last executing test programs: 11.349291474s ago: executing program 0 (id=2550): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000440)="671d264add69b6440843b6e6688a2b5ad9df2669e6f9cd236532b20ed763ac8caf4b9b4c30b530ac6ebbff950e1a647d6a08a1b55dde5a409b4a", 0x3a) bind$auto(r0, &(0x7f0000000000)=@phonet={0x23, 0x2, 0x5, 0x7}, 0x7) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x3, 0x0, 0x8009) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/ifb0/queues/tx-0/byte_queue_limits/limit_max\x00', 0xb02, 0x0) madvise$auto_MADV_MERGEABLE(0x8, 0x5, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = socket(0xa, 0x801, 0x84) sysfs$auto(0x2, 0x100000000000036, 0x0) getsockopt$auto(r1, 0x84, 0x7e, 0x0, 0x0) sendmsg$auto_OVS_FLOW_CMD_DEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="101bb018c07c2d4f9c0b89e287557045e55fc411eff7f949cf40a0e1d7721ed4b63f8f8165d101a4408ec9ef1c733ef8f53734e28b002a6da6a8f64b", @ANYRES16=r2, @ANYBLOB="01002dbd7000fddbdf250200000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x800) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) mmap$auto(0x3, 0x402000b, 0x2000006, 0xeb1, 0x401, 0xfff) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NFC_CMD_SE_IO(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYRESDEC=r0, @ANYRES16=0x0, @ANYBLOB="100028bd70001380cb346a0caa4f84987d5f21dbde98fce43a26e764b500001205000c002c000000d422da74bcae3d6fa8c2bb5665b8acaebcc2b820854bfa2dc98f70f563ca136aaa2dca6ac8475d1175c910ff071ef251242a7995481466b70adca6597836ce5c67a9cb5cfaa9f3f4b8e808df0bbfffc2005379ffdd18958fe1d85a1511323ed1dbf9cf3be4a154c0114aa3e0a77ae7dcc7412fec6e92f927be868deee8ed46a6d524e7892b82d44684b39650f87a292f2d58fed3"], 0x40}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x101, 0x100000004, 0x100000002, 0x0, 0x200000000000006, 0x2) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x3, 0x9) read$auto(0x3, 0x0, 0xf34) write$auto(0x3, 0x0, 0xffd8) 8.116014363s ago: executing program 1 (id=2558): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r0, 0x0, 0x3f1) getdents$auto(r0, 0x0, 0xa2b0) mmap$auto(0x0, 0x4994, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/irq/3/smp_affinity_list\x00', 0x8f3b7a51b8162d21, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vim2m.0/media2/power/runtime_status\x00', 0x181482, 0x0) r1 = socketpair$auto(0xffff7fff, 0x4, 0x80000001, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_TIOCSTI2(r2, 0x5412, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x169780, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) epoll_create$auto(0x3f) socket(0x1e, 0x4, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0xfffffdc2) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmmsg$auto(r1, &(0x7f0000000380)={{&(0x7f0000000840)="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", 0x6, &(0x7f0000000180)={&(0x7f00000001c0)="fc00decbe31825c7ad337748f17e2bf101683db1d43673c679b3c0e6277b8f086828284ffa685e245f8ad9d1d1b758130aff189f629d7c02d5163a26bb6e67cc1a7ab1f2430bfd0d2cb0d928179c847abb99b6b545a71b328beb04648fd5e534521baf38adc169379b1f7359bc215d0468d1ef1ae4d94768b7cad708850bf3fcf261e03069d3137704709b5cd94854cd97c1b86f7ce550ae11", 0x7ff}, 0x699b, &(0x7f00000002c0)="7c70718c3004605f559560f2640d0c11f05b629e617858a81224601d06d42e61b323f122440a68ca36d09ec1f6c3956321717f142dda4c255c4da13d20ae6a878aba803e47bb2ff7e13d475f14c792ad2ef4d49162b8b5b6aec5bab343d30a02ea7d9547aa209becebbe461f7351a6e4098ca8d389d321e00c2c583acc56aaa750856aab860bb5bef79fcc82f3c69093f5b853521855fc9fb6b32a1a605bfe87224ec754de5d1ebd8031b7dc75f1ef375b3e5e47", 0x2a, 0x9}, 0x1}, 0x2, 0xc7c) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r4 = memfd_create$auto(0x0, 0xe) fcntl$auto(0xff80000000000000, 0x409, 0x13) fallocate$auto(r4, 0x3, 0x2, 0x4) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), 0xffffffffffffffff) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/shm\x00', 0x2a040, 0x0) sendmsg$auto_HWSIM_CMD_GET_RADIO(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=0x0, @ANYBLOB="cf5728bd700049ca3afedb2f1c0500000000000000c4661b31008edf2506"], 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x10) 8.115528052s ago: executing program 3 (id=2560): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/loop15/queue/rotational\x00', 0xa081, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x31, 0x8000, 0x1ffde, 0x1, 0x2, 0x1, 0x9, 0x3, 0x5, 0x8, 0x3002, 0x9, 0xb, 0x80010002, 0x80, 0xd8f9, 0x0, 0x7, 0x2, 0x203, 0x400, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MODULE_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="a96b25bd7000fcdbdf252200000018000180140002006970766c616e31"], 0x2c}, 0x1, 0x0, 0x0, 0x18000}, 0x1000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_SESSION_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'vcan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x40000040) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r5 = socket(0x10, 0x2, 0x0) r6 = fcntl$auto(0xffffffffffffffff, 0x400, 0x0) ioctl$auto_BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000000c0)={"286251b36d6e198d95860f6f27964f8d0cd5d454c9946098fb3df193a80eb45e", 0xd, 0x4, 0x2, 0x6, 0x2, 0xffffffffffffffff}) fcntl$auto(r6, 0x2dd, r7) flock$auto(r6, 0x7) ioctl$auto_EXT4_IOC_GETFSUUID(r6, 0x8008662c, &(0x7f00000003c0)={0x9, 0xf05, "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"}) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0xfc, &(0x7f0000000100)={0x0, 0xfc6}, 0x2, 0x0, 0x7, 0x3}, 0x800}, 0x7, 0x4008) ioperm$auto(0x2, 0x3, 0x1) r8 = clone$auto(0x1ff, 0x3, 0x0, 0xfffffffffffffffd, 0xffffffff00000000) futimesat$auto(0x2, 0x0, 0x0) ioperm$auto(0x2, 0x8000, 0x2b325536) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000380), 0x1f52c1, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mq_notify$auto(r0, &(0x7f0000000080)={@sival_ptr=&(0x7f0000000000)="7e14349ee0e295ebb1e4", @inferred=r0, 0x0, @_tid=r8}) 7.706805155s ago: executing program 1 (id=2562): socket(0x1d, 0x2, 0x6) r0 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) read$auto_proc_single_file_operations_base(r0, &(0x7f0000001540)=""/4096, 0x1000) setsockopt$auto(0x3, 0x6a, 0x7, 0xffffffffffffffff, 0x3) mmap$auto(0x0, 0x20009, 0x20000000000000e2, 0xeb1, 0x405, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) ioctl$auto_XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, &(0x7f0000000080)={0x20000000, @raw=0x3, @raw=0x7f, 0x80000000, 0x3, '\x00', {0xdf1, 0x8000, 0x7, 0xee00, 0xffffffffffffffff, 0x100, 0x8, 0x9, {0x0, 0x20000000}, {0x3, 0x3}, {0x2, 0x4}, 0x6, 0x2, 0x100, 0x6, 0x400, 0x9, 0x7f, 0x9, 0x1000, 0x3, '\x00', 0x5893, 0x6, 0xa, 0x10}}) sendmsg$auto_TIPC_NL_MEDIA_SET(r1, &(0x7f0000001500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)={0x135c, r2, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x1267, 0x3, 0x0, 0x1, [@nested={0x7d, 0x108, 0x0, 0x1, [@generic="2c8ccad337b5aa900482683dfbfc7da0a66aa16834c36eefbdaacd62275f90cc0a3684202ec81c3548b4270dd1e767476ce51e95e8a688cdd76cf65d4c7d170e052c217894c073d32f9fc2871bb5462dba3ca5a20e7f54e4a815e9e47634205db10272257020510a589ad5a9961e2c6175", @typed={0x8, 0x26, 0x0, 0x0, @uid=r3}]}, @generic="341125c2998942a05d98c11e9beaa87e12348407919dfc8d482d3b385ad02a48e48843944e3fc285a65671ee083d93f1", @nested={0x116f, 0xee, 0x0, 0x1, [@generic="17d2cb73671fe25460a36bef7c9e35f35947bd8ceb4398cba02d", @generic="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", @generic="046369d6608fa438aad4a5adedab47ae4aa8e9d127e0cef5908dc8602092f9f866b129a9b215a23324767c850c1b1b865adaa62fbc015c951a4025d7b69a079998cd28a55a58be26959485d578e49d799e0071d730ef35d777dc358c84dc7766cb10eb55bb09331dfe233bdb8536958a94851084ebd9a16f4f272039addba6f140857dde37b343939cfc3896246342569243bc0989a9cd57c99bb1171cc8fc23a8e60757b388180bdee8d8d1ea397bc9d1a54428aa6f0910f1a09230d749fe45857424ca7bcbb0872b7f4d92ebc079d83d65138abef643800f3cf0217ffc67a0c56ab7815eb98f8f8b2b32fa78a7bc84a96fe1", @typed={0x4, 0x6d}, @generic="500c73abd4393bc6833b36b4f141b3fa45ba2feb1b24003137495d0a84a8f3a1e912c131e9f66aa33c037f9ac039feef2acc661800286a02d2173c2c6e5c6483d677f672a72b", @typed={0x5, 0xbb, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x151}, @nested={0x4, 0x1}, @nested={0x4, 0x51}]}, @generic="649b676a6a3bd83aa3a944915ee57c67c000f4ed7a14137c4aadef73f131f0a62d276d9ad9e4f1e56caf9cfc6a6f8f9ec6e192fe4803ad6de57b0240442c35c2899d", @generic='}']}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@typed={0xc, 0xaf, 0x0, 0x0, @u64=0x1c000}, @typed={0x8, 0xc9, 0x0, 0x0, @ipv4=@empty}, @typed={0x8, 0xa6, 0x0, 0x0, @ipv4=@multicast2}]}, @TIPC_NLA_UNSPEC={0xbe, 0x0, "5ffe306b8cf704d0e72889e8447608ea3c7715d6c0e7646a4a71247a7a59eb5ade4896a366d400ffae258ec712589a615112c8c0ae678132a2923b4345f6782e208b7688bc0cfa58650202765312cb11e352175590deb99206dd6cd67d6b28814d21e5711fec31ae01d8c7b8bc4823669769efcb15e4513227d9f54161766ef8b9377d9a7a75ea8d760f47cf6f4df6e0758d0943c13082aa90128fd4ab43dc5f878ad7bf7e26898200e98b60e7278d746308209662fee5760e70"}]}, 0x135c}, 0x1, 0x0, 0x0, 0x4000044}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) r4 = socket(0x1d, 0x3, 0x1) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$auto(r4, 0x65, 0x6, 0x0, 0x3) close_range$auto(0x2, 0x8, 0x0) 7.595901095s ago: executing program 0 (id=2563): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) io_uring_setup$auto(0x488, 0x0) mmap$auto(0x0, 0x8, 0x2, 0x12, 0x2, 0x8000) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) semtimedop$auto(0x0, &(0x7f0000000300)={0x7, 0xffff, 0x70}, 0x1f4, 0x0) 7.349158257s ago: executing program 3 (id=2564): set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) mmap$auto(0x8, 0x40009, 0x3, 0x8e5e, 0x7, 0x28080) ioctl$auto_IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) shmctl$auto(0x0, 0xd, 0x0) getrandom$auto(0x0, 0xe06, 0x3) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0) mmap$auto(0x1, 0x202000b, 0x3, 0xeb1, r0, 0x4) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xc01) setreuid$auto(0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000480)=""/4096, 0x1000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto(r1, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0xc}, 0x0) writev$auto(0x1, 0x0, 0x1) readahead$auto(0xffffffffffffffff, 0x6, 0x2) r2 = socket(0x23, 0x5, 0x0) listen$auto(r2, 0x5ed) unshare$auto(0x40000080) r3 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x42842, 0x95) read$auto(r3, 0x0, 0x1) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/rpc/use-gss-proxy\x00', 0x48041, 0x0) write$auto(r4, 0x0, 0x6) socket(0x2, 0x1, 0x0) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r5, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x9c, 0xf4, 0xb0, @raw=0x89de}}) 6.830062137s ago: executing program 1 (id=2573): mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) clock_adjtime$auto(0xa, &(0x7f0000000340)={0x5, 0x0, 0x7fffffffffffefff, 0x934c, 0x3, 0x8, 0x6052, 0x0, 0x0, 0x20004, 0x3, {0x7, 0xfffffffffffffffe}, 0x1, 0x10000000000056, 0x7f, 0x0, 0x0, 0x3, 0x47f, 0x3, 0xffffffffffffff86, 0x400, 0x39094000}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) ioctl$auto(r0, 0x3b8a, 0x38) mmap$auto(0x101, 0x9877dd4, 0x7ff, 0x11, r0, 0x96) r1 = socket(0x10, 0x2, 0x4) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fedbdf251c00000018000180140025006e657464657673696d30000000000000"], 0x2c}}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004540), r4) sendmsg$auto_OVS_VPORT_CMD_DEL(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x20, r5, 0x1, 0x70bd27, 0x25dfdc01, {}, [@OVS_VPORT_ATTR_UPCALL_STATS={0x4}, @OVS_VPORT_ATTR_IFINDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x240400c0) sendmsg$auto_OVS_VPORT_CMD_DEL(r1, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000980)={0x1ac, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_OPTIONS={0xfc, 0x4, 0x0, 0x1, [@typed={0x1c, 0x6e, 0x0, 0x0, @binary="98db627f547a4d75ce7bffecf452b77b05c0686215be2e50"}, @nested={0x93, 0x105, 0x0, 0x1, [@nested={0x4, 0x1f}, @typed={0xc, 0x69, 0x0, 0x0, @u64=0x2}, @typed={0x8, 0xe2, 0x0, 0x0, @fd=r1}, @typed={0x5, 0x3b, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0xe7}, @typed={0x8, 0x148, 0x0, 0x0, @pid}, @nested={0x5d, 0x62, 0x0, 0x1, [@generic="f81dab5cf0ecdada910d0fb8ea80dfc92c4a246cd04e3274d768bb74fb74af39d8380d92e435447047bfa234006f61b3059a869d9fb4173e4f24ebf9bf7dcfe29ccd634d60", @typed={0x14, 0x136, 0x0, 0x0, @ipv6=@mcast2}]}, @generic="58b409"]}, @nested={0x48, 0x2f, 0x0, 0x1, [@typed={0x8, 0x76, 0x0, 0x0, @u32=0xa0b}, @nested={0x20, 0x54, 0x0, 0x1, [@typed={0x1b, 0xe5, 0x0, 0x0, @binary="ec548b59695e7ef2decbd8ed277c55a91e86d43c6a641d"}]}, @typed={0xc, 0x123, 0x0, 0x0, @u64=0xd}, @typed={0x8, 0x9, 0x0, 0x0, @fd=r0}, @typed={0x6, 0xf5, 0x0, 0x0, @str='#\x00'}]}]}, @OVS_VPORT_ATTR_STATS={0x44, 0x6, {0x8000000000000001, 0x5, 0x8000000000000001, 0x9, 0xca39, 0x1, 0x100000000, 0x8}}, @OVS_VPORT_ATTR_PORT_NO={0x8, 0x1, 0x3}, @OVS_VPORT_ATTR_UPCALL_STATS={0xc, 0xa, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @OVS_VPORT_ATTR_STATS={0x44, 0x6, {0x8, 0xfffffffffffffffc, 0x2, 0x9be, 0xcbb, 0x28000000000, 0x6f5, 0x1}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0xc0}, 0x20000081) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/inhibited\x00', 0x20b42, 0x0) sendfile$auto(r6, r6, 0x0, 0x4f64a1d2) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram7/trace/start_lba\x00', 0x60000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000001080)=""/91, 0x5b) socket(0x10, 0x3, 0x6) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/stable_node_dups\x00', 0x20000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r8, &(0x7f0000000280)=""/222, 0xde) r9 = socket(0x10, 0x2, 0x4) r10 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r10, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb0346611e51cf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c6014100005800c00c50003000000000000000c02368008027a8087010c800800e800", @ANYRES32=r9, @ANYBLOB="0800fb00", @ANYBLOB="098da7ed85e545a5"], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000001100)="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") write$auto(r1, &(0x7f0000000280)='/\x00', 0x6) ioctl$auto_VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, &(0x7f00000001c0)={0x7, 0x9}) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 6.703071835s ago: executing program 0 (id=2566): socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x10051c, 0x6, 0x0, 0xffffffffffffffff, 0x80000001) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x0, 0x0, 0x0, 0x0, 0x0, 0x2) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r0 = set_tid_address$auto(0x0) r1 = syz_open_procfs$namespace(r0, &(0x7f0000000080)) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) fcntl$auto(r2, 0x402, 0x2) getdents$auto(r1, 0x0, 0x3f1) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x3, &(0x7f0000000000)='Q**\x00', &(0x7f0000000040)="2b24c0bfbf", 0x0) syz_clone3(&(0x7f0000000200)={0x182000080, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x60) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) fsconfig$auto_HIDEPID_NO_ACCESS(r3, 0x6, &(0x7f0000000100)='Q**\x00', &(0x7f0000000280)="710eac265b7a93a8c51cad9633ac67cf67f5fb6e4c32d611203f1e506e13b0ac52495290886c6fa100ef121a91d4f5c2812a3ef1b67e92a01e8bafd46e2e499a5b617bb9a5f8cfa3f514ecb31c5f870cbce325cf15a3598e20e784a2ec63669ad65a18349c5147b369c0ab209d4d70773d0f93d1fb2af18aee5d880eb58af73a0457e6cf6244e41c781480fc9c0205db6bd1478e855ff9fbd1a93a1a0cff9d92fe01ae68cd9eeb859d209877883e5195949c2474e1101375ee49e9a7ac32cd557232d8d51a9b4a236fba00a7a69df25773820de14ebfa72d48c611d45af8c07afca3af847bb5767a7ad0466641fef1cc42a07b9d67fe6d8e", 0x1) munmap$auto(0x8000, 0xffffffff) 6.616149649s ago: executing program 1 (id=2567): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) add_key$auto(&(0x7f0000000400)='/dev/snd/seq\x00', &(0x7f0000000440)='\\\x00', &(0x7f0000000480)="f7bb9bdcdb990936b5d9b9d0e8e68212530ce0384bdcc28c3a507d89a9ef81ca32ebc4c49e65dd8438b46a6801168717447c06587fe04789c592f260d6cfbad1558ed838ffe47884566fb13c19d5c7dc4f7436ec265ddeb1266bed82790af1e92d9c23752485bbe7e365b445bc94a4648863bfa076ff1198cc587b4c4f6794f6fbc61aeb2cac0eca188666cfbd6f6db268cf70a955e406c1baadf650b12b224cac0557cee5e0a4bc14a6b4e761d37712088a266acad5d1b5e3e2773365e3d0d6c140bb94930e2f8511", 0x7c9, 0x10) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r1, &(0x7f00000000c0)="632d1bfe595046ab5c40bd6163307acb6d16baef6176e669a216aae1324ccafdd80500ffffffffdfff1a0e00"/56, 0x38) r2 = io_uring_setup$auto(0x6, 0x0) r3 = socket(0x23, 0x5, 0x0) socket(0x15, 0x5, 0x0) r4 = ioctl$auto_TUNDETACHFILTER(r2, 0x401054d6, &(0x7f0000000100)={0x1ff, &(0x7f0000000000)={0x0, 0x6, 0xeb, @inferred=r3}}) r5 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000180), r0) sendmsg$auto_SMC_NETLINK_ADD_UEID(r4, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x1c0, r5, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@SMC_NLA_EID_TABLE_UNSPEC={0xea, 0x0, "91fd92c802f6623727abf36d188aaa463296873f4ec08ea324c1b3c095099a937615c5336cd5d0370d51527ee127d263879ead8db7958498aa175f71600a4142dae1d8423a72c2e66498b3e0af7fddbff451860d4b70424fad45ebe4b28276e745a348c570c1a7692a9d8341004a2e4fa11266a09d837ebae28e708ca252f47e0902726afcc1589b258fa2f7729ca8776cec9268661075dc2f32f0da1765371d7054a0eb70ff21cf035d8139767847f463762472a6cd8721c58b02ab46a45d89b4f97e3110b75055a3b9cef56225168d8d9f6367e8266f3e157fe9b0ac0eac942d4a5a1a2cd9"}, @SMC_NLA_EID_TABLE_UNSPEC={0xbf, 0x0, "550cb7ed7cbb14c7dbaad9ca69dac87f485fa05226359a081de8a5046d52cb90a9287ea5dc5562bbf77cde7dc1b5b53251d660a8b682901c0fadd368469c9e1e4254463c20dd2b07d675f0aa4b4e5452dd48d3cc386dac7abf2952fe5d3e4eeea5cbd7d1dee053eda48a930102e299a077057a6fd08f961f1518f0e40027cbcadc7e917561365eff017dd69124b583bcfd723aa10e06dc78abec673f1a829f2c57f99b6f21574933f0dd6f3d62e086c298641da74d855acd8ab2df"}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x1}, 0x40041) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) 5.861071946s ago: executing program 3 (id=2570): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), r0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.7/usb8/ltm_capable\x00', 0x181800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x48, 0x0) fsopen$auto(0x0, 0x1) sysfs$auto(0x2, 0x5, 0x0) fsopen$auto(0x0, 0x1) fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x1, &(0x7f0000000200)='I\xee\"\xe3\xb7\xcfD\xe5\xb1\x05\x1e#\xff1<\xd9h[e\xdf\xc0M\xa2\x00\v\x97\xb5\xd4\x94\x99u\x9e\xf4O\x1a\xb1\x05\xb8\xcb\x96\fd\xa3\xf9&\xc9~\x10\x06X\a\xc8\xb7\x97\xc7M\x83\'^\xc9\x9e\xccAsv\xce8sw\v\xac\xcd\xa2B\xf8.\xce\xe6n\xfe\xd6\xc8^W>Rz`C+\x0e\x8c<\xc5\x8f\xe6\x0f\x14\xfa\x9ea4>\xd8O[{\xede\xfd\xbc\xc7\xbd4_\xbc\xc6\x06\xe5h\x9e\xf5/4\xe8\xcfc\x95\xbb~\xd9.\xb3\x84\xb8K\xa7\xca\xda\xc8\x11u\xa1\x1d\x9d\xe1%\xc0m\xf6%1\xba\xe7^\xed0\xdc\x86\xeaG)?p,Up \xe9\b\x14\xaf\xbf\xd9\xc3,\xb8\x17\x10\x9f\x92\x95@),A\xb4\x92Q\x86\xbe\xed=p\x1b\x9d\xd4\x99_]K\xce.