last executing test programs: 8.91348128s ago: executing program 3 (id=1841): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) mmap$auto(0x13, 0x810004, 0xffb, 0x8000000008012, 0xffffffffffffffff, 0x6) mprotect$auto(0x1000, 0x401000, 0x4) mmap$auto(0x0, 0x202000a, 0x5, 0xfffffffffffffffb, 0xfffffffffffffffa, 0x2) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) shmctl$auto_SHM_STAT(0x3, 0xd, &(0x7f0000000140)={{0x1, 0xee01, 0xffffffffffffffff, 0x1, 0x8, 0x5, 0x7bee}, 0x5, 0x18, 0x7b, 0x1, @inferred=0xffffffffffffffff, @raw=0xcc2, 0x5, 0x0, 0x0, &(0x7f0000000080)}) mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0xffffffffffffffff, 0x400007, 0x1000000df, 0xb92, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}, 0x1, 0x0, 0x0, 0x4004800}, 0x40000) unshare$auto(0x40000080) socket(0x15, 0x5, 0x0) rt_sigsuspend$auto(0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x40, &(0x7f00000001c0)={0x1200, 0x5, 0x10000, 0x9, 0x5b77b906, 0x0, 0xffffffffffffffff, [0xcfa, 0xe5d, 0x5], {0x8001, 0x38, 0x9, 0x4, 0x4, 0x3, 0x3ff, 0x3, 0xffff}, {0x20000000, 0x9, 0x7, 0x2, 0x2, 0xffff13a7, 0x0, 0x449e, 0x1}}) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0xf, 0x0, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x2, 0xc, 0x5a}) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x800}, 0x5, 0x0, 0x1, 0x2}, 0x46}, 0x4, 0x100) 7.458918318s ago: executing program 1 (id=1844): writev$auto(0xffffffffffffffff, 0x0, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x10001) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000240)={0x0, 0x7}, 0x2) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000200)='nfsd\x00', 0xf, 0x0) chdir$auto(0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) setrlimit$auto(0x9, 0x0) io_setup$auto(0x401, 0x0) 6.912590292s ago: executing program 1 (id=1845): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/rose7/statistics/tx_fifo_errors\x00', 0x10b142, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x1ff, 0xa, 0x1000000000000eb1, 0xfffffffffffffffa, 0x8000) r1 = open(0x0, 0x0, 0x57e) fcntl$auto_F_ADD_SEALS(r1, 0x410, 0x0) rename$auto(&(0x7f0000000040)='./cgroup\x00', 0x0) r2 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/netdevsim/netdevsim1/ports/1/pp_hold\x00', 0x2, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) write$auto(r2, 0x0, 0xff) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x3a) socket(0x18, 0x5, 0x1) io_uring_register$auto(0x2, 0x2, 0x0, 0x86) sendmsg$auto_IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f4010000", @ANYRES16=0x0, @ANYBLOB], 0x1f4}, 0x1, 0x0, 0x0, 0x90}, 0x0) mmap$auto(0x2, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8002) r4 = openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000140), 0x40200, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0)={0x553c81, 0x10, 0x13}, 0x18) ioctl$auto_RNDADDENTROPY(r4, 0x40085203, 0x0) r5 = socket(0xa, 0x80802, 0x0) setsockopt$auto(r5, 0x11, 0x68, 0x0, 0x8) getsockopt$auto_SO_TYPE(r0, 0x0, 0x3, &(0x7f0000000000)='\x00', &(0x7f0000000080)=0x9e) 6.850057136s ago: executing program 2 (id=1846): r0 = socket(0x2, 0x801, 0x6) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8672a190df0bde8f}, 0xc, &(0x7f0000000140)={&(0x7f0000000180)={0x30, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x9}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x2}, @ETHTOOL_A_LINKINFO_HEADER={0x4}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x35}]}, 0x30}, 0x1, 0x0, 0x0, 0x488d0}, 0x20040000) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x2802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x0, 0x1, 0x70bd29, 0x25dfdbf9, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x20, 0x1, 0x0, 0x1, [@typed={0x8, 0xf, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x14, 0xf, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000fb3d89cb809172a332000300800040008800"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000804}, 0x40000) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0x800}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0xa788}, 0x7, 0x8) connect$auto(0x3, &(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @my=0x1}, 0x51) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto(r3, 0x40044d0e, 0x8) open(0x0, 0x163340, 0x16e) socket(0x2, 0x80802, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) 6.197859735s ago: executing program 1 (id=1847): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) mmap$auto(0x13, 0x810004, 0xffb, 0x8000000008012, 0xffffffffffffffff, 0x6) mprotect$auto(0x1000, 0x401000, 0x4) mmap$auto(0x0, 0x202000a, 0x5, 0xfffffffffffffffb, 0xfffffffffffffffa, 0x2) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) shmctl$auto_SHM_STAT(0x3, 0xd, &(0x7f0000000140)={{0x1, 0xee01, 0xffffffffffffffff, 0x1, 0x8, 0x5, 0x7bee}, 0x5, 0x18, 0x7b, 0x1, @inferred=0xffffffffffffffff, @raw=0xcc2, 0x5, 0x0, 0x0, &(0x7f0000000080)}) mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0xffffffffffffffff, 0x400007, 0x1000000df, 0xb92, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}, 0x1, 0x0, 0x0, 0x4004800}, 0x40000) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x15, 0x5, 0x0) rt_sigsuspend$auto(0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x40, &(0x7f00000001c0)={0x1200, 0x5, 0x10000, 0x9, 0x5b77b906, 0x0, 0xffffffffffffffff, [0xcfa, 0xe5d, 0x5], {0x8001, 0x38, 0x9, 0x4, 0x4, 0x3, 0x3ff, 0x3, 0xffff}, {0x20000000, 0x9, 0x7, 0x2, 0x2, 0xffff13a7, 0x0, 0x449e, 0x1}}) r2 = socket(0x11, 0x80003, 0x300) capset$auto(0x0, &(0x7f0000000000)={0x2, 0xc, 0x5a}) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x800}, 0x5, 0x0, 0x1, 0x2}, 0x46}, 0x4, 0x100) 6.053264772s ago: executing program 2 (id=1849): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) mmap$auto(0x13, 0x810004, 0xffb, 0x8000000008012, 0xffffffffffffffff, 0x6) mprotect$auto(0x1000, 0x401000, 0x4) mmap$auto(0x0, 0x202000a, 0x5, 0xfffffffffffffffb, 0xfffffffffffffffa, 0x2) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) shmctl$auto_SHM_STAT(0x3, 0xd, &(0x7f0000000140)={{0x1, 0xee01, 0xffffffffffffffff, 0x1, 0x8, 0x5, 0x7bee}, 0x5, 0x18, 0x7b, 0x1, @inferred=0xffffffffffffffff, @raw=0xcc2, 0x5, 0x0, 0x0, &(0x7f0000000080)}) mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0xffffffffffffffff, 