on dev nbd11, logical block 0, async page read [ 796.901803][T20992] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.910552][T20992] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.915943][T21693] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 797.044473][T21693] Buffer I/O error on dev nbd11, logical block 0, async page read [ 797.141917][T21693] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 797.179817][T21693] Buffer I/O error on dev nbd11, logical block 0, async page read [ 797.212014][T21693] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 797.232012][T21693] Buffer I/O error on dev nbd11, logical block 0, async page read [ 797.266398][T21693] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 797.334634][T21693] Buffer I/O error on dev nbd11, logical block 0, async page read [ 797.362452][T21693] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 797.401700][T21693] Buffer I/O error on dev nbd11, logical block 0, async page read [ 797.421796][T21693] ldm_validate_partition_table(): Disk read failed. [ 797.447960][T21693] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 797.503075][T21693] Buffer I/O error on dev nbd11, logical block 0, async page read [ 797.511248][T21693] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 797.561765][T21693] Buffer I/O error on dev nbd11, logical block 0, async page read [ 797.578937][T19496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.596094][T21693] Dev nbd11: unable to read RDB block 0 [ 797.613939][T19496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.632073][T21693] nbd11: unable to read partition table [ 797.735472][T19496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.787175][T19496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.259596][T21731] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2390'. [ 799.892591][T12364] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 799.905585][T12364] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 799.931897][T12364] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 799.970466][T12364] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 799.982580][T12364] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 801.418173][T21785] chnl_net:caif_netlink_parms(): no params data found [ 801.668100][T21912] : Can't lookup blockdev [ 801.731005][T21935] : Can't lookup blockdev [ 802.083081][T12364] Bluetooth: hci2: command tx timeout [ 802.338782][T21785] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.366763][T21785] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.402897][T21785] bridge_slave_0: entered allmulticast mode [ 802.411232][T21785] bridge_slave_0: entered promiscuous mode [ 802.463175][T21785] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.470782][T21785] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.511825][T21785] bridge_slave_1: entered allmulticast mode [ 802.519784][T21785] bridge_slave_1: entered promiscuous mode [ 803.190693][T22009] : Can't lookup blockdev [ 803.301803][T21785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 803.376277][T21785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 803.433308][T22011] : Can't lookup blockdev [ 804.161795][T12364] Bluetooth: hci2: command tx timeout [ 804.191836][T21785] team0: Port device team_slave_0 added [ 804.213323][T21785] team0: Port device team_slave_1 added [ 804.790206][T21785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 804.836137][T21785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 804.862073][ C1] vkms_vblank_simulate: vblank timer overrun [ 804.931384][T21785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 804.992722][T21785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 804.999738][T21785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 805.025705][ C1] vkms_vblank_simulate: vblank timer overrun [ 805.129885][T21785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 805.694696][T21785] hsr_slave_0: entered promiscuous mode [ 805.701429][T21785] hsr_slave_1: entered promiscuous mode [ 805.769608][T21785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 805.786386][T21785] Cannot create hsr debugfs directory [ 805.831986][T22102] kAFS: Invalid Command on /proc/fs/afs/cells file [ 806.251632][T12364] Bluetooth: hci2: command tx timeout [ 807.736607][T21785] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.280622][T22186] : Can't lookup blockdev [ 808.307424][T21785] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.321787][T12364] Bluetooth: hci2: command tx timeout [ 808.543642][T21785] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.803500][T21785] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.407430][T21785] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 809.513986][T21785] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 809.698754][T21785] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 809.947451][T21785] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 810.585943][T22260] nbd64: detected capacity change from 0 to 68719476736 [ 810.622725][T22205] block nbd64: Send control failed (result -22) [ 810.629042][T22205] block nbd64: Request send failed, requeueing [ 810.681170][T12364] block nbd64: Receive control failed (result -32) [ 810.681262][ T44] block nbd64: Dead connection, failed to find a fallback [ 810.696344][ T44] block nbd64: shutting down sockets [ 810.701736][ T44] blk_print_req_error: 6 callbacks suppressed [ 810.701761][ T44] I/O error, dev nbd64, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 810.717181][ T44] buffer_io_error: 6 callbacks suppressed [ 810.717200][ T44] Buffer I/O error on dev nbd64, logical block 0, async page read [ 810.731996][T22205] I/O error, dev nbd64, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 810.851261][T22205] Buffer I/O error on dev nbd64, logical block 0, async page read [ 810.921977][T22205] I/O error, dev nbd64, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 810.964804][T22205] Buffer I/O error on dev nbd64, logical block 0, async page read [ 810.991824][T22205] I/O error, dev nbd64, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 811.000999][T22205] Buffer I/O error on dev nbd64, logical block 0, async page read [ 811.040291][T22205] I/O error, dev nbd64, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 811.085978][T22205] Buffer I/O error on dev nbd64, logical block 0, async page read [ 811.124846][T22205] I/O error, dev nbd64, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 811.184179][T22205] Buffer I/O error on dev nbd64, logical block 0, async page read [ 811.210402][T22205] I/O error, dev nbd64, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 811.230629][T22205] Buffer I/O error on dev nbd64, logical block 0, async page read [ 811.260217][T22205] I/O error, dev nbd64, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 811.306012][T22205] Buffer I/O error on dev nbd64, logical block 0, async page read [ 811.344338][T22205] ldm_validate_partition_table(): Disk read failed. [ 811.376286][T22205] I/O error, dev nbd64, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 811.401034][T22205] Buffer I/O error on dev nbd64, logical block 0, async page read [ 811.439755][T22205] I/O error, dev nbd64, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 811.461683][T22205] Buffer I/O error on dev nbd64, logical block 0, async page read [ 811.470002][T22205] Dev nbd64: unable to read RDB block 0 [ 811.512571][T22205] nbd64: unable to read partition table [ 811.594855][T22205] ldm_validate_partition_table(): Disk read failed. [ 811.626459][T22205] Dev nbd64: unable to read RDB block 0 [ 811.646887][T22205] nbd64: unable to read partition table [ 812.117727][T21785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 812.709773][T21785] 8021q: adding VLAN 0 to HW filter on device team0 [ 813.114449][T19502] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.121717][T19502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 813.188271][T19489] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.195489][T19489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 813.767800][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.774207][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.975771][T22485] : Can't lookup blockdev [ 815.092155][T22486] : Can't lookup blockdev [ 815.148007][T21785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 815.722743][T21785] veth0_vlan: entered promiscuous mode [ 815.769385][T21785] veth1_vlan: entered promiscuous mode [ 815.902757][T21785] veth0_macvtap: entered promiscuous mode [ 815.944654][T21785] veth1_macvtap: entered promiscuous mode [ 816.003581][T21785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 816.051690][T21785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.096255][T21785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 816.147262][T21785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.175708][T21785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 816.210888][T21785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.246341][T21785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 816.280350][T21785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.320932][T21785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 816.350508][T21785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.403690][T21785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 816.436253][T22498] block2mtd: parameter too long [ 816.577639][T21785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 816.921628][T21785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.931497][T21785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 816.955267][T22507] netlink: 'syz.2.2434': attribute type 1 has an invalid length. [ 816.978735][T21785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.001672][T21785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.021635][T21785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.031507][T21785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.042080][T21785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.051980][T21785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.062800][T21785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.074632][T21785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 817.133129][T21785] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.142782][T21785] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.151528][T21785] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.200534][T21785] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.458131][T19491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.507260][T19491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.594406][T21786] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.625759][T21786] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.391254][T22529] vivid-003: ================= START STATUS ================= [ 818.400562][T22529] vivid-003: Radio HW Seek Mode: Bounded [ 818.419234][T22529] vivid-003: Radio Programmable HW Seek: false [ 818.429030][T22529] vivid-003: RDS Rx I/O Mode: Block I/O [ 818.459173][T22529] vivid-003: Generate RBDS Instead of RDS: false [ 818.491885][T22529] vivid-003: RDS Reception: true [ 818.501725][T22529] vivid-003: RDS Program Type: 0 inactive [ 818.541890][T22529] vivid-003: RDS PS Name: inactive [ 818.566012][T22529] vivid-003: RDS Radio Text: inactive [ 818.601703][T22529] vivid-003: RDS Traffic Announcement: false inactive [ 818.618959][T22529] vivid-003: RDS Traffic Program: false inactive [ 818.661667][T22529] vivid-003: RDS Music: false inactive [ 818.667218][T22529] vivid-003: ================== END STATUS ================== [ 819.524480][T12367] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 819.537672][T12367] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 819.547176][T12367] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 819.562533][T12367] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 819.574557][T12367] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 820.259641][T22590] FAULT_INJECTION: forcing a failure. [ 820.259641][T22590] name failslab, interval 1, probability 0, space 0, times 0 [ 820.357131][T22590] CPU: 0 UID: 0 PID: 22590 Comm: syz.1.2443 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 820.357179][T22590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 820.357200][T22590] Call Trace: [ 820.357211][T22590] [ 820.357223][T22590] dump_stack_lvl+0x16c/0x1f0 [ 820.357277][T22590] should_fail_ex+0x512/0x640 [ 820.357316][T22590] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 820.357363][T22590] should_failslab+0xc2/0x120 [ 820.357408][T22590] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 820.357447][T22590] ? __proc_create+0xc3/0x8c0 [ 820.357485][T22590] ? __proc_create+0x2ce/0x8c0 [ 820.357530][T22590] __proc_create+0x2ce/0x8c0 [ 820.357570][T22590] ? __pfx___proc_create+0x10/0x10 [ 820.357616][T22590] ? _raw_write_unlock+0x28/0x50 [ 820.357658][T22590] ? proc_register+0x314/0x5f0 [ 820.357703][T22590] proc_create_reg+0x7d/0x180 [ 820.357775][T22590] ? __pfx_rt_acct_proc_show+0x10/0x10 [ 820.357831][T22590] proc_create_single_data+0x86/0x190 [ 820.357878][T22590] ? __pfx_proc_create_single_data+0x10/0x10 [ 820.357926][T22590] ? __pfx_nl_fib_input+0x10/0x10 [ 820.357986][T22590] ? __pfx_ip_rt_do_proc_init+0x10/0x10 [ 820.358039][T22590] ip_rt_do_proc_init+0xf4/0x1b0 [ 820.358091][T22590] ops_init+0x1df/0x5f0 [ 820.358146][T22590] setup_net+0x21e/0x850 [ 820.358200][T22590] ? __pfx_setup_net+0x10/0x10 [ 820.358246][T22590] ? lockdep_init_map_type+0x5c/0x280 [ 820.358295][T22590] ? __pfx_down_read_killable+0x10/0x10 [ 820.358333][T22590] ? debug_mutex_init+0x37/0x70 [ 820.358372][T22590] copy_net_ns+0x2a6/0x5f0 [ 820.358428][T22590] create_new_namespaces+0x3ea/0xad0 [ 