last executing test programs: 14.752097406s ago: executing program 3 (id=2478): r0 = socket(0x2, 0x1, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) io_uring_register$auto_IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000000)="7549ec3a7cc95daad2bc03cf823abab770ec4dedcd3d1f9b1189980218042dd54eebf053cab4bfa81e8bcce8ec81913385dd551ddb78caa1", 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0x2, 0x2, 0x1) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) timerfd_create$auto(0x9, 0x0) r2 = pidfd_open$auto(0x1, 0x0) mmap$auto(0x910, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r3, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x2030000000000000, 0x400007, 0xdf, 0x9b72, 0x2, 0x55) setns(r2, 0x60020000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) getsockopt$auto(0x6, 0x1, 0x11, 0xfffffffffffffffe, 0x0) sendto$auto(r1, 0x0, 0xb, 0x2, &(0x7f0000000040)=@hci={0x1f, 0x3}, 0x1c) 12.959374085s ago: executing program 3 (id=2480): close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100253d7000fddbdf2501000000180007801400018008000180000000009c8d9708", @ANYRES32=0x0, @ANYBLOB="0c0002"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8880) 12.588368916s ago: executing program 3 (id=2481): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0xb2) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) socket(0xa, 0x3, 0x3b) bpf$auto(0xfffff011, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x4, 0xfab2, 0x468, 0x9, 0x1000000000002, 0x4, 0x2, 0x4, 0x200, 0x1fd, 0xb6, 0x4, 0x6, 0x3}, 0xa3) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e12b7ac1ff0100"}, 0x58) mlock$auto(0x81, 0xffff) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000200), r0) sendmsg$auto_KSMBD_EVENT_LOGOUT_REQUEST(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x14, r1, 0x0, 0x70bd31, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x20008411) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000300), r3) read$auto(r3, &(0x7f0000000100)='nl80211\x00', 0xbe62) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vbi16\x00', 0x2ca002, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) 11.390278364s ago: executing program 3 (id=2484): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) write$auto(r3, &(0x7f0000000440)='ON\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf0F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\xed\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0xb8c5) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fbdbdf2504000000080017000800000004000e00"], 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) read$auto_debugfs_full_proxy_file_operations_internal(r0, &(0x7f0000000100)=""/29, 0x1d) r4 = syz_genetlink_get_family_id$auto_vdpa(&(0x7f00000001c0), r1) sendmsg$auto_VDPA_CMD_DEV_ATTR_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r4, 0x2b85b90f44306f01, 0x70bd25, 0x25dfdbfc, {}, [@VDPA_ATTR_MGMTDEV_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @VDPA_ATTR_MGMTDEV_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @VDPA_ATTR_DEV_NET_CFG_MAX_VQP={0x6, 0xc, 0x24}]}, 0x44}, 0x1, 0x0, 0x0, 0xcfde056fb3e3480a}, 0x10) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="11000000", 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x5) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/kernel/pid_max\x00', 0x0, 0x0) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x20401, 0x0) mmap$auto(0xffffffffffffffc3, 0x20009, 0x4000000000df, 0x40000000000eb0, r3, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) kill$auto(0x0, 0x11) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/radio28\x00', 0x40041, 0x0) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r5, r6, 0x0, 0x1000200) 9.290459138s ago: executing program 3 (id=2493): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948f, 0x803, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) r2 = waitid$auto_P_ALL(0x0, 0x1, &(0x7f0000000440)={@siginfo_0_0={0x3, 0x7, 0x0, @_timer={0x0, 0x81, @sival_int, 0x9}}}, 0x5, &(0x7f00000005c0)={{0xfffffffffffff001, 0x8}, {0x5, 0x7}, 0x7fffffffffffffff, 0x10000, 0x5, 0x2, 0xc00000000, 0x3, 0xb9, 0x9, 0x6, 0xc, 0x0, 0x6, 0xf4, 0x3}) move_pages$auto(r2, 0xab6, &(0x7f0000000680)=&(0x7f0000000500)="12695940bf3c626839ef841ee8b23bd6328ec1f44d0e7dbd1af5fc1b46d4ead32487c5e3b069ecf19ebe3b216400d3a55c783c13942101a366afe742a68adc370cc5ed04ed96e11d8e2e1bea6d96ed39a2ad189a650f927b6d61eca01710abc718fa", &(0x7f00000006c0)=0x8000, &(0x7f0000000700)=0x8001, 0x7fffffff) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xa4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY\xad\xd6\xc5\xab`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4[\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r4, 0x80045010, &(0x7f0000004440)) ioctl$auto_VHOST_SET_LOG_FD2(r1, 0x4004af07, &(0x7f00000001c0)=r3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r5, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x1, 0x1021, 0x0, 0xd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r5, 0x8000) mmap$auto(0x100000000, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r6 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001b00)=ANY=[@ANYBLOB="20010000", @ANYRES16=r7, @ANYBLOB="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"], 0x120}, 0x1, 0x68, 0x0, 0x24000000}, 0x140) sendmsg$auto_NL80211_CMD_GET_KEY(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRESDEC=r4, @ANYRESOCT=r6], 0x1c}, 0x1, 0x0, 0x0, 0x21}, 0x51) read$auto(r6, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) 6.565562392s ago: executing program 1 (id=2499): ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) write$auto(0xffffffffffffffff, 0x0, 0x81) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) socket(0x29, 0x2, 0x0) r0 = socket(0x10, 0x2, 0x0) recvmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) setresuid$auto(0xf5, 0x8000, 0x67) r1 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, 0x0, 0x2c4800, 0x0) r2 = bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x6, 0x24, 0xf, 0x63, 0x400, 0x80, 0x9, 0x80f0c8, 0x20, "38c1d5cbcb9f6b5e511f0cd8ed068f65", 0x0, 0x113e33f2, 0xffffffffffffffff, 0xe4, 0x6, 0x5, 0x6, 0x5, 0x0, 0x3, @attach_btf_obj_fd=r1, 0x6, 0xffff, 0x8, 0x0, 0xfffffffe}, 0x47) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r3 = semctl$auto_GETPID(0x9483, 0x0, 0xb, 0x0) r4 = openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000200), 0xc880, 0x0) kcmp$auto_KCMP_EPOLL_TFD(r3, 0x0, 0x7, r4, 0x6) socket(0x2, 0x3, 0xa) mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000) r5 = openat$auto_proc_mountstats_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) pread64$auto(r5, &(0x7f0000000040)='\x8d]\x00', 0x80000000, 0x5) read$auto(0xffffffffffffffff, 0x0, 0x2) read$auto_clk_summary_fops_(r2, &(0x7f00000003c0)=""/198, 0xc6) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) syz_clone(0x280, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) 6.30121221s ago: executing program 3 (id=2500): socket(0xf, 0x3, 0x2) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) bpf$auto(0x0, 0x0, 0x6f4) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) io_uring_setup$auto(0x6, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) 5.509024774s ago: executing program 0 (id=2501): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000200), 0xffffffffffffffff) r2 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy1/rate_ctrl_alg\x00', 0x0, 0x0) readv$auto(r2, &(0x7f0000000100)={&(0x7f0000000280), 0x1}, 0x4) sendmsg$auto_HWSIM_CMD_REPORT_PMSR(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="06000000", @ANYRES16=r1, @ANYBLOB="01002cbd7000fddbdf250b0000000a0002009e695f99bb0e0000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) ioctl$auto_BLKTRACESETUP2(r3, 0xc0481273, &(0x7f0000000280)={"b3efc16b86b24b821e90a2e1a74c38c88843237b4095eea24d4d39023c954a56", 0x5, 0x4000, 0xfffff7dc, 0x6, 0x3, 0xffffffffffffffff}) read$auto(r3, 0x0, 0x1fe) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv6/conf/bridge_slave_0/ioam6_id\x00', 0x112803, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r5) sendmsg$auto_ETHTOOL_MSG_FEC_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x20, r6, 0x311, 0x70bd2c, 0x25dfdc01, {}, [@ETHTOOL_A_FEC_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x800) write$auto(r4, 0x0, 0x3) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x11, 0x0) r7 = fsopen$auto(0x0, 0x1) r8 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x40, 0x0) ioctl$auto_SNDCTL_DSP_GETISPACE(r8, 0x8010500d, &(0x7f0000000300)="7ddc74243f14dc3b9f480ebf573a7ac78059ad6a07babba07fade9b5e677827c7c8c89e4fb33efd8e8e97334335ea586c1a4b77ed1d248570a2858addb7f92601da75d0c07097ed0e4aa25e1e911756448a137719dfbdb3bfcadc8c92d1caf3486ea9642aa6ef0f0784c4c97a2a38c62c39eb5ffd2e4e1ff01869673568b44f594d3537d0e5d7d5ac17af7f65d367098db911f18733919d4ecb8e4c56bceb049ec04dfab5e58e9f5f0709cce5ef31ca631c257c74746451aa2ad851b869a0d5fefe6b2c68fd3e994e7245e64cfa7a4") fsconfig$auto(r7, 0x8, 0x0, 0x0, 0x0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) 5.508389659s ago: executing program 1 (id=2502): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0xb2) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) socket(0xa, 0x3, 0x3b) bpf$auto(0xfffff011, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x4, 0xfab2, 0x468, 0x9, 0x1000000000002, 0x4, 0x2, 0x4, 0x200, 0x1fd, 0xb6, 0x4, 0x6, 0x3}, 0xa3) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e12b7ac1ff0100"}, 0x58) mlock$auto(0x81, 0xffff) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000200), r0) sendmsg$auto_KSMBD_EVENT_LOGOUT_REQUEST(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x14, r1, 0x0, 0x70bd31, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x20008411) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000300), 0xffffffffffffffff) read$auto(0xffffffffffffffff, &(0x7f0000000100)='nl80211\x00', 0xbe62) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vbi16\x00', 0x2ca002, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) 5.34973258s ago: executing program 2 (id=2503): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) socket(0xa, 0x3, 0x3b) bpf$auto(0xfffff011, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x4, 0xfab2, 0x468, 0x9, 0x1000000000002, 0x4, 0x2, 0x4, 0x200, 0x1fd, 0xb6, 0x4, 0x6, 0x3}, 0xa3) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e12b7ac1ff0100"}, 0x58) mlock$auto(0x81, 0xffff) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r0 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_KSMBD_EVENT_LOGOUT_REQUEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x14, r0, 0x0, 0x70bd31, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x20008411) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000300), r2) read$auto(r2, &(0x7f0000000100)='nl80211\x00', 0xbe62) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vbi16\x00', 0x2ca002, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) 4.752756696s ago: executing program 1 (id=2504): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/rose8/power/runtime_active_time\x00', 0x103100, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/pids.peak\x00', 0x8000, 0x0) socket(0x2, 0x3, 0x6) socket$nl_generic(0x11, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video48\x00', 0x8a240, 0x0) epoll_create$auto(0x4) select$auto(0xa, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x5, 0x8, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0x7ff]}, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2201, 0x0) io_uring_setup$auto(0x1fe, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = fsopen$auto(0x0, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="db002cbd7000fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1b000000", @ANYBLOB="1a"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000040)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) timer_create$auto(0x0, 0x0, 0x0) timer_settime$auto(0x0, 0x6, &(0x7f00000000c0)={{0x26b, 0x4}, {0x0, 0x83}}, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x804c880}, 0x8000) socket(0x10, 0x2, 0x0) 4.641269s ago: executing program 0 (id=2513): close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100253d7000fddbdf250100000018000780140001800800018000fffd009c8d9708", @ANYRES32=0x0, @ANYBLOB="0c0002"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8880) 4.202478923s ago: executing program 0 (id=2507): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.2/usb3/uevent\x00', 0x40000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/eql/ifalias\x00', 0xb02, 0x0) mmap$auto(0x0, 0x240009, 0xdf, 0x9b72, 0x7, 0x28000) execve$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103641, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv6/conf/bridge_slave_0/mldv2_unsolicited_report_interval\x00', 0x10001, 0x0) ftruncate$auto(0x3, 0x400180200000) mmap$auto(0xa, 0x40009, 0xfffffffffffff226, 0x50, 0xffffffffffffffff, 0x28000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2deb43, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x2, 0x401, 0x1000, 0x8000000000000011, 0xffffffffffffffff, 0x5) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0xc40, 0x0) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000100), 0xffffffffffffffff) r2 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES64, @ANYRES64=r0, @ANYRES64=r1, @ANYBLOB="894f844e1c00a904ebea190000001200016484872fddd39d0043005af77d2e758f8b2ccab7ca15637a27cbd6ed1fdf81911a51e3ffa236fc86639386c3384a1def253dd5fc53a343983433c8326d0aa691dd0df2397e978c4152489bbeff0aa411032e893b34882519124cbdf9fe16214a71c626678c18e6ed595138d27cdeb3f65168b3f5d6e8894c29bef424d531078892ffb98f2a"], 0x4c}, 0x1, 0x0, 0x0, 0x4004040}, 0x4844) write$auto(r2, 0x0, 0x1ff) prctl$auto_PR_SCHED_CORE_GET(0x9, 0x0, 0x0, 0x0, 0x0) r4 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r5, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$auto_LOOP_CTL_ADD(r4, 0x4c80, 0xfffffffffffffffd) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/fib_triestat\x00', 0x0, 0x0) 4.006520466s ago: executing program 2 (id=2508): mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) r0 = socket(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="140000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r1) read$auto(r1, &(0x7f0000000100)='nl80211\x00', 0xbe62) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1800"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f00) 3.435289454s ago: executing program 0 (id=2509): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0xb2) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) socket(0xa, 0x3, 0x3b) bpf$auto(0xfffff011, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x4, 0xfab2, 0x468, 0x9, 0x1000000000002, 0x4, 0x2, 0x4, 0x200, 0x1fd, 0xb6, 0x4, 0x6, 0x3}, 0xa3) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e12b7ac1ff0100"}, 0x58) mlock$auto(0x81, 0xffff) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000200), r0) sendmsg$auto_KSMBD_EVENT_LOGOUT_REQUEST(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x14, r1, 0x0, 0x70bd31, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x20008411) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000300), r3) read$auto(r3, &(0x7f0000000100)='nl80211\x00', 0xbe62) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vbi16\x00', 0x2ca002, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) 2.923884854s ago: executing program 2 (id=2510): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948f, 0x803, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) r2 = waitid$auto_P_ALL(0x0, 0x1, &(0x7f0000000440)={@siginfo_0_0={0x3, 0x7, 0x0, @_timer={0x0, 0x81, @sival_int, 0x9}}}, 0x5, &(0x7f00000005c0)={{0xfffffffffffff001, 0x8}, {0x5, 0x7}, 0x7fffffffffffffff, 0x10000, 0x5, 0x2, 0xc00000000, 0x3, 0xb9, 0x9, 0x6, 0xc, 0x0, 0x6, 0xf4, 0x3}) move_pages$auto(r2, 0xab6, &(0x7f0000000680)=&(0x7f0000000500)="12695940bf3c626839ef841ee8b23bd6328ec1f44d0e7dbd1af5fc1b46d4ead32487c5e3b069ecf19ebe3b216400d3a55c783c13942101a366afe742a68adc370cc5ed04ed96e11d8e2e1bea6d96ed39a2ad189a650f927b6d61eca01710abc718fa", &(0x7f00000006c0)=0x8000, &(0x7f0000000700)=0x8001, 0x7fffffff) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xa4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY\xad\xd6\xc5\xab`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4[\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r4, 0x80045010, &(0x7f0000004440)) ioctl$auto_VHOST_SET_LOG_FD2(r1, 0x4004af07, &(0x7f00000001c0)=r3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r5, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x1, 0x1021, 0x0, 0xd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r5, 0x8000) mmap$auto(0x100000000, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r6 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001b00)=ANY=[@ANYBLOB="20010000", @ANYRES16=r7, @ANYBLOB="010025bd7000fedbdf257e000000000066004e21000000002680002102000400000000000200000000000000010009000000000001000400000000000200070000000000980006000000000014010f000000000007001f5198dea666bad033b7aea5d7529adf1ae5607ef3d022c60a57cd1649952c00000080004dec6ee46088e64587adba9ba7537f79f056fbd60490f11a3498560bfa783badf6fa39e3aa9815705e629beb9573271a53f5c4ee3859bf0313d7dad665a019c4e908768bb5b896533bbd3b39e4768150289646864a302e8ded90a5b83ada85575e6657023fb727d3723ff97af53540e2fbc15e85a0c6a5644432b997ba3bdc423b0be181bf0d501cf098551e7b2ce99ac721bf9145ebc91fe7c9230b30f9b88ac5b2c404ddfac531ea9fcaf6d514daf8c13a9f382059488c3280a13754303b49d3eddff53520086a38cbb1075e09f556c208c26f727717e52ad91b929b37df820ffca5a077087bc540d3c30fa84b5986b17605e72c7af63bd4264355ec1e043e6ae397fd5b925bc6ee277f7e42b305fbe861e8e9974efb062206bd7fef4b13f19f926c090b1367e4599ea549d1e97c1c2b214d06c5de3e7dc0bae99b9030f72ae011f303fa7ea798a612fd252f9e9c238f07ccc755d8c4aff22798a08e567e0b8f3975fc1b30522f1b82ed37fecc8927a2f8265cb2423f4272359a5b097f54bdb65f51f0911ca880641493cce6f3f00edfefe3d7f007bc5c57214dde959740b9e0a70b28d191e10eb5c3eccfdf045407c80e026f4e9fe766eca822b77df002210db69f60480ae2e21fced2bf22dde077e0ccbe2e05f58ba0db3d9f6469382574a23009202a928c2e7a67623eeeb3976036936871d6056bca11541ed5d795853e233149c9ea3e3d478b5e35cf5e551002a79ac8a33d81b60fde70ccbf125c4b4243160db218068b7a2db851b3dfad23f584b6db1b9ec1428635f27d4bb08cb9b0d4d9c725595fbd59622038dc6cb2f70282ae273c9927dfc884b8e99578c897e90ffeec2c4f3b1e4c5cadc23ff40dd06e618b0f798c0d4a87c7728de7b03a7a8021dcdbd1f4c8b29ea50d2130cf3099a8b37a4d894a5020bc583feaf86c00b8d917567b988f875af819935a325517e76850262d5558ff1fcf9f5b7b26a9645bb26d20104227757359a6e52317edbdd2fde26c3b3f26ee6e2714d9668cfafe1f1c83c24d7e3b55127b38315b1b9053d3ed9561c14e0cf3b173f89e739337a63e5d13fb97466b9b36556adb4af4e9b18d4778c369692333cb70c72d968aff999fe3f08690fdc345eceedb90782bc907b20d4a06867f2930ebb553494aeceabf2f33f1295753241986835af90226970a126a27d9c1f3a04f9b917fa57524fb70f161e619ab83cff4edceef04362c497dc4804af7e7837a4b4241521a2cb28a08fe7001ce941a8cf3f2a4266dbc5fd02c56a5a16fe2a0af334673588ea9b161c65b7ab9a67e4808f1e8c6cf55641a97082348e1e31ed07154364d1fb134e988d32277a2c5224985ab2e3b518c927af3338cfeab947dc38466b8e58f40402d97417a895d335dcd5ccf6ed33ba8a54c80ea0cfe0c66993e86f8b2699d860ff1b2d00db394a18a92e0ed026737e46d52978bae076c156be5e6530222fe8c93c8e4ecd29bfd1823b2730515eb3e99ecb867e0117fafafb495f34fe5c82c7af4e163ef7c543d5327b011b65e661db58838a0821f66c65a9b2d598fe497d778ced9bb1c48369c70a3ab32dd9626f0b575d47a0b7398fcaebce8048504cc3ebcc4498894bf079758aa008906c570f9a4ce0c5faefd8326dde933dccf7a2896a3b86ceb8add2b7f69943b006c8ca893916b156458c9dd28e1e21770e7ba6d7fb8ebdde22ff23346cd0f6d0c90a093fae2f128f759418402b13fae56d033f6adde7442b46db3aedb8665718b37055df3b0710f5e31ea2e04abbca71d7c8cc71325a1124d38c4245587ff29c5e0f1cbfdf7b865099a395dd9c2f7e29200bda2c2b20b17b7f33e1c277c57925b59aca80821a48085b7eab507385849a0e22c2ac4a526e7b786fd9442fd2df0eb05cb1df98795853536dc12b6fea234a4c32a57059049c0dedee032615da106c88fe54e73226cb88b4863c1f905dac6dffd4e5e53873f746e19ee631e8cab802ef174df5cb6e88e513aa10a0e1dd7d43075bc19b94491b9cb8fe1efac7d300e4c6253d42198c94f76fef50405405c348b9bfe0c4e09b6668655baaff6d464b20c5db5aa72b6e5345aa6af3c2b2e508ab94ed2f3ae27947c30f6c9435396cccca249745963693d456f0b13551ebd2714a5d2aa5eec9d61d2d6b9aba3d482f4c49906435b1d783f381a7180a5077358717dfc2e117d31e141382b11db23fb0c7d8ec13b0e2e542cfe4b44f2e9b0a440dcf9143f3be9494f3bc2004047e86405b4190fb667d269f2a7d1c48509fbdc3bb3e99d6f68a309ffff000006007347b9c70c7a48913b05957bbb9826fc681df1b98ace4a88eebe405b8400e41aa87a86c1aca27323448d0dfed2b28ecfa7d65c7264311080712e8fa3874f7ee38b02120b885602b84d954479702f51ac45a331dfe2ef76c45014c84415189885b9c9613c2acb7a41c6ace876ee5af4fc50407fc3361a128a2e59e60f11b47277c9a5f3cbe0424d3886a3a3a0f40c5ef46d2b331ca3d83f2f444bc6998d06926c6a1cb162ef14fb7ab2ee731fdc7f0fc553a3c07226a2160d350ed7f30000360103e17d2b53cce133a6674f5b8600a49a8403c6bdfd3e0c464ed8a2fe254a5939fb09cb1dc350c9230c189febda65557207893e11deb595e622008d945c914692afa24b99bf04b003881b9fc35a628e8a1f7dd36490920c7ce2dbffcf61124f39b5329db3d8f56f48af0b3b31b588771b14d045e0ea69404cf54596db22abd3d35b4f3d484faa4ac1eca1bbbe82ed861aee4715f465c010e98899929b521dea88b03c97f8d005000000987004d3b262d91b7e4b6d005ebb201517953c89225c186080b4836ccb358d624f4b134a11c7ec39e49d80d2c40312c250508a0e8c0969f1fe6830e50c3f2623b31882a5409300737b3fe096e8da90fa050194db696c605c6f82e18f9fc334aa232483df49ed13478a9bd48a"], 