0x400007, 0x1000000df, 0xb92, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}, 0x1, 0x0, 0x0, 0x4004800}, 0x40000) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x15, 0x5, 0x0) rt_sigsuspend$auto(0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x40, &(0x7f00000001c0)={0x1200, 0x5, 0x10000, 0x9, 0x5b77b906, 0x0, 0xffffffffffffffff, [0xcfa, 0xe5d, 0x5], {0x8001, 0x38, 0x9, 0x4, 0x4, 0x3, 0x3ff, 0x3, 0xffff}, {0x20000000, 0x9, 0x7, 0x2, 0x2, 0xffff13a7, 0x0, 0x449e, 0x1}}) r2 = socket(0x11, 0x80003, 0x300) capset$auto(0x0, &(0x7f0000000000)={0x2, 0xc, 0x5a}) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x800}, 0x5, 0x0, 0x1, 0x2}, 0x46}, 0x4, 0x100) 5.823091153s ago: executing program 0 (id=1850): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xfffb, @remote}, 0x6a) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0xfffffffffffffffd, 0x810004, 0xe, 0x8000000008011, r0, 0x4) r1 = syz_open_procfs$namespace(0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) bind$auto(r1, 0x0, 0x6a) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x3, 0x403ec, 0xde, 0x958a6fc, 0xffffffffffffffff, 0x0) openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/setgroups\x00', 0x28001, 0x0) close_range$auto(0x2, 0x8, 0x0) clock_gettime$auto(0x10, 0x0) r2 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) ioctl$auto_VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x5) ioctl$auto(0xffffffffffffffff, 0x4008af13, r2) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x4000000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82902, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x2, 0x3, 0xa) getsockopt$auto(r3, 0x0, 0x30, 0x0, &(0x7f0000000040)=0xdbb) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x54) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) keyctl$auto(0x6, 0xfffffffffffffffd, 0xee01, 0x0, 0xfff) mremap$auto(0x0, 0xbfffffffffffffff, 0x401, 0x0, 0x4) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) 5.799669955s ago: executing program 3 (id=1851): mmap$auto(0x2000000000, 0x2020009, 0x8, 0xeb1, 0xffffffffffffffff, 0x28974783) write$auto_nsim_psample_enable_fops_psample(0xffffffffffffffff, &(0x7f00000005c0), 0x0) socket(0x10, 0x2, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) io_uring_setup$auto(0x59, 0x0) getpid() unshare$auto(0x40000080) listen$auto(0x3, 0x81) madvise$auto(0x0, 0x7ff, 0x15) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00'}) madvise$auto(0x3f, 0x200007, 0x19) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) unshare$auto(0x20000080) syz_clone3(0x0, 0x0) r0 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r0, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x00\x00\xf4\x00\x00\x00\x00\xf4\x00\x00\x00\x00\x00\x00', 0x100000002, 0x100000001) 5.524097059s ago: executing program 0 (id=1852): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2a, 0x2, 0x1) read$auto(0xffffffffffffffff, 0x0, 0x4) socket(0x11, 0x80003, 0x300) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x44840, 0x0) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20500, 0x0) r1 = open(&(0x7f0000000100)='.\x00', 0x591042, 0x408) write$auto(r1, 0x0, 0xfffffdf1) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0xff, 0x0, 0x80000000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/mac80211_hwsim/hwsim13\x00', 0x82000, 0x0) linkat$auto(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0xe) r2 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x800, 0x0) ioctl$auto_FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000100)=0x80) mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x7, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) mprotect$auto(0x2, 0x8000000000000001, 0x8) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/rpc/auth.rpcsec.context/channel\x00', 0xc8841, 0x0) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x3, 0xfffffffe}, 0x52) 4.963545641s ago: executing program 0 (id=1853): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7073000000001400000008000300", @ANYRES32=r4], 0x24}, 0x1, 0x1400, 0x0, 0xaee2e45ddcc9e3a5}, 0x20040080) sendmsg$auto_NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000a40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f0000000300)={0x6f8, r2, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_BEACON_HEAD={0x6d9, 0xe, "d746c94ab0d671b83ca357eec2b26a0e88589f1569f3c3ff0949849c0c37065ae7f9b1f33344a5e784848f21aad6c852580c08b1bca21715919b3d076ee938881e3227bb4019353270e7bc6ae36dade74847cb861febce3b997323b2b5d88a3d4db2c6e56eda5bc99bd9afb226713303ef6a1ca0e179e2f1a87754959497d31ff38e8471658c08f82f8fca8ba0e4567371cb1b31022d7f11c7797b0fe3493a7d276b92fcdf0db7ad08e24ed5ef6c63b615d77a9d258c1697df29efb5742fc2152bebe5485b024ca7e3595b596d43a357a964e03d0b58b8a31ba81e07c7db29026f9af3510b0dd2938befe56a709098452fdd45f551b3df1f503afcbb4b08366d3710d60254bc306d92e38e2ac8e8bbb84e1502c8de673986ddd5e2d2bf00a4c1435540f97496431eef124df35c30ed8d2578b508c2e4ac8f44673b67df02244433cc8c0999948ae07cbb69a4ea163c74cc9529a16386c610e73407fdd3b5c5e7d0d3debb656f4c1af666e960890e998d26b3e62088106212c73936f63df13a03e84e810f2a3a734854e49b43f3d147b983c1e9380bd54eabe5e295f5cf444ec2a3958d558b52072af65ff98437f627b73cb31dcfd9f0d0c4a41be69c675ff2c99405a9818653a6d35fcb5069b9b59ceb6a888f756a320702dfa657907fc3836091049773334d1ab90db0b65bee6646e53e35b7ed894168380d4091813a0c2307c865e1194a84e8989f797d70eaa6a2f398c490b8213e144159c09e984a65dcb94cdf269a158b91b0d413aa62c5df3e0cda8c1ad2be1462339c0f28bd5fcefce5875b16d96e142b4f1bde5472a5a248eb047b974cc15c2b790722dc9132224814bb95e0d977d53f02b33e22c9b03dc44d3f70e848af286e55637a02f6978f688087d8a619652ef8e797565be0cd06449210f1003db1415004e391ec0a2c2c5a65ebaa7d2a514108be92a24c78637c2b97096e1cac405a8ea09e1912ae5dc133756903988ba935ba6c9e54ce0c0e9a63e133b0a58afb68444f4ab361e4018cd58f7aeefaf501722a3792aa32f875d636f52cad369aa0b25ee13389bf9aa529e36d51d03296fb40ef701b5c1580ee9ec238de420206a6601bc7c28e2ff2a0adbbcddf7d0cebbb6de6f89bb41a0cdbeebc861e2d1c32f2cd2eac58f31a723eeee1aea7cddd25df90a7ed22827a984ef7132bc2cd50688c4e347c8a1799a07adc0f7ffbdb7eeb08f2c9be5d964da57aeedb962abe5ebe40b15c1dd89611e1c954ff08a37f6a5ddef2465d68b06d5e26841c8df83ce069fe11bd3c4ed3be3be2f24b775f9cfa9ad23c21ccc04c35d62069a126fb144ce1b01752eff3999f1f2e2864fc6ae72a811c8d748407