last executing test programs: 4m32.930712723s ago: executing program 0 (id=530): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x24, r1, 0x9ec6579d452c1f15, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x25, 0x0, 0x0, @uid}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x20000080) (fail_nth: 1) 4m32.490993339s ago: executing program 0 (id=531): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) sendfile$auto(r1, r0, 0x0, 0x7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_CGROUPSTATS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="13000000", @ANYRES16=0x0, @ANYBLOB="2586f2bd7000fedbdf2504000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c9d0}, 0x4080) r2 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='r'], 0x1ac}, 0x1, 0x0, 0x0, 0xc0}, 0x200440c0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000480)={{&(0x7f00000001c0)="4023323b52a998fc53754442197547d986396e4ac2f991ce93879e2fbeea07fa975eb48bee358e775e6a6cb2e54acee2ef0183bef6b6e7f1890e3a4c066c8369918de3254172611a83c7b6aeb53a353babee4c2ad6f12b337831bbbaf52c5983650e99a42abaacfdb9f4d6a04de3be3a512d187885106cdfcc4c1689a5595c49bd441bc56a53eb770a52e744177964638bf33f56ce4a91dcc003a9223d9747abc414590b71854d97f54ae2c7bb520a969491a5b1f005c566eac9d76e18d704e44e4c9fdffc06ca1b360105327259906d669347745a04d428b2a5c2da5e23f85ef2d02da6022bf9bbb4292b4b82bcb077f237", 0x7, 0x0, 0x7, &(0x7f00000003c0)="36d426922608a1214940a348067f49ef5a4d2096455f61a11dd81b0c0527ec1674ba4f30dbe32e7da22234e8cb9c6fe2169af82540e2e52f7391e8cc3662de9bd60f64967569142153cfe766dfc79b00e70cbf2ced9db314dd2c7ccb9c52d29ada52e587c23b324fb9a0939378550faad663c872f3cf571cf7e1a437eea1d673edc290a12a2d941d2e6e9b26840bf8423611d93270b74696a8d31d18442926c0be6dd278204adc60c01f", 0x0, 0x9}, 0x8}, 0x4, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x11, 0x2, 0x300) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\x88\xa8\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) read$auto(0x3, 0x0, 0x80) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'}) sendmsg$auto_OVS_DP_CMD_NEW(r3, 0x0, 0x2000000) adjtimex$auto(0x0) unshare$auto(0x40000080) r4 = socket(0x23, 0x5, 0x0) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2fafc1, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x3) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x169000, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x0, 0x0) 4m31.274006537s ago: executing program 0 (id=536): sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000200) 4m30.991571409s ago: executing program 0 (id=538): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/miimon\x00', 0x143b42, 0x0) read$auto(r2, &(0x7f0000000140)='---\x00', 0xfff) keyctl$auto(0x4, 0xfffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0x8000000e) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = memfd_create$auto(0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r4 = socket(0xa, 0x3, 0x3a) statx$auto(r3, 0x0, 0x1000, 0xbdfc, 0x0) setsockopt$auto(r4, 0x29, 0x14, 0x0, 0x56b) setsockopt$auto(r4, 0x29, 0x15, 0x0, 0x52b) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) r5 = prctl$auto_PR_SCHED_CORE_CREATE(0xe, 0x1, 0x0, 0x9, 0x7) pread64$auto(r5, &(0x7f0000000040)='7/(\x00', 0xf9c7, 0x7) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) unshare$auto(0x40000080) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0x101500, 0x0) socket(0x23, 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D2\x00', 0x80980, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001180)='/sys/devices/virtual/block/zram0/compact\x00', 0x20001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000000)="b2", 0x1) sendfile$auto(r0, 0xffffffffffffffff, 0x0, 0x1) 4m30.303129734s ago: executing program 0 (id=540): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x8b, 0x400, 0x9}]}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) timer_create$auto_CLOCK_BOOTTIME_ALARM(0x9, &(0x7f0000001140)={@sival_ptr=&(0x7f0000000080)="aaf707c5a926258938375c3ef081e5a9b4fc69339918459c372fbbb6c3a939b5ad", @raw=0xffffff35, 0x7fffffff, @_sigev_thread={&(0x7f0000000100)=&(0x7f00000000c0), &(0x7f0000000140)="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"}}, &(0x7f0000001180)=0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) poll$auto(&(0x7f00000000c0)={0xffffffffffffffff, 0x1}, 0x1, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040084}, 0x40090) mmap$auto(0x5, 0x2020009, 0x3, 0x100000000eb1, 0xffffffffffffffff, 0x8002) socketcall$auto(0x8000, 0x0) openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/per_cpu/cpu0/stats\x00', 0x20000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) madvise$auto(0x0, 0xe48, 0xe) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r3, 0xc0184d03, r3) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/dev_snmp6/veth0_vlan\x00', 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/vm/nr_hugepages_mempolicy\x00', 0x141241, 0x0) write$auto(0x3, 0x0, 0x3fffff) 4m29.365796253s ago: executing program 0 (id=542): openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mtd0\x00', 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001a80), r1) sendmsg$auto_NETDEV_CMD_DEV_GET(r1, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf250100000008000100dc"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) ioctl$auto_MEMERASE64(r0, 0x40104d14, &(0x7f0000000100)={0x4, 0x4}) mmap$auto(0x0, 0x4000000000000003, 0x40000000009f, 0x10000000040ebe, 0x401, 0x300000000000) syz_clone(0x80f400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000001f00)='/sys/kernel/debug/block/nbd11/hctx0/dispatch\x00', 0x80000, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r3, &(0x7f0000000380)=""/206, 0xce) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) close_range$auto(r3, r0, 0x7) 4m13.82112243s ago: executing program 32 (id=542): openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mtd0\x00', 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001a80), r1) sendmsg$auto_NETDEV_CMD_DEV_GET(r1, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf250100000008000100dc"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) ioctl$auto_MEMERASE64(r0, 0x40104d14, &(0x7f0000000100)={0x4, 0x4}) mmap$auto(0x0, 0x4000000000000003, 0x40000000009f, 0x10000000040ebe, 0x401, 0x300000000000) syz_clone(0x80f400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000001f00)='/sys/kernel/debug/block/nbd11/hctx0/dispatch\x00', 0x80000, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r3, &(0x7f0000000380)=""/206, 0xce) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) close_range$auto(r3, r0, 0x7) 10.640121994s ago: executing program 1 (id=1311): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x1, 0x0, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1) mmap$auto(0x0, 0x20009, 0x80000e3, 0x4000000100000eb1, 0x40000000000a1, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0xa, 0x2, 0x88) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000003fc0)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20a02, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xbff) 10.229791169s ago: executing program 1 (id=1314): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x1401, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) close_range$auto(r0, r1, 0x9a1) landlock_restrict_self$auto(0xffffffffffffffff, 0x1) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20001, 0x0) mmap$auto(0x0, 0x40007, 0xdf, 0x9b72, 0x7, 0x28000) r3 = socket(0x2, 0x3, 0xa) getsockopt$auto(r3, 0x0, 0x29, 0x0, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000140)="8c66381957a4f7888c094143a0c718e5e4d04a0030448293116b01bb6fe18e8345aef2917b9c680544a343ba8e006cd4f6434ab1a5e700778e9fc7ba9af47487ca1f9d52939c66c96da4ce5a4f25feef3efd5b8c7733") 8.623178781s ago: executing program 1 (id=1320): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 64) r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x0) (rerun: 64) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) (async) fremovexattr$auto(r0, &(0x7f0000000000)='system.posix_acl_access\x00') close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) (async, rerun: 64) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) (rerun: 64) ioctl$auto_UDF_GETEASIZE(r1, 0x80046c40, &(0x7f0000000040)=0x7) (async, rerun: 64) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) (rerun: 64) 8.081250742s ago: executing program 2 (id=1321): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) mmap$auto(0xfffffffffffff25c, 0x3, 0x121, 0x16, r0, 0x8) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000100)={{@raw=0x2, 0x85, 0x20e, 0x1, "669cbbd9e9756f22fdffa188e0f106000000000000000b2f4ab8633824f2d2252ca5f200", @raw=0x6}, 0x0, @integer=@value_ptr=&(0x7f0000000040)=0x2, "282f77b07e718ed4d99a34617774e3a82f982e0f05e516c299a28a585e87e0d908e2c8e50de5016f1de5d432da2cc20e951d8fcdc4f791a11996aad5af504c0d9927e62ef70b23a13735a4fe805c1ce1b6b1d83d21bb42794ec925b4547a3d52d4b5210392111e181719fef9d685b6534b171d76ad633f94a608b818600a6c85"}) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000640), 0x4c4ac3, 0x0) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x11, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000600)='/dev/nbd0\x00', 0x208201, 0x0) ioctl$auto_BLKDISCARDZEROES(r3, 0x127c, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/udp_early_demux\x00', 0x28802, 0x0) read$auto(0x3, 0x0, 0x80) r4 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim0/ports/3/pp_hold\x00', 0xc0b02, 0x0) write$auto(r4, 0x0, 0xc70) pread64$auto(r2, 0x0, 0x7ff, 0x400) r5 = socket(0x1a, 0x1, 0x0) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) mmap$auto(0x0, 0x5810, 0xffb, 0x8000000008011, 0x3, 0x0) sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(r5, 0x0, 0x41) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r1, 0x0, 0x20000000) write$auto(r6, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) 7.339577334s ago: executing program 1 (id=1324): bpf$auto_BPF_TOKEN_CREATE(0x24, &(0x7f0000000040)=@bpf_attr_7={@link_id, 0x764, 0x8, 0xffffffffffffffff}, 0x1) mmap$auto(0x0, 0x20006, 0x0, 0xeb1, r0, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, 0x0, 0x6f4) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sg0\x00', 0x8402, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xe, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0xffffffffffffffff, 0x65, 0xa2, 0x1000, 0x6d3e, 0x9, 0x2, 0x46d]}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r4, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c020000", @ANYRES16=r5, @ANYBLOB="01822cbd7000ffdbdf250200000004000180340201802d0239801b02eb804540411dc202cca7c300098de4cfac1203a8319dc7b96f0e2a79334de3be28009e292ede89fa0308009cc5000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00\b\x00-\x00', @ANYRES32, @ANYBLOB="5ecb8698ec000000"], 0x24c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000048) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x5}, @NL80211_ATTR_HE_BSS_COLOR={0xc, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x1) 6.163731305s ago: executing program 1 (id=1327): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) r0 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000001080)=0xffffffff) sigaltstack$auto(&(0x7f0000000180)={0x0, 0x80000001, 0x40b4}, 0x0) sigaltstack$auto(&(0x7f0000000080)={0x0, 0x2, 0x4}, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = semctl$auto(0x2, 0x9, 0x939, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r2 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), r2) shmctl$auto(0x10001, 0x4, &(0x7f0000000480)={{0x6, 0xffffffffffffffff, 0xffffffffffffffff, 0xf8fc, 0x4, 0xc09, 0x5}, 0xe4, 0x1, 0xe1e, 0x9, @raw=0x400, @raw=0x3, 0x3, 0x0, &(0x7f0000000200)="6f6277bf811573f531bb51b2ff5a87aa05b8dee4f49ce63eee1ba1a11b14d0ee845b65c7b916de3114dce5e311d6d2cd494cebddf15dd8ff6cc4707bc800b25097fe03e13fcd771071e44125038707ec9f303188628dfa5d40bfdaa65a502d0aeddc96f2c5e2e5b85007416fbca0f9e1f06d2aa8591145642558520f29ea05c8ee531de6a0fc233a110fef17f8064b36e988915c93ee2c0bc90beee09eaa42133f27266bc220eaf5fe6eac4061bd5a2d9f26514c5732e6923a0b94b655fc23adf2f9fdd4a5bf5974b6db2aa1b6b7a18c3ac58159960413ee4f87d66f0d91d0bf712bf8f26d", &(0x7f0000000300)="dcef39efb21c28e4d6e01d609f7c18d028de082915ef21b875c78738a1d418b18e494ae636c52aabaf8911dab139b0d3729facd811271f5cfa18422831733ac277cb707350829a51710f3de8ad0fab1556100690905e46f8d516e148b66921ea53076455fea50d68f92951a5f1495c1313e14adada3ced6291af604e64a3aea7c717db48a7fe9dde2d08b1e4f2dbd010ea5796ff254666f8240e650a1bfcf87e9cc99123def33220df5b0d806d8cfb5462923306e9c2d799472af56a175f5951bda20324e12e86ab2371627394fd8e72ebbcab40d3a7a217f11a1a4c5d5bfc5bab"}) msgctl$auto_MSG_STAT(0x44c, 0xb, &(0x7f0000000540)={{0xffffffff, 0xee01, 0x0, 0x6, 0x5, 0x8, 0x6}, &(0x7f00000000c0)=0x5, &(0x7f0000000500)=0x3, 0x440, 0x2, 0xe, 0x80, 0x80000000, 0xf, 0x3, 0x8, @raw=0x6, @raw=0x5}) r4 = setfsuid$auto(0xee00) setresuid$auto(r4, 0x0, r4) sendmsg$auto_TIPC_NL_BEARER_GET(r3, 0x0, 0x80) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone3(&(0x7f0000000400)={0x1045100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) read$auto(r5, 0x0, 0x39b8) sendfile$auto(r5, 0xffffffffffffffff, &(0x7f00000001c0)=0x3, 0xa) close_range$auto(0x2, 0x8, 0x0) fcntl$auto(r0, 0x5, r1) 5.943658512s ago: executing program 2 (id=1329): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(&(0x7f0000000200)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) ioctl$auto(0x3, 0x5420, 0x38) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x8000, 0x0) ioctl$auto_EVIOCGEFFECTS(r0, 0x80044584, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) ioctl$auto(0x3, 0x402c542c, 0x38) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/ext4/sda1/err_ratelimit_burst\x00', 0x103841, 0x0) write$auto(r1, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) ioctl$auto(0x3, 0x402c542b, 0x38) readv$auto(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x10003}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x0, 0x0, 0x2, 0x2) madvise$auto(0x110c230000, 0x1, 0x9) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/irq/8/affinity_hint\x00', 0x47100, 0x0) futex$auto(0x0, 0xc, 0xffffffff, 0x0, 0x0, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0xa, 0x2, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) fanotify_init$auto(0x82, 0x10001) setsockopt$auto(r2, 0x29, 0x30, 0x0, 0x56b) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 5.764667948s ago: executing program 3 (id=1330): statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0xb267, 0x759, 0x5, 0x7181, 0x1ffde, 0x7, 0xfffffffffffffffa, 0x8, 0x9, 0x80003, 0x4, 0x200000000005, 0x384, 0x9, 0xb10, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x3, 0x0, 0x0, [0x0, 0x7, 0x0, 0x25c3, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x40000000000004ac, 0x100000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x196fc46e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000000000, 0x1, 0x0, 0x101, 0x0, 0x0, 0xfffffffffffffffd]}, 0x1fa, 0xd) r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000000), 0x28002, 0x0) r1 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r1, 0x65, 0x3, 0x0, 0x5) ioctl$auto__ctl_fops_dm_ioctl(r0, 0xfffffff7effffd05, &(0x7f00000001c0)) 5.701789928s ago: executing program 4 (id=1331): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x1, 0x0, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1) close_range$auto(0x2, 0x8000, 0x0) socket(0xa, 0x2, 0x88) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000003fc0)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20a02, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xbff) 5.440773762s ago: executing program 3 (id=1332): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x1401, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) mmap$auto(0x0, 0xe983, 0xa3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) socket(0x2, 0x801, 0x106) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x2, 0x0) socketpair$auto(0x1a, 0x9, 0x8000000000000000, 0x0) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtd0ro\x00', 0x0, 0x0) ioctl$auto_BLKPG2(r0, 0x1269, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) landlock_restrict_self$auto(0xffffffffffffffff, 0x1) 5.383734831s ago: executing program 4 (id=1333): close_range$auto(0x2, 0x8, 0x0) shmget$auto(0x400, 0x10563, 0x568c12f2) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae44, 0x10000000000402) r1 = socket(0xa, 0x5, 0x84) openat2$auto(0xffffffffffffff9c, 0x0, 0x0, 0xf6) getsockopt$auto(r1, 0x84, 0x1f, 0x0, &(0x7f0000000080)=0x3) 4.97430676s ago: executing program 4 (id=1334): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2f212dbd7000fcdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="08009e"], 0x24}}, 0x4000000) 4.677392844s ago: executing program 4 (id=1335): bpf$auto_BPF_TOKEN_CREATE(0x24, &(0x7f0000000040)=@bpf_attr_7={@link_id, 0x764, 0x8, 0xffffffffffffffff}, 0x1) mmap$auto(0x0, 0x20006, 0x0, 0xeb1, r0, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, 0x0, 0x6f4) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sg0\x00', 0x8402, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xe, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0xffffffffffffffff, 0x65, 0xa2, 0x1000, 0x6d3e, 0x9, 0x2, 0x46d]}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r4, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c020000", @ANYRES16=r5, @ANYBLOB="01822cbd7000ffdbdf250200000004000180340201802d0239801b02eb804540411dc202cca7c300098de4cfac1203a8319dc7b96f0e2a79334de3be28009e292ede89fa0308009cc5000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00\b\x00-\x00', @ANYRES32, @ANYBLOB="5ecb8698ec000000"], 0x24c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000048) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x5}, @NL80211_ATTR_HE_BSS_COLOR={0xc, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x1) 4.074131046s ago: executing program 3 (id=1336): r0 = openat$auto_severities_coverage_fops_severity(0xffffffffffffff9c, &(0x7f0000000000), 0x121380, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x2, 