\x00\x00\x00\x8eDv\x0fl\xed\x93ey\xf9\x19\xf0\x9d\xf5\xfe\xed\xc7Q\xc0ZJ\xc9*7\xf2\x1a\xa7\xb3\xc6v\v\xe1u\x16:\x15\xefel\xf0\x8c/\xa2\x95\xc1\xacd\xc9\a\xe5\x888F\xaa\xce\x94\xa2zsx\xea\x96\x7f~]\xdbj\xd1#\x94K\xcf\x11l\xe5Z\xec\xa6B\x90\xb6\xa3`\x88\xd4\x87\x17\x8a\xedFx\x95#\x83\x99\x00\xc6Z\x1au\x8e\xa7}\xa7\xe9\x83X\xa3\xad\xe2T\xea\xa0\xba\xd7R8T\x00\x8e0h\x8ck4\x15\xf3sh0\xd3\x1e\xedU@\xab\xc0g\xeeT\xc5\x8d\x9b\x188x)\xf0i]\xdcf\xdd\xf9\xffA\"ZQ\x8d\x15\xff\xf3WYX\x8a/\xb36\x1d\x8e7\xb2d3\xe8\xf4\x1e3\xec\xfe\xbf\xbbo\xbb\xd2Z\x89:\xa2\xc8n8k\xa8\xba\xa5E\x9f\xbe>3,\xcb\xa2\xa7q \xe2', &(0x7f0000000280), 0x0) pread64$auto(r2, 0x0, 0xedd, 0x4) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7020f8dbdf250100000008000200", @ANYRES8=r0, @ANYBLOB="080001004866520008000200", @ANYRESOCT=0x0, @ANYRES32=r0], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x80) openat$auto_ubifs_dir_operations_ubifs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci1/rfkill6\x00', 0x40040, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r3) 5.510037759s ago: executing program 1 (id=2571): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu0/stats\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xfffd}, 0x3) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x80900, 0x0) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20a01, 0x0) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) mmap$auto(0xb2, 0x14, 0xffb, 0x8000000008015, r0, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) io_uring_setup$auto(0x3501, &(0x7f0000000080)={0x80, 0x1000, 0x8, 0x5, 0x3, 0xfffffff1, r0, [0xbc, 0xffff, 0x40], {0x81, 0x9, 0x0, 0x80000000, 0x3, 0x101, 0xffff, 0x0, 0x6}, {0x7, 0xa, 0xf, 0x7fff, 0x3, 0x0, 0x0, 0xfffffffa, 0xc}}) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) madvise$auto(0x0, 0x20499d, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) open_tree$auto(0xffffffffffffffff, 0x0, 0x74ee) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) ioctl$auto_SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESHEX=r2], 0x24}, 0x1, 0x0, 0x0, 0x4c844}, 0xd0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_CGROUPSTATS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c9d0}, 0x4080) r4 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='r'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x200440c0) sendmmsg$auto(r4, &(0x7f0000000080)={{0x0, 0x8001c01, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7}, 0x3d55, 0x0) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) 5.509738038s ago: executing program 2 (id=2572): mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) ioctl$auto_TCFLSH2(r0, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto(r0, 0x89f1, r0) mmap$auto(0x3, 0x432, 0xdf, 0x8000000009b72, r0, 0x8000) socket(0x10, 0x6, 0xc) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x11, 0x80003, 0x300) rt_sigqueueinfo$auto(0x0, 0xc74, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0x14, 0x7e73, @_timer={0x0, 0x80000001, @sival_ptr=0x0, 0x5}}}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/hid/drivers/hid-alps/bind\x00', 0xa0822, 0x0) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000003c0)=""/192, 0xc0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0p/sub0/info\x00', 0x1c1282, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000280)=""/65, 0x41) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) ppoll$auto(0x0, 0x9, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) sysfs$auto(0x2, 0x23, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x9) openat$dir(0xffffffffffffff9c, 0x0, 0x40342, 0x22) 4.820836353s ago: executing program 0 (id=2574): mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x42, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0x20000000000, 0x8000) sendmsg$auto_TASKSTATS_CMD_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x400c0}, 0x4040000) shmctl$auto(0x3, 0xffffffff, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x200000, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x141040, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp1\x00', 0x442140, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x200c00, 0x0) ioctl$auto_SOUND_MIXER_READ_STEREODEVS2(r1, 0x80044dfb, &(0x7f0000000340)="68cb755690a5a62add2cd0ea13f7845d187867996dec71c5cf90a64e4d0c0000000000000000000000000000000000f564ecdb101e367d446f549748b55bd9b59cc083a1352a54bfd365ece9b571e22a26bc1d3b40d94f91c35dac9421a4d0c0a6b4f46d7d95ab3197f3fb73c5be636d16fc9d0a733238fd680eba88fd1f8335400f9f68e5fcf3b54452fd8cf20ca8ad601d410199bdc4a45180b6f1a600753333898ce926d03791737e4bf41841f2299bdae68b893fee330f60b784e3708f652ffd8f7b8625ef18e47ee09996") r2 = prctl$auto_SECCOMP_MODE_STRICT(0x4f4, 0x1, 0x0, 0x80000001, 0x0) ioctl$auto_XFS_IOC_FREESP(r2, 0x4030580b, &(0x7f00000002c0)={0x3, 0xf347, 0x4, 0x7, 0x3b7}) r3 = socket(0x10, 0x2, 0x0) ioperm$auto(0x7, 0x86, 0x9) memfd_secret$auto(0x0) r4 = socket(0x2, 0x1, 0x0) getsockopt$auto(r4, 0x0, 0x63, 0x0, &(0x7f00000000c0)=0x44) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r3, 0x0, 0x10a, 0x8, 0x0) r5 = open(0x0, 0x4243, 0xe1d2b27bdc14aab4) flock$auto(r5, 0x1) ioctl$auto_RTC_PARAM_GET(r5, 0x40187013, 0x0) open_tree$auto(r0, 0x0, 0x1001) close_range$auto(0x2, 0x8, 0x0) 4.772107845s ago: executing program 3 (id=2575): syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x11, 0x3, 0x10) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/ip_vs_conn\x00', 0xf00, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dri/card1\x00', 0x6082, 0x0) r1 = socket(0xa, 0x2, 0x0) r2 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000180), 0x80080, 0x0) ioctl$auto_LOOP_CTL_ADD(r2, 0x4c80, 0x0) setsockopt$auto(r1, 0x29, 0xb, 0x0, 0xca6) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) write$auto(r3, &(0x7f0000000440)='Y\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) select$auto(0x6, &(0x7f0000000380)={[0x1, 0xb, 0x400, 0x4, 0x5, 0x1, 0x3, 0x7fffffff, 0xfffffffffffffffb, 0x7, 0xfffffffffffffff7, 0x401, 0x7, 0x8, 0xe, 0x2]}, &(0x7f00000005c0)={[0x8, 0x8bb, 0x1, 0xd, 0x40, 0x2, 0x81, 0xb, 0x0, 0x1, 0x800, 0x5, 0x4, 0x8000, 0x6, 0x31a0000000000000]}, &(0x7f0000000640)={[0x0, 0x2a85, 0x2000000000000008, 0x4, 0x6, 0x400000000000, 0x6, 0xffffffffffffff81, 0x3, 0x7fffffffffffffff, 0x9, 0xdf70, 0x70, 0x1, 0xfb5f, 0xfffffffffffffffa]}, &(0x7f0000000000)={0x4, 0x4}) r5 = socket(0x2, 0x1, 0x0) setsockopt$auto(r5, 0x6, 0x1f, 0x0, 0x3d) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYRESHEX=r5], 0x1c}}, 0x4044820) readv$auto(0x3, 0x0, 0x23a8c70effffffe) mmap$auto(0x80000000007, 0x9, 0xdf, 0x9b72, r1, 0x5) openat$auto_fault_around_bytes_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x2282, 0x0) close_range$auto(0x2, 0x8, 0x0) bpf$auto(0x22, &(0x7f0000000140)=@bpf_attr_11={0xffff, 0x6, 0x6, 0x800, 0x4000ffff, 0x3c09, 0xffffffff}, 0x81) madvise$auto(0x0, 0x20000a, 0x4) pread64$auto(r0, 0x0, 0x594c, 0x7) r7 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x2000, 0x80009, 0xb, 0x8000000008011, r7, 0x0) r8 = syz_clone3(&(0x7f0000000300)={0x28020000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) unshare$auto(0x40000080) ioctl$auto_LOOP_CTL_GET_FREE(r2, 0x4c82, r8) 3.801651241s ago: executing program 2 (id=2576): close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x488, 0x0) mmap$auto(0x0, 0x8, 0x2, 0x12, 0x2, 0x8000) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) semtimedop$auto(0x0, &(0x7f0000000300)={0x7, 0xffff, 0x70}, 0x1f4, 0x0) 3.442793918s ago: executing program 2 (id=2577): mmap$auto(0x1000000000, 0x20009, 0x7fffffff, 0x10000000eb1, 0x401, 0x9) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x14) r0 = io_uring_setup$auto(0x6, 0x0) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), r0) sendmsg$auto_NL802154_CMD_TRIGGER_SCAN(r0, &(0x7f0000002640)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002600)={&(0x7f00000026c0)={0x50, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL802154_ATTR_WPAN_PHY_NAME={0x5, 0x2, '\x00'}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x3}, @NL802154_ATTR_SCAN_DONE_REASON={0x5, 0x25, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0xf8}, @NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0x3}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x40408c1) read$auto_ima_measurements_ops_ima_fs(r0, &(0x7f0000000000)=""/172, 0xac) statx$auto(r0, 0x0, 0x21021, 0x3fffffe, 0x0) write$auto(0x3, 0x0, 0x3f00) mmap$auto(0x1000000000, 0x20009, 0x7fffffff, 0x10000000eb1, 0x401, 0x9) (async) close_range$auto(0x2, 0x8000, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x10, 0x2, 0x14) (async) io_uring_setup$auto(0x6, 0x0) (async) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), r0) (async) sendmsg$auto_NL802154_CMD_TRIGGER_SCAN(r0, &(0x7f0000002640)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002600)={&(0x7f00000026c0)={0x50, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL802154_ATTR_WPAN_PHY_NAME={0x5, 0x2, '\x00'}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x3}, @NL802154_ATTR_SCAN_DONE_REASON={0x5, 0x25, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0xf8}, @NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0x3}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x40408c1) (async) read$auto_ima_measurements_ops_ima_fs(r0, &(0x7f0000000000)=""/172, 0xac) (async) statx$auto(r0, 0x0, 0x21021, 0x3fffffe, 0x0) (async) write$auto(0x3, 0x0, 0x3f00) (async) 3.379207365s ago: executing program 0 (id=2578): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000f80), 0xffffffffffffffff) recvmsg$auto(r0, &(0x7f0000000240)={&(0x7f0000000040)="151e23e500289eeb764f2a478fc4d40b1863c01d2e9b4a6929c5d224ea3d6bbd5095b95f3c86d7ffac4b1e76b2b0b0ea95dcc2228f72266a9b2b14b88de5c0be898a235a43a62fb122889f7e83bf3447b883fe401a73c6e905b0", 0x5, &(0x7f0000000180)={0x0, 0x40}, 0x100, 0x0, 0x7, 0x5}, 0x80000000) sendmsg$auto_ILA_CMD_DEL(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010028bd7000fedbdf2502"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x44884) (fail_nth: 3) 3.142811632s ago: executing program 2 (id=2579): set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) mmap$auto(0x8, 0x40009, 0x3, 0x8e5e, 0x7, 0x28080) ioctl$auto_IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) shmctl$auto(0x0, 0xd, 0x0) getrandom$auto(0x0, 0xe06, 0x3) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0) mmap$auto(0x1, 0x202000b, 0x3, 0xeb1, r0, 0x4) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xc01) setreuid$auto(0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000480)=""/4096, 0x1000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto(r1, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0xc}, 0x0) writev$auto(0x1, 0x0, 0x1) readahead$auto(0xffffffffffffffff, 0x6, 0x2) r2 = socket(0x23, 0x5, 0x0) listen$auto(r2, 0x5ed) unshare$auto(0x40000080) r3 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x42842, 0x95) read$auto(r3, 0x0, 0x1) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/rpc/use-gss-proxy\x00', 0x48041, 0x0) write$auto(r4, 0x0, 0x6) socket(0x2, 0x1, 0x0) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r5, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x9c, 0xf4, 0xb0, @raw=0x89de}}) 3.056915117s ago: executing program 0 (id=2580): close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) socket(0x1, 0x800, 0xb) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x8a, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8001) syz_genetlink_get_family_id$auto_net_shaper(0x0, 0xffffffffffffffff) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c804}, 0x14) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) adjtimex$auto(0x0) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), r0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) timerfd_create$auto(0x9, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(0xffffffffffffffff, 0xc1004111, &(0x7f0000000000)={0x8, [0x2, 0xffffffff, 0x80000000], [{0x90, 0x40, 0x1, 0x1, 0x1}, {0x8000, 0x6, 0x1, 0x0, 0x1, 0x1}, {0x5, 0x6, 0x0, 0x1, 0x1}, {0x95, 0x400, 0x1, 0x1, 0x1, 0x1}, {0xfffffffe, 0x0, 0x0, 0x0, 0x1}, {0x9, 0xfffffffe, 0x1, 0x1}, {0x1, 0xc1c, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x3ff, 0x1, 0x0, 0x1, 0x1}, {0xc12, 0x5, 0x1, 0x0, 0x1}, {0x7ff, 0x4d3c, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x1, 0x1, 0x1}], 0x5, 0xfff, 0x3, 0x3, 0x6, 0x9, 0x80000000, "64b91cc75e50f9bfb73422d302bb9262ca4383f3137e87364ff62cfa69013312b39e05e3bb4c990e99e06e310552976c2f5b0732887c3a8873bae9024b524de3"}) mmap$auto(0x7ffffffd, 0x40000a, 0xdf, 0x14, r1, 0x7) r2 = ioctl$auto_SIOCGIFHWADDR2(0xffffffffffffffff, 0x8927, 0x0) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/bus/usb/023/001\x00', 0x201, 0x0) ioctl$auto_USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000540)={0x0, 0x6, "7636151d9b02ba4db36efb8adaeb205490055c8160618a793bc0ef02be6b53ab874d163664e76626154e19585266b4280ac77b4953f03208c9d0d81de29f87c95b44caf734b5f2e59f69b0fe4a5494f48d5300607cd488d34e391975e1aa7743568be0d261cfaa4f9b6174c390954234be5d151787f0c9c66dc02b5a5a89a56682d58f67fb6efb456c4569af2df4c3e2fe0f9223c43727d728cc77183d2ceb9a4b6797048cd4d028ae420b7deabcd6b4a367d87ec44bbe2522223a45c3c8c504c1bae057da778451ca39ef604724c73e5f577cda46ab42dd3392401d1c9bf8ba15c8299371980687c12430b63a504592439e0580a6f2a60bed1efbb23b7596b3"}) ioctl$auto(r2, 0x9, r3) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x2, 0x9, 0x2, 0x6]}, 0x0) 2.876670398s ago: executing program 3 (id=2581): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0xc00, 0x0) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x10bc02, 0x0) arch_prctl$auto_ARCH_MAP_VDSO_64(0x2003, 0x5) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() open(0x0, 0x0, 0x152) rseq$auto(&(0x7f00000001c0)={0x20006, 0x5, 0x1, 0x7, 0x88, 0x80000001}, 0x1, 0xa, 0xa) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x3, 0x7, 0x5, 0x40df, r0, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0) rt_sigtimedwait$auto(0x0, 0x0, 0x0, 0x8) bpf$auto(0x0, 0x0, 0xa3) ioctl$auto(0xffffffffffffffff, 0xc0404d1a, 0xffffffffffffffff) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\x80\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x00\x0e\v9\xb5j\x00\x04\xc8\x1fa\x1c\x1a\x05 \xfdr/D\xbf\x98\x06\xe5\xf6\x8d\x1fX\xe5\xbc\xbc\"}$', 0x7fffffff) ioctl$auto_SNDCTL_DSP_SETFMT(r1, 0xc0045005, 0x0) io_setup$auto(0x10000, 0x0) 2.507280884s ago: executing program 1 (id=2582): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) close_range$auto(r0, r0, 0xf) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) msgctl$auto_IPC_RMID(0x37, 0x0, &(0x7f0000000100)={{0x2, 0x0, 0x0, 0x100, 0x5, 0x8, 0xffff}, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x1, 0x7, 0x6, 0x2, 0xdff, 0x15f, 0x6, 0xd, 0x7, @raw=0x1, @inferred=0xffffffffffffffff}) r4 = getuid() newfstatat$auto(r1, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x4795, 0x40, 0x54dd, 0x2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffffff9, 0x5, 0xffffffffffffff2d, 0x8, 0x10001, 0x54e, 0x4, 0x1, 0xc, 0x1}, 0x8) keyctl$auto(0x0, r2, r4, r3, 0x3ff) statmount$auto(0x0, 0x0, 0x1fe, 0xd) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x22d02, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x200003, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) 1.648802724s ago: executing program 3 (id=2583): unshare$auto(0x40000080) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x1f40) stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa}) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0x480000000, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0) mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801) ioperm$auto(0xffff, 0xe, 0x1) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0) pread64$auto(r4, 0x0, 0xe, 0x100000000007) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'}) statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x20) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) io_setup$auto(0xffff, &(0x7f0000000580)) write$auto(0x3, 0x0, 0xfffffdef) 1.536032007s ago: executing program 2 (id=2584): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140)=';') openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/path_max\x00', 0x0, 0x0) openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/max_vfs\x00', 0x2040, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty54\x00', 0x20a00, 0x0) socketpair$auto(0x9, 0x2, 0xb, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyd9\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto(r1, 0x80047456, 0x10000000000402) r2 = io_uring_setup$auto(0x9, 0x0) io_uring_register$auto(r2, 0x14, 0x0, 0xfffffffb) 0s ago: executing program 2 (id=2585): close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x488, 0x0) mmap$auto(0x0, 0x8, 0x2, 0x12, 0x2, 0x8000) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) semtimedop$auto(0x0, &(0x7f0000000300)={0x7, 0xffff, 0x70}, 0x1f4, 0x0) kernel console output (not intermixed with test programs): 3][T14140] ? rcu_is_watching+0x12/0xc0 [ 739.828372][T14140] __x64_sys_io_uring_setup+0xc2/0x170 [ 739.828407][T14140] do_syscall_64+0xcd/0x230 [ 739.828447][T14140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.828472][T14140] RIP: 0033:0x7f6f09d8e969 [ 739.828491][T14140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 739.828514][T14140] RSP: 002b:00007f6f0ac02038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 739.828536][T14140] RAX: ffffffffffffffda RBX: 00007f6f09fb5fa0 RCX: 00007f6f09d8e969 [ 739.828553][T14140] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 739.828567][T14140] RBP: 00007f6f09e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 739.828601][T14140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 739.828625][T14140] R13: 0000000000000000 R14: 00007f6f09fb5fa0 R15: 00007ffdcf4ff638 [ 739.828656][T14140] [ 740.327139][T14142] FAULT_INJECTION: forcing a failure. [ 740.327139][T14142] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 740.354809][T14142] CPU: 0 UID: 0 PID: 14142 Comm: syz.0.2075 Tainted: G U 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 740.354850][T14142] Tainted: [U]=USER [ 740.354858][T14142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 740.354871][T14142] Call Trace: [ 740.354879][T14142] [ 740.354888][T14142] dump_stack_lvl+0x16c/0x1f0 [ 740.354929][T14142] should_fail_ex+0x512/0x640 [ 740.354970][T14142] should_fail_alloc_page+0xe7/0x130 [ 740.355015][T14142] prepare_alloc_pages+0x3c2/0x610 [ 740.355054][T14142] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 740.355096][T14142] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 740.355141][T14142] ? do_raw_spin_lock+0x12c/0x2b0 [ 740.355191][T14142] ? __lock_acquire+0x5ca/0x1ba0 [ 740.355220][T14142] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 740.355254][T14142] ? policy_nodemask+0xea/0x4e0 [ 740.355285][T14142] alloc_pages_mpol+0x1fb/0x550 [ 740.355315][T14142] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 740.355353][T14142] folio_alloc_mpol_noprof+0x36/0x2f0 [ 740.355388][T14142] shmem_alloc_folio+0x135/0x160 [ 740.355413][T14142] shmem_alloc_and_add_folio+0x499/0xc20 [ 740.355448][T14142] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 740.355479][T14142] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 740.355513][T14142] shmem_get_folio_gfp+0x687/0x1530 [ 740.355553][T14142] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 740.355586][T14142] ? filemap_map_pages+0xf6c/0x1680 [ 740.355621][T14142] shmem_fault+0x1fe/0xa30 [ 740.355652][T14142] ? __pfx_shmem_fault+0x10/0x10 [ 740.355690][T14142] ? __pfx_filemap_map_pages+0x10/0x10 [ 740.355729][T14142] __do_fault+0x10a/0x490 [ 740.355762][T14142] do_pte_missing+0x1031/0x3fb0 [ 740.355790][T14142] ? __handle_mm_fault+0x1010/0x2a40 [ 740.355819][T14142] __handle_mm_fault+0x103d/0x2a40 [ 740.355852][T14142] ? __pfx___handle_mm_fault+0x10/0x10 [ 740.355894][T14142] ? find_vma+0xbf/0x140 [ 740.355927][T14142] ? __pfx_find_vma+0x10/0x10 [ 740.355964][T14142] handle_mm_fault+0x3fe/0xad0 [ 740.355994][T14142] do_user_addr_fault+0x7a6/0x1370 [ 740.356018][T14142] ? do_raw_spin_lock+0x12c/0x2b0 [ 740.356053][T14142] ? rcu_is_watching+0x12/0xc0 [ 740.356078][T14142] exc_page_fault+0x5c/0xc0 [ 740.356111][T14142] asm_exc_page_fault+0x26/0x30 [ 740.356133][T14142] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 740.356162][T14142] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 7f 09 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 740.356184][T14142] RSP: 0018:ffffc90004d979c0 EFLAGS: 00050206 [ 740.356201][T14142] RAX: 0000000000000001 RBX: 0000000000000800 RCX: 0000000000000800 [ 740.356216][T14142] RDX: 0000000000000000 RSI: 0000000000002000 RDI: ffff88805e5dd000 [ 740.356230][T14142] RBP: 0000000000000800 R08: 0000000000000001 R09: ffffed100bcbbaff [ 740.356244][T14142] R10: ffff88805e5dd7ff R11: 0000000000000000 R12: ffffc90004d97d80 [ 740.356258][T14142] R13: 0000000000002000 R14: ffffc90004d97d88 R15: ffff88805e5dd000 [ 740.356289][T14142] _copy_from_iter+0x50c/0x15b0 [ 740.356332][T14142] ? __pfx__copy_from_iter+0x10/0x10 [ 