887a9bbcf64e5a284f23219c0c4781a6d44a0cfd489e4c30b4bfd0c46eb09933e6f754b649455851632706ca4f1e1019289f013cc398da8ab902c2eca7dd54412c0df690cce020216e9f0c87cb05948c01f97ce0e067563d88c4885a4d347a9312f8e8a83c9926556ff3761ec26fc69ef3459acf5e4e4e8bb5a04f7f0c873b5c0f4e09d885d41fe45ebb676747c9b52eb303b5a471ffdc90a4e69aec75e6d3f5088884461ccfa8438b939f2a1d34227ffb2e970a57a7287650587349d161313082f9d6c00860da94be5228714125e36d906ecd2d236aa4e80f154f7d2a60d81aa24563dd2bdd4ff3f7e8bcf7fdb629ee9dde68f8687d5cbcdbeec4b7f01a062e15634f5df276a46c532fd9a98be3d7fe097e112b2576d632ce69884f94f3dfd701b4181242dbaf3d31f171111473942a1ff0238111af3103cf8e7947d20eb0b366a0027e685ba249a766431c7a487b6e54da6ab8c3414a23bafa49414138a3e85a0e071744c19a07e312bff19e9c7f2ef4f7fa747dcc13145064f4e849fa0270d1ebba7006547bfbc1504101ddeebac41ca9f432bcf225f016f4b6a757b8e4124334f15367aade1e93aa8dfb073da96225fa293102eaaf2650774f0c1115cfd79a080985c6ddc65592824b41787eba244bf537c5a2b607a772e431b8192f4865e729bcc5414e2d713977a29db1a6ebf0b342c03fedabd82a71e3f1aec1bc14bf3b425856d4ffa71a1a9a2f75140df29c40f72da45dfb1924d6b00ecbf0e94b886c68a59548b26f131337689a0cd141b2963c970a5eb93b4c38cbc3ae33e033e160f6118d2238aa454fb03f9099c2014a5286ce2be264c589732882d191ff5004e8ef9761071e699a47db965589c2de7733670c50b690f14fc7b3d72ea237d0652649ad43bad61e773c562f430659142a10d2287d09e0de34fe833de9de3230e6d21239c013dc149490227b82adeb45e60bc015d2bbbde866e21c05da2f82d0bc5b0da265cb28401e19c695117cd7b4c31c34d768d414697cf6e20258c9b3dbc97354cdbc99c19a6663d94b7982ce5dfb689dce2ec41dded158d3631884859cf3793889dd0f95ef64be110d0f"}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x81}]}, 0x6f8}}, 0x40080) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r6, &(0x7f0000000440)="1100000000000000010000000000010000", 0x11) getsockopt$auto_SO_DEBUG(r6, 0x1, 0x1, &(0x7f0000000100)='},:(.!/\x00', &(0x7f00000001c0)) r7 = getpid() r8 = setfsuid$auto(0xee01) setresuid$auto(0x0, r8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000001f00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001f40)={0x1374, r2, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_CQM={0x29b, 0x5e, 0x0, 0x1, [@nested={0xfc, 0x137, 0x0, 0x1, [@typed={0x8, 0xb7, 0x0, 0x0, @ipv4=@empty}, @typed={0xe8, 0x93, 0x0, 0x0, @binary="c7fb6d2aea8a9abb530998d2e3db97ab33b3353c0d213d2cca202662c077b3282e9cd1b82fbdb14d282e7c14d4043e729e848f8d3ff951a016aa52f04eeaf8c7b655a4d5627518fe03f6bcf0eca939a70903115252bec95076f0dba6cf2a6e16a95472472e11fd7a12f7cb23151afc14982e5639e4ba3d51b8e8be0d820c10695b7ebd6504b4ba2565803df940e3514034daca36d4e3aa57863346f28678dbd14238af8e9da77c1b68240f9b18cb785c8d655fb1eaf5ec27b58518d83a3832e6d33a1a4fc4efe0b6ea4adaf26f4e80deb0a95d67e585ecbbe3a3ab28a0c287c350524ba2"}, @typed={0x8, 0xa2, 0x0, 0x0, @pid=r7}]}, @generic="0c7bca135190d9ab29869a42a0b8325aa184c13dcbfd025d00ce8ed964bdba50d3a0f412d7599356c5cc79a20da377aeb1c5b355822032de3d90830dafdf0c7f4785afd7a4ddbc4f102acc38e4e0478378f772678789afbfb2b15a1981a23266e0a0305af035d9a33b727ce5cf6b552ee7c1eda2698bc7bebb3fdc0e1e1e25b3bbd518f759148dc552077bbed05c7f9269886acddc5aec0cdf01bca8b73b7e39383e06b2ffd7172d5dd4f6cc016638e6d69f27b839076e", @typed={0x5, 0xd0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x146, 0x0, 0x1, [@typed={0x8, 0xcb, 0x0, 0x0, @ipv4=@multicast2}]}, @generic="17c3f700f16ac22990636f47f0656f6b6936fc8a1a311cc455d80867b107ee05e7f9cdd618c2e567d7ecf79d31299e454638c353025f02993e34f49f359cae1d1331b7825f8a74589ed21b6bf747a9252fed8098c8060701628dea85a58d8050d1b0db4714d70e61993df7505679e7b251b63920a95758d755aebd9b840fae0921c213776a4b0aac279a66c35342d4d69c2e8d774dec61452cacf3c1091e8e81c0ffed25ea42cf900834b407ddd40572209af6d976d80aef5f2d28f64148ea7d16990f5b5bdddd37", @typed={0x8, 0x81, 0x0, 0x0, @uid=r8}, @generic]}, @NL80211_ATTR_CSA_IES={0x1084, 0xb9, 0x0, 0x1, [@nested={0x1000, 0x1f, 0x0, 0x1, [@generic, @nested={0x4, 0x149}, @generic="a938244aa4fe98c96c15b86b030a9784705a3e4d1e2cdebcf3f7d5130f3b335af9d77f8696223b94af78a7a143516a5e7c66abc2ca3874aa58112f4d7bd1c084b1f4b63d3f676b517300e727849fe17095e4ca018e7d4ee32d79c323b46779f4960ef0bad52dbd55bc043b4f4741eca24d1c886f088ebb327730e66870c7cdf063a3072443a8bbd6f74362f9f5b9e1efdc321f31467924dca8a7d9f75b389d20f2d18af1124943254db04fcdcac58bcfb3068315968ce6d9357bd572537a80711172223ca3d1a2ff21684dd4f4c37fc65f88054471ae621ce11775f02b4852e718f6e86e861872fae6fb526d3db6583c70a6e6412c088caf6a481a5fc9681b81e71f105c3401edba52235d8516cc5d16ea12ff402e8702cf63686cf3b4f65620fe6a21e5364e0326816ecff081b331add741303f49c140cbd978f477b8c6616ab91e09b3523723205172be148069daaeba6e7fc0f3e3e6e5979b016e6d4640175a39835c42e47f6b10d6b9bd2f4424966fe3d7746fb20098d092104dc90989700135b53f663609336411c8408738e98e355a06f295d35d896a72be83cbb5e84bc5fbe584afb1df1faba5483a500a9386521826df97736e6fbfd12777f09af9de80831d0323427e18406b2db3e051ab91d779665e69d2c676e79d6121384a45be197d59dbfbdb5c6edac52c4dac3e882a79edcb4e8793daadb7c0097a9057fd0efa5011a9dd7277eae815e551aaefca7afe74f4951f8789fe4d0d5bdda26cbd42e578ddb9cfa44086b8d975864031bdd1fb72ba87c819891e26721d197aee24d7484eec7f42a6035649790a535a88d0514aaaa58dc9f1568bb02f315876be7e84e7dfb824be8cac52fb4f06057804cab0719887a18920a17263e6e9c9f9639f1d6eee6a6d97ab46af107733539f336806d6acf77f78dae06245945e441248bd9b82eb97455a0025d189529a4322ad267d308ffc7401fe940d996ec8fda1c9fe2a9442d3fb0c55c82a74fa216eb8dc3d46fa09f22691de74f64826d49d7bae410e35df9eaa0725a9beb9499657da1a3921f138afa05420b70415b3bc8885495f7afc04dede98cbb9285e068ed3401b27b0147e66a835c44cad65bd8738cc2b60dcec20b19867c187aa679ae14fa021321ccaeabd4f6832c0229d2dc9a1ce9218d5c8e4e040a03b14701978df5bcfd22b957d2e901888ce556d9e63d8d4bc7609b8705b06d98fb7aba8ae0eb44825d4d46896e61fe7abc15c10bb6743bafcce24c91a937ebef08d4723e033d66a7c2b10775f9e2eb42fd776202805efec1a019e2124e05f49b79bfb32d503a8deadecf7780a01ac8b2840e5bd6c8bc0078962c480b7b3ec3f58816aa5e3532cf841c6606d0d6bb643ad0ded99bd8448ea78414d3e7bb049585c9b12d80811675cd6653c76693cd2337e64ae133178cc620dc365fe1cd6bd5e51333f63aa5eee0c9219d0b19322e37651063b78f9857d7e6e39faa833328189eab4dd8c199371688a77bd3855537f1b6a2d376e48c8bb1a99e5df4c9a24c5b82ac5a19be8ca7a76e057bd91c3933268d47be9cb3123f370b3cde125e68fd86e8bffb93e8383b583c386f0072c65f1266018b5f9b509eb57b4e217bae1749fef8beb4714ea30ed83ecb9a01f3bd41a47d77aab6e95fe4c5059a10358c64b1e705a322dc09933594a74eb52e8cbc96e293b0d26ab61075