last executing test programs: 12.512403409s ago: executing program 1 (id=2903): socket(0x2b, 0x1, 0x1) r0 = socket(0x25, 0x1, 0x0) sendto$auto(r0, 0x0, 0x0, 0x0, 0x0, 0x3) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bond_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_bridge\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="5c030000", @ANYRES16=0x0, @ANYBLOB="00012dbd7000fddbdf25010000000b0302809db50a3aafac7df4fb043112c0bce1d7a608006400", @ANYRES32=0x0, @ANYBLOB='\b\x00\v\x00', @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB], 0x35c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) shutdown$auto(0xffffffffffffffff, 0x2) socket(0xa, 0x1, 0x100) r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r3, 0x0, 0x7ff, 0x400) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/firmware/acpi/interrupts/ff_pmtimer\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000000)=""/45, 0x2d) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) socket(0x23, 0x80805, 0x0) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/projid_map\x00', 0x2000, 0x0) mmap$auto(0x0, 0x5, 0x4, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) io_uring_setup$auto(0x9, &(0x7f0000000080)={0x7fffffff, 0xd, 0xc000, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0x1000000f, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x10000}, {0x5, 0x1, 0x21bb800, 0x5, 0x6f, 0x2, 0x1, 0x8, 0x100002000}}) write$auto(r6, &(0x7f0000000700)='!dev_\x00\x00\x00\x00\x00', 0x1) fcntl$auto_F_OFD_SETLKW(r6, 0x26, 0x3) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000001680)="a7", 0x80000) 10.593811578s ago: executing program 1 (id=2907): socket(0x80000000000000a, 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x800000000001, 0x0) write$auto(r0, &(0x7f00000005c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D_#\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc^:\xd1\xe3\xf1@\xc0\x93^:Mn#Oi\xaa[X\x93)\x8f\x03K\xe6\xa4\x11?\xf1\x02+\\\xf9\x8b\xe5l5\x11\x006c\x907E\xeb\x81\fB\xe3\xf8n\x8f\x94V\xbcB\x9cm\x9f\x15\x00Q\xf8\x8fFW#?\xd5Z~\xa51\x832\xbd|\x19\xda\x8e\xff\x17\r\x96\xa3\xcc+\xf4a\xffN\xd2_\xe5\\\xf8Lzc\xd4\xa0\x1f\x04_\xf1\xc6\fO\xbe?)Q\xc7\\B\xdb\xeaI\xde\xe9m\xf5\xf9\x19\xd3@IK\xe3c\x0ek\x8drZ\xad\xdc\xbb\xfc\xd4\x1f\xdaOW\x87\xb6Fm\x12\xadw(z\\j\xcc0P\xaeC\x9f\xbf\xd5\xf9\xe3\x85~cG\f\x85\xd6\x84ma\xfd\xdayNj\x80\xdd3^\x87,\x14\x8e\xbe$\x05\x8a\xb0 M\xf6$B TCs\xa9\x91dil[\xfc\a\xbfD\xd9\x8d(F\x1e\f\xec\xe9K|h\xf5\xcaUI\x18#\xbed\xa8C\x8a\xbb\fE\xe6\xa3|\xf7\xa8\xbb\xd3\x97l.V/uc\xb5Q\x1eY\xe0\x03\xa1\xc1\xc8\xe2=RK\x7fWV;\xe4\xccTsf\xa7[\xdd\x9cR\xab\xf81s\xbc\x9c\xaaSGH\x9al\xb9%u\v\xb4\x9d\x95\x16\x01\xbbT\x99S\xf8A\xcd\bRC\xf4\xb0\x1a%\xdd+1\x81\x9d6\x90\xe8\xc6\xc1\x1e\xf0~\xaf\x10g&\xd6\x01l::V\xdbJiVW\xab4G\x97\x9cl', 0x100000a3d9) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) r1 = socket(0xf, 0x3, 0x2) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="000229bd0000fbdbdf3502000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x24}}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="8b0500000000fedbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) r3 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) write$auto_proc_mem_operations_base(r3, &(0x7f0000001680)="a7", 0x80000) r4 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r5, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r4, 0x0, 0xffffff4b) write$auto(0x3, 0x0, 0x5c8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/ping_group_range\x00', 0x202, 0x0) sendfile$auto(r6, r6, 0x0, 0x2) 8.821269442s ago: executing program 1 (id=2910): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setitimer$auto_ITIMER_VIRTUAL(0x1, &(0x7f0000000080)={{0x7, 0x3076000000000000}, {0x10, 0x401}}, &(0x7f00000000c0)={{0xd1f3, 0x100000000}, {0xf33, 0x8}}) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x2, 0x7, 0xd, 0x2, 0x2, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r1 = getpid() mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) lseek$auto(0x3, 0x8, 0x1) ioctl$auto(0x3, 0x400454ca, 0x38) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r3, 0x0, 0x1f42) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f00000000c0)={0x0, 0x7}, 0x3) io_uring_register$auto_IORING_UNREGISTER_NAPI(0xffffffffffffffff, 0x1c, 0x0, 0x8) io_uring_setup$auto(0x3, &(0x7f0000000280)={0x6, 0x7d, 0x0, 0x3843, 0x1, 0x3, r3, [0x8000000, 0xcb7, 0x6], {0x4, 0x5, 0xfffff5d3, 0x2, 0x2, 0x1, 0x7ff, 0x8, 0x80000000}, {0x8, 0x9, 0x7, 0x7, 0xe4ae, 0x95, 0x7ff, 0x8, 0x3}}) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) 8.114341512s ago: executing program 2 (id=2912): mmap$auto(0x0, 0x0, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x40000008000) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x582, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) ioctl$auto(0x3, 0x4020565a, 0x38) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder0\x00', 0x800, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x101, 0x0) ioctl$auto_SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 7.915055489s ago: executing program 3 (id=2913): r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0xffffffffffffb8f1, 0x5, 0x3, 0x613, 0xfffffffffffffffa, 0x100000000000006) select$auto(0x5, 0x0, 0x0, 0x0, 0x0) sysfs$auto(0x2, 0x1a, 0x0) mmap$auto(0x3, 0x40009, 0x8838, 0x9b72, 0x7, 0x8e7) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2506, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x3a32182}, 0xed7138b}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) close_range$auto(0x2, 0x8, 0x0) setresgid$auto(0xffffffffffffffff, 0x0, 0x7fffffffffffffff) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0c\x00', 0x200001, 0x0) recvmmsg$auto(r1, &(0x7f0000000380)={{&(0x7f0000000100)="7faa331330012f3596a77287ca72693c3355ee49c1004b", 0x7, &(0x7f0000000280)={&(0x7f0000000240)="7e995939fe34cb2eeb6cf335e9ec0379214e56ab59b999a7bd5552215d7b916dae3e490a373e75e18ec3f64d21d18202", 0xb8}, 0x2, &(0x7f00000002c0)="fadf6490f9e33e53c4a127a7943078aec05540e189b1bcef8fde0600eb4625f891fde4a5c69c46cccb761212e0ada005da10a87b9187888b9b2dd43f45041f73a5013b68d9d22eb822027a3dafa7f32c94204a643c894e50eb8cdabc4c8608cb2073732f7ff29c38bc19001e0634b88eed097bc898de69f622a48c4481fc1b0324dc656254bda6de28343c2831ce7fa7758f9cbae6eb6e925f832c03f662c7", 0x8, 0x3}, 0x6}, 0x800, 0xe63, &(0x7f00000003c0)={0x9, 0xffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000c80), r2) io_uring_setup$auto(0x6, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r3, &(0x7f0000000040)='//\xf2\x00', 0x80000000) 7.751566924s ago: executing program 2 (id=2914): unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x0, 0x3e, 0x0, 0x9) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400005, 0x100000005}}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card0/pcm0c/sub0/info\x00', 0x4a801, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) 6.585600863s ago: executing program 1 (id=2915): r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0xffffffffffffb8f1, 0x5, 0x3, 0x613, 0xfffffffffffffffa, 0x100000000000006) select$auto(0x5, 0x0, 0x0, 0x0, 0x0) sysfs$auto(0x2, 0x1a, 0x0) mmap$auto(0x3, 0x40009, 0x8838, 0x9b72, 0x7, 0x8e7) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2506, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x3a32182}, 0xed7138b}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) close_range$auto(0x2, 0x8, 0x0) setresgid$auto(0xffffffffffffffff, 0x0, 0x7fffffffffffffff) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0c\x00', 0x200001, 0x0) recvmmsg$auto(r1, &(0x7f0000000380)={{&(0x7f0000000100)="7faa331330012f3596a77287ca72693c3355ee49c1004b", 0x7, &(0x7f0000000280)={&(0x7f0000000240)="7e995939fe34cb2eeb6cf335e9ec0379214e56ab59b999a7bd5552215d7b916dae3e490a373e75e18ec3f64d21d18202", 0xb8}, 0x2, &(0x7f00000002c0)="fadf6490f9e33e53c4a127a7943078aec05540e189b1bcef8fde0600eb4625f891fde4a5c69c46cccb761212e0ada005da10a87b9187888b9b2dd43f45041f73a5013b68d9d22eb822027a3dafa7f32c94204a643c894e50eb8cdabc4c8608cb2073732f7ff29c38bc19001e0634b88eed097bc898de69f622a48c4481fc1b0324dc656254bda6de28343c2831ce7fa7758f9cbae6eb6e925f832c03f662c7", 0x8, 0x3}, 0x6}, 0x800, 0xe63, &(0x7f00000003c0)={0x9, 0xffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000c80), r2) io_uring_setup$auto(0x6, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r3, &(0x7f0000000040)='//\xf2\x00', 0x80000000) 6.10406152s ago: executing program 2 (id=2916): socket(0x2b, 0x1, 0x1) r0 = socket(0x25, 0x1, 0x0) sendto$auto(r0, 0x0, 0x0, 0x0, 0x0, 0x3) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bond_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_bridge\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="5c030000", @ANYRES16=0x0, @ANYBLOB="00012dbd7000fddbdf25010000000b0302809db50a3aafac7df4fb043112c0bce1d7a608006400", @ANYRES32=0x0, @ANYBLOB='\b\x00\v\x00', @ANYRES32=0x0, @ANYBLOB="dd012480c87d4ae394c690971baaad316438304f9304c78ce1ae855a833ce69b6e7720936a84e778f3876eee7e15179525f16cccfe9125fc4f2850bd1c2cb1be2c0021a83872d1108d6ec6166a8d07d1a121bd7d13be9be907000000707d0997c99a6826c3ea5a04d39e72a3f4817743351ba2f2c3dc6af966a11536fa394310694f23a7669e7779c2faff493d44618c5678a23debdb286ece3548e858bd3e76e030752691a85a32de9aedb285133489746d008600ab31e97dd65c18cc1b6d1040d0477099de63df51573a55be1b48a45348e163036f64810725ffebc415e4e18522bcb1c19f854e28b3ecbc36c676dc1d119731b03c1a762a7f3811ee7eb80de105319f0765e43b57973cd9bc25b4442c53cda9448b40ff66b871b24eb6000000bb000c800400cb80051a44191a209df3ecf61d5c04e9c747ea84ce21499f11c4b210e601c6b2e5fdecec2de2fc43c7daeebddb736c658e88b0eae2d04fd00f464703d06ea8cccea839bd3dd325c92706972d18a7369ca7b0586f6c6845d24d4b6093bfd50cbbeb1a2e7f5b776df67161e8b20a3d95e5c477038ff5ed6e9b2b9c5de13653c3f052f4130ece32aff585f96bb5b4a725c44ea1470e671054469d7a6d02c48c11bf7e1c4d322ff8186fb2e5369e23bf7ef025d8e6fcaf0000000015a7d2d3d7c7aee44e30c7af844cfd3bf24c55f23f74b1647f9e1c8e9d5aa9b973c8ccb3154f33a2cf327341c2d874f9d4f0b900f145c993a4709d1eaef1fb9f3e08a2ef07f58044ebcc2226119b012938df1602c544937d280c94edea3b2afba97ad30887507abe1b694dd942fdf47ac7564a00a7991d921b2d935bdfb549bc22f1c012c5968551486f6379ca2f7bc4f517bb4cbd505263c592952697bc2a68d08759c4dc0a2e9969667a85bd31a44d43d2d256a83650fd982a74841f839c7ecdd0c735f44d52e848d5d6ae1b483afa48db8b1ed05f77ee0419e57c87871109bc60aebe8571bbac9dc15e0df2f5c7d87d96257290e27ff4240500000000000000e70b5102d8003000018008000400010000001400020074756e6c300000000000000000000000080003000700000008000100", @ANYRES32=r2, @ANYBLOB], 0x35c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) shutdown$auto(0xffffffffffffffff, 0x2) socket(0xa, 0x1, 0x100) r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r3, 0x0, 0x7ff, 0x400) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/firmware/acpi/interrupts/ff_pmtimer\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000000)=""/45, 0x2d) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) socket(0x23, 0x80805, 0x0) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/projid_map\x00', 0x2000, 0x0) mmap$auto(0x0, 0x5, 0x4, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) io_uring_setup$auto(0x9, &(0x7f0000000080)={0x7fffffff, 0xd, 0xc000, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0x1000000f, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x10000}, {0x5, 0x1, 0x21bb800, 0x5, 0x6f, 0x2, 0x1, 0x8, 0x100002000}}) write$auto(r6, &(0x7f0000000700)='!dev_\x00\x00\x00\x00\xdc', 0x1) fcntl$auto_F_OFD_SETLKW(r6, 0x26, 0x3) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000001680)="a7", 0x80000) 6.049092531s ago: executing program 3 (id=2917): r0 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x40402, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,v\xf58\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sg0\x00', 0x0, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$auto(r3, 0x110, 0x4, 0x0, 0x4) ioctl$auto_BLKSECTGET2(r2, 0x1267, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/ipvlan1/retrans_time\x00', 0x2242, 0x0) sendfile$auto(r4, r4, 0x0, 0x200) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/irq/2/smp_affinity\x00', 0x280, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/tracing/trace_pipe\x00', 0x20c01, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0xb, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) recvmmsg$auto(r1, &(0x7f0000000240)={{&(0x7f00000000c0)="be9c33df5c8c353735ae9f0e59896ce734a2947de470705514969d5d39224c22b3e740f3eb49f4caac69d2876cd1c27ee4a8a6f1800b38e925041b8cb1a698e738fa874547d44e0a4a5cb5a7cfae9a5940c7d0294ba5e07d0a0e1fc49e31effbba8d3c76977c377b68625c5c083983cea584", 0x7, &(0x7f0000000200)={&(0x7f00000001c0), 0x5}, 0x6, 0x0, 0x7, 0x2}, 0x9}, 0x7, 0x8, 0x0) socket(0xb, 0x3, 0x9) bind$auto(0x3, 0x0, 0x4) mmap$auto(0x4, 0x802000c, 0x8, 0x10, 0x40000000000a5, 0x8000) r6 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r6, 0x0, 0x100000001, 0x100) readv$auto(0x3, 0x0, 0x4) statmount$auto(0x0, &(0x7f0000000180)={0xb, 0x1, 0x44f, 0x7, 0x5, 0x1007181, 0x8a0d, 0x7, 0x7, 0x7ff, 0x89, 0x100026, 0x4, 0x200004000001, 0x384, 0xfffffffffffffffa, 0x0, 0x0, 0x30, 0x0, 0x864, 0xb, 0x22000, 0x200, 0x0, 0x9, 0x0, 0x0, 0x7fff, 0x0, 0x0, [0x0, 0x100000000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0xb, 0xd) ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0xfffffff7effffd08, &(0x7f00000001c0)) read$auto_ftrace_set_event_notrace_pid_fops_trace_events(r0, &(0x7f0000000080)=""/21, 0x15) 5.784036541s ago: executing program 0 (id=2919): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x1, 0x84) getsockopt$auto(r0, 0x0, 0x53, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) socket(0x18, 0x1, 0x106) userfaultfd$auto(0x5) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x3, 0xb) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001080)='/proc/thread-self/net/rxrpc/locals\x00', 0x40080, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x0, 0x0, 0x0, &(0x7f00000002c0)={[0x6, 0x4, 0xf, 0x5, 0x958b, 0x2, 0x8, 0x5, 0x3, 0x62, 0x40008000001f, 0x4, 0x5, 0x9, 0x1, 0x200010000]}, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bdi/1:15/power/runtime_suspended_time\x00', 0x129c40, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001c00)=""/4111, 0x100f) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon7\x00', 0x40080, 0x0) r3 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x101100, 0x0) ioctl$auto_SW_SYNC_GET_DEADLINE(r3, 0xc0105702, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x3, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) 4.420347803s ago: executing program 3 (id=2920): r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) write$auto(r0, &(0x7f0000000700)=')dev_\x00\x00\x00\x00\x00', 0x1) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000000), 0xc000, 0x0) pwrite64$auto(0xc8, &(0x7f0000000180)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00v\xd9\xe5H.-\x14\xee\xbc\xae\xe1\x85\xb2b\xd42\x89\x05e\x03z\xe6q\xcd\x91\tM\xd2\x90\xc91\xd9\x86\xe4\x8e\x0fI\xf0b2\nfa\xb8\x1a\xdb\xaa0P\xca\xb2W\xe3\x14\xb9Cx\x0e4\xc9\xb4\xdc4\xe3\x8f\x1c\xa5\x89\x8d\x84V\x97dg \x9f\xcd\x8fA\x16\x01\xc5.\x7fG\x86L\xa4\xd6h\xea\x11x\xce\x96t\xc7~# )\x8c6\x06\xd7\xfcu\x8c{t\xa5\x92JW\x8b\xb3Oj%\xb5H\x91F\x1b\x01\xef\x0e\xc5\xac\xcfK\xd5\x98\xce\xd6?\t\xa8\xb7\xce\x87\xdb\xb0\xaa\x8al8qF\re\xa7\xda\x1f\x9ad\b!\xddBD\xd9', 0x3c, 0x200001000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = pipe$auto(0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xae00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) socketpair$auto(0x1, 0x3, 0x5, 0x0) ioctl$auto(0x3, 0xc048aec8, r1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) lsetxattr$auto(0x0, &(0x7f0000005500)='[!*)\x00', &(0x7f00000000c0)="fa926245e293f37256dfd4988a3db86665fb6d1011a962bde919ee4211d61661686c5a18f0b1072610af1c", 0x100, 0xfffffffc) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/block/nbd11/sched/async_depth\x00', 0x2000, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r3 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_CHANNEL_INFO2(r3, 0x80184132, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000080), 0xffffffffffffffff) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/pcmC1D1p\x00', 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0xdd01, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram2\x00', 0x14f602, 0x0) 4.320703047s ago: executing program 0 (id=2921): socket(0x2b, 0x1, 0x1) r0 = socket(0x25, 0x1, 0x0) sendto$auto(r0, 0x0, 0x0, 0x0, 0x0, 0x3) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bond_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_bridge\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="5c030000", @ANYRES16=0x0, @ANYBLOB="00012dbd7000fddbdf25010000000b0302809db50a3aafac7df4fb043112c0bce1d7a608006400", @ANYRES32=0x0, @ANYBLOB='\b\x00\v\x00', @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB], 0x35c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) shutdown$auto(0xffffffffffffffff, 0x2) socket(0xa, 0x1, 0x100) r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r3, 0x0, 0x7ff, 0x400) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/firmware/acpi/interrupts/ff_pmtimer\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000000)=""/45, 0x2d) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) socket(0x23, 0x80805, 0x0) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/projid_map\x00', 0x2000, 0x0) mmap$auto(0x0, 0x5, 0x4, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) io_uring_setup$auto(0x9, &(0x7f0000000080)={0x7fffffff, 0xd, 0xc000, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0x1000000f, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x10000}, {0x5, 0x1, 0x21bb800, 0x5, 0x6f, 0x2, 0x1, 0x8, 0x100002000}}) write$auto(r6, &(0x7f0000000700)='!dev_\x00\x00\x00\x00\x00', 0x1) fcntl$auto_F_OFD_SETLKW(r6, 0x26, 0x3) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000001680)="a7", 0x80000) 4.113592629s ago: executing program 2 (id=2922): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x1, 0x84) getsockopt$auto(r0, 0x0, 0x53, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) socket(0x18, 0x1, 0x106) userfaultfd$auto(0x5) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001080)='/proc/thread-self/net/rxrpc/locals\x00', 0x40080, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x0, 0x0, 0x0, &(0x7f00000002c0)={[0x6, 0x4, 0xf, 0x5, 0x958b, 0x2, 0x8, 0x5, 0x3, 0x62, 0x40008000001f, 0x4, 0x5, 0x9, 0x1, 0x200010000]}, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bdi/1:15/power/runtime_suspended_time\x00', 0x129c40, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001c00)=""/4111, 0x100f) sysfs$auto(0x2, 0x23, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r3, &(0x7f0000000840)="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", 0xb87) ioctl$auto_SNDCTL_TMR_SELECT(0xffffffffffffffff, 0x40045408, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x58842, 0x0) 3.94798485s ago: executing program 1 (id=2923): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setitimer$auto_ITIMER_VIRTUAL(0x1, &(0x7f0000000080)={{0x7, 0x3076000000000000}, {0x10, 0x401}}, &(0x7f00000000c0)={{0xd1f3, 0x100000000}, {0xf33, 0x8}}) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x2, 0x7, 0xd, 0x2, 0x2, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r1 = getpid() mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) lseek$auto(0x3, 0x8, 0x1) ioctl$auto(0x3, 0x400454ca, 0x38) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) msync$auto(0x0, 0xe0, 0x6) read$auto(0xffffffffffffffff, 0x0, 0x1f42) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f00000000c0)={0x0, 0x7}, 0x3) io_uring_register$auto_IORING_UNREGISTER_NAPI(0xffffffffffffffff, 0x1c, 0x0, 0x8) io_uring_setup$auto(0x3, &(0x7f0000000280)={0x6, 0x7d, 0x0, 0x3843, 0x1, 0x3, 0xffffffffffffffff, [0x8000000, 0xcb7, 0x6], {0x4, 0x5, 0xfffff5d3, 0x2, 0x2, 0x1, 0x7ff, 0x8, 0x80000000}, {0x8, 0x9, 0x7, 0x7, 0xe4ae, 0x95, 0x7ff, 0x8, 0x3}}) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) 3.119949461s ago: executing program 3 (id=2924): mmap$auto(0x0, 0x0, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x40000008000) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x582, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) ioctl$auto(0x3, 0x4020565a, 0x38) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder0\x00', 0x800, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x10303f, 0x0) ioctl$auto_SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 2.83983011s ago: executing program 0 (id=2925): r0 = socket(0x2a, 0x2, 0x8001) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) socket(0x18, 0x5, 0x2) bind$auto(0x3, &(0x7f0000000000), 0x6b) mmap$auto(0x0, 0x200004, 0x2, 0x40eb2, r1, 0x300000000000) read$auto(r1, 0x0, 0x1f40) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 2.774609975s