740.356384][T14142] ? __pfx___might_resched+0x10/0x10 [ 740.356415][T14142] file_tty_write.constprop.0+0x486/0x9b0 [ 740.356453][T14142] redirected_tty_write+0xd4/0x150 [ 740.356500][T14142] do_iter_readv_writev+0x654/0x950 [ 740.356546][T14142] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 740.356588][T14142] ? bpf_lsm_file_permission+0x9/0x10 [ 740.356610][T14142] ? security_file_permission+0x71/0x210 [ 740.356644][T14142] ? rw_verify_area+0xcf/0x680 [ 740.356682][T14142] vfs_writev+0x353/0xdc0 [ 740.356712][T14142] ? __pfx_vfs_writev+0x10/0x10 [ 740.356755][T14142] ? __fget_files+0x20e/0x3c0 [ 740.356774][T14142] ? __fget_files+0x1e0/0x3c0 [ 740.356802][T14142] ? do_writev+0x132/0x330 [ 740.356821][T14142] do_writev+0x132/0x330 [ 740.356842][T14142] ? __pfx_do_writev+0x10/0x10 [ 740.356862][T14142] ? rcu_is_watching+0x12/0xc0 [ 740.356892][T14142] do_syscall_64+0xcd/0x230 [ 740.356931][T14142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.356953][T14142] RIP: 0033:0x7f2162b8e969 [ 740.356971][T14142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 740.356993][T14142] RSP: 002b:00007f2163a9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 740.357014][T14142] RAX: ffffffffffffffda RBX: 00007f2162db5fa0 RCX: 00007f2162b8e969 [ 740.357030][T14142] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 740.357044][T14142] RBP: 00007f2163a9f090 R08: 0000000000000000 R09: 0000000000000000 [ 740.357059][T14142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 740.357073][T14142] R13: 0000000000000000 R14: 00007f2162db5fa0 R15: 00007ffe79094ac8 [ 740.357103][T14142] [ 741.907299][T14155] misc userio: No port type given on /dev/userio [ 742.743399][T14169] Setting dangerous option i915.mitigations - tainting kernel [ 743.585607][T14190] FAULT_INJECTION: forcing a failure. [ 743.585607][T14190] name failslab, interval 1, probability 0, space 0, times 0 [ 743.686250][T14190] CPU: 0 UID: 0 PID: 14190 Comm: syz.0.2087 Tainted: G U 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 743.686301][T14190] Tainted: [U]=USER [ 743.686310][T14190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 743.686326][T14190] Call Trace: [ 743.686334][T14190] [ 743.686356][T14190] dump_stack_lvl+0x16c/0x1f0 [ 743.686399][T14190] should_fail_ex+0x512/0x640 [ 743.686436][T14190] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 743.686463][T14190] should_failslab+0xc2/0x120 [ 743.686494][T14190] __kmalloc_cache_noprof+0x6a/0x3e0 [ 743.686519][T14190] ? __io_uring_add_tctx_node+0x132/0x500 [ 743.686549][T14190] __io_uring_add_tctx_node+0x132/0x500 [ 743.686576][T14190] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 743.686603][T14190] ? __anon_inode_getfile+0x18b/0x370 [ 743.686648][T14190] io_uring_setup+0x14fb/0x1ff0 [ 743.686685][T14190] ? __pfx_io_uring_setup+0x10/0x10 [ 743.686740][T14190] ? rcu_is_watching+0x12/0xc0 [ 743.686768][T14190] __x64_sys_io_uring_setup+0xc2/0x170 [ 743.686803][T14190] do_syscall_64+0xcd/0x230 [ 743.686843][T14190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.686868][T14190] RIP: 0033:0x7f2162b8e969 [ 743.686886][T14190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 743.686910][T14190] RSP: 002b:00007f2163a9f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 743.686932][T14190] RAX: ffffffffffffffda RBX: 00007f2162db5fa0 RCX: 00007f2162b8e969 [ 743.686948][T14190] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 743.686963][T14190] RBP: 00007f2162c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 743.686977][T14190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 743.686992][T14190] R13: 0000000000000000 R14: 00007f2162db5fa0 R15: 00007ffe79094ac8 [ 743.687021][T14190] [ 743.882663][ C0] vkms_vblank_simulate: vblank timer overrun [ 744.440504][T14196] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 745.814418][T14219] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 746.273836][T14211] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 747.771995][ T5831] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 748.642783][T14260] FAULT_INJECTION: forcing a failure. [ 748.642783][T14260] name failslab, interval 1, probability 0, space 0, times 0 [ 748.756496][T14260] CPU: 0 UID: 0 PID: 14260 Comm: syz.1.2104 Tainted: G U 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 748.756538][T14260] Tainted: [U]=USER [ 748.756546][T14260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 748.756561][T14260] Call Trace: [ 748.756570][T14260] [ 748.756579][T14260] dump_stack_lvl+0x16c/0x1f0 [ 748.756620][T14260] should_fail_ex+0x512/0x640 [ 748.756657][T14260] ? fs_reclaim_acquire+0xae/0x150 [ 748.756698][T14260] should_failslab+0xc2/0x120 [ 748.756729][T14260] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 748.756758][T14260] ? security_inode_alloc+0x3b/0x2b0 [ 748.756792][T14260] security_inode_alloc+0x3b/0x2b0 [ 748.756831][T14260] inode_init_always_gfp+0xce4/0x1030 [ 748.756860][T14260] alloc_inode+0x86/0x240 [ 748.756891][T14260] new_inode+0x22/0x1c0 [ 748.756919][T14260] ? start_creating.part.0+0x25d/0x3a0 [ 748.756959][T14260] __debugfs_create_file+0x11c/0x6b0 [ 748.756999][T14260] debugfs_create_file_full+0x41/0x60 [ 748.757039][T14260] kvm_dev_ioctl+0x14ff/0x1ad0 [ 748.757078][T14260] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 748.757118][T14260] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 748.757149][T14260] __x64_sys_ioctl+0x190/0x200 [ 748.757186][T14260] do_syscall_64+0xcd/0x230 [ 748.757226][T14260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.757250][T14260] RIP: 0033:0x7f7b4f58e969 [ 748.757269][T14260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 748.757292][T14260] RSP: 002b:00007f7b50485038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 748.757314][T14260] RAX: ffffffffffffffda RBX: 00007f7b4f7b6080 RCX: 00007f7b4f58e969 [ 748.757330][T14260] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000002 [ 748.757345][T14260] RBP: 00007f7b4f610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 748.757360][T14260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 748.757375][T14260] R13: 0000000000000000 R14: 00007f7b4f7b6080 R15: 00007ffd1a011628 [ 748.757405][T14260] [ 748.757430][T14260] debugfs: out of free dentries, can not create file 'pages_2m' [ 749.235821][T14265] FAULT_INJECTION: forcing a failure. [ 749.235821][T14265] name failslab, interval 1, probability 0, space 0, times 0 [ 749.299682][T14265] CPU: 0 UID: 0 PID: 14265 Comm: syz.2.2106 Tainted: G U 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 749.299725][T14265] Tainted: [U]=USER [ 749.299734][T14265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 749.299750][T14265] Call Trace: [ 749.299758][T14265] [ 749.299768][T14265] dump_stack_lvl+0x16c/0x1f0 [ 749.299811][T14265] should_fail_ex+0x512/0x640 [ 749.299855][T14265] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 749.299884][T14265] should_failslab+0xc2/0x120 [ 749.299917][T14265] __kmalloc_cache_noprof+0x6a/0x3e0 [ 749.299943][T14265] ? io_wq_create+0xcc/0xa30 [ 749.299981][T14265] io_wq_create+0xcc/0xa30 [ 749.300017][T14265] io_uring_alloc_task_context+0x211/0x690 [ 749.300048][T14265] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 749.300077][T14265] ? __pfx_io_wq_submit_work+0x10/0x10 [ 749.300108][T14265] ? __pfx_io_wq_free_work+0x10/0x10 [ 749.300138][T14265] ? alloc_file_pseudo+0x1b3/0x230 [ 749.300173][T14265] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 749.300211][T14265] __io_uring_add_tctx_node+0x2dd/0x500 [ 749.300238][T14265] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 749.300266][T14265] ? __anon_inode_getfile+0x18b/0x370 [ 749.300313][T14265] io_uring_setup+0x14fb/0x1ff0 [ 749.300350][T14265] ? __pfx_io_uring_setup+0x10/0x10 [ 749.300392][T14265] ? __pfx___might_resched+0x10/0x10 [ 749.300434][T14265] ? rcu_is_watching+0x12/0xc0 [ 749.300465][T14265] __x64_sys_io_uring_setup+0xc2/0x170 [ 749.300501][T14265] do_syscall_64+0xcd/0x230 [ 749.300556][T14265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.300580][T14265] RIP: 0033:0x7f6f09d8e969 [ 749.300598][T14265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 749.300622][T14265] RSP: 002b:00007f6f0ac02038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 749.300645][T14265] RAX: ffffffffffffffda RBX: 00007f6f09fb5fa0 RCX: 00007f6f09d8e969 [ 749.300661][T14265] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 749.300675][T14265] RBP: 00007f6f09e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 749.300690][T14265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 749.300705][T14265] R13: 0000000000000000 R14: 00007f6f09fb5fa0 R15: 00007ffdcf4ff638 [ 749.300735][T14265] [ 749.534423][ C0] vkms_vblank_simulate: vblank timer overrun [ 750.481283][T14263] Process accounting paused [ 752.076311][T14291] Setting dangerous option i915.mitigations - tainting kernel [ 752.576736][T14283] FAULT_INJECTION: forcing a failure. [ 752.576736][T14283] name failslab, interval 1, probability 0, space 0, times 0 [ 752.652015][T14283] CPU: 0 UID: 0 PID: 14283 Comm: syz.2.2110 Tainted: G U 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 752.652059][T14283] Tainted: [U]=USER [ 752.652067][T14283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 752.652082][T14283] Call Trace: [ 752.652090][T14283] [ 752.652100][T14283] dump_stack_lvl+0x16c/0x1f0 [ 752.652149][T14283] should_fail_ex+0x512/0x640 [ 752.652190][T14283] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 752.652224][T14283] should_failslab+0xc2/0x120 [ 752.652260][T14283] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 752.652291][T14283] ? alloc_inode+0x61/0x240 [ 752.652323][T14283] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 752.652366][T14283] ? __pfx_rpc_alloc_inode+0x10/0x10 [ 752.652399][T14283] alloc_inode+0x61/0x240 [ 752.652431][T14283] new_inode+0x22/0x1c0 [ 752.652466][T14283] __rpc_create_common+0x57/0x2f0 [ 752.652509][T14283] rpc_populate.constprop.0+0x153/0x5d0 [ 752.652557][T14283] rpc_fill_super+0x2bc/0x840 [ 752.652596][T14283] ? sget_fc+0x808/0xc20 [ 752.652619][T14283] ? __pfx_set_anon_super_fc+0x10/0x10 [ 752.652659][T14283] ? __pfx_rpc_fill_super+0x10/0x10 [ 752.652698][T14283] get_tree_keyed+0x10e/0x1d0 [ 752.652724][T14283] vfs_get_tree+0x8e/0x340 [ 752.652765][T14283] vfs_cmd_create+0xd7/0x2a0 [ 752.652803][T14283] __do_sys_fsconfig+0x7b8/0xbe0 [ 752.652836][T14283] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 752.652867][T14283] ? xfd_validate_state+0x5d/0x180 [ 752.652894][T14283] ? rcu_is_watching+0x12/0xc0 [ 752.652928][T14283] do_syscall_64+0xcd/0x230 [ 752.652975][T14283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.653001][T14283] RIP: 0033:0x7f6f09d8e969 [ 752.653020][T14283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 752.653046][T14283] RSP: 002b:00007f6f0ac02038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 752.653069][T14283] RAX: ffffffffffffffda RBX: 00007f6f09fb5fa0 RCX: 00007f6f09d8e969 [ 752.653086][T14283] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000004 [ 752.653102][T14283] RBP: 00007f6f09e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 752.653117][T14283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 752.653132][T14283] R13: 0000000000000000 R14: 00007f6f09fb5fa0 R15: 00007ffdcf4ff638 [ 752.653163][T14283] [ 752.888213][ C0] vkms_vblank_simulate: vblank timer overrun [ 752.898619][T14283] net/sunrpc/rpc_pipe.c: __rpc_create_common failed to allocate inode for dentry lockd [ 752.908836][T14283] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 752.925412][T14297] netlink: zone id is out of range [ 752.930657][T14297] netlink: del zone limit has 4 unknown bytes [ 753.708318][T14307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.734389][T14307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 754.013973][T14311] FAULT_INJECTION: forcing a failure. [ 754.013973][T14311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 754.089492][T14311] CPU: 0 UID: 0 PID: 14311 Comm: syz.0.2118 Tainted: G U 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 754.089535][T14311] Tainted: [U]=USER [ 754.089543][T14311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 754.089557][T14311] Call Trace: [ 754.089566][T14311] [ 754.089575][T14311] dump_stack_lvl+0x16c/0x1f0 [ 754.089618][T14311] should_fail_ex+0x512/0x640 [ 754.089663][T14311] _copy_from_user+0x2e/0xd0 [ 754.089704][T14311] input_event_from_user+0xb9/0x290 [ 754.089744][T14311] ? __pfx_input_event_from_user+0x10/0x10 [ 754.089781][T14311] ? __pfx___might_resched+0x10/0x10 [ 754.089808][T14311] ? input_inject_event+0x1a5/0x390 [ 754.089848][T14311] evdev_write+0x26b/0x440 [ 754.089885][T14311] ? __pfx_evdev_write+0x10/0x10 [ 754.089920][T14311] ? bpf_lsm_file_permission+0x9/0x10 [ 754.089943][T14311] ? security_file_permission+0x71/0x210 [ 754.089980][T14311] ? rw_verify_area+0xcf/0x680 [ 754.090022][T14311] vfs_write+0x25f/0x1180 [ 754.090044][T14311] ? __pfx_evdev_write+0x10/0x10 [ 754.090083][T14311] ? __pfx_vfs_write+0x10/0x10 [ 754.090105][T14311] ? find_held_lock+0x2b/0x80 [ 754.090131][T14311] ? __fget_files+0x204/0x3c0 [ 754.090158][T14311] ? __fget_files+0x20e/0x3c0 [ 754.090189][T14311] ksys_write+0x205/0x240 [ 754.090213][T14311] ? __pfx_ksys_write+0x10/0x10 [ 754.090236][T14311] ? rcu_is_watching+0x12/0xc0 [ 754.090267][T14311] do_syscall_64+0xcd/0x230 [ 754.090306][T14311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.090330][T14311] RIP: 0033:0x7f2162b8e969 [ 754.090347][T14311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 754.090399][T14311] RSP: 002b:00007f2163a9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 754.090427][T14311] RAX: ffffffffffffffda RBX: 00007f2162db5fa0 RCX: 00007f2162b8e969 [ 754.090444][T14311] RDX: 0000000000010001 RSI: 0000200000000040 RDI: 0000000000000003 [ 754.090459][T14311] RBP: 00007f2163a9f090 R08: 0000000000000000 R09: 0000000000000000 [ 754.090474][T14311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 754.090488][T14311] R13: 0000000000000000 R14: 00007f2162db5fa0 R15: 00007ffe79094ac8 [ 754.090519][T14311] [ 754.973383][T14318] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2121'. [ 755.183469][T13547] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 757.539650][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 757.546205][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 757.654171][T14374] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2133'. [ 758.266352][T14386] Setting dangerous option i915.mitigations - tainting kernel [ 760.644534][T14418] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2145'. [ 762.759444][T14444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2151'. [ 762.896202][T14441] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2151'. [ 764.913121][T14472] FAULT_INJECTION: forcing a failure. [ 764.913121][T14472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 765.008470][T14472] CPU: 0 UID: 0 PID: 14472 Comm: syz.1.2161 Tainted: G U 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 765.008515][T14472] Tainted: [U]=USER [ 765.008523][T14472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 765.008537][T14472] Call Trace: [ 765.008545][T14472] [ 765.008554][T14472] dump_stack_lvl+0x16c/0x1f0 [ 765.008594][T14472] should_fail_ex+0x512/0x640 [ 765.008633][T14472] _copy_to_user+0x32/0xd0 [ 765.008657][T14472] simple_read_from_buffer+0xcb/0x170 [ 765.008694][T14472] proc_fail_nth_read+0x197/0x270 [ 765.008728][T14472] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 765.008762][T14472] ? rw_verify_area+0xcf/0x680 [ 765.008795][T14472] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 765.008828][T14472] vfs_read+0x1e1/0xc70 [ 765.008854][T14472] ? __pfx___mutex_lock+0x10/0x10 [ 765.008888][T14472] ? __pfx_vfs_read+0x10/0x10 [ 765.008918][T14472] ? __fget_files+0x20e/0x3c0 [ 765.008947][T14472] ksys_read+0x12a/0x240 [ 765.008968][T14472] ? __pfx_ksys_read+0x10/0x10 [ 765.008988][T14472] ? rcu_is_watching+0x12/0xc0 [ 765.009018][T14472] do_syscall_64+0xcd/0x230 [ 765.009055][T14472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.009077][T14472] RIP: 0033:0x7f7b4f58d37c [ 765.009095][T14472] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 765.009118][T14472] RSP: 002b:00007f7b504a6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 765.009140][T14472] RAX: ffffffffffffffda RBX: 00007f7b4f7b5fa0 RCX: 00007f7b4f58d37c [ 765.009157][T14472] RDX: 000000000000000f RSI: 00007f7b504a60a0 RDI: 0000000000000004 [ 765.009171][T14472] RBP: 00007f7b504a6090 R08: 0000000000000000 R09: 0000000000000000 [ 765.009185][T14472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 765.009199][T14472] R13: 0000000000000000 R14: 00007f7b4f7b5fa0 R15: 00007ffd1a011628 [ 765.009229][T14472] [ 765.210627][ C0] vkms_vblank_simulate: vblank timer overrun [ 766.229219][T14490] Setting dangerous option i915.mitigations - tainting kernel [ 766.282893][T14491] blk_print_req_error: 24 callbacks suppressed [ 766.282913][T14491] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 766.598393][T14496] ======================================================= [ 766.598393][T14496] WARNING: The mand mount option has been deprecated and [ 766.598393][T14496] and is ignored by this kernel. Remove the mand [ 766.598393][T14496] option from the mount to silence this warning. [ 766.598393][T14496] ======================================================= [ 766.633362][ C0] vkms_vblank_simulate: vblank timer overrun [ 766.918018][T14491] buffer_io_error: 23 callbacks suppressed [ 766.918039][T14491] Buffer I/O error on dev nbd0, logical block 0, async page read [ 767.044204][T14491] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 767.139184][T14491] Buffer I/O error on dev nbd0, logical block 0, async page read [ 767.211324][T14491] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 767.266250][T14491] Buffer I/O error on dev nbd0, logical block 0, async page read [ 767.309858][T14491] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 767.352421][T14491] Buffer I/O error on dev nbd0, logical block 0, async page read [ 767.395071][T14491] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 767.438135][T14491] Buffer I/O error on dev nbd0, logical block 0, async page read [ 767.478511][T14491] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 767.541694][T14491] Buffer I/O error on dev nbd0, logical block 0, async page read [ 767.596063][T14491] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 767.605144][T14491] Buffer I/O error on dev nbd0, logical block 0, async page read [ 767.688077][T14491] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 767.725818][T14491] Buffer I/O error on dev nbd0, logical block 0, async page read [ 767.774469][T14491] ldm_validate_partition_table(): Disk read failed. [ 767.820089][T14491] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 767.883339][T14491] Buffer I/O error on dev nbd0, logical block 0, async page read [ 767.883520][T14491] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 767.883552][T14491] Buffer I/O error on dev nbd0, logical block 0, async page read [ 767.883843][T14491] Dev nbd0: unable to read RDB block 0 [ 767.884376][T14491] nbd0: unable to read partition table [ 768.020747][ T5201] ldm_validate_partition_table(): Disk read failed. [ 768.021184][ T5201] Dev nbd0: unable to read RDB block 0 [ 768.021679][ T5201] nbd0: unable to read partition table [ 768.038688][ T5201] ldm_validate_partition_table(): Disk read failed. [ 768.044157][ T5201] Dev nbd0: unable to read RDB block 0 [ 768.044678][ T5201] nbd0: unable to read partition table [ 768.095321][ T8916] ldm_validate_partition_table(): Disk read failed. [ 768.116137][ T8916] Dev nbd0: unable to read RDB block 0 [ 768.116624][ T8916] nbd0: unable to read partition table [ 768.143680][ T8916] ldm_validate_partition_table(): Disk read failed. [ 768.144105][ T8916] Dev nbd0: unable to read RDB block 0 [ 768.144583][ T8916] nbd0: unable to