c1f9c2c71de57c3266b18d593e10c7390390b541336193e54755ffaf3cd8bcc1c265be1e4ce5c78d94deff4bcfe11f0d8e71de04724ea732fc1333dfe586c665579a49301be6200812c33a3363866cbbbee0f3341958e194bbe5ce640d9d2725b90d6914365f3671ef0cb1a31af731af3365bab7ff4b1265913685fab26b3ed30ec17cb86f317f3fd864013ecf1b7de1f9634d306d08449c41ad9e2c9b64ea55200c03fd2b996a172ca348da347d1bff7338bda7df6a34c370d32d7ad1efc0abc81ae2462dc28defd58e7e7c31c9397598b78e7ffe1a59fc308224c0ee542b4d1bc16048e68041c15bb82ebeac5e775591c23843681875664a63fb09fcb24710715c07ea3c343d2a3fde0e7b6d5ba164f82f4719508c577aad12d74e64e48502e8c082f1d2dc998fc4503a71dd400623798516c59436c8a2d08256614e40400dcf3e8bb026c044abde75c2e6fd35b154503669b0b0bc00e8caa6c1960a3c427d24551d3b4f8487a58a340c68c242cff6b9d5636ff51d1aaaacbfdb8b4ee33bb056c77a8e9fba4fa7eb6ae7a38b3371b4907515342ef2fea277bebef271e6984402c5a9ad123a742a7164e184674153db2e51990f066db7a18c4d16f059ccc4f3e656d8683b12825d522c20f64c6b16d7346f96b5db72fa7f968861f560be54fb2f270583399066b58eecdc3e7f6b0bd2ab114d39652fb3685e9366bb61ce9dae50ce904aa1c105fc4efa6f8ee224fd9f5cb9cb186d02835f8031696e06bdea56d04650b2b767c656635bd7489d17e36d31a46a84f5902e4dfd3bfaf15b2d34db2913954c51f8e8afb873b5326ae185e4b51de3ba4cd367374f8f483dad1dab835e22fd77a63cfe679a580fffa6d165460de996409cd379df0b89e349418f14925c67f3b045bcaabf899c0bab7c5df0ca2234dbfccd46ed4bcb2f3add2a5198d94ee9a5312a4f0b1165a1e21288de925734f609c30603cf20004fd8ef218e770cd88765cf6e4cdf96ae3de021e78b7c0859911ec7a34d782383d816d3518b3e25a8b117f5f75ab2d2e3a7c72100dea05e6e6c57729b8e3cb8531d0977a369b03bdeaf1e68c2cf46e01b976d9b388dce00e71e766fa4e68486df7c75316ea2d0b5ba3effe8eaeae258de0ebd9b374033831e6eb64edd0153f6d8982cb5acc8550f2ea1ed5105376189f61bfaa74fc272c69d61570d54d76f3303b37da1f4a201f740cd081fee8a0d97055e0ab5894e72a3a2a53c5df3fda79b8a61a674e42bd45e1690eb792d26533e3f45fbb08957a28e27633d87e71e6f7b31e00d59fbbc6bcff8bde4f2cd11f2cbb19e062802eba5e90fb8aa65ed3b27c5b83747fc4ecb5bc6ac423149579db949640cb8ab21f17520e24be76adc88e78c5689b92f15234bd2cfd41fbe81f2f5638e6b8b9216d33fde9acde536f8e5fd2a8192aa3907a922b324181979bd1fa8be1d34a160b8f734de8d67be14c68a60c32d3297c767fd81a467bf76a1823733e6a30072c19c858a152540f4db6bd56a78e13ff42e599c3b52aa23f1ffef33b6d2e3a4c69c10b89b00206beb4270c8afc01d6cd76c65dd70d3852dac08ce6ad3be3d73326fd6e2315ea10bd5652261d98dd86ecc017373a552e9f357f3b5ca541af751ba438cc78916027125e1195b74407a3a3756edce22dba1bcbf8f80dfbe17eef712683b71a110dddc6831d62449324b09cbb335be6f041c0d204092dba2b22dc836eecdb41159b04282ce1cc16cb4d34745fa3a4683c188d60c3d17773871286235358d05ed7e07abd0dcf57f4eb092b938a5e3bfac8ec84fff1f85f3f752dc73a52317a9f057b93ddb1f8d7c3fb8fdf623c2ff20041d55f3372c51a6211ef11d647f52e3f5db35768729ff0a5ab7cec9e3d45cdaab32c64d46ec262eb84e10a861050cf9fa99cf01a68d7e1bec19ffed1c69f5d0e469bf3ed4ae11b7b8cb678b080ffa33ee57e20b9d50ef52f1a32ab2a4a102b7a7fb8da0e4b04004caa79c9609f341a6f6b3c1904234f519b12ca31407670be1d6b7b7efc22b288ad56a6c64d187295084b04cf8ca1456f002c1cb6c99170a3d68e1ddd5fc56bbd3bb5e9055bf5501b85211a9485b244e3a772d23c43d1b1aa20227fa9bcbaff47fffabfadf07df41dcc4ab34c66de34b86f27a5125bc20e1e8c5e63bfcae9dfef83b005ea8e14b9199a8bc3762a5ec4aadc9bf9a147fe3fe63709c99ea7722bd36c5a3c5b69155b46440e6694d5e13a5492277a8ba4c79a29eb6c5bf5525092cf47dd9234a5bfaa79cb935f0bb843fc2134939d0bae168ae2fbd1ea1e88b539d26ca094e915dc5612abf71d17d53ab38727ad60dff42700d7bd8461758ad2f881349a4b3ad7431368cccdd3c827c5095aa8dbbd780b4639f8d09a0d7b3903168bbfca4d169a0281fa6e20723933232f3c85ae2d743d14764aa2419dde8f1988f2aae40350dcc7ff94b8c19eda33b1ec8856183bd5c5732c8a71b3c15013c10eea2556e8ede07c9e2a3b804a9107ce50b68c069d63225e59d74b86667f445fec2f9aed161638de7a292f9a3c2942e74b2383a861a1a5c270a009db4c967b338b7ed6fe777c0f33da80fcd20ef2cb893e419fb98fb1bb0cb9c4835d9cc657a759aedba4ad9ddefc97f900cce6180322a887bb500926bf04faa541b7175ffcb0a23c97625ad75ee09129e77664c8cf808dfdcefc80f72544cf5654805651899a54159916be3627ea553f3571dbc9e82ac29d2cb086e9771d11bd1bf931a837e927f4df89e544885b16d8a26c8a27e310e5d54c5ec81edd39608f410a145f84143faac93b27ddf53cb7b430216156b39e0eb70ddd8f2d9bedf27a13719bad2638b23833cfe29c75fa8d9cf6adcdc5736313aafcef882963513abb95b6ff46b4b956fd0d33cdea7b95f462224f56f22089ceed5cb6a4e0a7a98251b74c789befaea587d86cadbd96f5def5c1246fd248c01733f1a83abb4dc1ddfba27b7bcaadcad03d3c5f66802fb02a860e36a902a58c5fc8d580b70960ed1a2457638bb101e2112b37c03b973a781d9431052d42bdc05a7ed79003a1d69dc6c833b1140c3afa53fa580a58ea0c818b1465ba152c32c4efe73d13a262fdc11341ac90662d1a7af90a7bbee52ca82196dc517b04e9eb340a5c887c95945a123d11aa8c8a13dd1de35276e147defb334c0b865e21e99a379c6658291b1b04f51375399197ec29ac1f435258176771ae55be48e73ac2722f935a14f148ede3aef25d36032806c88aeed2744a06222be44ba9dc08f0336ae3f6dbac3aa70afff1df97a3bf2ee60ba87c78d15f0780a7a73d3a125627ac4ddb36fca014427330c3804fa88274839456aa3d89d9961b38ebeb187bec0d8399fd815d44d9c289de8887760d75b5ee6191bbf9b6eb97efe8da1649be938dcd994d0595d49961e05aaa18276f7e9ba876493f307d4f0d13d5b11dc39b41a3df95783cf3b4e7bc13f7c5450e7101806dd38b72ca8cebb0805e95bb140d93a86950c201b45b84e4a430a2c7d79369db00998d70a2bee354f374ec3c25870f555a936a1ab24ef6d86d22cb8aa08cddb0aa83ee4d357d165f42055a3548e6145b7f16eb494bf3d9418e84836c71b7798f71ab992472e4fa35d148f98794cac12b0c17ad5f3b303c69e45c8c748cb3f0677547a98ec017d3179c46b7a50fb80516e2841a608956618da36e992251acad034de400146acc82b1b76dbd5f76fc7648e8e6a700a72d1202f96c72a781cf7b33c13df0fa8e9011c43d1fd3eba9c66367d677307f18b05acc3f986a2cce96362f7c7c3ed4de018156f8d638a0da4cdf50e3688d7c31d9b80b5bd4b3acc03f160c50aa66b679521b67ebc3224b54451b0326f93354474b43f4106d79b913789944aa4c61ee3974961c1f1d4e37f9dcc1ab98c1f40c4833c1842b913bb56fd69c1b8f55e76473bca6e0e4efaddfef5ba109e26e72d68a481f795d04199be1d84c4275f90ff5c50ad905eab01a5fbdedbc637aa5b6f6acef7a8e90e4860a322155d40929faffd51d781a6518a997faebd4d902ade410e6ea32ef1c925a2cde"]}, @nested={0x7c, 0xa6, 0x0, 0x1, [@generic="5a285b156f94665f1b967a257c1172d57974f133342edeb71c8389c0ae9da533cba7c9371cc32efe6b8e69f44a737ff4a95178b8db73e7d6a53e24bde27d58b33b75f243f586bc5688495dc162e43913cb060a6fd34347c0cc28ad4c9aa54d2cc4fa5214a446744a9859c9fb0965b8b52c0a33e233dceb84"]}, @typed={0x4, 0x77}]}, @NL80211_ATTR_CNTDWN_OFFS_BEACON={0x29, 0xba, "8a9740d55adcaefe50b1797cb10892da185b79bad7aa34bb51f0dc0fdd6ee03d6375f9a0d8"}, @NL80211_ATTR_KEY_DATA={0x14, 0x7, "9238fbc3514aef7e368d78f2f326c8bd"}]}, 