0x120}, 0x1, 0x68, 0x0, 0x24000000}, 0x140) sendmsg$auto_NL80211_CMD_GET_KEY(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRESDEC=r4, @ANYRESOCT=r6], 0x1c}, 0x1, 0x0, 0x0, 0x21}, 0x51) read$auto(r6, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) 2.913760096s ago: executing program 1 (id=2511): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) socket(0xa, 0x3, 0x3b) bpf$auto(0xfffff011, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x4, 0xfab2, 0x468, 0x9, 0x1000000000002, 0x4, 0x2, 0x4, 0x200, 0x1fd, 0xb6, 0x4, 0x6, 0x3}, 0xa3) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e12b7ac1ff0100"}, 0x58) mlock$auto(0x81, 0xffff) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r0 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_KSMBD_EVENT_LOGOUT_REQUEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x14, r0, 0x0, 0x70bd31, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x20008411) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000300), r2) read$auto(r2, &(0x7f0000000100)='nl80211\x00', 0xbe62) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vbi16\x00', 0x2ca002, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) 1.63716553s ago: executing program 1 (id=2512): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x10000, 0x3, 0x0, 0x0, 0x3012d954) r0 = socket(0x10, 0x4, 0xffffffc0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x406, 0x0, 0x8fd6, 0x948b, 0x3, 0xb, 0x4000000000005, 0x6, 0x62, 0x8, 0x7, 0x1, 0xb, 0x100, 0x18]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) r3 = socket(0x10, 0x2, 0xc) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="30010007", @ANYRES16=r4, @ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r1, &(0x7f00000006c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbbw\x8dSN\xb2#\xde\xf6\xfe\n_\x86\xccI{0 \xdb8Mh\x16 `\xc7\xe3\xf1\x9f-\xdd\x9a\xd2f\xca\xb3\x99\x81\xb0\xebt\xbc\xde\x0eH\x8db', 0x52) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto_IOC_PR_PREEMPT_ABORT(r5, 0x401870cc, &(0x7f0000000000)={0x2, 0x10000003, 0x5}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) mmap$auto(0x5, 0x4020008, 0x1001, 0xeb1, 0xffffffffffffffff, 0x8003) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) sendfile$auto(r7, r6, 0x0, 0x7) r8 = socket(0x2, 0x1, 0x0) sendmmsg$auto(r0, &(0x7f0000000080)={{&(0x7f0000000580)="fed62dd6d984f7e16cb8a992b0d5fe28e111b45b05885ec9dde97d46e47d15b255c0c30be28b707c4fd6a8ce98612f7c86a12b36475b5335f53c4c85ca8e9932814c6b193ef1bf731c5770b1cdb2e1925ede1ed20ec33d385dbf6214ed1a24d675707f83ff562f5334d1cc4272ccf428e725eb9cee3d09a13d0ce361401db0855b588c59f9875cbb18c749ddd90cc25994a6b6828e7e86ba341c190a206b35f6394e0b35e375255d6be4c45307c91cbc14aacd2da60cd159abe5aae75ae057b48d59419e636dd0d2ae6e8276de7f68", 0xe, 0x0, 0x8000000d, 0x0, 0x3, 0x8}, 0xfffffffb}, 0x20009, 0x7) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) sendmmsg$auto(r8, 0x0, 0x4, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'}) 1.636370443s ago: executing program 0 (id=2520): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event2\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00'}) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/self/pagemap\x00', 0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x29, 0x5, 0x0) r3 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) r4 = open_by_handle_at$auto(r3, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6) sendfile$auto(r2, r2, 0x0, 0x2) syz_genetlink_get_family_id$auto_nbd(&(0x7f00000001c0), 0xffffffffffffffff) write$auto_dfs_global_fops_debug(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x0) open(0x0, 0x1676c1, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_BLKBSZSET(r4, 0x40081271, &(0x7f0000000180)=0x8) r5 = prctl$auto(0x7fff, 0x1, 0x0, 0x5, 0x7) madvise$auto(0x8000000000000000, 0xffffffffffff0005, 0x4019) preadv2$auto(r5, &(0x7f00000000c0)={&(0x7f0000000000)="8699bb3d623314a9d7f08e462ce8ecbc7866368d20f29dfcfcc574064d5eefede296f119c472f198229c10222f0915570671e3aa20c23f9d6ec882462a1c2a597bb485d90c37f9c166ca8f532476e409936f7c42dd30545f9a59c83543f745fd9320008a7650fb4ad66f8c6b25d3a654926f8a25615f03ebb7e24bbed3c966058287872a50d14f4f928689b694ac4075988fd916ed09a8db793bb93e312a3fb467db6393b7a70b498efe213f964edc2dd877327ab5636d0a2d2bd3506c274a", 0x249}, 0x40000000, 0x400, 0x0, 0x7fffffff) pwritev$auto(r5, 0x0, 0x3, 0x1, 0x3ff) ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x51373fc0, 0xfffffffffffffffe, 0x1000000000000001, 0x6, 0x509301a, 0x2f, 0x2c, 0x200000000, 0x2}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES32=r5, @ANYRESDEC=r4, @ANYBLOB="05bf775b0d5fec00"/18, @ANYRESHEX=r3], 0x24}, 0x1, 0x0, 0x0, 0x40884}, 0x20040894) r6 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x582, 0x0) write$auto_console_fops_tty_io(r6, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0x4000000000df, 0x44eb2, 0x6, 0x300000000000) 1.168130733s ago: executing program 2 (id=2514): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0xb2) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) socket(0xa, 0x3, 0x3b) bpf$auto(0xfffff011, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x4, 0xfab2, 0x468, 0x9, 0x1000000000002, 0x4, 0x2, 0x4, 0x200, 0x1fd, 0xb6, 0x4, 0x6, 0x3}, 0xa3) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e12b7ac1ff0100"}, 0x58) mlock$auto(0x81, 0xffff) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000200), r0) sendmsg$auto_KSMBD_EVENT_LOGOUT_REQUEST(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x14, r1, 0x0, 0x70bd31, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x20008411) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000300), 0xffffffffffffffff) read$auto(0xffffffffffffffff, &(0x7f0000000100)='nl80211\x00', 0xbe62) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vbi16\x00', 0x2ca002, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) 344.826827ms ago: executing program 2 (id=2515): mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x400, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x1, 0x0) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x63a2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) read$auto_proc_pid_maps_operations_internal(r0, &(0x7f00000010c0)=""/4096, 0x1000) setsockopt$auto(0x3, 0x10000000084, 0x6, 0x0, 0x84) 174.367163ms ago: executing program 1 (id=2516): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fddbdf2503000000040007800c0002000500000003000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8880) 59.67442ms ago: executing program 0 (id=2517): ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) write$auto(0xffffffffffffffff, 0x0, 0x81) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) socket(0x29, 0x2, 0x0) r0 = socket(0x10, 0x2, 0x0) recvmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) setresuid$auto(0xf5, 0x8000, 0x67) r1 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, 0x0, 0x2c4800, 0x0) r2 = bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x6, 0x24, 0xf, 0x63, 0x400, 0x80, 0x9, 0x80f0c8, 0x20, "38c1d5cbcb9f6b5e511f0cd8ed068f65", 0x0, 0x113e33f2, 0xffffffffffffffff, 0xe4, 0x6, 0x5, 0x6, 0x5, 0x0, 0x3, @attach_btf_obj_fd=r1, 0x6, 0xffff, 0x8, 0x0, 0xfffffffe}, 0x47) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r3 = semctl$auto_GETPID(0x9483, 0x0, 0xb, 0x0) r4 = openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000200), 0xc880, 0x0) kcmp$auto_KCMP_EPOLL_TFD(r3, 0x0, 0x7, r4, 0x6) socket(0x2, 0x3, 0xa) mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000) r5 = openat$auto_proc_mountstats_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) pread64$auto(r5, &(0x7f0000000040)='\x8d]\x00', 0x80000000, 0x5) read$auto(0xffffffffffffffff, 0x0, 0x2) read$auto_clk_summary_fops_(r2, &(0x7f00000003c0)=""/198, 0xc6) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) syz_clone(0x280, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) 0s ago: executing program 2 (id=2518): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) r0 = openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, &(0x7f0000000000), 0xa0042, 0x0) write$auto_lockdown_ops_lockdown(r0, 0x0, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x2, 0x10000002, 0x6}) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/bpf_stats_enabled\x00', 0x163441, 0x0) write$auto(0x3, 0x0, 0xfdef) r1 = ioctl$auto_UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000480)={0x5, 0x5}) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) getpid() sendmsg$auto_TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000006140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYRESDEC=r0, @ANYBLOB="dd06f9d6cf1027cb764f52c9eef0ccbc772d75b7d287d66956296bceece4823f224e87ef4b57010c7d5d8ba9ba4aa3bcc15ddb488ffdbceb67795d3f0177f8e8558db7314e46fb7bad3d61b1e583f9c0f35b32676c824d9227206d8b499beedae88c1fce981bcbd0a1617c1bc664da24d91c8cf002c1348fd764af7e45c1fb8e3144caf4825a14af5137b6e7849d1de05a6f22a11595d2aca0190c1240703f4e440a856dfb2d0cf731043b07206f06b3332abcadb7b7ea4fed08b2bf052a78f3763a4da508d427eee3da25", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x4048497}, 0x95) statx$auto(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x9, 0x3ff, &(0x7f0000000200)={0x7, 0x9, 0x4, 0xce7a, 0xffffffffffffffff, 0xee01, 0x1, 0x8, 0x0, 0x8, 0x80000001, 0x1, {0x7, 0x4}, {0x6, 0x71bb}, {0xfffffffffffffffd, 0xfffff800}, {0x81, 0x3}, 0x8, 0x1ba5, 0x2, 0x0, 0x3, 0x4f8, 0x0, 0x3591, 0xfffffffe, 0x1000, 0x7, 0x1, [0x2, 0xff, 0xc7c3, 0x1, 0x8, 0xb, 0x2, 0x7]}) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x4001, 0x0, 0x200001, 0x0) write$auto(r4, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r6) sendmsg$auto_TIPC_NL_NET_SET(r6, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="200000004e736184b4da26036b53fdc487ce9c5c7690a76fe4e89da486a3c4d732a0548c5099353ebd8371b8af69fb52d3dd67ba5e345fade766560a40f07fcaa4005700cbb7ec4c986b63fc12eba37900b5d44e5a0e0da8a537ce3b323addc918c07544c18dcf084ff0494686cea8646162f82137a864175b4e050000006e486ffbd2ccfb8280cdb8eb875c1681b57d97ce7683cdf5bffa6d2a8518bf772abb", @ANYRES16=r7, @ANYBLOB="01002cbd7010ffdbdf250f0000000c00078008000200620582fe48550c1772e4cb3b96fd2792e6faca0e319d1c32670e2302884d8232d283000012cff5dc1682fa0297116b3631415aebcc7b39bd734e2c85e62efbd76a3e8b76000a55cb19e005d2da6557dd151e", @ANYRES32=0xee00, @ANYBLOB, @ANYRESHEX=r3], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x2) r9 = setfsuid$auto(0xee00) r10 = setfsuid$auto(0xee01) setresuid$auto(r9, r10, r9) lstat$auto(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x8, 0x7, 0x7fffffffffffffff, 0x6, 0xee01, 0x0, 0x0, 0x3, 0x4, 0xe, 0x30, 0x1, 0x9, 0x5, 0x4, 0x100000000, 0x2}) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000380)={"6dabc43ce6410b9ef46ca67b9082d56986afc494849542ad0b656fd3d653f5c0", 0xb8c, 0x10001, 0x7, 0xfffffffe, 0x9, r5}) sendmsg$auto_TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="200700e42f2e5eccc5271e34ea9103b3a0fb1fa40e5f29481cb59201b8834a49f8483fdd7337dc3e0c6833", @ANYRES16=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r8, @ANYRES32=r5, @ANYBLOB="b3001600b721bb8b7f25176c34f9be1223b9b2eac0d93025730a8876ba83924f159c89ab8542678b266f433de31a1788b72d788fbadaa87c83448707c3f273aa18c9f70f562e87a9500aabb722e97463b572ab902c8f67c8ffc212a2d632ae4ff9066b0c82202591a5b163e3ab928cd62819b6878bfbde3ff2fc91fd10e0de1bf45cf438c095d677f5615f5896c6b6e98e416ab70bb38173ba1cbede267eaae01db78cda267215551e37793f56662958b129a30004003f8000009300018014001f800c001c0003000000000000000400b480676b95e384f79bbf73f8d186658a4943b53243159a95037e41e54e76e570fd60508739f5548e4240eee7ca6fee7c8ef40bc3ba7f9f8b218ca2aa332f56b15ab54ceeeab956248702a18bcf3b5ec7fd3a5bb613816e9120aec1af3960bca0a695a329a55147de17b325ba2d73daf4dbf3302d38cd5c7463f5fa1a0700", @ANYRES64=r5], 0x720}, 0x1, 0x0, 0x0, 0x44}, 0x20004054) r11 = socket(0x1, 0x3, 0x5) sendmsg$auto_NFSD_CMD_THREADS_SET(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x24040085) kernel console output (not intermixed with test programs): 107) [ 476.512312][T13861] zswap: compressor not available [ 478.155119][T13907] binder: 13906:13907 ioctl c018620c 0 returned -14 [ 478.193809][T13907] binder: 13906:13907 ioctl c00c620f 200000000380 returned -22 [ 478.251004][T13907] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1841'. [ 479.030053][T13931] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1847'. [ 480.740443][T13960] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1853'. [ 480.771973][T13960] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1853'. [ 481.060963][T13961] FAULT_INJECTION: forcing a failure. [ 481.060963][T13961] name failslab, interval 1, probability 0, space 0, times 0 [ 481.093273][T13961] CPU: 1 UID: 0 PID: 13961 Comm: syz.0.1854 Not tainted syzkaller #0 PREEMPT(full) [ 481.093307][T13961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 481.093323][T13961] Call Trace: [ 481.093332][T13961] [ 481.093341][T13961] dump_stack_lvl+0x16c/0x1f0 [ 481.093383][T13961] should_fail_ex+0x512/0x640 [ 481.093416][T13961] ? __kmalloc_cache_noprof+0x5f/0x780 [ 481.093445][T13961] should_failslab+0xc2/0x120 [ 481.093481][T13961] __kmalloc_cache_noprof+0x72/0x780 [ 481.093508][T13961] ? sctp_auth_init+0x257/0x530 [ 481.093547][T13961] ? sctp_auth_init+0x257/0x530 [ 481.093580][T13961] sctp_auth_init+0x257/0x530 [ 481.093617][T13961] sctp_setsockopt+0xa371/0xb870 [ 481.093663][T13961] ? __pfx_sctp_setsockopt+0x10/0x10 [ 481.093700][T13961] ? find_held_lock+0x2b/0x80 [ 481.093735][T13961] ? aa_sock_opt_perm+0xfd/0x1c0 [ 481.093769][T13961] ? sock_common_setsockopt+0x2e/0xf0 [ 481.093798][T13961] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 481.093826][T13961] do_sock_setsockopt+0xf3/0x1d0 [ 481.093856][T13961] __sys_setsockopt+0x120/0x1a0 [ 481.093896][T13961] __x64_sys_setsockopt+0xbd/0x160 [ 481.093933][T13961] ? do_syscall_64+0x91/0x4b0 [ 481.093964][T13961] ? lockdep_hardirqs_on+0x7c/0x110 [ 481.093992][T13961] do_syscall_64+0xcd/0x4b0 [ 481.094027][T13961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.094054][T13961] RIP: 0033:0x7f315498eec9 [ 481.094075][T13961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 481.094100][T13961] RSP: 002b:00007f315589f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 481.094125][T13961] RAX: ffffffffffffffda RBX: 00007f3154be5fa0 RCX: 00007f315498eec9 [ 481.094142][T13961] RDX: 0000000000000081 RSI: 0000010000000084 RDI: 0000000000000003 [ 481.094158][T13961] RBP: 00007f3154a11f91 R08: 0000000000000008 R09: 0000000000000000 [ 481.094173][T13961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 481.094187][T13961] R13: 00007f3154be6038 R14: 00007f3154be5fa0 R15: 00007fff37178938 [ 481.094222][T13961] [ 482.063672][T13997] FAULT_INJECTION: forcing a failure. [ 482.063672][T13997] name failslab, interval 1, probability 0, space 0, times 0 [ 482.066686][T13995] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1862'. [ 482.112785][T13997] CPU: 1 UID: 0 PID: 13997 Comm: syz.2.1863 Not tainted syzkaller #0 PREEMPT(full) [ 482.112822][T13997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 482.112840][T13997] Call Trace: [ 482.112850][T13997] [ 482.112861][T13997] dump_stack_lvl+0x16c/0x1f0 [ 482.112899][T13997] should_fail_ex+0x512/0x640 [ 482.112942][T13997] ? __kmalloc_node_noprof+0xcd/0x8a0 [ 482.112980][T13997] should_failslab+0xc2/0x120 [ 482.113014][T13997] __kmalloc_node_noprof+0xe0/0x8a0 [ 482.113044][T13997] ? lockdep_init_map_type+0x5c/0x280 [ 482.113082][T13997] ? blk_mq_alloc_tag_set+0x46f/0x12e0 [ 482.113119][T13997] ? blk_mq_alloc_tag_set+0x46f/0x12e0 [ 482.113147][T13997] blk_mq_alloc_tag_set+0x46f/0x12e0 [ 482.113176][T13997] ? __pfx_idr_alloc+0x10/0x10 [ 482.113214][T13997] loop_add+0x3b2/0xb70 [ 482.113252][T13997] ? __pfx_loop_add+0x10/0x10 [ 482.113311][T13997] ? find_held_lock+0x2b/0x80 [ 482.113348][T13997] loop_control_ioctl+0x13e/0x630 [ 482.113382][T13997] ? __pfx_loop_control_ioctl+0x10/0x10 [ 482.113423][T13997] ? __pfx_loop_control_ioctl+0x10/0x10 [ 482.113456][T13997] __x64_sys_ioctl+0x18b/0x210 [ 482.113502][T13997] do_syscall_64+0xcd/0x4b0 [ 482.113538][T13997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.113566][T13997] RIP: 0033:0x7fa51638eec9 [ 482.113588][T13997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.113614][T13997] RSP: 002b:00007fa5172f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 482.113641][T13997] RAX: ffffffffffffffda RBX: 00007fa5165e5fa0 RCX: 00007fa51638eec9 [ 482.113660][T13997] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 482.113677][T13997] RBP: 00007fa516411f91 R08: 0000000000000000 R09: 0000000000000000 [ 482.113694][T13997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 482.113710][T13997] R13: 00007fa5165e6038 R14: 00007fa5165e5fa0 R15: 00007fff40de1a88 [ 482.113744][T13997] [ 483.751310][T14022] FAULT_INJECTION: forcing a failure. [ 483.751310][T14022] name failslab, interval 1, probability 0, space 0, times 0 [ 483.766666][T14022] CPU: 1 UID: 0 PID: 14022 Comm: syz.3.1868 Not tainted syzkaller #0 PREEMPT(full) [ 483.766701][T14022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 483.766718][T14022] Call Trace: [ 483.766726][T14022] [ 483.766736][T14022] dump_stack_lvl+0x16c/0x1f0 [ 483.766772][T14022] should_fail_ex+0x512/0x640 [ 483.766808][T14022] ? __kmalloc_cache_noprof+0x5f/0x780 [ 483.766838][T14022] should_failslab+0xc2/0x120 [ 483.766874][T14022] __kmalloc_cache_noprof+0x72/0x780 [ 483.766903][T14022] ? sctp_auth_init+0x257/0x530 [ 483.766946][T14022] ? sctp_auth_init+0x257/0x530 [ 483.766982][T14022] sctp_auth_init+0x257/0x530 [ 483.767022][T14022] sctp_setsockopt+0xa371/0xb870 [ 483.767075][T14022] ? __pfx_sctp_setsockopt+0x10/0x10 [ 483.767113][T14022] ? find_held_lock+0x2b/0x80 [ 483.767145][T14022] ? aa_sock_opt_perm+0xfd/0x1c0 [ 483.767176][T14022] ? sock_common_setsockopt+0x2e/0xf0 [ 483.767202][T14022] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 483.767234][T14022] do_sock_setsockopt+0xf3/0x1d0 [ 483.767267][T14022] __sys_setsockopt+0x120/0x1a0 [ 483.767309][T14022] __x64_sys_setsockopt+0xbd/0x160 [ 483.767344][T14022] ? do_syscall_64+0x91/0x4b0 [ 483.767375][T14022] ? lockdep_hardirqs_on+0x7c/0x110 [ 483.767405][T14022] do_syscall_64+0xcd/0x4b0 [ 483.767438][T14022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.767461][T14022] RIP: 0033:0x7f53bab8eec9 [ 483.767480][T14022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.767503][T14022] RSP: 002b:00007f53bba13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 483.767525][T14022] RAX: ffffffffffffffda RBX: 00007f53bade5fa0 RCX: 00007f53bab8eec9 [ 483.767541][T14022] RDX: 0000000000000081 RSI: 0000010000000084 RDI: 0000000000000003 [ 483.767555][T14022] RBP: 00007f53bac11f91 R08: 0000000000000008 R09: 0000000000000000 [ 483.767570][T14022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 483.767585][T14022] R13: 00007f53bade6038 R14: 00007f53bade5fa0 R15: 00007fff901cfd38 [ 483.767618][T14022] [ 483.977186][ C1] vkms_vblank_simulate: vblank timer overrun [ 485.023583][T14053] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1880'. [ 487.345916][T14105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1892'. [ 487.467941][T13812] block nbd39: Receive control failed (result -107) [ 487.732317][T14114] zswap: compressor not available [ 488.009166][T14135] FAULT_INJECTION: forcing a failure. [ 488.009166][T14135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 488.029366][T14135] CPU: 0 UID: 0 PID: 14135 Comm: syz.0.1901 Not tainted syzkaller #0 PREEMPT(full) [ 488.029401][T14135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 488.029416][T14135] Call Trace: [ 488.029425][T14135] [ 488.029442][T14135] dump_stack_lvl+0x16c/0x1f0 [ 488.029478][T14135] should_fail_ex+0x512/0x640 [ 488.029516][T14135] _copy_to_user+0x32/0xd0 [ 488.029553][T14135] simple_read_from_buffer+0xcb/0x170 [ 488.029594][T14135] proc_fail_nth_read+0x197/0x240 [ 488.029624][T14135] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 488.029656][T14135] ? rw_verify_area+0xcf/0x6c0 [ 488.029681][T14135] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 488.029709][T14135] vfs_read+0x1e1/0xcf0 [ 488.029741][T14135] ? __pfx___mutex_lock+0x10/0x10 [ 488.029771][T14135] ? __pfx_vfs_read+0x10/0x10 [ 488.029809][T14135] ? __fget_files+0x20e/0x3c0 [ 488.029833][T14135] ? static_key_count+0x20/0x70 [ 488.029877][T14135] ksys_read+0x12a/0x250 [ 488.029904][T14135] ? __pfx_ksys_read+0x10/0x10 [ 488.029943][T14135] do_syscall_64+0xcd/0x4b0 [ 488.029975][T14135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.030000][T14135] RIP: 0033:0x7f315498d8dc [ 488.030021][T14135] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 488.030044][T14135] RSP: 002b:00007f315589f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 488.030068][T14135] RAX: ffffffffffffffda RBX: 00007f3154be5fa0 RCX: 00007f315498d8dc [ 488.030085][T14135] RDX: 000000000000000f RSI: 00007f315589f0a0 RDI: 0000000000000004 [ 488.030101][T14135] RBP: 00007f315589f090 R08: 0000000000000000 R09: 0000000000000000 [ 488.030116][T14135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.030131][T14135] R13: 00007f3154be6038 R14: 00007f3154be5fa0 R15: 00007fff37178938 [ 488.030166][T14135] [ 489.605091][T14174] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1911'. [ 489.793238][T14175] sctp: [Deprecated]: syz.0.1912 (pid 14175) Use of struct sctp_assoc_value in delayed_ack socket option. [ 489.793238][T14175] Use struct sctp_sack_info instead [ 490.055237][T14178] Invalid ELF header magic: != ELF [ 490.899779][T14187] zswap: compressor not available [ 491.301642][T14200] zswap: compressor not available [ 493.747345][T14257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1931'. [ 493.872848][T13812] block nbd40: Receive control failed (result -107) [ 494.597183][T14270] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1934'. [ 495.757776][T14298] openvswitch: netlink: Key 13 has unexpected len 0 expected 24 [ 496.005009][T14292] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1940'. [ 496.114879][T14301] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888078000000 pfn:0x78000 [ 496.138266][T14301] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 496.148952][T14301] memcg:ffff8880793db001 [ 496.153289][T14301] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 496.162361][T14301] page_type: f5(slab) [ 496.166498][T14301] raw: 00fff00000000240 ffff88801b030000 ffffea00014f2690 ffffea0001f2e290 [ 496.175621][T14301] raw: ffff888078000000 0000000000100007 00000000f5000000 ffff8880793db001 [ 496.184478][T14301] head: 00fff00000000240 ffff88801b030000 ffffea00014f2690 ffffea0001f2e290 [ 496.193541][T14301] head: ffff888078000000 0000000000100007 00000000f5000000 ffff8880793db001 [ 496.202467][T14301] head: 00fff00000000001 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 496.214614][T14301] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 496.246738][T14301] page dumped because: unmovable page [ 496.252144][T14301] page_owner tracks the page as allocated [ 496.266643][T14301] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6039, tgid 6033 (syz.1.19), ts 95646645756, free_ts 93905943212 [ 496.289950][T14301] post_alloc_hook+0x1c0/0x230 [ 496.294727][T14301] get_page_from_freelist+0x10a3/0x3a30 [ 496.327177][T14301] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 496.346358][T14301] alloc_pages_mpol+0x1fb/0x550 [ 496.360681][T14301] new_slab+0x24a/0x360 [ 496.397475][T14301] ___slab_alloc+0xdc4/0x1ae0 [ 496.495596][T14301] __slab_alloc.constprop.0+0x63/0x110 [ 496.531388][T14301] __kvmalloc_node_noprof+0x5aa/0x9c0 [ 496.537154][T14301] alloc_netdev_mqs+0xc91/0x1550 [ 496.542163][T14301] __ip_tunnel_create+0x3ad/0x6e0 [ 496.555161][T14301] ip_tunnel_init_net+0x22f/0x7d0 [ 496.560224][T14301] ops_init+0x1e2/0x5f0 [ 496.564403][T14301] setup_net+0x100/0x390 [ 496.569332][T14301] copy_net_ns+0x2f8/0x690 [ 496.573774][T14301] create_new_namespaces+0x3ea/0xa90 [ 496.589136][T14301] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 496.655822][T14301] page last free pid 5996 tgid 5993 stack trace: [ 496.662200][T14301] __free_frozen_pages+0x7df/0x1160 [ 496.668302][T14301] qlist_free_all+0x4d/0x120 [ 496.672935][T14301] kasan_quarantine_reduce+0x195/0x1e0 [ 496.678902][T14301] __kasan_kmalloc+0x8a/0xb0 [ 496.683532][T14301] __kmalloc_noprof+0x32f/0x880 [ 496.689718][T14301] tomoyo_realpath_from_path+0xc2/0x6e0 [ 496.697017][T14301] tomoyo_get_exe+0x63/0xa0 [ 496.701646][T14301] tomoyo_write_control+0x689/0x1430 [ 496.741117][T14301] vfs_write+0x2a0/0x11d0 [ 496.777893][T14301] ksys_write+0x12a/0x250 [ 496.821009][T14301] do_syscall_64+0xcd/0x4b0 [ 496.837778][T14301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.206536][T14326] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1951'. [ 498.726194][T14344] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1957'. [ 499.616757][T14362] HfR: entered promiscuous mode [ 499.984486][T14372] netlink: zone id is out of range [ 500.061845][T14372] netlink: del zone limit has 4 unknown bytes [ 500.120562][T14371] netlink: set zone limit has 8 unknown bytes [ 500.249580][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.256000][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.481049][T14371] HfR: entered promiscuous mode [ 500.762753][T14377] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1965'. [ 501.210057][T14397] FAULT_INJECTION: forcing a failure. [ 501.210057][T14397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 501.261713][T14397] CPU: 0 UID: 0 PID: 14397 Comm: syz.3.1971 Not tainted syzkaller #0 PREEMPT(full) [ 501.261734][T14397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 501.261743][T14397] Call Trace: [ 501.261748][T14397] [ 501.261754][T14397] dump_stack_lvl+0x16c/0x1f0 [ 501.261777][T14397] should_fail_ex+0x512/0x640 [ 501.261799][T14397] _copy_to_user+0x32/0xd0 [ 501.261821][T14397] __x64_sys_cachestat+0x302/0x5f0 [ 501.261842][T14397] ? __pfx___x64_sys_cachestat+0x10/0x10 [ 501.261870][T14397] do_syscall_64+0xcd/0x4b0 [ 501.261888][T14397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.261903][T14397] RIP: 0033:0x7f53bab8eec9 [ 501.261915][T14397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.261928][T14397] RSP: 002b:00007f53bba13038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c3 [ 501.261943][T14397] RAX: ffffffffffffffda RBX: 00007f53bade5fa0 RCX: 00007f53bab8eec9 [ 501.261953][T14397] RDX: 0000200000000680 RSI: 0000200000000640 RDI: 0000000000000003 [ 501.261962][T14397] RBP: 00007f53bba13090 R08: 0000000000000000 R09: 0000000000000000 [ 501.261971][T14397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.261979][T14397] R13: 00007f53bade6038 R14: 00007f53bade5fa0 R15: 00007fff901cfd38 [ 501.261997][T14397] [ 501.405789][ C0] vkms_vblank_simulate: vblank timer overrun [ 502.696621][T14427] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1977'. [ 505.919471][T14484] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1995'. [ 506.680990][T14484] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 506.704777][T14484] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 506.735767][T14484] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 509.124085][T14543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2012'. [ 509.227220][T13812] block nbd41: Receive control failed (result -107) [ 511.123536][T14594] netlink: 268 bytes leftover after parsing attributes in process `syz.0.2025'. [ 514.048288][T14651] FAULT_INJECTION: forcing a failure. [ 514.048288][T14651] name failslab, interval 1, probability 0, space 0, times 0 [ 514.062970][T14651] CPU: 1 UID: 0 PID: 14651 Comm: syz.3.2042 Not tainted syzkaller #0 PREEMPT(full) [ 514.063006][T14651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 514.063023][T14651] Call Trace: [ 514.063032][T14651] [ 514.063043][T14651] dump_stack_lvl+0x16c/0x1f0 [ 514.063081][T14651] should_fail_ex+0x512/0x640 [ 514.063123][T14651] should_failslab+0xc2/0x120 [ 514.063161][T14651] __kmalloc_cache_noprof+0x72/0x780 [ 514.063188][T14651] ? __task_pid_nr_ns+0x1f5/0x500 [ 514.063226][T14651] ? proc_self_get_link+0x1a9/0x230 [ 514.063269][T14651] ? proc_self_get_link+0x1a9/0x230 [ 514.063302][T14651] proc_self_get_link+0x1a9/0x230 [ 514.063338][T14651] ? __pfx_proc_self_get_link+0x10/0x10 [ 514.063370][T14651] step_into+0x189e/0x21a0 [ 514.063406][T14651] ? __pfx_step_into+0x10/0x10 [ 514.063439][T14651] ? lookup_fast+0x156/0x610 [ 514.063471][T14651] walk_component+0xfc/0x5b0 [ 514.063502][T14651] link_path_walk+0x627/0xe20 [ 514.063550][T14651] path_openat+0x1b0/0x2cb0 [ 514.063595][T14651] ? __pfx_path_openat+0x10/0x10 [ 514.063637][T14651] do_filp_open+0x20b/0x470 [ 514.063670][T14651] ? __pfx_do_filp_open+0x10/0x10 [ 514.063731][T14651] ? alloc_fd+0x471/0x7d0 [ 514.063770][T14651] do_sys_openat2+0x11b/0x1d0 [ 514.063808][T14651] ? __pfx_do_sys_openat2+0x10/0x10 [ 514.063849][T14651] ? find_held_lock+0x2b/0x80 [ 514.063890][T14651] __x64_sys_openat+0x174/0x210 [ 514.063929][T14651] ? __pfx___x64_sys_openat+0x10/0x10 [ 514.063988][T14651] do_syscall_64+0xcd/0x4b0 [ 514.064021][T14651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.064047][T14651] RIP: 0033:0x7f53bab8eec9 [ 514.064068][T14651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.064095][T14651] RSP: 002b:00007f53bba13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 514.064118][T14651] RAX: ffffffffffffffda RBX: 00007f53bade5fa0 RCX: 00007f53bab8eec9 [ 514.064136][T14651] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 514.064154][T14651] RBP: 00007f53bac11f91 R08: 0000000000000000 R09: 0000000000000000 [ 514.064170][T14651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 514.064185][T14651] R13: 00007f53bade6038 R14: 00007f53bade5fa0 R15: 00007fff901cfd38 [ 514.064221][T14651] [ 514.290903][ C1] vkms_vblank_simulate: vblank timer overrun [ 514.753186][T14667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2047'. [ 514.817501][T13812] block nbd42: Receive control failed (result -107) [ 515.065653][T14683] usbip-vudc usbip-vudc.0: gadget not bound [ 515.278940][T14690] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2049'. [ 515.469798][T14693] random: crng reseeded on system resumption [ 516.905025][T14705] FAULT_INJECTION: forcing a failure. [ 516.905025][T14705] name failslab, interval 1, probability 0, space 0, times 0 [ 516.969074][T14705] CPU: 1 UID: 0 PID: 14705 Comm: syz.3.2055 Not tainted syzkaller #0 PREEMPT(full) [ 516.969109][T14705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 516.969126][T14705] Call Trace: [ 516.969136][T14705] [ 516.969147][T14705] dump_stack_lvl+0x16c/0x1f0 [ 516.969185][T14705] should_fail_ex+0x512/0x640 [ 516.969222][T14705] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 516.969256][T14705] should_failslab+0xc2/0x120 [ 516.969292][T14705] kmem_cache_alloc_noprof+0x75/0x6e0 [ 516.969328][T14705] ? alloc_empty_file+0x55/0x1e0 [ 516.969374][T14705] ? alloc_empty_file+0x55/0x1e0 [ 516.969410][T14705] alloc_empty_file+0x55/0x1e0 [ 516.969449][T14705] path_openat+0xda/0x2cb0 [ 516.969491][T14705] ? __pfx_path_openat+0x10/0x10 [ 516.969532][T14705] do_filp_open+0x20b/0x470 [ 516.969564][T14705] ? __pfx_do_filp_open+0x10/0x10 [ 516.969621][T14705] ? alloc_fd+0x471/0x7d0 [ 516.969661][T14705] do_sys_openat2+0x11b/0x1d0 [ 516.969700][T14705] ? __pfx_do_sys_openat2+0x10/0x10 [ 516.969740][T14705] ? find_held_lock+0x2b/0x80 [ 516.969781][T14705] __x64_sys_openat+0x174/0x210 [ 516.969820][T14705] ? __pfx___x64_sys_openat+0x10/0x10 [ 516.969874][T14705] do_syscall_64+0xcd/0x4b0 [ 516.969909][T14705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.969936][T14705] RIP: 0033:0x7f53bab8eec9 [ 516.969957][T14705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.969982][T14705] RSP: 002b:00007f53bba13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 516.970008][T14705] RAX: ffffffffffffffda RBX: 00007f53bade5fa0 RCX: 00007f53bab8eec9 [ 516.970026][T14705] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 516.970043][T14705] RBP: 00007f53bac11f91 R08: 0000000000000000 R09: 0000000000000000 [ 516.970060][T14705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 516.970076][T14705] R13: 00007f53bade6038 R14: 00007f53bade5fa0 R15: 00007fff901cfd38 [ 516.970112][T14705] [ 517.177321][ C1] vkms_vblank_simulate: vblank timer overrun [ 518.115776][T14734] netlink: 268 bytes leftover after parsing attributes in process `syz.2.2061'. [ 520.090278][T14769] FAULT_INJECTION: forcing a failure. [ 520.090278][T14769] name failslab, interval 1, probability 0, space 0, times 0 [ 520.118788][T14769] CPU: 1 UID: 0 PID: 14769 Comm: syz.3.2069 Not tainted syzkaller #0 PREEMPT(full) [ 520.118810][T14769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 520.118819][T14769] Call Trace: [ 520.118825][T14769] [ 520.118832][T14769] dump_stack_lvl+0x16c/0x1f0 [ 520.118855][T14769] should_fail_ex+0x512/0x640 [ 520.118876][T14769] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 520.118894][T14769] should_failslab+0xc2/0x120 [ 520.118913][T14769] kmem_cache_alloc_noprof+0x75/0x6e0 [ 520.118929][T14769] ? alloc_empty_file+0x55/0x1e0 [ 520.118952][T14769] ? alloc_empty_file+0x55/0x1e0 [ 520.118971][T14769] alloc_empty_file+0x55/0x1e0 [ 520.118992][T14769] path_openat+0xda/0x2cb0 [ 520.119014][T14769] ? __pfx_path_openat+0x10/0x10 [ 520.119040][T14769] do_filp_open+0x20b/0x470 [ 520.119056][T14769] ? __pfx_do_filp_open+0x10/0x10 [ 520.119086][T14769] ? alloc_fd+0x471/0x7d0 [ 520.119105][T14769] do_sys_openat2+0x11b/0x1d0 [ 520.119126][T14769] ? __pfx_do_sys_openat2+0x10/0x10 [ 520.119148][T14769] ? find_held_lock+0x2b/0x80 [ 520.119169][T14769] __x64_sys_openat+0x174/0x210 [ 520.119190][T14769] ? __pfx___x64_sys_openat+0x10/0x10 [ 520.119219][T14769] do_syscall_64+0xcd/0x4b0 [ 520.119237][T14769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.119252][T14769] RIP: 0033:0x7f53bab8eec9 [ 520.119264][T14769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 520.119278][T14769] RSP: 002b:00007f53bba13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 520.119293][T14769] RAX: ffffffffffffffda RBX: 00007f53bade5fa0 RCX: 00007f53bab8eec9 [ 520.119303][T14769] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 520.119311][T14769] RBP: 00007f53bac11f91 R08: 0000000000000000 R09: 0000000000000000 [ 520.119320][T14769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 520.119332][T14769] R13: 00007f53bade6038 R14: 00007f53bade5fa0 R15: 00007fff901cfd38 [ 520.119351][T14769] [ 520.568775][T14775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2072'. [ 522.262528][T14819] FAULT_INJECTION: forcing a failure. [ 522.262528][T14819] name failslab, interval 1, probability 0, space 0, times 0 [ 522.282790][T14821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2083'. [ 522.309213][T14819] CPU: 1 UID: 0 PID: 14819 Comm: syz.0.2082 Not tainted syzkaller #0 PREEMPT(full) [ 522.309248][T14819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 522.309265][T14819] Call Trace: [ 522.309274][T14819] [ 522.309285][T14819] dump_stack_lvl+0x16c/0x1f0 [ 522.309327][T14819] should_fail_ex+0x512/0x640 [ 522.309362][T14819] ? __kmalloc_node_noprof+0xcd/0x8a0 [ 522.309396][T14819] should_failslab+0xc2/0x120 [ 522.309430][T14819] __kmalloc_node_noprof+0xe0/0x8a0 [ 522.309458][T14819] ? lockdep_init_map_type+0x5c/0x280 [ 522.309495][T14819] ? blk_mq_alloc_tag_set+0x577/0x12e0 [ 522.309532][T14819] ? blk_mq_alloc_tag_set+0x577/0x12e0 [ 522.309560][T14819] blk_mq_alloc_tag_set+0x577/0x12e0 [ 522.309590][T14819] ? idr_alloc_u32+0x263/0x2f0 [ 522.309637][T14819] loop_add+0x3b2/0xb70 [ 522.309675][T14819] ? __pfx_loop_add+0x10/0x10 [ 522.309730][T14819] ? find_held_lock+0x2b/0x80 [ 522.309764][T14819] loop_control_ioctl+0x13e/0x630 [ 522.309799][T14819] ? __pfx_loop_control_ioctl+0x10/0x10 [ 522.309839][T14819] ? __pfx_loop_control_ioctl+0x10/0x10 [ 522.309875][T14819] __x64_sys_ioctl+0x18b/0x210 [ 522.309916][T14819] do_syscall_64+0xcd/0x4b0 [ 522.309949][T14819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.309976][T14819] RIP: 0033:0x7f315498eec9 [ 522.309998][T14819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 522.310022][T14819] RSP: 002b:00007f315589f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 522.310047][T14819] RAX: ffffffffffffffda RBX: 00007f3154be5fa0 RCX: 00007f315498eec9 [ 522.310065][T14819] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 522.310082][T14819] RBP: 00007f3154a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 522.310098][T14819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 522.310114][T14819] R13: 00007f3154be6038 R14: 00007f3154be5fa0 R15: 00007fff37178938 [ 522.310150][T14819] [ 522.698526][T14829] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2089'. [ 522.707818][T14829] nbd: must specify a device to reconfigure [ 523.210308][T14848] netlink: 268 bytes leftover after parsing attributes in process `syz.0.2091'. [ 523.238874][T14842] netlink: 268 bytes leftover after parsing attributes in process `syz.2.2088'. [ 524.040384][T14864] zswap: compressor not available [ 524.431204][T14872] FAULT_INJECTION: forcing a failure. [ 524.431204][T14872] name failslab, interval 1, probability 0, space 0, times 0 [ 524.456978][T14872] CPU: 0 UID: 0 PID: 14872 Comm: syz.0.2096 Not tainted syzkaller #0 PREEMPT(full) [ 524.457012][T14872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 524.457028][T14872] Call Trace: [ 524.457037][T14872] [ 524.457046][T14872] dump_stack_lvl+0x16c/0x1f0 [ 524.457080][T14872] should_fail_ex+0x512/0x640 [ 524.457114][T14872] ? __kmalloc_node_noprof+0xcd/0x8a0 [ 524.457148][T14872] should_failslab+0xc2/0x120 [ 524.457183][T14872] __kmalloc_node_noprof+0xe0/0x8a0 [ 524.457208][T14872] ? lockdep_init_map_type+0x5c/0x280 [ 524.457246][T14872] ? blk_mq_alloc_tag_set+0x46f/0x12e0 [ 524.457282][T14872] ? blk_mq_alloc_tag_set+0x46f/0x12e0 [ 524.457307][T14872] blk_mq_alloc_tag_set+0x46f/0x12e0 [ 524.457333][T14872] ? __pfx_idr_alloc+0x10/0x10 [ 524.457369][T14872] loop_add+0x3b2/0xb70 [ 524.457403][T14872] ? __pfx_loop_add+0x10/0x10 [ 524.457471][T14872] ? find_held_lock+0x2b/0x80 [ 524.457507][T14872] loop_control_ioctl+0x13e/0x630 [ 524.457539][T14872] ? __pfx_loop_control_ioctl+0x10/0x10 [ 524.457578][T14872] ? __pfx_loop_control_ioctl+0x10/0x10 [ 524.457611][T14872] __x64_sys_ioctl+0x18b/0x210 [ 524.457653][T14872] do_syscall_64+0xcd/0x4b0 [ 524.457689][T14872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.457714][T14872] RIP: 0033:0x7f315498eec9 [ 524.457735][T14872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.457760][T14872] RSP: 002b:00007f315589f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 524.457784][T14872] RAX: ffffffffffffffda RBX: 00007f3154be5fa0 RCX: 00007f315498eec9 [ 524.457802][T14872] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 524.457820][T14872] RBP: 00007f3154a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 524.457835][T14872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.457851][T14872] R13: 00007f3154be6038 R14: 00007f3154be5fa0 R15: 00007fff37178938 [ 524.457887][T14872] [ 524.706118][T14885] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2099'. [ 524.718549][T14885] nbd: must specify a device to reconfigure [ 525.082544][T14895] tipc: Started in network mode [ 525.088285][T14895] tipc: Node identity ee00, cluster identity 4711 [ 525.094716][T14895] tipc: Node number set to 60928 [ 526.177094][T14923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2111'. [ 526.241052][T14926] netlink: 186 bytes leftover after parsing attributes in process `syz.2.2112'. [ 526.241625][T14923] nbd: must specify a device to reconfigure [ 526.578804][T14930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2114'. [ 526.657456][T13812] block nbd43: Receive control failed (result -107) [ 526.770697][ T5859] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 526.784296][ T5859] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 526.803765][ T5859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 526.831547][ T5859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 526.856245][ T5859] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 527.438704][T14955] ptrace attach of "./syz-executor exec"[14959] was attempted by "./syz-executor exec"[14955] [ 527.456692][T14937] chnl_net:caif_netlink_parms(): no params data found [ 527.872018][T14967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2122'. [ 527.881752][T14967] nbd: must specify a device to reconfigure [ 527.901677][T14937] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.925976][T14937] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.949340][T14937] bridge_slave_0: entered allmulticast mode [ 527.972331][T14937] bridge_slave_0: entered promiscuous mode [ 528.019515][T14937] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.071415][T14937] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.078915][T14937] bridge_slave_1: entered allmulticast mode [ 528.102474][T14975] netlink: 'syz.0.2124': attribute type 22 has an invalid length. [ 528.138611][T14937] bridge_slave_1: entered promiscuous mode [ 528.154466][T14969] rtc_cmos 00:00: Alarms can be up to one day in the future [ 528.177064][T14972] zswap: compressor not available [ 528.289031][T14937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.356051][T14937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.467493][ T5917] rtc_cmos 00:00: Alarms can be up to one day in the future [ 528.485877][ T5917] rtc_cmos 00:00: Alarms can be up to one day in the future [ 528.519856][T14937] team0: Port device team_slave_0 added [ 528.529434][ T5917] rtc_cmos 00:00: Alarms can be up to one day in the future [ 528.559916][T14937] team0: Port device team_slave_1 added [ 528.565809][ T5917] rtc_cmos 00:00: Alarms can be up to one day in the future [ 528.593236][ T5917] rtc rtc0: __rtc_set_alarm: err=-22 [ 528.710012][T14937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.717262][T14937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.743246][ C1] vkms_vblank_simulate: vblank timer overrun [ 528.827472][T14937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.848500][T14937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.855651][T14937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.881527][ C1] vkms_vblank_simulate: vblank timer overrun [ 528.889475][ T5859] Bluetooth: hci0: command tx timeout [ 528.895920][T14937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.014392][T14937] hsr_slave_0: entered promiscuous mode [ 529.022297][T14937] hsr_slave_1: entered promiscuous mode [ 529.032103][T14937] debugfs: 'hsr0' already exists in 'hsr' [ 529.038862][T14937] Cannot create hsr debugfs directory [ 529.056844][T14991] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2127'. [ 529.864695][T14937] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.149910][T15002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2131'. [ 530.159266][T15002] nbd: must specify a device to reconfigure [ 530.186625][T14937] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.302401][T14937] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.481433][T14937] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.495128][T15010] FAULT_INJECTION: forcing a failure. [ 530.495128][T15010] name failslab, interval 1, probability 0, space 0, times 0 [ 530.526820][T15010] CPU: 1 UID: 0 PID: 15010 Comm: syz.0.2133 Not tainted syzkaller #0 PREEMPT(full) [ 530.526855][T15010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 530.526871][T15010] Call Trace: [ 530.526878][T15010] [ 530.526888][T15010] dump_stack_lvl+0x16c/0x1f0 [ 530.526924][T15010] should_fail_ex+0x512/0x640 [ 530.526960][T15010] ? __kmalloc_cache_noprof+0x5f/0x780 [ 530.526988][T15010] should_failslab+0xc2/0x120 [ 530.527021][T15010] __kmalloc_cache_noprof+0x72/0x780 [ 530.527043][T15010] ? find_held_lock+0x2b/0x80 [ 530.527073][T15010] ? init_srcu_struct_fields+0x97a/0xde0 [ 530.527103][T15010] ? init_srcu_struct_fields+0x97a/0xde0 [ 530.527123][T15010] init_srcu_struct_fields+0x97a/0xde0 [ 530.527146][T15010] ? lockdep_init_map_type+0x5c/0x280 [ 530.527195][T15010] blk_mq_alloc_tag_set+0x3c8/0x12e0 [ 530.527226][T15010] ? __pfx_idr_alloc+0x10/0x10 [ 530.527263][T15010] loop_add+0x3b2/0xb70 [ 530.527303][T15010] ? __pfx_loop_add+0x10/0x10 [ 530.527358][T15010] ? find_held_lock+0x2b/0x80 [ 530.527391][T15010] loop_control_ioctl+0x13e/0x630 [ 530.527431][T15010] ? __pfx_loop_control_ioctl+0x10/0x10 [ 530.527476][T15010] ? __pfx_loop_control_ioctl+0x10/0x10 [ 530.527515][T15010] __x64_sys_ioctl+0x18b/0x210 [ 530.527562][T15010] do_syscall_64+0xcd/0x4b0 [ 530.527602][T15010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.527633][T15010] RIP: 0033:0x7f315498eec9 [ 530.527656][T15010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.527687][T15010] RSP: 002b:00007f315589f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 530.527715][T15010] RAX: ffffffffffffffda RBX: 00007f3154be5fa0 RCX: 00007f315498eec9 [ 530.527736][T15010] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 530.527756][T15010] RBP: 00007f3154a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 530.527775][T15010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 530.527792][T15010] R13: 00007f3154be6038 R14: 00007f3154be5fa0 R15: 00007fff37178938 [ 530.527825][T15010] [ 530.735032][ C1] vkms_vblank_simulate: vblank timer overrun [ 530.956303][ T5859] Bluetooth: hci0: command tx timeout [ 531.309794][T14937] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 531.360575][T14937] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 531.399508][T14937] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 531.419032][T14937] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 531.544803][T15025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2137'. [ 531.664121][T14937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.812995][T14937] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.856411][T13181] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.863596][T13181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.928156][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.935362][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.937294][T15045] ubi0: attaching mtd0 [ 532.057328][T15045] ubi0: scanning is finished [ 532.120497][T15045] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 532.215324][T15051] synth uevent: /devices/virtual/block/nbd3: unknown uevent action string [ 532.300016][T15051] block nbd3: uevent: failed to send synthetic uevent: -22 [ 532.517772][T15045] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 532.604922][T15045] ubi0: attaching mtd0 [ 532.642914][T15045] ubi0: scanning is finished [ 532.659507][T15045] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 532.731583][T15059] FAULT_INJECTION: forcing a failure. [ 532.731583][T15059] name failslab, interval 1, probability 0, space 0, times 0 [ 532.745194][T15059] CPU: 1 UID: 0 PID: 15059 Comm: syz.0.2141 Not tainted syzkaller #0 PREEMPT(full) [ 532.745215][T15059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 532.745224][T15059] Call Trace: [ 532.745229][T15059] [ 532.745236][T15059] dump_stack_lvl+0x16c/0x1f0 [ 532.745258][T15059] should_fail_ex+0x512/0x640 [ 532.745279][T15059] ? __kmalloc_node_noprof+0xcd/0x8a0 [ 532.745299][T15059] should_failslab+0xc2/0x120 [ 532.745319][T15059] __kmalloc_node_noprof+0xe0/0x8a0 [ 532.745336][T15059] ? lockdep_init_map_type+0x5c/0x280 [ 532.745358][T15059] ? blk_mq_alloc_tag_set+0x46f/0x12e0 [ 532.745378][T15059] ? blk_mq_alloc_tag_set+0x46f/0x12e0 [ 532.745393][T15059] blk_mq_alloc_tag_set+0x46f/0x12e0 [ 532.745410][T15059] ? __pfx_idr_alloc+0x10/0x10 [ 532.745431][T15059] loop_add+0x3b2/0xb70 [ 532.745451][T15059] ? __pfx_loop_add+0x10/0x10 [ 532.745482][T15059] ? find_held_lock+0x2b/0x80 [ 532.745501][T15059] loop_control_ioctl+0x13e/0x630 [ 532.745521][T15059] ? __pfx_loop_control_ioctl+0x10/0x10 [ 532.745543][T15059] ? __pfx_loop_control_ioctl+0x10/0x10 [ 532.745564][T15059] __x64_sys_ioctl+0x18b/0x210 [ 532.745587][T15059] do_syscall_64+0xcd/0x4b0 [ 532.745606][T15059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.745620][T15059] RIP: 0033:0x7f315498eec9 [ 532.745633][T15059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.745646][T15059] RSP: 002b:00007f315589f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 532.745660][T15059] RAX: ffffffffffffffda RBX: 00007f3154be5fa0 RCX: 00007f315498eec9 [ 532.745670][T15059] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 532.745679][T15059] RBP: 00007f3154a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 532.745689][T15059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.745698][T15059] R13: 00007f3154be6038 R14: 00007f3154be5fa0 R15: 00007fff37178938 [ 532.745717][T15059] [ 532.978290][T14937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.010631][T14937] veth0_vlan: entered promiscuous mode [ 533.029141][T14937] veth1_vlan: entered promiscuous mode [ 533.053838][T14937] veth0_macvtap: entered promiscuous mode [ 533.062045][T14937] veth1_macvtap: entered promiscuous mode [ 533.075752][T14937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 533.085552][T14937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 533.095226][ T5859] Bluetooth: hci0: command tx timeout [ 533.239468][T15045] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 533.336810][T13181] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.369573][T13181] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.400459][T13181] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.448939][T13181] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.450542][T15025] random: crng reseeded on system resumption [ 533.704726][ T9182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.742187][ T9182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.755771][T15067] zswap: compressor not available [ 533.849670][ T2991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.858865][ T2991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.896290][T15074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2145'. [ 533.975182][ T5859] block nbd44: Receive control failed (result -107) [ 534.637615][T15089] netlink: 268 bytes leftover after parsing attributes in process `syz.2.2148'. [ 535.109013][ T5859] Bluetooth: hci0: command tx timeout [ 535.380292][T15098] FAULT_INJECTION: forcing a failure. [ 535.380292][T15098] name failslab, interval 1, probability 0, space 0, times 0 [ 535.436061][T15098] CPU: 0 UID: 0 PID: 15098 Comm: syz.3.2150 Not tainted syzkaller #0 PREEMPT(full) [ 535.436099][T15098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 535.436117][T15098] Call Trace: [ 535.436127][T15098] [ 535.436138][T15098] dump_stack_lvl+0x16c/0x1f0 [ 535.436175][T15098] should_fail_ex+0x512/0x640 [ 535.436211][T15098] ? __kmalloc_node_noprof+0xcd/0x8a0 [ 535.436248][T15098] should_failslab+0xc2/0x120 [ 535.436285][T15098] __kmalloc_node_noprof+0xe0/0x8a0 [ 535.436316][T15098] ? lockdep_init_map_type+0x5c/0x280 [ 535.436354][T15098] ? blk_mq_alloc_tag_set+0x46f/0x12e0 [ 535.436393][T15098] ? blk_mq_alloc_tag_set+0x46f/0x12e0 [ 535.436421][T15098] blk_mq_alloc_tag_set+0x46f/0x12e0 [ 535.436451][T15098] ? __pfx_idr_alloc+0x10/0x10 [ 535.436491][T15098] loop_add+0x3b2/0xb70 [ 535.436529][T15098] ? __pfx_loop_add+0x10/0x10 [ 535.436586][T15098] ? find_held_lock+0x2b/0x80 [ 535.436633][T15098] loop_control_ioctl+0x13e/0x630 [ 535.436671][T15098] ? __pfx_loop_control_ioctl+0x10/0x10 [ 535.436712][T15098] ? __pfx_loop_control_ioctl+0x10/0x10 [ 535.436750][T15098] __x64_sys_ioctl+0x18b/0x210 [ 535.436792][T15098] do_syscall_64+0xcd/0x4b0 [ 535.436827][T15098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.436853][T15098] RIP: 0033:0x7f53bab8eec9 [ 535.436874][T15098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.436898][T15098] RSP: 002b:00007f53bba13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 535.436922][T15098] RAX: ffffffffffffffda RBX: 00007f53bade5fa0 RCX: 00007f53bab8eec9 [ 535.436940][T15098] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 535.436958][T15098] RBP: 00007f53bac11f91 R08: 0000000000000000 R09: 0000000000000000 [ 535.436974][T15098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.436988][T15098] R13: 00007f53bade6038 R14: 00007f53bade5fa0 R15: 00007fff901cfd38 [ 535.437023][T15098] [ 535.734693][T15102] zswap: compressor not available [ 535.775772][T15112] FAULT_INJECTION: forcing a failure. [ 535.775772][T15112] name failslab, interval 1, probability 0, space 0, times 0 [ 535.788809][T15112] CPU: 0 UID: 0 PID: 15112 Comm: syz.3.2154 Not tainted syzkaller #0 PREEMPT(full) [ 535.788829][T15112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 535.788838][T15112] Call Trace: [ 535.788844][T15112] [ 535.788850][T15112] dump_stack_lvl+0x16c/0x1f0 [ 535.788873][T15112] should_fail_ex+0x512/0x640 [ 535.788894][T15112] ? __kmalloc_node_noprof+0xcd/0x8a0 [ 535.788915][T15112] should_failslab+0xc2/0x120 [ 535.788935][T15112] __kmalloc_node_noprof+0xe0/0x8a0 [ 535.788951][T15112] ? lockdep_init_map_type+0x5c/0x280 [ 535.788973][T15112] ? blk_mq_alloc_tag_set+0x46f/0x12e0 [ 535.788993][T15112] ? blk_mq_alloc_tag_set+0x46f/0x12e0 [ 535.789008][T15112] blk_mq_alloc_tag_set+0x46f/0x12e0 [ 535.789024][T15112] ? __pfx_idr_alloc+0x10/0x10 [ 535.789045][T15112] loop_add+0x3b2/0xb70 [ 535.789065][T15112] ? __pfx_loop_add+0x10/0x10 [ 535.789096][T15112] ? find_held_lock+0x2b/0x80 [ 535.789115][T15112] loop_control_ioctl+0x13e/0x630 [ 535.789134][T15112] ? __pfx_loop_control_ioctl+0x10/0x10 [ 535.789156][T15112] ? __pfx_loop_control_ioctl+0x10/0x10 [ 535.789177][T15112] __x64_sys_ioctl+0x18b/0x210 [ 535.789199][T15112] do_syscall_64+0xcd/0x4b0 [ 535.789218][T15112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.789233][T15112] RIP: 0033:0x7f53bab8eec9 [ 535.789245][T15112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.789259][T15112] RSP: 002b:00007f53bba13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 535.789273][T15112] RAX: ffffffffffffffda RBX: 00007f53bade5fa0 RCX: 00007f53bab8eec9 [ 535.789283][T15112] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 535.789292][T15112] RBP: 00007f53bac11f91 R08: 0000000000000000 R09: 0000000000000000 [ 535.789300][T15112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.789309][T15112] R13: 00007f53bade6038 R14: 00007f53bade5fa0 R15: 00007fff901cfd38 [ 535.789333][T15112] [ 536.561081][T15118] FAULT_INJECTION: forcing a failure. [ 536.561081][T15118] name failslab, interval 1, probability 0, space 0, times 0 [ 536.640146][T15118] CPU: 1 UID: 0 PID: 15118 Comm: syz.3.2156 Not tainted syzkaller #0 PREEMPT(full) [ 536.640185][T15118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 536.640203][T15118] Call Trace: [ 536.640213][T15118] [ 536.640224][T15118] dump_stack_lvl+0x16c/0x1f0 [ 536.640263][T15118] should_fail_ex+0x512/0x640 [ 536.640300][T15118] ? __kmalloc_node_noprof+0xcd/0x8a0 [ 536.640337][T15118] should_failslab+0xc2/0x120 [ 536.640373][T15118] __kmalloc_node_noprof+0xe0/0x8a0 [ 536.640404][T15118] ? lockdep_init_map_type+0x5c/0x280 [ 536.640443][T15118] ? blk_mq_alloc_tag_set+0x46f/0x12e0 [ 536.640483][T15118] ? blk_mq_alloc_tag_set+0x46f/0x12e0 [ 536.640511][T15118] blk_mq_alloc_tag_set+0x46f/0x12e0 [ 536.640543][T15118] ? __pfx_idr_alloc+0x10/0x10 [ 536.640581][T15118] loop_add+0x3b2/0xb70 [ 536.640619][T15118] ? __pfx_loop_add+0x10/0x10 [ 536.640686][T15118] ? find_held_lock+0x2b/0x80 [ 536.640724][T15118] loop_control_ioctl+0x13e/0x630 [ 536.640763][T15118] ? __pfx_loop_control_ioctl+0x10/0x10 [ 536.640804][T15118] ? __pfx_loop_control_ioctl+0x10/0x10 [ 536.640841][T15118] __x64_sys_ioctl+0x18b/0x210 [ 536.640883][T15118] do_syscall_64+0xcd/0x4b0 [ 536.640918][T15118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.640944][T15118] RIP: 0033:0x7f53bab8eec9 [ 536.640966][T15118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.640991][T15118] RSP: 002b:00007f53bba13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 536.641017][T15118] RAX: ffffffffffffffda RBX: 00007f53bade5fa0 RCX: 00007f53bab8eec9 [ 536.641036][T15118] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 536.641052][T15118] RBP: 00007f53bac11f91 R08: 0000000000000000 R09: 0000000000000000 [ 536.641069][T15118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 536.641085][T15118] R13: 00007f53bade6038 R14: 00007f53bade5fa0 R15: 00007fff901cfd38 [ 536.641122][T15118] [ 536.842285][ C1] vkms_vblank_simulate: vblank timer overrun [ 537.477696][T15147] nvme_fcloop: unknown parameter or missing value '7' [ 538.502674][T15159] FAULT_INJECTION: forcing a failure. [ 538.502674][T15159] name failslab, interval 1, probability 0, space 0, times 0 [ 538.524160][T15159] CPU: 0 UID: 0 PID: 15159 Comm: syz.3.2165 Not tainted syzkaller #0 PREEMPT(full) [ 538.524197][T15159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 538.524214][T15159] Call Trace: [ 538.524224][T15159] [ 538.524235][T15159] dump_stack_lvl+0x16c/0x1f0 [ 538.524275][T15159] should_fail_ex+0x512/0x640 [ 538.524313][T15159] ? __kmalloc_node_noprof+0xcd/0x8a0 [ 538.524352][T15159] should_failslab+0xc2/0x120 [ 538.524388][T15159] __kmalloc_node_noprof+0xe0/0x8a0 [ 538.524419][T15159] ? lockdep_init_map_type+0x5c/0x280 [ 538.524460][T15159] ? blk_mq_alloc_tag_set+0x577/0x12e0 [ 538.524504][T15159] ? blk_mq_alloc_tag_set+0x577/0x12e0 [ 538.524534][T15159] blk_mq_alloc_tag_set+0x577/0x12e0 [ 538.524564][T15159] ? idr_alloc_u32+0x263/0x2f0 [ 538.524604][T15159] loop_add+0x3b2/0xb70 [ 538.524642][T15159] ? __pfx_loop_add+0x10/0x10 [ 538.524701][T15159] ? find_held_lock+0x2b/0x80 [ 538.524737][T15159] loop_control_ioctl+0x13e/0x630 [ 538.524773][T15159] ? __pfx_loop_control_ioctl+0x10/0x10 [ 538.524815][T15159] ? __pfx_loop_control_ioctl+0x10/0x10 [ 538.524852][T15159] __x64_sys_ioctl+0x18b/0x210 [ 538.524895][T15159] do_syscall_64+0xcd/0x4b0 [ 538.524929][T15159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.524957][T15159] RIP: 0033:0x7f53bab8eec9 [ 538.524979][T15159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.525005][T15159] RSP: 002b:00007f53bba13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 538.525030][T15159] RAX: ffffffffffffffda RBX: 00007f53bade5fa0 RCX: 00007f53bab8eec9 [ 538.525049][T15159] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 538.525065][T15159] RBP: 00007f53bac11f91 R08: 0000000000000000 R09: 0000000000000000 [ 538.525081][T15159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 538.525098][T15159] R13: 00007f53bade6038 R14: 00007f53bade5fa0 R15: 00007fff901cfd38 [ 538.525136][T15159] [ 538.758151][T15164] random: crng reseeded on system resumption [ 538.990509][T15165] phram: not enough arguments [ 539.780416][T15176] zswap: compressor not available [ 540.830290][T15209] FAULT_INJECTION: forcing a failure. [ 540.830290][T15209] name failslab, interval 1, probability 0, space 0, times 0 [ 540.862344][T15209] CPU: 1 UID: 0 PID: 15209 Comm: syz.0.2179 Not tainted syzkaller #0 PREEMPT(full) [ 540.862381][T15209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 540.862399][T15209] Call Trace: [ 540.862408][T15209] [ 540.862418][T15209] dump_stack_lvl+0x16c/0x1f0 [ 540.862455][T15209] should_fail_ex+0x512/0x640 [ 540.862492][T15209] ? __kmalloc_node_noprof+0xcd/0x8a0 [ 540.862529][T15209] should_failslab+0xc2/0x120 [ 540.862566][T15209] __kmalloc_node_noprof+0xe0/0x8a0 [ 540.862598][T15209] ? lockdep_init_map_type+0x5c/0x280 [ 540.862637][T15209] ? blk_mq_alloc_tag_set+0x577/0x12e0 [ 540.862673][T15209] ? blk_mq_alloc_tag_set+0x577/0x12e0 [ 540.862701][T15209] blk_mq_alloc_tag_set+0x577/0x12e0 [ 540.862733][T15209] ? idr_alloc_u32+0x263/0x2f0 [ 540.862771][T15209] loop_add+0x3b2/0xb70 [ 540.862808][T15209] ? __pfx_loop_add+0x10/0x10 [ 540.862866][T15209] ? find_held_lock+0x2b/0x80 [ 540.862903][T15209] loop_control_ioctl+0x13e/0x630 [ 540.862939][T15209] ? __pfx_loop_control_ioctl+0x10/0x10 [ 540.862980][T15209] ? __pfx_loop_control_ioctl+0x10/0x10 [ 540.863017][T15209] __x64_sys_ioctl+0x18b/0x210 [ 540.863060][T15209] do_syscall_64+0xcd/0x4b0 [ 540.863104][T15209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.863132][T15209] RIP: 0033:0x7f315498eec9 [ 540.863154][T15209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 540.863178][T15209] RSP: 002b:00007f315589f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 540.863204][T15209] RAX: ffffffffffffffda RBX: 00007f3154be5fa0 RCX: 00007f315498eec9 [ 540.863222][T15209] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 540.863239][T15209] RBP: 00007f3154a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 540.863256][T15209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 540.863271][T15209] R13: 00007f3154be6038 R14: 00007f3154be5fa0 R15: 00007fff37178938 [ 540.863305][T15209] [ 541.060496][ C1] vkms_vblank_simulate: vblank timer overrun [ 541.156326][T15212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2180'. [ 541.312244][ T5859] block nbd45: Receive control failed (result -107) [ 541.695945][T15223] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 542.500251][T15200] zswap: compressor not available [ 543.387770][T15244] zswap: compressor not available [ 543.778690][T15256] FAULT_INJECTION: forcing a failure. [ 543.778690][T15256] name failslab, interval 1, probability 0, space 0, times 0 [ 543.791433][T15256] CPU: 0 UID: 0 PID: 15256 Comm: syz.2.2189 Not tainted syzkaller #0 PREEMPT(full) [ 543.791468][T15256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 543.791484][T15256] Call Trace: [ 543.791494][T15256] [ 543.791504][T15256] dump_stack_lvl+0x16c/0x1f0 [ 543.791543][T15256] should_fail_ex+0x512/0x640 [ 543.791581][T15256] ? __kmalloc_node_noprof+0xcd/0x8a0 [ 543.791618][T15256] should_failslab+0xc2/0x120 [ 543.791654][T15256] __kmalloc_node_noprof+0xe0/0x8a0 [ 543.791685][T15256] ? lockdep_init_map_type+0x5c/0x280 [ 543.791725][T15256] ? blk_mq_alloc_tag_set+0x577/0x12e0 [ 543.791764][T15256] ? blk_mq_alloc_tag_set+0x577/0x12e0 [ 543.791793][T15256] blk_mq_alloc_tag_set+0x577/0x12e0 [ 543.791823][T15256] ? idr_alloc_u32+0x263/0x2f0 [ 543.791862][T15256] loop_add+0x3b2/0xb70 [ 543.791898][T15256] ? __pfx_loop_add+0x10/0x10 [ 543.791957][T15256] ? find_held_lock+0x2b/0x80 [ 543.791993][T15256] loop_control_ioctl+0x13e/0x630 [ 543.792030][T15256] ? __pfx_loop_control_ioctl+0x10/0x10 [ 543.792071][T15256] ? __pfx_loop_control_ioctl+0x10/0x10 [ 543.792109][T15256] __x64_sys_ioctl+0x18b/0x210 [ 543.792158][T15256] do_syscall_64+0xcd/0x4b0 [ 543.792194][T15256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.792222][T15256] RIP: 0033:0x7fa51638eec9 [ 543.792242][T15256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 543.792268][T15256] RSP: 002b:00007fa5172f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 543.792294][T15256] RAX: ffffffffffffffda RBX: 00007fa5165e5fa0 RCX: 00007fa51638eec9 [ 543.792312][T15256] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 543.792330][T15256] RBP: 00007fa516411f91 R08: 0000000000000000 R09: 0000000000000000 [ 543.792348][T15256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 543.792365][T15256] R13: 00007fa5165e6038 R14: 00007fa5165e5fa0 R15: 00007fff40de1a88 [ 543.792400][T15256] [ 544.754263][T15279] netlink: 50 bytes leftover after parsing attributes in process `syz.0.2195'. [ 544.910343][T15274] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2191'. [ 546.185995][T15301] netlink: 186 bytes leftover after parsing attributes in process `syz.2.2199'. [ 546.800493][T15301] zswap: compressor not available [ 547.472938][T15323] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2205'. [ 547.822467][T15325] netlink: 268 bytes leftover after parsing attributes in process `syz.1.2206'. [ 547.995305][T15333] FAULT_INJECTION: forcing a failure. [ 547.995305][T15333] name failslab, interval 1, probability 0, space 0, times 0 [ 548.039928][T15333] CPU: 1 UID: 0 PID: 15333 Comm: syz.0.2208 Not tainted syzkaller #0 PREEMPT(full) [ 548.039951][T15333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 548.039960][T15333] Call Trace: [ 548.039966][T15333] [ 548.039972][T15333] dump_stack_lvl+0x16c/0x1f0 [ 548.039995][T15333] should_fail_ex+0x512/0x640 [ 548.040016][T15333] ? __kmalloc_noprof+0xca/0x880 [ 548.040033][T15333] should_failslab+0xc2/0x120 [ 548.040053][T15333] __kmalloc_noprof+0xdd/0x880 [ 548.040068][T15333] ? cgroup_mkdir+0x2b0/0x12e0 [ 548.040086][T15333] ? cgroup_mkdir+0x2b0/0x12e0 [ 548.040100][T15333] cgroup_mkdir+0x2b0/0x12e0 [ 548.040117][T15333] ? __pfx_cgroup_mkdir+0x10/0x10 [ 548.040133][T15333] kernfs_iop_mkdir+0x10e/0x190 [ 548.040154][T15333] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 548.040171][T15333] vfs_mkdir+0x590/0x8c0 [ 548.040187][T15333] do_mkdirat+0x304/0x3e0 [ 548.040205][T15333] ? __pfx_do_mkdirat+0x10/0x10 [ 548.040224][T15333] ? getname_flags.part.0+0x1c5/0x550 [ 548.040248][T15333] __x64_sys_mkdir+0xef/0x140 [ 548.040265][T15333] do_syscall_64+0xcd/0x4b0 [ 548.040284][T15333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.040298][T15333] RIP: 0033:0x7f315498eec9 [ 548.040311][T15333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.040325][T15333] RSP: 002b:00007f315589f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 548.040339][T15333] RAX: ffffffffffffffda RBX: 00007f3154be5fa0 RCX: 00007f315498eec9 [ 548.040349][T15333] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000200000000080 [ 548.040358][T15333] RBP: 00007f3154a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 548.040366][T15333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 548.040375][T15333] R13: 00007f3154be6038 R14: 00007f3154be5fa0 R15: 00007fff37178938 [ 548.040394][T15333] [ 548.764659][T15336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2209'. [ 548.856257][ T5859] block nbd46: Receive control failed (result -107) [ 549.133666][T15344] FAULT_INJECTION: forcing a failure. [ 549.133666][T15344] name failslab, interval 1, probability 0, space 0, times 0 [ 549.179853][T15344] CPU: 0 UID: 0 PID: 15344 Comm: syz.2.2212 Not tainted syzkaller #0 PREEMPT(full) [ 549.179892][T15344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 549.179909][T15344] Call Trace: [ 549.179918][T15344] [ 549.179929][T15344] dump_stack_lvl+0x16c/0x1f0 [ 549.179967][T15344] should_fail_ex+0x512/0x640 [ 549.180001][T15344] ? __kmalloc_node_noprof+0xcd/0x8a0 [ 549.180038][T15344] should_failslab+0xc2/0x120 [ 549.180078][T15344] __kmalloc_node_noprof+0xe0/0x8a0 [ 549.180109][T15344] ? lockdep_init_map_type+0x5c/0x280 [ 549.180148][T15344] ? blk_mq_alloc_tag_set+0x46f/0x12e0 [ 549.180185][T15344] ? blk_mq_alloc_tag_set+0x46f/0x12e0 [ 549.180213][T15344] blk_mq_alloc_tag_set+0x46f/0x12e0 [ 549.180243][T15344] ? __pfx_idr_alloc+0x10/0x10 [ 549.180281][T15344] loop_add+0x3b2/0xb70 [ 549.180319][T15344] ? __pfx_loop_add+0x10/0x10 [ 549.180377][T15344] ? find_held_lock+0x2b/0x80 [ 549.180412][T15344] loop_control_ioctl+0x13e/0x630 [ 549.180448][T15344] ? __pfx_loop_control_ioctl+0x10/0x10 [ 549.180489][T15344] ? __pfx_loop_control_ioctl+0x10/0x10 [ 549.180524][T15344] __x64_sys_ioctl+0x18b/0x210 [ 549.180565][T15344] do_syscall_64+0xcd/0x4b0 [ 549.180599][T15344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.180625][T15344] RIP: 0033:0x7fa51638eec9 [ 549.180646][T15344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 549.180671][T15344] RSP: 002b:00007fa5172f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 549.180702][T15344] RAX: ffffffffffffffda RBX: 00007fa5165e5fa0 RCX: 00007fa51638eec9 [ 549.180721][T15344] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000006 [ 549.180738][T15344] RBP: 00007fa516411f91 R08: 0000000000000000 R09: 0000000000000000 [ 549.180756][T15344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 549.180773][T15344] R13: 00007fa5165e6038 R14: 00007fa5165e5fa0 R15: 00007fff40de1a88 [ 549.180810][T15344] [ 549.657603][T15346] FAULT_INJECTION: forcing a failure. [ 549.657603][T15346] name failslab, interval 1, probability 0, space 0, times 0 [ 549.713825][T15346] CPU: 0 UID: 0 PID: 15346 Comm: syz.0.2213 Not tainted syzkaller #0 PREEMPT(full) [ 549.713862][T15346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 549.713879][T15346] Call Trace: [ 549.713888][T15346] [ 549.713899][T15346] dump_stack_lvl+0x16c/0x1f0 [ 549.713937][T15346] should_fail_ex+0x512/0x640 [ 549.713973][T15346] ? __kmalloc_node_noprof+0xcd/0x8a0 [ 549.714008][T15346] should_failslab+0xc2/0x120 [ 549.714042][T15346] __kmalloc_node_noprof+0xe0/0x8a0 [ 549.714072][T15346] ? lockdep_init_map_type+0x5c/0x280 [ 549.714108][T15346] ? blk_mq_alloc_tag_set+0x46f/0x12e0 [ 549.714143][T15346] ? blk_mq_alloc_tag_set+0x46f/0x12e0 [ 549.714170][T15346] blk_mq_alloc_tag_set+0x46f/0x12e0 [ 549.714200][T15346] ? __pfx_idr_alloc+0x10/0x10 [ 549.714237][T15346] loop_add+0x3b2/0xb70 [ 549.714273][T15346] ? __pfx_loop_add+0x10/0x10 [ 549.714326][T15346] ? find_held_lock+0x2b/0x80 [ 549.714362][T15346] loop_control_ioctl+0x13e/0x630 [ 549.714399][T15346] ? __pfx_loop_control_ioctl+0x10/0x10 [ 549.714440][T15346] ? __pfx_loop_control_ioctl+0x10/0x10 [ 549.714477][T15346] __x64_sys_ioctl+0x18b/0x210 [ 549.714518][T15346] do_syscall_64+0xcd/0x4b0 [ 549.714551][T15346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.714583][T15346] RIP: 0033:0x7f315498eec9 [ 549.714605][T15346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 549.714631][T15346] RSP: 002b:00007f315589f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 549.714657][T15346] RAX: ffffffffffffffda RBX: 00007f3154be5fa0 RCX: 00007f315498eec9 [ 549.714675][T15346] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 549.714692][T15346] RBP: 00007f3154a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 549.714708][T15346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 549.714723][T15346] R13: 00007f3154be6038 R14: 00007f3154be5fa0 R15: 00007fff37178938 [ 549.714760][T15346] [ 550.211465][T15371] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2214'. [ 550.467293][T15353] zswap: compressor not available [ 550.939306][T15380] netlink: 50 bytes leftover after parsing attributes in process `syz.0.2219'. [ 551.577317][T15385] netlink: 268 bytes leftover after parsing attributes in process `syz.1.2221'. [ 551.648372][T15393] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2223'. [ 551.686970][T15398] FAULT_INJECTION: forcing a failure. [ 551.686970][T15398] name failslab, interval 1, probability 0, space 0, times 0 [ 551.727955][T15398] CPU: 1 UID: 0 PID: 15398 Comm: syz.0.2225 Not tainted syzkaller #0 PREEMPT(full) [ 551.727992][T15398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 551.728009][T15398] Call Trace: [ 551.728018][T15398] [ 551.728029][T15398] dump_stack_lvl+0x16c/0x1f0 [ 551.728071][T15398] should_fail_ex+0x512/0x640 [ 551.728108][T15398] ? __kmalloc_node_noprof+0xcd/0x8a0 [ 551.728142][T15398] should_failslab+0xc2/0x120 [ 551.728180][T15398] __kmalloc_node_noprof+0xe0/0x8a0 [ 551.728210][T15398] ? lockdep_init_map_type+0x5c/0x280 [ 551.728248][T15398] ? blk_mq_alloc_tag_set+0x577/0x12e0 [ 551.728283][T15398] ? blk_mq_alloc_tag_set+0x577/0x12e0 [ 551.728310][T15398] blk_mq_alloc_tag_set+0x577/0x12e0 [ 551.728340][T15398] ? idr_alloc_u32+0x263/0x2f0 [ 551.728379][T15398] loop_add+0x3b2/0xb70 [ 551.728415][T15398] ? __pfx_loop_add+0x10/0x10 [ 551.728483][T15398] ? find_held_lock+0x2b/0x80 [ 551.728520][T15398] loop_control_ioctl+0x13e/0x630 [ 551.728558][T15398] ? __pfx_loop_control_ioctl+0x10/0x10 [ 551.728600][T15398] ? __pfx_loop_control_ioctl+0x10/0x10 [ 551.728640][T15398] __x64_sys_ioctl+0x18b/0x210 [ 551.728683][T15398] do_syscall_64+0xcd/0x4b0 [ 551.728719][T15398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.728745][T15398] RIP: 0033:0x7f315498eec9 [ 551.728767][T15398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 551.728793][T15398] RSP: 002b:00007f315589f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 551.728818][T15398] RAX: ffffffffffffffda RBX: 00007f3154be5fa0 RCX: 00007f315498eec9 [ 551.728836][T15398] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000006 [ 551.728853][T15398] RBP: 00007f3154a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 551.728870][T15398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 551.728885][T15398] R13: 00007f3154be6038 R14: 00007f3154be5fa0 R15: 00007fff37178938 [ 551.728922][T15398] [ 553.825136][T15429] netlink: 50 bytes leftover after parsing attributes in process `syz.0.2233'. [ 555.102363][T15450] netlink: 268 bytes leftover after parsing attributes in process `syz.0.2238'. [ 555.569014][T15455] zswap: compressor not available [ 556.128437][T15475] FAULT_INJECTION: forcing a failure. [ 556.128437][T15475] name failslab, interval 1, probability 0, space 0, times 0 [ 556.142981][T15475] CPU: 0 UID: 0 PID: 15475 Comm: syz.3.2242 Not tainted syzkaller #0 PREEMPT(full) [ 556.143001][T15475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 556.143011][T15475] Call Trace: [ 556.143017][T15475] [ 556.143023][T15475] dump_stack_lvl+0x16c/0x1f0 [ 556.143046][T15475] should_fail_ex+0x512/0x640 [ 556.143066][T15475] ? __kmalloc_node_noprof+0xcd/0x8a0 [ 556.143087][T15475] should_failslab+0xc2/0x120 [ 556.143106][T15475] __kmalloc_node_noprof+0xe0/0x8a0 [ 556.143122][T15475] ? lockdep_init_map_type+0x5c/0x280 [ 556.143144][T15475] ? blk_mq_alloc_tag_set+0x577/0x12e0 [ 556.143165][T15475] ? blk_mq_alloc_tag_set+0x577/0x12e0 [ 556.143179][T15475] blk_mq_alloc_tag_set+0x577/0x12e0 [ 556.143196][T15475] ? idr_alloc_u32+0x263/0x2f0 [ 556.143217][T15475] loop_add+0x3b2/0xb70 [ 556.143237][T15475] ? __pfx_loop_add+0x10/0x10 [ 556.143267][T15475] ? find_held_lock+0x2b/0x80 [ 556.143287][T15475] loop_control_ioctl+0x13e/0x630 [ 556.143306][T15475] ? __pfx_loop_control_ioctl+0x10/0x10 [ 556.143328][T15475] ? __pfx_loop_control_ioctl+0x10/0x10 [ 556.143348][T15475] __x64_sys_ioctl+0x18b/0x210 [ 556.143370][T15475] do_syscall_64+0xcd/0x4b0 [ 556.143389][T15475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.143404][T15475] RIP: 0033:0x7f53bab8eec9 [ 556.143416][T15475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.143429][T15475] RSP: 002b:00007f53bba13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 556.143444][T15475] RAX: ffffffffffffffda RBX: 00007f53bade5fa0 RCX: 00007f53bab8eec9 [ 556.143454][T15475] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000006 [ 556.143463][T15475] RBP: 00007f53bac11f91 R08: 0000000000000000 R09: 0000000000000000 [ 556.143472][T15475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 556.143480][T15475] R13: 00007f53bade6038 R14: 00007f53bade5fa0 R15: 00007fff901cfd38 [ 556.143499][T15475] [ 556.341125][ C0] vkms_vblank_simulate: vblank timer overrun [ 557.888747][T15503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2248'. [ 557.990296][ T5859] block nbd47: Receive control failed (result -107) [ 558.271083][T15507] netlink: 50 bytes leftover after parsing attributes in process `syz.0.2249'. [ 558.551586][T15515] FAULT_INJECTION: forcing a failure. [ 558.551586][T15515] name failslab, interval 1, probability 0, space 0, times 0 [ 558.580633][T15515] CPU: 1 UID: 0 PID: 15515 Comm: syz.3.2252 Not tainted syzkaller #0 PREEMPT(full) [ 558.580668][T15515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 558.580694][T15515] Call Trace: [ 558.580703][T15515] [ 558.580713][T15515] dump_stack_lvl+0x16c/0x1f0 [ 558.580752][T15515] should_fail_ex+0x512/0x640 [ 558.580787][T15515] ? __kmalloc_node_noprof+0xcd/0x8a0 [ 558.580822][T15515] should_failslab+0xc2/0x120 [ 558.580857][T15515] __kmalloc_node_noprof+0xe0/0x8a0 [ 558.580886][T15515] ? lockdep_init_map_type+0x5c/0x280 [ 558.580923][T15515] ? blk_mq_alloc_tag_set+0x577/0x12e0 [ 558.580961][T15515] ? blk_mq_alloc_tag_set+0x577/0x12e0 [ 558.580987][T15515] blk_mq_alloc_tag_set+0x577/0x12e0 [ 558.581017][T15515] ? idr_alloc_u32+0x263/0x2f0 [ 558.581057][T15515] loop_add+0x3b2/0xb70 [ 558.581092][T15515] ? __pfx_loop_add+0x10/0x10 [ 558.581150][T15515] ? find_held_lock+0x2b/0x80 [ 558.581185][T15515] loop_control_ioctl+0x13e/0x630 [ 558.581220][T15515] ? __pfx_loop_control_ioctl+0x10/0x10 [ 558.581259][T15515] ? __pfx_loop_control_ioctl+0x10/0x10 [ 558.581295][T15515] __x64_sys_ioctl+0x18b/0x210 [ 558.581335][T15515] do_syscall_64+0xcd/0x4b0 [ 558.581368][T15515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.581394][T15515] RIP: 0033:0x7f53bab8eec9 [ 558.581415][T15515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 558.581447][T15515] RSP: 002b:00007f53bba13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 558.581472][T15515] RAX: ffffffffffffffda RBX: 00007f53bade5fa0 RCX: 00007f53bab8eec9 [ 558.581490][T15515] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000006 [ 558.581508][T15515] RBP: 00007f53bac11f91 R08: 0000000000000000 R09: 0000000000000000 [ 558.581524][T15515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.581540][T15515] R13: 00007f53bade6038 R14: 00007f53bade5fa0 R15: 00007fff901cfd38 [ 558.581576][T15515] [ 561.365854][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 561.372384][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.941611][T15582] netlink: 206 bytes leftover after parsing attributes in process `syz.1.2263'. [ 563.041418][T15582] netlink: 206 bytes leftover after parsing attributes in process `syz.1.2263'. [ 563.111978][T15585] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 563.315032][T15591] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2270'. [ 563.347462][T15591] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2270'. [ 563.449791][T15591] Invalid ELF header magic: != ELF [ 564.165916][T15603] FAULT_INJECTION: forcing a failure. [ 564.165916][T15603] name failslab, interval 1, probability 0, space 0, times 0 [ 564.189571][T15603] CPU: 0 UID: 0 PID: 15603 Comm: syz.3.2269 Not tainted syzkaller #0 PREEMPT(full) [ 564.189608][T15603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 564.189625][T15603] Call Trace: [ 564.189635][T15603] [ 564.189645][T15603] dump_stack_lvl+0x16c/0x1f0 [ 564.189684][T15603] should_fail_ex+0x512/0x640 [ 564.189720][T15603] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 564.189754][T15603] should_failslab+0xc2/0x120 [ 564.189791][T15603] kmem_cache_alloc_noprof+0x75/0x6e0 [ 564.189820][T15603] ? security_file_alloc+0x34/0x2b0 [ 564.189854][T15603] ? security_file_alloc+0x34/0x2b0 [ 564.189879][T15603] security_file_alloc+0x34/0x2b0 [ 564.189907][T15603] init_file+0x93/0x4c0 [ 564.189943][T15603] alloc_empty_file+0x73/0x1e0 [ 564.189980][T15603] path_openat+0xda/0x2cb0 [ 564.190023][T15603] ? __pfx_path_openat+0x10/0x10 [ 564.190063][T15603] do_filp_open+0x20b/0x470 [ 564.190094][T15603] ? __pfx_do_filp_open+0x10/0x10 [ 564.190158][T15603] ? alloc_fd+0x471/0x7d0 [ 564.190198][T15603] do_sys_openat2+0x11b/0x1d0 [ 564.190238][T15603] ? __pfx_do_sys_openat2+0x10/0x10 [ 564.190274][T15603] ? fput+0x9b/0xd0 [ 564.190320][T15603] __x64_sys_openat+0x174/0x210 [ 564.190359][T15603] ? __pfx___x64_sys_openat+0x10/0x10 [ 564.190410][T15603] do_syscall_64+0xcd/0x4b0 [ 564.190443][T15603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.190468][T15603] RIP: 0033:0x7f53bab8eec9 [ 564.190487][T15603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.190513][T15603] RSP: 002b:00007f53bb9f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 564.190538][T15603] RAX: ffffffffffffffda RBX: 00007f53bade6090 RCX: 00007f53bab8eec9 [ 564.190556][T15603] RDX: 0000000000000100 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 564.190571][T15603] RBP: 00007f53bac11f91 R08: 0000000000000000 R09: 0000000000000000 [ 564.190585][T15603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 564.190601][T15603] R13: 00007f53bade6128 R14: 00007f53bade6090 R15: 00007fff901cfd38 [ 564.190637][T15603] [ 565.972971][T15646] netlink: 50 bytes leftover after parsing attributes in process `syz.3.2278'. [ 567.048641][T15659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2281'. [ 567.142191][ T5859] block nbd48: Receive control failed (result -107) [ 567.987213][T15665] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2282'. [ 569.037160][T15687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2287'. [ 569.107108][ T5859] block nbd49: Receive control failed (result -107) [ 569.299321][T15671] zswap: compressor not available [ 569.476350][T15700] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 569.671622][T15701] netlink: 268 bytes leftover after parsing attributes in process `syz.1.2288'. [ 569.788898][T15704] FAULT_INJECTION: forcing a failure. [ 569.788898][T15704] name failslab, interval 1, probability 0, space 0, times 0 [ 569.824561][T15704] CPU: 0 UID: 0 PID: 15704 Comm: syz.0.2291 Not tainted syzkaller #0 PREEMPT(full) [ 569.824583][T15704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 569.824593][T15704] Call Trace: [ 569.824599][T15704] [ 569.824605][T15704] dump_stack_lvl+0x16c/0x1f0 [ 569.824628][T15704] should_fail_ex+0x512/0x640 [ 569.824649][T15704] ? __kmalloc_node_noprof+0xcd/0x8a0 [ 569.824677][T15704] should_failslab+0xc2/0x120 [ 569.824698][T15704] __kmalloc_node_noprof+0xe0/0x8a0 [ 569.824715][T15704] ? lockdep_init_map_type+0x5c/0x280 [ 569.824738][T15704] ? blk_mq_alloc_tag_set+0x46f/0x12e0 [ 569.824758][T15704] ? blk_mq_alloc_tag_set+0x46f/0x12e0 [ 569.824773][T15704] blk_mq_alloc_tag_set+0x46f/0x12e0 [ 569.824789][T15704] ? __pfx_idr_alloc+0x10/0x10 [ 569.824810][T15704] loop_add+0x3b2/0xb70 [ 569.824830][T15704] ? __pfx_loop_add+0x10/0x10 [ 569.824860][T15704] ? find_held_lock+0x2b/0x80 [ 569.824879][T15704] loop_control_ioctl+0x13e/0x630 [ 569.824899][T15704] ? __pfx_loop_control_ioctl+0x10/0x10 [ 569.824923][T15704] ? __pfx_loop_control_ioctl+0x10/0x10 [ 569.824943][T15704] __x64_sys_ioctl+0x18b/0x210 [ 569.824966][T15704] do_syscall_64+0xcd/0x4b0 [ 569.824985][T15704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.825000][T15704] RIP: 0033:0x7f315498eec9 [ 569.825011][T15704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.825025][T15704] RSP: 002b:00007f315589f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 569.825039][T15704] RAX: ffffffffffffffda RBX: 00007f3154be5fa0 RCX: 00007f315498eec9 [ 569.825050][T15704] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 569.825059][T15704] RBP: 00007f3154a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 569.825068][T15704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 569.825076][T15704] R13: 00007f3154be6038 R14: 00007f3154be5fa0 R15: 00007fff37178938 [ 569.825094][T15704] [ 572.360800][T15750] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2301'. [ 572.420869][T15750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 572.428376][T15750] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 572.498067][T15750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 