read partition table [ 769.622258][T14529] Setting dangerous option i915.mitigations - tainting kernel [ 770.158966][T14540] FAULT_INJECTION: forcing a failure. [ 770.158966][T14540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 770.219491][T14540] CPU: 0 UID: 0 PID: 14540 Comm: syz.2.2181 Tainted: G U 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 770.219531][T14540] Tainted: [U]=USER [ 770.219539][T14540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 770.219554][T14540] Call Trace: [ 770.219562][T14540] [ 770.219571][T14540] dump_stack_lvl+0x16c/0x1f0 [ 770.219612][T14540] should_fail_ex+0x512/0x640 [ 770.219652][T14540] _copy_to_iter+0x2a4/0x15a0 [ 770.219676][T14540] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 770.219717][T14540] ? __pfx__copy_to_iter+0x10/0x10 [ 770.219740][T14540] ? kernfs_seq_stop+0xcd/0x120 [ 770.219776][T14540] ? kernfs_put_active+0x86/0xe0 [ 770.219804][T14540] seq_read_iter+0xcf8/0x12c0 [ 770.219853][T14540] kernfs_fop_read_iter+0x40f/0x5a0 [ 770.219883][T14540] ? rw_verify_area+0xcf/0x680 [ 770.219922][T14540] vfs_read+0x8c8/0xc70 [ 770.219949][T14540] ? __pfx___mutex_lock+0x10/0x10 [ 770.219984][T14540] ? __pfx_vfs_read+0x10/0x10 [ 770.220026][T14540] ksys_read+0x12a/0x240 [ 770.220049][T14540] ? __pfx_ksys_read+0x10/0x10 [ 770.220069][T14540] ? rcu_is_watching+0x12/0xc0 [ 770.220109][T14540] do_syscall_64+0xcd/0x230 [ 770.220149][T14540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.220175][T14540] RIP: 0033:0x7f6f09d8e969 [ 770.220193][T14540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 770.220217][T14540] RSP: 002b:00007f6f0ac02038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 770.220239][T14540] RAX: ffffffffffffffda RBX: 00007f6f09fb5fa0 RCX: 00007f6f09d8e969 [ 770.220256][T14540] RDX: 0000000000000005 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 770.220271][T14540] RBP: 00007f6f0ac02090 R08: 0000000000000000 R09: 0000000000000000 [ 770.220286][T14540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 770.220300][T14540] R13: 0000000000000000 R14: 00007f6f09fb5fa0 R15: 00007ffdcf4ff638 [ 770.220331][T14540] [ 770.421819][ C0] vkms_vblank_simulate: vblank timer overrun [ 771.114624][T14543] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 771.145020][T14543] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 773.168317][T14551] blk_print_req_error: 72 callbacks suppressed [ 773.168340][T14551] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 773.504511][T14551] buffer_io_error: 71 callbacks suppressed [ 773.504533][T14551] Buffer I/O error on dev nbd1, logical block 0, async page read [ 773.676791][T14580] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 773.912314][T14551] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 774.080409][T14551] Buffer I/O error on dev nbd1, logical block 0, async page read [ 774.171544][T14551] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 774.375959][T14551] Buffer I/O error on dev nbd1, logical block 0, async page read [ 774.527109][T14551] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 774.619532][T14551] Buffer I/O error on dev nbd1, logical block 0, async page read [ 774.732103][T14551] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 774.840532][T14551] Buffer I/O error on dev nbd1, logical block 0, async page read [ 774.954863][T14551] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 775.078508][T14551] Buffer I/O error on dev nbd1, logical block 0, async page read [ 775.187311][T14551] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 775.294317][T14551] Buffer I/O error on dev nbd1, logical block 0, async page read [ 775.321845][T14610] FAULT_INJECTION: forcing a failure. [ 775.321845][T14610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 775.363552][T14551] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 775.389774][T14610] CPU: 0 UID: 0 PID: 14610 Comm: syz.1.2198 Tainted: G U 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 775.389814][T14610] Tainted: [U]=USER [ 775.389822][T14610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 775.389836][T14610] Call Trace: [ 775.389844][T14610] [ 775.389853][T14610] dump_stack_lvl+0x16c/0x1f0 [ 775.389894][T14610] should_fail_ex+0x512/0x640 [ 775.389934][T14610] _copy_from_user+0x2e/0xd0 [ 775.389978][T14610] copy_msghdr_from_user+0x98/0x160 [ 775.390009][T14610] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 775.390046][T14610] ? __pfx__kstrtoull+0x10/0x10 [ 775.390081][T14610] ___sys_sendmsg+0xfe/0x1d0 [ 775.390112][T14610] ? __pfx____sys_sendmsg+0x10/0x10 [ 775.390155][T14610] ? find_held_lock+0x2b/0x80 [ 775.390197][T14610] __sys_sendmmsg+0x200/0x420 [ 775.390231][T14610] ? __pfx___sys_sendmmsg+0x10/0x10 [ 775.390270][T14610] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 775.390322][T14610] ? fput+0x70/0xf0 [ 775.390351][T14610] ? ksys_write+0x1b9/0x240 [ 775.390374][T14610] ? __pfx_ksys_write+0x10/0x10 [ 775.390397][T14610] ? rcu_is_watching+0x12/0xc0 [ 775.390424][T14610] __x64_sys_sendmmsg+0x9c/0x100 [ 775.390454][T14610] ? lockdep_hardirqs_on+0x7c/0x110 [ 775.390501][T14610] do_syscall_64+0xcd/0x230 [ 775.390539][T14610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.390562][T14610] RIP: 0033:0x7f7b4f58e969 [ 775.390582][T14610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 775.390605][T14610] RSP: 002b:00007f7b50485038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 775.390627][T14610] RAX: ffffffffffffffda RBX: 00007f7b4f7b6080 RCX: 00007f7b4f58e969 [ 775.390643][T14610] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000003 [ 775.390663][T14610] RBP: 00007f7b50485090 R08: 0000000000000000 R09: 0000000000000000 [ 775.390678][T14610] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001 [ 775.390692][T14610] R13: 0000000000000000 R14: 00007f7b4f7b6080 R15: 00007ffd1a011628 [ 775.390721][T14610] [ 775.845822][T14551] Buffer I/O error on dev nbd1, logical block 0, async page read [ 775.896985][T14551] ldm_validate_partition_table(): Disk read failed. [ 775.956966][T14551] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 776.008224][T14551] Buffer I/O error on dev nbd1, logical block 0, async page read [ 776.050638][T14551] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 776.102285][T14551] Buffer I/O error on dev nbd1, logical block 0, async page read [ 776.129299][T14551] Dev nbd1: unable to read RDB block 0 [ 776.150018][T14551] nbd1: unable to read partition table [ 776.326785][ T5201] ldm_validate_partition_table(): Disk read failed. [ 776.359897][ T5201] Dev nbd1: unable to read RDB block 0 [ 776.382757][ T5201] nbd1: unable to read partition table [ 776.436387][ T5201] ldm_validate_partition_table(): Disk read failed. [ 776.443401][ T5201] Dev nbd1: unable to read RDB block 0 [ 776.486503][ T5201] nbd1: unable to read partition table [ 776.558114][ T8916] ldm_validate_partition_table(): Disk read failed. [ 776.565311][ T8916] Dev nbd1: unable to read RDB block 0 [ 776.654251][ T8916] nbd1: unable to read partition table [ 776.723141][ T8916] ldm_validate_partition_table(): Disk read failed. [ 776.806292][ T8916] Dev nbd1: unable to read RDB block 0 [ 776.859667][ T8916] nbd1: unable to read partition table [ 777.150957][T14630] FAULT_INJECTION: forcing a failure. [ 777.150957][T14630] name failslab, interval 1, probability 0, space 0, times 0 [ 777.235515][T14630] CPU: 0 UID: 0 PID: 14630 Comm: syz.2.2206 Tainted: G U 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 777.235555][T14630] Tainted: [U]=USER [ 777.235562][T14630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 777.235576][T14630] Call Trace: [ 777.235583][T14630] [ 777.235593][T14630] dump_stack_lvl+0x16c/0x1f0 [ 777.235634][T14630] should_fail_ex+0x512/0x640 [ 777.235676][T14630] should_failslab+0xc2/0x120 [ 777.235706][T14630] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 777.235735][T14630] ? skb_clone+0x190/0x3f0 [ 777.235768][T14630] skb_clone+0x190/0x3f0 [ 777.235798][T14630] netlink_deliver_tap+0xabd/0xd30 [ 777.235834][T14630] ? __pfx_rtnl_stats_dump+0x10/0x10 [ 777.235889][T14630] netlink_dump+0x638/0xd00 [ 777.235924][T14630] ? __pfx_netlink_dump+0x10/0x10 [ 777.235954][T14630] ? __pfx___skb_recv_datagram+0x10/0x10 [ 777.235993][T14630] ? skb_recv_datagram+0x88/0xc0 [ 777.236028][T14630] netlink_recvmsg+0xa15/0xf20 [ 777.236063][T14630] ? __pfx_netlink_recvmsg+0x10/0x10 [ 777.236095][T14630] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 777.236131][T14630] ? iovec_from_user+0xbb/0x140 [ 777.236163][T14630] ____sys_recvmsg+0x5f6/0x6b0 [ 777.236207][T14630] ? __pfx_____sys_recvmsg+0x10/0x10 [ 777.236256][T14630] ? kfree+0x252/0x4d0 [ 777.236276][T14630] ? __lock_acquire+0x5ca/0x1ba0 [ 777.236315][T14630] ___sys_recvmsg+0x114/0x1a0 [ 777.236347][T14630] ? __pfx____sys_recvmsg+0x10/0x10 [ 777.236395][T14630] ? __pfx___might_resched+0x10/0x10 [ 777.236430][T14630] do_recvmmsg+0x2fe/0x740 [ 777.236470][T14630] ? __pfx_do_recvmmsg+0x10/0x10 [ 777.236507][T14630] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 777.236555][T14630] ? __fget_files+0x20e/0x3c0 [ 777.236586][T14630] __x64_sys_recvmmsg+0x22a/0x280 [ 777.236620][T14630] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 777.236651][T14630] ? rcu_is_watching+0x12/0xc0 [ 777.236682][T14630] do_syscall_64+0xcd/0x230 [ 777.236721][T14630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.236744][T14630] RIP: 0033:0x7f6f09d8e969 [ 777.236762][T14630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 777.236785][T14630] RSP: 002b:00007f6f0ac02038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 777.236808][T14630] RAX: ffffffffffffffda RBX: 00007f6f09fb5fa0 RCX: 00007f6f09d8e969 [ 777.236825][T14630] RDX: 0000000000000005 RSI: 0000200000000180 RDI: 0000000000000003 [ 777.236840][T14630] RBP: 00007f6f0ac02090 R08: 0000000000000000 R09: 0000000000000000 [ 777.236855][T14630] R10: 00000000000066a6 R11: 0000000000000246 R12: 0000000000000001 [ 777.236870][T14630] R13: 0000000000000000 R14: 00007f6f09fb5fa0 R15: 00007ffdcf4ff638 [ 777.236901][T14630] [ 777.522817][T14632] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 778.603636][T14655] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2212'. [ 778.858977][T14653] Console: switching to colour VGA+ 80x25 [ 780.246293][T14677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2215'. [ 780.360182][T14670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2211'. [ 780.680683][T14677] Process accounting resumed [ 781.139116][T14689] FAULT_INJECTION: forcing a failure. [ 781.139116][T14689] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 781.229340][T14689] CPU: 0 UID: 0 PID: 14689 Comm: syz.1.2219 Tainted: G U 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 781.229380][T14689] Tainted: [U]=USER [ 781.229388][T14689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 781.229401][T14689] Call Trace: [ 781.229409][T14689] [ 781.229418][T14689] dump_stack_lvl+0x16c/0x1f0 [ 781.229466][T14689] should_fail_ex+0x512/0x640 [ 781.229506][T14689] should_fail_alloc_page+0xe7/0x130 [ 781.229540][T14689] prepare_alloc_pages+0x3c2/0x610 [ 781.229585][T14689] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 781.229622][T14689] ? __lock_acquire+0x5ca/0x1ba0 [ 781.229662][T14689] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 781.229709][T14689] ? find_held_lock+0x2b/0x80 [ 781.229733][T14689] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 781.229770][T14689] ? policy_nodemask+0xea/0x4e0 [ 781.229803][T14689] alloc_pages_mpol+0x1fb/0x550 [ 781.229836][T14689] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 781.229876][T14689] folio_alloc_mpol_noprof+0x36/0x2f0 [ 781.229914][T14689] shmem_alloc_folio+0x135/0x160 [ 781.229940][T14689] shmem_alloc_and_add_folio+0x499/0xc20 [ 781.229978][T14689] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 781.230012][T14689] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 781.230048][T14689] shmem_get_folio_gfp+0x687/0x1530 [ 781.230086][T14689] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 781.230120][T14689] ? filemap_map_pages+0xf6c/0x1680 [ 781.230157][T14689] shmem_fault+0x1fe/0xa30 [ 781.230189][T14689] ? __pfx_shmem_fault+0x10/0x10 [ 781.230224][T14689] ? __pfx_filemap_map_pages+0x10/0x10 [ 781.230267][T14689] __do_fault+0x10a/0x490 [ 781.230301][T14689] do_pte_missing+0x1031/0x3fb0 [ 781.230327][T14689] ? do_raw_spin_unlock+0x172/0x230 [ 781.230368][T14689] ? __pmd_alloc+0x3c2/0x870 [ 781.230404][T14689] ? find_held_lock+0x2b/0x80 [ 781.230430][T14689] __handle_mm_fault+0x103d/0x2a40 [ 781.230469][T14689] ? __pfx___handle_mm_fault+0x10/0x10 [ 781.230513][T14689] ? find_vma+0xbf/0x140 [ 781.230547][T14689] ? __pfx_find_vma+0x10/0x10 [ 781.230585][T14689] handle_mm_fault+0x3fe/0xad0 [ 781.230616][T14689] do_user_addr_fault+0x7a6/0x1370 [ 781.230645][T14689] ? rcu_is_watching+0x12/0xc0 [ 781.230671][T14689] exc_page_fault+0x5c/0xc0 [ 781.230705][T14689] asm_exc_page_fault+0x26/0x30 [ 781.230728][T14689] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 781.230757][T14689] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 7f 09 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 781.230781][T14689] RSP: 0018:ffffc9000b25f7d8 EFLAGS: 00050206 [ 781.230801][T14689] RAX: 0000000000000001 RBX: 00000000000000c4 RCX: 00000000000000c4 [ 781.230816][T14689] RDX: ffffed10025caa89 RSI: 0000000000000000 RDI: ffff888012e55380 [ 781.230832][T14689] RBP: 00000000000000c4 R08: 0000000000000001 R09: ffffed10025caa88 [ 781.230847][T14689] R10: ffff888012e55443 R11: 0000000000000000 R12: ffffc9000b25fb60 [ 781.230863][T14689] R13: 0000000000000000 R14: ffffc9000b25fb68 R15: ffff888012e55380 [ 781.230895][T14689] _copy_from_iter+0x50c/0x15b0 [ 781.230942][T14689] ? __pfx__copy_from_iter+0x10/0x10 [ 781.230985][T14689] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 781.231017][T14689] ? __lock_acquire+0xaa4/0x1ba0 [ 781.231058][T14689] netlink_sendmsg+0x829/0xdd0 [ 781.231097][T14689] ? __pfx_netlink_sendmsg+0x10/0x10 [ 781.231142][T14689] ____sys_sendmsg+0xa95/0xc70 [ 781.231182][T14689] ? copy_msghdr_from_user+0x10a/0x160 [ 781.231213][T14689] ? __pfx_____sys_sendmsg+0x10/0x10 [ 781.231256][T14689] ? __pfx__kstrtoull+0x10/0x10 [ 781.231294][T14689] ___sys_sendmsg+0x134/0x1d0 [ 781.231326][T14689] ? __pfx____sys_sendmsg+0x10/0x10 [ 781.231372][T14689] ? find_held_lock+0x2b/0x80 [ 781.231427][T14689] __sys_sendmmsg+0x200/0x420 [ 781.231463][T14689] ? __pfx___sys_sendmmsg+0x10/0x10 [ 781.231502][T14689] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 781.231552][T14689] ? fput+0x70/0xf0 [ 781.231580][T14689] ? ksys_write+0x1b9/0x240 [ 781.231603][T14689] ? __pfx_ksys_write+0x10/0x10 [ 781.231624][T14689] ? rcu_is_watching+0x12/0xc0 [ 781.231651][T14689] __x64_sys_sendmmsg+0x9c/0x100 [ 781.231680][T14689] ? lockdep_hardirqs_on+0x7c/0x110 [ 781.231714][T14689] do_syscall_64+0xcd/0x230 [ 781.231752][T14689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.231775][T14689] RIP: 0033:0x7f7b4f58e969 [ 781.231793][T14689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 781.231815][T14689] RSP: 002b:00007f7b504a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 781.231835][T14689] RAX: ffffffffffffffda RBX: 00007f7b4f7b5fa0 RCX: 00007f7b4f58e969 [ 781.231851][T14689] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 781.231865][T14689] RBP: 00007f7b504a6090 R08: 0000000000000000 R09: 0000000000000000 [ 781.231879][T14689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 781.231894][T14689] R13: 0000000000000000 R14: 00007f7b4f7b5fa0 R15: 00007ffd1a011628 [ 781.231923][T14689] [ 782.462057][T14695] blk_print_req_error: 72 callbacks suppressed [ 782.462078][T14695] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 782.502734][T14695] buffer_io_error: 71 callbacks suppressed [ 782.502753][T14695] Buffer I/O error on dev nbd7, logical block 0, async page read [ 782.543199][T14695] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 782.584015][T14695] Buffer I/O error on dev nbd7, logical block 0, async page read [ 782.607465][T14695] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 782.688628][T14695] Buffer I/O error on dev nbd7, logical block 0, async page read [ 782.726011][T14695] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 782.735083][T14695] Buffer I/O error on dev nbd7, logical block 0, async page read [ 782.785125][T14699] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 782.855399][T14695] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 782.901677][T14695] Buffer I/O error on dev nbd7, logical block 0, async page read [ 782.930367][T14695] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 782.996291][T14695] Buffer I/O error on dev nbd7, logical block 0, async page read [ 783.016178][T14695] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 783.041354][T14695] Buffer I/O error on dev nbd7, logical block 0, async page read [ 783.064373][T14695] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 783.093364][T14695] Buffer I/O error on dev nbd7, logical block 0, async page read [ 783.114429][T14695] ldm_validate_partition_table(): Disk read failed. [ 783.171735][T14695] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 783.280517][T14695] Buffer I/O error on dev nbd7, logical block 0, async page read [ 783.425291][T14695] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 783.604176][T14695] Buffer I/O error on dev nbd7, logical block 0, async page read [ 783.848052][T14695] Dev nbd7: unable to read RDB block 0 [ 783.956400][T14695] nbd7: unable to read partition table [ 784.657470][ T5201] ldm_validate_partition_table(): Disk read failed. [ 784.664542][ T5201] Dev nbd7: unable to read RDB block 0 [ 784.730414][ T5201] nbd7: unable to read partition table [ 784.769983][ T5201] ldm_validate_partition_table(): Disk read failed. [ 784.809322][ T5201] Dev nbd7: unable to read RDB block 0 [ 784.848984][ T5201] nbd7: unable to read partition table [ 784.981647][ T8916] ldm_validate_partition_table(): Disk read failed. [ 785.074155][ T8916] Dev nbd7: unable to read RDB block 0 [ 785.117730][ T8916] nbd7: unable to read partition table [ 785.187282][ T8916] ldm_validate_partition_table(): Disk read failed. [ 785.194413][ T8916] Dev nbd7: unable to read RDB block 0 [ 785.276477][ T8916] nbd7: unable to read partition table [ 796.106468][T14815] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 799.814454][T14855] CIFS mount error: No usable UNC path provided in device string! [ 799.814454][T14855] [ 799.870646][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 799.888714][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 799.896949][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 799.907733][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 799.916149][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 800.010842][T14855] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 800.970140][T14856] chnl_net:caif_netlink_parms(): no params data found [ 801.757294][T14856] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.819817][T14856] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.860641][T14856] bridge_slave_0: entered allmulticast mode [ 801.908305][T14856] bridge_slave_0: entered promiscuous mode [ 802.016008][T13547] Bluetooth: hci4: command tx timeout [ 802.029344][T14858] blk_print_req_error: 72 callbacks suppressed [ 802.029364][T14858] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 802.398307][T14858] buffer_io_error: 71 callbacks suppressed [ 802.398328][T14858] Buffer I/O error on dev nbd1, logical block 0, async page read [ 802.688400][T14858] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 802.752323][T14856] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.795908][T14856] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.846796][T14856] bridge_slave_1: entered allmulticast mode [ 802.854108][T14856] bridge_slave_1: entered promiscuous mode [ 802.886360][T14858] Buffer I/O