0x1374}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) setgroups$auto(0xe32, 0x0) write$auto(0x3, 0x0, 0xffd8) 4.427123522s ago: executing program 3 (id=1854): mmap$auto(0x0, 0x2020006, 0x775, 0xeba, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x2020007, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r1 = eventfd2$auto(0xf1, 0x1) (async) socket(0xa, 0x1, 0x84) (async) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/card0\x00', 0x80202, 0x0) ioctl$auto(r2, 0x9000643a, 0xc35) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0xf08e) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x12}}, 0x54) (async) openat$auto_mgts_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) (async) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/sysname\x00', 0xaa102, 0x0) write$auto(r3, &(0x7f0000000040)='.G+*@sys\x00', 0x2) (async) r4 = getsockopt$auto(r1, 0x88, 0x1, 0x0, &(0x7f0000000000)=0xb) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x86a, 0x100000000, 0x6) ioperm$auto(0x7, 0x71, 0x863) (async) iopl$auto(0x3) (async) r5 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000180), r4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'pim6reg\x00', 0x0}) sendmsg$auto_IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r6, @ANYRES16=r5, @ANYBLOB="020028bd7000fcdbdf253100000008000200", @ANYRESOCT=r5, @ANYBLOB="050018000700000084001e009976ee8502d86245e10f9e51527aa1a4420a602652bd226561aa51ede587570ce51f2e9d93b0cf969c84cb0a00f348fed86a5ee9a77830a3e59f551f131b2b060d5117d899a1fd2d14cdeda2410a128a11e9e5e6c4ebd6f898b5c535228bd98ad59958d16da6a6da6038b9d6082aef6b7650ec550809fdf1513625bb5dd9811d0600080003000000050028000600000008002c0004000000050012000100000005002900000000000500110001000000"], 0xd8}, 0x1, 0x0, 0x0, 0x4801}, 0x8800) ioperm$auto(0x5, 0x3432, 0x0) (async) madvise$auto(0xaf4, 0x0, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffdf, 0x2, 0x80002, 0xffff, 0x7, 0x9, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0xc50, 0x2, 0x83, 0x101, 0x17f, 0x2}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000004}}) r7 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, r7, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) (async) r8 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/pagemap\x00', 0x42000, 0x0) readv$auto(r8, &(0x7f0000000180)={0x0, 0x40}, 0xa) (async) ioctl$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 3.941510452s ago: executing program 0 (id=1855): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x5, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) fallocate$auto(0x3, 0x3, 0xe, 0x80000007) getsockopt$auto(r0, 0x84, 0x4, 0x0, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2, 0x80802, 0x0) r2 = socket(0x2b, 0x1, 0x0) io_uring_register$auto_IORING_UNREGISTER_IOWQ_AFF(r1, 0x12, &(0x7f00000002c0)="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"/266, 0x7) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) readv$auto(r3, &(0x7f0000000080)={0x0, 0x7fffffffefff}, 0xd) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/class/firmware/timeout\x00', 0x1a1942, 0x0) write$auto(r4, &(0x7f0000000180)='o\x00d1^\xa1/[\x00\x00\x00\x00\x00\xdc\xbf\x05V\x12\x00\x00\x00\x00\x00\x00\xf3\xa8)', 0x4) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/0000:00:02.0/internal_clients\x00', 0x2, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:09/sun\x00', 0xa0200, 0x0) pread64$auto(r5, 0x0, 0x6, 0x40008) close_range$auto(0x2, 0x8, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8200, 0x6, 0x0, 0xc, 0xe3, 0x4e, 0x3}, 0x6f4) prctl$auto(0x4e, 0x1, r6, 0x0, 0xffffffffffffffff) r7 = socket(0xa, 0x5, 0x0) setsockopt$auto(r7, 0x10000000084, 0x72, 0x0, 0x0) fcntl$auto_F_GETOWNER_UIDS(r7, 0x11, 0x8) sysfs$auto(0x2, 0x4d, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x8, 0x5, 0x5, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0x11) 3.506589691s ago: executing program 2 (id=1856): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/rose7/statistics/tx_fifo_errors\x00', 0x10b142, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x1ff, 0xa, 0x1000000000000eb1, 0xfffffffffffffffa, 0x8000) r1 = open(0x0, 0x0, 0x57e) fcntl$auto_F_ADD_SEALS(r1, 0x410, 0x0) rename$auto(&(0x7f0000000040)='./cgroup\x00', 0x0) r2 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/netdevsim/netdevsim1/ports/1/pp_hold\x00', 0x2, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) write$auto(r2, 0x0, 0xff) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x3a) socket(0x18, 0x5, 0x1) io_uring_register$auto(0x2, 0x2, 0x0, 0x86) sendmsg$auto_IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f4010000", @ANYRES16=0x0, @ANYBLOB], 0x1f4}, 0x1, 0x0, 0x0, 0x90}, 0x0) mmap$auto(0x2, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8002) r4 = openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000140), 0x40200, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0)={0x553c81, 0x10, 0x13}, 0x18) ioctl$auto_RNDADDENTROPY(r4, 0x40085203, 0x0) r5 = socket(0xa, 0x80802, 0x0) setsockopt$auto(r5, 0x11, 0x68, 0x0, 0x8) getsockopt$auto_SO_TYPE(r0, 0x0, 0x3, &(0x7f0000000000)='\x00', &(0x7f0000000080)=0x9e) 3.195741171s ago: executing program 2 (id=1857): syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) r0 = socket(0x2, 0x1, 0x106) setsockopt$auto(r0, 0x6, 0xd, 0x0, 0x4) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x8000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram10\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r1, 0x8000) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x0) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000140)={0x0, 0x55}, 0x6, 0x2, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/loop13/queue/max_sectors_kb\x00', 0x109206, 0x0) write$auto(0x3, 0x0, 0x3) ioctl$auto(0xffffffffffffffff, 0x401070cd, 0x5) 2.932638184s ago: executing program 0 (id=1858): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) r0 = openat$auto_gpiolib_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) pread64$auto(r0, 0x0, 0x1, 0x1ff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x4) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r2) sendmsg$auto_NL80211_CMD_SET_BSS(r2, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20000800) socket(0x10, 0x3, 