ago: executing program 2 (id=2926): r0 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x8a002, 0x0) ioctl$auto(r1, 0x2202, r1) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) setresuid$auto(0x0, 0x8, 0x0) setfsuid$auto(0x0) getsockopt$auto(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x84000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000380), r0) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r5, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40010) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01032cb57000fbe0df250a00000006000100170000e22bbf3fcf4040e070d0a6c62bafb8b3938f741015ce0156a21b6f4cb954cc6997af8bcebab6f9750e9de4e13ad295a4a40b1f972a575ed0c60d2ad237fefa6f70376eea9faf614cb39a850102438891c057f9f18c9354443f0a2193218d9aedd7c184f02435d6ba18f1a094965b6c8bbcefedd757427b0f12fa88b487dc3caa09810b3d9975fe78a4e6b21c8b1fe8c72d133fc060265d076309551060c8b03837140c0faf0f3677128a290423d1c01c5628538c8b96dbb99fa36cee4be947c9d7e920f9bc9a592f51a3ec86f2856daa583df930493ccce21cdd2ac50277c5e4d4"], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r3) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC2\x00', 0xa02, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x40000, 0x0) read$auto(0x3, 0x0, 0x8) close_range$auto(r2, 0xffffffffffffffff, 0x3) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x80000000000000a, 0x2, 0x0) 2.768019173s ago: executing program 3 (id=2927): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x1, 0x84) getsockopt$auto(r0, 0x0, 0x53, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) socket(0x18, 0x1, 0x106) userfaultfd$auto(0x5) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x3, 0xb) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001080)='/proc/thread-self/net/rxrpc/locals\x00', 0x40080, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x0, 0x0, 0x0, &(0x7f00000002c0)={[0x6, 0x4, 0xf, 0x5, 0x958b, 0x2, 0x8, 0x5, 0x3, 0x62, 0x40008000001f, 0x4, 0x5, 0x9, 0x1, 0x200010000]}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bdi/1:15/power/runtime_suspended_time\x00', 0x129c40, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon7\x00', 0x40080, 0x0) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x101100, 0x0) ioctl$auto_SW_SYNC_GET_DEADLINE(r2, 0xc0105702, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x3, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) 2.350382485s ago: executing program 0 (id=2928): r0 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x8a002, 0x0) ioctl$auto(r1, 0x2202, r1) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) setresuid$auto(0x0, 0x8, 0x0) setfsuid$auto(0x0) getsockopt$auto(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x84000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000380), r0) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r5, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40010) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01032cb57000fbe0df250a00000006000100170000e22bbf3fcf4040e070d0a6c62bafb8b3938f741015ce0156a21b6f4cb954cc6997af8bcebab6f9750e9de4e13ad295a4a40b1f972a575ed0c60d2ad237fefa6f70376eea9faf614cb39a850102438891c057f9f18c9354443f0a2193218d9aedd7c184f02435d6ba18f1a094965b6c8bbcefedd757427b0f12fa88b487dc3caa09810b3d9975fe78a4e6b21c8b1fe8c72d133fc060265d076309551060c8b03837140c0faf0f3677128a290423d1c01c5628538c8b96dbb99fa36cee4be947c9d7e920f9bc9a592f51a3ec86f2856daa583df930493ccce21cdd2ac50277c5e4d4"], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r3) ioctl$auto_TIOCSETD2(r2, 0x5423, &(0x7f00000001c0)="5aee5e35980d1fd320c7735ed0432691b829391c7caedba1d69aaf68f1c49e0d81582a7da536cbe2ed12e4fa5ffe08c02cb1f465a9c38fdbcddf7dad69574815fe49f89209") openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x40000, 0x0) read$auto(0x3, 0x0, 0x8) close_range$auto(r2, 0xffffffffffffffff, 0x3) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x80000000000000a, 0x2, 0x0) 1.332958853s ago: executing program 2 (id=2929): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setitimer$auto_ITIMER_VIRTUAL(0x1, &(0x7f0000000080)={{0x7, 0x3076000000000000}, {0x10, 0x401}}, &(0x7f00000000c0)={{0xd1f3, 0x100000000}, {0xf33, 0x8}}) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x2, 0x7, 0xd, 0x2, 0x2, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r1 = getpid() mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) lseek$auto(0x3, 0x8, 0x1) ioctl$auto(0x3, 0x400454ca, 0x38) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, &(0x7f0000000000)='//\xf2\x00', 0x80000000) msync$auto(0x0, 0xe0, 0x6) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r3, 0x0, 0x1f42) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f00000000c0)={0x0, 0x7}, 0x3) io_uring_register$auto_IORING_UNREGISTER_NAPI(0xffffffffffffffff, 0x1c, 0x0, 0x8) io_uring_setup$auto(0x3, &(0x7f0000000280)={0x6, 0x7d, 0x0, 0x3843, 0x1, 0x3, r3, [0x8000000, 0xcb7, 0x6], {0x4, 0x5, 0xfffff5d3, 0x2, 0x2, 0x1, 0x7ff, 0x8, 0x80000000}, {0x8, 0x9, 0x7, 0x7, 0xe4ae, 0x95, 0x7ff, 0x8, 0x3}}) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) 952.522197ms ago: executing program 0 (id=2930): unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x0, 0x3e, 0x0, 0x9) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400005, 0x100000005}}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card0/pcm0c/sub0/info\x00', 0x4a801, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) 639.160009ms ago: executing program 3 (id=2931): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setitimer$auto_ITIMER_VIRTUAL(0x1, &(0x7f0000000080)={{0x7, 0x3076000000000000}, {0x10, 0x401}}, &(0x7f00000000c0)={{0xd1f3, 0x100000000}, {0xf33, 0x8}}) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x2, 0x7, 0xd, 0x2, 0x2, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r1 = getpid() mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) lseek$auto(0x3, 0x8, 0x1) ioctl$auto(0x3, 0x400454ca, 0x38) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) msync$auto(0x0, 0xe0, 0x6) read$auto(0xffffffffffffffff, 0x0, 0x1f42) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f00000000c0)={0x0, 0x7}, 0x3) io_uring_register$auto_IORING_UNREGISTER_NAPI(0xffffffffffffffff, 0x1c, 0x0, 0x8) io_uring_setup$auto(0x3, &(0x7f0000000280)={0x6, 0x7d, 0x0, 0x3843, 0x1, 0x3, 0xffffffffffffffff, [0x8000000, 0xcb7, 0x6], {0x4, 0x5, 0xfffff5d3, 0x2, 0x2, 0x1, 0x7ff, 0x8, 0x80000000}, {0x8, 0x9, 0x7, 0x7, 0xe4ae, 0x95, 0x7ff, 0x8, 0x3}}) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) 231.148621ms ago: executing program 1 (id=2932): unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/bonding/primary_reselect\x00', 0x1e2142, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D1p\x00', 0x149000, 0x0) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/inhibited\x00', 0x20b42, 0x0) write$auto(r0, &(0x7f0000000340)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,D\xbf&\x9eb|\n\xee\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbb\xbb\xf9\xcd\xc0\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x1d\x88mr\xfd\xf1\x1b;\xabt\xd1a}\x10\xab\xeb_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL\x15/\xf9\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\aA\xe9(\x00\x00\x00\x00\x00N\xb5J\xc8A\xc7m\xbf\x19\xae\x9d\xcaR\x0f\xa8\xdf\xe4M\xe1>k\x93\x01\xe5\xba(\x96K\xc1=d3\xe00u\"`]\xb3\x11a\x1cSn\xe7\x87\x84\x93\xe4\x90]\x86\x10\xe5\xacK\x99\xc1$\x91\x05\x00\x00\x00O\x01xc\xa8\x9a\x1bK\x00\x00\xf6\xa2\x8a\x7f4\f[BLH$6\xfb,\xd8\xd3\xd0\xa1v\x14\xcd\x1a\xbdx\xaed\x9d\\\xd0\xff\xd2Y\xc4\x9fT\xb2\xd5\r\xf1#\xd5\xf2\x9cU\xd1:+\xb63\xae\xc1\xf7\xe1\xd4\x879?\xdd\xd6\xd4\xa3\xc7\xd8 S\xfc:\xe1{\x16\\h\x9d\xbc#KEC\x1a\xf9KH`*\xb2\xff\xe9I\xd1\x82e:_\x9b\xf1\xc1\x8e\xf0\xc46\x98\xd6u\x90\x18\x8f\xe8\xc3%\x8e9\xab\x7f\x0e\n\xb2\xa4\xef\x90\xb16\x04\xbc\xc9\xdc\xad,\xcc\xad}DY\x1d\x1fv\x90\x97u\xa1\xfb\x13\xa93\xb6XJ\x84\xe3\xc1)\x98\xae5q\xa5L\x87\x1aq\x1d0\xf1\xcb\xe5\xf4F\xc2\xea!*\xf9\xb3,w\"\xf2\xd0\xd1Vj\xd0\x06\xcc\xbc\xee0\x98.\xd9dC\x8e9\xfdM\\\xc5&\\\x9b\x81\x88t\xa4\x9f\xd1P\xd2e\x9c\xf9\xd2\xaf', 0xb) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x4}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) ioctl$auto_SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setsockopt$auto(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x10000) r3 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x0) fchdir$auto(r3) mkdir$auto(&(0x7f0000000040)='./cgroup\x00', 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/cgroup.type\x00', 0x103042, 0x0) rmdir$auto(&(0x7f0000000080)='./cgroup\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x20342, 0x0) readv$auto(r5, &(0x7f0000000240)={0x0, 0x9}, 0x3) close_range$auto(r4, 0x8, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(r4, 0x0, 0x9a6, 0x3f) 0s ago: executing program 0 (id=2933): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/lo/mtu\x00', 0x2062, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(0x0, r1) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000054c0), r1) sendmsg$auto_ETHTOOL_MSG_PLCA_SET_CFG(r1, &(0x7f0000005600)={0x0, 0x0, &(0x7f00000055c0)={&(0x7f0000005500)={0x14, r2, 0x1b15f34c990b8f8f, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004080}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c72da808bf9779d790fb28"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) r5 = socket(0x10, 0x2, 0x4) write$auto(r5, &(0x7f0000000000)='-\x00', 0x2fb) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x3, 0x0, 0x0, 0x0, 0x8000000000000000) r6 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r7 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) r8 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x80044943, 0x0) ioctl$auto_I2C_SMBUS(r7, 0x720, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000ffdbdf25020000000800020007000000080001000c00000008000300fe0300000800030009000000080002000100000008000200010000000800010000100000"], 0x4c}, 0x1, 0x0, 0x0, 0x20048010}, 0x80) write$auto(r0, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r0, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) bpf$auto(0x0, &(0x7f0000000300)=@bpf_attr_7={@prog_id=0x6, 0x6bd, 0x4, r6}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) fanotify_init$auto(0x5, 0x0) creat$auto(&(0x7f0000000000)='./file0\x00', 0x3ff) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x8, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x8000, 0xeb1, 0x401, 0x7fff) close_range$auto(0x0, 0xfffffffffffff000, 0x2) kernel console output (not intermixed with test programs): 836.042414][T17760] ? __pfx___sys_socket+0x10/0x10 [ 836.042443][T17760] ? xfd_validate_state+0x61/0x180 [ 836.042486][T17760] __x64_sys_socket+0x72/0xb0 [ 836.042514][T17760] ? lockdep_hardirqs_on+0x7c/0x110 [ 836.042549][T17760] do_syscall_64+0xcd/0x4c0 [ 836.042588][T17760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.042613][T17760] RIP: 0033:0x7fef7b78eec9 [ 836.042635][T17760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 836.042661][T17760] RSP: 002b:00007fef7c712038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 836.042688][T17760] RAX: ffffffffffffffda RBX: 00007fef7b9e5fa0 RCX: 00007fef7b78eec9 [ 836.042705][T17760] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 836.042721][T17760] RBP: 00007fef7b811f91 R08: 0000000000000000 R09: 0000000000000000 [ 836.042736][T17760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 836.042751][T17760] R13: 00007fef7b9e6038 R14: 00007fef7b9e5fa0 R15: 00007ffc84e89908 [ 836.042782][T17760] [ 836.238761][ C0] vkms_vblank_simulate: vblank timer overrun [ 836.648486][T17772] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2411'. [ 836.691609][T14904] team0 (unregistering): Port device team_slave_0 removed [ 838.098440][T17772] hsr_slave_0 (unregistering): left promiscuous mode [ 838.376648][T17619] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 838.433478][T17619] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 838.631832][T17619] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 838.678373][T17619] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 839.516675][T17831] random: crng reseeded on system resumption [ 839.914119][T17619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 840.027346][T17619] 8021q: adding VLAN 0 to HW filter on device team0 [ 840.148104][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.155341][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 840.206132][T14905] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.213320][T14905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 841.273078][T17619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 841.433085][T17619] veth0_vlan: entered promiscuous mode [ 841.526455][T17619] veth1_vlan: entered promiscuous mode [ 841.769729][T17619] veth0_macvtap: entered promiscuous mode [ 841.856691][T17619] veth1_macvtap: entered promiscuous mode [ 841.969444][T17619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 842.009683][T17866] zswap: compressor not available [ 842.022425][T17619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 842.090669][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.106459][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.121127][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.138847][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.466405][T14892] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.494285][T14892] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.864325][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.881611][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.106502][T17885] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 845.129350][T16311] Bluetooth: hci2: command 0x0c1a tx timeout [ 845.152168][T17880] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 845.336805][T17880] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 845.347207][T17880] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 845.361707][T17880] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 845.382187][T17880] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 845.409245][T17880] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 845.437349][T17880] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 845.492288][T17880] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 845.538491][T17880] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 845.867999][T17918] FAULT_INJECTION: forcing a failure. [ 845.867999][T17918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 845.942329][T17918] CPU: 0 UID: 0 PID: 17918 Comm: syz.2.2430 Not tainted syzkaller #0 PREEMPT(full) [ 845.942362][T17918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 845.942378][T17918] Call Trace: [ 845.942387][T17918] [ 845.942397][T17918] dump_stack_lvl+0x16c/0x1f0 [ 845.942438][T17918] should_fail_ex+0x512/0x640 [ 845.942479][T17918] _copy_to_user+0x32/0xd0 [ 845.942515][T17918] simple_read_from_buffer+0xcb/0x170 [ 845.942544][T17918] proc_fail_nth_read+0x197/0x240 [ 845.942574][T17918] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 845.942604][T17918] ? rw_verify_area+0xcf/0x6c0 [ 845.942629][T17918] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 845.942656][T17918] vfs_read+0x1e1/0xcf0 [ 845.942690][T17918] ? __pfx___mutex_lock+0x10/0x10 [ 845.942726][T17918] ? __pfx_vfs_read+0x10/0x10 [ 845.942763][T17918] ? __fget_files+0x20e/0x3c0 [ 845.942801][T17918] ksys_read+0x12a/0x250 [ 845.942829][T17918] ? __pfx_ksys_read+0x10/0x10 [ 845.942868][T17918] do_syscall_64+0xcd/0x4c0 [ 845.942907][T17918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.942931][T17918] RIP: 0033:0x7f326078d8dc [ 845.942951][T17918] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 845.942974][T17918] RSP: 002b:00007f32616ac030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 845.942997][T17918] RAX: ffffffffffffffda RBX: 00007f32609e5fa0 RCX: 00007f326078d8dc [ 845.943014][T17918] RDX: 000000000000000f RSI: 00007f32616ac0a0 RDI: 0000000000000004 [ 845.943030][T17918] RBP: 00007f32616ac090 R08: 0000000000000000 R09: 0000000000000000 [ 845.943045][T17918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 845.943060][T17918] R13: 00007f32609e6038 R14: 00007f32609e5fa0 R15: 00007ffd166a0098 [ 845.943095][T17918] [ 846.503400][ T5869] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 846.513273][ T5869] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 846.522680][ T5869] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 846.530763][ T5869] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 846.541501][ T5869] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 847.147091][T14904] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.204229][T16311] Bluetooth: hci3: command 0x0419 tx timeout [ 847.264826][T14904] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.295701][T17932] chnl_net:caif_netlink_parms(): no params data found [ 847.357398][T16311] Bluetooth: hci1: command 0x0c1a tx timeout [ 847.412724][T14904] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.436548][T16311] Bluetooth: hci4: command 0x0c1a tx timeout [ 847.603631][T14904] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.797119][T17932] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.814819][T17932] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.822055][T17932] bridge_slave_0: entered allmulticast mode [ 847.839653][T17932] bridge_slave_0: entered promiscuous mode [ 847.866301][T17932] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.895203][T17932] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.902374][T17932] bridge_slave_1: entered allmulticast mode [ 847.937378][T17932] bridge_slave_1: entered promiscuous mode [ 848.199578][T17932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 848.226857][T17932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 848.551809][T16311] Bluetooth: hci0: command tx timeout [ 849.267798][T16311] Bluetooth: hci3: command 0x0419 tx timeout [ 849.428709][T16311] Bluetooth: hci1: command 0x0c1a tx timeout [ 849.505737][T16311] Bluetooth: hci4: command 0x0c1a tx timeout [ 849.750334][T14904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 849.761720][T14904] bond0 (unregistering): Released all slaves [ 849.785012][T17932] team0: Port device team_slave_0 added [ 849.890721][T17932] team0: Port device team_slave_1 added [ 850.100256][T17932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 850.130477][T17932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 850.156467][ C1] vkms_vblank_simulate: vblank timer overrun [ 850.173312][T17932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 850.276137][T17932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 850.284563][T17932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 850.314330][T17932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 850.499288][T17932] hsr_slave_0: entered promiscuous mode [ 850.500064][T17932] hsr_slave_1: entered promiscuous mode [ 850.501137][T17932] debugfs: 'hsr0' already exists in 'hsr' [ 850.501164][T17932] Cannot create hsr debugfs directory [ 850.620049][T16311] Bluetooth: hci0: command tx timeout [ 851.495540][T16311] Bluetooth: hci1: command 0x0c1a tx timeout [ 851.583552][T16311] Bluetooth: hci4: command 0x0c1a tx timeout [ 851.806338][T14904] hsr_slave_0: left promiscuous mode [ 851.807156][T14904] hsr_slave_1: left promiscuous mode [ 851.807838][T14904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 851.807861][T14904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 851.808718][T14904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 851.808738][T14904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 851.848634][T14904] veth1_macvtap: left promiscuous mode [ 851.862066][T14904] veth0_macvtap: left promiscuous mode [ 851.914065][T14904] veth1_vlan: left promiscuous mode [ 851.919682][T14904] veth0_vlan: left promiscuous mode [ 852.701921][T16311] Bluetooth: hci0: command tx timeout [ 853.061049][T14904] team0 (unregistering): Port device team_slave_1 removed [ 853.091874][T18037] FAULT_INJECTION: forcing a failure. [ 853.091874][T18037] name failslab, interval 1, probability 0, space 0, times 0 [ 853.135829][T18037] CPU: 1 UID: 0 PID: 18037 Comm: syz.2.2449 Not tainted syzkaller #0 PREEMPT(full) [ 853.135864][T18037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 853.135880][T18037] Call Trace: [ 853.135889][T18037] [ 853.135900][T18037] dump_stack_lvl+0x16c/0x1f0 [ 853.135944][T18037] should_fail_ex+0x512/0x640 [ 853.135985][T18037] ? fs_reclaim_acquire+0xae/0x150 [ 853.136027][T18037] should_failslab+0xc2/0x120 [ 853.136071][T18037] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 853.136106][T18037] ? security_inode_alloc+0x3b/0x2b0 [ 853.136143][T18037] security_inode_alloc+0x3b/0x2b0 [ 853.136175][T18037] inode_init_always_gfp+0xce4/0x1030 [ 853.136213][T18037] alloc_inode+0x86/0x240 [ 853.136250][T18037] new_inode+0x22/0x1c0 [ 853.136290][T18037] __debugfs_create_file+0x11c/0x6b0 [ 853.136328][T18037] debugfs_create_file_full+0x41/0x60 [ 853.136365][T18037] kvm_dev_ioctl+0x153f/0x1af0 [ 853.136406][T18037] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 853.136446][T18037] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 853.136476][T18037] __x64_sys_ioctl+0x18b/0x210 [ 853.136520][T18037] do_syscall_64+0xcd/0x4c0 [ 853.136563][T18037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.136590][T18037] RIP: 0033:0x7f326078eec9 [ 853.136613][T18037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 853.136638][T18037] RSP: 002b:00007f326168b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 853.136663][T18037] RAX: ffffffffffffffda RBX: 00007f32609e6090 RCX: 00007f326078eec9 [ 853.136682][T18037] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000009 [ 853.136698][T18037] RBP: 00007f3260811f91 R08: 0000000000000000 R09: 0000000000000000 [ 853.136715][T18037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 853.136731][T18037] R13: 00007f32609e6128 R14: 00007f32609e6090 R15: 00007ffd166a0098 [ 853.136766][T18037] [ 853.348483][T16311] Bluetooth: hci4: unexpected event 0x1d length: 6 > 5 [ 853.348773][T18037] debugfs: out of free dentries, can not create file 'mmu_cache_miss' [ 853.378883][T14904] team0 (unregistering): Port device team_slave_0 removed [ 854.758556][T16311] Bluetooth: hci0: command tx timeout [ 856.072393][T17932] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 856.120946][T17932] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 856.177257][T17932] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 856.207837][T17932] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 856.349528][T18082] Trying to write to read-only block-device sda1 [ 856.603859][T17932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 856.760540][T17932] 8021q: adding VLAN 0 to HW filter on device team0 [ 856.783617][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.790813][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 856.892913][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.900102][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 856.924001][T18092] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2457'. [ 857.244775][T17932] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 857.267681][T17932] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 857.662931][T18107] random: crng reseeded on system resumption [ 857.686944][T18096] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input10 [ 858.408537][T17932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 858.657256][T17932] veth0_vlan: entered promiscuous mode [ 858.671076][T17932] veth1_vlan: entered promiscuous mode [ 859.107367][T17932] veth0_macvtap: entered promiscuous mode [ 859.160362][T17932] veth1_macvtap: entered promiscuous mode [ 859.331344][T17932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 859.361399][T17932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 859.393081][T14897] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.448412][T14897] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.567335][T14897] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.704752][T14897] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.933320][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 859.941171][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.162606][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.191182][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 861.857141][T18189] random: crng reseeded on system resumption [ 861.988968][T18192] binder: 18191:18192 ioctl c018620c 0 returned -1 [ 862.027460][T18192] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2470'. [ 862.819011][T18207] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 863.969333][T18230] random: crng reseeded on system resumption [ 864.105548][T18219] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2473'. [ 864.397399][T18229] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2475'. [ 865.378489][T18261] random: crng reseeded on system resumption [ 867.758536][T18280] FAULT_INJECTION: forcing a failure. [ 867.758536][T18280] name failslab, interval 1, probability 0, space 0, times 0 [ 867.777924][T18280] CPU: 0 UID: 0 PID: 18280 Comm: syz.2.2479 Not tainted syzkaller #0 PREEMPT(full) [ 867.777960][T18280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 867.777976][T18280] Call Trace: [ 867.777985][T18280] [ 867.777995][T18280] dump_stack_lvl+0x16c/0x1f0 [ 867.778041][T18280] should_fail_ex+0x512/0x640 [ 867.778078][T18280] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 867.778109][T18280] should_failslab+0xc2/0x120 [ 867.778150][T18280] __kmalloc_cache_noprof+0x6a/0x3e0 [ 867.778176][T18280] ? _raw_spin_unlock+0x28/0x50 [ 867.778207][T18280] ? snd_ctl_open+0x174/0x5f0 [ 867.778246][T18280] snd_ctl_open+0x174/0x5f0 [ 867.778281][T18280] ? __pfx_snd_ctl_open+0x10/0x10 [ 867.778314][T18280] snd_open+0x22d/0x4c0 [ 867.778339][T18280] ? __pfx_snd_open+0x10/0x10 [ 867.778363][T18280] chrdev_open+0x231/0x6a0 [ 867.778396][T18280] ? __pfx_apparmor_file_open+0x10/0x10 [ 867.778426][T18280] ? __pfx_chrdev_open+0x10/0x10 [ 867.778460][T18280] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 867.778494][T18280] do_dentry_open+0x97f/0x1530 [ 867.778525][T18280] ? __pfx_chrdev_open+0x10/0x10 [ 867.778566][T18280] vfs_open+0x82/0x3f0 [ 867.778604][T18280] path_openat+0x1de4/0x2cb0 [ 867.778643][T18280] ? __pfx_path_openat+0x10/0x10 [ 867.778683][T18280] do_filp_open+0x20b/0x470 [ 867.778714][T18280] ? __pfx_do_filp_open+0x10/0x10 [ 867.778769][T18280] ? alloc_fd+0x471/0x7d0 [ 867.778806][T18280] do_sys_openat2+0x11b/0x1d0 [ 867.778842][T18280] ? __pfx_do_sys_openat2+0x10/0x10 [ 867.778892][T18280] __x64_sys_openat+0x174/0x210 [ 867.778916][T18280] ? __pfx___x64_sys_openat+0x10/0x10 [ 867.778954][T18280] do_syscall_64+0xcd/0x4c0 [ 867.778995][T18280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.779019][T18280] RIP: 0033:0x7f326078eec9 [ 867.779041][T18280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 867.779063][T18280] RSP: 002b:00007f326166a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 867.779086][T18280] RAX: ffffffffffffffda RBX: 00007f32609e6180 RCX: 00007f326078eec9 [ 867.779102][T18280] RDX: 0000000000000802 RSI: 00002000000010c0 RDI: ffffffffffffff9c [ 867.779124][T18280] RBP: 00007f3260811f91 R08: 0000000000000000 R09: 0000000000000000 [ 867.779138][T18280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 867.779153][T18280] R13: 00007f32609e6218 R14: 00007f32609e6180 R15: 00007ffd166a0098 [ 867.779183][T18280] [ 868.288697][T18304] random: crng reseeded on system resumption [ 869.491914][T18316] random: crng reseeded on system resumption [ 871.920401][T18354] random: crng reseeded on system resumption [ 872.015045][T18350] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2496'. [ 873.423723][T18386] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2505'. [ 873.894435][T18384] binder: 18382:18384 ioctl c018620c 0 returned -1 [ 874.015097][T18384] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2504'. [ 874.800507][T18408] nvme_fabrics: missing parameter 'transport=%s' [ 874.821034][T18408] nvme_fabrics: missing parameter 'nqn=%s' [ 875.488823][ T30] audit: type=1804 audit(4294967437.038:13): pid=18420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2512" name="/newroot/sys/kernel/debug/tracing/set_event" dev="tracefs" ino=23 res=1 errno=0 [ 875.953265][T18425] random: crng reseeded on system resumption [ 877.550447][T18450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2521'. [ 877.898150][T18454] could not allocate digest TFM handle [ 878.055910][T18468] random: crng reseeded on system resumption [ 878.822704][T18477] ima: policy update failed [ 878.830968][ T30] audit: type=1802 audit(4294967440.406:14): pid=18477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2524" res=0 errno=0 [ 878.843996][T18462] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2523'. [ 879.653799][T18493] futex_wake_op: syz.3.2532 tries to shift op by -2048; fix this program [ 879.684096][T18493] futex_wake_op: syz.3.2532 tries to shift op by -2048; fix this program [ 879.834205][T18500] random: crng reseeded on system resumption [ 881.261445][T18523] random: crng reseeded on system resumption [ 883.509976][ T5869] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 883.512586][ T5869] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 883.513313][ T5869] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 883.514694][ T5869] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 883.565604][ T5869] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 883.852821][T14902] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.030429][T14902] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.193803][T14902] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.759286][T14902] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.885212][T18562] chnl_net:caif_netlink_parms(): no params data found [ 885.240690][T18562] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.257993][T18562] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.266397][T18562] bridge_slave_0: entered allmulticast mode [ 885.278163][T18562] bridge_slave_0: entered promiscuous mode [ 885.293443][T18562] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.351885][T18562] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.368395][T18562] bridge_slave_1: entered allmulticast mode [ 885.386081][T18562] bridge_slave_1: entered promiscuous mode [ 885.652496][T16311] Bluetooth: hci2: command tx timeout [ 885.833432][T18562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 885.870501][T18562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 886.044436][T18562] team0: Port device team_slave_0 added [ 886.138817][T18562] team0: Port device team_slave_1 added [ 886.288142][T18602] binder: 18601:18602 ioctl c018620c 0 returned -1 [ 886.311981][T18614] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input11 [ 886.350938][T14902] bridge_slave_1: left allmulticast mode [ 886.435687][T14902] bridge_slave_1: left promiscuous mode [ 886.448811][T18602] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2552'. [ 886.474649][T14902] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.599149][T14902] bridge_slave_0: left allmulticast mode [ 886.607380][T14902] bridge_slave_0: left promiscuous mode [ 886.623708][T14902] bridge0: port 1(bridge_slave_0) entered disabled state [ 887.071247][T14897] Trying to write to read-only block-device sda [ 887.710937][T16311] Bluetooth: hci2: command tx timeout [ 888.138179][T14902] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 888.161152][T14902] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 888.188438][T14902] bond0 (unregistering): Released all slaves [ 888.223320][T18562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 888.230660][T18562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 888.259572][T18562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 888.286664][T18562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 888.293640][T18562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 888.323879][T18562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 888.451075][T18631] FAULT_INJECTION: forcing a failure. [ 888.451075][T18631] name failslab, interval 1, probability 0, space 0, times 0 [ 888.477567][T18631] CPU: 1 UID: 0 PID: 18631 Comm: syz.1.2555 Not tainted syzkaller #0 PREEMPT(full) [ 888.477605][T18631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 888.477622][T18631] Call Trace: [ 888.477632][T18631] [ 888.477643][T18631] dump_stack_lvl+0x16c/0x1f0 [ 888.477689][T18631] should_fail_ex+0x512/0x640 [ 888.477729][T18631] ? __kmalloc_noprof+0xbf/0x510 [ 888.477763][T18631] ? cache_create_net+0x9d/0x220 [ 888.477796][T18631] should_failslab+0xc2/0x120 [ 888.477835][T18631] __kmalloc_noprof+0xd2/0x510 [ 888.477875][T18631] cache_create_net+0x9d/0x220 [ 888.477913][T18631] nfsd_export_init+0x11f/0x250 [ 888.477946][T18631] ? __pfx_nfsd_net_init+0x10/0x10 [ 888.477975][T18631] nfsd_net_init+0x33/0x3d0 [ 888.478007][T18631] ? __pfx_nfsd_net_init+0x10/0x10 [ 888.478036][T18631] ops_init+0x1df/0x5f0 [ 888.478079][T18631] setup_net+0x10f/0x380 [ 888.478101][T18631] ? lockdep_init_map_type+0x5c/0x280 [ 888.478139][T18631] ? __pfx_setup_net+0x10/0x10 [ 888.478166][T18631] ? debug_mutex_init+0x37/0x70 [ 888.478197][T18631] copy_net_ns+0x2a6/0x5f0 [ 888.478229][T18631] create_new_namespaces+0x3ea/0xa90 [ 888.478268][T18631] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 888.478302][T18631] ksys_unshare+0x45b/0xa40 [ 888.478338][T18631] ? __pfx_ksys_unshare+0x10/0x10 [ 888.478372][T18631] ? xfd_validate_state+0x61/0x180 [ 888.478420][T18631] __x64_sys_unshare+0x31/0x40 [ 888.478457][T18631] do_syscall_64+0xcd/0x4c0 [ 888.478498][T18631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.478523][T18631] RIP: 0033:0x7fef7b78eec9 [ 888.478543][T18631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 888.478576][T18631] RSP: 002b:00007fef7c712038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 888.478601][T18631] RAX: ffffffffffffffda RBX: 00007fef7b9e5fa0 RCX: 00007fef7b78eec9 [ 888.478619][T18631] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 888.478635][T18631] RBP: 00007fef7b811f91 R08: 0000000000000000 R09: 0000000000000000 [ 888.478652][T18631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 888.478667][T18631] R13: 00007fef7b9e6038 R14: 00007fef7b9e5fa0 R15: 00007ffc84e89908 [ 888.478702][T18631] [ 888.756395][T14902] tipc: Left network mode [ 888.790680][T18562] hsr_slave_0: entered promiscuous mode [ 888.802954][T18562] hsr_slave_1: entered promiscuous mode [ 888.818075][T18562] debugfs: 'hsr0' already exists in 'hsr' [ 888.824263][T18562] Cannot create hsr debugfs directory [ 889.776435][T16311] Bluetooth: hci2: command tx timeout [ 889.882877][T14902] hsr_slave_0: left promiscuous mode [ 889.890995][T14902] hsr_slave_1: left promiscuous mode [ 890.012416][T14902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 890.021300][T14902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 890.084001][T14902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 890.097738][T14902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 890.183109][T14902] veth1_vlan: left promiscuous mode [ 890.208034][T14902] veth0_vlan: left promiscuous mode [ 890.342726][T18664] random: crng reseeded on system resumption [ 891.375395][T14902] team0 (unregistering): Port device team_slave_1 removed [ 891.498137][T14902] team0 (unregistering): Port device team_slave_0 removed [ 891.558258][T18675] FAULT_INJECTION: forcing a failure. [ 891.558258][T18675] name failslab, interval 1, probability 0, space 0, times 0 [ 891.586968][T18675] CPU: 1 UID: 0 PID: 18675 Comm: syz.3.2561 Not tainted syzkaller #0 PREEMPT(full) [ 891.587006][T18675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 891.587023][T18675] Call Trace: [ 891.587032][T18675] [ 891.587043][T18675] dump_stack_lvl+0x16c/0x1f0 [ 891.587088][T18675] should_fail_ex+0x512/0x640 [ 891.587128][T18675] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 891.587164][T18675] should_failslab+0xc2/0x120 [ 891.587198][T18675] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 891.587230][T18675] ? key_alloc+0x3e0/0x1330 [ 891.587284][T18675] key_alloc+0x3e0/0x1330 [ 891.587323][T18675] ? rcu_is_watching+0x12/0xc0 [ 891.587350][T18675] ? __pfx_key_alloc+0x10/0x10 [ 891.587375][T18675] ? __kmalloc_noprof+0x242/0x510 [ 891.587400][T18675] keyring_alloc+0x44/0xc0 [ 891.587423][T18675] install_thread_keyring_to_cred+0xc1/0x140 [ 891.587442][T18675] keyctl_set_reqkey_keyring+0xcf/0x1c0 [ 891.587458][T18675] __do_sys_keyctl+0x6d/0x590 [ 891.587475][T18675] do_syscall_64+0xcd/0x4c0 [ 891.587498][T18675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.587512][T18675] RIP: 0033:0x7f331958eec9 [ 891.587525][T18675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 891.587539][T18675] RSP: 002b:00007f331a411038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 891.587554][T18675] RAX: ffffffffffffffda RBX: 00007f33197e5fa0 RCX: 00007f331958eec9 [ 891.587563][T18675] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000e [ 891.587572][T18675] RBP: 00007f3319611f91 R08: 0000000000000008 R09: 0000000000000000 [ 891.587580][T18675] R10: 0000000000005eaf R11: 0000000000000246 R12: 0000000000000000 [ 891.587589][T18675] R13: 00007f33197e6038 R14: 00007f33197e5fa0 R15: 00007ffd922422f8 [ 891.587608][T18675] [ 891.845610][T16311] Bluetooth: hci2: command tx timeout [ 892.460916][T18684] could not allocate digest TFM handle [ 893.477859][T18707] random: crng reseeded on system resumption [ 893.598860][T18713] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input12 [ 894.019921][T18562] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 894.078700][T18562] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 894.332739][T18562] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 894.349162][T18562] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 894.712579][T18562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 894.796784][T18562] 8021q: adding VLAN 0 to HW filter on device team0 [ 894.861091][T14905] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.868218][T14905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 894.896103][T18747] random: crng reseeded on system resumption [ 894.928572][T14905] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.935712][T14905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 896.018175][T18765] random: crng reseeded on system resumption [ 896.133364][T18562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 896.302020][T18562] veth0_vlan: entered promiscuous mode [ 896.359709][T18562] veth1_vlan: entered promiscuous mode [ 896.670732][T18562] veth0_macvtap: entered promiscuous mode [ 896.880946][T18562] veth1_macvtap: entered promiscuous mode [ 896.956527][T18562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 896.975810][T18562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 897.219599][T14894] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.231649][T14894] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.271021][T14894] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.483557][T14894] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.960214][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.963856][T14901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.977818][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.036885][T14901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.666592][T18807] random: crng reseeded on system resumption [ 898.679767][T18807] syz.0.2580(18807): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 898.784229][T18804] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2540'. [ 899.374018][T18826] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 899.817720][T18821] binder: 18819:18821 ioctl c018620c 0 returned -1 [ 899.942740][T18821] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2582'. [ 900.538737][T18859] random: crng reseeded on system resumption [ 902.892642][T18897] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2596'. [ 903.035266][T18897] veth1_macvtap: left promiscuous mode [ 903.243379][T18900] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2595'. [ 904.161854][T18917] binder: 18915:18917 ioctl c018620c 0 returned -1 [ 904.241582][T18917] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2597'. [ 905.766775][T18953] random: crng reseeded on system resumption [ 906.829203][T18965] random: crng reseeded on system resumption [ 908.091753][T18977] FAULT_INJECTION: forcing a failure. [ 908.091753][T18977] name fail_futex, interval 1, probability 0, space 0, times 0 [ 908.185926][T18977] CPU: 1 UID: 0 PID: 18977 Comm: syz.2.2608 Not tainted syzkaller #0 PREEMPT(full) [ 908.185964][T18977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 908.185981][T18977] Call Trace: [ 908.185992][T18977] [ 908.186002][T18977] dump_stack_lvl+0x16c/0x1f0 [ 908.186049][T18977] should_fail_ex+0x512/0x640 [ 908.186094][T18977] get_futex_key+0x1d0/0x1560 [ 908.186131][T18977] ? __pfx_get_futex_key+0x10/0x10 [ 908.186163][T18977] ? trace_pid_list_is_set+0xfb/0x150 [ 908.186211][T18977] ? do_raw_spin_unlock+0x172/0x230 [ 908.186260][T18977] futex_wait_setup+0x9d/0x550 [ 908.186313][T18977] __futex_wait+0x194/0x2f0 [ 908.186353][T18977] ? __pfx___futex_wait+0x10/0x10 [ 908.186388][T18977] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 