572.510282][T15750] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 572.533041][T15746] Invalid ELF header magic: != ELF [ 573.443878][T15761] FAULT_INJECTION: forcing a failure. [ 573.443878][T15761] name failslab, interval 1, probability 0, space 0, times 0 [ 573.456843][T15761] CPU: 1 UID: 0 PID: 15761 Comm: syz.2.2304 Not tainted syzkaller #0 PREEMPT(full) [ 573.456864][T15761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 573.456873][T15761] Call Trace: [ 573.456879][T15761] [ 573.456885][T15761] dump_stack_lvl+0x16c/0x1f0 [ 573.456907][T15761] should_fail_ex+0x512/0x640 [ 573.456927][T15761] ? __kmalloc_node_noprof+0xcd/0x8a0 [ 573.456948][T15761] should_failslab+0xc2/0x120 [ 573.456968][T15761] __kmalloc_node_noprof+0xe0/0x8a0 [ 573.456985][T15761] ? lockdep_init_map_type+0x5c/0x280 [ 573.457006][T15761] ? blk_mq_alloc_tag_set+0x577/0x12e0 [ 573.457027][T15761] ? blk_mq_alloc_tag_set+0x577/0x12e0 [ 573.457042][T15761] blk_mq_alloc_tag_set+0x577/0x12e0 [ 573.457058][T15761] ? idr_alloc_u32+0x263/0x2f0 [ 573.457079][T15761] loop_add+0x3b2/0xb70 [ 573.457099][T15761] ? __pfx_loop_add+0x10/0x10 [ 573.457130][T15761] ? find_held_lock+0x2b/0x80 [ 573.457149][T15761] loop_control_ioctl+0x13e/0x630 [ 573.457168][T15761] ? __pfx_loop_control_ioctl+0x10/0x10 [ 573.457190][T15761] ? __pfx_loop_control_ioctl+0x10/0x10 [ 573.457210][T15761] __x64_sys_ioctl+0x18b/0x210 [ 573.457233][T15761] do_syscall_64+0xcd/0x4b0 [ 573.457252][T15761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.457267][T15761] RIP: 0033:0x7fa51638eec9 [ 573.457279][T15761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 573.457293][T15761] RSP: 002b:00007fa5172f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 573.457307][T15761] RAX: ffffffffffffffda RBX: 00007fa5165e5fa0 RCX: 00007fa51638eec9 [ 573.457317][T15761] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000006 [ 573.457326][T15761] RBP: 00007fa516411f91 R08: 0000000000000000 R09: 0000000000000000 [ 573.457335][T15761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 573.457343][T15761] R13: 00007fa5165e6038 R14: 00007fa5165e5fa0 R15: 00007fff40de1a88 [ 573.457361][T15761] [ 573.756211][T15763] netlink: 268 bytes leftover after parsing attributes in process `syz.1.2303'. [ 574.241233][ T5859] Bluetooth: hci1: unexpected event 0x36 length: 123 > 7 [ 574.755581][ T10] smpboot: CPU 1 is now offline [ 574.852766][T15782] random: crng reseeded on system resumption [ 577.777272][T15826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2318'. [ 577.874635][ T5859] block nbd50: Receive control failed (result -107) [ 577.946472][T15823] netlink: 268 bytes leftover after parsing attributes in process `syz.0.2317'. [ 578.681667][T15841] FAULT_INJECTION: forcing a failure. [ 578.681667][T15841] name failslab, interval 1, probability 0, space 0, times 0 [ 578.791550][T15841] CPU: 0 UID: 0 PID: 15841 Comm: syz.3.2320 Not tainted syzkaller #0 PREEMPT(full) [ 578.791572][T15841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 578.791581][T15841] Call Trace: [ 578.791587][T15841] [ 578.791594][T15841] dump_stack_lvl+0x16c/0x1f0 [ 578.791615][T15841] should_fail_ex+0x512/0x640 [ 578.791636][T15841] ? __kmalloc_node_noprof+0xcd/0x8a0 [ 578.791657][T15841] should_failslab+0xc2/0x120 [ 578.791678][T15841] __kmalloc_node_noprof+0xe0/0x8a0 [ 578.791694][T15841] ? lockdep_init_map_type+0x5c/0x280 [ 578.791717][T15841] ? blk_mq_alloc_tag_set+0x46f/0x12e0 [ 578.791737][T15841] ? blk_mq_alloc_tag_set+0x46f/0x12e0 [ 578.791752][T15841] blk_mq_alloc_tag_set+0x46f/0x12e0 [ 578.791768][T15841] ? __pfx_idr_alloc+0x10/0x10 [ 578.791789][T15841] loop_add+0x3b2/0xb70 [ 578.791809][T15841] ? __pfx_loop_add+0x10/0x10 [ 578.791840][T15841] ? find_held_lock+0x2b/0x80 [ 578.791859][T15841] loop_control_ioctl+0x13e/0x630 [ 578.791878][T15841] ? __pfx_loop_control_ioctl+0x10/0x10 [ 578.791900][T15841] ? __pfx_loop_control_ioctl+0x10/0x10 [ 578.791920][T15841] __x64_sys_ioctl+0x18b/0x210 [ 578.791943][T15841] do_syscall_64+0xcd/0x4b0 [ 578.791971][T15841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.791987][T15841] RIP: 0033:0x7f53bab8eec9 [ 578.791999][T15841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 578.792013][T15841] RSP: 002b:00007f53bba13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 578.792028][T15841] RAX: ffffffffffffffda RBX: 00007f53bade5fa0 RCX: 00007f53bab8eec9 [ 578.792038][T15841] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 578.792048][T15841] RBP: 00007f53bac11f91 R08: 0000000000000000 R09: 0000000000000000 [ 578.792056][T15841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 578.792065][T15841] R13: 00007f53bade6038 R14: 00007f53bade5fa0 R15: 00007fff901cfd38 [ 578.792084][T15841] [ 578.992977][ C0] vkms_vblank_simulate: vblank timer overrun [ 580.985473][T15881] FAULT_INJECTION: forcing a failure. [ 580.985473][T15881] name failslab, interval 1, probability 0, space 0, times 0 [ 581.041134][T15881] CPU: 0 UID: 0 PID: 15881 Comm: syz.2.2332 Not tainted syzkaller #0 PREEMPT(full) [ 581.041156][T15881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 581.041166][T15881] Call Trace: [ 581.041172][T15881] [ 581.041178][T15881] dump_stack_lvl+0x16c/0x1f0 [ 581.041201][T15881] should_fail_ex+0x512/0x640 [ 581.041221][T15881] ? __kmalloc_node_noprof+0xcd/0x8a0 [ 581.041242][T15881] should_failslab+0xc2/0x120 [ 581.041263][T15881] __kmalloc_node_noprof+0xe0/0x8a0 [ 581.041280][T15881] ? lockdep_init_map_type+0x5c/0x280 [ 581.041302][T15881] ? blk_mq_alloc_tag_set+0x46f/0x12e0 [ 581.041323][T15881] ? blk_mq_alloc_tag_set+0x46f/0x12e0 [ 581.041338][T15881] blk_mq_alloc_tag_set+0x46f/0x12e0 [ 581.041354][T15881] ? __pfx_idr_alloc+0x10/0x10 [ 581.041375][T15881] loop_add+0x3b2/0xb70 [ 581.041395][T15881] ? __pfx_loop_add+0x10/0x10 [ 581.041425][T15881] ? find_held_lock+0x2b/0x80 [ 581.041444][T15881] loop_control_ioctl+0x13e/0x630 [ 581.041464][T15881] ? __pfx_loop_control_ioctl+0x10/0x10 [ 581.041485][T15881] ? __pfx_loop_control_ioctl+0x10/0x10 [ 581.041505][T15881] __x64_sys_ioctl+0x18b/0x210 [ 581.041529][T15881] do_syscall_64+0xcd/0x4b0 [ 581.041548][T15881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.041562][T15881] RIP: 0033:0x7fa51638eec9 [ 581.041574][T15881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 581.041588][T15881] RSP: 002b:00007fa5172f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 581.041602][T15881] RAX: ffffffffffffffda RBX: 00007fa5165e5fa0 RCX: 00007fa51638eec9 [ 581.041612][T15881] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 581.041620][T15881] RBP: 00007fa516411f91 R08: 0000000000000000 R09: 0000000000000000 [ 581.041629][T15881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 581.041638][T15881] R13: 00007fa5165e6038 R14: 00007fa5165e5fa0 R15: 00007fff40de1a88 [ 581.041656][T15881] [ 581.241410][ C0] vkms_vblank_simulate: vblank timer overrun [ 581.876057][T15891] FAULT_INJECTION: forcing a failure. [ 581.876057][T15891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 581.916090][T15891] CPU: 0 UID: 0 PID: 15891 Comm: syz.2.2335 Not tainted syzkaller #0 PREEMPT(full) [ 581.916112][T15891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 581.916121][T15891] Call Trace: [ 581.916126][T15891] [ 581.916132][T15891] dump_stack_lvl+0x16c/0x1f0 [ 581.916155][T15891] should_fail_ex+0x512/0x640 [ 581.916178][T15891] copy_fpstate_to_sigframe+0x854/0xaf0 [ 581.916204][T15891] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 581.916231][T15891] ? collect_signal+0x263/0x540 [ 581.916244][T15891] ? x86_task_fpu+0x5f/0x90 [ 581.916263][T15891] get_sigframe+0x4a8/0x9c0 [ 581.916284][T15891] ? __pfx_get_sigframe+0x10/0x10 [ 581.916304][T15891] ? _raw_spin_unlock_irq+0x23/0x50 [ 581.916319][T15891] ? siginfo_layout+0x177/0x290 [ 581.916338][T15891] x64_setup_rt_frame+0x12e/0xcf0 [ 581.916362][T15891] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 581.916380][T15891] ? kill_pid_info_type+0xea/0x2a0 [ 581.916398][T15891] ? find_held_lock+0x2b/0x80 [ 581.916419][T15891] arch_do_signal_or_restart+0x5b4/0x790 [ 581.916439][T15891] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 581.916469][T15891] exit_to_user_mode_loop+0x85/0x130 [ 581.916485][T15891] do_syscall_64+0x419/0x4b0 [ 581.916503][T15891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.916518][T15891] RIP: 0033:0x7fa51638eec9 [ 581.916530][T15891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 581.916544][T15891] RSP: 002b:00007fa5172f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000081 [ 581.916558][T15891] RAX: 0000000000000000 RBX: 00007fa5165e5fa0 RCX: 00007fa51638eec9 [ 581.916567][T15891] RDX: 0000200000000000 RSI: 0000000000000011 RDI: 00000000000007ef [ 581.916576][T15891] RBP: 00007fa516411f91 R08: 0000000000000000 R09: 0000000000000000 [ 581.916585][T15891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 581.916593][T15891] R13: 00007fa5165e6038 R14: 00007fa5165e5fa0 R15: 00007fff40de1a88 [ 581.916611][T15891] [ 582.118961][ C0] vkms_vblank_simulate: vblank timer overrun [ 582.939558][T15915] nbd: socks must be embedded in a SOCK_ITEM attr [ 583.593710][T15922] zswap: compressor not available [ 583.889569][T15934] FAULT_INJECTION: forcing a failure. [ 583.889569][T15934] name failslab, interval 1, probability 0, space 0, times 0 [ 583.938720][T15934] CPU: 0 UID: 0 PID: 15934 Comm: syz.0.2344 Not tainted syzkaller #0 PREEMPT(full) [ 583.938743][T15934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 583.938753][T15934] Call Trace: [ 583.938759][T15934] [ 583.938765][T15934] dump_stack_lvl+0x16c/0x1f0 [ 583.938788][T15934] should_fail_ex+0x512/0x640 [ 583.938809][T15934] ? __kmalloc_node_noprof+0xcd/0x8a0 [ 583.938830][T15934] should_failslab+0xc2/0x120 [ 583.938850][T15934] __kmalloc_node_noprof+0xe0/0x8a0 [ 583.938867][T15934] ? lockdep_init_map_type+0x5c/0x280 [ 583.938889][T15934] ? blk_mq_alloc_tag_set+0x577/0x12e0 [ 583.938909][T15934] ? blk_mq_alloc_tag_set+0x577/0x12e0 [ 583.938924][T15934] blk_mq_alloc_tag_set+0x577/0x12e0 [ 583.938940][T15934] ? idr_alloc_u32+0x263/0x2f0 [ 583.938961][T15934] loop_add+0x3b2/0xb70 [ 583.938982][T15934] ? __pfx_loop_add+0x10/0x10 [ 583.939013][T15934] ? find_held_lock+0x2b/0x80 [ 583.939032][T15934] loop_control_ioctl+0x13e/0x630 [ 583.939052][T15934] ? __pfx_loop_control_ioctl+0x10/0x10 [ 583.939074][T15934] ? __pfx_loop_control_ioctl+0x10/0x10 [ 583.939094][T15934] __x64_sys_ioctl+0x18b/0x210 [ 583.939117][T15934] do_syscall_64+0xcd/0x4b0 [ 583.939136][T15934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.939150][T15934] RIP: 0033:0x7f315498eec9 [ 583.939163][T15934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 583.939177][T15934] RSP: 002b:00007f315589f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 583.939191][T15934] RAX: ffffffffffffffda RBX: 00007f3154be5fa0 RCX: 00007f315498eec9 [ 583.939200][T15934] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 583.939209][T15934] RBP: 00007f3154a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 583.939218][T15934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 583.939227][T15934] R13: 00007f3154be6038 R14: 00007f3154be5fa0 R15: 00007fff37178938 [ 583.939246][T15934] [ 584.557736][T15942] FAULT_INJECTION: forcing a failure. [ 584.557736][T15942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 584.588824][T15940] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2345'. [ 584.638008][T15942] CPU: 0 UID: 0 PID: 15942 Comm: syz.1.2346 Not tainted syzkaller #0 PREEMPT(full) [ 584.638029][T15942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 584.638038][T15942] Call Trace: [ 584.638043][T15942] [ 584.638049][T15942] dump_stack_lvl+0x16c/0x1f0 [ 584.638070][T15942] should_fail_ex+0x512/0x640 [ 584.638094][T15942] _copy_from_iter+0x29f/0x1720 [ 584.638116][T15942] ? __alloc_skb+0x200/0x380 [ 584.638136][T15942] ? __pfx__copy_from_iter+0x10/0x10 [ 584.638156][T15942] ? netlink_autobind.isra.0+0x158/0x370 [ 584.638185][T15942] netlink_sendmsg+0x820/0xdd0 [ 584.638209][T15942] ? __pfx_netlink_sendmsg+0x10/0x10 [ 584.638233][T15942] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 584.638256][T15942] ____sys_sendmsg+0xa95/0xc70 [ 584.638272][T15942] ? copy_msghdr_from_user+0x10a/0x160 [ 584.638293][T15942] ? __pfx_____sys_sendmsg+0x10/0x10 [ 584.638317][T15942] ___sys_sendmsg+0x134/0x1d0 [ 584.638338][T15942] ? __pfx____sys_sendmsg+0x10/0x10 [ 584.638380][T15942] __sys_sendmsg+0x16d/0x220 [ 584.638401][T15942] ? __pfx___sys_sendmsg+0x10/0x10 [ 584.638433][T15942] do_syscall_64+0xcd/0x4b0 [ 584.638451][T15942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.638466][T15942] RIP: 0033:0x7fa98758eec9 [ 584.638477][T15942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 584.638491][T15942] RSP: 002b:00007fa9884db038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 584.638505][T15942] RAX: ffffffffffffffda RBX: 00007fa9877e5fa0 RCX: 00007fa98758eec9 [ 584.638515][T15942] RDX: 0000000000008880 RSI: 0000200000001e00 RDI: 0000000000000003 [ 584.638523][T15942] RBP: 00007fa9884db090 R08: 0000000000000000 R09: 0000000000000000 [ 584.638532][T15942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 584.638547][T15942] R13: 00007fa9877e6038 R14: 00007fa9877e5fa0 R15: 00007ffe27ad3c78 [ 584.638565][T15942] [ 585.343323][T15948] netlink: 268 bytes leftover after parsing attributes in process `syz.2.2347'. [ 586.080417][T15960] queue_state_write: operation too long [ 586.115703][T15960] queue_state_write: use 'run', 'start' or 'kick' [ 586.745919][T15973] FAULT_INJECTION: forcing a failure. [ 586.745919][T15973] name failslab, interval 1, probability 0, space 0, times 0 [ 586.830688][T15973] CPU: 0 UID: 0 PID: 15973 Comm: syz.1.2354 Not tainted syzkaller #0 PREEMPT(full) [ 586.830712][T15973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 586.830721][T15973] Call Trace: [ 586.830727][T15973] [ 586.830734][T15973] dump_stack_lvl+0x16c/0x1f0 [ 586.830757][T15973] should_fail_ex+0x512/0x640 [ 586.830777][T15973] ? __kmalloc_node_noprof+0xcd/0x8a0 [ 586.830799][T15973] should_failslab+0xc2/0x120 [ 586.830820][T15973] __kmalloc_node_noprof+0xe0/0x8a0 [ 586.830837][T15973] ? lockdep_init_map_type+0x5c/0x280 [ 586.830858][T15973] ? blk_mq_alloc_tag_set+0x577/0x12e0 [ 586.830878][T15973] ? blk_mq_alloc_tag_set+0x577/0x12e0 [ 586.830893][T15973] blk_mq_alloc_tag_set+0x577/0x12e0 [ 586.830910][T15973] ? idr_alloc_u32+0x263/0x2f0 [ 586.830931][T15973] loop_add+0x3b2/0xb70 [ 586.830952][T15973] ? __pfx_loop_add+0x10/0x10 [ 586.830983][T15973] ? find_held_lock+0x2b/0x80 [ 586.831002][T15973] loop_control_ioctl+0x13e/0x630 [ 586.831021][T15973] ? __pfx_loop_control_ioctl+0x10/0x10 [ 586.831043][T15973] ? __pfx_loop_control_ioctl+0x10/0x10 [ 586.831063][T15973] __x64_sys_ioctl+0x18b/0x210 [ 586.831086][T15973] do_syscall_64+0xcd/0x4b0 [ 586.831105][T15973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.831119][T15973] RIP: 0033:0x7fa98758eec9 [ 586.831131][T15973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.831145][T15973] RSP: 002b:00007fa9884db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 586.831160][T15973] RAX: ffffffffffffffda RBX: 00007fa9877e5fa0 RCX: 00007fa98758eec9 [ 586.831170][T15973] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 586.831179][T15973] RBP: 00007fa987611f91 R08: 0000000000000000 R09: 0000000000000000 [ 586.831188][T15973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 586.831196][T15973] R13: 00007fa9877e6038 R14: 00007fa9877e5fa0 R15: 00007ffe27ad3c78 [ 586.831215][T15973] [ 587.447894][ T1162] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.494610][T15985] FAULT_INJECTION: forcing a failure. [ 587.494610][T15985] name failslab, interval 1, probability 0, space 0, times 0 [ 587.568765][T15985] CPU: 0 UID: 0 PID: 15985 Comm: syz.3.2356 Not tainted syzkaller #0 PREEMPT(full) [ 587.568788][T15985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 587.568797][T15985] Call Trace: [ 587.568803][T15985] [ 587.568810][T15985] dump_stack_lvl+0x16c/0x1f0 [ 587.568833][T15985] should_fail_ex+0x512/0x640 [ 587.568853][T15985] ? __kmalloc_noprof+0xca/0x880 [ 587.568870][T15985] should_failslab+0xc2/0x120 [ 587.568890][T15985] __kmalloc_noprof+0xdd/0x880 [ 587.568903][T15985] ? lockdep_init_map_type+0x5c/0x280 [ 587.568926][T15985] ? xfrm_hash_alloc+0xd1/0x100 [ 587.568950][T15985] ? xfrm_hash_alloc+0xd1/0x100 [ 587.568969][T15985] xfrm_hash_alloc+0xd1/0x100 [ 587.568990][T15985] xfrm_net_init+0x35f/0xcc0 [ 587.569007][T15985] ? __pfx_xfrm_net_init+0x10/0x10 [ 587.569029][T15985] ops_init+0x1e2/0x5f0 [ 587.569053][T15985] setup_net+0x100/0x390 [ 587.569074][T15985] ? __pfx_setup_net+0x10/0x10 [ 587.569096][T15985] ? debug_mutex_init+0x37/0x70 [ 587.569114][T15985] copy_net_ns+0x2f8/0x690 [ 587.569131][T15985] create_new_namespaces+0x3ea/0xa90 [ 587.569154][T15985] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 587.569174][T15985] ksys_unshare+0x45b/0xa40 [ 587.569195][T15985] ? __pfx_ksys_unshare+0x10/0x10 [ 587.569217][T15985] ? xfd_validate_state+0x61/0x180 [ 587.569236][T15985] __x64_sys_unshare+0x31/0x40 [ 587.569255][T15985] do_syscall_64+0xcd/0x4b0 [ 587.569276][T15985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.569293][T15985] RIP: 0033:0x7f53bab8eec9 [ 587.569305][T15985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 587.569329][T15985] RSP: 002b:00007f53bb9f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 587.569345][T15985] RAX: ffffffffffffffda RBX: 00007f53bade6090 RCX: 00007f53bab8eec9 [ 587.569355][T15985] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 587.569364][T15985] RBP: 00007f53bac11f91 R08: 0000000000000000 R09: 0000000000000000 [ 587.569373][T15985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 587.569382][T15985] R13: 00007f53bade6128 R14: 00007f53bade6090 R15: 00007fff901cfd38 [ 587.569401][T15985] [ 588.772746][T15998] zswap: compressor not available [ 589.166482][T16006] netlink: 268 bytes leftover after parsing attributes in process `syz.1.2360'. [ 590.400813][T16034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2367'. [ 590.561290][T16038] capability: warning: `syz.0.2368' uses deprecated v2 capabilities in a way that may be insecure [ 591.113302][T16055] ecryptfs_miscdev_write: memdup_user returned error [-14] [ 593.505531][T16100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2376'. [ 593.604093][T16100] HfR: entered promiscuous mode [ 594.028336][T16112] vivid-007: ================= START STATUS ================= [ 594.104112][T16112] vivid-007: Generate PTS: true [ 594.133498][T16112] vivid-007: Generate SCR: true [ 594.168509][T16114] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 594.179304][T16112] tpg source WxH: 320x240 (Y'CbCr) [ 594.184410][T16112] tpg field: 1 [ 594.207399][T16112] tpg crop: (0,0)/320x240 [ 594.263907][T16112] tpg compose: (0,0)/320x240 [ 594.310060][T16112] tpg colorspace: 8 [ 594.324723][T16122] FAULT_INJECTION: forcing a failure. [ 594.324723][T16122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 594.349232][T16112] tpg transfer function: 0/0 [ 594.379144][T16112] tpg Y'CbCr encoding: 0/0 [ 594.404690][T16112] tpg quantization: 0/0 [ 594.414984][T16122] CPU: 0 UID: 0 PID: 16122 Comm: syz.3.2381 Not tainted syzkaller #0 PREEMPT(full) [ 594.415003][T16122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 594.415012][T16122] Call Trace: [ 594.415017][T16122] [ 594.415023][T16122] dump_stack_lvl+0x16c/0x1f0 [ 594.415046][T16122] should_fail_ex+0x512/0x640 [ 594.415070][T16122] _copy_to_user+0x32/0xd0 [ 594.415092][T16122] simple_read_from_buffer+0xcb/0x170 [ 594.415116][T16122] proc_fail_nth_read+0x197/0x240 [ 594.415133][T16122] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 594.415151][T16122] ? rw_verify_area+0xcf/0x6c0 [ 594.415165][T16122] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 594.415181][T16122] vfs_read+0x1e1/0xcf0 [ 594.415199][T16122] ? __pfx___mutex_lock+0x10/0x10 [ 594.415216][T16122] ? __pfx_vfs_read+0x10/0x10 [ 594.415237][T16122] ? __fget_files+0x20e/0x3c0 [ 594.415257][T16122] ksys_read+0x12a/0x250 [ 594.415273][T16122] ? __pfx_ksys_read+0x10/0x10 [ 594.415294][T16122] do_syscall_64+0xcd/0x4b0 [ 594.415312][T16122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.415327][T16122] RIP: 0033:0x7f53bab8d8dc [ 594.415340][T16122] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 594.415353][T16122] RSP: 002b:00007f53bba13030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 594.415367][T16122] RAX: ffffffffffffffda RBX: 00007f53bade5fa0 RCX: 00007f53bab8d8dc [ 594.415377][T16122] RDX: 000000000000000f RSI: 00007f53bba130a0 RDI: 0000000000000004 [ 594.415386][T16122] RBP: 00007f53bba13090 R08: 0000000000000000 R09: 0000000000000000 [ 594.415394][T16122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.415402][T16122] R13: 00007f53bade6038 