820.358480][T22590] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 820.358526][T22590] ksys_unshare+0x45b/0xa40 [ 820.358578][T22590] ? __pfx_ksys_unshare+0x10/0x10 [ 820.358624][T22590] ? xfd_validate_state+0x5d/0x180 [ 820.358662][T22590] ? rcu_is_watching+0x12/0xc0 [ 820.358715][T22590] __x64_sys_unshare+0x31/0x40 [ 820.358766][T22590] do_syscall_64+0xcd/0x230 [ 820.358821][T22590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.358855][T22590] RIP: 0033:0x7f18ef38e169 [ 820.358882][T22590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 820.358918][T22590] RSP: 002b:00007f18f017d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 820.358951][T22590] RAX: ffffffffffffffda RBX: 00007f18ef5b5fa0 RCX: 00007f18ef38e169 [ 820.358975][T22590] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 820.358996][T22590] RBP: 00007f18ef410a68 R08: 0000000000000000 R09: 0000000000000000 [ 820.359018][T22590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 820.359038][T22590] R13: 0000000000000000 R14: 00007f18ef5b5fa0 R15: 00007ffdcee59e78 [ 820.359082][T22590] [ 820.765555][T22546] chnl_net:caif_netlink_parms(): no params data found [ 821.575174][T22727] : Can't lookup blockdev [ 821.685640][T12367] Bluetooth: hci6: command tx timeout [ 821.943939][T22546] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.961783][T22546] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.969053][T22546] bridge_slave_0: entered allmulticast mode [ 821.978119][T22546] bridge_slave_0: entered promiscuous mode [ 822.036245][T22546] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.148684][T22546] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.171854][T22546] bridge_slave_1: entered allmulticast mode [ 822.179728][T22546] bridge_slave_1: entered promiscuous mode [ 822.337650][T22744] : Can't lookup blockdev [ 822.517558][T22546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 822.555779][T22771] netlink: 334 bytes leftover after parsing attributes in process `syz.0.2448'. [ 822.584750][T22546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 822.594648][T22771] device-mapper: ioctl: only supply one of name or uuid, cmd(11) [ 822.870286][T22546] team0: Port device team_slave_0 added [ 822.924909][T22546] team0: Port device team_slave_1 added [ 823.348558][T22802] Invalid ELF header magic: != ELF [ 823.381528][T22546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 823.400367][T22546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 823.426309][ C1] vkms_vblank_simulate: vblank timer overrun [ 823.688852][T22546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 823.761937][T12367] Bluetooth: hci6: command tx timeout [ 823.782918][T22546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 823.790572][T22546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 823.832648][T22546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 824.033709][T22837] nbd65: detected capacity change from 0 to 68719476736 [ 824.076432][T22205] block nbd65: Send control failed (result -22) [ 824.112798][T22205] block nbd65: Request send failed, requeueing [ 824.144826][ T5981] block nbd65: Dead connection, failed to find a fallback [ 824.153080][ T5981] block nbd65: shutting down sockets [ 824.158437][ T5981] blk_print_req_error: 24 callbacks suppressed [ 824.158458][ T5981] I/O error, dev nbd65, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 824.181679][ T5981] buffer_io_error: 23 callbacks suppressed [ 824.181699][ T5981] Buffer I/O error on dev nbd65, logical block 0, async page read [ 824.196336][T22205] I/O error, dev nbd65, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 824.211640][T22205] Buffer I/O error on dev nbd65, logical block 0, async page read [ 824.219732][T22205] I/O error, dev nbd65, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 824.222035][T22802] FAULT_INJECTION: forcing a failure. [ 824.222035][T22802] name failslab, interval 1, probability 0, space 0, times 0 [ 824.247859][T22205] Buffer I/O error on dev nbd65, logical block 0, async page read [ 824.262246][T22205] I/O error, dev nbd65, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 824.273155][T22205] Buffer I/O error on dev nbd65, logical block 0, async page read [ 824.281747][T22205] I/O error, dev nbd65, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 824.291112][T22205] Buffer I/O error on dev nbd65, logical block 0, async page read [ 824.300435][T22205] I/O error, dev nbd65, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 824.322117][T22205] Buffer I/O error on dev nbd65, logical block 0, async page read [ 824.330244][T22205] I/O error, dev nbd65, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 824.339513][T22205] Buffer I/O error on dev nbd65, logical block 0, async page read [ 824.348063][T22802] CPU: 0 UID: 0 PID: 22802 Comm: syz.0.2450 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 824.348115][T22802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 824.348136][T22802] Call Trace: [ 824.348148][T22802] [ 824.348161][T22802] dump_stack_lvl+0x16c/0x1f0 [ 824.348216][T22802] should_fail_ex+0x512/0x640 [ 824.348257][T22802] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 824.348298][T22802] should_failslab+0xc2/0x120 [ 824.348344][T22802] __kmalloc_cache_noprof+0x6a/0x3e0 [ 824.348381][T22802] ? getname_flags.part.0+0x292/0x550 [ 824.348436][T22802] getname_flags.part.0+0x292/0x550 [ 824.348490][T22802] getname_flags+0x93/0xf0 [ 824.348522][T22802] do_sys_openat2+0xb8/0x1d0 [ 824.348578][T22802] ? __pfx_do_sys_openat2+0x10/0x10 [ 824.348645][T22802] __x64_sys_open+0x153/0x1e0 [ 824.348692][T22802] ? __pfx___x64_sys_open+0x10/0x10 [ 824.348740][T22205] I/O error, dev nbd65, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 824.348748][T22802] ? rcu_is_watching+0x12/0xc0 [ 824.348788][T22802] do_syscall_64+0xcd/0x230 [ 824.348843][T22802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.348881][T22802] RIP: 0033:0x7fdf3458e169 [ 824.348910][T22802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 824.348946][T22802] RSP: 002b:00007fdf353fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 824.348981][T22802] RAX: ffffffffffffffda RBX: 00007fdf347b5fa0 RCX: 00007fdf3458e169 [ 824.349006][T22802] RDX: 00000000000000d1 RSI: 0000000000103040 RDI: 0000200000000380 [ 824.349030][T22802] RBP: 00007fdf34610a68 R08: 0000000000000000 R09: 0000000000000000 [ 824.349053][T22802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 824.349076][T22802] R13: 0000000000000000 R14: 00007fdf347b5fa0 R15: 00007fff8b1c0088 [ 824.349121][T22802] [ 824.676002][T22546] hsr_slave_0: entered promiscuous mode [ 824.693112][T22546] hsr_slave_1: entered promiscuous mode [ 824.721880][T22205] Buffer I/O error on dev nbd65, logical block 0, async page read [ 824.732581][T22546] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 824.741757][T22205] ldm_validate_partition_table(): Disk read failed. [ 824.741805][T22546] Cannot create hsr debugfs directory [ 824.762036][T22205] I/O error, dev nbd65, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 824.796928][T22205] Buffer I/O error on dev nbd65, logical block 0, async page read [ 824.857817][T22205] I/O error, dev nbd65, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 824.911647][T22205] Buffer I/O error on dev nbd65, logical block 0, async page read [ 824.920866][T22205] Dev nbd65: unable to read RDB block 0 [ 824.972691][T22205] nbd65: unable to read partition table [ 825.007580][T22205] ldm_validate_partition_table(): Disk read failed. [ 825.052258][T22205] Dev nbd65: unable to read RDB block 0 [ 825.058556][T22205] nbd65: unable to read partition table [ 825.286305][T22905] program syz.1.2454 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 825.286552][T22905] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 825.841865][T12367] Bluetooth: hci6: command tx timeout [ 826.594995][T22546] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.146792][T22546] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.603122][T22546] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.637338][T22978] Invalid ELF header magic: != ELF [ 827.941648][T12367] Bluetooth: hci6: command tx timeout [ 827.967461][T22546] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.995645][T22546] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 829.114349][T22546] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 829.235997][T22546] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 830.410829][T22546] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 831.086877][T22546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 831.245479][T22546] 8021q: adding VLAN 0 to HW filter on device team0 [ 831.307368][T21786] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.314596][T21786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 831.397698][T19491] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.404932][T19491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 832.369972][T22546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 832.565369][T22546] veth0_vlan: entered promiscuous mode [ 832.624457][T22546] veth1_vlan: entered promiscuous mode [ 832.794957][T22546] veth0_macvtap: entered promiscuous mode [ 832.842942][T22546] veth1_macvtap: entered promiscuous mode [ 832.934331][T22546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 832.991617][T22546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.001475][T22546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 833.098561][T22546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.152139][T22546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 833.175710][T22546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.210372][T22546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 833.251731][T22546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.284978][T22546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 833.321638][T22546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.372404][T22546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 833.411704][T22546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.443561][T22546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 833.486367][T22546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 833.551042][T22546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.601617][T22546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 833.657317][T22546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.742400][T22546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 833.789442][T23064] : Can't lookup blockdev [ 833.831825][T22546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.843149][T22546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 833.853684][T22546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.863576][T22546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 833.951786][T22546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 834.021825][T22546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 834.163629][T22546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 834.176006][T22546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 834.357408][T22546] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.380975][T22546] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.390041][T22546] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.399661][T22546] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.081678][T23079] blk_print_req_error: 24 callbacks suppressed [ 835.081703][T23079] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 835.188984][T23079] buffer_io_error: 23 callbacks suppressed [ 835.189007][T23079] Buffer I/O error on dev nbd0, logical block 0, async page read [ 835.267969][T23079] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 835.282217][T23079] Buffer I/O error on dev nbd0, logical block 0, async page read [ 835.299000][T19489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.310682][T19489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 835.409108][T23079] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 835.551929][T23079] Buffer I/O error on dev nbd0, logical block 0, async page read [ 835.626418][T23079] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 835.734537][T19489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.764633][T23079] Buffer I/O error on dev nbd0, logical block 0, async page read [ 835.781657][T19489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 835.951934][T23079] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 836.075047][T23079] Buffer I/O error on dev nbd0, logical block 0, async page read [ 836.119611][T23079] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 836.201850][T23079] Buffer I/O error on dev nbd0, logical block 0, async page read [ 836.209847][T23079] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 836.322380][T23079] Buffer I/O error on dev nbd0, logical block 0, async page read [ 836.330957][T23079] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 836.441428][T23079] Buffer I/O error on dev nbd0, logical block 0, async page read [ 836.511797][T23079] ldm_validate_partition_table(): Disk read failed. [ 836.551816][T23079] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 836.851306][T23079] Buffer I/O error on dev nbd0, logical block 0, async page read [ 837.019974][T23079] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 837.279853][T23079] Buffer I/O error on dev nbd0, logical block 0, async page read [ 837.312116][T23079] Dev nbd0: unable to read RDB block 0 [ 837.371078][T23079] nbd0: unable to read partition table [ 837.715626][T23150] nbd: must specify a size in bytes for the device [ 838.867763][T23185] : Can't lookup blockdev [ 840.021247][T23216] : Can't lookup blockdev [ 842.765388][T23250] : Can't lookup blockdev [ 844.313856][T23330] : Can't lookup blockdev [ 845.379259][T23355] : Can't