908.186425][T18977] ? lockdep_hardirqs_on+0x7c/0x110 [ 908.186467][T18977] ? __pfx_futex_wake_mark+0x10/0x10 [ 908.186511][T18977] ? futex_private_hash_put+0x176/0x300 [ 908.186548][T18977] ? futex_private_hash_put+0x18a/0x300 [ 908.186588][T18977] futex_wait+0xe8/0x380 [ 908.186625][T18977] ? __pfx_futex_wait+0x10/0x10 [ 908.186671][T18977] ? kmem_cache_free+0x2d1/0x4d0 [ 908.186700][T18977] ? fd_install+0x225/0x750 [ 908.186727][T18977] ? putname+0x154/0x1a0 [ 908.186768][T18977] do_futex+0x229/0x350 [ 908.186802][T18977] ? __pfx_do_futex+0x10/0x10 [ 908.186846][T18977] __x64_sys_futex+0x1e0/0x4c0 [ 908.186881][T18977] ? __x64_sys_openat+0x174/0x210 [ 908.186906][T18977] ? __pfx___x64_sys_futex+0x10/0x10 [ 908.186958][T18977] do_syscall_64+0xcd/0x4c0 [ 908.187000][T18977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.187027][T18977] RIP: 0033:0x7f8b8c78eec9 [ 908.187049][T18977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 908.187076][T18977] RSP: 002b:00007f8b8a9b40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 908.187101][T18977] RAX: ffffffffffffffda RBX: 00007f8b8c9e6188 RCX: 00007f8b8c78eec9 [ 908.187120][T18977] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8b8c9e6188 [ 908.187137][T18977] RBP: 00007f8b8c9e6180 R08: 0000000000000000 R09: 0000000000000000 [ 908.187153][T18977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 908.187169][T18977] R13: 00007f8b8c9e6218 R14: 00007ffeac1916a0 R15: 00007ffeac191788 [ 908.187206][T18977] [ 909.031543][T18996] random: crng reseeded on system resumption [ 910.062871][T19007] random: crng reseeded on system resumption [ 911.283924][T19024] random: crng reseeded on system resumption [ 912.154477][T19020] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2620'. [ 912.639305][T19049] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2627'. [ 912.818790][T19055] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2629'. [ 912.922823][T19071] FAULT_INJECTION: forcing a failure. [ 912.922823][T19071] name failslab, interval 1, probability 0, space 0, times 0 [ 912.940576][T19071] CPU: 1 UID: 0 PID: 19071 Comm: syz.2.2631 Not tainted syzkaller #0 PREEMPT(full) [ 912.940610][T19071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 912.940625][T19071] Call Trace: [ 912.940634][T19071] [ 912.940644][T19071] dump_stack_lvl+0x16c/0x1f0 [ 912.940684][T19071] should_fail_ex+0x512/0x640 [ 912.940719][T19071] ? __kvmalloc_node_noprof+0x124/0x620 [ 912.940752][T19071] should_failslab+0xc2/0x120 [ 912.940783][T19071] __kvmalloc_node_noprof+0x137/0x620 [ 912.940810][T19071] ? find_held_lock+0x2b/0x80 [ 912.940835][T19071] ? seq_read_iter+0x826/0x12c0 [ 912.940858][T19071] ? aa_file_perm+0x28f/0x12e0 [ 912.940899][T19071] ? seq_read_iter+0x826/0x12c0 [ 912.940922][T19071] seq_read_iter+0x826/0x12c0 [ 912.940954][T19071] ? __pfx_aa_file_perm+0x10/0x10 [ 912.940995][T19071] seq_read+0x3a3/0x570 [ 912.941019][T19071] ? __pfx_seq_read+0x10/0x10 [ 912.941065][T19071] ? rw_verify_area+0xcf/0x6c0 [ 912.941090][T19071] ? __pfx_seq_read+0x10/0x10 [ 912.941115][T19071] vfs_read+0x1e1/0xcf0 [ 912.941148][T19071] ? __pfx___mutex_lock+0x10/0x10 [ 912.941181][T19071] ? __pfx_vfs_read+0x10/0x10 [ 912.941220][T19071] ? __fget_files+0x20e/0x3c0 [ 912.941255][T19071] ksys_read+0x12a/0x250 [ 912.941287][T19071] ? __pfx_ksys_read+0x10/0x10 [ 912.941320][T19071] do_syscall_64+0xcd/0x4c0 [ 912.941354][T19071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.941375][T19071] RIP: 0033:0x7f8b8c78eec9 [ 912.941392][T19071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 912.941412][T19071] RSP: 002b:00007f8b8a9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 912.941433][T19071] RAX: ffffffffffffffda RBX: 00007f8b8c9e5fa0 RCX: 00007f8b8c78eec9 [ 912.941448][T19071] RDX: 0000000000000015 RSI: 0000200000000080 RDI: 0000000000000003 [ 912.941461][T19071] RBP: 00007f8b8a9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 912.941474][T19071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 912.941487][T19071] R13: 00007f8b8c9e6038 R14: 00007f8b8c9e5fa0 R15: 00007ffeac191788 [ 912.941517][T19071] [ 914.435464][T19084] FAULT_INJECTION: forcing a failure. [ 914.435464][T19084] name failslab, interval 1, probability 0, space 0, times 0 [ 914.448707][T19084] CPU: 1 UID: 0 PID: 19084 Comm: syz.0.2633 Not tainted syzkaller #0 PREEMPT(full) [ 914.448738][T19084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 914.448753][T19084] Call Trace: [ 914.448762][T19084] [ 914.448772][T19084] dump_stack_lvl+0x16c/0x1f0 [ 914.448813][T19084] should_fail_ex+0x512/0x640 [ 914.448849][T19084] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 914.448883][T19084] should_failslab+0xc2/0x120 [ 914.448915][T19084] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 914.448937][T19084] ? __pfx_acct_collect+0x10/0x10 [ 914.448971][T19084] ? taskstats_exit+0x654/0xbe0 [ 914.449011][T19084] taskstats_exit+0x654/0xbe0 [ 914.449047][T19084] ? __pfx_taskstats_exit+0x10/0x10 [ 914.449092][T19084] do_exit+0x5dc/0x2bf0 [ 914.449132][T19084] ? __pfx_do_exit+0x10/0x10 [ 914.449171][T19084] ? do_raw_spin_lock+0x12c/0x2b0 [ 914.449206][T19084] ? find_held_lock+0x2b/0x80 [ 914.449237][T19084] do_group_exit+0xd3/0x2a0 [ 914.449273][T19084] get_signal+0x2673/0x26d0 [ 914.449305][T19084] ? kmem_cache_free+0x2d1/0x4d0 [ 914.449331][T19084] ? fd_install+0x225/0x750 [ 914.449363][T19084] ? __pfx_get_signal+0x10/0x10 [ 914.449391][T19084] ? do_futex+0x122/0x350 [ 914.449422][T19084] ? __pfx_do_futex+0x10/0x10 [ 914.449456][T19084] arch_do_signal_or_restart+0x8f/0x790 [ 914.449490][T19084] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 914.449531][T19084] ? xfd_validate_state+0x61/0x180 [ 914.449574][T19084] exit_to_user_mode_loop+0x84/0x110 [ 914.449610][T19084] do_syscall_64+0x41c/0x4c0 [ 914.449649][T19084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.449675][T19084] RIP: 0033:0x7feaf498eec9 [ 914.449696][T19084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 914.449720][T19084] RSP: 002b:00007feaf27d30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 914.449744][T19084] RAX: fffffffffffffe00 RBX: 00007feaf4be6278 RCX: 00007feaf498eec9 [ 914.449761][T19084] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007feaf4be6278 [ 914.449777][T19084] RBP: 00007feaf4be6270 R08: 0000000000000000 R09: 0000000000000000 [ 914.449792][T19084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 914.449807][T19084] R13: 00007feaf4be6308 R14: 00007fffa26ef7b0 R15: 00007fffa26ef898 [ 914.449841][T19084] [ 914.704221][T19098] random: crng reseeded on system resumption [ 916.142702][T19122] random: crng reseeded on system resumption [ 916.324765][T19125] random: crng reseeded on system resumption [ 919.429807][T19162] FAULT_INJECTION: forcing a failure. [ 919.429807][T19162] name fail_futex, interval 1, probability 0, space 0, times 0 [ 919.442853][T19162] CPU: 1 UID: 0 PID: 19162 Comm: syz.0.2646 Not tainted syzkaller #0 PREEMPT(full) [ 919.442887][T19162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 919.442903][T19162] Call Trace: [ 919.442914][T19162] [ 919.442924][T19162] dump_stack_lvl+0x16c/0x1f0 [ 919.442968][T19162] should_fail_ex+0x512/0x640 [ 919.443015][T19162] get_futex_key+0x1d0/0x1560 [ 919.443053][T19162] ? __pfx_get_futex_key+0x10/0x10 [ 919.443097][T19162] futex_wake+0xea/0x530 [ 919.443136][T19162] ? rcu_is_watching+0x12/0xc0 [ 919.443164][T19162] ? __pfx_futex_wake+0x10/0x10 [ 919.443205][T19162] ? kmem_cache_free+0x2d1/0x4d0 [ 919.443234][T19162] ? fd_install+0x225/0x750 [ 919.443259][T19162] ? putname+0x154/0x1a0 [ 919.443301][T19162] do_futex+0x1e3/0x350 [ 919.443335][T19162] ? __pfx_do_futex+0x10/0x10 [ 919.443371][T19162] ? __pfx___schedule+0x10/0x10 [ 919.443410][T19162] __x64_sys_futex+0x1e0/0x4c0 [ 919.443447][T19162] ? __x64_sys_openat+0x174/0x210 [ 919.443471][T19162] ? __pfx___x64_sys_futex+0x10/0x10 [ 919.443505][T19162] ? xfd_validate_state+0x61/0x180 [ 919.443554][T19162] do_syscall_64+0xcd/0x4c0 [ 919.443596][T19162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.443635][T19162] RIP: 0033:0x7feaf498eec9 [ 919.443657][T19162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 919.443684][T19162] RSP: 002b:00007feaf27d30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 919.443710][T19162] RAX: ffffffffffffffda RBX: 00007feaf4be6278 RCX: 00007feaf498eec9 [ 919.443729][T19162] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007feaf4be627c [ 919.443746][T19162] RBP: 00007feaf4be6270 R08: 00007feaf5766000 R09: 0000000000000000 [ 919.443763][T19162] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 919.443778][T19162] R13: 00007feaf4be6308 R14: 00007fffa26ef7b0 R15: 00007fffa26ef898 [ 919.443814][T19162] [ 921.081085][T19187] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2655'. [ 921.554990][T19203] random: crng reseeded on system resumption [ 921.654152][T19205] sd 0:0:1:0: PR command failed: 1026 [ 921.664306][T19205] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 921.678973][T19205] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 922.264413][T19219] FAULT_INJECTION: forcing a failure. [ 922.264413][T19219] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 922.349041][T19219] CPU: 0 UID: 0 PID: 19219 Comm: syz.3.2661 Not tainted syzkaller #0 PREEMPT(full) [ 922.349075][T19219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 922.349090][T19219] Call Trace: [ 922.349098][T19219] [ 922.349108][T19219] dump_stack_lvl+0x16c/0x1f0 [ 922.349148][T19219] should_fail_ex+0x512/0x640 [ 922.349190][T19219] should_fail_alloc_page+0xe7/0x130 [ 922.349225][T19219] prepare_alloc_pages+0x3c2/0x610 [ 922.349260][T19219] ? kasan_save_free_info+0x3b/0x60 [ 922.349282][T19219] ? __kasan_slab_free+0x60/0x70 [ 922.349314][T19219] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 922.349345][T19219] ? __netlink_dump_start+0x6d6/0x990 [ 922.349380][T19219] ? netlink_rcv_skb+0x158/0x420 [ 922.349413][T19219] ? netlink_unicast+0x5a7/0x870 [ 922.349444][T19219] ? netlink_sendmsg+0x8d1/0xdd0 [ 922.349476][T19219] ? ____sys_sendmsg+0xa98/0xc70 [ 922.349502][T19219] ? ___sys_sendmsg+0x134/0x1d0 [ 922.349532][T19219] ? __sys_sendmsg+0x16d/0x220 [ 922.349563][T19219] ? do_syscall_64+0xcd/0x4c0 [ 922.349596][T19219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.349632][T19219] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 922.349683][T19219] ? kasan_quarantine_put+0x10a/0x240 [ 922.349718][T19219] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 922.349756][T19219] ? policy_nodemask+0xea/0x4e0 [ 922.349792][T19219] alloc_pages_mpol+0x1fb/0x550 [ 922.349826][T19219] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 922.349861][T19219] ? __lock_acquire+0x62e/0x1ce0 [ 922.349897][T19219] folio_alloc_mpol_noprof+0x36/0x2f0 [ 922.349935][T19219] vma_alloc_folio_noprof+0xed/0x1e0 [ 922.349974][T19219] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 922.350021][T19219] do_pte_missing+0x2230/0x3ba0 [ 922.350049][T19219] ? find_held_lock+0x2b/0x80 [ 922.350083][T19219] __handle_mm_fault+0x152a/0x2a50 [ 922.350115][T19219] ? mt_find+0x3ef/0xa30 [ 922.350141][T19219] ? __pfx___handle_mm_fault+0x10/0x10 [ 922.350164][T19219] ? __pfx_mt_find+0x10/0x10 [ 922.350209][T19219] ? find_vma+0xbf/0x140 [ 922.350239][T19219] ? __pfx_find_vma+0x10/0x10 [ 922.350274][T19219] handle_mm_fault+0x589/0xd10 [ 922.350303][T19219] ? trace_raw_output_exceptions+0x131/0x150 [ 922.350343][T19219] do_user_addr_fault+0x7a6/0x1370 [ 922.350383][T19219] ? rcu_is_watching+0x12/0xc0 [ 922.350414][T19219] exc_page_fault+0x5c/0xb0 [ 922.350448][T19219] asm_exc_page_fault+0x26/0x30 [ 922.350471][T19219] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 922.350501][T19219] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 922.350525][T19219] RSP: 0018:ffffc90002fa76b8 EFLAGS: 00050206 [ 922.350545][T19219] RAX: 0000000000000001 RBX: 0000000000000d70 RCX: 00000000000000b0 [ 922.350561][T19219] RDX: ffffed10067395ae RSI: ffff8880339cacc0 RDI: 0000200000001000 [ 922.350578][T19219] RBP: 0000000000000d70 R08: 0000000000000000 R09: ffffed10067395ad [ 922.350593][T19219] R10: ffff8880339cad6f R11: 0000000000000000 R12: 0000000000000000 [ 922.350609][T19219] R13: ffffc90002fa7bd0 R14: ffff8880339ca000 R15: 0000200000000340 [ 922.350646][T19219] _copy_to_iter+0x4eb/0x1710 [ 922.350683][T19219] ? __pfx__copy_to_iter+0x10/0x10 [ 922.350720][T19219] ? __skb_recv_datagram+0x1b2/0x220 [ 922.350755][T19219] ? __pfx___skb_recv_datagram+0x10/0x10 [ 922.350790][T19219] simple_copy_to_iter+0x46/0x90 [ 922.350820][T19219] __skb_datagram_iter+0x129/0x900 [ 922.350850][T19219] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 922.350883][T19219] ? skb_recv_datagram+0x88/0xc0 [ 922.350920][T19219] skb_copy_datagram_iter+0x40/0x50 [ 922.350953][T19219] netlink_recvmsg+0x27e/0xa90 [ 922.350992][T19219] ? __pfx_netlink_recvmsg+0x10/0x10 [ 922.351034][T19219] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 922.351069][T19219] sock_recvmsg+0x1f6/0x250 [ 922.351097][T19219] ____sys_recvmsg+0x218/0x6b0 [ 922.351132][T19219] ? __pfx_____sys_recvmsg+0x10/0x10 [ 922.351173][T19219] ? __lock_acquire+0x62e/0x1ce0 [ 922.351211][T19219] ___sys_recvmsg+0x114/0x1a0 [ 922.351248][T19219] ? __pfx____sys_recvmsg+0x10/0x10 [ 922.351287][T19219] ? find_held_lock+0x2b/0x80 [ 922.351336][T19219] do_recvmmsg+0x2fe/0x750 [ 922.351376][T19219] ? __pfx_do_recvmmsg+0x10/0x10 [ 922.351420][T19219] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 922.351464][T19219] ? __fget_files+0x20e/0x3c0 [ 922.351500][T19219] __x64_sys_recvmmsg+0x22a/0x280 [ 922.351538][T19219] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 922.351586][T19219] do_syscall_64+0xcd/0x4c0 [ 922.351625][T19219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.351649][T19219] RIP: 0033:0x7f331958eec9 [ 922.351669][T19219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 922.351699][T19219] RSP: 002b:00007f331a411038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 922.351722][T19219] RAX: ffffffffffffffda RBX: 00007f33197e5fa0 RCX: 00007f331958eec9 [ 922.351739][T19219] RDX: 0000000000000005 RSI: 0000200000000180 RDI: 0000000000000003 [ 922.351755][T19219] RBP: 00007f331a411090 R08: 0000000000000000 R09: 0000000000000000 [ 922.351770][T19219] R10: 00000000000066a6 R11: 0000000000000246 R12: 0000000000000001 [ 922.351785][T19219] R13: 00007f33197e6038 R14: 00007f33197e5fa0 R15: 00007ffd922422f8 [ 922.351821][T19219] [ 923.205530][T19228] random: crng reseeded on system resumption [ 924.047946][T19237] ptp ptp0: only physical clock in use now [ 925.265655][T19268] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2674'. [ 925.707901][T19271] random: crng reseeded on system resumption [ 927.605606][T19296] FAULT_INJECTION: forcing a failure. [ 927.605606][T19296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 927.605649][T19296] CPU: 1 UID: 0 PID: 19296 Comm: syz.1.2681 Not tainted syzkaller #0 PREEMPT(full) [ 927.605680][T19296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 927.605696][T19296] Call Trace: [ 927.605706][T19296] [ 927.605716][T19296] dump_stack_lvl+0x16c/0x1f0 [ 927.605757][T19296] should_fail_ex+0x512/0x640 [ 927.605802][T19296] _copy_to_user+0x32/0xd0 [ 927.605832][T19296] do_pages_stat+0x631/0x820 [ 927.605878][T19296] ? __pfx_do_pages_stat+0x10/0x10 [ 927.605943][T19296] ? do_raw_spin_unlock+0x172/0x230 [ 927.605985][T19296] kernel_move_pages+0xfa8/0x1380 [ 927.606024][T19296] ? do_futex+0x122/0x350 [ 927.606057][T19296] ? __pfx_do_futex+0x10/0x10 [ 927.606101][T19296] ? __pfx_kernel_move_pages+0x10/0x10 [ 927.606146][T19296] ? __x64_sys_futex+0x1e0/0x4c0 [ 927.606173][T19296] ? __x64_sys_futex+0x1e9/0x4c0 [ 927.606206][T19296] ? xfd_validate_state+0x61/0x180 [ 927.606240][T19296] ? __pfx_do_writev+0x10/0x10 [ 927.606272][T19296] __x64_sys_move_pages+0xe0/0x1c0 [ 927.606309][T19296] ? do_syscall_64+0x91/0x4c0 [ 927.606349][T19296] ? lockdep_hardirqs_on+0x7c/0x110 [ 927.606396][T19296] do_syscall_64+0xcd/0x4c0 [ 927.606436][T19296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.606463][T19296] RIP: 0033:0x7fef7b78eec9 [ 927.606485][T19296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 927.606511][T19296] RSP: 002b:00007fef7c712038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 927.606537][T19296] RAX: ffffffffffffffda RBX: 00007fef7b9e5fa0 RCX: 00007fef7b78eec9 [ 927.606556][T19296] RDX: 0000000000000000 RSI: 0002000000000003 RDI: 0000000000000001 [ 927.606573][T19296] RBP: 00007fef7b811f91 R08: 0000000000000000 R09: 8000400000000000 [ 927.606591][T19296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 927.606607][T19296] R13: 00007fef7b9e6038 R14: 00007fef7b9e5fa0 R15: 00007ffc84e89908 [ 927.606641][T19296] [ 928.264085][T19307] vhci_hcd: invalid port number 21 [ 929.284498][T19322] FAULT_INJECTION: forcing a failure. [ 929.284498][T19322] name fail_futex, interval 1, probability 0, space 0, times 0 [ 929.320509][T19322] CPU: 0 UID: 0 PID: 19322 Comm: syz.2.2684 Not tainted syzkaller #0 PREEMPT(full) [ 929.320545][T19322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 929.320566][T19322] Call Trace: [ 929.320576][T19322] [ 929.320587][T19322] dump_stack_lvl+0x16c/0x1f0 [ 929.320631][T19322] should_fail_ex+0x512/0x640 [ 929.320667][T19322] ? __resched_curr+0x2ac/0x3b0 [ 929.320694][T19322] get_futex_key+0x1d0/0x1560 [ 929.320738][T19322] ? __pick_eevdf+0x127/0x670 [ 929.320770][T19322] ? __pfx_get_futex_key+0x10/0x10 [ 929.320801][T19322] ? find_held_lock+0x2b/0x80 [ 929.320830][T19322] ? __schedule+0x3fef/0x5de0 [ 929.320872][T19322] futex_wake+0xea/0x530 [ 929.320913][T19322] ? __pfx_futex_wake+0x10/0x10 [ 929.320968][T19322] do_futex+0x1e3/0x350 [ 929.321001][T19322] ? __pfx_do_futex+0x10/0x10 [ 929.321037][T19322] ? __pfx___schedule+0x10/0x10 [ 929.321069][T19322] __x64_sys_futex+0x1e0/0x4c0 [ 929.321104][T19322] ? __pfx___x64_sys_futex+0x10/0x10 [ 929.321138][T19322] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 929.321178][T19322] do_syscall_64+0xcd/0x4c0 [ 929.321214][T19322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.321239][T19322] RIP: 0033:0x7f8b8c78eec9 [ 929.321259][T19322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 929.321282][T19322] RSP: 002b:00007f8b8a16e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 929.321305][T19322] RAX: ffffffffffffffda RBX: 00007f8b8c9e6368 RCX: 00007f8b8c78eec9 [ 929.321331][T19322] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8b8c9e636c [ 929.321347][T19322] RBP: 00007f8b8c9e6360 R08: 00007f8b8d522000 R09: 0000000000000000 [ 929.321362][T19322] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 929.321377][T19322] R13: 00007f8b8c9e63f8 R14: 00007ffeac1916a0 R15: 00007ffeac191788 [ 929.321406][T19322] [ 930.005956][T19327] random: crng reseeded on system resumption [ 930.339293][T19344] random: crng reseeded on system resumption [ 932.285764][T19371] FAULT_INJECTION: forcing a failure. [ 932.285764][T19371] name failslab, interval 1, probability 0, space 0, times 0 [ 932.285804][T19371] CPU: 0 UID: 0 PID: 19371 Comm: syz.3.2694 Not tainted syzkaller #0 PREEMPT(full) [ 932.285844][T19371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 932.285859][T19371] Call Trace: [ 932.285869][T19371] [ 932.285879][T19371] dump_stack_lvl+0x16c/0x1f0 [ 932.285921][T19371] should_fail_ex+0x512/0x640 [ 932.285958][T19371] ? __kmalloc_node_noprof+0xc5/0x500 [ 932.285994][T19371] should_failslab+0xc2/0x120 [ 932.286027][T19371] __kmalloc_node_noprof+0xd8/0x500 [ 932.286060][T19371] ? __vmalloc_node_range_noprof+0x3e5/0x14b0 [ 932.286092][T19371] __vmalloc_node_range_noprof+0x3e5/0x14b0 [ 932.286117][T19371] ? local_lock_release+0x99/0x140 [ 932.286160][T19371] ? kernel_clone+0xfc/0x930 [ 932.286192][T19371] ? rcu_read_unlock+0x17/0x60 [ 932.286231][T19371] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 932.286269][T19371] ? kernel_clone+0xfc/0x930 [ 932.286300][T19371] __vmalloc_node_noprof+0xad/0xf0 [ 932.286323][T19371] ? kernel_clone+0xfc/0x930 [ 932.286357][T19371] copy_process+0x2c70/0x7690 [ 932.286390][T19371] ? trace_ignore_this_task+0xc3/0x100 [ 932.286449][T19371] ? __pfx_copy_process+0x10/0x10 [ 932.286493][T19371] ? _copy_from_user+0x59/0xd0 [ 932.286527][T19371] kernel_clone+0xfc/0x930 [ 932.286562][T19371] ? __pfx_kernel_clone+0x10/0x10 [ 932.286592][T19371] ? futex_private_hash_put+0x18a/0x300 [ 932.286633][T19371] ? __pfx_futex_wake+0x10/0x10 [ 932.286676][T19371] __do_sys_clone3+0x212/0x290 [ 932.286709][T19371] ? __pfx___do_sys_clone3+0x10/0x10 [ 932.286758][T19371] ? find_held_lock+0x2b/0x80 [ 932.286814][T19371] do_syscall_64+0xcd/0x4c0 [ 932.286879][T19371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.286905][T19371] RIP: 0033:0x7f331958eec9 [ 932.286926][T19371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 