R14: 00007f53bade5fa0 R15: 00007fff901cfd38 [ 594.415420][T16122] [ 594.642616][T16112] tpg RGB range: 0/2 [ 594.646600][T16112] vivid-007: ================== END STATUS ================== [ 594.688761][T16118] zswap: compressor not available [ 594.800984][T16136] netlink: 50 bytes leftover after parsing attributes in process `syz.3.2384'. [ 595.244115][T16150] ptp ptp0: only physical clock in use now [ 595.895885][T16167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2392'. [ 596.364795][T16170] zswap: compressor not available [ 596.665027][T16180] FAULT_INJECTION: forcing a failure. [ 596.665027][T16180] name failslab, interval 1, probability 0, space 0, times 0 [ 596.792057][T16180] CPU: 0 UID: 0 PID: 16180 Comm: syz.2.2395 Not tainted syzkaller #0 PREEMPT(full) [ 596.792081][T16180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 596.792089][T16180] Call Trace: [ 596.792095][T16180] [ 596.792102][T16180] dump_stack_lvl+0x16c/0x1f0 [ 596.792124][T16180] should_fail_ex+0x512/0x640 [ 596.792144][T16180] ? __kmalloc_node_noprof+0xcd/0x8a0 [ 596.792166][T16180] should_failslab+0xc2/0x120 [ 596.792186][T16180] __kmalloc_node_noprof+0xe0/0x8a0 [ 596.792202][T16180] ? lockdep_init_map_type+0x5c/0x280 [ 596.792225][T16180] ? blk_mq_alloc_tag_set+0x46f/0x12e0 [ 596.792246][T16180] ? blk_mq_alloc_tag_set+0x46f/0x12e0 [ 596.792261][T16180] blk_mq_alloc_tag_set+0x46f/0x12e0 [ 596.792277][T16180] ? __pfx_idr_alloc+0x10/0x10 [ 596.792298][T16180] loop_add+0x3b2/0xb70 [ 596.792319][T16180] ? __pfx_loop_add+0x10/0x10 [ 596.792350][T16180] ? find_held_lock+0x2b/0x80 [ 596.792369][T16180] loop_control_ioctl+0x13e/0x630 [ 596.792388][T16180] ? __pfx_loop_control_ioctl+0x10/0x10 [ 596.792410][T16180] ? __pfx_loop_control_ioctl+0x10/0x10 [ 596.792431][T16180] __x64_sys_ioctl+0x18b/0x210 [ 596.792461][T16180] do_syscall_64+0xcd/0x4b0 [ 596.792481][T16180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.792497][T16180] RIP: 0033:0x7fa51638eec9 [ 596.792509][T16180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 596.792522][T16180] RSP: 002b:00007fa5172f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 596.792536][T16180] RAX: ffffffffffffffda RBX: 00007fa5165e5fa0 RCX: 00007fa51638eec9 [ 596.792546][T16180] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 596.792555][T16180] RBP: 00007fa516411f91 R08: 0000000000000000 R09: 0000000000000000 [ 596.792564][T16180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 596.792572][T16180] R13: 00007fa5165e6038 R14: 00007fa5165e5fa0 R15: 00007fff40de1a88 [ 596.792591][T16180] [ 597.596907][T16218] netlink: 50 bytes leftover after parsing attributes in process `syz.3.2401'. [ 597.819243][T16217] netlink: 268 bytes leftover after parsing attributes in process `syz.1.2400'. [ 599.423685][T16245] FAULT_INJECTION: forcing a failure. [ 599.423685][T16245] name failslab, interval 1, probability 0, space 0, times 0 [ 599.507579][T16245] CPU: 0 UID: 0 PID: 16245 Comm: syz.2.2408 Not tainted syzkaller #0 PREEMPT(full) [ 599.507602][T16245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 599.507612][T16245] Call Trace: [ 599.507617][T16245] [ 599.507624][T16245] dump_stack_lvl+0x16c/0x1f0 [ 599.507646][T16245] should_fail_ex+0x512/0x640 [ 599.507667][T16245] ? __kmalloc_node_noprof+0xcd/0x8a0 [ 599.507687][T16245] should_failslab+0xc2/0x120 [ 599.507707][T16245] __kmalloc_node_noprof+0xe0/0x8a0 [ 599.507724][T16245] ? lockdep_init_map_type+0x5c/0x280 [ 599.507749][T16245] ? blk_mq_alloc_tag_set+0x46f/0x12e0 [ 599.507770][T16245] ? blk_mq_alloc_tag_set+0x46f/0x12e0 [ 599.507785][T16245] blk_mq_alloc_tag_set+0x46f/0x12e0 [ 599.507802][T16245] ? __pfx_idr_alloc+0x10/0x10 [ 599.507823][T16245] loop_add+0x3b2/0xb70 [ 599.507844][T16245] ? __pfx_loop_add+0x10/0x10 [ 599.507875][T16245] ? find_held_lock+0x2b/0x80 [ 599.507894][T16245] loop_control_ioctl+0x13e/0x630 [ 599.507913][T16245] ? __pfx_loop_control_ioctl+0x10/0x10 [ 599.507935][T16245] ? __pfx_loop_control_ioctl+0x10/0x10 [ 599.507955][T16245] __x64_sys_ioctl+0x18b/0x210 [ 599.507978][T16245] do_syscall_64+0xcd/0x4b0 [ 599.507997][T16245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.508012][T16245] RIP: 0033:0x7fa51638eec9 [ 599.508024][T16245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 599.508037][T16245] RSP: 002b:00007fa5172f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 599.508052][T16245] RAX: ffffffffffffffda RBX: 00007fa5165e5fa0 RCX: 00007fa51638eec9 [ 599.508061][T16245] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 599.508070][T16245] RBP: 00007fa516411f91 R08: 0000000000000000 R09: 0000000000000000 [ 599.508079][T16245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 599.508087][T16245] R13: 00007fa5165e6038 R14: 00007fa5165e5fa0 R15: 00007fff40de1a88 [ 599.508105][T16245] [ 599.948430][ T30] audit: type=1400 audit(4294967385.371:69): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=16252 comm="syz.2.2411" [ 600.169450][T16259] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2412'. [ 600.389887][ T5859] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 600.447429][T16263] zswap: compressor not available [ 600.767133][T16266] zswap: compressor not available [ 601.414033][T16290] block2mtd: parameter too long [ 601.900382][T16298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2420'. [ 603.252372][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 603.262921][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 603.271260][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 603.279888][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 603.288162][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 603.974323][T16320] chnl_net:caif_netlink_parms(): no params data found [ 604.166039][T16332] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2427'. [ 604.301717][T16320] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.345733][T16320] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.374765][T16320] bridge_slave_0: entered allmulticast mode [ 604.410385][T16320] bridge_slave_0: entered promiscuous mode [ 604.451386][T16320] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.496189][T16320] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.532818][T16320] bridge_slave_1: entered allmulticast mode [ 604.577650][T16320] bridge_slave_1: entered promiscuous mode [ 604.931846][ T5859] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 605.077554][T16320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.135496][T16320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.306452][ T5859] Bluetooth: hci0: hcon ffff88805aa28000 sent 1 < count 256 [ 605.317353][ T5859] Bluetooth: hci0: hcon ffff88805aa28000 sent 0 < count 256 [ 605.325938][ T5859] Bluetooth: hci0: hcon ffff88805aa28000 sent 0 < count 256 [ 605.333759][ T5859] Bluetooth: hci0: hcon ffff88805aa28000 sent 0 < count 256 [ 605.342051][ T5859] Bluetooth: hci0: hcon ffff88805aa28000 sent 0 < count 256 [ 605.351663][ T5859] Bluetooth: hci0: hcon ffff88805aa28000 sent 0 < count 256 [ 605.359416][ T5859] Bluetooth: hci0: hcon ffff88805aa28000 sent 0 < count 256 [ 605.367057][ T5859] Bluetooth: hci0: hcon ffff88805aa28000 sent 0 < count 256 [ 605.374495][T13812] Bluetooth: hci2: command tx timeout [ 605.381895][ T5859] Bluetooth: hci0: hcon ffff88805aa28000 sent 0 < count 256 [ 605.390427][ T5859] Bluetooth: hci0: hcon ffff88805aa28000 sent 0 < count 256 [ 605.398030][ T5859] Bluetooth: hci0: hcon ffff88805aa28000 sent 0 < count 256 [ 605.405693][ T5859] Bluetooth: hci0: hcon ffff88805aa28000 sent 0 < count 256 [ 605.413526][ T5859] Bluetooth: hci0: hcon ffff88805aa28000 sent 0 < count 256 [ 605.424187][ T5859] Bluetooth: hci0: hcon ffff88805aa28000 sent 0 < count 256 [ 605.432493][ T5859] Bluetooth: hci0: hcon ffff88805aa28000 sent 0 < count 256 [ 605.451833][ T5859] Bluetooth: hci0: hcon ffff88805aa28000 sent 0 < count 256 [ 605.459503][ T5859] Bluetooth: hci0: hcon ffff88805aa28000 sent 0 < count 256 [ 605.466959][ T5859] Bluetooth: hci0: hcon ffff88805aa28000 sent 0 < count 256 [ 605.474849][ T5859] Bluetooth: hci0: hcon ffff88805aa28000 sent 0 < count 256 [ 605.485590][ T5859] Bluetooth: hci0: hcon ffff88805aa28000 sent 0 < count 256 [ 605.493126][ T5859] Bluetooth: hci0: hcon ffff88805aa28000 sent 0 < count 256 [ 605.501036][ T5859] Bluetooth: hci0: hcon ffff88805aa28000 sent 0 < count 256 [ 605.508800][ T5859] Bluetooth: hci0: hcon ffff88805aa28000 sent 0 < count 256 [ 605.516280][ T5859] Bluetooth: hci0: hcon ffff88805aa28000 sent 0 < count 256 [ 605.524391][ T5859] Bluetooth: hci0: hcon ffff88805aa28000 sent 0 < count 256 [ 605.534581][ T5859] Bluetooth: hci0: hcon ffff88805aa28000 sent 0 < count 256 [ 605.543459][ T5859] Bluetooth: hci0: hcon ffff88805aa28000 sent 0 < count 256 [ 605.558967][ T5859] Bluetooth: hci0: hcon ffff88805aa28000 sent 0 < count 256 [ 605.566444][ T5859] Bluetooth: hci0: hcon ffff88805aa28000 sent 0 < count 256 [ 605.573951][ T5859] Bluetooth: hci0: hcon ffff88805aa28000 sent 0 < count 256 [ 605.581524][ T5859] Bluetooth: hci0: hcon ffff88805aa28000 sent 0 < count 256 [ 605.589021][ T5859] Bluetooth: hci0: hcon ffff88805aa28000 sent 0 < count 256 [ 605.596472][ T5859] Bluetooth: hci0: hcon ffff88805aa28000 sent 0 < count 256 [ 605.619385][T16320] team0: Port device team_slave_0 added [ 605.692232][T16320] team0: Port device team_slave_1 added [ 605.819848][T16320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 605.865454][T16320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.003675][T16320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 606.098903][T16320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.114789][T16368] zswap: compressor not available [ 606.139303][T16320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.220604][T16320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.377448][T16320] hsr_slave_0: entered promiscuous mode [ 606.400532][T16320] hsr_slave_1: entered promiscuous mode [ 606.419833][T16320] debugfs: 'hsr0' already exists in 'hsr' [ 606.439411][T16320] Cannot create hsr debugfs directory [ 606.961278][ T5859] Bluetooth: hci1: command 0x0c1a tx timeout [ 606.982682][T16412] netlink: 268 bytes leftover after parsing attributes in process `syz.2.2438'. [ 607.438699][ T5859] Bluetooth: hci2: command tx timeout [ 607.623740][T16320] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.861168][T16320] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.035183][T16320] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.412435][T16320] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 608.590822][T16320] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 609.507845][ T5859] Bluetooth: hci2: command tx timeout [ 609.878641][T16320] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 609.936971][T16320] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 610.246120][T16320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.329047][T16320] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.394470][ T9181] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.401604][ T9181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.484968][ T9181] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.492098][ T9181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.134640][T16320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.301246][T16320] veth0_vlan: entered promiscuous mode [ 611.408493][T16320] veth1_vlan: entered promiscuous mode [ 611.578099][ T5859] Bluetooth: hci2: command tx timeout [ 611.688365][T16320] veth0_macvtap: entered promiscuous mode [ 611.714440][T16320] veth1_macvtap: entered promiscuous mode [ 611.795409][T16320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 611.829817][T16320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 611.854333][ T9188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.869451][T16494] netlink: 50 bytes leftover after parsing attributes in process `syz.3.2451'. [ 611.904170][ T9188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.942092][ T9188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.993717][ T9188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.013839][T16486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2450'. [ 612.176169][T13181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.209361][T13181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.278886][T13181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.310597][T13181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.531815][T16499] queue_state_write: operation too long [ 612.577973][T16499] queue_state_write: use 'run', 'start' or 'kick' [ 613.001988][T16503] netlink: 268 bytes leftover after parsing attributes in process `syz.1.2452'. [ 613.155980][T16515] random: crng reseeded on system resumption [ 614.829612][T16533] netlink: 268 bytes leftover after parsing attributes in process `syz.1.2459'. [ 616.603866][T16549] kAFS: Invalid Command on /proc/fs/afs/cells file [ 617.427344][T16568] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2467'. [ 619.342081][T16587] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2470'. [ 622.485253][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 622.492453][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.636530][T16638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2480'. [ 623.827772][ T5859] block nbd51: Receive control failed (result -107) [ 624.042220][T16645] netlink: 50 bytes leftover after parsing attributes in process `syz.1.2490'. [ 624.860405][T16651] random: crng reseeded on system resumption [ 625.928195][T16678] FAULT_INJECTION: forcing a failure. [ 625.928195][T16678] name failslab, interval 1, probability 0, space 0, times 0 [ 626.030929][T16678] CPU: 0 UID: 0 PID: 16678 Comm: syz.0.2492 Not tainted syzkaller #0 PREEMPT(full) [ 626.030951][T16678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 626.030961][T16678] Call Trace: [ 626.030967][T16678] [ 626.030974][T16678] dump_stack_lvl+0x16c/0x1f0 [ 626.030997][T16678] should_fail_ex+0x512/0x640 [ 626.031018][T16678] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 626.031057][T16678] should_failslab+0xc2/0x120 [ 626.031078][T16678] kmem_cache_alloc_noprof+0x75/0x6e0 [ 626.031096][T16678] ? skb_clone+0x190/0x3f0 [ 626.031120][T16678] ? skb_clone+0x190/0x3f0 [ 626.031139][T16678] skb_clone+0x190/0x3f0 [ 626.031160][T16678] netlink_deliver_tap+0xabd/0xd30 [ 626.031186][T16678] netlink_unicast+0x64c/0x870 [ 626.031210][T16678] ? __pfx_netlink_unicast+0x10/0x10 [ 626.031239][T16678] netlink_sendmsg+0x8c8/0xdd0 [ 626.031264][T16678] ? __pfx_netlink_sendmsg+0x10/0x10 [ 626.031287][T16678] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 626.031311][T16678] ____sys_sendmsg+0xa95/0xc70 [ 626.031327][T16678] ? copy_msghdr_from_user+0x10a/0x160 [ 626.031347][T16678] ? __pfx_____sys_sendmsg+0x10/0x10 [ 626.031367][T16678] ? __pfx_futex_wake_mark+0x10/0x10 [ 626.031385][T16678] ___sys_sendmsg+0x134/0x1d0 [ 626.031406][T16678] ? __pfx____sys_sendmsg+0x10/0x10 [ 626.031451][T16678] __sys_sendmsg+0x16d/0x220 [ 626.031471][T16678] ? __pfx___sys_sendmsg+0x10/0x10 [ 626.031491][T16678] ? __x64_sys_futex+0x1e0/0x4c0 [ 626.031523][T16678] do_syscall_64+0xcd/0x4b0 [ 626.031542][T16678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.031557][T16678] RIP: 0033:0x7f1da658eec9 [ 626.031570][T16678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 626.031584][T16678] RSP: 002b:00007f1da43b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 626.031599][T16678] RAX: ffffffffffffffda RBX: 00007f1da67e6270 RCX: 00007f1da658eec9 [ 626.031609][T16678] RDX: 0000000000000004 RSI: 000020000000ca40 RDI: 000000000000000d [ 626.031619][T16678] RBP: 00007f1da6611f91 R08: 0000000000000000 R09: 0000000000000000 [ 626.031628][T16678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 626.031637][T16678] R13: 00007f1da67e6308 R14: 00007f1da67e6270 R15: 00007ffe01800f48 [ 626.031657][T16678] [ 627.890129][T16699] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2493'. [ 628.144917][T16706] sd 0:0:1:0: PR command failed: 1026 [ 628.214814][T16706] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 628.363581][T16706] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 629.240222][T16722] FAULT_INJECTION: forcing a failure. [ 629.240222][T16722] name failslab, interval 1, probability 0, space 0, times 0 [ 629.309371][T16722] CPU: 0 UID: 0 PID: 16722 Comm: syz.2.2497 Not tainted syzkaller #0 PREEMPT(full) [ 629.309393][T16722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 629.309402][T16722] Call Trace: [ 629.309408][T16722] [ 629.309414][T16722] dump_stack_lvl+0x16c/0x1f0 [ 629.309438][T16722] should_fail_ex+0x512/0x640 [ 629.309459][T16722] ? __kmalloc_node_noprof+0xcd/0x8a0 [ 629.309480][T16722] should_failslab+0xc2/0x120 [ 629.309501][T16722] __kmalloc_node_noprof+0xe0/0x8a0 [ 629.309518][T16722] ? lockdep_init_map_type+0x5c/0x280 [ 629.309539][T16722] ? blk_mq_alloc_tag_set+0x577/0x12e0 [ 629.309560][T16722] ? blk_mq_alloc_tag_set+0x577/0x12e0 [ 629.309575][T16722] blk_mq_alloc_tag_set+0x577/0x12e0 [ 629.309591][T16722] ? idr_alloc_u32+0x263/0x2f0 [ 629.309612][T16722] loop_add+0x3b2/0xb70 [ 629.309633][T16722] ? __pfx_loop_add+0x10/0x10 [ 629.309663][T16722] ? find_held_lock+0x2b/0x80 [ 629.309682][T16722] loop_control_ioctl+0x13e/0x630 [ 629.309702][T16722] ? __pfx_loop_control_ioctl+0x10/0x10 [ 629.309724][T16722] ? __pfx_loop_control_ioctl+0x10/0x10 [ 629.309753][T16722] __x64_sys_ioctl+0x18b/0x210 [ 629.309778][T16722] do_syscall_64+0xcd/0x4b0 [ 629.309798][T16722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.309813][T16722] RIP: 0033:0x7fa51638eec9 [ 629.309824][T16722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 629.309838][T16722] RSP: 002b:00007fa5172f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 629.309852][T16722] RAX: ffffffffffffffda RBX: 00007fa5165e5fa0 RCX: 00007fa51638eec9 [ 629.309862][T16722] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000005 [ 629.309871][T16722] RBP: 00007fa516411f91 R08: 0000000000000000 R09: 0000000000000000 [ 629.309879][T16722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 629.309888][T16722] R13: 00007fa5165e6038 R14: 00007fa5165e5fa0 R15: 00007fff40de1a88 [ 629.309906][T16722] [ 629.806705][T16735] netlink: 268 bytes leftover after parsing attributes in process `syz.2.2498'. [ 632.086845][T16785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2513'. [ 632.479091][T16793] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 632.599416][T16793] FAULT_INJECTION: forcing a failure. [ 632.599416][T16793] name failslab, interval 1, probability 0, space 0, times 0 [ 632.706262][T16800] netlink: 274 bytes leftover after parsing attributes in process `syz.2.2508'. [ 632.716034][T16793] CPU: 0 UID: 0 PID: 16793 Comm: syz.0.2507 Not tainted syzkaller #0 PREEMPT(full) [ 632.716056][T16793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 632.716065][T16793] Call Trace: [ 632.716071][T16793] [ 632.716078][T16793] dump_stack_lvl+0x16c/0x1f0 [ 632.716102][T16793] should_fail_ex+0x512/0x640 [ 632.716122][T16793] ? __kmalloc_node_noprof+0xcd/0x8a0 [ 632.716143][T16793] should_failslab+0xc2/0x120 [ 632.716164][T16793] __kmalloc_node_noprof+0xe0/0x8a0 [ 632.716180][T16793] ? lockdep_init_map_type+0x5c/0x280 [ 632.716202][T16793] ? blk_mq_alloc_tag_set+0x577/0x12e0 [ 632.716223][T16793] ? blk_mq_alloc_tag_set+0x577/0x12e0 [ 632.716238][T16793] blk_mq_alloc_tag_set+0x577/0x12e0 [ 632.716254][T16793] ? idr_alloc_u32+0x263/0x2f0 [ 632.716274][T16793] loop_add+0x3b2/0xb70 [ 632.716295][T16793] ? __pfx_loop_add+0x10/0x10 [ 632.716326][T16793] ? find_held_lock+0x2b/0x80 [ 632.716345][T16793] loop_control_ioctl+0x13e/0x630 [ 632.716365][T16793] ? __pfx_loop_control_ioctl+0x10/0x10 [ 632.716387][T16793] ? __pfx_loop_control_ioctl+0x10/0x10 [ 632.716407][T16793] __x64_sys_ioctl+0x18b/0x210 [ 632.716430][T16793] do_syscall_64+0xcd/0x4b0 [ 632.716449][T16793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.716473][T16793] RIP: 0033:0x7f1da658eec9 [ 632.716486][T16793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 632.716501][T16793] RSP: 002b:00007f1da7348038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 632.716517][T16793] RAX: ffffffffffffffda RBX: 00007f1da67e5fa0 RCX: 00007f1da658eec9 [ 632.716527][T16793] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000005 [ 632.716537][T16793] RBP: 00007f1da6611f91 R08: 0000000000000000 R09: 0000000000000000 [ 632.716545][T16793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 632.716554][T16793] R13: 00007f1da67e6038 R14: 00007f1da67e5fa0 R15: 00007ffe01800f48 [ 632.716573][T16793] [ 633.124183][T13812] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 633.137748][T13812] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 633.214810][T13812] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 