lookup blockdev [ 846.006111][T23295] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 846.008515][T12367] Bluetooth: hci3: command 0x0c1a tx timeout [ 846.126797][T23295] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 846.249596][T23362] : Can't lookup blockdev [ 846.267338][T23295] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 846.305973][T23295] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 846.531700][T23358] Bluetooth: hci4: unexpected event 0x3d length: 726 > 14 [ 846.602173][T23295] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 846.774464][T23295] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 846.782722][T23295] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 847.027005][T23370] nbd66: detected capacity change from 0 to 68719476736 [ 847.040104][T23071] block nbd66: Send control failed (result -22) [ 847.069076][T23071] block nbd66: Request send failed, requeueing [ 847.090170][T23358] block nbd66: Receive control failed (result -32) [ 847.097235][T23295] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 847.099157][ T5981] block nbd66: Dead connection, failed to find a fallback [ 847.112452][ T5981] block nbd66: shutting down sockets [ 847.118839][ T5981] blk_print_req_error: 6 callbacks suppressed [ 847.118862][ T5981] I/O error, dev nbd66, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 847.134848][ T5981] buffer_io_error: 6 callbacks suppressed [ 847.134867][ T5981] Buffer I/O error on dev nbd66, logical block 0, async page read [ 847.149548][T23071] I/O error, dev nbd66, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 847.159405][T23071] Buffer I/O error on dev nbd66, logical block 0, async page read [ 847.167551][T23071] I/O error, dev nbd66, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 847.176895][T23071] Buffer I/O error on dev nbd66, logical block 0, async page read [ 847.184996][T23071] I/O error, dev nbd66, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 847.194763][T23071] Buffer I/O error on dev nbd66, logical block 0, async page read [ 847.203400][T23071] I/O error, dev nbd66, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 847.213843][T23071] Buffer I/O error on dev nbd66, logical block 0, async page read [ 847.222413][T23071] I/O error, dev nbd66, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 847.231764][T23071] Buffer I/O error on dev nbd66, logical block 0, async page read [ 847.240149][T23071] I/O error, dev nbd66, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 847.250128][T23071] Buffer I/O error on dev nbd66, logical block 0, async page read [ 847.258433][T23071] I/O error, dev nbd66, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 847.271543][T23071] Buffer I/O error on dev nbd66, logical block 0, async page read [ 847.280065][T23071] ldm_validate_partition_table(): Disk read failed. [ 847.287242][T23071] I/O error, dev nbd66, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 847.312042][T23071] Buffer I/O error on dev nbd66, logical block 0, async page read [ 847.354808][T23071] I/O error, dev nbd66, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 847.486491][T23295] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 847.492670][T23295] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 847.494604][T23071] Buffer I/O error on dev nbd66, logical block 0, async page read [ 847.570446][T23383] : Can't lookup blockdev [ 847.908242][T23295] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 848.091903][T23358] Bluetooth: hci4: command 0x0c1a tx timeout [ 848.105782][T23071] Dev nbd66: unable to read RDB block 0 [ 848.112541][T23071] nbd66: unable to read partition table [ 848.128526][T23071] ldm_validate_partition_table(): Disk read failed. [ 848.147359][T23071] Dev nbd66: unable to read RDB block 0 [ 848.154062][T23071] nbd66: unable to read partition table [ 848.173033][T23358] Bluetooth: hci5: command 0x0c1a tx timeout [ 848.307457][T23390] : Can't lookup blockdev [ 848.807213][T23358] Bluetooth: hci2: command 0x0c1a tx timeout [ 849.305142][T23415] netlink: 346 bytes leftover after parsing attributes in process `syz.4.2494'. [ 849.527504][T23358] Bluetooth: hci6: command 0x0c1a tx timeout [ 850.253705][T23358] Bluetooth: hci5: command 0x0c1a tx timeout [ 850.609011][T23435] : Can't lookup blockdev [ 850.888956][T23358] Bluetooth: hci2: command 0x0c1a tx timeout [ 851.608497][T23358] Bluetooth: hci6: command 0x0c1a tx timeout [ 851.653562][T23442] : Can't lookup blockdev [ 852.333441][T23358] Bluetooth: hci5: command 0x0c1a tx timeout [ 852.820334][T23455] nbd67: detected capacity change from 0 to 68719476736 [ 852.869808][T23071] block nbd67: Send control failed (result -22) [ 852.876106][T23071] block nbd67: Request send failed, requeueing [ 852.939545][ T5981] block nbd67: Dead connection, failed to find a fallback [ 852.947127][ T5981] block nbd67: shutting down sockets [ 852.953547][ T5981] blk_print_req_error: 24 callbacks suppressed [ 852.953567][ T5981] I/O error, dev nbd67, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 852.969290][T23358] Bluetooth: hci2: command 0x0c1a tx timeout [ 852.975859][ T5981] buffer_io_error: 23 callbacks suppressed [ 852.975878][ T5981] Buffer I/O error on dev nbd67, logical block 0, async page read [ 853.009189][T23071] I/O error, dev nbd67, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 853.096692][T23071] Buffer I/O error on dev nbd67, logical block 0, async page read [ 853.167653][T23071] I/O error, dev nbd67, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 853.217362][T23071] Buffer I/O error on dev nbd67, logical block 0, async page read [ 853.249436][T23071] I/O error, dev nbd67, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 853.289358][T23071] Buffer I/O error on dev nbd67, logical block 0, async page read [ 853.329693][T23071] I/O error, dev nbd67, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 853.369346][T23071] Buffer I/O error on dev nbd67, logical block 0, async page read [ 853.377420][T23071] I/O error, dev nbd67, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 853.450874][T23071] Buffer I/O error on dev nbd67, logical block 0, async page read [ 853.489630][T23071] I/O error, dev nbd67, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 853.520925][T23071] Buffer I/O error on dev nbd67, logical block 0, async page read [ 853.559671][T23071] I/O error, dev nbd67, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 853.619457][T23071] Buffer I/O error on dev nbd67, logical block 0, async page read [ 853.627433][T23071] ldm_validate_partition_table(): Disk read failed. [ 853.679364][T23071] I/O error, dev nbd67, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 853.691070][T23358] Bluetooth: hci6: command 0x0c1a tx timeout [ 853.740335][T23071] Buffer I/O error on dev nbd67, logical block 0, async page read [ 853.785816][T23071] I/O error, dev nbd67, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 853.839560][T23071] Buffer I/O error on dev nbd67, logical block 0, async page read [ 853.861624][T23071] Dev nbd67: unable to read RDB block 0 [ 853.868328][T23071] nbd67: unable to read partition table [ 853.951966][T23071] ldm_validate_partition_table(): Disk read failed. [ 854.002395][T23071] Dev nbd67: unable to read RDB block 0 [ 854.020104][T23071] nbd67: unable to read partition table [ 854.621693][T23552] kernel read not supported for file /set_event_notrace_pid (pid: 23552 comm: syz.2.2509) [ 854.710651][ T30] audit: type=1800 audit(4294968356.411:60): pid=23552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2509" name="set_event_notrace_pid" dev="tracefs" ino=1055 res=0 errno=0 [ 855.807853][T23573] : Can't lookup blockdev [ 856.807902][T23605] Line length is too long: Should be less than 4094 [ 856.873892][T23566] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2510'. [ 857.002398][T23594] could not allocate digest TFM handle [ 857.128320][T23610] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2512'. [ 858.326305][T23682] nbd68: detected capacity change from 0 to 68719476736 [ 858.365433][T23071] block nbd68: Send control failed (result -22) [ 858.391788][T23071] block nbd68: Request send failed, requeueing [ 858.411969][T23358] block nbd68: Receive control failed (result -32) [ 858.420527][ T44] block nbd68: Dead connection, failed to find a fallback [ 858.430593][ T44] block nbd68: shutting down sockets [ 858.436225][ T44] blk_print_req_error: 24 callbacks suppressed [ 858.436247][ T44] I/O error, dev nbd68, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 858.451974][ T44] buffer_io_error: 23 callbacks suppressed [ 858.451991][ T44] Buffer I/O error on dev nbd68, logical block 0, async page read [ 858.467243][T23071] I/O error, dev nbd68, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 858.490713][T23071] Buffer I/O error on dev nbd68, logical block 0, async page read [ 858.516633][T23071] I/O error, dev nbd68, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 858.556888][T23071] Buffer I/O error on dev nbd68, logical block 0, async page read [ 858.622302][T23071] I/O error, dev nbd68, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 858.647135][T23071] Buffer I/O error on dev nbd68, logical block 0, async page read [ 858.675198][T23071] I/O error, dev nbd68, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 858.708315][T23071] Buffer I/O error on dev nbd68, logical block 0, async page read [ 858.734241][T23071] I/O error, dev nbd68, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 858.770486][T23071] Buffer I/O error on dev nbd68, logical block 0, async page read [ 858.801620][T23071] I/O error, dev nbd68, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 858.834344][T23071] Buffer I/O error on dev nbd68, logical block 0, async page read [ 858.855506][T23071] I/O error, dev nbd68, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 858.913057][T23071] Buffer I/O error on dev nbd68, logical block 0, async page read [ 858.948143][T23071] ldm_validate_partition_table(): Disk read failed. [ 858.972980][T23071] I/O error, dev nbd68, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 858.999635][T23071] Buffer I/O error on dev nbd68, logical block 0, async page read [ 859.044874][T23071] I/O error, dev nbd68, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 859.092220][T23071] Buffer I/O error on dev nbd68, logical block 0, async page read [ 859.101973][T23071] Dev nbd68: unable to read RDB block 0 [ 859.139803][T23071] nbd68: unable to read partition table [ 859.142983][T23754] [U]  [ 859.148309][T23754] [U] [ 859.151065][T23754] [U] [ 859.153835][T23754] [U] [ 859.187350][T23071] ldm_validate_partition_table(): Disk read failed. [ 859.211975][T23754] [U] [ 859.214745][T23754] [U] [ 859.217496][T23754] [U] [ 859.220234][T23754] [U] [ 859.222103][T23071] Dev nbd68: unable to read RDB block 0 [ 859.262736][T23071] nbd68: unable to read partition table [ 859.288162][T23755] [U] [ 862.703188][T23856] FAULT_INJECTION: forcing a failure. [ 862.703188][T23856] name failslab, interval 1, probability 0, space 0, times 0 [ 862.752196][T23856] CPU: 0 UID: 0 PID: 23856 Comm: syz.1.2528 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 862.752251][T23856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 862.752272][T23856] Call Trace: [ 862.752284][T23856] [ 862.752297][T23856] dump_stack_lvl+0x16c/0x1f0 [ 862.752351][T23856] should_fail_ex+0x512/0x640 [ 862.752388][T23856] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 862.752432][T23856] should_failslab+0xc2/0x120 [ 862.752476][T23856] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 862.752515][T23856] ? __proc_create+0xc3/0x8c0 [ 862.752552][T23856] ? __proc_create+0x2ce/0x8c0 [ 862.752597][T23856] __proc_create+0x2ce/0x8c0 [ 862.752637][T23856] ? __pfx___proc_create+0x10/0x10 [ 862.752683][T23856] ? __pfx_netdev_run_todo+0x10/0x10 [ 862.752729][T23856] ? __pfx___mutex_lock+0x10/0x10 [ 862.752782][T23856] proc_create_reg+0x7d/0x180 [ 862.752823][T23856] ? __pfx_psched_show+0x10/0x10 [ 862.752872][T23856] proc_create_single_data+0x86/0x190 [ 862.752924][T23856] ? __pfx_proc_create_single_data+0x10/0x10 [ 862.752963][T23856] ? __pfx_netdev_debug_event+0x10/0x10 [ 862.753010][T23856] ? __pfx_psched_net_init+0x10/0x10 [ 862.753057][T23856] psched_net_init+0x4a/0x70 [ 862.753109][T23856] ops_init+0x1df/0x5f0 [ 862.753156][T23856] setup_net+0x21e/0x850 [ 862.753204][T23856] ? __pfx_setup_net+0x10/0x10 [ 862.753245][T23856] ? lockdep_init_map_type+0x5c/0x280 [ 862.753290][T23856] ? __pfx_down_read_killable+0x10/0x10 [ 862.753323][T23856] ? debug_mutex_init+0x37/0x70 [ 862.753359][T23856] copy_net_ns+0x2a6/0x5f0 [ 862.753410][T23856] create_new_namespaces+0x3ea/0xad0 [ 862.753456][T23856] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 862.753497][T23856] ksys_unshare+0x45b/0xa40 [ 862.753543][T23856] ? __pfx_ksys_unshare+0x10/0x10 [ 862.753585][T23856] ? xfd_validate_state+0x5d/0x180 [ 862.753619][T23856] ? rcu_is_watching+0x12/0xc0 [ 862.753659][T23856] __x64_sys_unshare+0x31/0x40 [ 862.753702][T23856] do_syscall_64+0xcd/0x230 [ 862.753751][T23856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.753782][T23856] RIP: 0033:0x7f18ef38e169 [ 862.753806][T23856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 862.753838][T23856] RSP: 002b:00007f18f017d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 862.753870][T23856] RAX: ffffffffffffffda RBX: 00007f18ef5b5fa0 RCX: 00007f18ef38e169 [ 862.753890][T23856] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 862.753909][T23856] RBP: 00007f18ef410a68 R08: 0000000000000000 R09: 0000000000000000 [ 862.753927][T23856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 862.753945][T23856] R13: 0000000000000000 R14: 00007f18ef5b5fa0 R15: 00007ffdcee59e78 [ 862.753983][T23856] [ 863.521938][T23856] Invalid ELF header magic: != ELF [ 