932.286952][T19371] RSP: 002b:00007f331a3cef08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 932.286978][T19371] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f331958eec9 [ 932.286997][T19371] RDX: 00007f331a3cef20 RSI: 0000000000000058 RDI: 00007f331a3cef20 [ 932.287014][T19371] RBP: 00007f3319611f91 R08: 0000000000000000 R09: 0000000000000058 [ 932.287032][T19371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 932.287048][T19371] R13: 00007f33197e6218 R14: 00007f33197e6180 R15: 00007ffd922422f8 [ 932.287082][T19371] [ 932.287096][T19371] syz.3.2694: vmalloc error: size 32768, failed to allocated page array size 64, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 932.287202][T19371] CPU: 0 UID: 0 PID: 19371 Comm: syz.3.2694 Not tainted syzkaller #0 PREEMPT(full) [ 932.287235][T19371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 932.287251][T19371] Call Trace: [ 932.287260][T19371] [ 932.287270][T19371] dump_stack_lvl+0x16c/0x1f0 [ 932.287309][T19371] warn_alloc+0x248/0x3a0 [ 932.287343][T19371] ? __pfx_warn_alloc+0x10/0x10 [ 932.287372][T19371] ? dump_stack_lvl+0x185/0x1f0 [ 932.287419][T19371] ? rcu_is_watching+0x12/0xc0 [ 932.287448][T19371] ? __kmalloc_node_noprof+0x23b/0x500 [ 932.287489][T19371] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 932.287516][T19371] ? local_lock_release+0x99/0x140 [ 932.287559][T19371] ? kernel_clone+0xfc/0x930 [ 932.287600][T19371] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 932.287639][T19371] ? kernel_clone+0xfc/0x930 [ 932.287669][T19371] __vmalloc_node_noprof+0xad/0xf0 [ 932.287695][T19371] ? kernel_clone+0xfc/0x930 [ 932.287730][T19371] copy_process+0x2c70/0x7690 [ 932.287771][T19371] ? trace_ignore_this_task+0xc3/0x100 [ 932.287835][T19371] ? __pfx_copy_process+0x10/0x10 [ 932.287879][T19371] ? _copy_from_user+0x59/0xd0 [ 932.287910][T19371] kernel_clone+0xfc/0x930 [ 932.287944][T19371] ? __pfx_kernel_clone+0x10/0x10 [ 932.287976][T19371] ? futex_private_hash_put+0x18a/0x300 [ 932.288019][T19371] ? __pfx_futex_wake+0x10/0x10 [ 932.288061][T19371] __do_sys_clone3+0x212/0x290 [ 932.288094][T19371] ? __pfx___do_sys_clone3+0x10/0x10 [ 932.288143][T19371] ? find_held_lock+0x2b/0x80 [ 932.288196][T19371] do_syscall_64+0xcd/0x4c0 [ 932.288235][T19371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.288262][T19371] RIP: 0033:0x7f331958eec9 [ 932.288282][T19371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 932.288306][T19371] RSP: 002b:00007f331a3cef08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 932.288330][T19371] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f331958eec9 [ 932.288348][T19371] RDX: 00007f331a3cef20 RSI: 0000000000000058 RDI: 00007f331a3cef20 [ 932.288365][T19371] RBP: 00007f3319611f91 R08: 0000000000000000 R09: 0000000000000058 [ 932.288382][T19371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 932.288399][T19371] R13: 00007f33197e6218 R14: 00007f33197e6180 R15: 00007ffd922422f8 [ 932.288435][T19371] [ 932.288445][T19371] Mem-Info: [ 932.288458][T19371] active_anon:14970 inactive_anon:7 isolated_anon:0 [ 932.288458][T19371] active_file:12494 inactive_file:49661 isolated_file:0 [ 932.288458][T19371] unevictable:770 dirty:4176 writeback:512 [ 932.288458][T19371] slab_reclaimable:12536 slab_unreclaimable:94068 [ 932.288458][T19371] mapped:29203 shmem:1379 pagetables:1101 [ 932.288458][T19371] sec_pagetables:0 bounce:0 [ 932.288458][T19371] kernel_misc_reclaimable:0 [ 932.288458][T19371] free:1310713 free_pcp:12123 free_cma:0 [ 932.288525][T19371] Node 0 active_anon:59880kB inactive_anon:28kB active_file:49932kB inactive_file:196760kB unevictable:1544kB isolated(anon):0kB isolated(file):0kB mapped:116316kB dirty:16704kB writeback:2048kB shmem:3980kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11600kB pagetables:4256kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 932.288588][T19371] Node 1 active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:1884kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:496kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 932.288651][T19371] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 932.288722][T19371] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 932.288774][T19371] Node 0 DMA32 free:1330352kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:59836kB inactive_anon:28kB active_file:49932kB inactive_file:195440kB unevictable:1544kB writepending:18752kB present:3129332kB managed:2539528kB mlocked:8kB bounce:0kB free_pcp:38820kB local_pcp:24128kB free_cma:0kB [ 932.288861][T19371] lowmem_reserve[]: 0 0 1 1 1 [ 932.288911][T19371] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB [ 932.288985][T19371] lowmem_reserve[]: 0 0 0 0 0 [ 932.289033][T19371] Node 1 Normal free:3897128kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:1884kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:9656kB local_pcp:4980kB free_cma:0kB [ 932.289106][T19371] lowmem_reserve[]: 0 0 0 0 0 [ 932.289156][T19371] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 932.289318][T19371] Node 0 DMA32: 1829*4kB (UM) 569*8kB (UME) 791*16kB (UME) 783*32kB (UM) 537*64kB (UME) 319*128kB (UM) 179*256kB (UM) 91*512kB (UME) 77*1024kB (UM) 9*2048kB (UME) 248*4096kB (UM) = 1330284kB [ 932.289546][T19371] Node 0 Normal: 3*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 932.289698][T19371] Node 1 Normal: 228*4kB (UME) 51*8kB (UME) 46*16kB (UME) 99*32kB (UME) 109*64kB (UME) 39*128kB (UME) 20*256kB (UME) 6*512kB (UM) 1*1024kB (E) 4*2048kB (UME) 943*4096kB (M) = 3897128kB [ 932.289936][T19371] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 932.289959][T19371] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 932.289981][T19371] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 932.290003][T19371] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 932.290025][T19371] 63539 total pagecache pages [ 932.290035][T19371] 7 pages in swap cache [ 932.290046][T19371] Free swap = 124968kB [ 932.290056][T19371] Total swap = 124996kB [ 932.290067][T19371] 2097051 pages RAM [ 932.290076][T19371] 0 pages HighMem/MovableOnly [ 932.290084][T19371] 430207 pages reserved [ 932.290092][T19371] 0 pages cma reserved [ 935.516882][T19402] FAULT_INJECTION: forcing a failure. [ 935.516882][T19402] name fail_futex, interval 1, probability 0, space 0, times 0 [ 935.568457][T19402] CPU: 0 UID: 0 PID: 19402 Comm: syz.1.2700 Not tainted syzkaller #0 PREEMPT(full) [ 935.568491][T19402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 935.568506][T19402] Call Trace: [ 935.568515][T19402] [ 935.568524][T19402] dump_stack_lvl+0x16c/0x1f0 [ 935.568564][T19402] should_fail_ex+0x512/0x640 [ 935.568592][T19402] get_futex_key+0x1d0/0x1560 [ 935.568619][T19402] ? __pfx_get_futex_key+0x10/0x10 [ 935.568637][T19402] ? __mutex_trylock_common+0xe9/0x250 [ 935.568661][T19402] futex_wake+0xea/0x530 [ 935.568682][T19402] ? __pfx_futex_wake+0x10/0x10 [ 935.568710][T19402] do_futex+0x1e3/0x350 [ 935.568728][T19402] ? __pfx_do_futex+0x10/0x10 [ 935.568743][T19402] ? __might_fault+0xe3/0x190 [ 935.568765][T19402] mm_release+0x24e/0x300 [ 935.568782][T19402] do_exit+0x68e/0x2bf0 [ 935.568804][T19402] ? __pfx_do_exit+0x10/0x10 [ 935.568823][T19402] ? do_raw_spin_lock+0x12c/0x2b0 [ 935.568843][T19402] ? find_held_lock+0x2b/0x80 [ 935.568891][T19402] do_group_exit+0xd3/0x2a0 [ 935.568913][T19402] get_signal+0x2673/0x26d0 [ 935.568931][T19402] ? kmem_cache_free+0x2d1/0x4d0 [ 935.568947][T19402] ? fd_install+0x225/0x750 [ 935.568965][T19402] ? __pfx_get_signal+0x10/0x10 [ 935.568980][T19402] ? do_futex+0x122/0x350 [ 935.568997][T19402] ? __pfx_do_futex+0x10/0x10 [ 935.569016][T19402] arch_do_signal_or_restart+0x8f/0x790 [ 935.569036][T19402] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 935.569064][T19402] exit_to_user_mode_loop+0x84/0x110 [ 935.569085][T19402] do_syscall_64+0x41c/0x4c0 [ 935.569108][T19402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.569123][T19402] RIP: 0033:0x7fef7b78eec9 [ 935.569136][T19402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 935.569150][T19402] RSP: 002b:00007fef7c6d00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 935.569164][T19402] RAX: fffffffffffffe00 RBX: 00007fef7b9e6188 RCX: 00007fef7b78eec9 [ 935.569174][T19402] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fef7b9e6188 [ 935.569182][T19402] RBP: 00007fef7b9e6180 R08: 0000000000000000 R09: 0000000000000000 [ 935.569191][T19402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 935.569199][T19402] R13: 00007fef7b9e6218 R14: 00007ffc84e89820 R15: 00007ffc84e89908 [ 935.569217][T19402] [ 935.912951][T19423] random: crng reseeded on system resumption [ 936.451052][T19417] FAULT_INJECTION: forcing a failure. [ 936.451052][T19417] name fail_futex, interval 1, probability 0, space 0, times 0 [ 936.465970][T19417] CPU: 0 UID: 0 PID: 19417 Comm: syz.2.2702 Not tainted syzkaller #0 PREEMPT(full) [ 936.466006][T19417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 936.466022][T19417] Call Trace: [ 936.466032][T19417] [ 936.466042][T19417] dump_stack_lvl+0x16c/0x1f0 [ 936.466087][T19417] should_fail_ex+0x512/0x640 [ 936.466127][T19417] ? unwind_get_return_address+0x59/0xa0 [ 936.466160][T19417] get_futex_key+0x1d0/0x1560 [ 936.466196][T19417] ? __pfx_get_futex_key+0x10/0x10 [ 936.466229][T19417] ? stack_trace_save+0x8e/0xc0 [ 936.466257][T19417] ? __pfx_stack_trace_save+0x10/0x10 [ 936.466293][T19417] futex_wait_setup+0x9d/0x550 [ 936.466341][T19417] __futex_wait+0x194/0x2f0 [ 936.466381][T19417] ? __pfx___futex_wait+0x10/0x10 [ 936.466425][T19417] ? __pfx_futex_wake_mark+0x10/0x10 [ 936.466468][T19417] ? futex_private_hash_put+0x176/0x300 [ 936.466504][T19417] ? futex_private_hash_put+0x18a/0x300 [ 936.466539][T19417] futex_wait+0xe8/0x380 [ 936.466586][T19417] ? __pfx_futex_wait+0x10/0x10 [ 936.466632][T19417] ? kmem_cache_free+0x2d1/0x4d0 [ 936.466662][T19417] ? fd_install+0x225/0x750 [ 936.466688][T19417] ? putname+0x154/0x1a0 [ 936.466738][T19417] do_futex+0x229/0x350 [ 936.466773][T19417] ? __pfx_do_futex+0x10/0x10 [ 936.466813][T19417] __x64_sys_futex+0x1e0/0x4c0 [ 936.466847][T19417] ? __x64_sys_openat+0x174/0x210 [ 936.466871][T19417] ? __pfx___x64_sys_futex+0x10/0x10 [ 936.466919][T19417] do_syscall_64+0xcd/0x4c0 [ 936.466957][T19417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.466982][T19417] RIP: 0033:0x7f8b8c78eec9 [ 936.467002][T19417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 936.467029][T19417] RSP: 002b:00007f8b8a9b40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 936.467048][T19417] RAX: ffffffffffffffda RBX: 00007f8b8c9e6188 RCX: 00007f8b8c78eec9 [ 936.467059][T19417] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8b8c9e6188 [ 936.467068][T19417] RBP: 00007f8b8c9e6180 R08: 0000000000000000 R09: 0000000000000000 [ 936.467077][T19417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 936.467086][T19417] R13: 00007f8b8c9e6218 R14: 00007ffeac1916a0 R15: 00007ffeac191788 [ 936.467106][T19417] [ 937.328813][T19440] random: crng reseeded on system resumption [ 942.296465][T19521] random: crng reseeded on system resumption [ 943.261899][T19529] random: crng reseeded on system resumption [ 943.997442][T19541] FAULT_INJECTION: forcing a failure. [ 943.997442][T19541] name fail_futex, interval 1, probability 0, space 0, times 0 [ 944.036620][T19541] CPU: 0 UID: 0 PID: 19541 Comm: syz.0.2728 Not tainted syzkaller #0 PREEMPT(full) [ 944.036656][T19541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 944.036673][T19541] Call Trace: [ 944.036681][T19541] [ 944.036689][T19541] dump_stack_lvl+0x16c/0x1f0 [ 944.036729][T19541] should_fail_ex+0x512/0x640 [ 944.036773][T19541] get_futex_key+0x1d0/0x1560 [ 944.036811][T19541] ? __pfx_get_futex_key+0x10/0x10 [ 944.036855][T19541] futex_wake+0xea/0x530 [ 944.036893][T19541] ? rcu_is_watching+0x12/0xc0 [ 944.036917][T19541] ? __pfx_futex_wake+0x10/0x10 [ 944.036954][T19541] ? kmem_cache_free+0x2d1/0x4d0 [ 944.036981][T19541] ? fd_install+0x225/0x750 [ 944.037005][T19541] ? putname+0x154/0x1a0 [ 944.037043][T19541] do_futex+0x1e3/0x350 [ 944.037074][T19541] ? __pfx_do_futex+0x10/0x10 [ 944.037113][T19541] __x64_sys_futex+0x1e0/0x4c0 [ 944.037144][T19541] ? __x64_sys_openat+0x174/0x210 [ 944.037167][T19541] ? __pfx___x64_sys_futex+0x10/0x10 [ 944.037215][T19541] do_syscall_64+0xcd/0x4c0 [ 944.037256][T19541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.037283][T19541] RIP: 0033:0x7feaf498eec9 [ 944.037304][T19541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 944.037330][T19541] RSP: 002b:00007feaf27d30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 944.037354][T19541] RAX: ffffffffffffffda RBX: 00007feaf4be6278 RCX: 00007feaf498eec9 [ 944.037373][T19541] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007feaf4be627c [ 944.037390][T19541] RBP: 00007feaf4be6270 R08: 00007feaf5766000 R09: 0000000000000000 [ 944.037416][T19541] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 944.037433][T19541] R13: 00007feaf4be6308 R14: 00007fffa26ef7b0 R15: 00007fffa26ef898 [ 944.037469][T19541] [ 944.303257][T19546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2733'. [ 944.518197][T19555] random: crng reseeded on system resumption [ 944.657729][T19552] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2736'. [ 944.716897][T19549] ptp ptp0: only physical clock in use now [ 944.722890][T19548] ptp ptp0: only physical clock in use now [ 946.214030][T19583] random: crng reseeded on system resumption [ 946.562673][T19590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2741'. [ 947.159437][T19596] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2742'. [ 947.440490][T19601] FAULT_INJECTION: forcing a failure. [ 947.440490][T19601] name failslab, interval 1, probability 0, space 0, times 0 [ 947.455674][T19601] CPU: 1 UID: 0 PID: 19601 Comm: syz.0.2743 Not tainted syzkaller #0 PREEMPT(full) [ 947.455709][T19601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 947.455724][T19601] Call Trace: [ 947.455733][T19601] [ 947.455743][T19601] dump_stack_lvl+0x16c/0x1f0 [ 947.455785][T19601] should_fail_ex+0x512/0x640 [ 947.455828][T19601] should_failslab+0xc2/0x120 [ 947.455861][T19601] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 947.455891][T19601] ? skb_clone+0x190/0x3f0 [ 947.455931][T19601] skb_clone+0x190/0x3f0 [ 947.455968][T19601] netlink_deliver_tap+0xabd/0xd30 [ 947.456005][T19601] ? __pfx_rtnl_stats_dump+0x10/0x10 [ 947.456034][T19601] netlink_dump+0xa5f/0xd30 [ 947.456073][T19601] ? __pfx_netlink_dump+0x10/0x10 [ 947.456141][T19601] netlink_recvmsg+0x7dc/0xa90 [ 947.456179][T19601] ? __pfx_netlink_recvmsg+0x10/0x10 [ 947.456219][T19601] ? iovec_from_user+0xbb/0x140 [ 947.456255][T19601] ____sys_recvmsg+0x5f9/0x6b0 [ 947.456292][T19601] ? __pfx_____sys_recvmsg+0x10/0x10 [ 947.456329][T19601] ? kfree+0x24f/0x4d0 [ 947.456351][T19601] ? __lock_acquire+0x62e/0x1ce0 [ 947.456391][T19601] ___sys_recvmsg+0x114/0x1a0 [ 947.456427][T19601] ? __pfx____sys_recvmsg+0x10/0x10 [ 947.456484][T19601] ? __pfx___might_resched+0x10/0x10 [ 947.456517][T19601] do_recvmmsg+0x2fe/0x750 [ 947.456558][T19601] ? __pfx_do_recvmmsg+0x10/0x10 [ 947.456600][T19601] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 947.456647][T19601] ? __fget_files+0x20e/0x3c0 [ 947.456683][T19601] __x64_sys_recvmmsg+0x22a/0x280 [ 947.456722][T19601] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 947.456770][T19601] do_syscall_64+0xcd/0x4c0 [ 947.456810][T19601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.456835][T19601] RIP: 0033:0x7feaf498eec9 [ 947.456856][T19601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 947.456879][T19601] RSP: 002b:00007feaf5744038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 947.456903][T19601] RAX: ffffffffffffffda RBX: 00007feaf4be6090 RCX: 00007feaf498eec9 [ 947.456921][T19601] RDX: 0000000000000005 RSI: 0000200000000180 RDI: 0000000000000003 [ 947.456937][T19601] RBP: 00007feaf5744090 R08: 0000000000000000 R09: 0000000000000000 [ 947.456952][T19601] R10: 00000000000066a6 R11: 0000000000000246 R12: 0000000000000002 [ 947.456968][T19601] R13: 00007feaf4be6128 R14: 00007feaf4be6090 R15: 00007fffa26ef898 [ 947.457003][T19601] [ 948.080217][T19612] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2745'. [ 948.496857][T19615] FAULT_INJECTION: forcing a failure. [ 948.496857][T19615] name fail_futex, interval 1, probability 0, space 0, times 0 [ 948.510111][T19615] CPU: 0 UID: 0 PID: 19615 Comm: syz.3.2744 Not tainted syzkaller #0 PREEMPT(full) [ 948.510147][T19615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 948.510164][T19615] Call Trace: [ 948.510174][T19615] [ 948.510185][T19615] dump_stack_lvl+0x16c/0x1f0 [ 948.510230][T19615] should_fail_ex+0x512/0x640 [ 948.510275][T19615] get_futex_key+0x1d0/0x1560 [ 948.510309][T19615] ? __pfx_get_futex_key+0x10/0x10 [ 948.510349][T19615] futex_wake+0xea/0x530 [ 948.510384][T19615] ? rcu_is_watching+0x12/0xc0 [ 948.510411][T19615] ? __pfx_futex_wake+0x10/0x10 [ 948.510451][T19615] ? kmem_cache_free+0x2d1/0x4d0 [ 948.510479][T19615] ? fd_install+0x225/0x750 [ 948.510504][T19615] ? putname+0x154/0x1a0 [ 948.510544][T19615] do_futex+0x1e3/0x350 [ 948.510577][T19615] ? __pfx_do_futex+0x10/0x10 [ 948.510619][T19615] __x64_sys_futex+0x1e0/0x4c0 [ 948.510655][T19615] ? __x64_sys_openat+0x174/0x210 [ 948.510679][T19615] ? __pfx___x64_sys_futex+0x10/0x10 [ 948.510711][T19615] ? xfd_validate_state+0x61/0x180 [ 948.510759][T19615] do_syscall_64+0xcd/0x4c0 [ 948.510803][T19615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.510830][T19615] RIP: 0033:0x7f331958eec9 [ 948.510850][T19615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 948.510873][T19615] RSP: 002b:00007f331a38d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 948.510897][T19615] RAX: ffffffffffffffda RBX: 00007f33197e6368 RCX: 00007f331958eec9 [ 948.510915][T19615] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f33197e636c [ 948.510931][T19615] RBP: 00007f33197e6360 R08: 00007f331a412000 R09: 0000000000000000 [ 948.510946][T19615] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 948.510962][T19615] R13: 00007f33197e63f8 R14: 00007ffd92242210 R15: 00007ffd922422f8 [ 948.510996][T19615] [ 948.697826][ C0] vkms_vblank_simulate: vblank timer overrun [ 949.526491][T19640] FAULT_INJECTION: forcing a failure. [ 949.526491][T19640] name failslab, interval 1, probability 0, space 0, times 0 [ 949.634181][T19640] CPU: 0 UID: 0 PID: 19640 Comm: syz.2.2751 Not tainted syzkaller #0 PREEMPT(full) [ 949.634219][T19640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 949.634236][T19640] Call Trace: [ 949.634246][T19640] [ 949.634257][T19640] dump_stack_lvl+0x16c/0x1f0 [ 949.634303][T19640] should_fail_ex+0x512/0x640 [ 949.634343][T19640] ? __kmalloc_noprof+0xbf/0x510 [ 949.634377][T19640] ? __register_sysctl_table+0xb3/0x1900 [ 949.634414][T19640] should_failslab+0xc2/0x120 [ 949.634449][T19640] __kmalloc_noprof+0xd2/0x510 [ 949.634489][T19640] __register_sysctl_table+0xb3/0x1900 [ 949.634528][T19640] ? is_module_address+0x5f/0xf0 [ 949.634570][T19640] ? __pfx___register_sysctl_table+0x10/0x10 [ 949.634607][T19640] ? is_module_address+0x69/0xf0 [ 949.634641][T19640] ? register_net_sysctl_sz+0x228/0x3e0 [ 949.634669][T19640] ? __asan_memcpy+0x3c/0x60 [ 949.634701][T19640] xfrm_sysctl_init+0x1f5/0x2d0 [ 949.634743][T19640] xfrm_net_init+0x842/0xcc0 [ 949.634776][T19640] ? __pfx_xfrm_net_init+0x10/0x10 [ 949.634803][T19640] ops_init+0x1df/0x5f0 [ 949.634847][T19640] setup_net+0x10f/0x380 [ 949.634869][T19640] ? lockdep_init_map_type+0x5c/0x280 [ 949.634906][T19640] ? __pfx_setup_net+0x10/0x10 [ 949.634936][T19640] ? debug_mutex_init+0x37/0x70 [ 949.634966][T19640] copy_net_ns+0x2a6/0x5f0 [ 949.634998][T19640] create_new_namespaces+0x3ea/0xa90 [ 949.635032][T19640] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 949.635065][T19640] ksys_unshare+0x45b/0xa40 [ 949.635091][T19640] ? __pfx_ksys_unshare+0x10/0x10 [ 949.635111][T19640] ? xfd_validate_state+0x61/0x180 [ 949.635145][T19640] __x64_sys_unshare+0x31/0x40 [ 949.635165][T19640] do_syscall_64+0xcd/0x4c0 [ 949.635189][T19640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.635204][T19640] RIP: 0033:0x7f8b8c78eec9 [ 949.635217][T19640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 949.635232][T19640] RSP: 002b:00007f8b8a9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 949.635246][T19640] RAX: ffffffffffffffda RBX: 00007f8b8c9e5fa0 RCX: 00007f8b8c78eec9 [ 949.635256][T19640] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 949.635265][T19640] RBP: 00007f8b8c811f91 R08: 0000000000000000 R09: 0000000000000000 [ 949.635274][T19640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 949.635284][T19640] R13: 00007f8b8c9e6038 R14: 00007f8b8c9e5fa0 R15: 00007ffeac191788 [ 949.635303][T19640] [ 