633.284451][T13812] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 633.302873][T13812] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 634.144018][T16812] netlink: 268 bytes leftover after parsing attributes in process `syz.2.2510'. [ 634.590290][T16801] chnl_net:caif_netlink_parms(): no params data found [ 634.815700][T16801] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.843742][T16801] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.882220][T16801] bridge_slave_0: entered allmulticast mode [ 634.926869][T16801] bridge_slave_0: entered promiscuous mode [ 634.949152][T16801] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.000782][T16801] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.035250][T16801] bridge_slave_1: entered allmulticast mode [ 635.061798][T16830] sd 0:0:1:0: PR command failed: 1026 [ 635.068482][T16801] bridge_slave_1: entered promiscuous mode [ 635.092288][T16830] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 635.187944][T16830] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 635.200634][T16801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 635.264084][T16801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 635.373799][T13812] Bluetooth: hci4: command tx timeout [ 635.413858][T16801] team0: Port device team_slave_0 added [ 635.447834][T16801] team0: Port device team_slave_1 added [ 635.637260][T16801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 635.685735][T16801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 635.854108][T16801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 635.916802][T16801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 635.962531][T16801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 636.100124][T16801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 636.393490][T16801] hsr_slave_0: entered promiscuous mode [ 636.448657][T16801] hsr_slave_1: entered promiscuous mode [ 636.454666][T16801] debugfs: 'hsr0' already exists in 'hsr' [ 636.492797][T16845] nbd0: detected capacity change from 0 to 25165824 [ 636.519810][ T5850] [ 636.522183][ T5850] ====================================================== [ 636.529175][ T5850] WARNING: possible circular locking dependency detected [ 636.536175][ T5850] syzkaller #0 Not tainted [ 636.540561][ T5850] ------------------------------------------------------ [ 636.547562][ T5850] udevd/5850 is trying to acquire lock: [ 636.553092][ T5850] ffff88802655f870 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x423/0x12d0 [ 636.562127][ T5850] [ 636.562127][ T5850] but task is already holding lock: [ 636.569469][ T5850] ffff888025a951f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xbd/0x12d0 [ 636.577964][ T5850] [ 636.577964][ T5850] which lock already depends on the new lock. [ 636.577964][ T5850] [ 636.588339][ T5850] [ 636.588339][ T5850] the existing dependency chain (in reverse order) is: [ 636.597323][ T5850] [ 636.597323][ T5850] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 636.604506][ T5850] __mutex_lock+0x193/0x1060 [ 636.609597][ T5850] nbd_queue_rq+0xbd/0x12d0 [ 636.614595][ T5850] blk_mq_dispatch_rq_list+0x413/0x1e20 [ 636.620634][ T5850] __blk_mq_sched_dispatch_requests+0xcb7/0x15f0 [ 636.627475][ T5850] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 636.633972][ T5850] blk_mq_run_hw_queue+0x239/0x670 [ 636.639598][ T5850] blk_mq_dispatch_list+0x514/0x1310 [ 636.645387][ T5850] blk_mq_flush_plug_list+0x130/0x600 [ 636.651259][ T5850] __blk_flush_plug+0x2c4/0x4b0 [ 636.656604][ T5850] __submit_bio+0x545/0x690 [ 636.661604][ T5850] submit_bio_noacct_nocheck+0x53d/0xc10 [ 636.667730][ T5850] submit_bio_noacct+0xbbb/0x1f60 [ 636.673247][ T5850] block_read_full_folio+0x4db/0x850 [ 636.679033][ T5850] filemap_read_folio+0xc5/0x2a0 [ 636.684468][ T5850] do_read_cache_folio+0x263/0x5c0 [ 636.690074][ T5850] read_part_sector+0xd4/0x370 [ 636.695340][ T5850] adfspart_check_ICS+0x93/0x940 [ 636.700779][ T5850] bdev_disk_changed+0x723/0x1520 [ 636.706303][ T5850] blkdev_get_whole+0x187/0x290 [ 636.711654][ T5850] bdev_open+0x2c7/0xe40 [ 636.716391][ T5850] blkdev_open+0x34e/0x4f0 [ 636.721310][ T5850] do_dentry_open+0x982/0x1530 [ 636.726575][ T5850] vfs_open+0x82/0x3f0 [ 636.731154][ T5850] path_openat+0x1de4/0x2cb0 [ 636.736242][ T5850] do_filp_open+0x20b/0x470 [ 636.741241][ T5850] do_sys_openat2+0x11b/0x1d0 [ 636.746422][ T5850] __x64_sys_openat+0x174/0x210 [ 636.751776][ T5850] do_syscall_64+0xcd/0x4b0 [ 636.756778][ T5850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.763164][ T5850] [ 636.763164][ T5850] -> #5 (set->srcu){.+.+}-{0:0}: [ 636.770260][ T5850] __synchronize_srcu+0xa1/0x290 [ 636.775693][ T5850] blk_mq_quiesce_queue+0x149/0x1b0 [ 636.781391][ T5850] elevator_switch+0x17d/0x810 [ 636.786654][ T5850] elevator_change+0x391/0x5d0 [ 636.791921][ T5850] elevator_set_default+0x2e9/0x380 [ 636.797626][ T5850] blk_register_queue+0x384/0x4e0 [ 636.803153][ T5850] __add_disk+0x74a/0xf00 [ 636.807982][ T5850] add_disk_fwnode+0x13f/0x5d0 [ 636.813242][ T5850] nbd_dev_add+0x783/0xbb0 [ 636.818159][ T5850] nbd_init+0x181/0x320 [ 636.822812][ T5850] do_one_initcall+0x120/0x6e0 [ 636.828074][ T5850] kernel_init_freeable+0x5c2/0x910 [ 636.833776][ T5850] kernel_init+0x1c/0x2b0 [ 636.838605][ T5850] ret_from_fork+0x56a/0x730 [ 636.843693][ T5850] ret_from_fork_asm+0x1a/0x30 [ 636.848958][ T5850] [ 636.848958][ T5850] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 636.856750][ T5850] __mutex_lock+0x193/0x1060 [ 636.861841][ T5850] elevator_change+0x17d/0x5d0 [ 636.867104][ T5850] elv_iosched_store+0x315/0x3c0 [ 636.872546][ T5850] queue_attr_store+0x268/0x310 [ 636.877896][ T5850] sysfs_kf_write+0xf2/0x150 [ 636.882985][ T5850] kernfs_fop_write_iter+0x3af/0x570 [ 636.888765][ T5850] vfs_write+0x7d3/0x11d0 [ 636.893591][ T5850] ksys_write+0x12a/0x250 [ 636.898418][ T5850] do_syscall_64+0xcd/0x4b0 [ 636.903423][ T5850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.909812][ T5850] [ 636.909812][ T5850] -> #3 (&q->q_usage_counter(io)#62){++++}-{0:0}: [ 636.918391][ T5850] blk_alloc_queue+0x619/0x760 [ 636.923664][ T5850] blk_mq_alloc_queue+0x172/0x280 [ 636.929189][ T5850] __blk_mq_alloc_disk+0x29/0x120 [ 636.934712][ T5850] nbd_dev_add+0x492/0xbb0 [ 636.939626][ T5850] nbd_init+0x181/0x320 [ 636.944278][ T5850] do_one_initcall+0x120/0x6e0 [ 636.950380][ T5850] kernel_init_freeable+0x5c2/0x910 [ 636.956660][ T5850] kernel_init+0x1c/0x2b0 [ 636.961695][ T5850] ret_from_fork+0x56a/0x730 [ 636.966789][ T5850] ret_from_fork_asm+0x1a/0x30 [ 636.972057][ T5850] [ 636.972057][ T5850] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 636.979243][ T5850] fs_reclaim_acquire+0x102/0x150 [ 636.984776][ T5850] kmem_cache_alloc_node_noprof+0x5e/0x770 [ 636.991155][ T5850] __alloc_skb+0x2b2/0x380 [ 636.996083][ T5850] tcp_stream_alloc_skb+0x34/0x560 [ 637.001701][ T5850] tcp_sendmsg_locked+0x12d9/0x42e0 [ 637.007400][ T5850] tcp_sendmsg+0x2e/0x50 [ 637.012151][ T5850] inet_sendmsg+0xb9/0x140 [ 637.017067][ T5850] sock_write_iter+0x509/0x610 [ 637.022342][ T5850] vfs_write+0x7d3/0x11d0 [ 637.027175][ T5850] ksys_write+0x1f8/0x250 [ 637.032006][ T5850] do_syscall_64+0xcd/0x4b0 [ 637.037009][ T5850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.043400][ T5850] [ 637.043400][ T5850] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 637.051036][ T5850] lock_sock_nested+0x41/0xf0 [ 637.056215][ T5850] inet_shutdown+0x67/0x440 [ 637.061218][ T5850] nbd_mark_nsock_dead+0xae/0x5d0 [ 637.066746][ T5850] recv_work+0x671/0xa80 [ 637.071503][ T5850] process_one_work+0x9cc/0x1b70 [ 637.077054][ T5850] worker_thread+0x6c8/0xf10 [ 637.082181][ T5850] kthread+0x3c5/0x780 [ 637.086762][ T5850] ret_from_fork+0x56a/0x730 [ 637.091857][ T5850] ret_from_fork_asm+0x1a/0x30 [ 637.097126][ T5850] [ 637.097126][ T5850] -> #0 (&nsock->tx_lock){+.+.}-{4:4}: [ 637.104744][ T5850] __lock_acquire+0x12a6/0x1ce0 [ 637.110105][ T5850] lock_acquire+0x179/0x350 [ 637.115196][ T5850] __mutex_lock+0x193/0x1060 [ 637.120286][ T5850] nbd_queue_rq+0x423/0x12d0 [ 637.125383][ T5850] blk_mq_dispatch_rq_list+0x413/0x1e20 [ 637.131431][ T5850] __blk_mq_sched_dispatch_requests+0xcb7/0x15f0 [ 637.138262][ T5850] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 637.144736][ T5850] blk_mq_run_hw_queue+0x239/0x670 [ 637.150351][ T5850] blk_mq_dispatch_list+0x514/0x1310 [ 637.156137][ T5850] blk_mq_flush_plug_list+0x130/0x600 [ 637.162006][ T5850] __blk_flush_plug+0x2c4/0x4b0 [ 637.167352][ T5850] __submit_bio+0x545/0x690 [ 637.172351][ T5850] submit_bio_noacct_nocheck+0x53d/0xc10 [ 637.178480][ T5850] submit_bio_noacct+0xbbb/0x1f60 [ 637.184031][ T5850] block_read_full_folio+0x4db/0x850 [ 637.189843][ T5850] filemap_read_folio+0xc5/0x2a0 [ 637.195291][ T5850] do_read_cache_folio+0x263/0x5c0 [ 637.200912][ T5850] read_part_sector+0xd4/0x370 [ 637.206194][ T5850] adfspart_check_ICS+0x93/0x940 [ 637.211644][ T5850] bdev_disk_changed+0x723/0x1520 [ 637.217172][ T5850] blkdev_get_whole+0x187/0x290 [ 637.222528][ T5850] bdev_open+0x2c7/0xe40 [ 637.227283][ T5850] blkdev_open+0x34e/0x4f0 [ 637.232198][ T5850] do_dentry_open+0x982/0x1530 [ 637.237479][ T5850] vfs_open+0x82/0x3f0 [ 637.242050][ T5850] path_openat+0x1de4/0x2cb0 [ 637.247148][ T5850] do_filp_open+0x20b/0x470 [ 637.252150][ T5850] do_sys_openat2+0x11b/0x1d0 [ 637.257335][ T5850] __x64_sys_openat+0x174/0x210 [ 637.262688][ T5850] do_syscall_64+0xcd/0x4b0 [ 637.267696][ T5850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.274091][ T5850] [ 637.274091][ T5850] other info that might help us debug this: [ 637.274091][ T5850] [ 637.284297][ T5850] Chain exists of: [ 637.284297][ T5850] &nsock->tx_lock --> set->srcu --> &cmd->lock [ 637.284297][ T5850] [ 637.296347][ T5850] Possible unsafe locking scenario: [ 637.296347][ T5850] [ 637.303769][ T5850] CPU0 CPU1 [ 637.309110][ T5850] ---- ---- [ 637.314448][ T5850] lock(&cmd->lock); [ 637.318410][ T5850] lock(set->srcu); [ 637.324799][ T5850] lock(&cmd->lock); [ 637.331276][ T5850] lock(&nsock->tx_lock); [ 637.335666][ T5850] [ 637.335666][ T5850] *** DEADLOCK *** [ 637.335666][ T5850] [ 637.343782][ T5850] 3 locks held by udevd/5850: [ 637.348429][ T5850] #0: ffff888143f19358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 637.357715][ T5850] #1: ffff8880253f8490 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x22b/0x670 [ 637.367179][ T5850] #2: ffff888025a951f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xbd/0x12d0 [ 637.376116][ T5850] [ 637.376116][ T5850] stack backtrace: [ 637.381984][ T5850] CPU: 0 UID: 0 PID: 5850 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 637.382002][ T5850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 637.382011][ T5850] Call Trace: [ 637.382018][ T5850] [ 637.382024][ T5850] dump_stack_lvl+0x116/0x1f0 [ 637.382043][ T5850] print_circular_bug+0x275/0x350 [ 637.382064][ T5850] check_noncircular+0x14c/0x170 [ 637.382090][ T5850] __lock_acquire+0x12a6/0x1ce0 [ 637.382114][ T5850] lock_acquire+0x179/0x350 [ 637.382133][ T5850] ? nbd_queue_rq+0x423/0x12d0 [ 637.382148][ T5850] ? __pfx___might_resched+0x10/0x10 [ 637.382166][ T5850] ? nbd_queue_rq+0x423/0x12d0 [ 637.382179][ T5850] __mutex_lock+0x193/0x1060 [ 637.382196][ T5850] ? nbd_queue_rq+0x423/0x12d0 [ 637.382212][ T5850] ? __pfx___mutex_lock+0x10/0x10 [ 637.382229][ T5850] ? __bfs+0x145/0x290 [ 637.382245][ T5850] ? __lock_acquire+0x62e/0x1ce0 [ 637.382266][ T5850] ? nbd_queue_rq+0x423/0x12d0 [ 637.382279][ T5850] nbd_queue_rq+0x423/0x12d0 [ 637.382296][ T5850] ? __pfx_nbd_queue_rq+0x10/0x10 [ 637.382312][ T5850] ? lockdep_unlock+0x64/0xe0 [ 637.382327][ T5850] ? __lock_acquire+0x107f/0x1ce0 [ 637.382348][ T5850] blk_mq_dispatch_rq_list+0x413/0x1e20 [ 637.382363][ T5850] ? sbitmap_find_bit+0x4b0/0x6f0 [ 637.382381][ T5850] ? sbitmap_get+0x1e5/0x360 [ 637.382395][ T5850] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 637.382410][ T5850] ? __blk_mq_alloc_driver_tag+0x4f7/0x7a0 [ 637.382426][ T5850] __blk_mq_sched_dispatch_requests+0xcb7/0x15f0 [ 637.382450][ T5850] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 637.382477][ T5850] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 637.382491][ T5850] blk_mq_run_hw_queue+0x239/0x670 [ 637.382511][ T5850] ? blk_mq_run_hw_queue+0x22b/0x670 [ 637.382532][ T5850] blk_mq_dispatch_list+0x514/0x1310 [ 637.382548][ T5850] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 637.382562][ T5850] ? find_held_lock+0x2b/0x80 [ 637.382577][ T5850] ? blk_add_trace_plug+0xf5/0x290 [ 637.382596][ T5850] blk_mq_flush_plug_list+0x130/0x600 [ 637.382611][ T5850] ? trace_block_plug+0x17f/0x200 [ 637.382629][ T5850] ? blk_add_rq_to_plug+0x30a/0x540 [ 637.382643][ T5850] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 637.382658][ T5850] ? blk_mq_submit_bio+0x9e6/0x3380 [ 637.382673][ T5850] __blk_flush_plug+0x2c4/0x4b0 [ 637.382687][ T5850] ? __pfx___blk_flush_plug+0x10/0x10 [ 637.382700][ T5850] ? __lock_acquire+0x62e/0x1ce0 [ 637.382721][ T5850] __submit_bio+0x545/0x690 [ 637.382733][ T5850] ? __pfx___submit_bio+0x10/0x10 [ 637.382750][ T5850] ? submit_bio_noacct_nocheck+0x53d/0xc10 [ 637.382764][ T5850] submit_bio_noacct_nocheck+0x53d/0xc10 [ 637.382778][ T5850] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 637.382793][ T5850] ? __pfx___might_resched+0x10/0x10 [ 637.382810][ T5850] submit_bio_noacct+0xbbb/0x1f60 [ 637.382824][ T5850] block_read_full_folio+0x4db/0x850 [ 637.382845][ T5850] ? __pfx_blkdev_get_block+0x10/0x10 [ 637.382860][ T5850] ? __pfx_blkdev_read_folio+0x10/0x10 [ 637.382873][ T5850] filemap_read_folio+0xc5/0x2a0 [ 637.382887][ T5850] ? __pfx_filemap_read_folio+0x10/0x10 [ 637.382900][ T5850] ? __filemap_get_folio+0x32b/0xc30 [ 637.382917][ T5850] do_read_cache_folio+0x263/0x5c0 [ 637.382932][ T5850] ? __pfx_blkdev_read_folio+0x10/0x10 [ 637.382946][ T5850] read_part_sector+0xd4/0x370 [ 637.382966][ T5850] adfspart_check_ICS+0x93/0x940 [ 637.382987][ T5850] ? snprintf+0xc7/0x100 [ 637.383001][ T5850] ? __pfx_snprintf+0x10/0x10 [ 637.383015][ T5850] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 637.383037][ T5850] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 637.383058][ T5850] bdev_disk_changed+0x723/0x1520 [ 637.383086][ T5850] ? __pfx_bdev_disk_changed+0x10/0x10 [ 637.383108][ T5850] blkdev_get_whole+0x187/0x290 [ 637.383129][ T5850] bdev_open+0x2c7/0xe40 [ 637.383143][ T5850] blkdev_open+0x34e/0x4f0 [ 637.383157][ T5850] do_dentry_open+0x982/0x1530 [ 637.383175][ T5850] ? __pfx_blkdev_open+0x10/0x10 [ 637.383190][ T5850] vfs_open+0x82/0x3f0 [ 637.383210][ T5850] path_openat+0x1de4/0x2cb0 [ 637.383228][ T5850] ? __pfx_path_openat+0x10/0x10 [ 637.383245][ T5850] do_filp_open+0x20b/0x470 [ 637.383260][ T5850] ? __pfx_do_filp_open+0x10/0x10 [ 637.383281][ T5850] ? alloc_fd+0x471/0x7d0 [ 637.383297][ T5850] do_sys_openat2+0x11b/0x1d0 [ 637.383317][ T5850] ? __pfx_do_sys_openat2+0x10/0x10 [ 637.383337][ T5850] ? __sys_recvmsg+0x189/0x220 [ 637.383358][ T5850] ? __pfx___sys_recvmsg+0x10/0x10 [ 637.383379][ T5850] __x64_sys_openat+0x174/0x210 [ 637.383400][ T5850] ? __pfx___x64_sys_openat+0x10/0x10 [ 637.383423][ T5850] do_syscall_64+0xcd/0x4b0 [ 637.383440][ T5850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.383455][ T5850] RIP: 0033:0x7f34da0a7407 [ 637.383467][ T5850] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 637.383481][ T5850] RSP: 002b:00007ffed7c63030 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 637.383494][ T5850] RAX: ffffffffffffffda RBX: 00007f34da750880 RCX: 00007f34da0a7407 [ 637.383504][ T5850] RDX: 00000000000a0800 RSI: 0000564e0bdf5320 RDI: ffffffffffffff9c [ 637.383513][ T5850] RBP: 0000564e0bdf4910 R08: 0000000000000000 R09: 0000000000000000 [ 637.383521][ T5850] R10: 0000000000000000 R11: 0000000000000202 R12: 0000564e0be09830 [ 637.383529][ T5850] R13: 0000564e0be0c410 R14: 0000000000000000 R15: 0000564e0be09830 [ 637.383542][ T5850] [ 637.930964][T16801] Cannot create hsr debugfs directory [ 637.963127][T13812] Bluetooth: hci4: command tx timeout SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 638.699934][ T5850] block nbd0: Dead connection, failed to find a fallback [ 638.708809][ T5850] block nbd0: shutting down sockets [ 638.714011][ T5850] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 638.746117][ T5850] Buffer I/O error on dev nbd0, logical block 0, async page read [ 638.758124][T13181] bridge_slave_1: left allmulticast mode [ 638.763759][T13181] bridge_slave_1: left promiscuous mode [ 638.770128][T13181] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.777538][ T5850] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 638.787906][T13181] bridge_slave_0: left allmulticast mode [ 638.793541][T13181] bridge_slave_0: left promiscuous mode [ 638.799206][ T5850] Buffer I/O error on dev nbd0, logical block 0, async page read [ 638.826769][T13181] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.834317][ T5850] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 638.862053][ T5850] Buffer I/O error on dev nbd0, logical block 0, async page read [ 638.886384][ T5850] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 638.906992][T13181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 638.917035][ T5850] Buffer I/O error on dev nbd0, logical block 0, async page read [ 638.935751][T13181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 638.944389][ T5850] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 638.957261][T13181] bond0 (unregistering): Released all slaves [ 638.968801][ T5850] Buffer I/O error on dev nbd0, logical block 0, async page read [ 638.987794][ T5850] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 639.024055][ T5850] Buffer I/O error on dev nbd0, logical block 0, async page read [ 639.035427][ T5850] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 639.045784][T13181] hsr_slave_0: left promiscuous mode [ 639.051469][T13181] hsr_slave_1: left promiscuous mode [ 639.061755][T13181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 639.070057][ T5850] Buffer I/O error on dev nbd0, logical block 0, async page read [ 639.078649][T13181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 639.086338][ T5850] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 639.102392][ T5850] Buffer I/O error on dev nbd0, logical block 0, async page read [ 639.130070][ T5850] ldm_validate_partition_table(): Disk read failed. [ 639.145624][ T5850] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 639.158307][T13181] team0 (unregistering): Port device team_slave_1 removed [ 639.167734][ T5850] Buffer I/O error on dev nbd0, logical block 0, async page read [ 639.183947][ T5850] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 639.192970][ T5850] Buffer I/O error on dev nbd0, logical block 0, async page read [ 639.207726][T13181] team0 (unregistering): Port device team_slave_0 removed [ 639.215301][ T5850] Dev nbd0: unable to read RDB block 0 [ 639.220994][ T5850] nbd0: unable to read partition table [ 639.245511][ T5850] ldm_validate_partition_table(): Disk read failed. [ 639.252302][ T5850] Dev nbd0: unable to read RDB block 0 [ 639.276319][ T5850] nbd0: unable to read partition table [ 639.485396][T13181] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.515158][T13181] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.555150][T13181] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.595536][T13181] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.691291][T13181] bridge_slave_1: left allmulticast mode [ 639.696936][T13181] bridge_slave_1: left promiscuous mode [ 639.711412][T13181] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.719387][T13181] bridge_slave_0: left allmulticast mode [ 639.731088][T13181] bridge_slave_0: left promiscuous mode [ 639.736724][T13181] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.844715][T13181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 639.862110][T13181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 639.887491][T13181] bond0 (unregistering): Released all slaves [ 640.027138][T13181] hsr_slave_0: left promiscuous mode [ 640.040594][T13181] hsr_slave_1: left promiscuous mode [ 640.055542][T13181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 640.067563][T13181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 640.078497][T13181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 640.087553][T13181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 640.099573][T13181] veth1_macvtap: left promiscuous mode [ 640.105047][T13181] veth0_macvtap: left promiscuous mode [ 640.110893][T13181] veth1_vlan: left promiscuous mode [ 640.116118][T13181] veth0_vlan: left promiscuous mode [ 640.226188][T13181] team0 (unregistering): Port device team_slave_1 removed [ 640.251665][T13181] team0 (unregistering): Port device team_slave_0 removed