error on dev nbd1, logical block 0, async page read [ 802.998740][T14858] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 803.089243][T14858] Buffer I/O error on dev nbd1, logical block 0, async page read [ 803.134001][T14856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 803.178967][T14858] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 803.224027][T14856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 803.233510][T14858] Buffer I/O error on dev nbd1, logical block 0, async page read [ 803.276420][T14858] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 803.342589][T14858] Buffer I/O error on dev nbd1, logical block 0, async page read [ 803.416052][T14858] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 803.442564][T14858] Buffer I/O error on dev nbd1, logical block 0, async page read [ 803.518838][T14858] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 803.533009][T14856] team0: Port device team_slave_0 added [ 803.575810][T14858] Buffer I/O error on dev nbd1, logical block 0, async page read [ 803.583738][T14858] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 803.599044][T14856] team0: Port device team_slave_1 added [ 803.708299][T14858] Buffer I/O error on dev nbd1, logical block 0, async page read [ 803.757642][T14858] ldm_validate_partition_table(): Disk read failed. [ 803.803408][T14858] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 803.824106][T14856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 803.875802][T14856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 803.905177][T14858] Buffer I/O error on dev nbd1, logical block 0, async page read [ 803.963410][T14858] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 804.008652][T14858] Buffer I/O error on dev nbd1, logical block 0, async page read [ 804.054062][T14858] Dev nbd1: unable to read RDB block 0 [ 804.059798][T14856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 804.096012][T13547] Bluetooth: hci4: command tx timeout [ 804.105338][T14858] nbd1: unable to read partition table [ 804.136326][T14856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 804.205576][T14856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 804.399327][T14856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 804.447204][ T5201] ldm_validate_partition_table(): Disk read failed. [ 804.507048][ T5201] Dev nbd1: unable to read RDB block 0 [ 804.513051][ T5201] nbd1: unable to read partition table [ 804.581695][ T5201] ldm_validate_partition_table(): Disk read failed. [ 804.630625][ T5201] Dev nbd1: unable to read RDB block 0 [ 804.669404][ T5201] nbd1: unable to read partition table [ 804.773201][ T8916] ldm_validate_partition_table(): Disk read failed. [ 804.816886][ T8916] Dev nbd1: unable to read RDB block 0 [ 804.842166][T14856] hsr_slave_0: entered promiscuous mode [ 804.873084][ T8916] nbd1: unable to read partition table [ 804.909704][T14856] hsr_slave_1: entered promiscuous mode [ 804.929661][ T8916] ldm_validate_partition_table(): Disk read failed. [ 804.985050][ T8916] Dev nbd1: unable to read RDB block 0 [ 805.026628][ T8916] nbd1: unable to read partition table [ 805.955642][T14856] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.177399][T13547] Bluetooth: hci4: command tx timeout [ 806.222431][T14856] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.389380][T14909] FAULT_INJECTION: forcing a failure. [ 806.389380][T14909] name failslab, interval 1, probability 0, space 0, times 0 [ 806.468518][T14909] CPU: 0 UID: 0 PID: 14909 Comm: syz.3.2273 Tainted: G U 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 806.468558][T14909] Tainted: [U]=USER [ 806.468566][T14909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 806.468579][T14909] Call Trace: [ 806.468587][T14909] [ 806.468596][T14909] dump_stack_lvl+0x16c/0x1f0 [ 806.468638][T14909] should_fail_ex+0x512/0x640 [ 806.468673][T14909] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 806.468700][T14909] should_failslab+0xc2/0x120 [ 806.468731][T14909] __kmalloc_cache_noprof+0x6a/0x3e0 [ 806.468753][T14909] ? apparmor_capable+0x114/0x1d0 [ 806.468779][T14909] ? single_open+0x4d/0x1f0 [ 806.468812][T14909] ? proc_setgroups_open+0x238/0x710 [ 806.468848][T14909] ? __pfx_proc_setgroups_show+0x10/0x10 [ 806.468883][T14909] single_open+0x4d/0x1f0 [ 806.468914][T14909] proc_setgroups_open+0x2ea/0x710 [ 806.468952][T14909] do_dentry_open+0x744/0x1c10 [ 806.468979][T14909] ? __pfx_proc_setgroups_open+0x10/0x10 [ 806.469020][T14909] vfs_open+0x82/0x3f0 [ 806.469062][T14909] path_openat+0x1e5e/0x2d40 [ 806.469098][T14909] ? __pfx_path_openat+0x10/0x10 [ 806.469130][T14909] do_filp_open+0x20b/0x470 [ 806.469155][T14909] ? __pfx_do_filp_open+0x10/0x10 [ 806.469190][T14909] ? __pfx_kfree_link+0x10/0x10 [ 806.469232][T14909] ? alloc_fd+0x471/0x7d0 [ 806.469279][T14909] do_sys_openat2+0x11b/0x1d0 [ 806.469315][T14909] ? __pfx_do_sys_openat2+0x10/0x10 [ 806.469353][T14909] ? __fget_files+0x20e/0x3c0 [ 806.469380][T14909] __x64_sys_openat+0x174/0x210 [ 806.469415][T14909] ? __pfx___x64_sys_openat+0x10/0x10 [ 806.469450][T14909] ? ksys_write+0x1b9/0x240 [ 806.469484][T14909] do_syscall_64+0xcd/0x230 [ 806.469525][T14909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.469553][T14909] RIP: 0033:0x7effed98e969 [ 806.469572][T14909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 806.469596][T14909] RSP: 002b:00007effee777038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 806.469619][T14909] RAX: ffffffffffffffda RBX: 00007effedbb5fa0 RCX: 00007effed98e969 [ 806.469635][T14909] RDX: 0000000000080002 RSI: 0000200000004300 RDI: ffffffffffffff9c [ 806.469651][T14909] RBP: 00007effee777090 R08: 0000000000000000 R09: 0000000000000000 [ 806.469666][T14909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 806.469680][T14909] R13: 0000000000000001 R14: 00007effedbb5fa0 R15: 00007fff14c63318 [ 806.469710][T14909] [ 807.107649][T14856] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.754247][T14856] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.924007][T14926] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 808.255939][ T5831] Bluetooth: hci4: command tx timeout [ 808.829498][T14856] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 808.892345][T14856] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 808.948405][T14856] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 809.072381][T14856] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 809.531411][T14856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 809.689519][T14856] 8021q: adding VLAN 0 to HW filter on device team0 [ 809.743305][T13498] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.750576][T13498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 809.858201][T13448] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.865368][T13448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 810.059441][T14856] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 811.082506][T14959] FAULT_INJECTION: forcing a failure. [ 811.082506][T14959] name failslab, interval 1, probability 0, space 0, times 0 [ 811.158604][T14856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 811.386623][T14959] CPU: 0 UID: 0 PID: 14959 Comm: syz.0.2282 Tainted: G U 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 811.386667][T14959] Tainted: [U]=USER [ 811.386676][T14959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 811.386691][T14959] Call Trace: [ 811.386699][T14959] [ 811.386708][T14959] dump_stack_lvl+0x16c/0x1f0 [ 811.386751][T14959] should_fail_ex+0x512/0x640 [ 811.386789][T14959] ? __kmalloc_noprof+0xbf/0x510 [ 811.386821][T14959] ? landlock_init_hierarchy_log+0x17f/0x810 [ 811.386856][T14959] should_failslab+0xc2/0x120 [ 811.386888][T14959] __kmalloc_noprof+0xd2/0x510 [ 811.386923][T14959] landlock_init_hierarchy_log+0x17f/0x810 [ 811.386964][T14959] landlock_merge_ruleset+0x6e1/0x870 [ 811.386992][T14959] ? prepare_creds+0x583/0x7d0 [ 811.387032][T14959] __do_sys_landlock_restrict_self+0x2a2/0x910 [ 811.387080][T14959] do_syscall_64+0xcd/0x230 [ 811.387121][T14959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.387146][T14959] RIP: 0033:0x7f2162b8e969 [ 811.387167][T14959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 811.387192][T14959] RSP: 002b:00007f2163a9f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 811.387215][T14959] RAX: ffffffffffffffda RBX: 00007f2162db5fa0 RCX: 00007f2162b8e969 [ 811.387233][T14959] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 811.387248][T14959] RBP: 00007f2162c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 811.387263][T14959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 811.387278][T14959] R13: 0000000000000000 R14: 00007f2162db5fa0 R15: 00007ffe79094ac8 [ 811.387309][T14959] [ 811.566992][ C0] vkms_vblank_simulate: vblank timer overrun [ 811.586225][T14856] veth0_vlan: entered promiscuous mode [ 811.597009][T14856] veth1_vlan: entered promiscuous mode [ 811.621949][T14856] veth0_macvtap: entered promiscuous mode [ 811.631127][T14856] veth1_macvtap: entered promiscuous mode [ 811.647697][T14856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 811.658278][T14856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 811.668188][T14856] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.677063][T14856] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.685847][T14856] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.694546][T14856] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.460446][T14954] Process accounting paused [ 812.503118][T13485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 812.568802][T13485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 812.730518][T13485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 812.764134][T13485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 814.545204][T14999] 0x000200000001-0xa29656a63616329 : "" [ 814.569836][T14999] mtd: partition "" is out of reach -- disabled [ 814.617585][T14999] ftl_cs: FTL header not found. [ 815.268352][T15012] Setting dangerous option i915.mitigations - tainting kernel [ 817.227996][T15037] Setting dangerous option i915.mitigations - tainting kernel [ 817.646090][T15042] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18 [ 817.996027][T15047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2301'. [ 818.992620][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 819.002004][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 819.820877][T15063] FAULT_INJECTION: forcing a failure. [ 819.820877][T15063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 819.984764][T15063] CPU: 0 UID: 0 PID: 15063 Comm: syz.1.2304 Tainted: G U 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 819.984805][T15063] Tainted: [U]=USER [ 819.984813][T15063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 819.984827][T15063] Call Trace: [ 819.984835][T15063] [ 819.984844][T15063] dump_stack_lvl+0x16c/0x1f0 [ 819.984907][T15063] should_fail_ex+0x512/0x640 [ 819.984948][T15063] _copy_from_iter+0x477/0x15b0 [ 819.984994][T15063] ? __pfx__copy_from_iter+0x10/0x10 [ 819.985039][T15063] ? __pfx___might_resched+0x10/0x10 [ 819.985074][T15063] file_tty_write.constprop.0+0x486/0x9b0 [ 819.985115][T15063] redirected_tty_write+0xd4/0x150 [ 819.985148][T15063] do_iter_readv_writev+0x654/0x950 [ 819.985192][T15063] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 819.985238][T15063] ? bpf_lsm_file_permission+0x9/0x10 [ 819.985261][T15063] ? security_file_permission+0x71/0x210 [ 819.985297][T15063] ? rw_verify_area+0xcf/0x680 [ 819.985338][T15063] vfs_writev+0x353/0xdc0 [ 819.985368][T15063] ? __pfx_vfs_writev+0x10/0x10 [ 819.985413][T15063] ? __fget_files+0x20e/0x3c0 [ 819.985434][T15063] ? __fget_files+0x1e0/0x3c0 [ 819.985464][T15063] ? do_writev+0x132/0x330 [ 819.985483][T15063] do_writev+0x132/0x330 [ 819.985506][T15063] ? __pfx_do_writev+0x10/0x10 [ 819.985526][T15063] ? rcu_is_watching+0x12/0xc0 [ 819.985559][T15063] do_syscall_64+0xcd/0x230 [ 819.985601][T15063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.985625][T15063] RIP: 0033:0x7fafc418e969 [ 819.985644][T15063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 819.985673][T15063] RSP: 002b:00007fafc500b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 819.985696][T15063] RAX: ffffffffffffffda RBX: 00007fafc43b5fa0 RCX: 00007fafc418e969 [ 819.985713][T15063] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 819.985728][T15063] RBP: 00007fafc500b090 R08: 0000000000000000 R09: 0000000000000000 [ 819.985743][T15063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 819.985757][T15063] R13: 0000000000000000 R14: 00007fafc43b5fa0 R15: 00007ffeac28b258 [ 819.985788][T15063] [ 824.065761][T15090] netlink: 346 bytes leftover after parsing attributes in process `syz.1.2309'. [ 824.462219][T15098] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 828.141325][T15111] CIFS mount error: No usable UNC path provided in device string! [ 828.141325][T15111] [ 828.223381][T15131] vivid-007: ================= START STATUS ================= [ 828.263704][T15111] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 828.288076][T15131] vivid-007: Generate PTS: true [ 828.293603][T15131] vivid-007: Generate SCR: true [ 828.367953][T15131] tpg source WxH: 640x360 (Y'CbCr) [ 828.373112][T15131] tpg field: 1 [ 828.414734][T15114] ptrace attach of "./syz-executor exec"[5830] was attempted by "./syz-executor exec"[15114] [ 828.442327][T15131] tpg crop: (0,0)/640x360 [ 828.463975][T15131] tpg compose: (0,0)/640x360 [ 828.539576][T15131] tpg colorspace: 8 [ 828.543426][T15131] tpg transfer function: 0/0 [ 828.609020][T15131] tpg Y'CbCr encoding: 0/0 [ 828.633314][T15131] tpg quantization: 0/0 [ 828.667818][T15131] tpg RGB range: 0/2 [ 828.709881][T15131] vivid-007: ================== END STATUS ================== [ 829.335439][ T30] audit: type=1107 audit(6042510039.743:7): pid=15148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 829.425945][ T30] audit: type=1107 audit(6042510039.793:8): pid=15148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 830.212326][T15165] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input19 [ 830.259027][T15167] vmstat_refresh: nr_hugetlb -8704 [ 830.998921][T15169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2324'. [ 831.898649][T15186] FAULT_INJECTION: forcing a failure. [ 831.898649][T15186] name failslab, interval 1, probability 0, space 0, times 0 [ 832.116629][T15186] CPU: 0 UID: 0 PID: 15186 Comm: syz.1.2326 Tainted: G U 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 832.116672][T15186] Tainted: [U]=USER [ 832.116681][T15186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 832.116696][T15186] Call Trace: [ 832.116704][T15186] [ 832.116714][T15186] dump_stack_lvl+0x16c/0x1f0 [ 832.116756][T15186] should_fail_ex+0x512/0x640 [ 832.116795][T15186] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 832.116828][T15186] should_failslab+0xc2/0x120 [ 832.116861][T15186] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 832.116897][T15186] ? __proc_create+0xc3/0x8c0 [ 832.116925][T15186] ? __proc_create+0x2ce/0x8c0 [ 832.116959][T15186] __proc_create+0x2ce/0x8c0 [ 832.116989][T15186] ? __pfx___proc_create+0x10/0x10 [ 832.117019][T15186] ? insert_header+0xf8d/0x1480 [ 832.117050][T15186] ? __register_sysctl_table+0x736/0x1900 [ 832.117085][T15186] proc_create_reg+0x7d/0x180 [ 832.117118][T15186] proc_create_net_data+0x8e/0x1b0 [ 832.117157][T15186] ? __pfx_proc_create_net_data+0x10/0x10 [ 832.117190][T15186] ? __pfx___register_sysctl_table+0x10/0x10 [ 832.117220][T15186] ? is_module_address+0x69/0xf0 [ 832.117254][T15186] ? register_net_sysctl_sz+0x228/0x3e0 [ 832.117281][T15186] ? __pfx_nf_log_net_init+0x10/0x10 [ 832.117311][T15186] nf_log_net_init+0x69/0x450 [ 832.117343][T15186] ? __pfx_nf_log_net_init+0x10/0x10 [ 832.117372][T15186] ops_init+0x1e2/0x5f0 [ 832.117409][T15186] setup_net+0x21e/0x850 [ 832.117444][T15186] ? __pfx_setup_net+0x10/0x10 [ 832.117476][T15186] ? lockdep_init_map_type+0x5c/0x280 [ 832.117511][T15186] ? __pfx_down_read_killable+0x10/0x10 [ 832.117540][T15186] ? debug_mutex_init+0x37/0x70 [ 832.117568][T15186] copy_net_ns+0x2a6/0x5f0 [ 832.117607][T15186] create_new_namespaces+0x3ea/0xad0 [ 832.117644][T15186] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 832.117676][T15186] ksys_unshare+0x45b/0xa40 [ 832.117712][T15186] ? __pfx_ksys_unshare+0x10/0x10 [ 832.117746][T15186] ? xfd_validate_state+0x5d/0x180 [ 832.117771][T15186] ? rcu_is_watching+0x12/0xc0 [ 832.117804][T15186] __x64_sys_unshare+0x31/0x40 [ 832.117839][T15186] do_syscall_64+0xcd/0x230 [ 832.117880][T15186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.117913][T15186] RIP: 0033:0x7fafc418e969 [ 832.117933][T15186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 832.117958][T15186] RSP: 002b:00007fafc500b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 832.117981][T15186] RAX: ffffffffffffffda RBX: 00007fafc43b5fa0 RCX: 00007fafc418e969 [ 832.117998][T15186] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 832.118013][T15186] RBP: 00007fafc4210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 832.118029][T15186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 832.118044][T15186] R13: 0000000000000000 R14: 00007fafc43b5fa0 R15: 00007ffeac28b258 [ 832.118075][T15186] [ 832.805626][ T5831] Bluetooth: hci2: Unable to find connection for big 0xd2 [ 833.697645][T15200] FAULT_INJECTION: forcing a failure. [ 833.697645][T15200] name failslab, interval 1, probability 0, space 0, times 0 [ 833.762018][T15200] CPU: 0 UID: 0 PID: 15200 Comm: syz.1.2328 Tainted: G U 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 833.762062][T15200] Tainted: [U]=USER [ 833.762070][T15200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 833.762085][T15200] Call Trace: [ 833.762094][T15200] [ 833.762103][T15200] dump_stack_lvl+0x16c/0x1f0 [ 833.762146][T15200] should_fail_ex+0x512/0x640 [ 833.762197][T15200] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 833.762224][T15200] should_failslab+0xc2/0x120 [ 833.762256][T15200] __kmalloc_cache_noprof+0x6a/0x3e0 [ 833.762281][T15200] ? resv_map_alloc+0x7e/0x400 [ 833.762335][T15200] resv_map_alloc+0x7e/0x400 [ 833.762369][T15200] hugetlbfs_get_inode+0x33f/0x730 [ 833.762404][T15200] hugetlb_file_setup+0x15b/0x620 [ 833.762439][T15200] ksys_mmap_pgoff+0x189/0x5c0 [ 833.762476][T15200] ? rcu_is_watching+0x12/0xc0 [ 833.762503][T15200] __x64_sys_mmap+0x125/0x190 [ 833.762530][T15200] do_syscall_64+0xcd/0x230 [ 833.762570][T15200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.762595][T15200] RIP: 0033:0x7fafc418e969 [ 833.762613][T15200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 833.762638][T15200] RSP: 002b:00007fafc4fea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 833.762661][T15200] RAX: ffffffffffffffda RBX: 00007fafc43b6080 RCX: 00007fafc418e969 [ 833.762689][T15200] RDX: 0000000000009c0f RSI: 000000000000000c RDI: 0000000000000000 [ 833.762703][T15200] RBP: 00007fafc4210ab1 R08: 0000000000010006 R09: 0000300000000000 [ 833.762718][T15200] R10: 0000000000044eb2 R11: 0000000000000246 R12: 0000000000000000 [ 833.762732][T15200] R13: 0000000000000000 R14: 00007fafc43b6080 R15: 00007ffeac28b258 [ 833.762766][T15200] [ 834.314923][T15168] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20 [ 837.528864][T15250] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2341'. [ 837.827746][T15254] vivid-007: ================= START STATUS ================= [ 837.878517][T15254] vivid-007: Generate PTS: true [ 837.908593][T15254] vivid-007: Generate SCR: true [ 837.913511][T15254] tpg source WxH: 640x360 (Y'CbCr) [ 837.957328][T15254] tpg field: 1 [ 837.972898][T15254] tpg crop: (0,0)/640x360 [ 837.997661][T15254] tpg compose: (0,0)/640x360 [ 838.017365][T15258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2344'. [ 838.030231][T15254] tpg colorspace: 8 [ 838.034080][T15254] tpg transfer function: 0/0 [ 838.140234][T15254] tpg