0x6, 0x104) getsockopt$auto(r1, 0x29, 0x4e, 0x0, 0x0) pread64$auto(r0, &(0x7f0000000040)='\'[\x00', 0x401, 0x2000000000000ff) 3.533249798s ago: executing program 4 (id=1337): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) pwrite64$auto(r0, 0x0, 0x6bc, 0x5) sysfs$auto(0x1003, 0x401, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000000), 0xffffffffffffffff) unshare$auto(0x40000080) socket(0x1, 0x5, 0x100) mmap$auto(0x0, 0xdf33, 0xe2, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x1) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5) ioctl$auto(r1, 0x4008af04, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x1ff, 0xdf, 0x200000810, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS0\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r2, 0x5437, 0x0) madvise$auto(0x0, 0x200007, 0x19) write$auto(0x3, 0x0, 0x100082) madvise$auto(0x0, 0x200007, 0x19) socket(0x29, 0x3, 0x3) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/rdma_readwrite_threshold\x00', 0x240, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)=""/152, 0x98) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000001080)='/dev/v4l-touch5\x00', 0x2040, 0x0) openat$auto_objects_fops_(0xffffffffffffff9c, 0x0, 0x802, 0x0) read$auto_v4l2_fops_v4l2_dev(r4, &(0x7f00000010c0)=""/22, 0x16) 3.376294476s ago: executing program 3 (id=1338): openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x1a, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/modules\x00', 0x88400, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0xa, 0x100) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001bc0)='/dev/sequencer2\x00', 0x40201, 0x0) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffdc, 0x7, 0x3, 0x3, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0xfff, 0x0, 0xe, 0x22002, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000]}, 0x1fa, 0xd) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000010c0), 0x2082, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffff7effffd06, &(0x7f00000001c0)) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/vulnerabilities/tsx_async_abort\x00', 0x8100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000000c0)=""/4096, 0x1000) io_uring_setup$auto(0x6, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) fcntl$auto(r3, 0x402, 0xffffffffffffffff) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video24\x00', 0x802, 0x0) write$auto(r4, &(0x7f0000000340)='%]{Z', 0x6) close_range$auto(0x2, 0xa, 0x0) socket(0x2, 0x801, 0x106) 2.740124277s ago: executing program 2 (id=1339): ioctl$auto_FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000140)="8c66381957a4f7888c094143a0c718e5e4d04a0030448293116b01bb6fe18e8345aef2917b9c680544a343ba8e006cd4f6434ab1a5e700778e9fc7ba9af47487ca1f9d52939c66c96da4ce5a4f25feef3efd5b8c7733") 2.399634572s ago: executing program 2 (id=1340): r0 = fcntl$auto_F_WRLCK(0xffffffffffffffff, 0x9, 0x1) mmap$auto(0xee6e, 0x100420009, 0x4000000000db, 0xebe, r0, 0x8002) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bdi/1:5/min_bytes\x00', 0x88282, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r2 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x401, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r2, 0x84, 0x1, 0x0, 0x0) r3 = io_uring_setup$auto(0x48, 0x0) io_uring_register$auto_IORING_REGISTER_CLONE_BUFFERS(r3, 0x1e, &(0x7f0000000000), 0x61c) r4 = socket(0xa, 0x3, 0x73) setsockopt$auto(r4, 0xff, 0x7, 0x0, 0xfff) write$auto_rfkill_fops_core(r1, &(0x7f0000000100)="399a8cbdf020c6815d893e42ae9617d9226d1578f6e49c790ea810783e9815957fe5ae48b8c4823f66c6c9ca03e283c9288de04b923f2d698d5e55f8a7a6bcfbbd70b167e7270bbeada0a3142edf291cfb21665994c93c7b9121a4b06c806ed66d68a437d93d76924ea8d72ba1e9302ef1c67e156f4094c5bcca2577138e2dc7231f0b667e04766cfab259cf7b181ad5f211571dad41c30f56cbf7a0451c1a328709036376ea64306da4491fa7fddc709c13cba282a38fd8c6629c3f8a6cd195eae9ded4a77285e80be4369f35993080da0dbe3bc728fcab322482bc0fffe01804b72e6bdfe07acc75b20c", 0xeb) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_tw_reuse\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) 1.701262488s ago: executing program 2 (id=1341): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r0) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="810b25bd7080fbdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) recvmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x700, 0x0, 0x2, 0x6}, 0x803}, 0x10a, 0x6, 0x0) 1.262803584s ago: executing program 2 (id=1342): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r0) ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, &(0x7f0000000300)={0x8, 0x4, 0x2, 0x9, 0x673, 0xffffffffffffffff}) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000006c0)={0x324, r1, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_RULES={0x308, 0x22, 0x0, 0x1, [@generic="b77e97e9681e8664ec82a1d1d5b90b6d1adfe7f191fd89bb2bc8046a498a2acd24265b27d55a1d8d63f76f49a9351fd343d6fe0c6eb3037f62a21eb869fa4a94e56bbe34c8ad6d612da69f7ac07c21d5e90d75378c540d03f0182137a85de17b180245fb62586404a7ea25bcbe72a929a65ab6fbd81aac45b3ad8deb23b4b41e964d6b8ecd334b79ac824cedb5", @generic="d77e948f8137218d8592c387efbe6969a1b7e614f16744003e229540770fe717cf3c571e36a7cd9471822df0159d2d8d0e09b15e4ec97d637ff9a67b09ef8513920e168772894b34279dbb679440acf897284c9ddd5822", @nested={0x218, 0xaf, 0x0, 0x1, [@generic="884c679aa5c60388604110ef6131b08cb5795bd069", @generic="f837d9d75913864bf5626e02eb6057fee9e9dd2622949d18cb8238a0c51842257361811f3a7d351b4dc18a97051b7c40bcc8ca8dd4be91adfaa1487a95c292dec294775f52044154a57128632582a3e8ef927262998b61866c4ad39c9c16207c1ccb01c88f2f379877827476d6084dfc98cbd528ccc6651af45a89669572646981680712ab6f49923321d6de9eef00abbb2a7b0c540aa3e5abb867fda5a75d303e5fca419810e63cf7bdff83457fd736deca856df66ce8e556eafc12eddc0350e6dfbaad9b8f4341bc06a92767e1fceff45688fe253138fed6eab1af59fbf95f995a09633c04c6", @typed={0xf, 0x139, 0x0, 0x0, @str='/dev/tty46\x00'}, @nested={0x4, 0xb5}, @generic="4aee2fe9ae063e170f5acf2a7809f78d24a2414041cc10f5dfc29d57a832b65e40d4d787e5cf61e3336c97b9e496d3dd4236ead3b77983d543a1ec87d5ed928946543ce9decf449f36643930330b20c18aa7c4ed0a83d83e0e8fafc8120545b9c54b7ecfb46a4877fe475c57c8de24e666562b95b35692c04ddd92033900bd464201f5fb0f9d6326620d8de6f7158221eb6352a691db08c7fbcf4440cc959f267ca79de23d17191c370c750096bf7e68e6bcabbcb1132c375a156487ed6afdf29c3c2e969cc69fe02f05a858a089913c0a946ecb32ddafcf8a39f4a1146449dca965b956fdafcd8d5721d33ddf8dbce6881873ccdebcaddc", @nested={0x4, 0x3}, @typed={0x8, 0x2e, 0x0, 0x0, @pid=r2}]}, @typed={0x6, 0x123, 0x0, 0x0, @binary="d03c"}]}, @NL80211_ATTR_SAE_PWE={0x5, 0x12a, 0x7}]}, 0x324}, 0x1, 0x0, 0x0, 0x20008015}, 0x4008015) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="810b25bd7080fbdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) r3 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/devices\x00', 0x600, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) pipe2$auto(&(0x7f0000000200)=r4, 0xcbf3) ioctl$auto_SNDRV_TIMER_IOCTL_CONTINUE_OLD(r5, 0x5422, &(0x7f0000000240)="b632b3544ad99d64986ffaaf0df536ac256bc7d32a3dcfafc437fc9fa1cefb57ce2f269570186dff71d19ccbbbdbb206addbb6117068fa5d47776fe9ad1efa4dd58e8b5ae1745a0e278ea52c6a6769e8b98aaae9602e54bdd15f5f56eafa61c23a") readv$auto(0x3, 0x0, 0x1) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) madvise$auto(0x110c230000, 0x1, 0x9) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x28c000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xe0, 0xeb1, 0xffffffffffffffff, 0x4) readv$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=@bpf_attr_3={0x6, 0x9, 0xc000000000, 0xa, 0x5, 0x9, 0x3, 0x3b, 0x4, "87ea8b37db38f77495e94538a62635ba", 0x0, 0x0, r6, 0x8, 0x2, 0x8, 0x0, 0x4, 0xc2, 0xd, @attach_prog_fd=0xffffffffffffffff, 0x0, 0x47, 0x4, 0x7ff, 0x4, r7, r3}, 0xfffffffd) preadv$auto(r3, &(0x7f0000000080)={0x0}, 0x6, 0x22, 0xffc) syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000540), r8) recvmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x6}, 0x803}, 0x10a, 0x6, 0x0) 1.137320468s ago: executing program 4 (id=1343): madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) epoll_create$auto(0x2) 435.18908ms ago: executing program 3 (id=1344): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mq_open$auto(&(0x7f0000000000)='P\x02\xb9\xd5\x02r\xbc\xd0\t^\xc0!\x7f\xc0\xdd8\xb0\x80\xfa;\x97\x05n\xf4~Z\x05\xf1\xef\xd1\xf1\b\xd9J\x9bp\xdf\xe7\xcd\x1f\x84-\xbb\x05\xa5\xb8\xfc\xf7v<)\xddR\x02\xd8\r_\x03\xe7\x8eWta\xfa\xbd\xaf\x06kG\xf7\xaa6\x1ch\vmD\xfc|v\xd4Q', 0xfe, 0x9, 0x0) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x1a1000, 0x0) r0 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x8001c01, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x7}, 0x3d55, 0x0) r1 = socket(0x18, 0x2, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x1c9180, 0x0) read$auto_tracing_stats_fops_trace(r2, &(0x7f0000000000)=""/43, 0xfedf) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x3, 0x3}) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) io_cancel$auto(0x6, 0x0, 0x0) sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, 0x0, 0x4, 0x0, 0x5, 0x1000}, 0x5}, 0x2, 0x100) 30.756543ms ago: executing program 3 (id=1345): madvise$auto(0xffffffffffffffff, 0x2000000004, 0x1) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810005, 0xffb, 0x8000000008011, r0, 0x8000) preadv2$auto(r0, 0x0, 0x6, 0x7fff, 0x6, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(0x0, 0x5, 0x0, 0x5) semget$auto(0xb, 0xe, 0xe0000) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x2, 0x9, 0x8000, 0xe238, 0x602, 0x5) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x62040, 0x0) rseq$auto(0x0, 0x6, 0x3, 0xff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x103001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40) clock_gettime$auto(0xa, 0x0) recvmmsg$auto(r1, &(0x7f0000000180)={{0x0, 0x1, &(0x7f00000000c0)={&(0x7f0000000340), 0xfff}, 0x6, 0x0, 0x8, 0x7}, 0x7}, 0x5, 0x66a6, 0x0) mmap$auto(0x1, 0x40009, 0xdf, 0x13, r1, 0x10001) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = openat$auto_proc_page_owner_threshold_(0xffffffffffffff9c, &(0x7f0000000000), 0x109280, 0x0) read$auto(r3, &(0x7f0000000100)='\xcb%)\x00', 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, 0x0, 0x0) close_range$auto(r0, r1, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182302, 0x0) sendfile$auto(r4, r4, 0x0, 0x3) 0s ago: executing program 1 (id=1346): r0 = socket(0x28, 0x805, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x6) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000340), r1) r2 = mq_open$auto(0x0, 0x83, 0x7, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)={0x38, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x1020}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x7e, 0x0, 0x1, [@typed={0x4, 0xbd, 0x0, 0x0, @binary}, @nested={0x4, 0x9a}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) sendmsg$auto_NBD_CMD_STATUS(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x14, r4, 0x200, 0x70bd28, 0x25dfdbfe}, 0x14}}, 0x14) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xb, 0xb5, 0x10, 0x4, 0x53000000, r2, 0x9, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x9, 0x2, 0x4f4, 0x5}, 0x10) write$auto_force_suspend_fops_hci_vhci(r2, &(0x7f00000000c0)="5dbb6290051824b2226a694ad55608e2f47be96c78daba360ec46a3d4a7f2a4923dcbb9f7cc83345f6b599f871f101549c5c1f958cf90ae9ccab957d108720b883d38d58c9ae3057608be7e5a486712a66bdf5f67dfafeef15a6ba1394572d076382663dc78bd1763df2d70e0ad72d60b9448140edffc3cfbbfabbd8f19f380de51d763398602328dd", 0x89) keyctl$auto(0x3, 0xfffffffffffffffd, 0x0, 0xee01, 0xa00002) unshare$auto(0x40000080) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x01\x00\xb6', 0x7f) socket(0xa, 0x5, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x24000, 0x0) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @rand_addr=0x64010100}, 0x1c) sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @rand_addr=0x64010100}, 0x1c) bind$auto(r0, &(0x7f0000000080)=@in={0x28, 0x0, @rand_addr=0xffffffff}, 0x68) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.124' (ED25519) to the list of known hosts. [ 97.538293][ T5817] cgroup: Unknown subsys name 'net' [ 97.661474][ T5817] cgroup: Unknown subsys name 'cpuset' [ 97.671133][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 99.638772][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 102.216432][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 102.225545][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 102.234218][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 102.242702][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 102.251802][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 102.260607][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 102.271344][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 102.285849][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.294467][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 102.302485][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 102.303361][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.317850][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 102.318273][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 102.334426][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.334801][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 102.343153][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.349058][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 102.350316][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 102.372189][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 102.372283][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.410263][ T938] cfg80211: failed to load regulatory.db [ 103.053097][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 103.085773][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 103.222617][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 103.247768][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 103.349634][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.357947][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.365328][ T5826] bridge_slave_0: entered allmulticast mode [ 103.373600][ T5826] bridge_slave_0: entered promiscuous mode [ 103.430074][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.437514][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.445092][ T5826] bridge_slave_1: entered allmulticast mode [ 103.452579][ T5826] bridge_slave_1: entered promiscuous mode [ 103.478822][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.486128][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.493575][ T5827] bridge_slave_0: entered allmulticast mode [ 103.501866][ T5827] bridge_slave_0: entered promiscuous mode [ 103.512491][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.520141][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.528994][ T5827] bridge_slave_1: entered allmulticast mode [ 103.536526][ T5827] bridge_slave_1: entered promiscuous mode [ 103.624167][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.631768][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.639313][ T5830] bridge_slave_0: entered allmulticast mode [ 103.647064][ T5830] bridge_slave_0: entered promiscuous mode [ 103.672450][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.685018][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.722539][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.730295][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.737605][ T5830] bridge_slave_1: entered allmulticast mode [ 103.745022][ T5830] bridge_slave_1: entered promiscuous mode [ 103.754963][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.767568][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.777233][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.784373][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.791851][ T5828] bridge_slave_0: entered allmulticast mode [ 103.799469][ T5828] bridge_slave_0: entered promiscuous mode [ 103.849493][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.856742][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.863913][ T5828] bridge_slave_1: entered allmulticast mode [ 103.871721][ T5828] bridge_slave_1: entered promiscuous mode [ 103.935239][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.949605][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.961165][ T5826] team0: Port device team_slave_0 added [ 103.969490][ T5827] team0: Port device team_slave_0 added [ 104.003634][ T5826] team0: Port device team_slave_1 added [ 104.011766][ T5827] team0: Port device team_slave_1 added [ 104.021017][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.074384][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.085515][ T5830] team0: Port device team_slave_0 added [ 104.135580][ T5830] team0: Port device team_slave_1 added [ 104.142845][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.150485][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.177094][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.190315][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.197543][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.223664][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.268129][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.275142][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.301499][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.322776][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.331135][ T5840] Bluetooth: hci1: command tx timeout [ 104.337640][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.365328][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.378900][ T5828] team0: Port device team_slave_0 added [ 104.400475][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.408239][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.416114][ T5840] Bluetooth: hci2: command tx timeout [ 104.434279][ T5838] Bluetooth: hci0: command tx timeout [ 104.440500][ T5842] Bluetooth: hci3: command tx timeout [ 104.446468][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.471707][ T5828] team0: Port device team_slave_1 added [ 104.479379][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.486664][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.512702][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.618191][ T5826] hsr_slave_0: entered promiscuous mode [ 104.624823][ T5826] hsr_slave_1: entered promiscuous mode [ 104.634552][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.642297][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.668999][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.723426][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.730726][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.756890][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.773975][ T5827] hsr_slave_0: entered promiscuous mode [ 104.780694][ T5827] hsr_slave_1: entered promiscuous mode [ 104.787138][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 104.792981][ T5827] Cannot create hsr debugfs directory [ 104.820094][ T5830] hsr_slave_0: entered promiscuous mode [ 104.827099][ T5830] hsr_slave_1: entered promiscuous mode [ 104.833318][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 104.839366][ T5830] Cannot create hsr debugfs directory [ 104.978119][ T5828] hsr_slave_0: entered promiscuous mode [ 104.984614][ T5828] hsr_slave_1: entered promiscuous mode [ 104.990984][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 104.996802][ T5828] Cannot create hsr debugfs directory [ 105.423053][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.437863][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.450190][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.471782][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.530800][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.548966][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.569078][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.593021][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.674400][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.704892][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.717307][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.729817][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.857165][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.871390][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.883191][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.897358][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.934800][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.983533][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.011552][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.018898][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.065188][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.072401][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.110499][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.170077][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.191003][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.198378][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.238777][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.246047][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.260289][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.361210][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.374828][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.402911][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.407928][ T5840] Bluetooth: hci1: command tx timeout [ 106.410334][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.465066][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.472298][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.487393][ T5840] Bluetooth: hci2: command tx timeout [ 106.492913][ T5840] Bluetooth: hci3: command tx timeout [ 106.500311][ T5842] Bluetooth: hci0: command tx timeout [ 106.503515][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.552244][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.559488][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.611500][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.618763][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.826452][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.990745][ T5826] veth0_vlan: entered promiscuous mode [ 107.022157][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.049853][ T5826] veth1_vlan: entered promiscuous mode [ 107.197794][ T5826] veth0_macvtap: entered promiscuous mode [ 107.247580][ T5826] veth1_macvtap: entered promiscuous mode [ 107.261502][ T5827] veth0_vlan: entered promiscuous mode [ 107.295199][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.310960][ T5827] veth1_vlan: entered promiscuous mode [ 107.329612][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.342986][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.361902][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.403502][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.413400][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.433496][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.442683][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.508367][ T5827] veth0_macvtap: entered promiscuous mode [ 107.539131][ T5830] veth0_vlan: entered promiscuous mode [ 107.550359][ T5827] veth1_macvtap: entered promiscuous mode [ 107.599661][ T5830] veth1_vlan: entered promiscuous mode [ 107.632990][ T5828] veth0_vlan: entered promiscuous mode [ 107.644869][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.664792][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.681614][ T5828] veth1_vlan: entered promiscuous mode [ 107.697134][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.737053][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.769106][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.780871][ T5830] veth0_macvtap: entered promiscuous mode [ 107.786923][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.789449][ T1155] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.822349][ T1155] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.833514][ T1155] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.844663][ T5830] veth1_macvtap: entered promiscuous mode [ 107.870639][ T1155] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.898430][ T5828] veth0_macvtap: entered promiscuous mode [ 107.915082][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 107.944513][ T5828] veth1_macvtap: entered promiscuous mode [ 108.009653][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.104757][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.115421][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.122848][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.139496][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.158810][ T5922] ptp ptp0: only physical clock in use now [ 108.182341][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.209877][ T1155] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.219995][ T1155] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.233828][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.242593][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.257455][ T1155] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.269284][ T1155] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.307369][ T1155] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.336780][ T1155] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.355528][ T1155] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.364794][ T1155] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.486755][ T5840] Bluetooth: hci1: command tx timeout [ 108.566959][ T5842] Bluetooth: hci3: command tx timeout [ 108.572492][ T5838] Bluetooth: hci0: command tx timeout [ 108.578625][ T5840] Bluetooth: hci2: command tx timeout [ 108.621555][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.621600][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.685437][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.697947][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.729335][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.745380][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.914927][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.925074][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.958876][ T5932] ptp ptp0: only physical clock in use now [ 109.306107][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 109.716114][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 109.724742][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 110.037014][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.306583][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.315497][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.566866][ T5840] Bluetooth: hci1: command tx timeout [ 110.647816][ T5840] Bluetooth: hci2: command tx timeout [ 110.653395][ T5842] Bluetooth: hci3: command tx timeout [ 110.660143][ T5838] Bluetooth: hci0: command tx timeout [ 110.665383][ T5955] Zero length message leads to an empty skb [ 110.786532][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.355111][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 111.426345][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.607644][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 112.026044][ T5985] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.372960][ T5993] ptp ptp0: only physical clock in use now [ 112.906174][ T6005] ptp ptp0: only physical clock in use now [ 113.470493][ T6016] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 114.162631][ T5840] block nbd0: Receive control failed (result -107) [ 114.265079][ T6007] random: crng reseeded on system resumption [ 114.682698][ T6040] capability: warning: `syz.0.22' uses 32-bit capabilities (legacy support in use) [ 118.055718][ T6093] can0: slcan on ttyS2. [ 118.736258][ T6116] ptp ptp0: only physical clock in use now [ 118.817903][ T6092] can0 (unregistered): slcan off ttyS2. [ 119.417428][ T6130] ptp ptp0: only physical clock in use now [ 120.746591][ T6134] sp0: Synchronizing with TNC [ 122.366568][ T6197] random: crng reseeded on system resumption syzkaller syzkaller login: [ 123.788239][ T6220] ptp ptp0: only physical clock in use now [ 126.589601][ T6266] ptp ptp0: only physical clock in use now [ 133.514645][ T6357] FAULT_INJECTION: forcing a failure. [ 133.514645][ T6357] name failslab, interval 1, probability 0, space 0, times 1 [ 133.527489][ T6357] CPU: 1 UID: 0 PID: 6357 Comm: syz.2.79 Not tainted syzkaller #0 PREEMPT(full) [ 133.527528][ T6357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 133.527552][ T6357] Call Trace: [ 133.527563][ T6357] [ 133.527575][ T6357] dump_stack_lvl+0x16c/0x1f0 [ 133.527624][ T6357] should_fail_ex+0x512/0x640 [ 133.527665][ T6357] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 133.527711][ T6357] should_failslab+0xc2/0x120 [ 133.527756][ T6357] __kvmalloc_node_noprof+0x141/0x9c0 [ 133.527796][ T6357] ? __fget_files+0x204/0x3c0 [ 133.527830][ T6357] ? do_getxattr+0xad/0x360 [ 133.527869][ T6357] ? do_getxattr+0xad/0x360 [ 133.527902][ T6357] do_getxattr+0xad/0x360 [ 133.527938][ T6357] path_getxattrat+0x25d/0x2d0 [ 133.527976][ T6357] ? __pfx_path_getxattrat+0x10/0x10 [ 133.528019][ T6357] ? __pfx___schedule+0x10/0x10 [ 133.528106][ T6357] do_syscall_64+0xcd/0xfa0 [ 133.528150][ T6357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.528184][ T6357] RIP: 0033:0x7fd17178eec9 [ 133.528223][ T6357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.528255][ T6357] RSP: 002b:00007fd172667038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c1 [ 133.528287][ T6357] RAX: ffffffffffffffda RBX: 00007fd1719e6090 RCX: 00007fd17178eec9 [ 133.528309][ T6357] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007 [ 133.528329][ T6357] RBP: 00007fd171811f91 R08: 0000000000000000 R09: 0000000000000000 [ 133.528350][ T6357] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 133.528370][ T6357] R13: 00007fd1719e6128 R14: 00007fd1719e6090 R15: 00007ffdec6b7728 [ 133.528416][ T6357] [ 133.790253][ T6351] HfR: entered promiscuous mode [ 134.138046][ T5840] block nbd1: Receive control failed (result -107) [ 134.740773][ T6383] ptp ptp0: only physical clock in use now [ 135.380806][ T6389] sp0: Synchronizing with TNC [ 135.764442][ T6404] can0: slcan on ttyS2. [ 136.367313][ T6397] can0 (unregistered): slcan off ttyS2. [ 136.838420][ T5840] block nbd2: Receive control failed (result -107) [ 137.113464][ T6426] capability: warning: `syz.2.93' uses deprecated v2 capabilities in a way that may be insecure [ 138.042320][ T6460] netlink: 28 bytes leftover after parsing attributes in process `syz.1.99'. [ 138.051700][ T6460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.060111][ T6460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.132185][ T6460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.155088][ T6460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.522267][ T6468] FAULT_INJECTION: forcing a failure. [ 138.522267][ T6468] name failslab, interval 1, probability 0, space 0, times 0 [ 138.558910][ T6468] CPU: 1 UID: 0 PID: 6468 Comm: syz.2.101 Not tainted syzkaller #0 PREEMPT(full) [ 138.558950][ T6468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 138.558969][ T6468] Call Trace: [ 138.558979][ T6468] [ 138.558990][ T6468] dump_stack_lvl+0x16c/0x1f0 [ 138.559030][ T6468] should_fail_ex+0x512/0x640 [ 138.559069][ T6468] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 138.559106][ T6468] should_failslab+0xc2/0x120 [ 138.559149][ T6468] kmem_cache_alloc_noprof+0x75/0x6e0 [ 138.559181][ T6468] ? __pmd_alloc+0xbf/0x8b0 [ 138.559232][ T6468] ? __pmd_alloc+0xbf/0x8b0 [ 138.559273][ T6468] __pmd_alloc+0xbf/0x8b0 [ 138.559320][ T6468] __handle_mm_fault+0xada/0x2aa0 [ 138.559375][ T6468] ? mt_find+0x3e2/0xa20 [ 138.559417][ T6468] ? __pfx___handle_mm_fault+0x10/0x10 [ 138.559463][ T6468] ? __pfx_mt_find+0x10/0x10 [ 138.559528][ T6468] ? find_vma+0xbf/0x140 [ 138.559563][ T6468] ? __pfx_find_vma+0x10/0x10 [ 138.559605][ T6468] handle_mm_fault+0x589/0xd10 [ 138.559654][ T6468] ? __pkru_allows_pkey+0x11/0xb0 [ 138.559715][ T6468] do_user_addr_fault+0x7a6/0x1370 [ 138.559749][ T6468] ? rcu_is_watching+0x12/0xc0 [ 138.559788][ T6468] exc_page_fault+0x64/0xc0 [ 138.559825][ T6468] asm_exc_page_fault+0x26/0x30 [ 138.559853][ T6468] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 138.559901][ T6468] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 7f 3e 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 138.559930][ T6468] RSP: 0018:ffffc90003a7fb60 EFLAGS: 00050206 [ 138.559953][ T6468] RAX: 0000000000000001 RBX: 0000000000000100 RCX: 0000000000000100 [ 138.559970][ T6468] RDX: 0000000000000000 RSI: ffffc90003a7fbc0 RDI: 0000000000000000 [ 138.559987][ T6468] RBP: 0000000000000000 R08: 0000000000000000 R09: fffff5200074ff97 [ 138.560004][ T6468] R10: ffffc90003a7fcbf R11: 0000000000000000 R12: ffffc90003a7fbc0 [ 138.560021][ T6468] R13: 0000000000000100 R14: 00007ffffffff000 R15: 0000000000000000 [ 138.560059][ T6468] _copy_to_user+0xbb/0xd0 [ 138.560104][ T6468] cp_statx+0x720/0x8e0 [ 138.560143][ T6468] ? __pfx_cp_statx+0x10/0x10 [ 138.560181][ T6468] ? do_raw_spin_lock+0x12c/0x2b0 [ 138.560262][ T6468] ? __pfx_vfs_statx+0x10/0x10 [ 138.560318][ T6468] do_statx+0x110/0x170 [ 138.560368][ T6468] ? __pfx_do_statx+0x10/0x10 [ 138.560466][ T6468] ? fput+0x9b/0xd0 [ 138.560512][ T6468] ? xfd_validate_state+0x61/0x180 [ 138.560555][ T6468] ? __pfx_ksys_write+0x10/0x10 [ 138.560594][ T6468] __x64_sys_statx+0x136/0x1e0 [ 138.560646][ T6468] do_syscall_64+0xcd/0xfa0 [ 138.560694][ T6468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.560726][ T6468] RIP: 0033:0x7fd17178eec9 [ 138.560751][ T6468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.560779][ T6468] RSP: 002b:00007fd172688038 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 138.560808][ T6468] RAX: ffffffffffffffda RBX: 00007fd1719e5fa0 RCX: 00007fd17178eec9 [ 138.560828][ T6468] RDX: 0000000000001000 RSI: 0000000000000000 RDI: 00000000ffffff9c [ 138.560847][ T6468] RBP: 00007fd171811f91 R08: 0000000000000000 R09: 0000000000000000 [ 138.560866][ T6468] R10: 0000000000000803 R11: 0000000000000246 R12: 0000000000000000 [ 138.560884][ T6468] R13: 00007fd1719e6038 R14: 00007fd1719e5fa0 R15: 00007ffdec6b7728 [ 138.560928][ T6468] [ 139.431610][ T5840] block nbd3: Receive control failed (result -107) [ 140.255600][ T6501] zswap: compressor not available [ 143.377273][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.386826][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 144.878842][ T5840] block nbd4: Receive control failed (result -107) [ 145.073139][ T6587] ptrace attach of "./syz-executor exec"[6589] was attempted by "./syz-executor exec"[6587] [ 145.977881][ T6607] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 147.628312][ T5840] block nbd5: Receive control failed (result -107) [ 149.350916][ T5840] block nbd6: Receive control failed (result -107) [ 149.823897][ T30] audit: type=1326 audit(1760194972.220:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6677 comm="syz.0.147" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0839d8eec9 code=0x0 [ 149.872175][ T6684] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 152.388807][ T5840] block nbd7: Receive control failed (result -107) [ 153.372210][ T6738] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 155.638867][ T6775] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 156.992901][ T6808] netlink: 93 bytes leftover after parsing attributes in process `syz.3.178'. [ 157.132112][ T6808] kfence: disabled [ 157.359236][ T6816] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 157.461738][ T6816] netlink: zone id is out of range [ 157.471754][ T6816] netlink: zone id is out of range [ 157.558123][ T6816] netlink: zone id is out of range [ 157.575878][ T6816] netlink: zone id is out of range [ 157.588859][ T6816] netlink: zone id is out of range [ 157.594458][ T6816] netlink: zone id is out of range [ 157.600061][ T6816] netlink: zone id is out of range [ 157.605344][ T6816] netlink: zone id is out of range [ 157.610912][ T6816] netlink: zone id is out of range [ 157.616399][ T6816] netlink: zone id is out of range [ 158.477979][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.187'. [ 158.539902][ T6837] netlink: 28 bytes leftover after parsing attributes in process `syz.0.187'. [ 158.586532][ T6837] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.860626][ T6837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.110050][ T6842] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 162.503601][ T6896] mmap: syz.1.200 (6896) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 163.378672][ T6895] sp0: Synchronizing with TNC syzkaller syzkaller login: [ 166.230262][ T5840] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 syzkaller syzkaller login: [ 166.460790][ T6959] net_ratelimit: 35 callbacks suppressed [ 166.460815][ T6959] openvswitch: netlink: IP tunnel dst address not specified [ 168.937771][ T6991] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 169.845446][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.230'. [ 169.914821][ T7002] sp0: Synchronizing with TNC [ 171.188635][ T7038] ptp ptp0: only physical clock in use now syzkaller syzkaller login: [ 171.846716][ T7054] netlink: 338 bytes leftover after parsing attributes in process `syz.2.239'. [ 171.857019][ T7054] netlink: 338 bytes leftover after parsing attributes in process `syz.2.239'. [ 171.939624][ T7056] netlink: 338 bytes leftover after parsing attributes in process `syz.2.239'. [ 172.120799][ T7066] syz.2.241 uses obsolete (PF_INET,SOCK_PACKET) [ 172.633084][ T7069] netlink: 186 bytes leftover after parsing attributes in process `syz.2.241'. [ 172.657670][ T7069] netlink: 186 bytes leftover after parsing attributes in process `syz.2.241'. [ 173.772534][ T7095] ptp ptp0: only physical clock in use now [ 175.743671][ T7128] mkiss: ax0: crc mode is auto. syzkaller syzkaller login: [ 178.794979][ T5840] block nbd8: Receive control failed (result -107) [ 178.831457][ T7189] ptp ptp0: only physical clock in use now [ 180.400624][ T7215] netlink: zone id is out of range [ 180.405982][ T7215] netlink: zone id is out of range [ 180.411113][ T7215] netlink: zone id is out of range [ 180.416976][ T7215] netlink: zone id is out of range [ 180.422329][ T7215] netlink: zone id is out of range [ 180.444195][ T7215] netlink: zone id is out of range [ 180.463854][ T7215] netlink: zone id is out of range [ 180.472978][ T7215] netlink: zone id is out of range [ 180.489568][ T7215] netlink: zone id is out of range [ 180.494928][ T7215] netlink: zone id is out of range [ 181.048853][ T5840] block nbd9: Receive control failed (result -107) [ 186.722376][ T7313] net_ratelimit: 80 callbacks suppressed [ 186.722396][ T7313] netlink: zone id is out of range [ 186.733372][ T7313] netlink: zone id is out of range [ 186.749666][ T7313] netlink: zone id is out of range [ 186.754815][ T7313] netlink: zone id is out of range [ 186.804448][ T7313] netlink: zone id is out of range [ 186.826337][ T7313] netlink: zone id is out of range [ 186.831660][ T7313] netlink: zone id is out of range [ 186.889527][ T7313] netlink: zone id is out of range [ 186.904724][ T7313] netlink: zone id is out of range [ 186.914935][ T7313] netlink: zone id is out of range [ 187.399520][ T5840] block nbd10: Receive control failed (result -107) syzkaller syzkaller login: [ 193.715148][ T7409] netlink: 5 bytes leftover after parsing attributes in process `syz.0.325'. [ 194.320427][ T5840] block nbd11: Receive control failed (result -107) [ 195.411158][ T7446] ptp ptp0: only physical clock in use now [ 196.364304][ T7456] sp0: Synchronizing with TNC [ 196.646224][ T5840] Bluetooth: hci0: unexpected event 0x36 length: 123 > 7 [ 197.278857][ T7468] netlink: 12 bytes leftover after parsing attributes in process `syz.3.339'. [ 197.509189][ T9] smpboot: CPU 1 is now offline [ 197.519440][ T9] crash hp: kexec_trylock() failed, kdump image may be inaccurate syzkaller syzkaller login: [ 197.918257][ T7469] kexec: Could not allocate control_code_buffer [ 199.456028][ T7487] sp0: Synchronizing with TNC [ 199.948102][ T7519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.349'. syzkaller syzkaller login: [ 201.417593][ T5840] block nbd12: Receive control failed (result -107) [ 204.388162][ T5840] block nbd13: Receive control failed (result -107) [ 204.811988][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.819968][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.837808][ T7599] ptp ptp0: only physical clock in use now [ 207.250049][ T7619] random: crng reseeded on system resumption [ 207.630713][ T7622] ima: policy update failed [ 207.669691][ T30] audit: type=1802 audit(1760195030.052:3): pid=7622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.377" res=0 errno=0 [ 212.539844][ T7687] ptp ptp0: only physical clock in use now syzkaller syzkaller login: syzkaller syzkaller login: [ 218.457465][ T5840] block nbd14: Receive control failed (result -107) [ 220.782602][ T7801] netlink: 16 bytes leftover after parsing attributes in process `syz.2.417'. [ 222.140250][ T5840] block nbd15: Receive control failed (result -107) [ 223.614381][ T7841] ptp ptp0: only physical clock in use now [ 224.819719][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 224.825770][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 224.832666][ T5843] Bluetooth: hci0: command 0x0406 tx timeout [ 224.838990][ T5149] Bluetooth: hci3: command 0x0406 tx timeout [ 228.424529][ T7902] ptp ptp0: only physical clock in use now [ 229.348563][ T7919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.449'. [ 230.324711][ T7936] net_ratelimit: 35 callbacks suppressed [ 230.324730][ T7936] netlink: zone id is out of range [ 230.455572][ T7936] netlink: zone id is out of range [ 230.511119][ T7936] netlink: zone id is out of range [ 230.550148][ T7936] netlink: zone id is out of range [ 230.590537][ T7936] netlink: zone id is out of range [ 230.607540][ T7936] netlink: zone id is out of range [ 230.636122][ T7936] netlink: zone id is out of range [ 230.697637][ T7936] netlink: zone id is out of range [ 230.748658][ T7936] netlink: zone id is out of range [ 230.815248][ T7936] netlink: zone id is out of range [ 230.840545][ T7933] block nbd16: Receive control failed (result -107) [ 232.891042][ T7985] process 'syz.1.465' launched ':,' with NULL argv: empty string added [ 235.459082][ T8038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.474'. [ 235.699546][ T8039] FAULT_INJECTION: forcing a failure. [ 235.699546][ T8039] name failslab, interval 1, probability 0, space 0, times 0 [ 235.785783][ T8039] CPU: 0 UID: 0 PID: 8039 Comm: syz.1.473 Not tainted syzkaller #0 PREEMPT(full) [ 235.785817][ T8039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 235.785831][ T8039] Call Trace: [ 235.785838][ T8039] [ 235.785847][ T8039] dump_stack_lvl+0x16c/0x1f0 [ 235.785884][ T8039] should_fail_ex+0x512/0x640 [ 235.785914][ T8039] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 235.785941][ T8039] should_failslab+0xc2/0x120 [ 235.785973][ T8039] kmem_cache_alloc_noprof+0x75/0x6e0 [ 235.785996][ T8039] ? __proc_create+0x2ce/0x8e0 [ 235.786037][ T8039] ? __proc_create+0x2ce/0x8e0 [ 235.786069][ T8039] __proc_create+0x2ce/0x8e0 [ 235.786104][ T8039] ? __pfx___proc_create+0x10/0x10 [ 235.786139][ T8039] ? lockdep_hardirqs_on+0x7c/0x110 [ 235.786168][ T8039] ? __mod_timer+0x8f2/0xd30 [ 235.786206][ T8039] _proc_mkdir+0xb9/0x210 [ 235.786241][ T8039] ? __pfx__proc_mkdir+0x10/0x10 [ 235.786285][ T8039] can_init_proc+0x5b/0x4d0 [ 235.786316][ T8039] can_pernet_init+0x1e4/0x370 [ 235.786345][ T8039] ? __pfx_can_pernet_init+0x10/0x10 [ 235.786370][ T8039] ops_init+0x1e2/0x5f0 [ 235.786404][ T8039] setup_net+0x100/0x390 [ 235.786433][ T8039] ? __pfx_setup_net+0x10/0x10 [ 235.786472][ T8039] ? debug_mutex_init+0x37/0x70 [ 235.786501][ T8039] copy_net_ns+0x2f8/0x690 [ 235.786536][ T8039] create_new_namespaces+0x3ea/0xa90 [ 235.786571][ T8039] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 235.786602][ T8039] ksys_unshare+0x45b/0xa40 [ 235.786635][ T8039] ? __pfx_ksys_unshare+0x10/0x10 [ 235.786669][ T8039] ? xfd_validate_state+0x61/0x180 [ 235.786712][ T8039] __x64_sys_unshare+0x31/0x40 [ 235.786743][ T8039] do_syscall_64+0xcd/0xfa0 [ 235.786772][ T8039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.786796][ T8039] RIP: 0033:0x7f4935f8eec9 [ 235.786814][ T8039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.786836][ T8039] RSP: 002b:00007f4936df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 235.786858][ T8039] RAX: ffffffffffffffda RBX: 00007f49361e6090 RCX: 00007f4935f8eec9 [ 235.786874][ T8039] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 235.786887][ T8039] RBP: 00007f4936011f91 R08: 0000000000000000 R09: 0000000000000000 [ 235.786901][ T8039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.786915][ T8039] R13: 00007f49361e6128 R14: 00007f49361e6090 R15: 00007ffe1aba29b8 [ 235.786947][ T8039] [ 236.867106][ T8039] can: failed to create /proc/net/can . CONFIG_PROC_FS missing? [ 239.501357][ T8083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.484'. [ 242.537993][ T8111] device-mapper: ioctl: Invalid ioctl structure: name , dev 400007f00010006 [ 243.260970][ T8137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.490'. [ 244.885490][ T8154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.498'. [ 246.338870][ T8177] ptp ptp0: only physical clock in use now [ 247.344951][ T8192] mkiss: ax0: crc mode is auto. [ 247.851207][ T8199] FAULT_INJECTION: forcing a failure. [ 247.851207][ T8199] name failslab, interval 1, probability 0, space 0, times 0 [ 247.928936][ T8199] CPU: 0 UID: 0 PID: 8199 Comm: syz.3.510 Not tainted syzkaller #0 PREEMPT(full) [ 247.928968][ T8199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 247.928981][ T8199] Call Trace: [ 247.928988][ T8199] [ 247.928997][ T8199] dump_stack_lvl+0x16c/0x1f0 [ 247.929028][ T8199] should_fail_ex+0x512/0x640 [ 247.929057][ T8199] ? fs_reclaim_acquire+0xae/0x150 [ 247.929091][ T8199] should_failslab+0xc2/0x120 [ 247.929121][ T8199] kmem_cache_alloc_noprof+0x75/0x6e0 [ 247.929145][ T8199] ? ima_inode_get+0x120/0x580 [ 247.929181][ T8199] ? ima_inode_get+0x120/0x580 [ 247.929210][ T8199] ima_inode_get+0x120/0x580 [ 247.929244][ T8199] process_measurement+0x585/0x23e0 [ 247.929283][ T8199] ? __lock_acquire+0x62e/0x1ce0 [ 247.929315][ T8199] ? __pfx_process_measurement+0x10/0x10 [ 247.929347][ T8199] ? __kasan_slab_alloc+0x89/0x90 [ 247.929381][ T8199] ? security_file_alloc+0x34/0x2b0 [ 247.929403][ T8199] ? alloc_empty_file+0x73/0x1e0 [ 247.929433][ T8199] ? alloc_file_pseudo+0x13a/0x230 [ 247.929472][ T8199] ? find_held_lock+0x2b/0x80 [ 247.929532][ T8199] ima_file_mmap+0x1b1/0x1d0 [ 247.929563][ T8199] ? __pfx_ima_file_mmap+0x10/0x10 [ 247.929602][ T8199] security_mmap_file+0x88c/0x990 [ 247.929625][ T8199] vm_mmap_pgoff+0xec/0x470 [ 247.929658][ T8199] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 247.929685][ T8199] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 247.929719][ T8199] ? hugetlbfs_get_inode+0x31f/0x730 [ 247.929754][ T8199] ksys_mmap_pgoff+0x1c8/0x5c0 [ 247.929788][ T8199] __x64_sys_mmap+0x125/0x190 [ 247.929827][ T8199] do_syscall_64+0xcd/0xfa0 [ 247.929855][ T8199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.929878][ T8199] RIP: 0033:0x7fc5f6b8eec9 [ 247.929896][ T8199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.929917][ T8199] RSP: 002b:00007fc5f7acc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 247.929938][ T8199] RAX: ffffffffffffffda RBX: 00007fc5f6de5fa0 RCX: 00007fc5f6b8eec9 [ 247.929953][ T8199] RDX: 0000000000009c0f RSI: 000000000000000c RDI: 0000000000000000 [ 247.929966][ T8199] RBP: 00007fc5f6c11f91 R08: 0000000000010006 R09: 0000300000000000 [ 247.929980][ T8199] R10: 0000000000044eb2 R11: 0000000000000246 R12: 0000000000000000 [ 247.929993][ T8199] R13: 00007fc5f6de6038 R14: 00007fc5f6de5fa0 R15: 00007ffe2d76ce68 [ 247.930024][ T8199] [ 248.579355][ T8194] sp0: Synchronizing with TNC [ 248.955474][ T8215] could not allocate digest TFM handle [ 249.968175][ T7933] block nbd17: Receive control failed (result -107) [ 250.084935][ T8248] net_ratelimit: 35 callbacks suppressed [ 250.084954][ T8248] netlink: zone id is out of range [ 250.167379][ T8248] netlink: zone id is out of range [ 250.228220][ T8248] netlink: zone id is out of range [ 250.282720][ T8248] netlink: zone id is out of range [ 250.323980][ T8248] netlink: zone id is out of range [ 250.364303][ T8248] netlink: zone id is out of range [ 250.398674][ T8248] netlink: zone id is out of range [ 250.472279][ T8248] netlink: zone id is out of range [ 250.534659][ T8248] netlink: zone id is out of range [ 250.583464][ T8248] netlink: zone id is out of range [ 251.718947][ T7933] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 252.339143][ T8297] ptp ptp0: only physical clock in use now [ 253.148298][ T8313] FAULT_INJECTION: forcing a failure. [ 253.148298][ T8313] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 253.213090][ T8313] CPU: 0 UID: 0 PID: 8313 Comm: syz.0.530 Not tainted syzkaller #0 PREEMPT(full) [ 253.213121][ T8313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 253.213133][ T8313] Call Trace: [ 253.213141][ T8313] [ 253.213150][ T8313] dump_stack_lvl+0x16c/0x1f0 [ 253.213180][ T8313] should_fail_ex+0x512/0x640 [ 253.213212][ T8313] _copy_from_user+0x2e/0xd0 [ 253.213242][ T8313] copy_msghdr_from_user+0x98/0x160 [ 253.213270][ T8313] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 253.213311][ T8313] ___sys_sendmsg+0xfe/0x1d0 [ 253.213338][ T8313] ? __pfx____sys_sendmsg+0x10/0x10 [ 253.213400][ T8313] __sys_sendmsg+0x16d/0x220 [ 253.213430][ T8313] ? __pfx___sys_sendmsg+0x10/0x10 [ 253.213476][ T8313] do_syscall_64+0xcd/0xfa0 [ 253.213504][ T8313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.213527][ T8313] RIP: 0033:0x7f0839d8eec9 [ 253.213544][ T8313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.213565][ T8313] RSP: 002b:00007f083abd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.213586][ T8313] RAX: ffffffffffffffda RBX: 00007f0839fe5fa0 RCX: 00007f0839d8eec9 [ 253.213600][ T8313] RDX: 0000000020000080 RSI: 0000200000002540 RDI: 0000000000000003 [ 253.213613][ T8313] RBP: 00007f083abd7090 R08: 0000000000000000 R09: 0000000000000000 [ 253.213626][ T8313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.213639][ T8313] R13: 00007f0839fe6038 R14: 00007f0839fe5fa0 R15: 00007ffc4de6f1d8 [ 253.213669][ T8313] [ 258.329710][ T8375] usb usb2: usbfs: process 8375 (syz.1.545) did not claim interface 0 before use [ 259.376147][ T8389] netlink: 'syz.1.548': attribute type 8 has an invalid length. [ 262.363147][ T8422] random: crng reseeded on system resumption [ 263.427091][ T8443] FAULT_INJECTION: forcing a failure. [ 263.427091][ T8443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.588067][ T8443] CPU: 0 UID: 0 PID: 8443 Comm: syz.2.560 Not tainted syzkaller #0 PREEMPT(full) [ 263.588098][ T8443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 263.588112][ T8443] Call Trace: [ 263.588119][ T8443] [ 263.588127][ T8443] dump_stack_lvl+0x16c/0x1f0 [ 263.588159][ T8443] should_fail_ex+0x512/0x640 [ 263.588198][ T8443] strncpy_from_user+0x3b/0x2e0 [ 263.588228][ T8443] getname_flags.part.0+0x8f/0x550 [ 263.588266][ T8443] getname_flags+0x93/0xf0 [ 263.588288][ T8443] do_sys_openat2+0xb8/0x1d0 [ 263.588322][ T8443] ? __pfx_do_sys_openat2+0x10/0x10 [ 263.588359][ T8443] ? __fget_files+0x20e/0x3c0 [ 263.588387][ T8443] __x64_sys_openat+0x174/0x210 [ 263.588422][ T8443] ? __pfx___x64_sys_openat+0x10/0x10 [ 263.588455][ T8443] ? ksys_write+0x1ac/0x250 [ 263.588490][ T8443] do_syscall_64+0xcd/0xfa0 [ 263.588519][ T8443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.588542][ T8443] RIP: 0033:0x7fd17178eec9 [ 263.588560][ T8443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.588581][ T8443] RSP: 002b:00007fd172604038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 263.588602][ T8443] RAX: ffffffffffffffda RBX: 00007fd1719e6360 RCX: 00007fd17178eec9 [ 263.588617][ T8443] RDX: 00000000000a0241 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 263.588632][ T8443] RBP: 00007fd172604090 R08: 0000000000000000 R09: 0000000000000000 [ 263.588645][ T8443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.588658][ T8443] R13: 00007fd1719e63f8 R14: 00007fd1719e6360 R15: 00007ffdec6b7728 [ 263.588689][ T8443] [ 265.316830][ T8456] QAT: Stopping all acceleration devices. [ 266.252492][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.258929][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.638759][ T8471] ptp ptp0: only physical clock in use now [ 268.557619][ T8495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.572'. [ 269.317213][ T8504] FAULT_INJECTION: forcing a failure. [ 269.317213][ T8504] name failslab, interval 1, probability 0, space 0, times 0 [ 269.411497][ T8504] CPU: 0 UID: 0 PID: 8504 Comm: syz.3.573 Not tainted syzkaller #0 PREEMPT(full) [ 269.411529][ T8504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 269.411542][ T8504] Call Trace: [ 269.411550][ T8504] [ 269.411559][ T8504] dump_stack_lvl+0x16c/0x1f0 [ 269.411590][ T8504] should_fail_ex+0x512/0x640 [ 269.411618][ T8504] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 269.411645][ T8504] should_failslab+0xc2/0x120 [ 269.411676][ T8504] kmem_cache_alloc_noprof+0x75/0x6e0 [ 269.411697][ T8504] ? __lock_acquire+0x62e/0x1ce0 [ 269.411728][ T8504] ? alloc_empty_file+0x55/0x1e0 [ 269.411766][ T8504] ? alloc_empty_file+0x55/0x1e0 [ 269.411795][ T8504] alloc_empty_file+0x55/0x1e0 [ 269.411828][ T8504] path_openat+0xda/0x2cb0 [ 269.411863][ T8504] ? __pfx_path_openat+0x10/0x10 [ 269.411896][ T8504] do_filp_open+0x20b/0x470 [ 269.411921][ T8504] ? __pfx_do_filp_open+0x10/0x10 [ 269.411968][ T8504] ? alloc_fd+0x471/0x7d0 [ 269.411999][ T8504] do_sys_openat2+0x11b/0x1d0 [ 269.412033][ T8504] ? __pfx_do_sys_openat2+0x10/0x10 [ 269.412070][ T8504] ? __fget_files+0x20e/0x3c0 [ 269.412098][ T8504] __x64_sys_openat+0x174/0x210 [ 269.412132][ T8504] ? __pfx___x64_sys_openat+0x10/0x10 [ 269.412165][ T8504] ? ksys_write+0x1ac/0x250 [ 269.412200][ T8504] do_syscall_64+0xcd/0xfa0 [ 269.412229][ T8504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.412253][ T8504] RIP: 0033:0x7fc5f6b8eec9 [ 269.412270][ T8504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.412292][ T8504] RSP: 002b:00007fc5f7a69038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 269.412314][ T8504] RAX: ffffffffffffffda RBX: 00007fc5f6de6270 RCX: 00007fc5f6b8eec9 [ 269.412328][ T8504] RDX: 00000000000a0241 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 269.412343][ T8504] RBP: 00007fc5f7a69090 R08: 0000000000000000 R09: 0000000000000000 [ 269.412356][ T8504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.412369][ T8504] R13: 00007fc5f6de6308 R14: 00007fc5f6de6270 R15: 00007ffe2d76ce68 [ 269.412400][ T8504] [ 269.623616][ C0] vkms_vblank_simulate: vblank timer overrun [ 271.391777][ T8517] netlink: 28 bytes leftover after parsing attributes in process `syz.2.577'. [ 271.837586][ T8517] team0: Port device team_slave_1 removed [ 273.142728][ T8537] FAULT_INJECTION: forcing a failure. [ 273.142728][ T8537] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.212270][ T8537] CPU: 0 UID: 0 PID: 8537 Comm: syz.3.581 Not tainted syzkaller #0 PREEMPT(full) [ 273.212301][ T8537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 273.212314][ T8537] Call Trace: [ 273.212322][ T8537] [ 273.212330][ T8537] dump_stack_lvl+0x16c/0x1f0 [ 273.212361][ T8537] should_fail_ex+0x512/0x640 [ 273.212394][ T8537] _copy_to_user+0x32/0xd0 [ 273.212427][ T8537] simple_read_from_buffer+0xcb/0x170 [ 273.212467][ T8537] proc_fail_nth_read+0x197/0x240 [ 273.212493][ T8537] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 273.212519][ T8537] ? rw_verify_area+0xcf/0x6c0 [ 273.212540][ T8537] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 273.212564][ T8537] vfs_read+0x1e1/0xcf0 [ 273.212598][ T8537] ? __pfx___mutex_lock+0x10/0x10 [ 273.212627][ T8537] ? __pfx_vfs_read+0x10/0x10 [ 273.212660][ T8537] ? __fget_files+0x20e/0x3c0 [ 273.212691][ T8537] ksys_read+0x12a/0x250 [ 273.212715][ T8537] ? __pfx_ksys_read+0x10/0x10 [ 273.212748][ T8537] do_syscall_64+0xcd/0xfa0 [ 273.212777][ T8537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.212800][ T8537] RIP: 0033:0x7fc5f6b8d8dc [ 273.212817][ T8537] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 273.212839][ T8537] RSP: 002b:00007fc5f7acc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 273.212860][ T8537] RAX: ffffffffffffffda RBX: 00007fc5f6de5fa0 RCX: 00007fc5f6b8d8dc [ 273.212875][ T8537] RDX: 000000000000000f RSI: 00007fc5f7acc0a0 RDI: 0000000000000005 [ 273.212889][ T8537] RBP: 00007fc5f7acc090 R08: 0000000000000000 R09: 0000000000000000 [ 273.212902][ T8537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.212915][ T8537] R13: 00007fc5f6de6038 R14: 00007fc5f6de5fa0 R15: 00007ffe2d76ce68 [ 273.212947][ T8537] [ 273.578860][ T8541] dlm: non-version read from control device 8 [ 273.861308][ T8549] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 273.912863][ T7933] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 273.968039][ T7933] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 274.059260][ T7933] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 274.096315][ T7933] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 274.386611][ T8557] FAULT_INJECTION: forcing a failure. [ 274.386611][ T8557] name failslab, interval 1, probability 0, space 0, times 0 [ 274.538661][ T8557] CPU: 0 UID: 0 PID: 8557 Comm: syz.2.585 Not tainted syzkaller #0 PREEMPT(full) [ 274.538690][ T8557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 274.538703][ T8557] Call Trace: [ 274.538710][ T8557] [ 274.538719][ T8557] dump_stack_lvl+0x16c/0x1f0 [ 274.538749][ T8557] should_fail_ex+0x512/0x640 [ 274.538776][ T8557] ? __kmalloc_cache_noprof+0x5f/0x780 [ 274.538815][ T8557] should_failslab+0xc2/0x120 [ 274.538845][ T8557] __kmalloc_cache_noprof+0x72/0x780 [ 274.538881][ T8557] ? alloc_pipe_info+0x10e/0x590 [ 274.538913][ T8557] ? find_held_lock+0x2b/0x80 [ 274.538938][ T8557] ? alloc_pipe_info+0x10e/0x590 [ 274.538964][ T8557] alloc_pipe_info+0x10e/0x590 [ 274.538993][ T8557] splice_direct_to_actor+0x77d/0xa30 [ 274.539033][ T8557] ? __lock_acquire+0x62e/0x1ce0 [ 274.539061][ T8557] ? __pfx_direct_splice_actor+0x10/0x10 [ 274.539084][ T8557] ? __pfx_aa_file_perm+0x10/0x10 [ 274.539108][ T8557] ? find_held_lock+0x2b/0x80 [ 274.539131][ T8557] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 274.539166][ T8557] ? get_pid_task+0xfc/0x250 [ 274.539205][ T8557] do_splice_direct+0x174/0x240 [ 274.539227][ T8557] ? __pfx_do_splice_direct+0x10/0x10 [ 274.539249][ T8557] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 274.539290][ T8557] ? rw_verify_area+0xcf/0x6c0 [ 274.539332][ T8557] do_sendfile+0xb06/0xe50 [ 274.539360][ T8557] ? __pfx_do_sendfile+0x10/0x10 [ 274.539384][ T8557] ? __fget_files+0x20e/0x3c0 [ 274.539414][ T8557] __x64_sys_sendfile64+0x1d8/0x220 [ 274.539443][ T8557] ? ksys_write+0x1ac/0x250 [ 274.539467][ T8557] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 274.539506][ T8557] do_syscall_64+0xcd/0xfa0 [ 274.539535][ T8557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.539558][ T8557] RIP: 0033:0x7fd17178eec9 [ 274.539575][ T8557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.539597][ T8557] RSP: 002b:00007fd172688038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 274.539618][ T8557] RAX: ffffffffffffffda RBX: 00007fd1719e5fa0 RCX: 00007fd17178eec9 [ 274.539633][ T8557] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 274.539646][ T8557] RBP: 00007fd172688090 R08: 0000000000000000 R09: 0000000000000000 [ 274.539660][ T8557] R10: 0000000001000200 R11: 0000000000000246 R12: 0000000000000001 [ 274.539673][ T8557] R13: 00007fd1719e6038 R14: 00007fd1719e5fa0 R15: 00007ffdec6b7728 [ 274.539707][ T8557] [ 275.476682][ T8562] netlink: 342 bytes leftover after parsing attributes in process `syz.2.586'. [ 275.546591][ T8565] netlink: 342 bytes leftover after parsing attributes in process `syz.2.586'. [ 275.626041][ T8567] net_ratelimit: 35 callbacks suppressed [ 275.626059][ T8567] netlink: zone id is out of range [ 275.670673][ T8567] netlink: zone id is out of range [ 275.720505][ T8567] netlink: zone id is out of range [ 275.725746][ T8567] netlink: zone id is out of range [ 275.762106][ T8567] netlink: zone id is out of range [ 275.810009][ T8567] netlink: zone id is out of range [ 275.820208][ T8567] netlink: zone id is out of range [ 275.866070][ T8567] netlink: zone id is out of range [ 275.908023][ T8567] netlink: zone id is out of range [ 275.923126][ T8543] chnl_net:caif_netlink_parms(): no params data found [ 275.968291][ T8567] netlink: zone id is out of range [ 276.248736][ T7933] Bluetooth: hci4: command tx timeout [ 276.736854][ T8543] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.756363][ T8582] ptp ptp0: only physical clock in use now [ 276.778274][ T8543] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.826279][ T8543] bridge_slave_0: entered allmulticast mode [ 276.835758][ T8543] bridge_slave_0: entered promiscuous mode [ 276.909336][ T8543] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.957915][ T8543] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.006999][ T8543] bridge_slave_1: entered allmulticast mode [ 277.043445][ T8543] bridge_slave_1: entered promiscuous mode [ 277.204860][ T8543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.265558][ T8543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.440694][ T8543] team0: Port device team_slave_0 added [ 277.485461][ T8543] team0: Port device team_slave_1 added [ 277.763565][ T8543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.780674][ T8543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.913350][ T8543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.994300][ T8543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.027182][ T8543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.168932][ T8543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.326423][ T7933] Bluetooth: hci4: command tx timeout [ 278.396205][ T8543] hsr_slave_0: entered promiscuous mode [ 278.456385][ T8543] hsr_slave_1: entered promiscuous mode [ 278.479075][ T8543] debugfs: 'hsr0' already exists in 'hsr' [ 278.527285][ T8543] Cannot create hsr debugfs directory [ 279.328184][ T8543] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 279.348074][ T8543] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 279.403771][ T8543] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 279.507307][ T8543] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 280.039542][ T8543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.187918][ T8543] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.269448][ T7938] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.276678][ T7938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.406571][ T7933] Bluetooth: hci4: command tx timeout [ 280.441332][ T8227] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.448535][ T8227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.674977][ T8543] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 280.761920][ T8543] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 281.886669][ T8611] sp0: Synchronizing with TNC [ 282.009052][ T8543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.489501][ T7933] Bluetooth: hci4: command tx timeout [ 282.637127][ T8611] sp0: Synchronizing with TNC [ 283.850450][ T8543] veth0_vlan: entered promiscuous mode [ 283.927649][ T8543] veth1_vlan: entered promiscuous mode [ 284.165209][ T8543] veth0_macvtap: entered promiscuous mode [ 284.234683][ T8543] veth1_macvtap: entered promiscuous mode [ 284.661145][ T8543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.802132][ T8543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.901313][ T8670] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.961044][ T8670] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.022485][ T8670] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.078711][ T8670] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 syzkaller syzkaller login: [ 285.598001][ T8649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.651601][ T8649] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.801719][ T8643] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.857522][ T8643] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 syzkaller syzkaller login: [ 289.324351][ T8723] net_ratelimit: 35 callbacks suppressed [ 289.324368][ T8723] openvswitch: netlink: Port -2134900732 exceeds max allowable 65535 [ 293.039126][ T8774] netlink: 20 bytes leftover after parsing attributes in process `syz.2.628'. [ 293.304115][ T8774] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 295.815258][ T8810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.637'. [ 296.921044][ T8833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.644'. [ 303.129540][ T8924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.665'. syzkaller syzkaller login: [ 312.398814][ T30] audit: type=1326 audit(1760195134.792:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9023 comm="syz.2.691" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd17178eec9 code=0x0 [ 312.686674][ T9038] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 312.765356][ T9038] netlink: zone id is out of range [ 312.837212][ T9038] netlink: zone id is out of range [ 312.859414][ T9038] netlink: zone id is out of range [ 312.908469][ T9038] netlink: zone id is out of range [ 312.946278][ T9038] netlink: zone id is out of range [ 312.961953][ T9038] netlink: zone id is out of range [ 312.998075][ T9038] netlink: zone id is out of range [ 313.017889][ T9038] netlink: zone id is out of range [ 313.040369][ T9038] netlink: zone id is out of range [ 313.064486][ T9038] netlink: zone id is out of range [ 315.071049][ T7933] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 315.083121][ T7933] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 315.093763][ T7933] CPU: 0 UID: 0 PID: 7933 Comm: kworker/u11:0 Not tainted syzkaller #0 PREEMPT(full) [ 315.093793][ T7933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 315.093809][ T7933] Workqueue: hci3 hci_rx_work [ 315.093839][ T7933] Call Trace: [ 315.093846][ T7933] [ 315.093855][ T7933] dump_stack_lvl+0x16c/0x1f0 [ 315.093884][ T7933] sysfs_warn_dup+0x7f/0xa0 [ 315.093913][ T7933] sysfs_create_dir_ns+0x24b/0x2b0 [ 315.093942][ T7933] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 315.093969][ T7933] ? find_held_lock+0x2b/0x80 [ 315.094000][ T7933] ? do_raw_spin_unlock+0x172/0x230 [ 315.094040][ T7933] kobject_add_internal+0x2c4/0x9b0 [ 315.094077][ T7933] kobject_add+0x16e/0x240 [ 315.094108][ T7933] ? __pfx_kobject_add+0x10/0x10 [ 315.094141][ T7933] ? do_raw_spin_unlock+0x172/0x230 [ 315.094190][ T7933] ? kobject_put+0xab/0x5a0 [ 315.094228][ T7933] device_add+0x288/0x1aa0 [ 315.094259][ T7933] ? __pfx_dev_set_name+0x10/0x10 [ 315.094292][ T7933] ? __pfx_device_add+0x10/0x10 [ 315.094323][ T7933] ? mgmt_send_event_skb+0x2fb/0x460 [ 315.094356][ T7933] hci_conn_add_sysfs+0x17e/0x230 [ 315.094386][ T7933] le_conn_complete_evt+0x1260/0x2150 [ 315.094419][ T7933] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 315.094446][ T7933] ? bt_warn+0xe4/0x120 [ 315.094466][ T7933] ? __pfx_bt_warn+0x10/0x10 [ 315.094495][ T7933] hci_le_conn_complete_evt+0x23c/0x370 [ 315.094527][ T7933] hci_le_meta_evt+0x354/0x5e0 [ 315.094553][ T7933] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 315.094583][ T7933] hci_event_packet+0x682/0x11c0 [ 315.094608][ T7933] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 315.094649][ T7933] ? __pfx_hci_event_packet+0x10/0x10 [ 315.094676][ T7933] ? kcov_remote_start+0x3c9/0x6d0 [ 315.094697][ T7933] ? lockdep_hardirqs_on+0x7c/0x110 [ 315.094730][ T7933] hci_rx_work+0x2c5/0x16b0 [ 315.094757][ T7933] ? rcu_is_watching+0x12/0xc0 [ 315.094785][ T7933] process_one_work+0x9cf/0x1b70 [ 315.094834][ T7933] ? __pfx_process_one_work+0x10/0x10 [ 315.094879][ T7933] ? assign_work+0x1a0/0x250 [ 315.094916][ T7933] worker_thread+0x6c8/0xf10 [ 315.094965][ T7933] ? __pfx_worker_thread+0x10/0x10 [ 315.095002][ T7933] kthread+0x3c2/0x780 [ 315.095035][ T7933] ? __pfx_kthread+0x10/0x10 [ 315.095071][ T7933] ? rcu_is_watching+0x12/0xc0 [ 315.095095][ T7933] ? __pfx_kthread+0x10/0x10 [ 315.095129][ T7933] ret_from_fork+0x675/0x7d0 [ 315.095168][ T7933] ? __pfx_kthread+0x10/0x10 [ 315.095202][ T7933] ret_from_fork_asm+0x1a/0x30 [ 315.095262][ T7933] [ 315.095315][ T7933] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 315.385768][ T7933] Bluetooth: hci3: failed to register connection device [ 317.231668][ T30] audit: type=1800 audit(1760195139.622:5): pid=9128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.712" name="discovery_nqn" dev="configfs" ino=24023 res=0 errno=0 [ 317.297306][ T9128] netlink: 186 bytes leftover after parsing attributes in process `syz.4.712'. [ 321.128294][ T9175] FAULT_INJECTION: forcing a failure. [ 321.128294][ T9175] name failslab, interval 1, probability 0, space 0, times 0 [ 321.196416][ T9175] CPU: 0 UID: 0 PID: 9175 Comm: syz.4.725 Not tainted syzkaller #0 PREEMPT(full) [ 321.196450][ T9175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 321.196463][ T9175] Call Trace: [ 321.196471][ T9175] [ 321.196480][ T9175] dump_stack_lvl+0x16c/0x1f0 [ 321.196512][ T9175] should_fail_ex+0x512/0x640 [ 321.196542][ T9175] ? __kmalloc_noprof+0xca/0x880 [ 321.196588][ T9175] should_failslab+0xc2/0x120 [ 321.196620][ T9175] __kmalloc_noprof+0xdd/0x880 [ 321.196656][ T9175] ? lockdep_init_map_type+0x5c/0x280 [ 321.196691][ T9175] ? xfrm_hash_alloc+0xd1/0x100 [ 321.196718][ T9175] ? xfrm_hash_alloc+0xd1/0x100 [ 321.196738][ T9175] xfrm_hash_alloc+0xd1/0x100 [ 321.196760][ T9175] xfrm_net_init+0x35f/0xcc0 [ 321.196791][ T9175] ? __pfx_xfrm_net_init+0x10/0x10 [ 321.196814][ T9175] ops_init+0x1e2/0x5f0 [ 321.196847][ T9175] setup_net+0x100/0x390 [ 321.196876][ T9175] ? __pfx_setup_net+0x10/0x10 [ 321.196907][ T9175] ? debug_mutex_init+0x37/0x70 [ 321.196934][ T9175] copy_net_ns+0x2f8/0x690 [ 321.196970][ T9175] create_new_namespaces+0x3ea/0xa90 [ 321.197004][ T9175] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 321.197035][ T9175] ksys_unshare+0x45b/0xa40 [ 321.197068][ T9175] ? __pfx_ksys_unshare+0x10/0x10 [ 321.197101][ T9175] ? xfd_validate_state+0x61/0x180 [ 321.197144][ T9175] __x64_sys_unshare+0x31/0x40 [ 321.197175][ T9175] do_syscall_64+0xcd/0xfa0 [ 321.197205][ T9175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.197229][ T9175] RIP: 0033:0x7f5b5558eec9 [ 321.197247][ T9175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.197270][ T9175] RSP: 002b:00007f5b563a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 321.197292][ T9175] RAX: ffffffffffffffda RBX: 00007f5b557e5fa0 RCX: 00007f5b5558eec9 [ 321.197307][ T9175] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 321.197321][ T9175] RBP: 00007f5b55611f91 R08: 0000000000000000 R09: 0000000000000000 [ 321.197335][ T9175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 321.197348][ T9175] R13: 00007f5b557e6038 R14: 00007f5b557e5fa0 R15: 00007fffff3e16b8 [ 321.197380][ T9175] [ 321.423166][ C0] vkms_vblank_simulate: vblank timer overrun syzkaller syzkaller login: [ 323.600460][ T9200] net_ratelimit: 35 callbacks suppressed [ 323.600479][ T9200] netlink: zone id is out of range [ 323.696966][ T9200] netlink: zone id is out of range [ 323.702150][ T9200] netlink: zone id is out of range [ 323.800830][ T9200] netlink: zone id is out of range [ 323.810975][ T9205] ptrace attach of "./syz-executor exec"[5827] was attempted by "./syz-executor exec"[9205] [ 323.859949][ T9200] netlink: zone id is out of range [ 323.906275][ T9200] netlink: zone id is out of range [ 324.022308][ T9200] netlink: zone id is out of range [ 324.096773][ T9200] netlink: zone id is out of range [ 324.125789][ T9200] netlink: zone id is out of range [ 324.163718][ T9200] netlink: zone id is out of range [ 327.693392][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.700188][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 syzkaller syzkaller login: [ 330.652896][ T9293] ptp ptp0: only physical clock in use now [ 333.982860][ T9336] FAULT_INJECTION: forcing a failure. [ 333.982860][ T9336] name failslab, interval 1, probability 0, space 0, times 0 [ 334.068668][ T9336] CPU: 0 UID: 0 PID: 9336 Comm: syz.2.761 Not tainted syzkaller #0 PREEMPT(full) [ 334.068700][ T9336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 334.068714][ T9336] Call Trace: [ 334.068722][ T9336] [ 334.068731][ T9336] dump_stack_lvl+0x16c/0x1f0 [ 334.068775][ T9336] should_fail_ex+0x512/0x640 [ 334.068802][ T9336] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 334.068847][ T9336] should_failslab+0xc2/0x120 [ 334.068878][ T9336] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 334.068903][ T9336] ? __d_alloc+0x32/0xae0 [ 334.068934][ T9336] ? __d_alloc+0x32/0xae0 [ 334.068957][ T9336] __d_alloc+0x32/0xae0 [ 334.068986][ T9336] d_alloc_pseudo+0x1c/0xc0 [ 334.069018][ T9336] alloc_file_pseudo+0xcf/0x230 [ 334.069054][ T9336] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 334.069090][ T9336] ? do_raw_spin_unlock+0x172/0x230 [ 334.069131][ T9336] __anon_inode_getfile+0xe8/0x280 [ 334.069164][ T9336] anon_inode_getfile_fmode+0x37/0xa0 [ 334.069194][ T9336] do_eventfd+0x19b/0x2c0 [ 334.069228][ T9336] __x64_sys_eventfd2+0x53/0x80 [ 334.069262][ T9336] do_syscall_64+0xcd/0xfa0 [ 334.069291][ T9336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.069314][ T9336] RIP: 0033:0x7fd17178eec9 [ 334.069332][ T9336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.069354][ T9336] RSP: 002b:00007fd172688038 EFLAGS: 00000246 ORIG_RAX: 0000000000000122 [ 334.069375][ T9336] RAX: ffffffffffffffda RBX: 00007fd1719e5fa0 RCX: 00007fd17178eec9 [ 334.069390][ T9336] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000a0 [ 334.069403][ T9336] RBP: 00007fd172688090 R08: 0000000000000000 R09: 0000000000000000 [ 334.069423][ T9336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.069437][ T9336] R13: 00007fd1719e6038 R14: 00007fd1719e5fa0 R15: 00007ffdec6b7728 [ 334.069468][ T9336] [ 334.868030][ T9344] ptp ptp0: only physical clock in use now syzkaller syzkaller login: [ 338.045415][ T9386] netlink: 28 bytes leftover after parsing attributes in process `syz.4.775'. [ 342.687282][ T9434] zswap: compressor not available [ 344.686777][ T9454] random: crng reseeded on system resumption [ 351.562121][ T9541] netlink: 16 bytes leftover after parsing attributes in process `syz.4.813'. [ 352.781856][ T9557] FAULT_INJECTION: forcing a failure. [ 352.781856][ T9557] name failslab, interval 1, probability 0, space 0, times 0 [ 352.958787][ T9557] CPU: 0 UID: 0 PID: 9557 Comm: syz.1.818 Not tainted syzkaller #0 PREEMPT(full) [ 352.958820][ T9557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 352.958834][ T9557] Call Trace: [ 352.958841][ T9557] [ 352.958849][ T9557] dump_stack_lvl+0x16c/0x1f0 [ 352.958883][ T9557] should_fail_ex+0x512/0x640 [ 352.958912][ T9557] ? __kmalloc_cache_noprof+0x5f/0x780 [ 352.958954][ T9557] should_failslab+0xc2/0x120 [ 352.958985][ T9557] __kmalloc_cache_noprof+0x72/0x780 [ 352.959021][ T9557] ? apparmor_capable+0x114/0x1d0 [ 352.959054][ T9557] ? evm_write_xattrs+0x1ab/0x8d0 [ 352.959090][ T9557] ? bpf_lsm_capable+0x9/0x10 [ 352.959124][ T9557] ? evm_write_xattrs+0x1ab/0x8d0 [ 352.959160][ T9557] evm_write_xattrs+0x1ab/0x8d0 [ 352.959198][ T9557] ? __pfx_evm_write_xattrs+0x10/0x10 [ 352.959251][ T9557] ? __pfx_evm_write_xattrs+0x10/0x10 [ 352.959287][ T9557] vfs_write+0x2a0/0x11d0 [ 352.959316][ T9557] ? __pfx___mutex_lock+0x10/0x10 [ 352.959345][ T9557] ? __pfx_vfs_write+0x10/0x10 [ 352.959378][ T9557] ? __fget_files+0x20e/0x3c0 [ 352.959409][ T9557] ksys_write+0x12a/0x250 [ 352.959433][ T9557] ? __pfx_ksys_write+0x10/0x10 [ 352.959467][ T9557] do_syscall_64+0xcd/0xfa0 [ 352.959495][ T9557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.959518][ T9557] RIP: 0033:0x7f4935f8eec9 [ 352.959535][ T9557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.959557][ T9557] RSP: 002b:00007f4936df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 352.959578][ T9557] RAX: ffffffffffffffda RBX: 00007f49361e6090 RCX: 00007f4935f8eec9 [ 352.959593][ T9557] RDX: 000000000000001a RSI: 0000000000000000 RDI: 000000000000000b [ 352.959606][ T9557] RBP: 00007f4936011f91 R08: 0000000000000000 R09: 0000000000000000 [ 352.959619][ T9557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.959632][ T9557] R13: 00007f49361e6128 R14: 00007f49361e6090 R15: 00007ffe1aba29b8 [ 352.959663][ T9557] [ 353.167042][ T30] audit: type=1806 audit(1760195175.172:6): res=-12 [ 353.930177][ T9570] [U]  [ 353.933229][ T9570] [U] [ 353.935949][ T9570] [U] [ 353.938664][ T9570] [U] [ 353.975139][ T9570] [U] [ 353.977899][ T9570] [U] [ 353.980611][ T9570] [U] [ 353.983321][ T9570] [U] [ 354.087141][ T9570] [U] [ 354.089897][ T9570] [U] [ 354.092613][ T9570] [U] [ 354.095317][ T9570] [U] [ 354.157528][ T9570] [U] [ 354.160287][ T9570] [U] [ 354.163004][ T9570] [U] [ 354.165742][ T9570] [U] [ 354.266088][ T9570] [U] [ 356.332220][ T9609] ptp ptp0: only physical clock in use now syzkaller syzkaller login: [ 359.285597][ T9639] Falling back ldisc for pty66. syzkaller syzkaller login: [ 362.612008][ T9688] netlink: 338 bytes leftover after parsing attributes in process `syz.3.853'. [ 362.659199][ T9690] netlink: 338 bytes leftover after parsing attributes in process `syz.3.853'. [ 363.308607][ T9692] FAULT_INJECTION: forcing a failure. [ 363.308607][ T9692] name failslab, interval 1, probability 0, space 0, times 0 [ 363.408228][ T9692] CPU: 0 UID: 0 PID: 9692 Comm: syz.1.854 Not tainted syzkaller #0 PREEMPT(full) [ 363.408261][ T9692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 363.408285][ T9692] Call Trace: [ 363.408292][ T9692] [ 363.408301][ T9692] dump_stack_lvl+0x16c/0x1f0 [ 363.408334][ T9692] should_fail_ex+0x512/0x640 [ 363.408363][ T9692] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 363.408392][ T9692] should_failslab+0xc2/0x120 [ 363.408424][ T9692] kmem_cache_alloc_node_noprof+0x78/0x770 [ 363.408448][ T9692] ? __alloc_skb+0x2b2/0x380 [ 363.408479][ T9692] ? __alloc_skb+0x2b2/0x380 [ 363.408502][ T9692] __alloc_skb+0x2b2/0x380 [ 363.408527][ T9692] ? __pfx___alloc_skb+0x10/0x10 [ 363.408549][ T9692] ? kasan_quarantine_put+0x10a/0x240 [ 363.408575][ T9692] ? lockdep_hardirqs_on+0x7c/0x110 [ 363.408606][ T9692] ? kfree+0x2b8/0x6d0 [ 363.408645][ T9692] inet_netconf_notify_devconf+0x8b/0x1f0 [ 363.408692][ T9692] inetdev_event+0xed5/0x18a0 [ 363.408729][ T9692] ? ib_netdevice_event+0xfc/0x330 [ 363.408759][ T9692] ? __pfx_inetdev_event+0x10/0x10 [ 363.408797][ T9692] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 363.408843][ T9692] notifier_call_chain+0xbc/0x410 [ 363.408874][ T9692] ? __pfx_inetdev_event+0x10/0x10 [ 363.408915][ T9692] call_netdevice_notifiers_info+0xbe/0x140 [ 363.408953][ T9692] unregister_netdevice_many_notify+0xf76/0x24c0 [ 363.408998][ T9692] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 363.409030][ T9692] ? ppp_release+0x167/0x230 [ 363.409060][ T9692] ? __pfx___mutex_lock+0x10/0x10 [ 363.409096][ T9692] unregister_netdevice_queue+0x305/0x3f0 [ 363.409129][ T9692] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 363.409162][ T9692] ? __pfx_locks_remove_file+0x10/0x10 [ 363.409190][ T9692] ? __pfx_ppp_release+0x10/0x10 [ 363.409213][ T9692] ppp_release+0x209/0x230 [ 363.409237][ T9692] __fput+0x3ff/0xb70 [ 363.409282][ T9692] task_work_run+0x150/0x240 [ 363.409332][ T9692] ? __pfx_task_work_run+0x10/0x10 [ 363.409368][ T9692] ? __pfx___do_sys_close_range+0x10/0x10 [ 363.409400][ T9692] exit_to_user_mode_loop+0xec/0x130 [ 363.409437][ T9692] do_syscall_64+0x426/0xfa0 [ 363.409466][ T9692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.409489][ T9692] RIP: 0033:0x7f4935f8eec9 [ 363.409506][ T9692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.409528][ T9692] RSP: 002b:00007f4936e17038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 363.409550][ T9692] RAX: 0000000000000000 RBX: 00007f49361e5fa0 RCX: 00007f4935f8eec9 [ 363.409564][ T9692] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 363.409577][ T9692] RBP: 00007f4936011f91 R08: 0000000000000000 R09: 0000000000000000 [ 363.409590][ T9692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.409604][ T9692] R13: 00007f49361e6038 R14: 00007f49361e5fa0 R15: 00007ffe1aba29b8 [ 363.409652][ T9692] [ 364.777716][ T9703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.855'. [ 364.958342][ T9708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.855'. [ 365.520408][ T7953] Bluetooth: hci3: unexpected event 0x2c length: 42 > 17 [ 365.534027][ T7953] Bluetooth: hci3: unexpected event 0x2c length: 42 > 17 [ 369.179156][ T9777] ptp ptp0: only physical clock in use now syzkaller syzkaller login: [ 371.468130][ T9805] net_ratelimit: 80 callbacks suppressed [ 371.468152][ T9805] netlink: zone id is out of range [ 371.597193][ T9805] netlink: zone id is out of range [ 371.643989][ T9805] netlink: zone id is out of range [ 371.687491][ T9805] netlink: zone id is out of range [ 371.717574][ T9805] netlink: zone id is out of range [ 371.746499][ T9805] netlink: zone id is out of range [ 371.786151][ T9805] netlink: zone id is out of range [ 371.831098][ T9805] netlink: zone id is out of range [ 371.867738][ T9805] netlink: zone id is out of range [ 371.916089][ T9805] netlink: zone id is out of range [ 372.536913][ T9813] zswap: compressor not available [ 375.333628][ T30] audit: type=1326 audit(1760195197.722:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9859 comm="syz.1.897" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4935f8eec9 code=0x0 [ 378.297170][ T9893] netlink: 32 bytes leftover after parsing attributes in process `syz.2.904'. syzkaller syzkaller login: [ 383.158234][ T9970] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 383.433219][ T9977] Console: switching to colour VGA+ 80x25 [ 383.717205][ T9981] netlink: 186 bytes leftover after parsing attributes in process `syz.4.921'. [ 383.785431][ T9974] Console: switching to colour frame buffer device 4x6 [ 384.066253][ T9995] input: jJ-9%vlQ J86 as /devices/virtual/input/input6 [ 384.197155][ T9995] net_ratelimit: 35 callbacks suppressed [ 384.197174][ T9995] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 384.213896][ T9973] bond0: option all_slaves_active: invalid value () [ 388.284215][T10042] ptp ptp0: only physical clock in use now [ 389.132090][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.138605][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.619603][T10061] ptp ptp0: only physical clock in use now [ 391.121026][T10082] ======================================================= [ 391.121026][T10082] WARNING: The mand mount option has been deprecated and [ 391.121026][T10082] and is ignored by this kernel. Remove the mand [ 391.121026][T10082] option from the mount to silence this warning. [ 391.121026][T10082] ======================================================= [ 394.536135][T10110] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 395.728057][T10126] netlink: 186 bytes leftover after parsing attributes in process `syz.3.956'. [ 396.298443][T10131] FAULT_INJECTION: forcing a failure. [ 396.298443][T10131] name failslab, interval 1, probability 0, space 0, times 0 [ 396.330462][ T7933] Bluetooth: hci4: command 0x0406 tx timeout [ 396.381486][T10131] CPU: 0 UID: 0 PID: 10131 Comm: syz.4.955 Not tainted syzkaller #0 PREEMPT(full) [ 396.381517][T10131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 396.381530][T10131] Call Trace: [ 396.381538][T10131] [ 396.381547][T10131] dump_stack_lvl+0x16c/0x1f0 [ 396.381578][T10131] should_fail_ex+0x512/0x640 [ 396.381607][T10131] ? __kmalloc_noprof+0xca/0x880 [ 396.381646][T10131] should_failslab+0xc2/0x120 [ 396.381677][T10131] __kmalloc_noprof+0xdd/0x880 [ 396.381720][T10131] ? kernfs_fop_write_iter+0x237/0x570 [ 396.381764][T10131] ? kernfs_fop_write_iter+0x237/0x570 [ 396.381800][T10131] kernfs_fop_write_iter+0x237/0x570 [ 396.381842][T10131] vfs_write+0x7d3/0x11d0 [ 396.381868][T10131] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 396.381907][T10131] ? __pfx___mutex_lock+0x10/0x10 [ 396.381936][T10131] ? __pfx_vfs_write+0x10/0x10 [ 396.381982][T10131] ksys_write+0x12a/0x250 [ 396.382006][T10131] ? __pfx_ksys_write+0x10/0x10 [ 396.382040][T10131] do_syscall_64+0xcd/0xfa0 [ 396.382069][T10131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.382093][T10131] RIP: 0033:0x7f5b5558eec9 [ 396.382111][T10131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.382133][T10131] RSP: 002b:00007f5b563a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 396.382154][T10131] RAX: ffffffffffffffda RBX: 00007f5b557e5fa0 RCX: 00007f5b5558eec9 [ 396.382169][T10131] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000003 [ 396.382182][T10131] RBP: 00007f5b563a8090 R08: 0000000000000000 R09: 0000000000000000 [ 396.382195][T10131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.382208][T10131] R13: 00007f5b557e6038 R14: 00007f5b557e5fa0 R15: 00007fffff3e16b8 [ 396.382240][T10131] [ 397.726720][T10138] sp0: Synchronizing with TNC syzkaller syzkaller login: [ 403.330033][T10193] ptp ptp0: only physical clock in use now [ 404.636594][T10202] netlink: zone id is out of range [ 404.641763][T10202] netlink: zone id is out of range [ 404.727212][T10202] netlink: zone id is out of range [ 404.756245][T10202] netlink: zone id is out of range [ 404.805996][T10202] netlink: zone id is out of range [ 404.835553][T10202] netlink: zone id is out of range [ 404.876103][T10202] netlink: zone id is out of range [ 404.894525][T10202] netlink: zone id is out of range [ 404.936679][T10202] netlink: zone id is out of range [ 404.959087][T10202] netlink: zone id is out of range [ 405.747393][T10205] FAULT_INJECTION: forcing a failure. [ 405.747393][T10205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.839552][T10205] CPU: 0 UID: 0 PID: 10205 Comm: syz.4.975 Not tainted syzkaller #0 PREEMPT(full) [ 405.839584][T10205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 405.839597][T10205] Call Trace: [ 405.839605][T10205] [ 405.839614][T10205] dump_stack_lvl+0x16c/0x1f0 [ 405.839645][T10205] should_fail_ex+0x512/0x640 [ 405.839679][T10205] _copy_to_user+0x32/0xd0 [ 405.839712][T10205] simple_read_from_buffer+0xcb/0x170 [ 405.839752][T10205] proc_fail_nth_read+0x197/0x240 [ 405.839778][T10205] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 405.839804][T10205] ? rw_verify_area+0xcf/0x6c0 [ 405.839830][T10205] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 405.839855][T10205] vfs_read+0x1e1/0xcf0 [ 405.839884][T10205] ? __pfx___mutex_lock+0x10/0x10 [ 405.839914][T10205] ? __pfx_vfs_read+0x10/0x10 [ 405.839946][T10205] ? __fget_files+0x20e/0x3c0 [ 405.839977][T10205] ksys_read+0x12a/0x250 [ 405.840001][T10205] ? __pfx_ksys_read+0x10/0x10 [ 405.840034][T10205] do_syscall_64+0xcd/0xfa0 [ 405.840064][T10205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.840087][T10205] RIP: 0033:0x7f5b5558d8dc [ 405.840105][T10205] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 405.840127][T10205] RSP: 002b:00007f5b563a8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 405.840149][T10205] RAX: ffffffffffffffda RBX: 00007f5b557e5fa0 RCX: 00007f5b5558d8dc [ 405.840164][T10205] RDX: 000000000000000f RSI: 00007f5b563a80a0 RDI: 0000000000000005 [ 405.840177][T10205] RBP: 00007f5b563a8090 R08: 0000000000000000 R09: 0000000000000000 [ 405.840190][T10205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.840205][T10205] R13: 00007f5b557e6038 R14: 00007f5b557e5fa0 R15: 00007fffff3e16b8 [ 405.840241][T10205] [ 408.800677][T10224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.981'. [ 417.200622][T10317] zswap: compressor not available [ 417.995739][T10335] bridge0: port 3(gretap0) entered blocking state [ 418.084388][T10335] bridge0: port 3(gretap0) entered disabled state [ 418.158166][T10335] gretap0: entered allmulticast mode [ 418.197827][T10335] gretap0: entered promiscuous mode [ 418.224178][T10335] bridge0: port 3(gretap0) entered blocking state [ 418.231002][T10335] bridge0: port 3(gretap0) entered forwarding state [ 420.199498][T10356] overlayfs: missing 'lowerdir' [ 420.228784][T10357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1012'. [ 421.586716][T10367] net_ratelimit: 35 callbacks suppressed [ 421.586736][T10367] netlink: zone id is out of range [ 421.823538][T10367] netlink: zone id is out of range [ 421.854521][T10367] netlink: zone id is out of range [ 421.893317][T10367] netlink: zone id is out of range [ 421.999842][T10367] netlink: zone id is out of range [ 422.040593][T10367] netlink: zone id is out of range [ 422.088045][T10367] netlink: zone id is out of range [ 422.208287][T10367] netlink: zone id is out of range [ 422.291016][T10367] netlink: zone id is out of range [ 422.338162][T10367] netlink: zone id is out of range [ 422.382003][T10373] sp0: Synchronizing with TNC [ 422.842969][T10383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1017'. [ 424.219104][T10402] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1023'. [ 426.966546][T10432] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1033'. [ 427.362618][T10436] ptp ptp0: only physical clock in use now [ 428.164614][T10445] net_ratelimit: 80 callbacks suppressed [ 428.164634][T10445] netlink: zone id is out of range [ 428.248354][T10445] netlink: zone id is out of range [ 428.297808][T10445] netlink: zone id is out of range [ 428.335355][T10445] netlink: zone id is out of range [ 428.382575][T10445] netlink: zone id is out of range [ 428.426047][T10445] netlink: zone id is out of range [ 428.476021][T10445] netlink: zone id is out of range [ 428.517311][T10445] netlink: zone id is out of range [ 428.557569][T10445] netlink: zone id is out of range [ 428.666060][T10445] netlink: zone id is out of range [ 429.664267][T10470] netlink: 98 bytes leftover after parsing attributes in process `syz.3.1042'. [ 429.746393][T10470] netlink: 50 bytes leftover after parsing attributes in process `syz.3.1042'. [ 431.034635][ T7953] Bluetooth: hci4: unexpected subevent 0x12 length: 123 > 5 [ 431.831449][T10504] nbd: must specify a device to reconfigure [ 432.190956][T10510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1053'. [ 433.170016][T10532] FAULT_INJECTION: forcing a failure. [ 433.170016][T10532] name failslab, interval 1, probability 0, space 0, times 0 [ 433.262188][T10532] CPU: 0 UID: 0 PID: 10532 Comm: syz.2.1057 Not tainted syzkaller #0 PREEMPT(full) [ 433.262221][T10532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 433.262235][T10532] Call Trace: [ 433.262243][T10532] [ 433.262252][T10532] dump_stack_lvl+0x16c/0x1f0 [ 433.262284][T10532] should_fail_ex+0x512/0x640 [ 433.262323][T10532] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 433.262351][T10532] should_failslab+0xc2/0x120 [ 433.262383][T10532] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 433.262422][T10532] ? shmem_alloc_inode+0x25/0x50 [ 433.262456][T10532] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 433.262483][T10532] ? shmem_alloc_inode+0x25/0x50 [ 433.262510][T10532] shmem_alloc_inode+0x25/0x50 [ 433.262557][T10532] alloc_inode+0x61/0x240 [ 433.262589][T10532] new_inode+0x22/0x1c0 [ 433.262618][T10532] ? alloc_fd+0x471/0x7d0 [ 433.262641][T10532] shmem_get_inode+0x19a/0xfb0 [ 433.262680][T10532] __shmem_file_setup+0x107/0x330 [ 433.262719][T10532] __do_sys_memfd_create+0x40a/0x8a0 [ 433.262758][T10532] do_syscall_64+0xcd/0xfa0 [ 433.262788][T10532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.262812][T10532] RIP: 0033:0x7fd17178eec9 [ 433.262829][T10532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.262851][T10532] RSP: 002b:00007fd172688038 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 433.262873][T10532] RAX: ffffffffffffffda RBX: 00007fd1719e5fa0 RCX: 00007fd17178eec9 [ 433.262888][T10532] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000200000000080 [ 433.262902][T10532] RBP: 00007fd171811f91 R08: 0000000000000000 R09: 0000000000000000 [ 433.262916][T10532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.262929][T10532] R13: 00007fd1719e6038 R14: 00007fd1719e5fa0 R15: 00007ffdec6b7728 [ 433.262960][T10532] [ 434.546150][T10539] sp0: Synchronizing with TNC [ 434.914748][T10537] sp0: Synchronizing with TNC [ 435.519803][T10559] netlink: 350 bytes leftover after parsing attributes in process `syz.1.1062'. [ 435.722936][T10562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1063'. [ 435.786917][T10562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1063'. [ 436.803023][T10548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1060'. syzkaller syzkaller login: [ 438.830563][T10601] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1072'. [ 438.898143][T10607] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1073'. [ 439.141474][ T7953] Bluetooth: hci2: Malformed LE Event: 0x1b [ 440.591789][T10631] sp0: Synchronizing with TNC syzkaller syzkaller login: [ 442.859513][T10667] zswap: compressor not available [ 442.871802][T10671] Setting dangerous option i915.mitigations - tainting kernel [ 442.939745][T10672] random: crng reseeded on system resumption [ 443.350981][T10686] lo: entered allmulticast mode [ 443.738855][T10686] lo: left allmulticast mode [ 444.238934][T10701] net_ratelimit: 35 callbacks suppressed [ 444.238955][T10701] netlink: zone id is out of range [ 444.316088][T10701] netlink: zone id is out of range [ 444.363497][T10701] netlink: zone id is out of range [ 444.426360][T10701] netlink: zone id is out of range [ 444.476003][T10701] netlink: zone id is out of range [ 444.512815][T10701] netlink: zone id is out of range [ 444.556063][T10701] netlink: zone id is out of range [ 444.663078][T10701] netlink: zone id is out of range [ 444.730572][T10701] netlink: zone id is out of range [ 444.783408][T10701] netlink: zone id is out of range [ 445.305978][ T30] audit: type=1804 audit(1760195267.692:8): pid=10717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1100" name="/newroot/sys/kernel/tracing/tracing_cpumask" dev="tracefs" ino=125 res=1 errno=0 [ 445.329598][ C0] vkms_vblank_simulate: vblank timer overrun [ 450.582279][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 450.588733][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 451.688785][T10790] FAULT_INJECTION: forcing a failure. [ 451.688785][T10790] name failslab, interval 1, probability 0, space 0, times 0 [ 451.885922][T10790] CPU: 0 UID: 0 PID: 10790 Comm: syz.3.1114 Tainted: G U syzkaller #0 PREEMPT(full) [ 451.885978][T10790] Tainted: [U]=USER [ 451.885986][T10790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 451.886000][T10790] Call Trace: [ 451.886008][T10790] [ 451.886017][T10790] dump_stack_lvl+0x16c/0x1f0 [ 451.886050][T10790] should_fail_ex+0x512/0x640 [ 451.886080][T10790] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 451.886109][T10790] should_failslab+0xc2/0x120 [ 451.886140][T10790] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 451.886163][T10790] ? __pfx_timestamp_truncate+0x10/0x10 [ 451.886191][T10790] ? __d_alloc+0x32/0xae0 [ 451.886222][T10790] ? __d_alloc+0x32/0xae0 [ 451.886246][T10790] ? inode_set_ctime_current+0x2a1/0x8f0 [ 451.886273][T10790] __d_alloc+0x32/0xae0 [ 451.886310][T10790] ? look_up_lock_class+0x6b/0x150 [ 451.886339][T10790] d_alloc_pseudo+0x1c/0xc0 [ 451.886371][T10790] alloc_file_pseudo+0xcf/0x230 [ 451.886406][T10790] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 451.886437][T10790] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 451.886469][T10790] create_pipe_files+0x364/0x9a0 [ 451.886506][T10790] do_pipe2+0xaf/0x1c0 [ 451.886532][T10790] ? __pfx_do_pipe2+0x10/0x10 [ 451.886560][T10790] ? xfd_validate_state+0x61/0x180 [ 451.886601][T10790] __x64_sys_pipe2+0x54/0x80 [ 451.886629][T10790] do_syscall_64+0xcd/0xfa0 [ 451.886658][T10790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.886681][T10790] RIP: 0033:0x7fc5f6b8eec9 [ 451.886699][T10790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.886720][T10790] RSP: 002b:00007fc5f7aab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 451.886741][T10790] RAX: ffffffffffffffda RBX: 00007fc5f6de6090 RCX: 00007fc5f6b8eec9 [ 451.886756][T10790] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 451.886769][T10790] RBP: 00007fc5f6c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 451.886782][T10790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 451.886796][T10790] R13: 00007fc5f6de6128 R14: 00007fc5f6de6090 R15: 00007ffe2d76ce68 [ 451.886826][T10790] [ 453.192205][T10803] sp0: Synchronizing with TNC [ 458.154594][T10862] raw_sendmsg: syz.4.1133 forgot to set AF_INET. Fix it! [ 458.337010][T10864] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1134'. [ 458.480563][T10868] net_ratelimit: 35 callbacks suppressed [ 458.480581][T10868] openvswitch: netlink: IP tunnel dst address not specified [ 458.760802][T10864] bond0: (slave bond_slave_0): Releasing backup interface [ 460.010784][T10891] random: crng reseeded on system resumption [ 461.506119][T10916] netlink: zone id is out of range [ 461.536034][T10916] netlink: zone id is out of range [ 461.578344][T10916] netlink: zone id is out of range [ 461.625560][T10917] FAULT_INJECTION: forcing a failure. [ 461.625560][T10917] name failslab, interval 1, probability 0, space 0, times 0 [ 461.640938][T10916] netlink: zone id is out of range [ 461.675312][T10916] netlink: zone id is out of range [ 461.716829][T10917] CPU: 0 UID: 0 PID: 10917 Comm: syz.1.1145 Tainted: G U syzkaller #0 PREEMPT(full) [ 461.716868][T10917] Tainted: [U]=USER [ 461.716875][T10917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 461.716889][T10917] Call Trace: [ 461.716896][T10917] [ 461.716905][T10917] dump_stack_lvl+0x16c/0x1f0 [ 461.716937][T10917] should_fail_ex+0x512/0x640 [ 461.716966][T10917] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 461.716994][T10917] should_failslab+0xc2/0x120 [ 461.717026][T10917] kmem_cache_alloc_noprof+0x75/0x6e0 [ 461.717049][T10917] ? dup_fd+0x4e/0xb90 [ 461.717077][T10917] ? dup_fd+0x4e/0xb90 [ 461.717099][T10917] dup_fd+0x4e/0xb90 [ 461.717133][T10917] ksys_unshare+0x831/0xa40 [ 461.717166][T10917] ? __pfx_ksys_unshare+0x10/0x10 [ 461.717199][T10917] ? xfd_validate_state+0x61/0x180 [ 461.717242][T10917] __x64_sys_unshare+0x31/0x40 [ 461.717273][T10917] do_syscall_64+0xcd/0xfa0 [ 461.717302][T10917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.717325][T10917] RIP: 0033:0x7f4935f8eec9 [ 461.717343][T10917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.717365][T10917] RSP: 002b:00007f4936df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 461.717387][T10917] RAX: ffffffffffffffda RBX: 00007f49361e6090 RCX: 00007f4935f8eec9 [ 461.717402][T10917] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 461.717415][T10917] RBP: 00007f4936011f91 R08: 0000000000000000 R09: 0000000000000000 [ 461.717429][T10917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.717442][T10917] R13: 00007f49361e6128 R14: 00007f49361e6090 R15: 00007ffe1aba29b8 [ 461.717474][T10917] [ 461.718317][T10916] netlink: zone id is out of range [ 462.826314][T10916] netlink: zone id is out of range [ 462.831854][T10916] netlink: zone id is out of range [ 462.921667][T10916] netlink: zone id is out of range [ 463.544912][T10927] sp0: Synchronizing with TNC syzkaller syzkaller login: [ 466.103113][ T7953] Bluetooth: hci0: unexpected event 0x04 length: 64 > 10 [ 466.103380][ T7953] Bluetooth: hci0: connection err: -111 [ 466.332303][T10976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1161'. [ 469.444306][T11014] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1171'. [ 469.496722][T11014] nbd: must specify a device to reconfigure [ 472.130717][T11059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1183'. [ 472.399614][ T7953] Bluetooth: hci3: unexpected event 0x04 length: 64 > 10 [ 472.399694][ T7953] Bluetooth: hci3: connection err: -111 [ 474.497783][T11093] FAULT_INJECTION: forcing a failure. [ 474.497783][T11093] name failslab, interval 1, probability 0, space 0, times 0 [ 474.865631][T11093] CPU: 0 UID: 0 PID: 11093 Comm: syz.1.1189 Tainted: G U syzkaller #0 PREEMPT(full) [ 474.865670][T11093] Tainted: [U]=USER [ 474.865678][T11093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 474.865691][T11093] Call Trace: [ 474.865699][T11093] [ 474.865708][T11093] dump_stack_lvl+0x16c/0x1f0 [ 474.865741][T11093] should_fail_ex+0x512/0x640 [ 474.865775][T11093] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 474.865803][T11093] should_failslab+0xc2/0x120 [ 474.865834][T11093] kmem_cache_alloc_noprof+0x75/0x6e0 [ 474.865858][T11093] ? __kernfs_new_node+0xd2/0x8e0 [ 474.865894][T11093] ? __kernfs_new_node+0xd2/0x8e0 [ 474.865923][T11093] __kernfs_new_node+0xd2/0x8e0 [ 474.865957][T11093] ? __pfx___kernfs_new_node+0x10/0x10 [ 474.866007][T11093] ? find_held_lock+0x2b/0x80 [ 474.866031][T11093] ? kernfs_root+0xee/0x2a0 [ 474.866066][T11093] kernfs_new_node+0x13c/0x1e0 [ 474.866104][T11093] __kernfs_create_file+0x53/0x350 [ 474.866131][T11093] sysfs_add_file_mode_ns+0x207/0x3c0 [ 474.866166][T11093] sysfs_merge_group+0x1aa/0x340 [ 474.866198][T11093] ? __pfx_sysfs_merge_group+0x10/0x10 [ 474.866251][T11093] ? __pfx_dev_add_physical_location+0x10/0x10 [ 474.866282][T11093] ? bus_to_subsys+0x131/0x160 [ 474.866319][T11093] dpm_sysfs_add+0x237/0x280 [ 474.866349][T11093] device_add+0x9a6/0x1aa0 [ 474.866382][T11093] ? __pfx_device_add+0x10/0x10 [ 474.866412][T11093] ? lockdep_init_map_type+0x5c/0x280 [ 474.866455][T11093] ? __init_waitqueue_head+0xca/0x150 [ 474.866502][T11093] rfkill_register+0x1ad/0xb40 [ 474.866545][T11093] nfc_register_device+0x11f/0x3c0 [ 474.866577][T11093] nci_register_device+0x7f1/0xb80 [ 474.866617][T11093] ? __pfx_nci_register_device+0x10/0x10 [ 474.866661][T11093] ? lockdep_init_map_type+0x5c/0x280 [ 474.866700][T11093] virtual_ncidev_open+0x141/0x220 [ 474.866737][T11093] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 474.866785][T11093] misc_open+0x26a/0x450 [ 474.866814][T11093] ? __pfx_misc_open+0x10/0x10 [ 474.866843][T11093] chrdev_open+0x234/0x6a0 [ 474.866870][T11093] ? __pfx_apparmor_file_open+0x10/0x10 [ 474.866904][T11093] ? __pfx_chrdev_open+0x10/0x10 [ 474.866934][T11093] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 474.866967][T11093] do_dentry_open+0x982/0x1530 [ 474.866994][T11093] ? __pfx_chrdev_open+0x10/0x10 [ 474.867029][T11093] vfs_open+0x82/0x3f0 [ 474.867066][T11093] path_openat+0x1de4/0x2cb0 [ 474.867108][T11093] ? __pfx_path_openat+0x10/0x10 [ 474.867142][T11093] do_filp_open+0x20b/0x470 [ 474.867168][T11093] ? __pfx_do_filp_open+0x10/0x10 [ 474.867218][T11093] ? alloc_fd+0x471/0x7d0 [ 474.867250][T11093] do_sys_openat2+0x11b/0x1d0 [ 474.867285][T11093] ? __pfx_do_sys_openat2+0x10/0x10 [ 474.867332][T11093] __x64_sys_openat+0x174/0x210 [ 474.867368][T11093] ? __pfx___x64_sys_openat+0x10/0x10 [ 474.867417][T11093] do_syscall_64+0xcd/0xfa0 [ 474.867452][T11093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.867476][T11093] RIP: 0033:0x7f4935f8eec9 [ 474.867495][T11093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.867517][T11093] RSP: 002b:00007f4936df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 474.867539][T11093] RAX: ffffffffffffffda RBX: 00007f49361e6090 RCX: 00007f4935f8eec9 [ 474.867555][T11093] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 474.867570][T11093] RBP: 00007f4936011f91 R08: 0000000000000000 R09: 0000000000000000 [ 474.867584][T11093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 474.867598][T11093] R13: 00007f49361e6128 R14: 00007f49361e6090 R15: 00007ffe1aba29b8 [ 474.867630][T11093] [ 476.617961][T11112] sp0: Synchronizing with TNC [ 479.578955][T11153] FAULT_INJECTION: forcing a failure. [ 479.578955][T11153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.646444][T11153] CPU: 0 UID: 0 PID: 11153 Comm: syz.3.1204 Tainted: G U syzkaller #0 PREEMPT(full) [ 479.646481][T11153] Tainted: [U]=USER [ 479.646488][T11153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 479.646500][T11153] Call Trace: [ 479.646507][T11153] [ 479.646515][T11153] dump_stack_lvl+0x16c/0x1f0 [ 479.646545][T11153] should_fail_ex+0x512/0x640 [ 479.646577][T11153] _copy_from_user+0x2e/0xd0 [ 479.646607][T11153] move_addr_to_kernel+0x65/0x170 [ 479.646644][T11153] __sys_bind+0x11b/0x260 [ 479.646679][T11153] ? __pfx___sys_bind+0x10/0x10 [ 479.646712][T11153] ? __fget_files+0x20e/0x3c0 [ 479.646745][T11153] ? xfd_validate_state+0x61/0x180 [ 479.646777][T11153] ? __pfx_ksys_write+0x10/0x10 [ 479.646807][T11153] __x64_sys_bind+0x72/0xb0 [ 479.646840][T11153] ? lockdep_hardirqs_on+0x7c/0x110 [ 479.646866][T11153] do_syscall_64+0xcd/0xfa0 [ 479.646893][T11153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.646916][T11153] RIP: 0033:0x7fc5f6b8eec9 [ 479.646932][T11153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.646953][T11153] RSP: 002b:00007fc5f7acc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 479.647000][T11153] RAX: ffffffffffffffda RBX: 00007fc5f6de5fa0 RCX: 00007fc5f6b8eec9 [ 479.647015][T11153] RDX: 0000000000000068 RSI: 0000200000000080 RDI: 0000000000000003 [ 479.647028][T11153] RBP: 00007fc5f7acc090 R08: 0000000000000000 R09: 0000000000000000 [ 479.647041][T11153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.647053][T11153] R13: 00007fc5f6de6038 R14: 00007fc5f6de5fa0 R15: 00007ffe2d76ce68 [ 479.647084][T11153] [ 480.268696][T11156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1205'. [ 480.353971][T11156] netlink: 354 bytes leftover after parsing attributes in process `syz.3.1205'. [ 480.660322][ T30] audit: type=1804 audit(1760195302.932:9): pid=11159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1206" name="/newroot/sys/kernel/tracing/set_event" dev="tracefs" ino=16 res=1 errno=0 [ 485.462720][T11237] ptp ptp0: only physical clock in use now [ 487.053867][T11260] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1229'. [ 488.983058][T11282] net_ratelimit: 36 callbacks suppressed [ 488.983089][T11282] netlink: zone id is out of range [ 489.084639][T11282] netlink: zone id is out of range [ 489.102254][T11282] netlink: zone id is out of range [ 489.156049][T11282] netlink: zone id is out of range [ 489.216240][T11282] netlink: zone id is out of range [ 489.296218][T11282] netlink: zone id is out of range [ 489.314888][T11282] netlink: zone id is out of range [ 489.341601][T11282] netlink: zone id is out of range [ 489.371661][T11282] netlink: zone id is out of range [ 489.433901][T11282] netlink: zone id is out of range [ 490.133656][T11296] can: request_module (can-proto-4) failed. [ 493.319434][T11338] ptp ptp0: only physical clock in use now [ 493.421020][ T30] audit: type=1400 audit(1760195315.812:10): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=11337 comm="syz.4.1247" [ 496.829004][T11372] serio: Serial port pty6 [ 497.215630][T11380] net_ratelimit: 35 callbacks suppressed [ 497.215648][T11380] netlink: zone id is out of range [ 497.359314][T11380] netlink: zone id is out of range [ 497.401318][T11380] netlink: zone id is out of range [ 497.438463][T11380] netlink: zone id is out of range [ 497.478388][T11380] netlink: zone id is out of range [ 497.530759][T11380] netlink: zone id is out of range [ 497.573643][T11380] netlink: zone id is out of range [ 497.623309][T11380] netlink: zone id is out of range [ 497.686139][T11380] netlink: zone id is out of range [ 497.735983][T11380] netlink: zone id is out of range [ 500.174838][ T30] audit: type=1806 audit(1760195322.562:11): xattr="." res=0 [ 