865.010679][T23913] : Can't lookup blockdev [ 865.562430][T23916] CIFS mount error: No usable UNC path provided in device string! [ 865.562430][T23916] [ 865.562459][T23916] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 866.537768][T23905] tty tty12: ldisc open failed (-12), clearing slot 11 [ 867.464474][T23976] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2543'. [ 867.544171][T23978] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2543'. [ 867.560100][T23978] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2543'. [ 867.597387][T23978] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2543'. [ 867.631950][T23978] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2543'. [ 867.667459][T23976] netlink: 294 bytes leftover after parsing attributes in process `syz.1.2543'. [ 868.481471][T24020] : Can't lookup blockdev [ 869.107572][T24039] : Can't lookup blockdev [ 869.700396][T24054] netlink: zone id is out of range [ 869.725751][T24054] netlink: get zone limit has 4 unknown bytes [ 872.234892][T24068] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 872.282482][T24162] : Can't lookup blockdev [ 873.082327][T24181] Invalid ELF header magic: != ELF [ 873.430753][T24189] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2559'. [ 873.688777][T24188] ima: policy update failed [ 873.718404][ T30] audit: type=1802 audit(4294968375.402:61): pid=24188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2559" res=0 errno=0 [ 875.021320][T24232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2563'. [ 875.231562][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.237946][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.944485][T24250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2565'. [ 878.062053][T24279] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2567'. [ 878.120729][T24281] input: jJǸ-9%vlQ J8fi as /devices/virtual/input/input18 [ 878.502367][T24279] veth0_macvtap: left promiscuous mode [ 879.617860][T24290] nbd: couldn't find device at index 33904 [ 880.098960][T24368] : Can't lookup blockdev [ 880.816848][T24399] FAULT_INJECTION: forcing a failure. [ 880.816848][T24399] name fail_futex, interval 1, probability 0, space 0, times 0 [ 880.879180][T24399] CPU: 0 UID: 0 PID: 24399 Comm: syz.1.2575 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 880.879232][T24399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 880.879267][T24399] Call Trace: [ 880.879278][T24399] [ 880.879291][T24399] dump_stack_lvl+0x16c/0x1f0 [ 880.879346][T24399] should_fail_ex+0x512/0x640 [ 880.879392][T24399] get_futex_key+0x49e/0x1000 [ 880.879436][T24399] ? __pfx_get_futex_key+0x10/0x10 [ 880.879496][T24399] futex_wake+0xe7/0x4e0 [ 880.879546][T24399] ? __pfx_futex_wake+0x10/0x10 [ 880.879596][T24399] ? kmem_cache_free+0x2d4/0x4d0 [ 880.879633][T24399] ? fd_install+0x225/0x750 [ 880.879673][T24399] ? putname+0x154/0x1a0 [ 880.879717][T24399] do_futex+0x1e3/0x350 [ 880.879754][T24399] ? __pfx_do_futex+0x10/0x10 [ 880.879800][T24399] __x64_sys_futex+0x1e0/0x4c0 [ 880.879861][T24399] ? __pfx___x64_sys_futex+0x10/0x10 [ 880.879903][T24399] ? rcu_is_watching+0x12/0xc0 [ 880.879950][T24399] do_syscall_64+0xcd/0x230 [ 880.880001][T24399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.880035][T24399] RIP: 0033:0x7f18ef38e169 [ 880.880061][T24399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 880.880093][T24399] RSP: 002b:00007f18f013b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 880.880125][T24399] RAX: ffffffffffffffda RBX: 00007f18ef5b6168 RCX: 00007f18ef38e169 [ 880.880148][T24399] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f18ef5b616c [ 880.880170][T24399] RBP: 00007f18ef5b6160 R08: 00007f18f017e000 R09: 0000000000000000 [ 880.880192][T24399] R10: 0000000000000008 R11: 0000000000000246 R12: 00007f18ef5b616c [ 880.880212][T24399] R13: 0000000000000000 R14: 00007ffdcee59d90 R15: 00007ffdcee59e78 [ 880.880254][T24399] [ 882.501657][T24430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2578'. [ 884.749570][T24469] ptrace attach of "./syz-executor exec"[22546] was attempted by "./syz-executor exec"[24469] [ 885.197504][T24508] could not allocate digest TFM handle [ 886.729845][T24588] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2586'. [ 886.813968][T24591] input: jJǸ-9%vlQ J8fi as /devices/virtual/input/input19 [ 887.064744][T24588] veth0_macvtap: left promiscuous mode [ 887.202657][T24612] : Can't lookup blockdev [ 887.960857][T24643] : Can't lookup blockdev [ 890.785625][T24678] CIFS mount error: No usable UNC path provided in device string! [ 890.785625][T24678] [ 890.808281][T24678] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 891.578994][T24743] : Can't lookup blockdev [ 893.415052][T24775] : Can't lookup blockdev [ 893.592194][T24777] nbd69: detected capacity change from 0 to 68719476736 [ 893.641370][T23071] block nbd69: Send control failed (result -22) [ 893.647762][T23071] block nbd69: Request send failed, requeueing [ 893.668262][T17786] block nbd69: Dead connection, failed to find a fallback [ 893.677713][T17786] block nbd69: shutting down sockets [ 893.683517][T17786] blk_print_req_error: 24 callbacks suppressed [ 893.683536][T17786] I/O error, dev nbd69, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 893.699402][T17786] buffer_io_error: 23 callbacks suppressed [ 893.699422][T17786] Buffer I/O error on dev nbd69, logical block 0, async page read [ 893.730480][T23071] I/O error, dev nbd69, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 893.782248][T23071] Buffer I/O error on dev nbd69, logical block 0, async page read [ 893.793359][T23071] I/O error, dev nbd69, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 893.802792][T23071] Buffer I/O error on dev nbd69, logical block 0, async page read [ 893.811391][T23071] I/O error, dev nbd69, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 893.821552][T23071] Buffer I/O error on dev nbd69, logical block 0, async page read [ 893.829820][T23071] I/O error, dev nbd69, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 893.839055][T23071] Buffer I/O error on dev nbd69, logical block 0, async page read [ 893.847591][T23071] I/O error, dev nbd69, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 893.859222][T23071] Buffer I/O error on dev nbd69, logical block 0, async page read [ 893.873770][T23071] I/O error, dev nbd69, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 893.892546][T23071] Buffer I/O error on dev nbd69, logical block 0, async page read [ 893.916321][T23071] I/O error, dev nbd69, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 893.930683][T23071] Buffer I/O error on dev nbd69, logical block 0, async page read [ 893.939000][T23071] ldm_validate_partition_table(): Disk read failed. [ 893.946562][T23071] I/O error, dev nbd69, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 893.956853][T23071] Buffer I/O error on dev nbd69, logical block 0, async page read [ 894.018929][T23071] I/O error, dev nbd69, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 894.033495][T23071] Buffer I/O error on dev nbd69, logical block 0, async page read [ 894.052733][T23071] Dev nbd69: unable to read RDB block 0 [ 894.059123][T23071] nbd69: unable to read partition table [ 894.099468][T23071] ldm_validate_partition_table(): Disk read failed. [ 894.127218][T23071] Dev nbd69: unable to read RDB block 0 [ 894.155489][T23071] nbd69: unable to read partition table [ 894.629930][T24805] nbd70: detected capacity change from 0 to 68719476736 [ 894.649764][T23071] block nbd70: Send control failed (result -22) [ 894.679256][T23071] block nbd70: Request send failed, requeueing [ 894.703920][T24812] ldm_validate_partition_table(): Disk read failed. [ 894.720230][ T5981] block nbd70: Dead connection, failed to find a fallback [ 894.727791][ T5981] block nbd70: shutting down sockets [ 894.735054][T23071] ldm_validate_partition_table(): Disk read failed. [ 894.749787][T23071] Dev nbd70: unable to read RDB block 0 [ 894.773064][T23071] nbd70: unable to read partition table [ 894.777421][T23071] ldm_validate_partition_table(): Disk read failed. [ 894.777966][T23071] Dev nbd70: unable to read RDB block 0 [ 894.778650][T23071] nbd70: unable to read partition table [ 894.822181][T24812] Dev nbd2: unable to read RDB block 0 [ 894.822899][T24812] nbd2: unable to read partition table [ 897.130672][T24906] random: crng reseeded on system resumption [ 897.691689][T24937] nbd71: detected capacity change from 0 to 68719476736 [ 897.770591][T23071] block nbd71: Send control failed (result -22) [ 897.825796][T24808] kexec: Could not allocate control_code_buffer [ 897.832494][T23071] block nbd71: Request send failed, requeueing [ 897.870107][T23358] block nbd71: Receive control failed (result -32) [ 897.884112][ T5981] block nbd71: Dead connection, failed to find a fallback [ 897.892364][ T5981] block nbd71: shutting down sockets [ 897.899432][T23071] ldm_validate_partition_table(): Disk read failed. [ 897.914459][T23071] Dev nbd71: unable to read RDB block 0 [ 897.922207][T23071] nbd71: unable to read partition table [ 897.941424][T23071] ldm_validate_partition_table(): Disk read failed. [ 897.949679][T23071] Dev nbd71: unable to read RDB block 0 [ 897.957944][T23071] nbd71: unable to read partition table [ 899.122813][T24990] netlink: 'syz.4.2620': attribute type 1 has an invalid length. [ 899.219482][T24990] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2620'. [ 899.311221][T24990] netlink: 'syz.4.2620': attribute type 1 has an invalid length. [ 899.544828][T24965] CIFS mount error: No usable UNC path provided in device string! [ 899.544828][T24965] [ 899.582507][T24965] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 902.584576][T25069] nbd72: detected capacity change from 0 to 68719476736 [ 902.604527][T23071] block nbd72: Send control failed (result -22) [ 902.627614][T23071] block nbd72: Request send failed, requeueing [ 902.661621][ T5981] block nbd72: Dead connection, failed to find a fallback [ 902.674171][T23358] block nbd72: Receive control failed (result -32) [ 902.681774][ T5981] block nbd72: shutting down sockets [ 902.687246][ T5981] blk_print_req_error: 108 callbacks suppressed [ 902.687266][ T5981] I/O error, dev nbd72, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 902.703031][ T5981] buffer_io_error: 105 callbacks suppressed [ 902.703049][ T5981] Buffer I/O error on dev nbd72, logical block 0, async page read [ 902.717786][T23071] I/O error, dev nbd72, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 902.738006][T23071] Buffer I/O error on dev nbd72, logical block 0, async page read [ 902.799302][T23071] I/O error, dev nbd72, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 902.864171][T23071] Buffer I/O error on dev nbd72, logical block 0, async page read [ 902.912273][T23071] I/O error, dev nbd72, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 902.952830][T23071] Buffer I/O error on dev nbd72, logical block 0, async page read [ 902.987321][T23071] I/O error, dev nbd72, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 903.022565][T23071] Buffer I/O error on dev nbd72, logical block 0, async page read [ 903.050922][T23071] I/O error, dev nbd72, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 903.095778][T23071] Buffer I/O error on dev nbd72, logical block 0, async page read [ 903.134445][T23071] I/O error, dev nbd72, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 903.175243][T23071] Buffer I/O error on dev nbd72, logical block 0, async page read [ 903.207530][T23071] I/O error, dev nbd72, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 903.245781][T23071] Buffer I/O error on dev nbd72, logical block 0, async page read [ 903.286441][T23071] ldm_validate_partition_table(): Disk read failed. [ 903.293202][T23071] I/O error, dev nbd72, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 903.350466][T23071] Buffer I/O error on dev nbd72, logical block 0, async page read [ 903.374512][T23071] I/O error, dev nbd72, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 903.434325][T23071] Buffer I/O error on dev nbd72, logical block 0, async page read [ 903.443559][T23071] Dev nbd72: unable to read RDB block 0 [ 903.475110][T23071] nbd72: unable to read partition table [ 903.523134][T23071] ldm_validate_partition_table(): Disk read failed. [ 903.536903][T23071] Dev nbd72: unable to read RDB block 0 [ 903.553493][T23071] nbd72: unable to read partition table [ 903.845665][T25085] nbd73: detected capacity change from 0 to 68719476736 [ 903.885650][T23071] block nbd73: Send control failed (result -22) [ 904.008394][T23071] block nbd73: Request send failed, requeueing [ 904.015984][T23358] block nbd73: Receive control failed (result -32) [ 904.024331][T17786] block nbd73: Dead connection, failed to find a fallback [ 904.032287][T17786] block nbd73: shutting down sockets [ 904.039729][T23071] ldm_validate_partition_table(): Disk read failed. [ 904.048935][T23071] Dev nbd73: unable to read RDB block 0 [ 904.055633][T23071] nbd73: unable to read partition table [ 904.066773][T23071] ldm_validate_partition_table(): Disk read failed. [ 904.084364][T23071] Dev nbd73: unable to read RDB block 0 [ 904.091195][T23071] nbd73: unable to read partition table [ 904.126519][T25093] : Can't lookup blockdev [ 905.519328][T25042] kexec: Could not allocate control_code_buffer [ 906.035601][T25132] nbd74: detected capacity change from 0 to 68719476736 [ 906.046137][T23071] block nbd74: Send control failed (result -22) [ 906.046171][T23071] block nbd74: Request send failed, requeueing [ 906.046318][T23358] block nbd74: Receive control failed (result -32) [ 906.046474][ T5981] block nbd74: Dead connection, failed to find a fallback [ 906.046497][ T5981] block nbd74: shutting down sockets [ 906.047632][T23071] ldm_validate_partition_table(): Disk read failed. [ 906.048291][T23071] Dev nbd74: unable