0x6) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x12000, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x2c402, 0x0) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ttye9\x00', 0x102, 0x0) mknod$auto(0x0, 0xc9, 0xfffffffa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) ioctl$auto_SNDCTL_DSP_MAPINBUF(r1, 0x80105013, 0x0) write$auto(0x3, 0x0, 0x100082) sendfile$auto(r4, r3, 0x0, 0x10000) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r1, 0x0, 0x2404c8d4) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mremap$auto(0x1ff000, 0x100008, 0x843, 0x3, 0xfffff000) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) 2.401958124s ago: executing program 2 (id=1859): writev$auto(0xffffffffffffffff, 0x0, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r0, &(0x7f0000000240)={0x0, 0x7}, 0x2) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) chdir$auto(0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8040, 0x0) socket(0xa, 0x801, 0x84) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x8c00, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) setrlimit$auto(0x9, 0x0) io_setup$auto(0x401, 0x0) r2 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$auto(r2, 0x3b8b, r1) r3 = landlock_create_ruleset$auto(0x0, 0x18, 0x0) bpf$auto(0x0, &(0x7f00000003c0)=@task_fd_query={0x5, r3, 0x454f, 0x5f, 0x0, 0x0, r3, 0x80000001}, 0x6d4) 2.172336035s ago: executing program 2 (id=1860): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) mmap$auto(0x13, 0x810004, 0xffb, 0x8000000008012, 0xffffffffffffffff, 0x6) mprotect$auto(0x1000, 0x401000, 0x4) mmap$auto(0x0, 0x202000a, 0x5, 0xfffffffffffffffb, 0xfffffffffffffffa, 0x2) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) shmctl$auto_SHM_STAT(0x3, 0xd, &(0x7f0000000140)={{0x1, 0xee01, 0xffffffffffffffff, 0x1, 0x8, 0x5, 0x7bee}, 0x5, 0x18, 0x7b, 0x1, @inferred=0xffffffffffffffff, @raw=0xcc2, 0x5, 0x0, 0x0, &(0x7f0000000080)}) mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0xffffffffffffffff, 0x400007, 0x1000000df, 0xb92, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}, 0x1, 0x0, 0x0, 0x4004800}, 0x40000) unshare$auto(0x40000080) socket(0x15, 0x5, 0x0) rt_sigsuspend$auto(0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x40, &(0x7f00000001c0)={0x1200, 0x5, 0x10000, 0x9, 0x5b77b906, 0x0, 0xffffffffffffffff, [0xcfa, 0xe5d, 0x5], {0x8001, 0x38, 0x9, 0x4, 0x4, 0x3, 0x3ff, 0x3, 0xffff}, {0x20000000, 0x9, 0x7, 0x2, 0x2, 0xffff13a7, 0x0, 0x449e, 0x1}}) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0xf, 0x0, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x2, 0xc, 0x5a}) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x800}, 0x5, 0x0, 0x1, 0x2}, 0x46}, 0x4, 0x100) 1.935412636s ago: executing program 1 (id=1861): r0 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe\x00', 0x4e0400, 0x0) read$auto_tracing_pipe_fops_trace(r0, 0x0, 0x0) 1.75747448s ago: executing program 1 (id=1862): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x103e81, 0x0) r0 = io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/nfs4.nametoid/content\x00', 0x2000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/135, 0x87) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(0xffffffffffffffff, 0x0, 0x810) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8a800, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x2, 0x3, 0x6) r3 = socket(0x2, 0x1, 0x0) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x5, 0x20000000) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f00000001c0)="0e000000000000fa49bcca6908777060ef3bdb9fef46", 0x40000000001242}, 0x4, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) mmap$auto(0x10, 0x5, 0x3, 0x10, r2, 0x6) close_range$auto(0x2, 0xa, 0x0) ioctl$auto_TIOCGPTPEER(r0, 0x5441, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x7, 0x0, 0x5, 0xffffffff, 0x2000000000210009, 0x0, 0x7, 0x5, 0x2, 0x7, 0xaf, 0x9, 0x8, 0x3, 0x105, 0x7, 0x0, 0x0, 0x10000005, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x9, 0x4, 0x4, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x202, 0x81) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc7}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r5 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) ioctl$auto_UI_DEV_DESTROY(r5, 0x5502, 0x0) 1.521615302s ago: executing program 0 (id=1863): mmap$auto(0x0, 0x6, 0x80000000, 0x10010, 0xfffffffffffffffa, 0x0) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) r0 = ioctl$auto_TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x13, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x3) open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x0, 0xffffffffffffffff, 0x3fdd, 0x3, 0x7fffffffb000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/tls_stat\x00', 0x80c1, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x400008, 0x8000df, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) pread64$auto(r1, 0x0, 0x300000002, 0x100000001) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) io_setup$auto(0x1, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r4, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, r2) r5 = socket(0x29, 0x5, 0x0) write$auto(r5, &(0x7f0000000080)='/de$-audio1\x00', 0x100000a3dc) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) 1.36224638s ago: executing program 3 (id=1864): mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) mmap$auto(0x200000000, 0x5, 0x8, 0x40009b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ptrace$auto(0x10, 0x0, 0x1, 0x7ff) ptrace$auto(0xc, 0x0, 0x9, 0xfffffffffffff6de) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000040)="158f4a2b") r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) write$auto(r0, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb) getpid() mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) 1.255816771s ago: executing program 1 (id=1865): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) mmap$auto(0x13, 0x810004, 0xffb, 0x8000000008012, 0xffffffffffffffff, 0x6) mprotect$auto(0x1000, 0x401000, 0x4) mmap$auto(0x0, 0x202000a, 0x5, 0xfffffffffffffffb, 0xfffffffffffffffa, 0x2) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) shmctl$auto_SHM_STAT(0x3, 0xd, &(0x7f0000000140)={{0x1, 0xee01, 0xffffffffffffffff, 0x1, 0x8, 0x5, 0x7bee}, 0x5, 0x18, 0x7b, 