503.891697][T11475] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 504.579817][T11486] net_ratelimit: 37 callbacks suppressed [ 504.579837][T11486] netlink: zone id is out of range [ 504.936129][T11486] netlink: zone id is out of range [ 505.038091][T11478] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 505.049813][T11486] netlink: zone id is out of range [ 505.251116][T11486] netlink: zone id is out of range [ 505.256956][T11472] sp0: Synchronizing with TNC [ 505.338135][T11486] netlink: zone id is out of range [ 505.343297][T11486] netlink: zone id is out of range [ 505.476111][T11486] netlink: zone id is out of range [ 505.481271][T11486] netlink: zone id is out of range [ 505.530207][T11486] netlink: zone id is out of range [ 505.558038][T11486] netlink: zone id is out of range [ 505.748390][T11472] sp0: Synchronizing with TNC [ 508.542065][T11533] ptp ptp0: only physical clock in use now syzkaller syzkaller login: [ 512.011016][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 512.017446][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.158362][T11562] sp0: Synchronizing with TNC [ 513.856235][T11592] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1304'. [ 513.937216][T11593] net_ratelimit: 35 callbacks suppressed [ 513.937234][T11593] openvswitch: netlink: IP tunnel dst address not specified [ 514.218060][T11592] bond0: (slave bond_slave_0): Releasing backup interface syzkaller syzkaller login: [ 514.761576][T11604] nbd0: detected capacity change from 0 to 31 [ 514.878874][ T5839] block nbd0: Dead connection, failed to find a fallback [ 514.953421][ T5839] block nbd0: shutting down sockets [ 515.013187][ T5839] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 515.102574][ T5839] Buffer I/O error on dev nbd0, logical block 0, async page read [ 515.166611][ T5839] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 515.235087][ T5839] Buffer I/O error on dev nbd0, logical block 1, async page read [ 515.300460][ T5839] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 515.406262][ T5839] Buffer I/O error on dev nbd0, logical block 2, async page read [ 515.414167][ T5839] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 515.536066][ T5839] Buffer I/O error on dev nbd0, logical block 3, async page read [ 515.544080][ T5839] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 515.652332][ T5839] Buffer I/O error on dev nbd0, logical block 0, async page read [ 515.711210][ T5839] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 515.789941][ T5839] Buffer I/O error on dev nbd0, logical block 1, async page read [ 515.830482][ T5839] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 515.909742][ T5839] Buffer I/O error on dev nbd0, logical block 2, async page read [ 515.951107][ T5839] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 516.015058][ T5839] Buffer I/O error on dev nbd0, logical block 3, async page read [ 516.073789][ T5839] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 516.125269][ T5839] Buffer I/O error on dev nbd0, logical block 0, async page read [ 516.174058][T11629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1315'. [ 516.183535][ T5839] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 516.251576][ T5839] Buffer I/O error on dev nbd0, logical block 1, async page read [ 516.364450][ T5839] ldm_validate_partition_table(): Disk read failed. [ 516.445454][ T5839] Dev nbd0: unable to read RDB block 0 [ 516.503803][ T5839] nbd0: unable to read partition table [ 516.559081][ T5839] nbd0: partition table beyond EOD, truncated [ 516.642222][ T5839] ldm_validate_partition_table(): Disk read failed. [ 516.704433][ T5839] Dev nbd0: unable to read RDB block 0 [ 516.750180][ T5839] nbd0: unable to read partition table [ 516.792112][ T5839] nbd0: partition table beyond EOD, truncated [ 518.165086][T11657] random: crng reseeded on system resumption [ 518.895996][T11681] netlink: zone id is out of range [ 518.921866][T11681] netlink: zone id is out of range [ 518.987368][T11681] netlink: zone id is out of range [ 519.044824][T11681] netlink: zone id is out of range [ 519.070144][T11681] netlink: zone id is out of range [ 519.122261][T11681] netlink: zone id is out of range [ 519.155995][T11681] netlink: zone id is out of range [ 519.171472][T11681] netlink: zone id is out of range [ 519.216244][T11681] netlink: zone id is out of range [ 519.256984][T11681] netlink: zone id is out of range [ 519.296231][T11681] netlink: zone id is out of range [ 519.332508][T11681] netlink: zone id is out of range [ 520.324352][T11700] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 523.787292][T11743] device-mapper: ioctl: Invalid ioctl structure: name , dev 400007f00010006 syzkaller syzkaller login: [ 525.700182][T11764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1344'. [ 526.208826][T11768] [ 526.211202][T11768] ====================================================== [ 526.218224][T11768] WARNING: possible circular locking dependency detected [ 526.225246][T11768] syzkaller #0 Tainted: G U [ 526.231402][T11768] ------------------------------------------------------ [ 526.238535][T11768] syz.1.1346/11768 is trying to acquire lock: [ 526.244607][T11768] ffff8880338b6f10 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0x1c/0x290 [ 526.253541][T11768] [ 526.253541][T11768] but task is already holding lock: [ 526.260903][T11768] ffff888028c7e808 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x17d/0x5d0 [ 526.270334][T11768] [ 526.270334][T11768] which lock already depends on the new lock. [ 526.270334][T11768] [ 526.280737][T11768] [ 526.280737][T11768] the existing dependency chain (in reverse order) is: [ 526.289772][T11768] [ 526.289772][T11768] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 526.297624][T11768] __mutex_lock+0x193/0x1060 [ 526.302754][T11768] elevator_change+0x17d/0x5d0 [ 526.308056][T11768] elv_iosched_store+0x315/0x3c0 [ 526.313576][T11768] queue_attr_store+0x26b/0x310 [ 526.318967][T11768] sysfs_kf_write+0xf2/0x150 [ 526.324088][T11768] kernfs_fop_write_iter+0x3af/0x570 [ 526.329919][T11768] vfs_write+0x7d3/0x11d0 [ 526.334822][T11768] ksys_write+0x12a/0x250 [ 526.339683][T11768] do_syscall_64+0xcd/0xfa0 [ 526.344728][T11768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.351158][T11768] [ 526.351158][T11768] -> #5 (&q->q_usage_counter(io)#62){++++}-{0:0}: [ 526.359780][T11768] blk_alloc_queue+0x619/0x760 [ 526.365109][T11768] blk_mq_alloc_queue+0x172/0x280 [ 526.370689][T11768] __blk_mq_alloc_disk+0x29/0x120 [ 526.376247][T11768] nbd_dev_add+0x492/0xbb0 [ 526.381197][T11768] nbd_init+0x181/0x320 [ 526.385890][T11768] do_one_initcall+0x120/0x6e0 [ 526.391269][T11768] kernel_init_freeable+0x5c2/0x910 [ 526.397032][T11768] kernel_init+0x1c/0x2b0 [ 526.401904][T11768] ret_from_fork+0x675/0x7d0 [ 526.407035][T11768] ret_from_fork_asm+0x1a/0x30 [ 526.412329][T11768] [ 526.412329][T11768] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 526.419566][T11768] fs_reclaim_acquire+0x102/0x150 [ 526.425128][T11768] kmem_cache_alloc_node_noprof+0x5e/0x770 [ 526.431466][T11768] __alloc_skb+0x2b2/0x380 [ 526.436417][T11768] tcp_stream_alloc_skb+0x34/0x560 [ 526.442079][T11768] tcp_sendmsg_locked+0x12d9/0x42e0 [ 526.447819][T11768] tcp_sendmsg+0x2e/0x50 [ 526.452604][T11768] inet_sendmsg+0xb9/0x140 [ 526.457554][T11768] sock_write_iter+0x509/0x610 [ 526.462860][T11768] vfs_write+0x7d3/0x11d0 [ 526.467727][T11768] ksys_write+0x1f8/0x250 [ 526.472585][T11768] do_syscall_64+0xcd/0xfa0 [ 526.477621][T11768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.484046][T11768] [ 526.484046][T11768] -> #3 (sk_lock-AF_INET){+.+.}-{0:0}: [ 526.491701][T11768] lock_sock_nested+0x41/0xf0 [ 526.496910][T11768] inet_shutdown+0x67/0x440 [ 526.501951][T11768] nbd_mark_nsock_dead+0xae/0x5d0 [ 526.507503][T11768] recv_work+0x671/0xa80 [ 526.512280][T11768] process_one_work+0x9cf/0x1b70 [ 526.517758][T11768] worker_thread+0x6c8/0xf10 [ 526.522889][T11768] kthread+0x3c2/0x780 [ 526.527493][T11768] ret_from_fork+0x675/0x7d0 [ 526.532622][T11768] ret_from_fork_asm+0x1a/0x30 [ 526.537924][T11768] [ 526.537924][T11768] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 526.545582][T11768] __mutex_lock+0x193/0x1060 [ 526.550712][T11768] nbd_queue_rq+0x423/0x12d0 [ 526.555832][T11768] blk_mq_dispatch_rq_list+0x416/0x1e20 [ 526.561904][T11768] __blk_mq_sched_dispatch_requests+0xcb7/0x15f0 [ 526.568773][T11768] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 526.575294][T11768] blk_mq_run_hw_queue+0x239/0x670 [ 526.580961][T11768] blk_mq_dispatch_list+0x514/0x1310 [ 526.586771][T11768] blk_mq_flush_plug_list+0x130/0x600 [ 526.592671][T11768] __blk_flush_plug+0x2c4/0x4b0 [ 526.598062][T11768] __submit_bio+0x545/0x690 [ 526.603097][T11768] submit_bio_noacct_nocheck+0x53d/0xc10 [ 526.609260][T11768] submit_bio_noacct+0xbbb/0x1f60 [ 526.614810][T11768] block_read_full_folio+0x34e/0x850 [ 526.620635][T11768] filemap_read_folio+0xc5/0x2a0 [ 526.626098][T11768] do_read_cache_folio+0x263/0x5c0 [ 526.631755][T11768] read_part_sector+0xd4/0x370 [ 526.637063][T11768] adfspart_check_ICS+0x93/0x940 [ 526.642547][T11768] bdev_disk_changed+0x720/0x1520 [ 526.648138][T11768] blkdev_get_whole+0x187/0x290 [ 526.653557][T11768] bdev_open+0x2c7/0xe40 [ 526.658322][T11768] blkdev_open+0x34e/0x4f0 [ 526.663268][T11768] do_dentry_open+0x982/0x1530 [ 526.668571][T11768] vfs_open+0x82/0x3f0 [ 526.673181][T11768] path_openat+0x1de4/0x2cb0 [ 526.678303][T11768] do_filp_open+0x20b/0x470 [ 526.683340][T11768] do_sys_openat2+0x11b/0x1d0 [ 526.688556][T11768] __x64_sys_openat+0x174/0x210 [ 526.693948][T11768] do_syscall_64+0xcd/0xfa0 [ 526.699002][T11768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.705427][T11768] [ 526.705427][T11768] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 526.712649][T11768] __mutex_lock+0x193/0x1060 [ 526.717772][T11768] nbd_queue_rq+0xbd/0x12d0 [ 526.722810][T11768] blk_mq_dispatch_rq_list+0x416/0x1e20 [ 526.728886][T11768] __blk_mq_sched_dispatch_requests+0xcb7/0x15f0 [ 526.735759][T11768] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 526.742291][T11768] blk_mq_run_hw_queue+0x239/0x670 [ 526.747943][T11768] blk_mq_dispatch_list+0x514/0x1310 [ 526.753790][T11768] blk_mq_flush_plug_list+0x130/0x600 [ 526.759695][T11768] __blk_flush_plug+0x2c4/0x4b0 [ 526.765093][T11768] __submit_bio+0x545/0x690 [ 526.770136][T11768] submit_bio_noacct_nocheck+0x53d/0xc10 [ 526.776299][T11768] submit_bio_noacct+0xbbb/0x1f60 [ 526.781850][T11768] block_read_full_folio+0x34e/0x850 [ 526.787670][T11768] filemap_read_folio+0xc5/0x2a0 [ 526.793135][T11768] do_read_cache_folio+0x263/0x5c0 [ 526.798776][T11768] read_part_sector+0xd4/0x370 [ 526.804085][T11768] adfspart_check_ICS+0x93/0x940 [ 526.809563][T11768] bdev_disk_changed+0x720/0x1520 [ 526.815132][T11768] blkdev_get_whole+0x187/0x290 [ 526.820527][T11768] bdev_open+0x2c7/0xe40 [ 526.825308][T11768] blkdev_open+0x34e/0x4f0 [ 526.830274][T11768] do_dentry_open+0x982/0x1530 [ 526.835571][T11768] vfs_open+0x82/0x3f0 [ 526.840189][T11768] path_openat+0x1de4/0x2cb0 [ 526.845308][T11768] do_filp_open+0x20b/0x470 [ 526.850339][T11768] do_sys_openat2+0x11b/0x1d0 [ 526.855644][T11768] __x64_sys_openat+0x174/0x210 [ 526.861034][T11768] do_syscall_64+0xcd/0xfa0 [ 526.866069][T11768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.872489][T11768] [ 526.872489][T11768] -> #0 (set->srcu){.+.+}-{0:0}: [ 526.879621][T11768] __lock_acquire+0x12a6/0x1ce0 [ 526.885010][T11768] lock_sync+0xa0/0x110 [ 526.889698][T11768] __synchronize_srcu+0xa1/0x290 [ 526.895193][T11768] blk_mq_quiesce_queue+0x149/0x1b0 [ 526.900932][T11768] elevator_switch+0x17d/0x810 [ 526.906235][T11768] elevator_change+0x391/0x5d0 [ 526.911551][T11768] elevator_set_default+0x2e9/0x380 [ 526.917297][T11768] blk_register_queue+0x384/0x4e0 [ 526.922855][T11768] __add_disk+0x74a/0xf00 [ 526.927722][T11768] add_disk_fwnode+0x13f/0x5d0 [ 526.933020][T11768] nbd_dev_add+0x783/0xbb0 [ 526.937968][T11768] nbd_genl_connect+0x8b0/0x1c60 [ 526.943436][T11768] genl_family_rcv_msg_doit+0x206/0x2f0 [ 526.949538][T11768] genl_rcv_msg+0x55c/0x800 [ 526.954581][T11768] netlink_rcv_skb+0x158/0x420 [ 526.959879][T11768] genl_rcv+0x28/0x40 [ 526.964388][T11768] netlink_unicast+0x5a7/0x870 [ 526.969688][T11768] netlink_sendmsg+0x8c8/0xdd0 [ 526.974983][T11768] ____sys_sendmsg+0xa95/0xc70 [ 526.980281][T11768] ___sys_sendmsg+0x134/0x1d0 [ 526.985485][T11768] __sys_sendmsg+0x16d/0x220 [ 526.990607][T11768] do_syscall_64+0xcd/0xfa0 [ 526.995651][T11768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.002067][T11768] [ 527.002067][T11768] other info that might help us debug this: [ 527.002067][T11768] [ 527.012286][T11768] Chain exists of: [ 527.012286][T11768] set->srcu --> &q->q_usage_counter(io)#62 --> &q->elevator_lock [ 527.012286][T11768] [ 527.025953][T11768] Possible unsafe locking scenario: [ 527.025953][T11768] [ 527.033397][T11768] CPU0 CPU1 [ 527.038757][T11768] ---- ---- [ 527.044118][T11768] lock(&q->elevator_lock); [ 527.048712][T11768] lock(&q->q_usage_counter(io)#62); [ 527.056625][T11768] lock(&q->elevator_lock); [ 527.063754][T11768] sync(set->srcu); [ 527.067663][T11768] [ 527.067663][T11768] *** DEADLOCK *** [ 527.067663][T11768] [ 527.075812][T11768] 6 locks held by syz.1.1346/11768: [ 527.081034][T11768] #0: ffffffff901a2310 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 527.089244][T11768] #1: ffffffff901a23c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800 [ 527.098258][T11768] #2: ffff88807f5329c8 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0x12e/0x5d0 [ 527.108751][T11768] #3: ffff888028c7e898 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x10c/0x4e0 [ 527.118653][T11768] #4: ffff888028c7e300 (&q->q_usage_counter(queue)#55){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 527.130612][T11768] #5: ffff888028c7e808 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x17d/0x5d0 [ 527.140498][T11768] [ 527.140498][T11768] stack backtrace: [ 527.146411][T11768] CPU: 0 UID: 0 PID: 11768 Comm: syz.1.1346 Tainted: G U syzkaller #0 PREEMPT(full) [ 527.146444][T11768] Tainted: [U]=USER [ 527.146451][T11768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 527.146465][T11768] Call Trace: [ 527.146474][T11768] [ 527.146484][T11768] dump_stack_lvl+0x116/0x1f0 [ 527.146513][T11768] print_circular_bug+0x275/0x350 [ 527.146544][T11768] check_noncircular+0x14c/0x170 [ 527.146576][T11768] __lock_acquire+0x12a6/0x1ce0 [ 527.146611][T11768] lock_sync+0xa0/0x110 [ 527.146644][T11768] ? __synchronize_srcu+0x1c/0x290 [ 527.146680][T11768] ? __synchronize_srcu+0x1c/0x290 [ 527.146716][T11768] __synchronize_srcu+0xa1/0x290 [ 527.146752][T11768] ? __pfx___synchronize_srcu+0x10/0x10 [ 527.146792][T11768] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 527.146820][T11768] blk_mq_quiesce_queue+0x149/0x1b0 [ 527.146852][T11768] elevator_switch+0x17d/0x810 [ 527.146884][T11768] elevator_change+0x391/0x5d0 [ 527.146917][T11768] elevator_set_default+0x2e9/0x380 [ 527.146951][T11768] ? __pfx_elevator_set_default+0x10/0x10 [ 527.146988][T11768] ? disk_register_independent_access_ranges+0x27a/0x3b0 [ 527.147021][T11768] blk_register_queue+0x384/0x4e0 [ 527.147053][T11768] __add_disk+0x74a/0xf00 [ 527.147080][T11768] add_disk_fwnode+0x13f/0x5d0 [ 527.147107][T11768] nbd_dev_add+0x783/0xbb0 [ 527.147132][T11768] ? __pfx_nbd_dev_add+0x10/0x10 [ 527.147162][T11768] ? bpf_lsm_capable+0x9/0x10 [ 527.147192][T11768] ? __radix_tree_lookup+0x21f/0x2c0 [ 527.147215][T11768] nbd_genl_connect+0x8b0/0x1c60 [ 527.147243][T11768] ? __pfx_nbd_genl_connect+0x10/0x10 [ 527.147268][T11768] ? __nla_parse+0x40/0x60 [ 527.147302][T11768] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 527.147338][T11768] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 527.147375][T11768] genl_family_rcv_msg_doit+0x206/0x2f0 [ 527.147407][T11768] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 527.147439][T11768] ? genl_get_cmd+0x194/0x580 [ 527.147471][T11768] ? __radix_tree_lookup+0x21f/0x2c0 [ 527.147493][T11768] genl_rcv_msg+0x55c/0x800 [ 527.147525][T11768] ? __pfx_genl_rcv_msg+0x10/0x10 [ 527.147556][T11768] ? __pfx_nbd_genl_connect+0x10/0x10 [ 527.147586][T11768] netlink_rcv_skb+0x158/0x420 [ 527.147613][T11768] ? __pfx_genl_rcv_msg+0x10/0x10 [ 527.147651][T11768] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 527.147686][T11768] ? netlink_deliver_tap+0x1ae/0xd30 [ 527.147714][T11768] genl_rcv+0x28/0x40 [ 527.147742][T11768] netlink_unicast+0x5a7/0x870 [ 527.147773][T11768] ? __pfx_netlink_unicast+0x10/0x10 [ 527.147806][T11768] netlink_sendmsg+0x8c8/0xdd0 [ 527.147837][T11768] ? __pfx_netlink_sendmsg+0x10/0x10 [ 527.147867][T11768] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 527.147902][T11768] ____sys_sendmsg+0xa95/0xc70 [ 527.147936][T11768] ? copy_msghdr_from_user+0x10a/0x160 [ 527.147962][T11768] ? __pfx_____sys_sendmsg+0x10/0x10 [ 527.148002][T11768] ___sys_sendmsg+0x134/0x1d0 [ 527.148029][T11768] ? __pfx____sys_sendmsg+0x10/0x10 [ 527.148072][T11768] __sys_sendmsg+0x16d/0x220 [ 527.148098][T11768] ? __pfx___sys_sendmsg+0x10/0x10 [ 527.148124][T11768] ? __x64_sys_futex+0x1e0/0x4c0 [ 527.148165][T11768] do_syscall_64+0xcd/0xfa0 [ 527.148192][T11768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.148216][T11768] RIP: 0033:0x7f4935f8eec9 [ 527.148234][T11768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 527.148256][T11768] RSP: 002b:00007f4936e17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 527.148277][T11768] RAX: ffffffffffffffda RBX: 00007f49361e5fa0 RCX: 00007f4935f8eec9 [ 527.148293][T11768] RDX: 0000000020040000 RSI: 0000200000000500 RDI: 0000000000000005 [ 527.148307][T11768] RBP: 00007f4936011f91 R08: 0000000000000000 R09: 0000000000000000 [ 527.148320][T11768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 527.148334][T11768] R13: 00007f49361e6038 R14: 00007f49361e5fa0 R15: 00007ffe1aba29b8 [ 527.148356][T11768] [ 527.537365][ C0] vkms_vblank_simulate: vblank timer overrun [ 529.850427][T11768] nbd: socks must be embedded in a SOCK_ITEM attr