to read RDB block 0 [ 906.054650][T23071] nbd74: unable to read partition table [ 906.078504][T23071] ldm_validate_partition_table(): Disk read failed. [ 906.083651][T23071] Dev nbd74: unable to read RDB block 0 [ 906.084350][T23071] nbd74: unable to read partition table [ 908.000241][T25187] : Can't lookup blockdev [ 908.578671][T25202] : Can't lookup blockdev [ 908.776120][T25170] random: crng reseeded on system resumption [ 911.318859][T25263] nbd75: detected capacity change from 0 to 68719476736 [ 911.330492][T23071] block nbd75: Send control failed (result -22) [ 911.384740][T23071] block nbd75: Request send failed, requeueing [ 911.411241][T17786] block nbd75: Dead connection, failed to find a fallback [ 911.419701][T17786] block nbd75: shutting down sockets [ 911.425391][T17786] blk_print_req_error: 92 callbacks suppressed [ 911.425410][T17786] I/O error, dev nbd75, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 911.445134][T17786] buffer_io_error: 89 callbacks suppressed [ 911.445155][T17786] Buffer I/O error on dev nbd75, logical block 0, async page read [ 911.459430][T23071] I/O error, dev nbd75, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 911.478434][T23071] Buffer I/O error on dev nbd75, logical block 0, async page read [ 911.498569][T23071] I/O error, dev nbd75, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 911.507747][T23071] Buffer I/O error on dev nbd75, logical block 0, async page read [ 911.538582][T23071] I/O error, dev nbd75, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 911.547927][T23071] Buffer I/O error on dev nbd75, logical block 0, async page read [ 911.556445][T23071] I/O error, dev nbd75, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 911.568893][T23071] Buffer I/O error on dev nbd75, logical block 0, async page read [ 911.576950][T23071] I/O error, dev nbd75, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 911.618420][T23071] Buffer I/O error on dev nbd75, logical block 0, async page read [ 911.626495][T23071] I/O error, dev nbd75, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 911.677150][T23071] Buffer I/O error on dev nbd75, logical block 0, async page read [ 911.724151][T23071] I/O error, dev nbd75, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 911.774655][T23071] Buffer I/O error on dev nbd75, logical block 0, async page read [ 911.808608][T23071] ldm_validate_partition_table(): Disk read failed. [ 911.835021][T23071] I/O error, dev nbd75, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 911.889217][T23071] Buffer I/O error on dev nbd75, logical block 0, async page read [ 911.938120][T23071] I/O error, dev nbd75, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 911.973282][T23071] Buffer I/O error on dev nbd75, logical block 0, async page read [ 912.018920][T23071] Dev nbd75: unable to read RDB block 0 [ 912.025321][T23071] nbd75: unable to read partition table [ 912.073705][T23071] ldm_validate_partition_table(): Disk read failed. [ 912.092837][T23071] Dev nbd75: unable to read RDB block 0 [ 912.123333][T23071] nbd75: unable to read partition table [ 912.705329][T25312] : Can't lookup blockdev [ 913.117130][T25328] : Can't lookup blockdev [ 914.076420][T25358] : Can't lookup blockdev [ 915.264572][T25388] : Can't lookup blockdev [ 915.559951][T25396] sg_write: data in/out 32732/16086 bytes for SCSI command 0x0-- guessing data in; [ 915.559951][T25396] program syz.0.2655 not setting count and/or reply_len properly [ 917.424438][T25430] kexec: Could not allocate control_code_buffer [ 917.976200][T25482] delete_channel: no stack [ 918.212286][T25484] : Can't lookup blockdev [ 920.952066][T25544] : Can't lookup blockdev [ 921.696743][T25561] : Can't lookup blockdev [ 922.727540][T25588] : Can't lookup blockdev [ 924.195002][T25611] zero sized request [ 925.186007][T25621] : Can't lookup blockdev [ 926.513440][T25655] : Can't lookup blockdev [ 929.989639][T25673] kexec: Could not allocate control_code_buffer [ 930.000230][T25722] openvswitch: netlink: Key 5 has unexpected len 4 expected 2 [ 930.314103][T25727] : Can't lookup blockdev [ 930.639377][T25731] : Can't lookup blockdev [ 934.151756][T25822] : Can't lookup blockdev [ 934.983358][T25865] : Can't lookup blockdev [ 934.988719][T25862] FAULT_INJECTION: forcing a failure. [ 934.988719][T25862] name failslab, interval 1, probability 0, space 0, times 0 [ 935.091034][T25862] CPU: 0 UID: 0 PID: 25862 Comm: syz.2.2709 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 935.091082][T25862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 935.091101][T25862] Call Trace: [ 935.091112][T25862] [ 935.091125][T25862] dump_stack_lvl+0x16c/0x1f0 [ 935.091177][T25862] should_fail_ex+0x512/0x640 [ 935.091213][T25862] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 935.091250][T25862] should_failslab+0xc2/0x120 [ 935.091292][T25862] __kmalloc_cache_noprof+0x6a/0x3e0 [ 935.091326][T25862] ? ptp_open+0xe3/0x520 [ 935.091380][T25862] ptp_open+0xe3/0x520 [ 935.091428][T25862] ? __pfx_ptp_open+0x10/0x10 [ 935.091484][T25862] ? __pfx_ptp_open+0x10/0x10 [ 935.091525][T25862] posix_clock_open+0x178/0x290 [ 935.091564][T25862] ? __pfx_posix_clock_open+0x10/0x10 [ 935.091598][T25862] chrdev_open+0x231/0x6a0 [ 935.091633][T25862] ? __pfx_apparmor_file_open+0x10/0x10 [ 935.091675][T25862] ? __pfx_chrdev_open+0x10/0x10 [ 935.091715][T25862] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 935.091773][T25862] do_dentry_open+0x741/0x1c10 [ 935.091809][T25862] ? __pfx_chrdev_open+0x10/0x10 [ 935.091853][T25862] vfs_open+0x82/0x3f0 [ 935.091900][T25862] path_openat+0x1e5e/0x2d40 [ 935.091948][T25862] ? __pfx_path_openat+0x10/0x10 [ 935.091992][T25862] do_filp_open+0x20b/0x470 [ 935.092025][T25862] ? __pfx_do_filp_open+0x10/0x10 [ 935.092087][T25862] ? alloc_fd+0x471/0x7d0 [ 935.092127][T25862] do_sys_openat2+0x11b/0x1d0 [ 935.092171][T25862] ? __pfx_do_sys_openat2+0x10/0x10 [ 935.092231][T25862] __x64_sys_openat+0x174/0x210 [ 935.092276][T25862] ? __pfx___x64_sys_openat+0x10/0x10 [ 935.092324][T25862] ? rcu_is_watching+0x12/0xc0 [ 935.092374][T25862] do_syscall_64+0xcd/0x230 [ 935.092424][T25862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.092455][T25862] RIP: 0033:0x7f3ba8b8e169 [ 935.092481][T25862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 935.092513][T25862] RSP: 002b:00007f3ba997c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 935.092543][T25862] RAX: ffffffffffffffda RBX: 00007f3ba8db6080 RCX: 00007f3ba8b8e169 [ 935.092565][T25862] RDX: 0000000000000440 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 935.092585][T25862] RBP: 00007f3ba8c10a68 R08: 0000000000000000 R09: 0000000000000000 [ 935.092605][T25862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 935.092624][T25862] R13: 0000000000000000 R14: 00007f3ba8db6080 R15: 00007ffeaf0980a8 [ 935.092664][T25862] [ 935.920799][T25881] openvswitch: netlink: Key 5 has unexpected len 4 expected 2 [ 936.122583][T25887] : Can't lookup blockdev [ 936.701307][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.707681][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.815757][T25899] tty tty61: ldisc open failed (-12), clearing slot 60 [ 938.757143][T25997] : Can't lookup blockdev [ 939.028918][T25994] [ 940.178561][T26018] nbd: nbd11811 already in use [ 940.702848][T26027] : Can't lookup blockdev [ 943.176519][T26054] : Can't lookup blockdev [ 943.694673][T26058] openvswitch: netlink: Key 5 has unexpected len 4 expected 2 [ 944.429127][T26074] : Can't lookup blockdev [ 944.528663][T26065] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input20 [ 944.683443][T26091] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2738'. [ 944.719526][T26089] netlink: 93 bytes leftover after parsing attributes in process `syz.0.2738'. [ 945.252880][T26122] blk_print_req_error: 24 callbacks suppressed [ 945.252906][T26122] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 945.302766][T26122] buffer_io_error: 23 callbacks suppressed [ 945.302847][T26122] Buffer I/O error on dev nbd8, logical block 0, async page read [ 945.375912][T26122] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 945.405649][T26122] Buffer I/O error on dev nbd8, logical block 0, async page read [ 945.418053][T26122] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 945.442520][T26122] Buffer I/O error on dev nbd8, logical block 0, async page read [ 945.461137][T26122] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 945.495093][T26122] Buffer I/O error on dev nbd8, logical block 0, async page read [ 945.566212][T26122] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 945.586019][T26122] Buffer I/O error on dev nbd8, logical block 0, async page read [ 945.606024][T26122] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 945.615236][T26122] Buffer I/O error on dev nbd8, logical block 0, async page read [ 945.624406][T26122] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 945.633912][T26122] Buffer I/O error on dev nbd8, logical block 0, async page read [ 945.642260][T26122] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 945.652755][T26122] Buffer I/O error on dev nbd8, logical block 0, async page read [ 945.696017][T26122] ldm_validate_partition_table(): Disk read failed. [ 945.726462][T26122] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 945.759332][T26122] Buffer I/O error on dev nbd8, logical block 0, async page read [ 945.768715][T26122] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 945.785553][T26122] Buffer I/O error on dev nbd8, logical block 0, async page read [ 945.794005][T26122] Dev nbd8: unable to read RDB block 0 [ 945.801606][T26122] nbd8: unable to read partition table [ 946.497854][T26194] nbd76: detected capacity change from 0 to 68719476736 [ 946.519499][T23071] block nbd76: Send control failed (result -22) [ 946.546034][T23071] block nbd76: Request send failed, requeueing [ 946.559419][T23358] block nbd76: Receive control failed (result -32) [ 946.568920][T20784] block nbd76: Dead connection, failed to find a fallback [ 946.578929][T20784] block nbd76: shutting down sockets [ 946.610619][T23071] ldm_validate_partition_table(): Disk read failed. [ 946.623184][T23071] Dev nbd76: unable to read RDB block 0 [ 946.629594][T23071] nbd76: unable to read partition table [ 946.641032][T23071] ldm_validate_partition_table(): Disk read failed. [ 946.648434][T23071] Dev nbd76: unable to read RDB block 0 [ 946.655112][T23071] nbd76: unable to read partition table [ 947.601390][T26245] : Can't lookup blockdev [ 949.287915][T26280] : Can't lookup blockdev [ 950.461650][T26315] : Can't lookup blockdev [ 951.193571][T26317] nbd77: detected capacity change from 0 to 68719476736 [ 951.256796][T23071] block nbd77: Send control failed (result -22) [ 951.274093][T23071] block nbd77: Request send failed, requeueing [ 951.323852][T23358] block nbd77: Receive control failed (result -32) [ 951.337605][T17786] block nbd77: Dead connection, failed to find a fallback [ 951.358323][T17786] block nbd77: shutting down sockets [ 951.363734][T17786] blk_print_req_error: 40 callbacks suppressed [ 951.363753][T17786] I/O error, dev nbd77, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 951.379319][T17786] buffer_io_error: 39 callbacks suppressed [ 951.379336][T17786] Buffer I/O error on dev nbd77, logical block 0, async page read [ 951.394509][T23071] I/O error, dev nbd77, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 951.403816][T23071] Buffer I/O error on dev nbd77, logical block 0, async page read [ 951.412179][T23071] I/O error, dev nbd77, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 951.421664][T23071] Buffer I/O error on dev nbd77, logical block 0, async page read [ 951.429865][T23071] I/O error, dev nbd77, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 951.440233][T23071] Buffer I/O error on dev nbd77, logical block 0, async page read [ 951.448476][T23071] I/O error, dev nbd77, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 951.457709][T23071] Buffer I/O error on dev nbd77, logical block 0, async page read [ 951.465808][T23071] I/O error, dev nbd77, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 951.475065][T23071] Buffer I/O error on dev nbd77, logical block 0, async page read [ 951.483941][T23071] I/O error, dev nbd77, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 951.494872][T23071] Buffer I/O error on dev nbd77, logical block 0, async page read [ 951.502995][T23071] I/O error, dev nbd77, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 951.512471][T23071] Buffer I/O error on dev nbd77, logical block 0, async page read [ 951.563189][T23071] ldm_validate_partition_table(): Disk read failed. [ 951.585716][T23071] I/O error, dev nbd77, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 951.656506][T23071] Buffer I/O error on dev nbd77, logical block 0, async page read [ 951.673598][T23071] I/O error, dev nbd77, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 951.715378][T23071] Buffer I/O error on dev nbd77, logical block 0, async page read [ 951.739965][T23071] Dev nbd77: unable to read RDB block 0 [ 951.767232][T23071] nbd77: unable to read partition table [ 951.794012][T23071] ldm_validate_partition_table(): Disk read failed. [ 951.836989][T23071] Dev nbd77: unable to read RDB block 0 [ 951.872474][T23071] nbd77: unable to read partition table [ 952.400160][T26337] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input21 [ 953.676995][T26393] ldm_validate_partition_table(): Disk read failed. [ 953.718895][T26393] Dev nbd8: unable to read RDB block 0 [ 953.727982][T26393] nbd8: unable to read partition table [ 953.738959][T26393] block nbd8: Cannot use ioctl interface on a netlink controlled device. [ 953.760684][T26395] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2763'. [ 953.774533][T26395] veth0_macvtap: left promiscuous mode [ 953.832935][T26399] aoe: invalid