0x1, @inferred=0xffffffffffffffff, @raw=0xcc2, 0x5, 0x0, 0x0, &(0x7f0000000080)}) mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0xffffffffffffffff, 0x400007, 0x1000000df, 0xb92, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}, 0x1, 0x0, 0x0, 0x4004800}, 0x40000) unshare$auto(0x40000080) socket(0x15, 0x5, 0x0) rt_sigsuspend$auto(0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x40, &(0x7f00000001c0)={0x1200, 0x5, 0x10000, 0x9, 0x5b77b906, 0x0, 0xffffffffffffffff, [0xcfa, 0xe5d, 0x5], {0x8001, 0x38, 0x9, 0x4, 0x4, 0x3, 0x3ff, 0x3, 0xffff}, {0x20000000, 0x9, 0x7, 0x2, 0x2, 0xffff13a7, 0x0, 0x449e, 0x1}}) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0xf, 0x0, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x2, 0xc, 0x5a}) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x800}, 0x5, 0x0, 0x1, 0x2}, 0x46}, 0x4, 0x100) 476.850636ms ago: executing program 3 (id=1866): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0xd, 0x4000000000df, 0xeb1, 0x401, 0x401) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="001e1f00", @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbdf250200000008002700080000000a0001002d7b3a2f2e240000"], 0x28}, 0x1, 0x0, 0x0, 0x4c894}, 0x20008001) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0d566b3dd008e4edd9650200000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dmmidi2\x00', 0x200201, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) poll$auto(0x0, 0x7f, 0x9) preadv2$auto(r0, 0x0, 0x4, 0x4, 0xb, 0x21) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nbd9\x00', 0x446d81, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r1, 0x8000) mprotect$auto(0x1000, 0x401000, 0x4) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid$auto_P_PGID(0x2, 0xffffffffffffffff, 0x0, 0x7, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(0xffffffffffffffff, 0x4b66, r2) ioctl$auto_TIOCMBIC(r2, 0x5417, &(0x7f0000000280)="531322c2c5baf4609c30b7d2864ae843cb59f17e66b19d8fb415a0de11be19f2c91a0aa29e2b22db9e91a84981796bcc74dd2e942538f0957fe6e7890da1f53dde7b64a56cee21abae3fe282ea4d609576782cf21f9ab3a476339fa646edbcd3bb66ec6f3e3dc85ab17124b9f3351a6b4752663761e68fe85bd005dc0cb3a5305eef7d8c42272b47a5866577f99ec7b7541112a0dc5724cd192378ec7a572ce4458ae0b8e5d47aa35746f5ad72ec689938d879d952dc2daed1c6c9ab7de0f1ef5f4591e3c7c759336011ba769469") openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) 0s ago: executing program 3 (id=1867): mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) mmap$auto(0x200000000, 0x5, 0x8, 0x40009b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ptrace$auto(0x10, 0x0, 0x1, 0x7ff) ptrace$auto(0xc, 0x0, 0x9, 0xfffffffffffff6de) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000040)="158f4a2b") r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) write$auto(r0, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb) getpid() mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/nbd13/sched/read0_next_rq\x00', 0x2000, 0x0) kernel console output (not intermixed with test programs): zkaller #0 PREEMPT(full) [ 482.431585][T12572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 482.431594][T12572] Call Trace: [ 482.431599][T12572] [ 482.431605][T12572] dump_stack_lvl+0x100/0x190 [ 482.431625][T12572] should_fail_ex.cold+0x5/0xa [ 482.431644][T12572] should_failslab+0xc2/0x120 [ 482.431662][T12572] __kmalloc_cache_node_noprof+0x7d/0x770 [ 482.431679][T12572] ? __get_vm_area_node+0x101/0x330 [ 482.431697][T12572] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 482.431724][T12572] __get_vm_area_node+0x101/0x330 [ 482.431745][T12572] __vmalloc_node_range_noprof+0x228/0x1630 [ 482.431765][T12572] ? __do_sys_listmount+0x289/0xee0 [ 482.431787][T12572] ? __do_sys_listmount+0x289/0xee0 [ 482.431805][T12572] ? alloc_pages_mpol+0x25a/0x540 [ 482.431824][T12572] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 482.431848][T12572] ? rcu_is_watching+0x12/0xc0 [ 482.431868][T12572] __kvmalloc_node_noprof+0x3de/0xa00 [ 482.431884][T12572] ? __do_sys_listmount+0x289/0xee0 [ 482.431898][T12572] ? __do_sys_listmount+0x289/0xee0 [ 482.431913][T12572] ? _copy_from_user+0x59/0xd0 [ 482.431937][T12572] ? copy_mnt_id_req+0x1b1/0x350 [ 482.431961][T12572] __do_sys_listmount+0x289/0xee0 [ 482.431980][T12572] ? __fget_files+0x21f/0x3d0 [ 482.431997][T12572] ? __pfx___do_sys_listmount+0x10/0x10 [ 482.432016][T12572] ? fput+0x79/0x100 [ 482.432039][T12572] ? rcu_is_watching+0x12/0xc0 [ 482.432058][T12572] do_syscall_64+0x115/0x840 [ 482.432078][T12572] ? clear_bhb_loop+0x40/0x90 [ 482.432097][T12572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.432112][T12572] RIP: 0033:0x7fa68639ce59 [ 482.432124][T12572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.432139][T12572] RSP: 002b:00007fa6871a0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 482.432153][T12572] RAX: ffffffffffffffda RBX: 00007fa686615fa0 RCX: 00007fa68639ce59 [ 482.432162][T12572] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000080 [ 482.432171][T12572] RBP: 00007fa6871a0090 R08: 0000000000000000 R09: 0000000000000000 [ 482.432180][T12572] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 482.432188][T12572] R13: 00007fa686616038 R14: 00007fa686615fa0 R15: 00007ffc137988f8 [ 482.432207][T12572] [ 482.432372][T12572] syz.3.1364: vmalloc error: size 8000000, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null) [ 482.684927][T12581] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 482.746867][ T7582] Bluetooth: hci3: command 0x2016 tx timeout [ 482.835041][T12573] Process accounting resumed [ 483.040732][T12581] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 483.279082][T12572] ,cpuset=/,mems_allowed=0-1 [ 483.295506][T12572] CPU: 0 UID: 0 PID: 12572 Comm: syz.3.1364 Not tainted syzkaller #0 PREEMPT(full) [ 483.295527][T12572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 483.295536][T12572] Call Trace: [ 483.295541][T12572] [ 483.295547][T12572] dump_stack_lvl+0x100/0x190 [ 483.295570][T12572] warn_alloc.cold+0x95/0x1c1 [ 483.295586][T12572] ? __pfx_warn_alloc+0x10/0x10 [ 483.295609][T12572] ? trace_kmalloc+0xe3/0x110 [ 483.295628][T12572] ? __kmalloc_cache_node_noprof+0x2d9/0x770 [ 483.295646][T12572] ? __kasan_kmalloc+0x8a/0xb0 [ 483.295661][T12572] ? __get_vm_area_node+0x208/0x330 [ 