Y'CbCr encoding: 0/0 [ 838.144699][T15254] tpg quantization: 0/0 [ 838.184348][T15254] tpg RGB range: 0/2 [ 838.215606][T15254] vivid-007: ================== END STATUS ================== [ 838.571925][T15271] FAULT_INJECTION: forcing a failure. [ 838.571925][T15271] name failslab, interval 1, probability 0, space 0, times 0 [ 838.794363][T15271] CPU: 0 UID: 0 PID: 15271 Comm: syz.0.2347 Tainted: G U 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 838.794409][T15271] Tainted: [U]=USER [ 838.794418][T15271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 838.794433][T15271] Call Trace: [ 838.794441][T15271] [ 838.794450][T15271] dump_stack_lvl+0x16c/0x1f0 [ 838.794494][T15271] should_fail_ex+0x512/0x640 [ 838.794532][T15271] ? fs_reclaim_acquire+0xae/0x150 [ 838.794575][T15271] should_failslab+0xc2/0x120 [ 838.794607][T15271] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 838.794637][T15271] ? security_inode_alloc+0x3b/0x2b0 [ 838.794671][T15271] security_inode_alloc+0x3b/0x2b0 [ 838.794702][T15271] inode_init_always_gfp+0xce4/0x1030 [ 838.794731][T15271] alloc_inode+0x86/0x240 [ 838.794764][T15271] alloc_anon_inode+0x28/0x3e0 [ 838.794789][T15271] __anon_inode_getfile+0x1ea/0x370 [ 838.794836][T15271] io_uring_setup+0x14cf/0x1ff0 [ 838.794874][T15271] ? __pfx_io_uring_setup+0x10/0x10 [ 838.794930][T15271] ? rcu_is_watching+0x12/0xc0 [ 838.794960][T15271] __x64_sys_io_uring_setup+0xc2/0x170 [ 838.794996][T15271] do_syscall_64+0xcd/0x230 [ 838.795038][T15271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.795064][T15271] RIP: 0033:0x7f2162b8e969 [ 838.795083][T15271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 838.795108][T15271] RSP: 002b:00007f2163a9f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 838.795132][T15271] RAX: ffffffffffffffda RBX: 00007f2162db5fa0 RCX: 00007f2162b8e969 [ 838.795149][T15271] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 838.795164][T15271] RBP: 00007f2162c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 838.795180][T15271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 838.795217][T15271] R13: 0000000000000000 R14: 00007f2162db5fa0 R15: 00007ffe79094ac8 [ 838.795247][T15271] [ 838.989631][ C0] vkms_vblank_simulate: vblank timer overrun [ 840.079995][T15294] Setting dangerous option i915.mitigations - tainting kernel [ 840.693016][T15301] Setting dangerous option i915.mitigations - tainting kernel [ 841.223640][T15316] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 841.265991][T15315] nbd12: detected capacity change from 0 to 68719476736 [ 841.283623][ T8916] block nbd12: Send control failed (result -22) [ 841.324659][ T8916] block nbd12: Request send failed, requeueing [ 841.361197][ T5831] block nbd12: Receive control failed (result -32) [ 841.371996][T10218] block nbd12: Dead connection, failed to find a fallback [ 841.381724][T10218] block nbd12: shutting down sockets [ 841.387350][T10218] blk_print_req_error: 72 callbacks suppressed [ 841.387366][T10218] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 841.416208][T10218] buffer_io_error: 71 callbacks suppressed [ 841.416225][T10218] Buffer I/O error on dev nbd12, logical block 0, async page read [ 841.440945][ T8916] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 841.507895][ T8916] Buffer I/O error on dev nbd12, logical block 0, async page read [ 841.583506][ T8916] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 841.646316][ T8916] Buffer I/O error on dev nbd12, logical block 0, async page read [ 841.699292][ T8916] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 841.760162][ T8916] Buffer I/O error on dev nbd12, logical block 0, async page read [ 841.776170][T15322] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 841.826714][ T8916] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 841.888695][ T8916] Buffer I/O error on dev nbd12, logical block 0, async page read [ 841.946603][ T8916] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 842.007926][ T8916] Buffer I/O error on dev nbd12, logical block 0, async page read [ 842.060120][ T8916] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 842.115555][ T8916] Buffer I/O error on dev nbd12, logical block 0, async page read [ 842.155859][ T8916] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 842.187039][T15330] FAULT_INJECTION: forcing a failure. [ 842.187039][T15330] name failslab, interval 1, probability 0, space 0, times 0 [ 842.208495][ T8916] Buffer I/O error on dev nbd12, logical block 0, async page read [ 842.255461][ T8916] ldm_validate_partition_table(): Disk read failed. [ 842.308039][ T8916] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 842.378530][ T8916] Buffer I/O error on dev nbd12, logical block 0, async page read [ 842.387962][T15330] CPU: 0 UID: 0 PID: 15330 Comm: syz.2.2359 Tainted: G U 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 842.388000][T15330] Tainted: [U]=USER [ 842.388008][T15330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 842.388023][T15330] Call Trace: [ 842.388030][T15330] [ 842.388039][T15330] dump_stack_lvl+0x16c/0x1f0 [ 842.388100][T15330] should_fail_ex+0x512/0x640 [ 842.388136][T15330] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 842.388167][T15330] should_failslab+0xc2/0x120 [ 842.388195][T15330] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 842.388223][T15330] ? alloc_inode+0xc3/0x240 [ 842.388255][T15330] alloc_inode+0xc3/0x240 [ 842.388283][T15330] alloc_anon_inode+0x28/0x3e0 [ 842.388306][T15330] __anon_inode_getfile+0x1ea/0x370 [ 842.388366][T15330] io_uring_setup+0x14cf/0x1ff0 [ 842.388403][T15330] ? __pfx_io_uring_setup+0x10/0x10 [ 842.388457][T15330] ? rcu_is_watching+0x12/0xc0 [ 842.388486][T15330] __x64_sys_io_uring_setup+0xc2/0x170 [ 842.388521][T15330] do_syscall_64+0xcd/0x230 [ 842.388561][T15330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.388585][T15330] RIP: 0033:0x7f6f09d8e969 [ 842.388604][T15330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 842.388628][T15330] RSP: 002b:00007f6f0ac02038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 842.388651][T15330] RAX: ffffffffffffffda RBX: 00007f6f09fb5fa0 RCX: 00007f6f09d8e969 [ 842.388668][T15330] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 842.388682][T15330] RBP: 00007f6f09e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 842.388697][T15330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 842.388711][T15330] R13: 0000000000000000 R14: 00007f6f09fb5fa0 R15: 00007ffdcf4ff638 [ 842.388740][T15330] [ 842.795074][ T8916] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 842.835087][ T8916] Buffer I/O error on dev nbd12, logical block 0, async page read [ 842.886035][ T8916] Dev nbd12: unable to read RDB block 0 [ 842.892096][ T8916] nbd12: unable to read partition table [ 842.953309][ T8916] ldm_validate_partition_table(): Disk read failed. [ 842.988744][ T8916] Dev nbd12: unable to read RDB block 0 [ 843.030470][ T8916] nbd12: unable to read partition table [ 843.190423][T15319] Process accounting resumed [ 846.522818][T15396] vmstat_refresh: nr_hugetlb -8704 [ 848.571139][T15423] kernel read not supported for file /set_event_notrace_pid (pid: 15423 comm: syz.1.2379) [ 848.620354][T15423] FAULT_INJECTION: forcing a failure. [ 848.620354][T15423] name failslab, interval 1, probability 0, space 0, times 0 [ 848.634527][ T30] audit: type=1800 audit(6042510059.033:9): pid=15423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2379" name="set_event_notrace_pid" dev="tracefs" ino=1070 res=0 errno=0 [ 848.705855][T15423] CPU: 0 UID: 0 PID: 15423 Comm: syz.1.2379 Tainted: G U 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 848.705895][T15423] Tainted: [U]=USER [ 848.705903][T15423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 848.705917][T15423] Call Trace: [ 848.705925][T15423] [ 848.705934][T15423] dump_stack_lvl+0x16c/0x1f0 [ 848.705980][T15423] should_fail_ex+0x512/0x640 [ 848.706015][T15423] ? __kvmalloc_node_noprof+0x122/0x600 [ 848.706043][T15423] should_failslab+0xc2/0x120 [ 848.706071][T15423] __kvmalloc_node_noprof+0x135/0x600 [ 848.706095][T15423] ? __pfx___mutex_lock+0x10/0x10 [ 848.706128][T15423] ? traverse.part.0.constprop.0+0x392/0x640 [ 848.706169][T15423] ? traverse.part.0.constprop.0+0x392/0x640 [ 848.706201][T15423] traverse.part.0.constprop.0+0x392/0x640 [ 848.706236][T15423] ? aa_file_perm+0x4c7/0xfb0 [ 848.706274][T15423] seq_read_iter+0x932/0x12c0 [ 848.706307][T15423] ? __pfx__kstrtoull+0x10/0x10 [ 848.706344][T15423] seq_read+0x39e/0x4e0 [ 848.706374][T15423] ? copy_iovec_from_user+0x138/0x170 [ 848.706408][T15423] ? __pfx_seq_read+0x10/0x10 [ 848.706441][T15423] ? iovec_from_user+0xbb/0x140 [ 848.706476][T15423] ? rw_verify_area+0xcf/0x680 [ 848.706509][T15423] ? __pfx_seq_read+0x10/0x10 [ 848.706541][T15423] vfs_readv+0x6bc/0x8a0 [ 848.706584][T15423] ? get_pid_task+0x106/0x250 [ 848.706625][T15423] ? __pfx_vfs_readv+0x10/0x10 [ 848.706664][T15423] ? find_held_lock+0x2b/0x80 [ 848.706706][T15423] ? __fget_files+0x20e/0x3c0 [ 848.706735][T15423] ? do_preadv+0x1af/0x270 [ 848.706755][T15423] do_preadv+0x1af/0x270 [ 848.706777][T15423] ? __pfx_do_preadv+0x10/0x10 [ 848.706797][T15423] ? rcu_is_watching+0x12/0xc0 [ 848.706832][T15423] do_syscall_64+0xcd/0x230 [ 848.706873][T15423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.706899][T15423] RIP: 0033:0x7fafc418e969 [ 848.706918][T15423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 848.706943][T15423] RSP: 002b:00007fafc500b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 848.706966][T15423] RAX: ffffffffffffffda RBX: 00007fafc43b5fa0 RCX: 00007fafc418e969 [ 848.706983][T15423] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 0000000000000003 [ 848.706998][T15423] RBP: 00007fafc500b090 R08: 0000000000000008 R09: 0000000000000000 [ 848.707014][T15423] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 848.707029][T15423] R13: 0000000000000000 R14: 00007fafc43b5fa0 R15: 00007ffeac28b258 [ 848.707060][T15423] [ 849.620939][T15434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2381'. [ 853.855886][T15491] FAULT_INJECTION: forcing a failure. [ 853.855886][T15491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 853.935924][T15491] CPU: 0 UID: 0 PID: 15491 Comm: syz.0.2400 Tainted: G U 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 853.935963][T15491] Tainted: [U]=USER [ 853.935971][T15491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 853.935985][T15491] Call Trace: [ 853.935992][T15491] [ 853.936002][T15491] dump_stack_lvl+0x16c/0x1f0 [ 853.936043][T15491] should_fail_ex+0x512/0x640 [ 853.936081][T15491] _copy_to_user+0x32/0xd0 [ 853.936105][T15491] simple_read_from_buffer+0xcb/0x170 [ 853.936149][T15491] proc_fail_nth_read+0x197/0x270 [ 853.936184][T15491] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 853.936220][T15491] ? rw_verify_area+0xcf/0x680 [ 853.936255][T15491] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 853.936291][T15491] vfs_read+0x1e1/0xc70 [ 853.936317][T15491] ? __pfx___mutex_lock+0x10/0x10 [ 853.936354][T15491] ? __pfx_vfs_read+0x10/0x10 [ 853.936385][T15491] ? __fget_files+0x20e/0x3c0 [ 853.936416][T15491] ksys_read+0x12a/0x240 [ 853.936438][T15491] ? __pfx_ksys_read+0x10/0x10 [ 853.936460][T15491] ? rcu_is_watching+0x12/0xc0 [ 853.936490][T15491] do_syscall_64+0xcd/0x230 [ 853.936527][T15491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.936550][T15491] RIP: 0033:0x7f2162b8d37c [ 853.936568][T15491] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 853.936592][T15491] RSP: 002b:00007f2163a9f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 853.936614][T15491] RAX: ffffffffffffffda RBX: 00007f2162db5fa0 RCX: 00007f2162b8d37c [ 853.936631][T15491] RDX: 000000000000000f RSI: 00007f2163a9f0a0 RDI: 0000000000000003 [ 853.936645][T15491] RBP: 00007f2163a9f090 R08: 0000000000000000 R09: 0000000000000000 [ 853.936660][T15491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 853.936674][T15491] R13: 0000000000000001 R14: 00007f2162db5fa0 R15: 00007ffe79094ac8 [ 853.936704][T15491] [ 854.546963][T13547] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 854.589690][T13547] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 854.602832][T13547] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 854.614691][T13547] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 854.622999][T13547] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 855.704543][T15493] chnl_net:caif_netlink_parms(): no params data found [ 856.253848][ T5837] smc: removing net device syz_tun with user defined pnetid ETHTOOL [ 856.708581][T13448] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.737672][T13547] Bluetooth: hci0: command tx timeout [ 856.863854][T15493] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.903384][T15493] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.952542][T15493] bridge_slave_0: entered allmulticast mode [ 857.009919][T15493] bridge_slave_0: entered promiscuous mode [ 857.079562][T15493] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.123309][T15493] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.159569][T15493] bridge_slave_1: entered allmulticast mode [ 857.207701][T15493] bridge_slave_1: entered promiscuous mode [ 857.363292][T13448] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.748636][T13448] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.909626][T15493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 858.015191][T13448] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.114089][T15493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 858.366558][T15493] team0: Port device team_slave_0 added [ 858.422231][T15493] team0: Port device team_slave_1 added [ 858.741385][T15493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 858.778551][T15493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 858.824391][T13547] Bluetooth: hci0: command tx timeout [ 858.871080][T15566] vmstat_refresh: nr_hugetlb -8704 [ 858.888216][T15493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 858.935610][T15493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 858.973166][T15493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 859.072416][T15493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 859.098195][T15548] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 859.111721][T15548] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 859.145359][T15548] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 859.184804][T15548] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 859.237657][T15548] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 859.266593][T15548] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 859.292696][T15548] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 859.324431][T15548] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 859.410225][T15493] hsr_slave_0: entered promiscuous mode [ 859.466812][T15493] hsr_slave_1: entered promiscuous mode [ 859.511705][T15493] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 859.595443][T15493] Cannot create hsr debugfs directory [ 859.741853][T15576] blk_print_req_error: 24 callbacks suppressed [ 859.741873][T15576] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 859.830707][T15576] buffer_io_error: 23 callbacks suppressed [ 859.830726][T15576] Buffer I/O error on dev nbd0, logical block 0, async page read [ 859.872664][T13448] bridge_slave_0: left allmulticast mode [ 859.895904][T13448] bridge_slave_0: left promiscuous mode [ 859.913364][T13448] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.923267][T15576] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 859.967157][T15576] Buffer I/O error on dev nbd0, logical block 0, async page read [ 860.012582][T15576] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 860.065018][T15576] Buffer I/O error on dev nbd0, logical block 0, async page read [ 860.112748][T15576] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 860.150728][T15582] netlink: 'syz.0.2422': attribute type 10 has an invalid length. [ 860.175207][T15576] Buffer I/O error on dev nbd0, logical block 0, async page read [ 860.218456][T15576] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 860.235771][T15582] netlink: 230 bytes leftover after parsing attributes in process `syz.0.2422'. [ 860.271816][T15576] Buffer I/O error on dev nbd0, logical block 0, async page read [ 860.308249][T15576] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 860.349701][T13547] Bluetooth: hci1: command 0x0406 tx timeout [ 860.371281][T15576] Buffer I/O error on dev nbd0, logical block 0, async page read [ 860.405606][T15576] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 860.452172][T15576] Buffer I/O error on dev nbd0, logical block 0, async page read [ 860.505343][T15576] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 860.581908][T15576] Buffer I/O error on dev nbd0, logical block 0, async page read [ 860.624239][T15576] ldm_validate_partition_table(): Disk read failed. [ 860.672597][T15576] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 860.721025][T15576] Buffer I/O error on dev nbd0, logical block 0, async page read [ 861.025952][T15576] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 861.135815][T13547] Bluetooth: hci2: command 0x0406 tx timeout [ 861.216214][T13547] Bluetooth: hci4: command 0x0c1a tx timeout [ 861.296037][T13547] Bluetooth: hci0: command 0x0419 tx timeout [ 861.505705][T15576] Buffer I/O error on dev nbd0, logical block 0, async page read [ 861.618272][T15576] Dev nbd0: unable to read RDB block 0 [ 861.624332][T15576] nbd0: unable to read partition table [ 862.249146][T13448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 862.280705][T13448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 862.312614][T13448] bond0 (unregistering): Released all slaves [ 862.399558][T15596] mkiss: ax0: crc mode is auto. [ 863.299574][T13547] Bluetooth: hci4: command 0x0c1a tx timeout [ 863.376209][T13547] Bluetooth: hci0: command 0x0419 tx timeout [ 863.774102][T15620] vmstat_refresh: nr_hugetlb -8704 [ 863.912077][T13448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 863.958298][T13448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 863.999641][T13448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 864.032686][T13448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 864.144201][T13448] veth1_macvtap: left promiscuous mode [ 864.175365][T13448] veth0_macvtap: left promiscuous mode [ 864.210000][T13448] veth1_vlan: left promiscuous mode [ 864.233120][T13448] veth0_vlan: left promiscuous mode [ 864.722091][T15633] Setting dangerous option i915.mitigations - tainting kernel [ 865.381777][T13547] Bluetooth: hci4: command 0x0c1a tx timeout [ 865.459921][T13547] Bluetooth: hci0: command 0x0419 tx timeout [ 866.300256][T13448] team0 (unregistering): Port device team_slave_1 removed [ 866.430532][T13448] team0 (unregistering): Port device team_slave_0 removed [ 867.535850][T13547] Bluetooth: hci0: command 0x0419 tx timeout [ 869.263085][T15493] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 869.391237][T15493] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 869.515151][T15493] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 869.621050][T15493] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 869.962518][T15659] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 870.033939][T15659] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 870.085518][T15659] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 870.140949][T15659] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 870.168883][T15493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 870.316967][T15493] 8021q: adding VLAN 0 to HW filter on device team0 [ 870.430539][T13448] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.437832][T13448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 870.505939][T13547] Bluetooth: hci1: command 0x0406 tx timeout [ 