950.332324][T19648] random: crng reseeded on system resumption [ 951.751815][T19661] random: crng reseeded on system resumption [ 951.884705][T19665] i2c i2c-0: new_device: Invalid device name [ 951.901492][T19664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2757'. [ 951.948891][T19669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2758'. [ 952.138111][T19668] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2759'. [ 954.717314][T19711] random: crng reseeded on system resumption [ 956.870927][T19733] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 956.895477][T19733] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 956.916358][T19733] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 956.923818][T19733] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 956.943451][T19733] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 956.965850][T19733] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 956.974081][T19733] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 956.991676][T19733] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 958.180039][T19764] random: crng reseeded on system resumption [ 958.220422][T16311] Bluetooth: hci1: command 0x0c1a tx timeout [ 958.939409][T16311] Bluetooth: hci0: command 0x0c1a tx timeout [ 958.945510][ T5869] Bluetooth: hci4: command 0x0c1a tx timeout [ 959.017139][ T5869] Bluetooth: hci2: command 0x0c1a tx timeout [ 959.394295][ T30] audit: type=1800 audit(4294967328.824:15): pid=19774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2781" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 959.445545][T19756] FAULT_INJECTION: forcing a failure. [ 959.445545][T19756] name fail_futex, interval 1, probability 0, space 0, times 0 [ 959.458455][T19756] CPU: 0 UID: 0 PID: 19756 Comm: syz.0.2776 Not tainted syzkaller #0 PREEMPT(full) [ 959.458491][T19756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 959.458508][T19756] Call Trace: [ 959.458518][T19756] [ 959.458528][T19756] dump_stack_lvl+0x16c/0x1f0 [ 959.458573][T19756] should_fail_ex+0x512/0x640 [ 959.458618][T19756] get_futex_key+0x1d0/0x1560 [ 959.458657][T19756] ? __pfx_get_futex_key+0x10/0x10 [ 959.458703][T19756] futex_wake+0xea/0x530 [ 959.458743][T19756] ? rcu_is_watching+0x12/0xc0 [ 959.458771][T19756] ? __pfx_futex_wake+0x10/0x10 [ 959.458813][T19756] ? kmem_cache_free+0x2d1/0x4d0 [ 959.458842][T19756] ? fd_install+0x225/0x750 [ 959.458869][T19756] ? putname+0x154/0x1a0 [ 959.458910][T19756] do_futex+0x1e3/0x350 [ 959.458945][T19756] ? __pfx_do_futex+0x10/0x10 [ 959.458988][T19756] __x64_sys_futex+0x1e0/0x4c0 [ 959.459024][T19756] ? __x64_sys_openat+0x174/0x210 [ 959.459049][T19756] ? __pfx___x64_sys_futex+0x10/0x10 [ 959.459097][T19756] do_syscall_64+0xcd/0x4c0 [ 959.459139][T19756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.459166][T19756] RIP: 0033:0x7feaf498eec9 [ 959.459187][T19756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 959.459212][T19756] RSP: 002b:00007feaf2bf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 959.459237][T19756] RAX: ffffffffffffffda RBX: 00007feaf4be6188 RCX: 00007feaf498eec9 [ 959.459255][T19756] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007feaf4be618c [ 959.459273][T19756] RBP: 00007feaf4be6180 R08: 00007feaf5766000 R09: 0000000000000000 [ 959.459290][T19756] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 959.459306][T19756] R13: 00007feaf4be6218 R14: 00007fffa26ef7b0 R15: 00007fffa26ef898 [ 959.459342][T19756] [ 959.645338][ C0] vkms_vblank_simulate: vblank timer overrun [ 960.257560][T19791] FAULT_INJECTION: forcing a failure. [ 960.257560][T19791] name failslab, interval 1, probability 0, space 0, times 0 [ 960.257599][T19791] CPU: 0 UID: 0 PID: 19791 Comm: syz.1.2784 Not tainted syzkaller #0 PREEMPT(full) [ 960.257628][T19791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 960.257643][T19791] Call Trace: [ 960.257651][T19791] [ 960.257662][T19791] dump_stack_lvl+0x16c/0x1f0 [ 960.257701][T19791] should_fail_ex+0x512/0x640 [ 960.257743][T19791] should_failslab+0xc2/0x120 [ 960.257777][T19791] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 960.257808][T19791] ? skb_clone+0x190/0x3f0 [ 960.257847][T19791] skb_clone+0x190/0x3f0 [ 960.257887][T19791] netlink_deliver_tap+0xabd/0xd30 [ 960.257925][T19791] ? __pfx_rtnl_stats_dump+0x10/0x10 [ 960.257954][T19791] netlink_dump+0xa5f/0xd30 [ 960.257992][T19791] ? __pfx_netlink_dump+0x10/0x10 [ 960.258062][T19791] netlink_recvmsg+0x7dc/0xa90 [ 960.258100][T19791] ? __pfx_netlink_recvmsg+0x10/0x10 [ 960.258140][T19791] ? iovec_from_user+0xbb/0x140 [ 960.258176][T19791] ____sys_recvmsg+0x5f9/0x6b0 [ 960.258211][T19791] ? __pfx_____sys_recvmsg+0x10/0x10 [ 960.258250][T19791] ? kfree+0x24f/0x4d0 [ 960.258272][T19791] ? __lock_acquire+0x62e/0x1ce0 [ 960.258311][T19791] ___sys_recvmsg+0x114/0x1a0 [ 960.258346][T19791] ? __pfx____sys_recvmsg+0x10/0x10 [ 960.258413][T19791] ? __pfx___might_resched+0x10/0x10 [ 960.258447][T19791] do_recvmmsg+0x2fe/0x750 [ 960.258488][T19791] ? __pfx_do_recvmmsg+0x10/0x10 [ 960.258531][T19791] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 960.258579][T19791] ? __fget_files+0x20e/0x3c0 [ 960.258614][T19791] __x64_sys_recvmmsg+0x22a/0x280 [ 960.258653][T19791] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 960.258701][T19791] do_syscall_64+0xcd/0x4c0 [ 960.258740][T19791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.258765][T19791] RIP: 0033:0x7fef7b78eec9 [ 960.258786][T19791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 960.258810][T19791] RSP: 002b:00007fef7c712038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 960.258833][T19791] RAX: ffffffffffffffda RBX: 00007fef7b9e5fa0 RCX: 00007fef7b78eec9 [ 960.258850][T19791] RDX: 0000000000000005 RSI: 0000200000000180 RDI: 0000000000000003 [ 960.258865][T19791] RBP: 00007fef7c712090 R08: 0000000000000000 R09: 0000000000000000 [ 960.258880][T19791] R10: 00000000000066a6 R11: 0000000000000246 R12: 0000000000000002 [ 960.258894][T19791] R13: 00007fef7b9e6038 R14: 00007fef7b9e5fa0 R15: 00007ffc84e89908 [ 960.258929][T19791] [ 960.433569][T19794] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2785'. [ 960.437678][T19795] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2785'. [ 961.006120][ T5869] Bluetooth: hci0: command 0x0c1a tx timeout [ 961.095627][ T5869] Bluetooth: hci2: command 0x0c1a tx timeout [ 961.625931][T19812] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2789'. [ 962.076537][T19822] random: crng reseeded on system resumption [ 963.078174][ T5869] Bluetooth: hci0: command 0x0c1a tx timeout [ 963.154915][ T5869] Bluetooth: hci2: command 0x0c1a tx timeout [ 963.457745][T19833] FAULT_INJECTION: forcing a failure. [ 963.457745][T19833] name failslab, interval 1, probability 0, space 0, times 0 [ 963.506758][T19839] FAULT_INJECTION: forcing a failure. [ 963.506758][T19839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 963.643535][T19833] CPU: 1 UID: 0 PID: 19833 Comm: syz.0.2793 Not tainted syzkaller #0 PREEMPT(full) [ 963.643568][T19833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 963.643583][T19833] Call Trace: [ 963.643592][T19833] [ 963.643602][T19833] dump_stack_lvl+0x16c/0x1f0 [ 963.643644][T19833] should_fail_ex+0x512/0x640 [ 963.643679][T19833] ? __kmalloc_noprof+0xbf/0x510 [ 963.643709][T19833] ? xfrm_hash_alloc+0xd1/0x100 [ 963.643743][T19833] should_failslab+0xc2/0x120 [ 963.643775][T19833] __kmalloc_noprof+0xd2/0x510 [ 963.643804][T19833] ? __pfx_xfrm_statistics_seq_show+0x10/0x10 [ 963.643834][T19833] ? __pfx_xfrm_net_init+0x10/0x10 [ 963.643859][T19833] xfrm_hash_alloc+0xd1/0x100 [ 963.643895][T19833] xfrm_state_init+0x9c/0x630 [ 963.643936][T19833] ? __pfx_xfrm_net_init+0x10/0x10 [ 963.643959][T19833] xfrm_net_init+0x210/0xcc0 [ 963.643990][T19833] ? __pfx_xfrm_net_init+0x10/0x10 [ 963.644014][T19833] ops_init+0x1df/0x5f0 [ 963.644055][T19833] setup_net+0x10f/0x380 [ 963.644075][T19833] ? lockdep_init_map_type+0x5c/0x280 [ 963.644115][T19833] ? __pfx_setup_net+0x10/0x10 [ 963.644140][T19833] ? debug_mutex_init+0x37/0x70 [ 963.644169][T19833] copy_net_ns+0x2a6/0x5f0 [ 963.644199][T19833] create_new_namespaces+0x3ea/0xa90 [ 963.644238][T19833] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 963.644270][T19833] ksys_unshare+0x45b/0xa40 [ 963.644305][T19833] ? __pfx_ksys_unshare+0x10/0x10 [ 963.644339][T19833] ? xfd_validate_state+0x61/0x180 [ 963.644384][T19833] __x64_sys_unshare+0x31/0x40 [ 963.644417][T19833] do_syscall_64+0xcd/0x4c0 [ 963.644456][T19833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.644481][T19833] RIP: 0033:0x7feaf498eec9 [ 963.644502][T19833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 963.644530][T19833] RSP: 002b:00007feaf5765038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 963.644554][T19833] RAX: ffffffffffffffda RBX: 00007feaf4be5fa0 RCX: 00007feaf498eec9 [ 963.644572][T19833] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 963.644586][T19833] RBP: 00007feaf4a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 963.644602][T19833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 963.644616][T19833] R13: 00007feaf4be6038 R14: 00007feaf4be5fa0 R15: 00007fffa26ef898 [ 963.644651][T19833] [ 963.649198][T19839] CPU: 1 UID: 0 PID: 19839 Comm: syz.2.2794 Not tainted syzkaller #0 PREEMPT(full) [ 963.649228][T19839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 963.649241][T19839] Call Trace: [ 963.649248][T19839] [ 963.649256][T19839] dump_stack_lvl+0x16c/0x1f0 [ 963.649293][T19839] should_fail_ex+0x512/0x640 [ 963.649333][T19839] _copy_from_user+0x2e/0xd0 [ 963.649359][T19839] copy_msghdr_from_user+0x98/0x160 [ 963.649396][T19839] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 963.649437][T19839] ? kfree+0x24f/0x4d0 [ 963.649458][T19839] ? __lock_acquire+0x62e/0x1ce0 [ 963.649496][T19839] ___sys_recvmsg+0xdb/0x1a0 [ 963.649530][T19839] ? __pfx____sys_recvmsg+0x10/0x10 [ 963.649586][T19839] ? __pfx___might_resched+0x10/0x10 [ 963.649618][T19839] do_recvmmsg+0x2fe/0x750 [ 963.649659][T19839] ? __pfx_do_recvmmsg+0x10/0x10 [ 963.649702][T19839] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 963.649740][T19839] ? __fget_files+0x20e/0x3c0 [ 963.649777][T19839] __x64_sys_recvmmsg+0x22a/0x280 [ 963.649815][T19839] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 963.649862][T19839] do_syscall_64+0xcd/0x4c0 [ 963.649900][T19839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.649926][T19839] RIP: 0033:0x7f8b8c78eec9 [ 963.649945][T19839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 963.649970][T19839] RSP: 002b:00007f8b8a9d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 963.649994][T19839] RAX: ffffffffffffffda RBX: 00007f8b8c9e6090 RCX: 00007f8b8c78eec9 [ 963.650011][T19839] RDX: 0000000000000005 RSI: 0000200000000180 RDI: 0000000000000003 [ 963.650027][T19839] RBP: 00007f8b8a9d5090 R08: 0000000000000000 R09: 0000000000000000 [ 963.650042][T19839] R10: 00000000000066a6 R11: 0000000000000246 R12: 0000000000000002 [ 963.650056][T19839] R13: 00007f8b8c9e6128 R14: 00007f8b8c9e6090 R15: 00007ffeac191788 [ 963.650095][T19839] [ 966.004331][T19877] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2800'. [ 966.550983][T19888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2802'. [ 966.930888][T19896] random: crng reseeded on system resumption [ 970.295406][T19940] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2811'. [ 970.871583][T19950] zswap: compressor not available [ 970.981428][T19957] random: crng reseeded on system resumption [ 972.803192][T19986] random: crng reseeded on system resumption [ 973.290588][ T30] audit: type=1800 audit(4294967342.796:16): pid=19995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2821" name="features" dev="configfs" ino=83796 res=0 errno=0 [ 974.353898][T20003] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2822'. [ 975.448287][T20030] random: crng reseeded on system resumption [ 975.704981][T20033] vivid-003: ================= START STATUS ================= [ 975.746714][T20033] vivid-003: Radio HW Seek Mode: Bounded [ 975.920117][ T5869] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 975.993246][T20034] random: crng reseeded on system resumption [ 976.001369][T20033] [ 976.015688][T20033] vivid-003: Radio Programmable HW Seek: false [ 976.090012][T20033] vivid-003: RDS Rx I/O Mode: Block I/O [ 976.095714][T20033] vivid-003: Generate RBDS Instead of RDS: false [ 976.110303][T20033] vivid-003: RDS Reception: true [ 976.115301][T20033] vivid-003: RDS Program Type: 0 inactive [ 976.135111][T20033] vivid-003: RDS PS Name: inactive [ 976.140512][T20033] vivid-003: RDS Radio Text: inactive [ 976.146140][T20033] vivid-003: RDS Traffic Announcement: false inactive [ 976.153033][T20033] vivid-003: RDS Traffic Program: false inactive [ 976.160503][T20033] vivid-003: RDS Music: false inactive [ 976.166101][T20033] vivid-003: ================== END STATUS ================== [ 976.758920][T20043] FAULT_INJECTION: forcing a failure. [ 976.758920][T20043] name failslab, interval 1, probability 0, space 0, times 0 [ 976.811342][T20043] CPU: 1 UID: 0 PID: 20043 Comm: syz.3.2830 Not tainted syzkaller #0 PREEMPT(full) [ 976.811375][T20043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 976.811389][T20043] Call Trace: [ 976.811398][T20043] [ 976.811409][T20043] dump_stack_lvl+0x16c/0x1f0 [ 976.811449][T20043] should_fail_ex+0x512/0x640 [ 976.811489][T20043] should_failslab+0xc2/0x120 [ 976.811522][T20043] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 976.811552][T20043] ? skb_clone+0x190/0x3f0 [ 976.811591][T20043] skb_clone+0x190/0x3f0 [ 976.811627][T20043] netlink_deliver_tap+0xabd/0xd30 [ 976.811662][T20043] ? __pfx_rtnl_stats_dump+0x10/0x10 [ 976.811692][T20043] netlink_dump+0xa5f/0xd30 [ 976.811729][T20043] ? __pfx_netlink_dump+0x10/0x10 [ 976.811790][T20043] netlink_recvmsg+0x7dc/0xa90 [ 976.811825][T20043] ? __pfx_netlink_recvmsg+0x10/0x10 [ 976.811865][T20043] ? import_ubuf+0x1b6/0x220 [ 976.811898][T20043] ____sys_recvmsg+0x5f9/0x6b0 [ 976.811933][T20043] ? __pfx_____sys_recvmsg+0x10/0x10 [ 976.811972][T20043] ? kfree+0x24f/0x4d0 [ 976.811993][T20043] ? __lock_acquire+0x62e/0x1ce0 [ 976.812038][T20043] ___sys_recvmsg+0x114/0x1a0 [ 976.812075][T20043] ? __pfx____sys_recvmsg+0x10/0x10 [ 976.812130][T20043] ? __pfx___might_resched+0x10/0x10 [ 976.812163][T20043] do_recvmmsg+0x2fe/0x750 [ 976.812204][T20043] ? __pfx_do_recvmmsg+0x10/0x10 [ 976.812247][T20043] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 976.812294][T20043] ? __fget_files+0x20e/0x3c0 [ 976.812332][T20043] __x64_sys_recvmmsg+0x22a/0x280 [ 976.812370][T20043] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 976.812417][T20043] do_syscall_64+0xcd/0x4c0 [ 976.812456][T20043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.812481][T20043] RIP: 0033:0x7f331958eec9 [ 976.812501][T20043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 976.812524][T20043] RSP: 002b:00007f331a411038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 976.812547][T20043] RAX: ffffffffffffffda RBX: 00007f33197e5fa0 RCX: 00007f331958eec9 [ 976.812564][T20043] RDX: 0000000000000005 RSI: 0000200000000180 RDI: 0000000000000003 [ 976.812578][T20043] RBP: 00007f331a411090 R08: 0000000000000000 R09: 0000000000000000 [ 976.812593][T20043] R10: 00000000000066a6 R11: 0000000000000246 R12: 0000000000000002 [ 976.812608][T20043] R13: 00007f33197e6038 R14: 00007f33197e5fa0 R15: 00007ffd922422f8 [ 976.812643][T20043] [ 977.395169][T20056] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078400dc0 pfn:0x78400 [ 977.429593][T20049] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2832'. [ 977.448961][T20056] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 977.464197][T20056] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 977.577342][T20056] raw: ffff888078400dc0 0000000000000000 00000001ffffffff 0000000000000000 [ 977.586704][T20056] page dumped because: unmovable page [ 977.596744][T20056] page_owner tracks the page as allocated [ 977.606383][T20056] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO), pid 6122, tgid 6113 (syz.1.35), ts 104039761776, free_ts 103821353162 [ 977.654517][T20056] post_alloc_hook+0x1c0/0x230 [ 977.679382][T20056] get_page_from_freelist+0x132b/0x38e0 [ 977.711017][T20056] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 977.748475][T20056] alloc_pages_mpol+0x1fb/0x550 [ 977.809195][T20056] alloc_pages_noprof+0x131/0x390 [ 977.820468][T20056] brd_submit_bio+0x942/0x1180 [ 977.825684][T20056] __submit_bio+0x304/0x690 [ 977.830289][T20056] submit_bio_noacct_nocheck+0x852/0xd30 [ 977.838422][T20056] submit_bio_noacct+0xc20/0x1ed0 [ 977.848487][T20056] blkdev_direct_IO+0x14d2/0x2030 [ 977.853551][T20056] blkdev_write_iter+0x703/0xe00 [ 977.858638][T20056] vfs_write+0x7d3/0x11d0 [ 977.866488][T20056] ksys_write+0x12a/0x250 [ 977.871754][T20056] do_syscall_64+0xcd/0x4c0 [ 977.876268][T20056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.886839][T20056] page last free pid 49 tgid 49 stack trace: [ 977.893292][T20056] __free_frozen_pages+0x7d5/0x10f0 [ 977.904748][T20056] tlb_remove_table_rcu+0x116/0x1a0 [ 978.040957][T20056] rcu_core+0x799/0x1530 [ 978.062239][T20056] handle_softirqs+0x216/0x8e0 [ 978.083174][T20056] do_softirq+0xb2/0xf0 [ 978.088116][T20056] __local_bh_enable_ip+0x100/0x120 [ 978.107083][T20056] batadv_nc_purge_paths+0x1d4/0x3a0 [ 978.112650][T20056] batadv_nc_worker+0x921/0x1030 [ 978.118216][T20056] process_one_work+0x9cf/0x1b70 [ 978.123352][T20056] worker_thread+0x6c8/0xf10 [ 978.130083][T20056] kthread+0x3c5/0x780 [ 978.134292][T20056] ret_from_fork+0x56d/0x730 [ 978.144904][T20056] ret_from_fork_asm+0x1a/0x30 [ 978.965553][T20089] aoe: could not set interface list: too many interfaces [ 980.873122][T20109] random: crng reseeded on system resumption [ 981.104639][T20112] random: crng reseeded on system resumption [ 982.351014][T20134] random: crng reseeded on system resumption [ 983.248534][T20128] FAULT_INJECTION: forcing a failure. [ 983.248534][T20128] name failslab, interval 1, probability 0, space 0, times 0 [ 983.261467][T20128] CPU: 1 UID: 0 PID: 20128 Comm: syz.1.2848 Not tainted syzkaller #0 PREEMPT(full) [ 983.261505][T20128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 983.261522][T20128] Call Trace: [ 983.261531][T20128] [ 983.261541][T20128] dump_stack_lvl+0x16c/0x1f0 [ 983.261584][T20128] should_fail_ex+0x512/0x640 [ 983.261623][T20128] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 983.261657][T20128] should_failslab+0xc2/0x120 [ 983.261692][T20128] __kmalloc_cache_noprof+0x6a/0x3e0 [ 983.261720][T20128] ? snd_card_file_add+0x52/0x340 [ 983.261752][T20128] ? __pfx_snd_ctl_open+0x10/0x10 [ 983.261788][T20128] snd_card_file_add+0x52/0x340 [ 983.261817][T20128] ? __pfx_snd_ctl_open+0x10/0x10 [ 983.261862][T20128] ? __pfx_snd_ctl_open+0x10/0x10 [ 983.261899][T20128] snd_ctl_open+0x9d/0x5f0 [ 983.261937][T20128] ? __pfx_snd_ctl_open+0x10/0x10 [ 983.261973][T20128] snd_open+0x22d/0x4c0 [ 983.261999][T20128] ? __pfx_snd_open+0x10/0x10 [ 983.262025][T20128] chrdev_open+0x231/0x6a0 [ 983.262059][T20128] ? __pfx_apparmor_file_open+0x10/0x10 [ 983.262088][T20128] ? __pfx_chrdev_open+0x10/0x10 [ 983.262123][T20128] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 983.262158][T20128] do_dentry_open+0x97f/0x1530 [ 983.262192][T20128] ? __pfx_chrdev_open+0x10/0x10 [ 983.262231][T20128] vfs_open+0x82/0x3f0 [ 983.262272][T20128] path_openat+0x1de4/0x2cb0 [ 983.262313][T20128] ? __pfx_path_openat+0x10/0x10 [ 983.262354][T20128] do_filp_open+0x20b/0x470 [ 983.262385][T20128] ? __pfx_do_filp_open+0x10/0x10 [ 983.262441][T20128] ? alloc_fd+0x471/0x7d0 [ 983.262478][T20128] do_sys_openat2+0x11b/0x1d0 [ 983.262516][T20128] ? __pfx_do_sys_openat2+0x10/0x10 [ 983.262567][T20128] __x64_sys_openat+0x174/0x210 [ 983.262590][T20128] ? __pfx___x64_sys_openat+0x10/0x10 [ 983.262629][T20128] do_syscall_64+0xcd/0x4c0 [ 983.262670][T20128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.262696][T20128] RIP: 0033:0x7fef7b78eec9 [ 983.262718][T20128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 983.262744][T20128] RSP: 002b:00007fef7c6d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 983.262770][T20128] RAX: ffffffffffffffda RBX: 00007fef7b9e6180 RCX: 00007fef7b78eec9 [ 983.262787][T20128] RDX: 0000000000000802 RSI: 00002000000010c0 RDI: ffffffffffffff9c [ 983.262804][T20128] RBP: 00007fef7b811f91 R08: 0000000000000000 R09: 0000000000000000 [ 983.262827][T20128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 983.262845][T20128] R13: 00007fef7b9e6218 R14: 00007fef7b9e6180 R15: 00007ffc84e89908 [ 983.262880][T20128] [ 983.624747][ T5869] Bluetooth: hci2: unexpected event 0x1d length: 6 > 5 [ 984.175997][T20155] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2855'. [ 984.603682][T20155] nbd0: detected capacity change from 0 to 217936035840 [ 984.618939][T19810] block nbd0: Send control failed (result -22) [ 984.650319][T19810] block nbd0: Request send failed, requeueing [ 984.687021][ T5869] block nbd0: Receive control failed (result -32) [ 984.718676][T18294] block nbd0: Dead connection, failed to find a fallback [ 984.727386][T18294] block nbd0: shutting down sockets [ 984.733228][T18294] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 984.743820][T18294] Buffer I/O error on dev nbd0, logical block 0, async page read [ 984.758152][T19810] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 984.768020][T19810] Buffer I/O error on dev nbd0, logical block 0, async page read [ 984.777196][T19810] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 984.787432][T19810] Buffer I/O error on dev nbd0, logical block 0, async page read [ 984.795411][T19810] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 984.804737][T19810] Buffer I/O error on dev nbd0, logical block 0, async page read [ 984.812646][T19810] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 984.821858][T19810] Buffer I/O error on dev nbd0, logical block 0, async page read [ 984.832598][T19810] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 984.841625][T19810] Buffer I/O error on dev nbd0, logical block 0, async page read [ 984.850652][T19810] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 984.859848][T19810] Buffer I/O error on dev nbd0, logical block 0, async page read [ 984.867810][T19810] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 984.877777][T19810] Buffer I/O error on dev nbd0, logical block 0, async page read [ 984.926737][T19810] ldm_validate_partition_table(): Disk read failed. [ 984.941667][T19810] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 984.961024][T19810] Buffer I/O error on dev nbd0, logical block 0, async page read [ 984.969930][T19810] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 984.979350][T19810] Buffer I/O error on dev nbd0, logical block 0, async page read [ 984.992735][T19810] Dev nbd0: unable to read RDB block 0 [ 984.998613][T19810] nbd0: unable to read partition table [ 985.038461][T19810] ldm_validate_partition_table(): Disk read failed. [ 985.104934][T19810] Dev nbd0: unable to read RDB block 0 [ 985.128977][T20167] random: crng reseeded on system resumption [ 985.148739][T19810] nbd0: unable to read partition table [ 987.309209][T20206] sd 0:0:1:0: PR command failed: 1026 [ 987.309265][T20206] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 987.309317][T20206] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 987.960336][T20209] random: crng reseeded on system resumption [ 989.175753][ T30] audit: type=1800 audit(4294967358.749:17): pid=20231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2870" name="dbroot" dev="configfs" ino=85497 res=0 errno=0 [ 989.842986][T20237] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2871'. [ 991.267276][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 991.273704][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.106269][T20280] random: crng reseeded on system resumption [ 992.801868][T20288] random: crng reseeded on system resumption [ 999.784161][T20365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2893'. [ 1000.196705][T20356] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2891'. [ 1000.718605][T20375] random: crng reseeded on system resumption [ 1001.145743][T20381] random: crng reseeded on system resumption [ 1001.756429][T20385] FAULT_INJECTION: forcing a failure. [ 1001.756429][T20385] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1001.913583][T20385] CPU: 0 UID: 0 PID: 20385 Comm: syz.3.2899 Not tainted syzkaller #0 PREEMPT(full) [ 1001.913620][T20385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1001.913635][T20385] Call Trace: [ 1001.913643][T20385] [ 1001.913652][T20385] dump_stack_lvl+0x16c/0x1f0 [ 1001.913697][T20385] should_fail_ex+0x512/0x640 [ 1001.913742][T20385] should_fail_alloc_page+0xe7/0x130 [ 1001.913781][T20385] prepare_alloc_pages+0x3c2/0x610 [ 1001.913827][T20385] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1001.913862][T20385] ? find_held_lock+0x2b/0x80 [ 1001.913890][T20385] ? mm_drop_all_locks+0x395/0x4c0 [ 1001.913926][T20385] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1001.913968][T20385] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1001.914001][T20385] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1001.914060][T20385] ? mm_drop_all_locks+0x395/0x4c0 [ 1001.914091][T20385] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1001.914132][T20385] ? policy_nodemask+0xea/0x4e0 [ 1001.914167][T20385] alloc_pages_mpol+0x1fb/0x550 [ 1001.914203][T20385] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1001.914248][T20385] alloc_pages_noprof+0x131/0x390 [ 1001.914284][T20385] kvm_coalesced_mmio_init+0x1a/0x170 [ 1001.914319][T20385] kvm_dev_ioctl+0xe82/0x1af0 [ 1001.914352][T20385] ? find_held_lock+0x2b/0x80 [ 1001.914376][T20385] ? hook_file_ioctl_common+0x145/0x410 [ 1001.914419][T20385] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1001.914451][T20385] ? __fget_files+0x20e/0x3c0 [ 1001.914486][T20385] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1001.914516][T20385] __x64_sys_ioctl+0x18b/0x210 [ 1001.914561][T20385] do_syscall_64+0xcd/0x4c0 [ 1001.914602][T20385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.914629][T20385] RIP: 0033:0x7f331958eec9 [ 1001.914651][T20385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1001.914677][T20385] RSP: 002b:00007f331a411038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1001.914702][T20385] RAX: ffffffffffffffda RBX: 00007f33197e5fa0 RCX: 00007f331958eec9 [ 1001.914721][T20385] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 1001.914737][T20385] RBP: 00007f3319611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1001.914754][T20385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1001.914771][T20385] R13: 00007f33197e6038 R14: 00007f33197e5fa0 R15: 00007ffd922422f8 [ 1001.914811][T20385] [ 1002.290893][T20384] FAULT_INJECTION: forcing a failure. [ 1002.290893][T20384] name failslab, interval 1, probability 0, space 0, times 0 [ 1002.303631][T20384] CPU: 0 UID: 0 PID: 20384 Comm: syz.2.2895 Not tainted syzkaller #0 PREEMPT(full) [ 1002.303654][T20384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1002.303664][T20384] Call Trace: [ 1002.303671][T20384] [ 1002.303678][T20384] dump_stack_lvl+0x16c/0x1f0 [ 1002.303705][T20384] should_fail_ex+0x512/0x640 [ 1002.303728][T20384] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1002.303747][T20384] should_failslab+0xc2/0x120 [ 1002.303767][T20384] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1002.303783][T20384] ? snd_card_file_add+0x52/0x340 [ 1002.303802][T20384] ? __pfx_snd_ctl_open+0x10/0x10 [ 1002.303826][T20384] snd_card_file_add+0x52/0x340 [ 1002.303842][T20384] ? __pfx_snd_ctl_open+0x10/0x10 [ 1002.303863][T20384] ? __pfx_snd_ctl_open+0x10/0x10 [ 1002.303883][T20384] snd_ctl_open+0x9d/0x5f0 [ 1002.303904][T20384] ? __pfx_snd_ctl_open+0x10/0x10 [ 1002.303923][T20384] snd_open+0x22d/0x4c0 [ 1002.303943][T20384] ? __pfx_snd_open+0x10/0x10 [ 1002.303958][T20384] chrdev_open+0x231/0x6a0 [ 1002.303980][T20384] ? __pfx_apparmor_file_open+0x10/0x10 [ 1002.303996][T20384] ? __pfx_chrdev_open+0x10/0x10 [ 1002.304015][T20384] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1002.304035][T20384] do_dentry_open+0x97f/0x1530 [ 1002.304053][T20384] ? __pfx_chrdev_open+0x10/0x10 [ 1002.304075][T20384] vfs_open+0x82/0x3f0 [ 1002.304097][T20384] path_openat+0x1de4/0x2cb0 [ 1002.304121][T20384] ? __pfx_path_openat+0x10/0x10 [ 1002.304142][T20384] do_filp_open+0x20b/0x470 [ 1002.304159][T20384] ? __pfx_do_filp_open+0x10/0x10 [ 1002.304188][T20384] ? alloc_fd+0x471/0x7d0 [ 1002.304209][T20384] do_sys_openat2+0x11b/0x1d0 [ 1002.304229][T20384] ? __pfx_do_sys_openat2+0x10/0x10 [ 1002.304257][T20384] __x64_sys_openat+0x174/0x210 [ 1002.304270][T20384] ? __pfx___x64_sys_openat+0x10/0x10 [ 1002.304290][T20384] do_syscall_64+0xcd/0x4c0 [ 1002.304314][T20384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.304329][T20384] RIP: 0033:0x7f8b8c78eec9 [ 1002.304342][T20384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1002.304356][T20384] RSP: 002b:00007f8b8a9b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1002.304370][T20384] RAX: ffffffffffffffda RBX: 00007f8b8c9e6180 RCX: 00007f8b8c78eec9 [ 1002.304385][T20384] RDX: 0000000000000802 RSI: 00002000000010c0 RDI: ffffffffffffff9c [ 1002.304394][T20384] RBP: 00007f8b8c811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1002.304404][T20384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1002.304413][T20384] R13: 00007f8b8c9e6218 R14: 00007f8b8c9e6180 R15: 00007ffeac191788 [ 1002.304432][T20384] [ 1003.771561][T20404] random: crng reseeded on system resumption [ 1005.334107][T20419] FAULT_INJECTION: forcing a failure. [ 1005.334107][T20419] name failslab, interval 1, probability 0, space 0, times 0 [ 1005.363522][T20419] CPU: 0 UID: 0 PID: 20419 Comm: syz.2.2905 Not tainted syzkaller #0 PREEMPT(full) [ 1005.363546][T20419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1005.363556][T20419] Call Trace: [ 1005.363561][T20419] [ 1005.363568][T20419] dump_stack_lvl+0x16c/0x1f0 [ 1005.363595][T20419] should_fail_ex+0x512/0x640 [ 1005.363617][T20419] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1005.363635][T20419] should_failslab+0xc2/0x120 [ 1005.363655][T20419] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1005.363669][T20419] ? rcu_is_watching+0x12/0xc0 [ 1005.363685][T20419] ? call_usermodehelper_setup+0xaf/0x360 [ 1005.363701][T20419] ? __pfx_free_modprobe_argv+0x10/0x10 [ 1005.363723][T20419] call_usermodehelper_setup+0xaf/0x360 [ 1005.363740][T20419] __request_module+0x3bd/0x690 [ 1005.363761][T20419] ? __pfx___request_module+0x10/0x10 [ 1005.363790][T20419] ? rcu_is_watching+0x12/0xc0 [ 1005.363804][T20419] ? lockdep_hardirqs_on+0x7c/0x110 [ 1005.363828][T20419] netlink_create+0x226/0x620 [ 1005.363851][T20419] __sock_create+0x338/0x8d0 [ 1005.363872][T20419] __sys_socket+0x14d/0x260 [ 1005.363889][T20419] ? __pfx___sys_socket+0x10/0x10 [ 1005.363906][T20419] ? xfd_validate_state+0x61/0x180 [ 1005.363926][T20419] ? __pfx_ksys_write+0x10/0x10 [ 1005.363947][T20419] __x64_sys_socket+0x72/0xb0 [ 1005.363962][T20419] ? lockdep_hardirqs_on+0x7c/0x110 [ 1005.363982][T20419] do_syscall_64+0xcd/0x4c0 [ 1005.364004][T20419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.364019][T20419] RIP: 0033:0x7f8b8c78eec9 [ 1005.364031][T20419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1005.364045][T20419] RSP: 002b:00007f8b8a9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1005.364059][T20419] RAX: ffffffffffffffda RBX: 00007f8b8c9e5fa0 RCX: 00007f8b8c78eec9 [ 1005.364069][T20419] RDX: 000000000000001f RSI: 0000000000000003 RDI: 0000000000000010 [ 1005.364077][T20419] RBP: 00007f8b8c811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1005.364086][T20419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1005.364094][T20419] R13: 00007f8b8c9e6038 R14: 00007f8b8c9e5fa0 R15: 00007ffeac191788 [ 1005.364112][T20419] [ 1006.280121][T20416] FAULT_INJECTION: forcing a failure. [ 1006.280121][T20416] name failslab, interval 1, probability 0, space 0, times 0 [ 1006.293985][T20416] CPU: 0 UID: 0 PID: 20416 Comm: syz.3.2902 Not tainted syzkaller #0 PREEMPT(full) [ 1006.294021][T20416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1006.294038][T20416] Call Trace: [ 1006.294048][T20416] [ 1006.294057][T20416] dump_stack_lvl+0x16c/0x1f0 [ 1006.294097][T20416] should_fail_ex+0x512/0x640 [ 1006.294119][T20416] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1006.294137][T20416] should_failslab+0xc2/0x120 [ 1006.294157][T20416] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1006.294172][T20416] ? snd_card_file_add+0x52/0x340 [ 1006.294189][T20416] ? __pfx_snd_ctl_open+0x10/0x10 [ 1006.294213][T20416] snd_card_file_add+0x52/0x340 [ 1006.294229][T20416] ? __pfx_snd_ctl_open+0x10/0x10 [ 1006.294248][T20416] ? __pfx_snd_ctl_open+0x10/0x10 [ 1006.294268][T20416] snd_ctl_open+0x9d/0x5f0 [ 1006.294288][T20416] ? __pfx_snd_ctl_open+0x10/0x10 [ 1006.294307][T20416] snd_open+0x22d/0x4c0 [ 1006.294321][T20416] ? __pfx_snd_open+0x10/0x10 [ 1006.294334][T20416] chrdev_open+0x231/0x6a0 [ 1006.294352][T20416] ? __pfx_apparmor_file_open+0x10/0x10 [ 1006.294368][T20416] ? __pfx_chrdev_open+0x10/0x10 [ 1006.294386][T20416] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1006.294406][T20416] do_dentry_open+0x97f/0x1530 [ 1006.294424][T20416] ? __pfx_chrdev_open+0x10/0x10 [ 1006.294453][T20416] vfs_open+0x82/0x3f0 [ 1006.294476][T20416] path_openat+0x1de4/0x2cb0 [ 1006.294500][T20416] ? __pfx_path_openat+0x10/0x10 [ 1006.294523][T20416] do_filp_open+0x20b/0x470 [ 1006.294541][T20416] ? __pfx_do_filp_open+0x10/0x10 [ 1006.294570][T20416] ? alloc_fd+0x471/0x7d0 [ 1006.294590][T20416] do_sys_openat2+0x11b/0x1d0 [ 1006.294611][T20416] ? __pfx_do_sys_openat2+0x10/0x10 [ 1006.294639][T20416] __x64_sys_openat+0x174/0x210 [ 1006.294651][T20416] ? __pfx___x64_sys_openat+0x10/0x10 [ 1006.294672][T20416] do_syscall_64+0xcd/0x4c0 [ 1006.294695][T20416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.294710][T20416] RIP: 0033:0x7f331958eec9 [ 1006.294723][T20416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1006.294738][T20416] RSP: 002b:00007f331a3cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1006.294752][T20416] RAX: ffffffffffffffda RBX: 00007f33197e6180 RCX: 00007f331958eec9 [ 1006.294763][T20416] RDX: 0000000000000802 RSI: 00002000000010c0 RDI: ffffffffffffff9c [ 1006.294772][T20416] RBP: 00007f3319611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1006.294782][T20416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1006.294791][T20416] R13: 00007f33197e6218 R14: 00007f33197e6180 R15: 00007ffd922422f8 [ 1006.294809][T20416] [ 1008.748098][T20442] FAULT_INJECTION: forcing a failure. [ 1008.748098][T20442] name failslab, interval 1, probability 0, space 0, times 0 [ 1008.761051][T20442] CPU: 1 UID: 0 PID: 20442 Comm: syz.0.2909 Not tainted syzkaller #0 PREEMPT(full) [ 1008.761087][T20442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1008.761103][T20442] Call Trace: [ 1008.761113][T20442] [ 1008.761124][T20442] dump_stack_lvl+0x16c/0x1f0 [ 1008.761168][T20442] should_fail_ex+0x512/0x640 [ 1008.761205][T20442] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1008.761245][T20442] should_failslab+0xc2/0x120 [ 1008.761276][T20442] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1008.761304][T20442] ? snd_card_file_add+0x52/0x340 [ 1008.761335][T20442] ? __pfx_snd_ctl_open+0x10/0x10 [ 1008.761372][T20442] snd_card_file_add+0x52/0x340 [ 1008.761401][T20442] ? __pfx_snd_ctl_open+0x10/0x10 [ 1008.761439][T20442] ? __pfx_snd_ctl_open+0x10/0x10 [ 1008.761474][T20442] snd_ctl_open+0x9d/0x5f0 [ 1008.761512][T20442] ? __pfx_snd_ctl_open+0x10/0x10 [ 1008.761548][T20442] snd_open+0x22d/0x4c0 [ 1008.761575][T20442] ? __pfx_snd_open+0x10/0x10 [ 1008.761599][T20442] chrdev_open+0x231/0x6a0 [ 1008.761631][T20442] ? __pfx_apparmor_file_open+0x10/0x10 [ 1008.761661][T20442] ? __pfx_chrdev_open+0x10/0x10 [ 1008.761695][T20442] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1008.761731][T20442] do_dentry_open+0x97f/0x1530 [ 1008.761763][T20442] ? __pfx_chrdev_open+0x10/0x10 [ 1008.761801][T20442] vfs_open+0x82/0x3f0 [ 1008.761843][T20442] path_openat+0x1de4/0x2cb0 [ 1008.761885][T20442] ? __pfx_path_openat+0x10/0x10 [ 1008.761925][T20442] do_filp_open+0x20b/0x470 [ 1008.761957][T20442] ? __pfx_do_filp_open+0x10/0x10 [ 1008.762012][T20442] ? alloc_fd+0x471/0x7d0 [ 1008.762049][T20442] do_sys_openat2+0x11b/0x1d0 [ 1008.762087][T20442] ? __pfx_do_sys_openat2+0x10/0x10 [ 1008.762138][T20442] __x64_sys_openat+0x174/0x210 [ 1008.762163][T20442] ? __pfx___x64_sys_openat+0x10/0x10 [ 1008.762201][T20442] do_syscall_64+0xcd/0x4c0 [ 1008.762254][T20442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.762280][T20442] RIP: 0033:0x7feaf498eec9 [ 1008.762303][T20442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1008.762328][T20442] RSP: 002b:00007feaf2bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1008.762352][T20442] RAX: ffffffffffffffda RBX: 00007feaf4be6180 RCX: 00007feaf498eec9 [ 1008.762370][T20442] RDX: 0000000000000802 RSI: 00002000000010c0 RDI: ffffffffffffff9c [ 1008.762388][T20442] RBP: 00007feaf4a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1008.762404][T20442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1008.762420][T20442] R13: 00007feaf4be6218 R14: 00007feaf4be6180 R15: 00007fffa26ef898 [ 1008.762455][T20442] [ 1009.197739][T20444] FAULT_INJECTION: forcing a failure. [ 1009.197739][T20444] name failslab, interval 1, probability 0, space 0, times 0 [ 1009.275135][T20444] CPU: 1 UID: 0 PID: 20444 Comm: syz.1.2910 Not tainted syzkaller #0 PREEMPT(full) [ 1009.275176][T20444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1009.275192][T20444] Call Trace: [ 1009.275200][T20444] [ 1009.275208][T20444] dump_stack_lvl+0x16c/0x1f0 [ 1009.275262][T20444] should_fail_ex+0x512/0x640 [ 1009.275285][T20444] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1009.275302][T20444] should_failslab+0xc2/0x120 [ 1009.275326][T20444] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1009.275341][T20444] ? snd_card_file_add+0x52/0x340 [ 1009.275359][T20444] ? __pfx_snd_ctl_open+0x10/0x10 [ 1009.275381][T20444] snd_card_file_add+0x52/0x340 [ 1009.275396][T20444] ? __pfx_snd_ctl_open+0x10/0x10 [ 1009.275416][T20444] ? __pfx_snd_ctl_open+0x10/0x10 [ 1009.275435][T20444] snd_ctl_open+0x9d/0x5f0 [ 1009.275455][T20444] ? __pfx_snd_ctl_open+0x10/0x10 [ 1009.275475][T20444] snd_open+0x22d/0x4c0 [ 1009.275489][T20444] ? __pfx_snd_open+0x10/0x10 [ 1009.275502][T20444] chrdev_open+0x231/0x6a0 [ 1009.275520][T20444] ? __pfx_apparmor_file_open+0x10/0x10 [ 1009.275536][T20444] ? __pfx_chrdev_open+0x10/0x10 [ 1009.275555][T20444] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1009.275574][T20444] do_dentry_open+0x97f/0x1530 [ 1009.275592][T20444] ? __pfx_chrdev_open+0x10/0x10 [ 1009.275614][T20444] vfs_open+0x82/0x3f0 [ 1009.275636][T20444] path_openat+0x1de4/0x2cb0 [ 1009.275660][T20444] ? __pfx_path_openat+0x10/0x10 [ 1009.275682][T20444] do_filp_open+0x20b/0x470 [ 1009.275703][T20444] ? __pfx_do_filp_open+0x10/0x10 [ 1009.275733][T20444] ? alloc_fd+0x471/0x7d0 [ 1009.275755][T20444] do_sys_openat2+0x11b/0x1d0 [ 1009.275776][T20444] ? __pfx_do_sys_openat2+0x10/0x10 [ 1009.275805][T20444] __x64_sys_openat+0x174/0x210 [ 1009.275818][T20444] ? __pfx___x64_sys_openat+0x10/0x10 [ 1009.275838][T20444] do_syscall_64+0xcd/0x4c0 [ 1009.275861][T20444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.275876][T20444] RIP: 0033:0x7fef7b78eec9 [ 1009.275889][T20444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1009.275909][T20444] RSP: 002b:00007fef7c6d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1009.275933][T20444] RAX: ffffffffffffffda RBX: 00007fef7b9e6180 RCX: 00007fef7b78eec9 [ 1009.275950][T20444] RDX: 0000000000000802 RSI: 00002000000010c0 RDI: ffffffffffffff9c [ 1009.275966][T20444] RBP: 00007fef7b811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1009.275981][T20444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1009.275994][T20444] R13: 00007fef7b9e6218 R14: 00007fef7b9e6180 R15: 00007ffc84e89908 [ 1009.276012][T20444] [ 1010.236874][T20472] random: crng reseeded on system resumption [ 1010.328614][T20476] ICMPv6: process `syz.3.2917' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 1012.012726][T20498] random: crng reseeded on system resumption [ 1013.456961][T20519] FAULT_INJECTION: forcing a failure. [ 1013.456961][T20519] name failslab, interval 1, probability 0, space 0, times 0 [ 1013.479127][T20519] CPU: 0 UID: 0 PID: 20519 Comm: syz.0.2925 Not tainted syzkaller #0 PREEMPT(full) [ 1013.479164][T20519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1013.479181][T20519] Call Trace: [ 1013.479189][T20519] [ 1013.479199][T20519] dump_stack_lvl+0x16c/0x1f0 [ 1013.479239][T20519] should_fail_ex+0x512/0x640 [ 1013.479273][T20519] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1013.479304][T20519] should_failslab+0xc2/0x120 [ 1013.479335][T20519] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1013.479362][T20519] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 1013.479398][T20519] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 1013.479433][T20519] radix_tree_insert+0x247/0x630 [ 1013.479469][T20519] qrtr_node_enqueue+0x1077/0x12e0 [ 1013.479497][T20519] ? __asan_memcpy+0x3c/0x60 [ 1013.479522][T20519] ? __pfx_qrtr_node_enqueue+0x10/0x10 [ 1013.479557][T20519] ? skb_set_owner_w+0x31f/0x710 [ 1013.479590][T20519] ? skb_copy_header+0x20/0x2b0 [ 1013.479625][T20519] ? __pfx_skb_set_owner_w+0x10/0x10 [ 1013.479653][T20519] ? __pskb_copy_fclone+0x48e/0xb50 [ 1013.479675][T20519] ? __pfx__copy_from_iter+0x10/0x10 [ 1013.479710][T20519] qrtr_bcast_enqueue+0xc7/0x1b0 [ 1013.479739][T20519] qrtr_sendmsg+0x444/0x7b0 [ 1013.479762][T20519] ? __pfx_qrtr_bcast_enqueue+0x10/0x10 [ 1013.479785][T20519] ? __pfx_qrtr_sendmsg+0x10/0x10 [ 1013.479812][T20519] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1013.479844][T20519] sock_write_iter+0x4fc/0x5b0 [ 1013.479870][T20519] ? __pfx_sock_write_iter+0x10/0x10 [ 1013.479907][T20519] ? __futex_wait+0x24c/0x2f0 [ 1013.479939][T20519] ? copy_iovec_from_user+0x131/0x170 [ 1013.479965][T20519] do_iter_readv_writev+0x662/0x9e0 [ 1013.479992][T20519] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1013.480021][T20519] ? bpf_lsm_file_permission+0x9/0x10 [ 1013.480052][T20519] ? security_file_permission+0x71/0x210 [ 1013.480083][T20519] ? rw_verify_area+0xcf/0x6c0 [ 1013.480107][T20519] vfs_writev+0x35f/0xde0 [ 1013.480134][T20519] ? __lock_acquire+0x62e/0x1ce0 [ 1013.480165][T20519] ? __pfx_vfs_writev+0x10/0x10 [ 1013.480211][T20519] ? __fget_files+0x20e/0x3c0 [ 1013.480243][T20519] ? do_writev+0x28c/0x340 [ 1013.480264][T20519] do_writev+0x28c/0x340 [ 1013.480287][T20519] ? __pfx_do_writev+0x10/0x10 [ 1013.480321][T20519] do_syscall_64+0xcd/0x4c0 [ 1013.480358][T20519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.480380][T20519] RIP: 0033:0x7feaf498eec9 [ 1013.480398][T20519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1013.480421][T20519] RSP: 002b:00007feaf5765038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1013.480443][T20519] RAX: ffffffffffffffda RBX: 00007feaf4be5fa0 RCX: 00007feaf498eec9 [ 1013.480458][T20519] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 1013.480471][T20519] RBP: 00007feaf4a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1013.480485][T20519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1013.480498][T20519] R13: 00007feaf4be6038 R14: 00007feaf4be5fa0 R15: 00007fffa26ef898 [ 1013.480530][T20519] [ 1016.382620][T20562] [ 1016.384959][T20562] ====================================================== [ 1016.391956][T20562] WARNING: possible circular locking dependency detected [ 1016.398983][T20562] syzkaller #0 Not tainted [ 1016.403382][T20562] ------------------------------------------------------ [ 1016.410396][T20562] syz.1.2932/20562 is trying to acquire lock: [ 1016.416440][T20562] ffff88801caf0220 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0xa3/0x320 [ 1016.426950][T20562] [ 1016.426950][T20562] but task is already holding lock: [ 1016.434293][T20562] ffff88801caf0188 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_drain+0x29c/0x570 [ 1016.443600][T20562] [ 1016.443600][T20562] which lock already depends on the new lock. [ 1016.443600][T20562] [ 1016.453988][T20562] [ 1016.453988][T20562] the existing dependency chain (in reverse order) is: [ 1016.462983][T20562] [ 1016.462983][T20562] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 1016.471050][T20562] down_write+0x92/0x200 [ 1016.475800][T20562] kernfs_add_one+0x38/0x840 [ 1016.480906][T20562] kernfs_create_dir_ns+0xfc/0x1a0 [ 1016.486538][T20562] internal_create_group+0x34d/0xf30 [ 1016.492336][T20562] cpuhp_invoke_callback+0x3d5/0xa10 [ 1016.498130][T20562] cpuhp_issue_call+0x1c0/0x980 [ 1016.503500][T20562] __cpuhp_setup_state_cpuslocked+0x3a1/0x7b0 [ 1016.510071][T20562] __cpuhp_setup_state+0xf4/0x300 [ 1016.515614][T20562] do_one_initcall+0x120/0x6e0 [ 1016.520892][T20562] kernel_init_freeable+0x5c2/0x910 [ 1016.526600][T20562] kernel_init+0x1c/0x2b0 [ 1016.531436][T20562] ret_from_fork+0x56d/0x730 [ 1016.536545][T20562] ret_from_fork_asm+0x1a/0x30 [ 1016.541825][T20562] [ 1016.541825][T20562] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 1016.549626][T20562] [ 1016.549626][T20562] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 1016.557426][T20562] cpus_read_lock+0x42/0x160 [ 1016.562523][T20562] static_key_slow_inc+0x12/0x30 [ 1016.567982][T20562] setup_udp_tunnel_sock+0x53d/0x680 [ 1016.573772][T20562] l2tp_tunnel_register+0x9c8/0xbe0 [ 1016.579472][T20562] pppol2tp_tunnel_get.constprop.0+0x3f0/0x540 [ 1016.586128][T20562] pppol2tp_connect+0xb1b/0x1ce0 [ 1016.591568][T20562] __sys_connect_file+0x13e/0x1a0 [ 1016.597111][T20562] __sys_connect+0x13b/0x160 [ 1016.602231][T20562] __x64_sys_connect+0x72/0xb0 [ 1016.607524][T20562] do_syscall_64+0xcd/0x4c0 [ 1016.612562][T20562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.618966][T20562] [ 1016.618966][T20562] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1016.626779][T20562] lock_sock_nested+0x41/0xf0 [ 1016.631979][T20562] inet_autobind+0x1a/0x1a0 [ 1016.637001][T20562] inet_send_prepare+0x31b/0x530 [ 1016.642453][T20562] inet_sendmsg+0x43/0x140 [ 1016.647403][T20562] sock_sendmsg+0x37f/0x470 [ 1016.652417][T20562] __sock_xmit+0x1e7/0x4f0 [ 1016.657348][T20562] nbd_send_cmd+0x8e4/0x1c90 [ 1016.662448][T20562] nbd_queue_rq+0x940/0x12d0 [ 1016.667553][T20562] blk_mq_dispatch_rq_list+0x416/0x1e20 [ 1016.673617][T20562] __blk_mq_sched_dispatch_requests+0xcb7/0x15f0 [ 1016.680460][T20562] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 1016.686957][T20562] blk_mq_run_hw_queue+0x239/0x670 [ 1016.692580][T20562] blk_mq_dispatch_list+0x514/0x1310 [ 1016.698381][T20562] blk_mq_flush_plug_list+0x130/0x600 [ 1016.704273][T20562] __blk_flush_plug+0x2c4/0x4b0 [ 1016.709638][T20562] __submit_bio+0x545/0x690 [ 1016.714655][T20562] submit_bio_noacct_nocheck+0x660/0xd30 [ 1016.720828][T20562] submit_bio_noacct+0xc20/0x1ed0 [ 1016.726369][T20562] block_read_full_folio+0x4db/0x850 [ 1016.732175][T20562] filemap_read_folio+0xc5/0x2a0 [ 1016.737627][T20562] do_read_cache_folio+0x263/0x5c0 [ 1016.743257][T20562] read_part_sector+0xd4/0x370 [ 1016.748539][T20562] adfspart_check_ICS+0x93/0x940 [ 1016.753995][T20562] bdev_disk_changed+0x720/0x1520 [ 1016.759625][T20562] blkdev_get_whole+0x187/0x290 [ 1016.764988][T20562] bdev_open+0x2c7/0xe40 [ 1016.769741][T20562] blkdev_open+0x34e/0x4f0 [ 1016.774686][T20562] do_dentry_open+0x97f/0x1530 [ 1016.779964][T20562] vfs_open+0x82/0x3f0 [ 1016.784550][T20562] path_openat+0x1de4/0x2cb0 [ 1016.789652][T20562] do_filp_open+0x20b/0x470 [ 1016.794668][T20562] do_sys_openat2+0x11b/0x1d0 [ 1016.799882][T20562] __x64_sys_openat+0x174/0x210 [ 1016.805270][T20562] do_syscall_64+0xcd/0x4c0 [ 1016.810317][T20562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.816730][T20562] [ 1016.816730][T20562] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1016.824373][T20562] __mutex_lock+0x193/0x1060 [ 1016.829513][T20562] nbd_queue_rq+0x423/0x12d0 [ 1016.834618][T20562] blk_mq_dispatch_rq_list+0x416/0x1e20 [ 1016.840684][T20562] __blk_mq_sched_dispatch_requests+0xcb7/0x15f0 [ 1016.847533][T20562] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 1016.854028][T20562] blk_mq_run_hw_queue+0x239/0x670 [ 1016.859654][T20562] blk_mq_dispatch_list+0x514/0x1310 [ 1016.865804][T20562] blk_mq_flush_plug_list+0x130/0x600 [ 1016.871708][T20562] __blk_flush_plug+0x2c4/0x4b0 [ 1016.877252][T20562] __submit_bio+0x545/0x690 [ 1016.882702][T20562] submit_bio_noacct_nocheck+0x660/0xd30 [ 1016.888856][T20562] submit_bio_noacct+0xc20/0x1ed0 [ 1016.894406][T20562] block_read_full_folio+0x4db/0x850 [ 1016.900255][T20562] filemap_read_folio+0xc5/0x2a0 [ 1016.905718][T20562] do_read_cache_folio+0x263/0x5c0 [ 1016.911384][T20562] read_part_sector+0xd4/0x370 [ 1016.916663][T20562] adfspart_check_ICS+0x93/0x940 [ 1016.922119][T20562] bdev_disk_changed+0x720/0x1520 [ 1016.927685][T20562] blkdev_get_whole+0x187/0x290 [ 1016.933138][T20562] bdev_open+0x2c7/0xe40 [ 1016.937894][T20562] blkdev_open+0x34e/0x4f0 [ 1016.942836][T20562] do_dentry_open+0x97f/0x1530 [ 1016.948128][T20562] vfs_open+0x82/0x3f0 [ 1016.952730][T20562] path_openat+0x1de4/0x2cb0 [ 1016.957842][T20562] do_filp_open+0x20b/0x470 [ 1016.962861][T20562] do_sys_openat2+0x11b/0x1d0 [ 1016.968064][T20562] __x64_sys_openat+0x174/0x210 [ 1016.973438][T20562] do_syscall_64+0xcd/0x4c0 [ 1016.978471][T20562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.984884][T20562] [ 1016.984884][T20562] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1016.992203][T20562] __mutex_lock+0x193/0x1060 [ 1016.997328][T20562] nbd_queue_rq+0xbd/0x12d0 [ 1017.002350][T20562] blk_mq_dispatch_rq_list+0x416/0x1e20 [ 1017.008477][T20562] __blk_mq_sched_dispatch_requests+0xcb7/0x15f0 [ 1017.015330][T20562] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 1017.021831][T20562] blk_mq_run_hw_queue+0x239/0x670 [ 1017.027546][T20562] blk_mq_dispatch_list+0x514/0x1310 [ 1017.033349][T20562] blk_mq_flush_plug_list+0x130/0x600 [ 1017.039244][T20562] __blk_flush_plug+0x2c4/0x4b0 [ 1017.044617][T20562] __submit_bio+0x545/0x690 [ 1017.049643][T20562] submit_bio_noacct_nocheck+0x660/0xd30 [ 1017.055802][T20562] submit_bio_noacct+0xc20/0x1ed0 [ 1017.061364][T20562] block_read_full_folio+0x4db/0x850 [ 1017.067169][T20562] filemap_read_folio+0xc5/0x2a0 [ 1017.072652][T20562] do_read_cache_folio+0x263/0x5c0 [ 1017.078380][T20562] read_part_sector+0xd4/0x370 [ 1017.083660][T20562] adfspart_check_ICS+0x93/0x940 [ 1017.089109][T20562] bdev_disk_changed+0x720/0x1520 [ 1017.094648][T20562] blkdev_get_whole+0x187/0x290 [ 1017.100015][T20562] bdev_open+0x2c7/0xe40 [ 1017.104773][T20562] blkdev_open+0x34e/0x4f0 [ 1017.109706][T20562] do_dentry_open+0x97f/0x1530 [ 1017.114991][T20562] vfs_open+0x82/0x3f0 [ 1017.119580][T20562] path_openat+0x1de4/0x2cb0 [ 1017.124691][T20562] do_filp_open+0x20b/0x470 [ 1017.129712][T20562] do_sys_openat2+0x11b/0x1d0 [ 1017.134909][T20562] __x64_sys_openat+0x174/0x210 [ 1017.140268][T20562] do_syscall_64+0xcd/0x4c0 [ 1017.145295][T20562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.151701][T20562] [ 1017.151701][T20562] -> #4 (set->srcu){.+.+}-{0:0}: [ 1017.158914][T20562] __synchronize_srcu+0xa1/0x290 [ 1017.164372][T20562] blk_mq_quiesce_queue+0x149/0x1b0 [ 1017.170086][T20562] elevator_switch+0x17d/0x810 [ 1017.175363][T20562] elevator_change+0x391/0x580 [ 1017.180641][T20562] elevator_set_default+0x2e9/0x380 [ 1017.186351][T20562] blk_register_queue+0x384/0x4e0 [ 1017.191884][T20562] __add_disk+0x74a/0xf00 [ 1017.196824][T20562] add_disk_fwnode+0x13f/0x5d0 [ 1017.202108][T20562] nbd_dev_add+0x783/0xbb0 [ 1017.207048][T20562] nbd_init+0x181/0x320 [ 1017.211722][T20562] do_one_initcall+0x120/0x6e0 [ 1017.217000][T20562] kernel_init_freeable+0x5c2/0x910 [ 1017.222729][T20562] kernel_init+0x1c/0x2b0 [ 1017.227657][T20562] ret_from_fork+0x56d/0x730 [ 1017.232770][T20562] ret_from_fork_asm+0x1a/0x30 [ 1017.238048][T20562] [ 1017.238048][T20562] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1017.245861][T20562] __mutex_lock+0x193/0x1060 [ 1017.250978][T20562] elevator_change+0x17d/0x580 [ 1017.256256][T20562] elv_iosched_store+0x315/0x3c0 [ 1017.261707][T20562] queue_attr_store+0x26b/0x310 [ 1017.267081][T20562] sysfs_kf_write+0xef/0x150 [ 1017.272189][T20562] kernfs_fop_write_iter+0x3ac/0x570 [ 1017.277996][T20562] vfs_write+0x7d3/0x11d0 [ 1017.282838][T20562] ksys_write+0x12a/0x250 [ 1017.287683][T20562] do_syscall_64+0xcd/0x4c0 [ 1017.292708][T20562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.299114][T20562] [ 1017.299114][T20562] -> #2 (&q->q_usage_counter(io)#62){++++}-{0:0}: [ 1017.307717][T20562] blk_alloc_queue+0x619/0x760 [ 1017.312996][T20562] blk_mq_alloc_queue+0x172/0x280 [ 1017.318542][T20562] __blk_mq_alloc_disk+0x29/0x120 [ 1017.324088][T20562] nbd_dev_add+0x492/0xbb0 [ 1017.329044][T20562] nbd_init+0x181/0x320 [ 1017.333722][T20562] do_one_initcall+0x120/0x6e0 [ 1017.339027][T20562] kernel_init_freeable+0x5c2/0x910 [ 1017.344765][T20562] kernel_init+0x1c/0x2b0 [ 1017.349623][T20562] ret_from_fork+0x56d/0x730 [ 1017.354739][T20562] ret_from_fork_asm+0x1a/0x30 [ 1017.360033][T20562] [ 1017.360033][T20562] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1017.367248][T20562] fs_reclaim_acquire+0x102/0x150 [ 1017.372801][T20562] kmem_cache_alloc_noprof+0x53/0x3b0 [ 1017.378705][T20562] __kernfs_iattrs+0x124/0x3e0 [ 1017.383995][T20562] __kernfs_setattr+0x4d/0x3c0 [ 1017.389285][T20562] kernfs_iop_setattr+0xda/0x120 [ 1017.394765][T20562] notify_change+0x6a6/0x1230 [ 1017.399972][T20562] do_truncate+0x1d7/0x230 [ 1017.404915][T20562] path_openat+0x2678/0x2cb0 [ 1017.410022][T20562] do_filp_open+0x20b/0x470 [ 1017.415040][T20562] do_sys_openat2+0x11b/0x1d0 [ 1017.420242][T20562] __x64_sys_openat+0x174/0x210 [ 1017.425602][T20562] do_syscall_64+0xcd/0x4c0 [ 1017.430629][T20562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.437041][T20562] [ 1017.437041][T20562] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 1017.445549][T20562] __lock_acquire+0x12a6/0x1ce0 [ 1017.450927][T20562] lock_acquire+0x179/0x350 [ 1017.455949][T20562] down_write+0x92/0x200 [ 1017.460706][T20562] kernfs_unlink_sibling+0xa3/0x320 [ 1017.466428][T20562] __kernfs_remove+0x2c0/0x8a0 [ 1017.471710][T20562] kernfs_remove_by_name_ns+0x68/0x110 [ 1017.477699][T20562] cgroup_addrm_files+0x82c/0xc20 [ 1017.483242][T20562] css_clear_dir+0x1da/0x290 [ 1017.488347][T20562] cgroup_destroy_locked+0x3a4/0x710 [ 1017.494150][T20562] cgroup_rmdir+0x35/0x2b0 [ 1017.499085][T20562] kernfs_iop_rmdir+0x106/0x170 [ 1017.504456][T20562] vfs_rmdir+0x203/0x690 [ 1017.509210][T20562] do_rmdir+0x2e8/0x3c0 [ 1017.513878][T20562] __x64_sys_rmdir+0xc5/0x110 [ 1017.519078][T20562] do_syscall_64+0xcd/0x4c0 [ 1017.524118][T20562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.530537][T20562] [ 1017.530537][T20562] other info that might help us debug this: [ 1017.530537][T20562] [ 1017.540765][T20562] Chain exists of: [ 1017.540765][T20562] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 1017.540765][T20562] [ 1017.555193][T20562] Possible unsafe locking scenario: [ 1017.555193][T20562] [ 1017.562631][T20562] CPU0 CPU1 [ 1017.567982][T20562] ---- ---- [ 1017.573331][T20562] lock(&root->kernfs_rwsem); [ 1017.578091][T20562] lock(cpuhp_state_mutex); [ 1017.585200][T20562] lock(&root->kernfs_rwsem); [ 1017.592560][T20562] lock(&root->kernfs_iattr_rwsem); [ 1017.597832][T20562] [ 1017.597832][T20562] *** DEADLOCK *** [ 1017.597832][T20562] [ 1017.605959][T20562] 5 locks held by syz.1.2932/20562: [ 1017.611149][T20562] #0: ffff888034472428 (sb_writers#9){.+.+}-{0:0}, at: do_rmdir+0x1e2/0x3c0 [ 1017.619951][T20562] #1: ffff88805e49a988 (&type->i_mutex_dir_key#6/1){+.+.}-{4:4}, at: do_rmdir+0x233/0x3c0 [ 1017.629973][T20562] #2: ffff888059085568 (&type->i_mutex_dir_key#6){++++}-{4:4}, at: vfs_rmdir+0xe9/0x690 [ 1017.639806][T20562] #3: ffffffff8e61bec8 (cgroup_mutex){+.+.}-{4:4}, at: cgroup_kn_lock_live+0x116/0x520 [ 1017.649563][T20562] #4: ffff88801caf0188 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_drain+0x29c/0x570 [ 1017.659321][T20562] [ 1017.659321][T20562] stack backtrace: [ 1017.665198][T20562] CPU: 1 UID: 0 PID: 20562 Comm: syz.1.2932 Not tainted syzkaller #0 PREEMPT(full) [ 1017.665224][T20562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1017.665237][T20562] Call Trace: [ 1017.665245][T20562] [ 1017.665255][T20562] dump_stack_lvl+0x116/0x1f0 [ 1017.665289][T20562] print_circular_bug+0x275/0x350 [ 1017.665317][T20562] check_noncircular+0x14c/0x170 [ 1017.665345][T20562] __lock_acquire+0x12a6/0x1ce0 [ 1017.665377][T20562] lock_acquire+0x179/0x350 [ 1017.665402][T20562] ? kernfs_unlink_sibling+0xa3/0x320 [ 1017.665430][T20562] ? __pfx___might_resched+0x10/0x10 [ 1017.665454][T20562] down_write+0x92/0x200 [ 1017.665473][T20562] ? kernfs_unlink_sibling+0xa3/0x320 [ 1017.665500][T20562] ? __pfx_down_write+0x10/0x10 [ 1017.665522][T20562] kernfs_unlink_sibling+0xa3/0x320 [ 1017.665549][T20562] __kernfs_remove+0x2c0/0x8a0 [ 1017.665576][T20562] ? kernfs_find_ns+0x277/0x540 [ 1017.665603][T20562] kernfs_remove_by_name_ns+0x68/0x110 [ 1017.665635][T20562] cgroup_addrm_files+0x82c/0xc20 [ 1017.665673][T20562] ? __pfx_css_killed_ref_fn+0x10/0x10 [ 1017.665700][T20562] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 1017.665740][T20562] ? mark_held_locks+0x49/0x80 [ 1017.665767][T20562] css_clear_dir+0x1da/0x290 [ 1017.665789][T20562] cgroup_destroy_locked+0x3a4/0x710 [ 1017.665822][T20562] cgroup_rmdir+0x35/0x2b0 [ 1017.665851][T20562] kernfs_iop_rmdir+0x106/0x170 [ 1017.665878][T20562] ? security_inode_rmdir+0xe2/0x290 [ 1017.665905][T20562] vfs_rmdir+0x203/0x690 [ 1017.665924][T20562] do_rmdir+0x2e8/0x3c0 [ 1017.665949][T20562] ? __pfx_do_rmdir+0x10/0x10 [ 1017.665977][T20562] ? getname_flags.part.0+0x1c5/0x550 [ 1017.666009][T20562] __x64_sys_rmdir+0xc5/0x110 [ 1017.666033][T20562] do_syscall_64+0xcd/0x4c0 [ 1017.666065][T20562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.666087][T20562] RIP: 0033:0x7fef7b78eec9 [ 1017.666103][T20562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1017.666123][T20562] RSP: 002b:00007fef7c6d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 1017.666143][T20562] RAX: ffffffffffffffda RBX: 00007fef7b9e6180 RCX: 00007fef7b78eec9 [ 1017.666158][T20562] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 1017.666171][T20562] RBP: 00007fef7b811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1017.666184][T20562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1017.666197][T20562] R13: 00007fef7b9e6218 R14: 00007fef7b9e6180 R15: 00007ffc84e89908 [ 1017.666217][T20562] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1018.036496][T20559] svc: failed to register nfsdv3 RPC service (errno 111). [ 1018.049419][T20559] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1018.407539][T20558] base_sock_release(ffff888065352a00) sk=ffff88806c6e9000 [ 1019.124781][T14894] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.282355][T14894] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.487749][T14894] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.575485][T14894] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.777491][T14894] bridge_slave_1: left allmulticast mode [ 1019.791181][T14894] bridge_slave_1: left promiscuous mode [ 1019.796926][T14894] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.841266][T14894] bridge_slave_0: left allmulticast mode [ 1019.846947][T14894] bridge_slave_0: left promiscuous mode [ 1019.865475][T14894] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.027434][T14894] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1020.041711][T14894] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1020.054222][T14894] bond0 (unregistering): Released all slaves [ 1020.291349][T14894] hsr_slave_0: left promiscuous mode [ 1020.297073][T14894] hsr_slave_1: left promiscuous mode [ 1020.310829][T14894] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1020.318465][T14894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1020.326265][T14894] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1020.338336][T14894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1020.349948][T14894] veth0_macvtap: left promiscuous mode [ 1020.355537][T14894] veth1_vlan: left promiscuous mode [ 1020.362194][T14894] veth0_vlan: left promiscuous mode [ 1020.494266][T14894] team0 (unregistering): Port device team_slave_1 removed [ 1020.505910][T14894] team0 (unregistering): Port device team_slave_0 removed [ 1020.800423][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.840949][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.912834][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.963381][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.061456][ T13] bridge_slave_1: left allmulticast mode [ 1021.067882][ T13] bridge_slave_1: left promiscuous mode [ 1021.073662][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.082287][ T13] bridge_slave_0: left allmulticast mode [ 1021.088964][ T13] bridge_slave_0: left promiscuous mode [ 1021.096826][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.193575][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1021.207581][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1021.217452][ T13] bond0 (unregistering): Released all slaves [ 1021.436226][ T13] hsr_slave_1: left promiscuous mode [ 1021.442100][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1021.449491][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1021.460273][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1021.467999][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1021.478498][ T13] veth1_macvtap: left promiscuous mode [ 1021.484151][ T13] veth0_macvtap: left promiscuous mode [ 1021.489731][ T13] veth1_vlan: left promiscuous mode [ 1021.495210][ T13] veth0_vlan: left promiscuous mode [ 1021.625904][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1021.640690][ T13] team0 (unregistering): Port device team_slave_0 removed