device specification [ 954.851489][T26458] : Can't lookup blockdev [ 955.638230][T26478] : Can't lookup blockdev [ 960.124078][T26599] : Can't lookup blockdev [ 961.074395][T26616] : Can't lookup blockdev [ 962.537250][T26636] : Can't lookup blockdev [ 963.215870][T26643] netlink: 330 bytes leftover after parsing attributes in process `syz.4.2793'. [ 963.654493][T26645] nbd78: detected capacity change from 0 to 68719476736 [ 963.705219][T23071] block nbd78: Send control failed (result -22) [ 963.712075][T23071] block nbd78: Request send failed, requeueing [ 963.748969][T23358] block nbd78: Receive control failed (result -32) [ 963.749133][T20784] block nbd78: Dead connection, failed to find a fallback [ 963.765315][T20784] block nbd78: shutting down sockets [ 963.770645][T20784] blk_print_req_error: 40 callbacks suppressed [ 963.770662][T20784] I/O error, dev nbd78, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 963.787428][T20784] buffer_io_error: 39 callbacks suppressed [ 963.787446][T20784] Buffer I/O error on dev nbd78, logical block 0, async page read [ 963.824908][T23071] I/O error, dev nbd78, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 963.880343][T23071] Buffer I/O error on dev nbd78, logical block 0, async page read [ 963.952413][T23071] I/O error, dev nbd78, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 964.008856][T23071] Buffer I/O error on dev nbd78, logical block 0, async page read [ 964.048150][T23071] I/O error, dev nbd78, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 964.074607][T23071] Buffer I/O error on dev nbd78, logical block 0, async page read [ 964.104258][T23071] I/O error, dev nbd78, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 964.140219][T23071] Buffer I/O error on dev nbd78, logical block 0, async page read [ 964.180236][T23071] I/O error, dev nbd78, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 964.225113][T23071] Buffer I/O error on dev nbd78, logical block 0, async page read [ 964.233184][T23071] I/O error, dev nbd78, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 964.273829][T23071] Buffer I/O error on dev nbd78, logical block 0, async page read [ 964.322810][T23071] I/O error, dev nbd78, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 964.362571][T23071] Buffer I/O error on dev nbd78, logical block 0, async page read [ 964.405730][T23071] ldm_validate_partition_table(): Disk read failed. [ 964.435099][T23071] I/O error, dev nbd78, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 964.464665][T23071] Buffer I/O error on dev nbd78, logical block 0, async page read [ 964.495273][T23071] I/O error, dev nbd78, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 964.521041][T23071] Buffer I/O error on dev nbd78, logical block 0, async page read [ 964.549667][T23071] Dev nbd78: unable to read RDB block 0 [ 964.570340][T23071] nbd78: unable to read partition table [ 964.626565][T23071] ldm_validate_partition_table(): Disk read failed. [ 964.674390][T23071] Dev nbd78: unable to read RDB block 0 [ 964.681394][T23071] nbd78: unable to read partition table [ 964.864584][T26682] : Can't lookup blockdev [ 966.866323][T26711] : Can't lookup blockdev [ 967.437905][T26726] : Can't lookup blockdev [ 969.330898][T26775] : Can't lookup blockdev [ 972.136826][T26807] : Can't lookup blockdev [ 973.429008][T26824] : Can't lookup blockdev [ 974.824287][T26874] : Can't lookup blockdev [ 977.522775][T26934] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2837'. [ 978.640399][T26942] : Can't lookup blockdev [ 978.784805][T26953] : Can't lookup blockdev [ 978.951396][T26955] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2839'. [ 981.854027][T27063] : Can't lookup blockdev [ 982.653301][T27074] : Can't lookup blockdev [ 984.313049][T27117] : Can't lookup blockdev [ 986.590845][T27204] : Can't lookup blockdev [ 987.806148][T27237] : Can't lookup blockdev [ 988.138891][T27243] FAULT_INJECTION: forcing a failure. [ 988.138891][T27243] name failslab, interval 1, probability 0, space 0, times 0 [ 988.280931][T27243] CPU: 0 UID: 0 PID: 27243 Comm: syz.2.2860 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 988.280986][T27243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 988.281008][T27243] Call Trace: [ 988.281021][T27243] [ 988.281035][T27243] dump_stack_lvl+0x16c/0x1f0 [ 988.281092][T27243] should_fail_ex+0x512/0x640 [ 988.281133][T27243] ? fs_reclaim_acquire+0xae/0x150 [ 988.281192][T27243] ? tomoyo_encode2+0x100/0x3e0 [ 988.281240][T27243] should_failslab+0xc2/0x120 [ 988.281285][T27243] __kmalloc_noprof+0xd2/0x510 [ 988.281336][T27243] tomoyo_encode2+0x100/0x3e0 [ 988.281390][T27243] tomoyo_encode+0x29/0x50 [ 988.281437][T27243] tomoyo_realpath_from_path+0x18f/0x6e0 [ 988.281500][T27243] tomoyo_check_open_permission+0x2ab/0x3c0 [ 988.281547][T27243] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 988.281644][T27243] ? find_held_lock+0x2b/0x80 [ 988.281693][T27243] tomoyo_file_open+0x6b/0x90 [ 988.281727][T27243] security_file_open+0x84/0x1e0 [ 988.281778][T27243] do_dentry_open+0x596/0x1c10 [ 988.281829][T27243] vfs_open+0x82/0x3f0 [ 988.281882][T27243] path_openat+0x1e5e/0x2d40 [ 988.281935][T27243] ? __pfx_path_openat+0x10/0x10 [ 988.281984][T27243] do_filp_open+0x20b/0x470 [ 988.282021][T27243] ? __pfx_do_filp_open+0x10/0x10 [ 988.282090][T27243] ? alloc_fd+0x471/0x7d0 [ 988.282135][T27243] do_sys_openat2+0x11b/0x1d0 [ 988.282184][T27243] ? __pfx_do_sys_openat2+0x10/0x10 [ 988.282250][T27243] __x64_sys_openat+0x174/0x210 [ 988.282302][T27243] ? __pfx___x64_sys_openat+0x10/0x10 [ 988.282354][T27243] ? rcu_is_watching+0x12/0xc0 [ 988.282403][T27243] do_syscall_64+0xcd/0x230 [ 988.282457][T27243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.282492][T27243] RIP: 0033:0x7f3ba8b8e169 [ 988.282521][T27243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 988.282556][T27243] RSP: 002b:00007f3ba999d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 988.282596][T27243] RAX: ffffffffffffffda RBX: 00007f3ba8db5fa0 RCX: 00007f3ba8b8e169 [ 988.282620][T27243] RDX: 0000000000000002 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 988.282642][T27243] RBP: 00007f3ba8c10a68 R08: 0000000000000000 R09: 0000000000000000 [ 988.282664][T27243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 988.282686][T27243] R13: 0000000000000000 R14: 00007f3ba8db5fa0 R15: 00007ffeaf0980a8 [ 988.282727][T27243] [ 988.282761][T27243] ERROR: Out of memory at tomoyo_realpath_from_path. [ 989.314731][T27261] : Can't lookup blockdev [ 991.999474][T27340] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2871'. [ 992.166390][T27347] : Can't lookup blockdev [ 993.046776][T12364] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 993.061453][T12364] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 993.079203][T12364] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 993.099624][T12364] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 993.119334][T12364] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 993.341645][T27376] : Can't lookup blockdev [ 994.212823][T27406] : Can't lookup blockdev [ 994.547856][T27364] chnl_net:caif_netlink_parms(): no params data found [ 994.710457][T27499] : Can't lookup blockdev [ 995.200304][T23358] Bluetooth: hci0: command tx timeout [ 995.374586][T27364] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.383640][T27364] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.413118][T27364] bridge_slave_0: entered allmulticast mode [ 995.445903][T27364] bridge_slave_0: entered promiscuous mode [ 995.528041][T27364] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.612394][T27364] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.619657][T27364] bridge_slave_1: entered allmulticast mode [ 995.627700][T27364] bridge_slave_1: entered promiscuous mode [ 995.697303][T27519] Invalid ELF header magic: != ELF [ 996.248686][T27364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 996.314892][T27364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 996.876978][T23358] Bluetooth: hci4: unexpected event 0x3e length: 726 > 260 [ 996.877025][T23358] Bluetooth: hci4: unexpected subevent 0x0d length: 725 > 260 [ 996.895443][T23358] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 996.895542][T23358] Bluetooth: hci4: Malformed LE Event: 0x0d [ 997.029577][T27364] team0: Port device team_slave_0 added [ 997.084438][T27364] team0: Port device team_slave_1 added [ 997.260711][T27640] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22 [ 997.284570][T23358] Bluetooth: hci0: command tx timeout [ 997.312670][T27364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 997.335925][T27364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 997.441337][T27364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 997.504178][T27364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 997.523664][T27364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 997.577293][T27665] FAULT_INJECTION: forcing a failure. [ 997.577293][T27665] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 997.581689][T27364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 997.680377][T27665] CPU: 1 UID: 0 PID: 27665 Comm: syz.1.2884 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 997.680421][T27665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 997.680442][T27665] Call Trace: [ 997.680453][T27665] [ 997.680465][T27665] dump_stack_lvl+0x16c/0x1f0 [ 997.680515][T27665] should_fail_ex+0x512/0x640 [ 997.680557][T27665] should_fail_alloc_page+0xe7/0x130 [ 997.680603][T27665] prepare_alloc_pages+0x3c2/0x610 [ 997.680653][T27665] ? rcu_is_watching+0x12/0xc0 [ 997.680688][T27665] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 997.680738][T27665] ? __lock_acquire+0x5ca/0x1ba0 [ 997.680788][T27665] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 997.680844][T27665] ? __lock_acquire+0x5ca/0x1ba0 [ 997.680892][T27665] ? __lock_acquire+0x5ca/0x1ba0 [ 997.680937][T27665] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 997.680995][T27665] ? policy_nodemask+0xea/0x4e0 [ 997.681041][T27665] alloc_pages_mpol+0x1fb/0x550 [ 997.681085][T27665] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 997.681139][T27665] ? __lock_acquire+0x5ca/0x1ba0 [ 997.681184][T27665] folio_alloc_mpol_noprof+0x36/0x2f0 [ 997.681232][T27665] vma_alloc_folio_noprof+0xed/0x1e0 [ 997.681277][T27665] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 997.681336][T27665] do_pte_missing+0x223d/0x3fb0 [ 997.681383][T27665] __handle_mm_fault+0x103d/0x2a40 [ 997.681427][T27665] ? __pfx___handle_mm_fault+0x10/0x10 [ 997.681460][T27665] ? __pte_offset_map_lock+0x155/0x2f0 [ 997.681505][T27665] ? find_held_lock+0x2b/0x80 [ 997.681535][T27665] ? find_held_lock+0x2b/0x80 [ 997.681591][T27665] handle_mm_fault+0x3fe/0xad0 [ 997.681631][T27665] __get_user_pages+0x771/0x36f0 [ 997.681671][T27665] ? __pfx_mt_find+0x10/0x10 [ 997.681721][T27665] ? __pfx___get_user_pages+0x10/0x10 [ 997.681767][T27665] populate_vma_page_range+0x278/0x3a0 [ 997.681802][T27665] ? __pfx_populate_vma_page_range+0x10/0x10 [ 997.681833][T27665] ? __pfx_find_vma_intersection+0x10/0x10 [ 997.681880][T27665] ? do_mmap+0x69c/0x11b0 [ 997.681929][T27665] __mm_populate+0x1d8/0x380 [ 997.681961][T27665] ? __pfx___mm_populate+0x10/0x10 [ 997.682004][T27665] ? up_write+0x1b2/0x520 [ 997.682052][T27665] vm_mmap_pgoff+0x362/0x450 [ 997.682104][T27665] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 997.682151][T27665] ? find_held_lock+0x2b/0x80 [ 997.682186][T27665] ? __x64_sys_futex+0x1e0/0x4c0 [ 997.682238][T27665] ? __x64_sys_futex+0x1e9/0x4c0 [ 997.682281][T27665] ksys_mmap_pgoff+0x7d/0x5c0 [ 997.682340][T27665] ? rcu_is_watching+0x12/0xc0 [ 997.682373][T27665] __x64_sys_mmap+0x125/0x190 [ 997.682409][T27665] do_syscall_64+0xcd/0x230 [ 997.682476][T27665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 997.682508][T27665] RIP: 0033:0x7f18ef38e169 [ 997.682533][T27665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 997.682563][T27665] RSP: 002b:00007f18f015c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 997.682592][T27665] RAX: ffffffffffffffda RBX: 00007f18ef5b6080 RCX: 00007f18ef38e169 [ 997.682613][T27665] RDX: 00000000000000df RSI: 0000000000440009 RDI: 0000000000000000 [ 997.682632][T27665] RBP: 00007f18ef410a68 R08: 0000000000000007 R09: 0000000000028000 [ 997.682652][T27665] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 997.682670][T27665] R13: 0000000000000000 R14: 00007f18ef5b6080 R15: 00007ffdcee59e78 [ 997.682710][T27665] [ 998.176049][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.182465][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.537305][T27364] hsr_slave_0: entered promiscuous mode [ 998.567685][T27364] hsr_slave_1: entered promiscuous mode [ 998.578202][T27364] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 998.601967][T27364] Cannot create hsr debugfs directory [ 999.005161][T27751] : Can't lookup blockdev [ 999.365761][T23358] Bluetooth: hci0: command tx timeout [ 999.825926][T27789] : Can't lookup blockdev [ 999.879597][T27364] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.228407][T27364] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.443823][T27804] : Can't lookup blockdev [ 1000.486783][T27364] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.574277][T27808] : Can't lookup blockdev [ 1001.021964][T27364] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.409591][T27826] : Can't lookup blockdev [ 1001.453702][T23358] Bluetooth: hci0: command tx timeout [ 1001.483694][T27830] : Can't lookup blockdev [ 1002.069461][T27364] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1002.246161][T27364] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1002.297968][T27364] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1002.349410][T27364] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1002.620012][T27364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1002.659404][T27364] 