870.551970][T13448] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.559186][T13448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 870.893369][T15493] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 871.713313][T15699] QAT: Invalid ioctl 21531 [ 871.994964][T15493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 872.106084][T13547] Bluetooth: hci4: command 0x0c1a tx timeout [ 872.112140][T13547] Bluetooth: hci2: command 0x0406 tx timeout [ 872.176322][T13547] Bluetooth: hci0: command 0x0419 tx timeout [ 872.376048][T15493] veth0_vlan: entered promiscuous mode [ 872.421830][T15493] veth1_vlan: entered promiscuous mode [ 872.659276][T15493] veth0_macvtap: entered promiscuous mode [ 872.759590][T15493] veth1_macvtap: entered promiscuous mode [ 872.988764][T15493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 873.326569][T15493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 873.468589][T15493] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.555764][T15493] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.564516][T15493] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.678249][T15493] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.486410][T13500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 874.560978][T13500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 874.775854][T13485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 874.828398][T13485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 874.990332][T15738] ACPI: Can not change Invalid GPE/Fixed Event status [ 875.170281][T15711] Process accounting paused [ 875.979828][T15756] FAULT_INJECTION: forcing a failure. [ 875.979828][T15756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 876.205427][T15756] CPU: 0 UID: 0 PID: 15756 Comm: syz.0.2454 Tainted: G U 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 876.205466][T15756] Tainted: [U]=USER [ 876.205474][T15756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 876.205488][T15756] Call Trace: [ 876.205496][T15756] [ 876.205505][T15756] dump_stack_lvl+0x16c/0x1f0 [ 876.205546][T15756] should_fail_ex+0x512/0x640 [ 876.205588][T15756] _copy_from_user+0x2e/0xd0 [ 876.205631][T15756] input_event_from_user+0xb9/0x290 [ 876.205668][T15756] ? __pfx_input_event_from_user+0x10/0x10 [ 876.205703][T15756] ? __pfx___might_resched+0x10/0x10 [ 876.205730][T15756] ? input_inject_event+0x51/0x390 [ 876.205767][T15756] evdev_write+0x26b/0x440 [ 876.205803][T15756] ? __pfx_evdev_write+0x10/0x10 [ 876.205837][T15756] ? bpf_lsm_file_permission+0x9/0x10 [ 876.205860][T15756] ? security_file_permission+0x71/0x210 [ 876.205895][T15756] ? rw_verify_area+0xcf/0x680 [ 876.205936][T15756] vfs_write+0x25f/0x1180 [ 876.205958][T15756] ? __pfx_evdev_write+0x10/0x10 [ 876.205995][T15756] ? __pfx_vfs_write+0x10/0x10 [ 876.206017][T15756] ? find_held_lock+0x2b/0x80 [ 876.206042][T15756] ? __fget_files+0x204/0x3c0 [ 876.206067][T15756] ? __fget_files+0x20e/0x3c0 [ 876.206097][T15756] ksys_write+0x205/0x240 [ 876.206121][T15756] ? __pfx_ksys_write+0x10/0x10 [ 876.206143][T15756] ? rcu_is_watching+0x12/0xc0 [ 876.206173][T15756] do_syscall_64+0xcd/0x230 [ 876.206219][T15756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.206243][T15756] RIP: 0033:0x7f2162b8e969 [ 876.206261][T15756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 876.206284][T15756] RSP: 002b:00007f2163a9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 876.206306][T15756] RAX: ffffffffffffffda RBX: 00007f2162db5fa0 RCX: 00007f2162b8e969 [ 876.206322][T15756] RDX: 0000000000010001 RSI: 0000200000000040 RDI: 0000000000000003 [ 876.206337][T15756] RBP: 00007f2163a9f090 R08: 0000000000000000 R09: 0000000000000000 [ 876.206352][T15756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 876.206366][T15756] R13: 0000000000000000 R14: 00007f2162db5fa0 R15: 00007ffe79094ac8 [ 876.206396][T15756] [ 876.931580][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 877.023573][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 877.060874][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 877.312862][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 877.399079][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 878.958649][T15759] chnl_net:caif_netlink_parms(): no params data found [ 879.535927][ T5831] Bluetooth: hci3: command tx timeout [ 879.673754][T15759] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.716872][T15759] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.756038][T15759] bridge_slave_0: entered allmulticast mode [ 879.798433][T15759] bridge_slave_0: entered promiscuous mode [ 879.852048][T15759] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.896893][T15759] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.946630][T15759] bridge_slave_1: entered allmulticast mode [ 879.994786][T15759] bridge_slave_1: entered promiscuous mode [ 880.434787][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 880.446349][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 880.503027][T15759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 880.564485][T15759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 881.059681][T15759] team0: Port device team_slave_0 added [ 881.186888][T15759] team0: Port device team_slave_1 added [ 881.616659][ T5831] Bluetooth: hci3: command tx timeout [ 882.077800][T15759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 882.084784][T15759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 882.287691][T15759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 882.401931][T15759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 882.461630][T15759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 882.709212][T15759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 883.381057][T15873] input: R¬! as /devices/virtual/input/input21 [ 883.592463][T15759] hsr_slave_0: entered promiscuous mode [ 883.627607][T15759] hsr_slave_1: entered promiscuous mode [ 883.633765][T15759] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 883.711735][ T5831] Bluetooth: hci3: command tx timeout [ 883.750631][T15759] Cannot create hsr debugfs directory [ 884.246930][T15880] blk_print_req_error: 6 callbacks suppressed [ 884.246949][T15880] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 884.837467][T15880] buffer_io_error: 6 callbacks suppressed [ 884.837495][T15880] Buffer I/O error on dev nbd0, logical block 0, async page read [ 885.408304][T15880] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 885.638974][T15880] Buffer I/O error on dev nbd0, logical block 0, async page read [ 885.735921][T15880] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 885.779269][ T5831] Bluetooth: hci3: command tx timeout [ 885.798507][T15759] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.845776][T15880] Buffer I/O error on dev nbd0, logical block 0, async page read [ 885.924672][T15880] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 886.013652][T15880] Buffer I/O error on dev nbd0, logical block 0, async page read [ 886.049407][T15880] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 886.100929][T15880] Buffer I/O error on dev nbd0, logical block 0, async page read [ 886.153133][T15880] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 886.214484][T15880] Buffer I/O error on dev nbd0, logical block 0, async page read [ 886.250820][T15880] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 886.280097][T15759] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.309735][T15880] Buffer I/O error on dev nbd0, logical block 0, async page read [ 886.339631][T15880] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 886.388875][T15880] Buffer I/O error on dev nbd0, logical block 0, async page read [ 886.416168][T15880] ldm_validate_partition_table(): Disk read failed. [ 886.455970][T15880] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 886.517878][T15880] Buffer I/O error on dev nbd0, logical block 0, async page read [ 886.576493][T15880] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 886.633828][T15880] Buffer I/O error on dev nbd0, logical block 0, async page read [ 886.665196][T15880] Dev nbd0: unable to read RDB block 0 [ 886.694717][T15880] nbd0: unable to read partition table [ 886.814108][T15759] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.372241][T15759] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.631166][T15906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2475'. [ 888.544900][T15759] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 888.963923][T15759] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 889.233309][T15759] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 889.366606][T15759] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 890.005205][T15759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 890.108544][T15759] 8021q: adding VLAN 0 to HW filter on device team0 [ 890.165699][T13500] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.172843][T13500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 890.263538][T13485] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.270745][T13485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 890.978693][T15936] random: crng reseeded on system resumption [ 891.598316][T15759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 891.813823][T15759] veth0_vlan: entered promiscuous mode [ 892.198999][T15759] veth1_vlan: entered promiscuous mode [ 892.651131][T15759] veth0_macvtap: entered promiscuous mode [ 892.663862][T15944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2485'. [ 892.779462][T15759] veth1_macvtap: entered promiscuous mode [ 892.960766][T15759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 893.048959][T15759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 893.108466][T15759] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.155827][T15759] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.221077][T15759] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.275922][T15759] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.686782][T14365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 894.735469][T14365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 894.911542][T13500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 894.953087][T13500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 895.020317][T15956] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22 [ 895.517637][T15967] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 895.767322][T15969] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2490'. [ 895.902952][T15969] bridge_slave_1: left allmulticast mode [ 896.007310][T15969] bridge_slave_1: left promiscuous mode [ 896.066053][T15969] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.389782][T15969] bridge_slave_0: left allmulticast mode [ 896.395576][T15969] bridge_slave_0: left promiscuous mode [ 896.425829][T15969] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.792287][T15979] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 899.592247][T16006] blk_print_req_error: 6 callbacks suppressed [ 899.592284][T16006] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 899.711810][T16006] buffer_io_error: 6 callbacks suppressed [ 899.711833][T16006] Buffer I/O error on dev nbd0, logical block 0, async page read [ 899.929331][T16006] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 900.036954][T16006] Buffer I/O error on dev nbd0, logical block 0, async page read [ 900.045060][T16006] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 900.333739][T16006] Buffer I/O error on dev nbd0, logical block 0, async page read [ 900.464255][T16006] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 900.665222][T16006] Buffer I/O error on dev nbd0, logical block 0, async page read [ 900.697665][T16016] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 900.769356][T16006] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 900.800732][T16022] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 900.865779][T16006] Buffer I/O error on dev nbd0, logical block 0, async page read [ 900.888987][T16006] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 900.925800][T16006] Buffer I/O error on dev nbd0, logical block 0, async page read [ 900.946229][T16006] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 901.058037][T16006] Buffer I/O error on dev nbd0, logical block 0, async page read [ 901.176064][T16006] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 901.185196][T16006] Buffer I/O error on dev nbd0, logical block 0, async page read [ 901.268504][T16006] ldm_validate_partition_table(): Disk read failed. [ 901.309067][T16006] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 901.391586][T16006] Buffer I/O error on dev nbd0, logical block 0, async page read [ 901.464735][ T7381] ima: policy update failed [ 901.493338][T16006] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 901.504062][ T30] audit: type=1802 audit(6042510111.913:10): pid=7381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.367" res=0 errno=0 [ 901.572502][T16006] Buffer I/O error on dev nbd0, logical block 0, async page read [ 901.634000][T16006] Dev nbd0: unable to read RDB block 0 [ 901.738461][T16006] nbd0: unable to read partition table [ 902.286194][T13547] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 902.296272][T13547] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 902.305952][T13547] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 902.320122][T13547] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 902.328667][T13547] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 902.356511][T16040] FAULT_INJECTION: forcing a failure. [ 902.356511][T16040] name failslab, interval 1, probability 0, space 0, times 0 [ 902.371303][T16040] CPU: 0 UID: 0 PID: 16040 Comm: syz.2.2506 Tainted: G U 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 902.371357][T16040] Tainted: [U]=USER [ 902.371369][T16040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 902.371402][T16040] Call Trace: [ 902.371413][T16040] [ 902.371426][T16040] dump_stack_lvl+0x16c/0x1f0 [ 902.371483][T16040] should_fail_ex+0x512/0x640 [ 902.371533][T16040] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 902.371573][T16040] should_failslab+0xc2/0x120 [ 902.371616][T16040] __kmalloc_cache_noprof+0x6a/0x3e0 [ 902.371650][T16040] ? __genradix_ptr_alloc+0x340/0x5f0 [ 902.371683][T16040] ? sctp_auth_shkey_create+0x9e/0x210 [ 902.371724][T16040] sctp_auth_shkey_create+0x9e/0x210 [ 902.371762][T16040] sctp_auth_asoc_copy_shkeys+0x1f2/0x360 [ 902.371807][T16040] sctp_association_new+0x19ad/0x2a00 [ 902.371858][T16040] sctp_connect_new_asoc+0x1b6/0x790 [ 902.371905][T16040] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 902.371954][T16040] ? sctp_get_af_specific+0x62/0x70 [ 902.371995][T16040] __sctp_connect+0x3f3/0xc60 [ 902.372041][T16040] ? do_raw_spin_lock+0x12c/0x2b0 [ 902.372103][T16040] ? __pfx___sctp_connect+0x10/0x10 [ 902.372147][T16040] ? __pfx_sctp_inet_connect+0x10/0x10 [ 902.372191][T16040] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 902.372241][T16040] ? __pfx_sctp_inet_connect+0x10/0x10 [ 902.372278][T16040] sctp_inet_connect+0x15f/0x200 [ 902.372318][T16040] __sys_connect_file+0x141/0x1a0 [ 902.372357][T16040] __sys_connect+0x14d/0x170 [ 902.372390][T16040] ? __pfx___sys_connect+0x10/0x10 [ 902.372441][T16040] ? rcu_is_watching+0x12/0xc0 [ 902.372481][T16040] __x64_sys_connect+0x72/0xb0 [ 902.372512][T16040] ? lockdep_hardirqs_on+0x7c/0x110 [ 902.372559][T16040] do_syscall_64+0xcd/0x230 [ 902.372611][T16040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.372644][T16040] RIP: 0033:0x7f7d8dd8e969 [ 902.372671][T16040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 902.372703][T16040] RSP: 002b:00007f7d8ec03038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 902.372734][T16040] RAX: ffffffffffffffda RBX: 00007f7d8dfb5fa0 RCX: 00007f7d8dd8e969 [ 902.372756][T16040] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 902.372776][T16040] RBP: 00007f7d8de10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 902.372797][T16040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 902.372817][T16040] R13: 0000000000000000 R14: 00007f7d8dfb5fa0 R15: 00007ffcc82c0508 [ 902.372860][T16040] [ 903.563630][T16041] chnl_net:caif_netlink_parms(): no params data found [ 903.808478][T16057] kernel read not supported for file /set_event_notrace_pid (pid: 16057 comm: syz.1.2509) [ 903.838758][T16058] FAULT_INJECTION: forcing a failure. [ 903.838758][T16058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 903.911804][ T30] audit: type=1800 audit(6042510114.323:11): pid=16057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2509" name="set_event_notrace_pid" dev="tracefs" ino=1070 res=0 errno=0 [ 903.935843][T16058] CPU: 0 UID: 0 PID: 16058 Comm: syz.1.2509 Tainted: G U 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 903.935890][T16058] Tainted: [U]=USER [ 903.935901][T16058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 903.935920][T16058] Call Trace: [ 903.935931][T16058] [ 903.935942][T16058] dump_stack_lvl+0x16c/0x1f0 [ 903.935992][T16058] should_fail_ex+0x512/0x640 [ 903.936039][T16058] _copy_from_user+0x2e/0xd0 [ 903.936084][T16058] kstrtouint_from_user+0xd6/0x1d0 [ 903.936120][T16058] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 903.936161][T16058] ? __lock_acquire+0xaa4/0x1ba0 [ 903.936213][T16058] proc_fail_nth_write+0x83/0x250 [ 903.936254][T16058] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 903.936304][T16058] vfs_write+0x25f/0x1180 [ 903.936329][T16058] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 903.936374][T16058] ? __pfx___mutex_lock+0x10/0x10 [ 903.936416][T16058] ? __pfx_vfs_write+0x10/0x10 [ 903.936453][T16058] ? __fget_files+0x20e/0x3c0 [ 903.936488][T16058] ksys_write+0x12a/0x240 [ 903.936515][T16058] ? __pfx_ksys_write+0x10/0x10 [ 903.936553][T16058] do_syscall_64+0xcd/0x230 [ 903.936598][T16058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.936626][T16058] RIP: 0033:0x7fafc418d41f [ 903.936647][T16058] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 903.936673][T16058] RSP: 002b:00007fafc4fea030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 903.936699][T16058] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fafc418d41f [ 903.936717][T16058] RDX: 0000000000000001 RSI: 00007fafc4fea0a0 RDI: 0000000000000004 [ 903.936734][T16058] RBP: 00007fafc4fea090 R08: 0000000000000000 R09: 0000000000000000 [ 903.936750][T16058] R10: 0000000000000002 R11: 0000000000000293 R12: 0000000000000001 [ 903.936767][T16058] R13: 0000000000000001 R14: 00007fafc43b6080 R15: 00007ffeac28b258 [ 903.936802][T16058] [ 904.425786][T13547] Bluetooth: hci1: command tx timeout [ 904.957488][T16041] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.964833][T16041] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.969126][T16072] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2511'. [ 905.001857][T16041] bridge_slave_0: entered allmulticast mode [ 905.021150][T16041] bridge_slave_0: entered promiscuous mode [ 905.058594][T16072] macsec0: entered promiscuous mode [ 905.064122][T16072] macsec0: entered allmulticast mode [ 905.125810][T16072] veth1_macvtap: entered allmulticast mode [ 905.144214][T16041] bridge0: port 2(bridge_slave_1) entered blocking state [ 905.169602][T16041] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.185909][T16041] bridge_slave_1: entered allmulticast mode [ 905.204310][T16041] bridge_slave_1: entered promiscuous mode [ 905.538128][T16041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 905.589955][T16041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 905.962499][T16041] team0: Port device team_slave_0 added [ 906.009852][T16041] team0: Port device team_slave_1 added [ 906.130109][T16041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 906.146242][T16041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 906.175849][T16041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 906.245832][T16041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 906.253301][T16041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 906.313572][T16041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 906.456650][T16041] hsr_slave_0: entered promiscuous mode [ 906.479196][T16041] hsr_slave_1: entered promiscuous mode [ 906.486431][T16041] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 906.499004][T13547] Bluetooth: hci1: command tx timeout [ 906.504788][T16041] Cannot create hsr debugfs directory [ 906.813921][T16096] Invalid ELF header magic: != ELF [ 907.092736][T16041] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.255402][T16041] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.444858][T16041] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.789133][T16041] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.121286][T16041] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 908.142168][T16041] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 908.154945][T16041] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 908.169714][T16041] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 908.310764][T16041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 908.379031][T16041] 8021q: adding VLAN 0 to HW filter on device team0 [ 908.448205][T13485] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.455425][T13485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 908.477719][T13485] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.484947][T13485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 908.576791][T13547] Bluetooth: hci1: command tx timeout [ 909.583516][T16041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 909.780102][T16041] veth0_vlan: entered promiscuous mode [ 909.815249][T16041] veth1_vlan: entered promiscuous mode [ 909.818460][T16150] netlink: 186 bytes leftover after parsing attributes in process `syz.3.2533'. [ 909.851843][T16150] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 909.965162][T16041] veth0_macvtap: entered promiscuous mode [ 909.985889][T16041] veth1_macvtap: entered promiscuous mode [ 910.033337][T16041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 910.064242][T16041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 910.107984][T16041] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.134311][T16041] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.155926][T16041] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.178912][T16041] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.491079][T14365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 910.521233][T14365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 910.628725][ T8116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 910.637660][ T8116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 910.656338][T13547] Bluetooth: hci1: command tx timeout [ 910.880283][T16165] FAULT_INJECTION: forcing a failure. [ 910.880283][T16165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 910.920368][T16167] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 910.931858][T16165] CPU: 1 UID: 0 PID: 16165 Comm: syz.1.2536 Tainted: G U 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 910.931905][T16165] Tainted: [U]=USER [ 910.931916][T16165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 910.931933][T16165] Call Trace: [ 910.931942][T16165] [ 910.931954][T16165] dump_stack_lvl+0x16c/0x1f0 [ 910.932003][T16165] should_fail_ex+0x512/0x640 [ 910.932046][T16165] _copy_to_user+0x32/0xd0 [ 910.932072][T16165] simple_read_from_buffer+0xcb/0x170 [ 910.932116][T16165] proc_fail_nth_read+0x197/0x270 [ 910.932156][T16165] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 910.932194][T16165] ? rw_verify_area+0xcf/0x680 [ 910.932234][T16165] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 910.932277][T16165] vfs_read+0x1e1/0xc70 [ 910.932306][T16165] ? __pfx___mutex_lock+0x10/0x10 [ 910.932369][T16165] ? __pfx_vfs_read+0x10/0x10 [ 910.932405][T16165] ? __fget_files+0x20e/0x3c0 [ 910.932439][T16165] ksys_read+0x12a/0x240 [ 910.932468][T16165] ? __pfx_ksys_read+0x10/0x10 [ 910.932493][T16165] ? rcu_is_watching+0x12/0xc0 [ 910.932536][T16165] do_syscall_64+0xcd/0x230 [ 910.932589][T16165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.932622][T16165] RIP: 0033:0x7fafc418d37c [ 910.932648][T16165] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 910.932679][T16165] RSP: 002b:00007fafc500b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 910.932709][T16165] RAX: ffffffffffffffda RBX: 00007fafc43b5fa0 RCX: 00007fafc418d37c [ 910.932730][T16165] RDX: 000000000000000f RSI: 00007fafc500b0a0 RDI: 0000000000000004 [ 910.932751][T16165] RBP: 00007fafc500b090 R08: 0000000000000000 R09: 0000000000000000 [ 910.932771][T16165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 910.932791][T16165] R13: 0000000000000000 R14: 00007fafc43b5fa0 R15: 00007ffeac28b258 [ 910.932833][T16165] [ 911.143578][T16167] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 911.152550][T16167] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 911.160849][T16167] page_type: f5(slab) [ 911.164976][T16167] raw: 00fff00000000040 ffff88801b442140 0000000000000000 dead000000000001 [ 911.173647][T16167] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 911.182405][T16167] head: 00fff00000000040 ffff88801b442140 0000000000000000 dead000000000001 [ 911.191172][T16167] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 911.201134][T16167] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 911.209904][T16167] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 911.218779][T16167] page dumped because: unmovable page [ 911.224199][T16167] page_owner tracks the page as allocated [ 911.231105][T16167] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12, tgid 12 (kworker/u8:0), ts 141006247007, free_ts 139158354680 [ 911.262691][T16167] post_alloc_hook+0x181/0x1b0 [ 911.267591][T16167] get_page_from_freelist+0x135c/0x3920 [ 911.273286][T16167] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 911.279321][T16167] alloc_pages_mpol+0x1fb/0x550 [ 911.284359][T16167] new_slab+0x244/0x340 [ 911.288650][T16167] ___slab_alloc+0xd9c/0x1940 [ 911.293386][T16167] __slab_alloc.constprop.0+0x56/0xb0 [ 911.299055][T16167] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 911.305550][T16167] kmalloc_reserve+0xef/0x2c0 [ 911.310461][T16167] __alloc_skb+0x166/0x380 [ 911.323084][T16167] nsim_dev_trap_report_work+0x2b1/0xcf0 [ 911.330636][T16167] process_one_work+0x9cf/0x1b70 [ 911.336324][T16167] worker_thread+0x6c8/0xf10 [ 911.341015][T16167] kthread+0x3c2/0x780 [ 911.345171][T16167] ret_from_fork+0x48/0x80 [ 911.349775][T16167] ret_from_fork_asm+0x1a/0x30 [ 911.355086][T16167] page last free pid 5827 tgid 5827 stack trace: [ 911.361590][T16167] __free_frozen_pages+0x69d/0xff0 [ 911.374045][T16167] __put_partials+0x16d/0x1c0 [ 911.374151][T16167] qlist_free_all+0x4e/0x120 [ 911.374186][T16167] kasan_quarantine_reduce+0x195/0x1e0 [ 911.374223][T16167] __kasan_slab_alloc+0x69/0x90 [ 911.374263][T16167] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 911.374314][T16167] getname_flags.part.0+0x4c/0x550 [ 911.374360][T16167] getname_flags+0x93/0xf0 [ 911.374412][T16167] user_path_at+0x24/0x60 [ 911.374441][T16167] __x64_sys_umount+0x10a/0x1a0 [ 911.374474][T16167] do_syscall_64+0xcd/0x230 [ 911.374525][T16167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.610221][T16170] could not allocate digest TFM handle [ 912.348847][T16195] vmstat_refresh: nr_hugetlb -8704 [ 912.768801][T16199] Setting dangerous option i915.mitigations - tainting kernel [ 913.904909][T16227] Setting dangerous option i915.mitigations - tainting kernel [ 914.790115][T16232] bond0: option all_slaves_active: invalid value () [ 916.357085][T16264] netlink: 'syz.2.2556': attribute type 1 has an invalid length. [ 917.087129][T16283] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2560'. [ 917.288162][T16283] hsr_slave_0: left promiscuous mode [ 917.357140][T16283] hsr_slave_1: left promiscuous mode [ 920.020513][T16329] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 922.795222][T16384] Invalid ELF header magic: != ELF [ 922.914466][T16393] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 925.289700][T16403] FAULT_INJECTION: forcing a failure. [ 925.289700][T16403] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 925.409862][T16403] CPU: 0 UID: 0 PID: 16403 Comm: syz.3.2583 Tainted: G U 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 925.409922][T16403] Tainted: [U]=USER [ 925.409934][T16403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 925.409954][T16403] Call Trace: [ 925.409967][T16403] [ 925.409980][T16403] dump_stack_lvl+0x16c/0x1f0 [ 925.410038][T16403] should_fail_ex+0x512/0x640 [ 925.410098][T16403] should_fail_alloc_page+0xe7/0x130 [ 925.410146][T16403] prepare_alloc_pages+0x3c2/0x610 [ 925.410202][T16403] ? rcu_is_watching+0x12/0xc0 [ 925.410240][T16403] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 925.410291][T16403] ? __lock_acquire+0x5ca/0x1ba0 [ 925.410342][T16403] ? xas_create+0x1d7/0x1460 [ 925.410390][T16403] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 925.410434][T16403] ? cgroup_rstat_updated+0x2a/0xb20 [ 925.410513][T16403] ? __lock_acquire+0x5ca/0x1ba0 [ 925.410559][T16403] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 925.410611][T16403] ? policy_nodemask+0xea/0x4e0 [ 925.410660][T16403] alloc_pages_mpol+0x1fb/0x550 [ 925.410706][T16403] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 925.410755][T16403] ? filemap_get_entry+0x1a7/0x3b0 [ 925.410811][T16403] folio_alloc_noprof+0x20/0x2d0 [ 925.410863][T16403] filemap_alloc_folio_noprof+0x3a1/0x470 [ 925.410910][T16403] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 925.410951][T16403] ? rcu_is_watching+0x12/0xc0 [ 925.410994][T16403] __filemap_get_folio+0x5e9/0xc10 [ 925.411056][T16403] ioctx_alloc+0x761/0x2060 [ 925.411128][T16403] ? __pfx_ioctx_alloc+0x10/0x10 [ 925.411178][T16403] ? __might_fault+0x13b/0x190 [ 925.411232][T16403] __x64_sys_io_setup+0xc9/0x210 [ 925.411288][T16403] do_syscall_64+0xcd/0x230 [ 925.411344][T16403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.411387][T16403] RIP: 0033:0x7f170158e969 [ 925.411416][T16403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 925.411452][T16403] RSP: 002b:00007f17024a2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 925.411484][T16403] RAX: ffffffffffffffda RBX: 00007f17017b6080 RCX: 00007f170158e969 [ 925.411506][T16403] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 925.411528][T16403] RBP: 00007f1701610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 925.411549][T16403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 925.411570][T16403] R13: 0000000000000000 R14: 00007f17017b6080 R15: 00007ffcdb91f3b8 [ 925.411615][T16403] [ 925.428097][T16409] ================================================================== [ 925.428121][T16409] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0xa03/0xc70 [ 925.428177][T16409] Read of size 10 at addr ffff8880355d7ce8 by task syz.3.2583/16409 [ 925.428208][T16409] [ 925.428229][T16409] CPU: 0 UID: 0 PID: 16409 Comm: syz.3.2583 Tainted: G U 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 925.428279][T16409] Tainted: [U]=USER [ 925.428291][T16409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 925.428312][T16409] Call Trace: [ 925.428323][T16409] [ 925.428337][T16409] dump_stack_lvl+0x116/0x1f0 [ 925.428398][T16409] print_report+0xc3/0x670 [ 925.428447][T16409] ? __virt_addr_valid+0x5e/0x590 [ 925.428495][T16409] ? __phys_addr+0xc6/0x150 [ 925.428541][T16409] ? fbcon_prepare_logo+0xa03/0xc70 [ 925.428585][T16409] kasan_report+0xe0/0x110 [ 925.428629][T16409] ? fbcon_prepare_logo+0xa03/0xc70 [ 925.428680][T16409] kasan_check_range+0xef/0x1a0 [ 925.428729][T16409] __asan_memcpy+0x23/0x60 [ 925.428763][T16409] fbcon_prepare_logo+0xa03/0xc70 [ 925.428816][T16409] fbcon_init+0xd77/0x1900 [ 925.428863][T16409] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 925.428907][T16409] visual_init+0x31d/0x620 [ 925.428942][T16409] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 925.428996][T16409] store_bind+0x61d/0x760 [ 925.429046][T16409] ? sysfs_file_kobj+0xe4/0x290 [ 925.429096][T16409] ? __pfx_store_bind+0x10/0x10 [ 925.429136][T16409] dev_attr_store+0x58/0x80 [ 925.429183][T16409] ? __pfx_dev_attr_store+0x10/0x10 [ 925.429229][T16409] sysfs_kf_write+0xf2/0x150 [ 925.429282][T16409] kernfs_fop_write_iter+0x351/0x510 [ 925.429327][T16409] ? __pfx_sysfs_kf_write+0x10/0x10 [ 925.429384][T16409] vfs_write+0x5ba/0x1180 [ 925.429418][T16409] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 925.429466][T16409] ? __pfx___mutex_lock+0x10/0x10 [ 925.429521][T16409] ? __pfx_vfs_write+0x10/0x10 [ 925.429569][T16409] ksys_write+0x12a/0x240 [ 925.429604][T16409] ? __pfx_ksys_write+0x10/0x10 [ 925.429638][T16409] ? rcu_is_watching+0x12/0xc0 [ 925.429678][T16409] do_syscall_64+0xcd/0x230 [ 925.429733][T16409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.429770][T16409] RIP: 0033:0x7f170158e969 [ 925.429797][T16409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 925.429833][T16409] RSP: 002b:00007f1702481038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 925.429866][T16409] RAX: ffffffffffffffda RBX: 00007f17017b6160 RCX: 00007f170158e969 [ 925.429889][T16409] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 925.429912][T16409] RBP: 00007f1701610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 925.429934][T16409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 925.429956][T16409] R13: 0000000000000000 R14: 00007f17017b6160 R15: 00007ffcdb91f3b8 [ 925.429990][T16409] [ 925.430003][T16409] [ 925.430012][T16409] Allocated by task 5834: [ 925.430029][T16409] kasan_save_stack+0x33/0x60 [ 925.430064][T16409] kasan_save_track+0x14/0x30 [ 925.430099][T16409] __kasan_kmalloc+0xaa/0xb0 [ 925.430134][T16409] sctp_inetaddr_event+0x3b0/0x6d0 [ 925.430188][T16409] notifier_call_chain+0xbc/0x410 [ 925.430228][T16409] blocking_notifier_call_chain+0x69/0xa0 [ 925.430271][T16409] __inet_insert_ifa+0x925/0xcd0 [ 925.430312][T16409] inet_rtm_newaddr+0xd87/0x1540 [ 925.430352][T16409] rtnetlink_rcv_msg+0x95b/0xe90 [ 925.430401][T16409] netlink_rcv_skb+0x16d/0x440 [ 925.430446][T16409] netlink_unicast+0x53a/0x7f0 [ 925.430489][T16409] netlink_sendmsg+0x8d1/0xdd0 [ 925.430531][T16409] __sys_sendto+0x495/0x510 [ 925.430565][T16409] __x64_sys_sendto+0xe0/0x1c0 [ 925.430599][T16409] do_syscall_64+0xcd/0x230 [ 925.430649][T16409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.430683][T16409] [ 925.430691][T16409] The buggy address belongs to the object at ffff8880355d7c80 [ 925.430691][T16409] which belongs to the cache kmalloc-64 of size 64 [ 925.430719][T16409] The buggy address is located 40 bytes to the right of [ 925.430719][T16409] allocated 64-byte region [ffff8880355d7c80, ffff8880355d7cc0) [ 925.430756][T16409] [ 925.430765][T16409] The buggy address belongs to the physical page: [ 925.430779][T16409] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x355d7 [ 925.430809][T16409] ksm flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 925.430837][T16409] page_type: f5(slab) [ 925.430865][T16409] raw: 00fff00000000000 ffff88801b4418c0 ffffea0000c68c00 dead000000000003 [ 925.430897][T16409] raw: 0000000000000000 0000000000200020 00000000f5000000 0000000000000000 [ 925.430917][T16409] page dumped because: kasan: bad access detected [ 925.430935][T16409] page_owner tracks the page as allocated [ 925.430947][T16409] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1160, tgid 1160 (kworker/u8:8), ts 33401999177, free_ts 0 [ 925.431001][T16409] post_alloc_hook+0x181/0x1b0 [ 925.431034][T16409] get_page_from_freelist+0x135c/0x3920 [ 925.431071][T16409] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 925.431111][T16409] alloc_pages_mpol+0x1fb/0x550 [ 925.431152][T16409] new_slab+0x244/0x340 [ 925.431180][T16409] ___slab_alloc+0xd9c/0x1940 [ 925.431208][T16409] __slab_alloc.constprop.0+0x56/0xb0 [ 925.431247][T16409] __kmalloc_noprof+0x2f2/0x510 [ 925.431283][T16409] lsm_blob_alloc+0x68/0x90 [ 925.431321][T16409] security_task_alloc+0x2d/0x260 [ 925.431372][T16409] copy_process+0x24ba/0x91b0 [ 925.431416][T16409] kernel_clone+0xfc/0x960 [ 925.431457][T16409] user_mode_thread+0xc7/0x110 [ 925.431500][T16409] call_usermodehelper_exec_work+0xcb/0x170 [ 925.431534][T16409] process_one_work+0x9cf/0x1b70 [ 925.431587][T16409] worker_thread+0x6c8/0xf10 [ 925.431638][T16409] page_owner free stack trace missing [ 925.431650][T16409] [ 925.431658][T16409] Memory state around the buggy address: [ 925.431676][T16409] ffff8880355d7b80: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 925.431702][T16409] ffff8880355d7c00: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 925.431728][T16409] >ffff8880355d7c80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 925.431747][T16409] ^ [ 925.431768][T16409] ffff8880355d7d00: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 925.431793][T16409] ffff8880355d7d80: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 925.431814][T16409] ================================================================== [ 925.431833][T16409] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 925.431858][T16409] CPU: 0 UID: 0 PID: 16409 Comm: syz.3.2583 Tainted: G U 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 925.431908][T16409] Tainted: [U]=USER [ 925.431919][T16409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 925.431940][T16409] Call Trace: [ 925.431953][T16409] [ 925.431966][T16409] dump_stack_lvl+0x3d/0x1f0 [ 925.432019][T16409] panic+0x71c/0x800 [ 925.432068][T16409] ? __pfx_panic+0x10/0x10 [ 925.432122][T16409] ? __pfx__printk+0x10/0x10 [ 925.432173][T16409] ? fbcon_prepare_logo+0xa03/0xc70 [ 925.432218][T16409] check_panic_on_warn+0xab/0xb0 [ 925.432278][T16409] end_report+0x107/0x170 [ 925.432319][T16409] kasan_report+0xee/0x110 [ 925.432368][T16409] ? fbcon_prepare_logo+0xa03/0xc70 [ 925.432420][T16409] kasan_check_range+0xef/0x1a0 [ 925.432470][T16409] __asan_memcpy+0x23/0x60 [ 925.432503][T16409] fbcon_prepare_logo+0xa03/0xc70 [ 925.432557][T16409] fbcon_init+0xd77/0x1900 [ 925.432604][T16409] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 925.432649][T16409] visual_init+0x31d/0x620 [ 925.432684][T16409] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 925.432733][T16409] store_bind+0x61d/0x760 [ 925.432776][T16409] ? sysfs_file_kobj+0xe4/0x290 [ 925.432825][T16409] ? __pfx_store_bind+0x10/0x10 [ 925.432865][T16409] dev_attr_store+0x58/0x80 [ 925.432909][T16409] ? __pfx_dev_attr_store+0x10/0x10 [ 925.432954][T16409] sysfs_kf_write+0xf2/0x150 [ 925.433005][T16409] kernfs_fop_write_iter+0x351/0x510 [ 925.433049][T16409] ? __pfx_sysfs_kf_write+0x10/0x10 [ 925.433100][T16409] vfs_write+0x5ba/0x1180 [ 925.433134][T16409] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 925.433182][T16409] ? __pfx___mutex_lock+0x10/0x10 [ 925.433232][T16409] ? __pfx_vfs_write+0x10/0x10 [ 925.433282][T16409] ksys_write+0x12a/0x240 [ 925.433315][T16409] ? __pfx_ksys_write+0x10/0x10 [ 925.433349][T16409] ? rcu_is_watching+0x12/0xc0 [ 925.433395][T16409] do_syscall_64+0xcd/0x230 [ 925.433451][T16409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.433487][T16409] RIP: 0033:0x7f170158e969 [ 925.433513][T16409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 925.433548][T16409] RSP: 002b:00007f1702481038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 925.433582][T16409] RAX: ffffffffffffffda RBX: 00007f17017b6160 RCX: 00007f170158e969 [ 925.433607][T16409] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 925.433631][T16409] RBP: 00007f1701610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 925.433655][T16409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 925.433677][T16409] R13: 0000000000000000 R14: 00007f17017b6160 R15: 00007ffcdb91f3b8 [ 925.433718][T16409] [ 925.434040][T16409] Kernel Offset: disabled