8021q: adding VLAN 0 to HW filter on device team0 [ 1002.683957][ T8087] bridge0: port 1(bridge_slave_0) entered blocking state [ 1002.691129][ T8087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1002.728257][T16275] bridge0: port 2(bridge_slave_1) entered blocking state [ 1002.735518][T16275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1003.363122][T27364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1003.461673][T27364] veth0_vlan: entered promiscuous mode [ 1003.488988][T27364] veth1_vlan: entered promiscuous mode [ 1003.776080][T27364] veth0_macvtap: entered promiscuous mode [ 1003.801842][T27364] veth1_macvtap: entered promiscuous mode [ 1003.922676][T27889] : Can't lookup blockdev [ 1004.122694][T27364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1004.133519][T27364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.144223][T27364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1004.155406][T27364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.165789][T27364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1004.177658][T27364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.188528][T27364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1004.199871][T27364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.210034][T27364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1004.220886][T27364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.231102][T27364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1004.241917][T27364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.330759][T27364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1004.341903][T27364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.353990][T27364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1004.370888][T27364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1004.382974][T27364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.393887][T27364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1004.406619][T27364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.450470][T27364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1004.509532][T27364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.596398][T27364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1004.664377][T27364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.674248][T27364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1004.757612][T27364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.794403][T27364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1004.834612][T27364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.854516][T27364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1004.890683][T27364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.929439][T27364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1005.057060][T27364] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.094678][T27364] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.103438][T27364] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.154418][T27364] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.606116][T27902] : Can't lookup blockdev [ 1005.780288][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1005.851931][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1006.100304][T27913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2912'. [ 1006.148200][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1006.281502][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1008.251244][T27986] : Can't lookup blockdev [ 1008.368768][T27984] : Can't lookup blockdev [ 1009.464181][T28005] : Can't lookup blockdev [ 1010.051182][T28000] block2mtd: parameter too long [ 1012.499527][T28058] : Can't lookup blockdev [ 1017.007512][T28196] : Can't lookup blockdev [ 1018.927577][T28241] : Can't lookup blockdev [ 1020.505428][T28273] FAULT_INJECTION: forcing a failure. [ 1020.505428][T28273] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1020.547086][T28273] CPU: 0 UID: 0 PID: 28273 Comm: syz.2.2943 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 1020.547136][T28273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1020.547158][T28273] Call Trace: [ 1020.547170][T28273] [ 1020.547183][T28273] dump_stack_lvl+0x16c/0x1f0 [ 1020.547238][T28273] should_fail_ex+0x512/0x640 [ 1020.547284][T28273] should_fail_alloc_page+0xe7/0x130 [ 1020.547332][T28273] prepare_alloc_pages+0x3c2/0x610 [ 1020.547387][T28273] ? rcu_is_watching+0x12/0xc0 [ 1020.547426][T28273] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 1020.547471][T28273] ? stack_trace_save+0x8e/0xc0 [ 1020.547509][T28273] ? __pfx_stack_trace_save+0x10/0x10 [ 1020.547546][T28273] ? stack_depot_save_flags+0x28/0xa50 [ 1020.547597][T28273] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1020.547646][T28273] ? vfs_open+0x82/0x3f0 [ 1020.547687][T28273] ? path_openat+0x1e5e/0x2d40 [ 1020.547718][T28273] ? do_filp_open+0x20b/0x470 [ 1020.547765][T28273] ? find_held_lock+0x2b/0x80 [ 1020.547798][T28273] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1020.547848][T28273] ? policy_nodemask+0xea/0x4e0 [ 1020.547895][T28273] alloc_pages_mpol+0x1fb/0x550 [ 1020.547951][T28273] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1020.548008][T28273] alloc_pages_noprof+0x131/0x390 [ 1020.548054][T28273] alloc_pages_exact_noprof+0x31/0x90 [ 1020.548088][T28273] snd_pcm_attach_substream+0x4bb/0xd60 [ 1020.548141][T28273] snd_pcm_open_substream+0x8d/0x17f0 [ 1020.548185][T28273] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 1020.548238][T28273] snd_pcm_oss_open+0x735/0x1400 [ 1020.548287][T28273] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 1020.548321][T28273] ? __lock_acquire+0xaa4/0x1ba0 [ 1020.548368][T28273] ? __pfx_default_wake_function+0x10/0x10 [ 1020.548407][T28273] ? __lock_acquire+0xaa4/0x1ba0 [ 1020.548462][T28273] ? do_raw_spin_lock+0x12c/0x2b0 [ 1020.548496][T28273] ? soundcore_open+0x35a/0x580 [ 1020.548545][T28273] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 1020.548579][T28273] soundcore_open+0x409/0x580 [ 1020.548630][T28273] ? __pfx_soundcore_open+0x10/0x10 [ 1020.548677][T28273] chrdev_open+0x231/0x6a0 [ 1020.548715][T28273] ? __pfx_apparmor_file_open+0x10/0x10 [ 1020.548759][T28273] ? __pfx_chrdev_open+0x10/0x10 [ 1020.548801][T28273] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 1020.548881][T28273] do_dentry_open+0x741/0x1c10 [ 1020.548920][T28273] ? __pfx_chrdev_open+0x10/0x10 [ 1020.548977][T28273] vfs_open+0x82/0x3f0 [ 1020.549030][T28273] path_openat+0x1e5e/0x2d40 [ 1020.549082][T28273] ? __pfx_path_openat+0x10/0x10 [ 1020.549131][T28273] do_filp_open+0x20b/0x470 [ 1020.549168][T28273] ? __pfx_do_filp_open+0x10/0x10 [ 1020.549236][T28273] ? alloc_fd+0x471/0x7d0 [ 1020.549293][T28273] do_sys_openat2+0x11b/0x1d0 [ 1020.549339][T28273] ? __pfx_do_sys_openat2+0x10/0x10 [ 1020.549403][T28273] __x64_sys_openat+0x174/0x210 [ 1020.549452][T28273] ? __pfx___x64_sys_openat+0x10/0x10 [ 1020.549523][T28273] ? rcu_is_watching+0x12/0xc0 [ 1020.549585][T28273] do_syscall_64+0xcd/0x230 [ 1020.549638][T28273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.549672][T28273] RIP: 0033:0x7f3ba8b8e169 [ 1020.549699][T28273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1020.549732][T28273] RSP: 002b:00007f3ba999d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1020.549764][T28273] RAX: ffffffffffffffda RBX: 00007f3ba8db5fa0 RCX: 00007f3ba8b8e169 [ 1020.549787][T28273] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1020.549808][T28273] RBP: 00007f3ba8c10a68 R08: 0000000000000000 R09: 0000000000000000 [ 1020.549829][T28273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1020.549849][T28273] R13: 0000000000000000 R14: 00007f3ba8db5fa0 R15: 00007ffeaf0980a8 [ 1020.549891][T28273] [ 1022.030527][T28309] : Can't lookup blockdev [ 1023.663365][T28353] : Can't lookup blockdev [ 1024.976180][T28384] : Can't lookup blockdev [ 1026.388536][T28410] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1026.441177][T28410] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1026.482587][T28410] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1026.524244][T28410] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1026.554156][T28410] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1026.623147][T28410] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1026.825110][T28410] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1027.626577][T28470] : Can't lookup blockdev [ 1028.210214][T28476] : Can't lookup blockdev [ 1028.419586][T23358] Bluetooth: hci3: command 0x0c1a tx timeout [ 1028.494611][T23358] Bluetooth: hci2: command 0x0c1a tx timeout [ 1028.495022][T12364] Bluetooth: hci4: command 0x0c1a tx timeout [ 1028.577323][T12364] Bluetooth: hci0: command 0x0c1a tx timeout [ 1028.583492][T12364] Bluetooth: hci6: command 0x0c1a tx timeout [ 1029.320462][T28510] : Can't lookup blockdev [ 1029.539784][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806ae83400: rx timeout, send abort [ 1030.048077][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806ae83400: abort rx timeout. Force session deactivation [ 1030.645173][T12364] Bluetooth: hci0: command 0x0c1a tx timeout [ 1031.104712][T28469] syz.1.2966 (28469) used greatest stack depth: 20600 bytes left [ 1032.725618][T12364] Bluetooth: hci0: command 0x0c1a tx timeout [ 1032.759190][T28587] : Can't lookup blockdev [ 1032.768080][T28584] FAULT_INJECTION: forcing a failure. [ 1032.768080][T28584] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1032.854473][T28584] CPU: 1 UID: 0 PID: 28584 Comm: syz.0.2977 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 1032.854526][T28584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1032.854549][T28584] Call Trace: [ 1032.854561][T28584] [ 1032.854574][T28584] dump_stack_lvl+0x16c/0x1f0 [ 1032.854631][T28584] should_fail_ex+0x512/0x640 [ 1032.854680][T28584] should_fail_alloc_page+0xe7/0x130 [ 1032.854730][T28584] prepare_alloc_pages+0x3c2/0x610 [ 1032.854786][T28584] ? rcu_is_watching+0x12/0xc0 [ 1032.854834][T28584] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 1032.854881][T28584] ? stack_trace_save+0x8e/0xc0 [ 1032.854920][T28584] ? __pfx_stack_trace_save+0x10/0x10 [ 1032.854970][T28584] ? stack_depot_save_flags+0x28/0xa50 [ 1032.855023][T28584] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1032.855070][T28584] ? vfs_open+0x82/0x3f0 [ 1032.855112][T28584] ? path_openat+0x1e5e/0x2d40 [ 1032.855143][T28584] ? do_filp_open+0x20b/0x470 [ 1032.855191][T28584] ? find_held_lock+0x2b/0x80 [ 1032.855224][T28584] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1032.855275][T28584] ? policy_nodemask+0xea/0x4e0 [ 1032.855322][T28584] alloc_pages_mpol+0x1fb/0x550 [ 1032.855369][T28584] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1032.855425][T28584] alloc_pages_noprof+0x131/0x390 [ 1032.855475][T28584] alloc_pages_exact_noprof+0x31/0x90 [ 1032.855508][T28584] snd_pcm_attach_substream+0x4bb/0xd60 [ 1032.855561][T28584] snd_pcm_open_substream+0x8d/0x17f0 [ 1032.855604][T28584] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 1032.855657][T28584] snd_pcm_oss_open+0x735/0x1400 [ 1032.855706][T28584] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 1032.855739][T28584] ? __lock_acquire+0xaa4/0x1ba0 [ 1032.855786][T28584] ? __pfx_default_wake_function+0x10/0x10 [ 1032.855833][T28584] ? __lock_acquire+0xaa4/0x1ba0 [ 1032.855890][T28584] ? do_raw_spin_lock+0x12c/0x2b0 [ 1032.855942][T28584] ? soundcore_open+0x35a/0x580 [ 1032.855994][T28584] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 1032.856030][T28584] soundcore_open+0x409/0x580 [ 1032.856084][T28584] ? __pfx_soundcore_open+0x10/0x10 [ 1032.856133][T28584] chrdev_open+0x231/0x6a0 [ 1032.856172][T28584] ? __pfx_apparmor_file_open+0x10/0x10 [ 1032.856217][T28584] ? __pfx_chrdev_open+0x10/0x10 [ 1032.856261][T28584] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 1032.856324][T28584] do_dentry_open+0x741/0x1c10 [ 1032.856364][T28584] ? __pfx_chrdev_open+0x10/0x10 [ 1032.856413][T28584] vfs_open+0x82/0x3f0 [ 1032.856466][T28584] path_openat+0x1e5e/0x2d40 [ 1032.856519][T28584] ? __pfx_path_openat+0x10/0x10 [ 1032.856567][T28584] do_filp_open+0x20b/0x470 [ 1032.856605][T28584] ? __pfx_do_filp_open+0x10/0x10 [ 1032.856673][T28584] ? alloc_fd+0x471/0x7d0 [ 1032.856718][T28584] do_sys_openat2+0x11b/0x1d0 [ 1032.856767][T28584] ? __pfx_do_sys_openat2+0x10/0x10 [ 1032.856838][T28584] __x64_sys_openat+0x174/0x210 [ 1032.856889][T28584] ? __pfx___x64_sys_openat+0x10/0x10 [ 1032.856943][T28584] ? rcu_is_watching+0x12/0xc0 [ 1032.856991][T28584] do_syscall_64+0xcd/0x230 [ 1032.857046][T28584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.857081][T28584] RIP: 0033:0x7f24d3b8e169 [ 1032.857109][T28584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1032.857144][T28584] RSP: 002b:00007f24d499f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1032.857178][T28584] RAX: ffffffffffffffda RBX: 00007f24d3db5fa0 RCX: 00007f24d3b8e169 [ 1032.857202][T28584] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1032.857237][T28584] RBP: 00007f24d3c10a68 R08: 0000000000000000 R09: 0000000000000000 [ 1032.857258][T28584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1032.857279][T28584] R13: 0000000000000000 R14: 00007f24d3db5fa0 R15: 00007ffc1b4daa18 [ 1032.857323][T28584] [ 1033.504703][T28581] nbd79: detected capacity change from 0 to 68719476736 [ 1033.513495][T26816] block nbd79: Send control failed (result -22) [ 1033.554571][T26816] block nbd79: Request send failed, requeueing [ 1033.672790][ T5981] block nbd79: Dead connection, failed to find a fallback [ 1033.680035][T12364] block nbd79: Receive control failed (result -32) [ 1033.694379][ T5981] block nbd79: shutting down sockets [ 1033.699719][ T5981] blk_print_req_error: 24 callbacks suppressed [ 1033.699740][ T5981] I/O error, dev nbd79, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1033.715349][ T5981] buffer_io_error: 23 callbacks suppressed [ 1033.715370][ T5981] Buffer I/O error on dev nbd79, logical block 0, async page read [ 1033.730044][T26816] I/O error, dev nbd79, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1033.746376][T26816] Buffer I/O error on dev nbd79, logical block 0, async page read [ 1033.776596][T26816] I/O error, dev nbd79, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1033.785828][T26816] Buffer I/O error on dev nbd79, logical block 0, async page read [ 1033.794901][T26816] I/O error, dev nbd79, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1033.804065][T26816] Buffer I/O error on dev nbd79, logical block 0, async page read [ 1033.812118][T26816] I/O error, dev nbd79, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1033.821316][T26816] Buffer I/O error on dev nbd79, logical block 0, async page read [ 1033.841826][T26816] I/O error, dev nbd79, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1033.852237][T26816] Buffer I/O error on dev nbd79, logical block 0, async page read [ 1033.867895][T26816] I/O error, dev nbd79, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1033.878293][T26816] Buffer I/O error on dev nbd79, logical block 0, async page read [ 1033.886703][T26816] I/O error, dev nbd79, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1033.897281][T26816] Buffer I/O error on dev nbd79, logical block 0, async page read [ 1033.905637][T26816] ldm_validate_partition_table(): Disk read failed. [ 1033.912393][T26816] I/O error, dev nbd79, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1033.922844][T26816] Buffer I/O error on dev nbd79, logical block 0, async page read [ 1033.932395][T26816] I/O error, dev nbd79, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1033.942548][T26816] Buffer I/O error on dev nbd79, logical block 0, async page read [ 1033.951497][T26816] Dev nbd79: unable to read RDB block 0 [ 1033.958356][T26816] nbd79: unable to read partition table [ 1033.971179][T26816] ldm_validate_partition_table(): Disk read failed. [ 1034.007567][T26816] Dev nbd79: unable to read RDB block 0 [ 1034.014046][T26816] nbd79: unable to read partition table [ 1034.219955][T28601] : Can't lookup blockdev [ 1035.298997][T28617] : Can't lookup blockdev [ 1036.739951][ T1165] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.180774][ T1165] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.209188][T28655] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2991'. [ 1037.381939][T28660] : Can't lookup blockdev [ 1037.507253][ T1165] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.161772][ T1165] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.185380][T23358] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1038.210476][T23358] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1038.219184][T23358] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1038.228091][T23358] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1038.253816][T23358] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1039.082909][ T1165] bridge_slave_1: left allmulticast mode [ 1039.093615][ T1165] bridge_slave_1: left promiscuous mode [ 1039.109359][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.176240][ T1165] bridge_slave_0: left allmulticast mode [ 1039.201425][ T1165] bridge_slave_0: left promiscuous mode [ 1039.218495][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.327642][T23358] Bluetooth: hci1: command tx timeout [ 1040.533216][ T1165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1040.558325][ T1165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1040.590112][ T1165] bond0 (unregistering): Released all slaves [ 1041.363810][T28673] chnl_net:caif_netlink_parms(): no params data found [ 1041.405397][T28852] ================================================================== [ 1041.413511][T28852] BUG: KASAN: slab-use-after-free in force_devcd_write+0x312/0x340 [ 1041.421451][T28852] Read of size 8 at addr ffff888061017000 by task syz.2.3003/28852 [ 1041.429379][T28852] [ 1041.431735][T28852] CPU: 0 UID: 0 PID: 28852 Comm: syz.2.3003 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 1041.431779][T28852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1041.431808][T28852] Call Trace: [ 1041.431819][T28852] [ 1041.431832][T28852] dump_stack_lvl+0x116/0x1f0 [ 1041.431884][T28852] print_report+0xc3/0x670 [ 1041.431925][T28852] ? __virt_addr_valid+0x5e/0x590 [ 1041.431971][T28852] ? __phys_addr+0xc6/0x150 [ 1041.432026][T28852] ? force_devcd_write+0x312/0x340 [ 1041.432056][T28852] kasan_report+0xe0/0x110 [ 1041.432096][T28852] ? force_devcd_write+0x312/0x340 [ 1041.432131][T28852] force_devcd_write+0x312/0x340 [ 1041.432163][T28852] ? __pfx_force_devcd_write+0x10/0x10 [ 1041.432194][T28852] ? __debugfs_file_get+0x1fe/0x840 [ 1041.432230][T28852] ? __pfx___debugfs_file_get+0x10/0x10 [ 1041.432271][T28852] full_proxy_write+0x13c/0x200 [ 1041.432310][T28852] vfs_write+0x25c/0x1180 [ 1041.432340][T28852] ? __pfx_full_proxy_write+0x10/0x10 [ 1041.432379][T28852] ? __pfx___mutex_lock+0x10/0x10 [ 1041.432428][T28852] ? __pfx_vfs_write+0x10/0x10 [ 1041.432466][T28852] ? __fget_files+0x20e/0x3c0 [ 1041.432500][T28852] ksys_write+0x12a/0x240 [ 1041.432532][T28852] ? __pfx_ksys_write+0x10/0x10 [ 1041.432564][T28852] ? rcu_is_watching+0x12/0xc0 [ 1041.432601][T28852] do_syscall_64+0xcd/0x230 [ 1041.432646][T28852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.432678][T28852] RIP: 0033:0x7f3ba8b8e169 [ 1041.432701][T28852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1041.432732][T28852] RSP: 002b:00007f3ba999d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1041.432761][T28852] RAX: ffffffffffffffda RBX: 00007f3ba8db5fa0 RCX: 00007f3ba8b8e169 [ 1041.432784][T28852] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000003 [ 1041.432821][T28852] RBP: 00007f3ba8c10a68 R08: 0000000000000000 R09: 0000000000000000 [ 1041.432860][T28852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1041.432882][T28852] R13: 0000000000000000 R14: 00007f3ba8db5fa0 R15: 00007ffeaf0980a8 [ 1041.432914][T28852] [ 1041.432926][T28852] [ 1041.646585][T28852] Allocated by task 27364: [ 1041.651022][T28852] kasan_save_stack+0x33/0x60 [ 1041.655725][T28852] kasan_save_track+0x14/0x30 [ 1041.660436][T28852] __kasan_kmalloc+0xaa/0xb0 [ 1041.665058][T28852] vhci_open+0x4c/0x430 [ 1041.669241][T28852] misc_open+0x35a/0x420 [ 1041.673516][T28852] chrdev_open+0x231/0x6a0 [ 1041.677976][T28852] do_dentry_open+0x741/0x1c10 [ 1041.682765][T28852] vfs_open+0x82/0x3f0 [ 1041.686862][T28852] path_openat+0x1e5e/0x2d40 [ 1041.691466][T28852] do_filp_open+0x20b/0x470 [ 1041.695982][T28852] do_sys_openat2+0x11b/0x1d0 [ 1041.700682][T28852] __x64_sys_openat+0x174/0x210 [ 1041.705556][T28852] do_syscall_64+0xcd/0x230 [ 1041.710079][T28852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.715997][T28852] [ 1041.718328][T28852] Freed by task 27364: [ 1041.722401][T28852] kasan_save_stack+0x33/0x60 [ 1041.727095][T28852] kasan_save_track+0x14/0x30 [ 1041.731789][T28852] kasan_save_free_info+0x3b/0x60 [ 1041.736848][T28852] __kasan_slab_free+0x51/0x70 [ 1041.741656][T28852] kfree+0x2b6/0x4d0 [ 1041.745571][T28852] vhci_release+0xbb/0xf0 [ 1041.749908][T28852] __fput+0x3ff/0xb70 [ 1041.753907][T28852] task_work_run+0x14d/0x240 [ 1041.758508][T28852] do_exit+0xafb/0x2c30 [ 1041.762688][T28852] do_group_exit+0xd3/0x2a0 [ 1041.767226][T28852] __x64_sys_exit_group+0x3e/0x50 [ 1041.772282][T28852] x64_sys_call+0x1530/0x1730 [ 1041.776992][T28852] do_syscall_64+0xcd/0x230 [ 1041.781532][T28852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.787447][T28852] [ 1041.789781][T28852] The buggy address belongs to the object at ffff888061017000 [ 1041.789781][T28852] which belongs to the cache kmalloc-1k of size 1024 [ 1041.803845][T28852] The buggy address is located 0 bytes inside of [ 1041.803845][T28852] freed 1024-byte region [ffff888061017000, ffff888061017400) [ 1041.817560][T28852] [ 1041.819890][T28852] The buggy address belongs to the physical page: [ 1041.826312][T28852] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888061010000 pfn:0x61010 [ 1041.836385][T28852] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1041.844888][T28852] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 1041.853398][T28852] page_type: f5(slab) [ 1041.857399][T28852] raw: 00fff00000000240 ffff88801b441dc0 ffffea00018bee10 ffffea0001409c10 [ 1041.865994][T28852] raw: ffff888061010000 000000000010000c 00000000f5000000 0000000000000000 [ 1041.874596][T28852] head: 00fff00000000240 ffff88801b441dc0 ffffea00018bee10 ffffea0001409c10 [ 1041.883277][T28852] head: ffff888061010000 000000000010000c 00000000f5000000 0000000000000000 [ 1041.891962][T28852] head: 00fff00000000003 ffffea0001840401 00000000ffffffff 00000000ffffffff [ 1041.900647][T28852] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1041.909320][T28852] page dumped because: kasan: bad access detected [ 1041.915733][T28852] page_owner tracks the page as allocated [ 1041.921454][T28852] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 2979, tgid 2979 (kworker/u8:10), ts 104156240816, free_ts 34549379998 [ 1041.940939][T28852] post_alloc_hook+0x181/0x1b0 [ 1041.945730][T28852] get_page_from_freelist+0x135c/0x3920 [ 1041.951306][T28852] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 1041.957226][T28852] alloc_pages_mpol+0x1fb/0x550 [ 1041.962111][T28852] new_slab+0x244/0x340 [ 1041.966286][T28852] ___slab_alloc+0xd9c/0x1940 [ 1041.970977][T28852] __slab_alloc.constprop.0+0x56/0xb0 [ 1041.976364][T28852] __kmalloc_noprof+0x2f2/0x510 [ 1041.981248][T28852] ieee802_11_parse_elems_full+0x1d7/0x3780 [ 1041.987173][T28852] ieee80211_inform_bss+0x10b/0x1140 [ 1041.992483][T28852] cfg80211_inform_single_bss_data+0x8e7/0x1df0 [ 1041.998765][T28852] cfg80211_inform_bss_data+0x224/0x3bd0 [ 1042.004431][T28852] cfg80211_inform_bss_frame_data+0x26e/0x7a0 [ 1042.010522][T28852] ieee80211_bss_info_update+0x310/0xab0 [ 1042.016171][T28852] ieee80211_ibss_rx_queued_mgmt+0x1905/0x2fd0 [ 1042.022348][T28852] ieee80211_iface_work+0xbf4/0x1020 [ 1042.027673][T28852] page last free pid 1 tgid 1 stack trace: [ 1042.033483][T28852] __free_frozen_pages+0x69d/0xff0 [ 1042.038614][T28852] free_contig_range+0x135/0x3f0 [ 1042.043569][T28852] destroy_args+0x66f/0x830 [ 1042.048081][T28852] debug_vm_pgtable+0x130e/0x2d50 [ 1042.053137][T28852] do_one_initcall+0x120/0x6e0 [ 1042.057930][T28852] kernel_init_freeable+0x5c2/0x900 [ 1042.063149][T28852] kernel_init+0x1c/0x2b0 [ 1042.067487][T28852] ret_from_fork+0x45/0x80 [ 1042.071913][T28852] ret_from_fork_asm+0x1a/0x30 [ 1042.076708][T28852] [ 1042.079036][T28852] Memory state around the buggy address: [ 1042.084676][T28852] ffff888061016f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1042.092789][T28852] ffff888061016f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1042.100866][T28852] >ffff888061017000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1042.108935][T28852] ^ [ 1042.113011][T28852] ffff888061017080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1042.121083][T28852] ffff888061017100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1042.129152][T28852] ================================================================== [ 1042.159347][T28852] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1042.166591][T28852] CPU: 1 UID: 0 PID: 28852 Comm: syz.2.3003 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 1042.178686][T28852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1042.188765][T28852] Call Trace: [ 1042.192057][T28852] [ 1042.195000][T28852] dump_stack_lvl+0x3d/0x1f0 [ 1042.199618][T28852] panic+0x71c/0x800 [ 1042.203549][T28852] ? __pfx_panic+0x10/0x10 [ 1042.207987][T28852] ? mark_held_locks+0x49/0x80 [ 1042.212800][T28852] ? preempt_schedule_thunk+0x16/0x30 [ 1042.218201][T28852] ? force_devcd_write+0x312/0x340 [ 1042.223345][T28852] ? preempt_schedule_common+0x44/0xc0 [ 1042.228834][T28852] ? force_devcd_write+0x312/0x340 [ 1042.233972][T28852] check_panic_on_warn+0xab/0xb0 [ 1042.238941][T28852] end_report+0x107/0x170 [ 1042.243297][T28852] kasan_report+0xee/0x110 [ 1042.247744][T28852] ? force_devcd_write+0x312/0x340 [ 1042.252885][T28852] force_devcd_write+0x312/0x340 [ 1042.257839][T28852] ? __pfx_force_devcd_write+0x10/0x10 [ 1042.263312][T28852] ? __debugfs_file_get+0x1fe/0x840 [ 1042.268529][T28852] ? __pfx___debugfs_file_get+0x10/0x10 [ 1042.274100][T28852] full_proxy_write+0x13c/0x200 [ 1042.278974][T28852] vfs_write+0x25c/0x1180 [ 1042.283322][T28852] ? __pfx_full_proxy_write+0x10/0x10 [ 1042.288730][T28852] ? __pfx___mutex_lock+0x10/0x10 [ 1042.293793][T28852] ? __pfx_vfs_write+0x10/0x10 [ 1042.298582][T28852] ? __fget_files+0x20e/0x3c0 [ 1042.303280][T28852] ksys_write+0x12a/0x240 [ 1042.307629][T28852] ? __pfx_ksys_write+0x10/0x10 [ 1042.312497][T28852] ? rcu_is_watching+0x12/0xc0 [ 1042.317284][T28852] do_syscall_64+0xcd/0x230 [ 1042.321815][T28852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.327721][T28852] RIP: 0033:0x7f3ba8b8e169 [ 1042.332148][T28852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1042.351788][T28852] RSP: 002b:00007f3ba999d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1042.360222][T28852] RAX: ffffffffffffffda RBX: 00007f3ba8db5fa0 RCX: 00007f3ba8b8e169 [ 1042.368205][T28852] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000003 [ 1042.376187][T28852] RBP: 00007f3ba8c10a68 R08: 0000000000000000 R09: 0000000000000000 [ 1042.384172][T28852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1042.392151][T28852] R13: 0000000000000000 R14: 00007f3ba8db5fa0 R15: 00007ffeaf0980a8 [ 1042.400150][T28852] [ 1042.403479][T28852] Kernel Offset: disabled [ 1042.407808][T28852] Rebooting in 86400 seconds..