483.295683][T12572] __vmalloc_node_range_noprof+0xccd/0x1630 [ 483.295709][T12572] ? __do_sys_listmount+0x289/0xee0 [ 483.295728][T12572] ? alloc_pages_mpol+0x25a/0x540 [ 483.295746][T12572] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 483.295770][T12572] ? rcu_is_watching+0x12/0xc0 [ 483.295792][T12572] __kvmalloc_node_noprof+0x3de/0xa00 [ 483.295807][T12572] ? __do_sys_listmount+0x289/0xee0 [ 483.295821][T12572] ? __do_sys_listmount+0x289/0xee0 [ 483.295836][T12572] ? _copy_from_user+0x59/0xd0 [ 483.295856][T12572] ? copy_mnt_id_req+0x1b1/0x350 [ 483.295880][T12572] __do_sys_listmount+0x289/0xee0 [ 483.295900][T12572] ? __fget_files+0x21f/0x3d0 [ 483.295916][T12572] ? __pfx___do_sys_listmount+0x10/0x10 [ 483.295935][T12572] ? fput+0x79/0x100 [ 483.295958][T12572] ? rcu_is_watching+0x12/0xc0 [ 483.295977][T12572] do_syscall_64+0x115/0x840 [ 483.295997][T12572] ? clear_bhb_loop+0x40/0x90 [ 483.296015][T12572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.296030][T12572] RIP: 0033:0x7fa68639ce59 [ 483.296043][T12572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.296057][T12572] RSP: 002b:00007fa6871a0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 483.296072][T12572] RAX: ffffffffffffffda RBX: 00007fa686615fa0 RCX: 00007fa68639ce59 [ 483.296082][T12572] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000080 [ 483.296090][T12572] RBP: 00007fa6871a0090 R08: 0000000000000000 R09: 0000000000000000 [ 483.296099][T12572] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 483.296107][T12572] R13: 00007fa686616038 R14: 00007fa686615fa0 R15: 00007ffc137988f8 [ 483.296126][T12572] [ 483.613012][T12600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1369'. [ 483.845139][T12572] Mem-Info: [ 483.848347][T12572] active_anon:5594 inactive_anon:1945 isolated_anon:0 [ 483.848347][T12572] active_file:14619 inactive_file:40367 isolated_file:0 [ 483.848347][T12572] unevictable:2640 dirty:901 writeback:0 [ 483.848347][T12572] slab_reclaimable:10989 slab_unreclaimable:91695 [ 483.848347][T12572] mapped:27516 shmem:3208 pagetables:1367 [ 483.848347][T12572] sec_pagetables:0 bounce:0 [ 483.848347][T12572] kernel_misc_reclaimable:0 [ 483.848347][T12572] free:1323978 free_pcp:11466 free_cma:0 [ 484.017066][T12572] Node 0 active_anon:23716kB inactive_anon:7736kB active_file:58408kB inactive_file:163324kB unevictable:1584kB isolated(anon):0kB isolated(file):0kB mapped:105908kB dirty:3612kB writeback:0kB shmem:11276kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12288kB pagetables:5388kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 484.177366][T12615] netlink: 'syz.2.1372': attribute type 1 has an invalid length. [ 484.259141][T12572] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 484.474292][T12572] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 484.618720][T12572] lowmem_reserve[]: 0 2478 2479 2479 2479 [ 484.652870][T12572] Node 0 DMA32 free:1347680kB boost:0kB min:34060kB low:42572kB high:51084kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24444kB inactive_anon:7736kB active_file:58408kB inactive_file:162856kB unevictable:1584kB writepending:3560kB zspages:1500kB present:3129332kB managed:2537500kB mlocked:0kB bounce:0kB free_pcp:39440kB local_pcp:39440kB free_cma:0kB [ 484.792886][ T6816] Bluetooth: hci3: command 0x2016 tx timeout [ 484.816741][T12572] lowmem_reserve[]: 0 0 1 1 1 [ 484.842512][T12572] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1108kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 485.004176][T12572] lowmem_reserve[]: 0 0 0 0 0 [ 485.025753][T12572] Node 1 Normal free:3940592kB boost:0kB min:55828kB low:69784kB high:83740kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:3552kB local_pcp:3552kB free_cma:0kB [ 485.166015][T12572] lowmem_reserve[]: 0 0 0 0 0 [ 485.195306][T12572] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 485.252802][T12572] Node 0 DMA32: 9836*4kB (UME) 6600*8kB (UM) 4303*16kB (UME) 1604*32kB (UM) 1452*64kB (UM) 626*128kB (UME) 337*256kB (UM) 81*512kB (UM) 57*1024kB (UM) 3*2048kB (U) 188*4096kB (M) = 1347680kB [ 485.357142][T12572] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 485.419609][T12572] Node 1 Normal: 42*4kB (UM) 25*8kB (UM) 20*16kB (UM) 12*32kB (UM) 15*64kB (UM) 6*128kB (UM) 2*256kB (M) 0*512kB 1*1024kB (M) 4*2048kB (M) 959*4096kB (UM) = 3940592kB [ 485.477470][T12619] Process accounting paused [ 485.519174][T12572] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 485.590695][T12572] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 485.647055][T12572] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 485.706591][T12572] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 485.761288][T12572] 58828 total pagecache pages [ 485.788857][T12572] 30 pages in swap cache [ 485.816400][T12572] Free swap = 123424kB [ 485.829691][T12649] tc_dump_action: action bad kind [ 485.845963][T12572] Total swap = 124996kB [ 485.868217][T12572] 2097051 pages RAM [ 485.890265][T12572] 0 pages HighMem/MovableOnly [ 485.925850][T12572] 430784 pages reserved [ 485.949674][T12572] 0 pages cma reserved [ 486.140070][T12658] ubi0: attaching mtd0 [ 486.166263][T12658] ubi0: scanning is finished [ 486.174974][T12572] Process accounting resumed [ 486.199628][T12658] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 486.371303][T12634] Process accounting resumed [ 486.534974][T12658] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 486.788158][T12675] FAULT_INJECTION: forcing a failure. [ 486.788158][T12675] name failslab, interval 1, probability 0, space 0, times 0 [ 486.864911][T12675] CPU: 0 UID: 0 PID: 12675 Comm: syz.1.1380 Not tainted syzkaller #0 PREEMPT(full) [ 486.864933][T12675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 486.864943][T12675] Call Trace: [ 486.864948][T12675] [ 486.864954][T12675] dump_stack_lvl+0x100/0x190 [ 486.864974][T12675] should_fail_ex.cold+0x5/0xa [ 486.864993][T12675] ? tomoyo_realpath_from_path+0xb6/0x690 [ 486.865015][T12675] should_failslab+0xc2/0x120 [ 486.865039][T12675] __kmalloc_noprof+0xe0/0x850 [ 486.865052][T12675] ? kfree+0x1dd/0x6c0 [ 486.865075][T12675] tomoyo_realpath_from_path+0xb6/0x690 [ 486.865100][T12675] tomoyo_path_number_perm+0x23c/0x580 [ 486.865118][T12675] ? tomoyo_path_number_perm+0x22e/0x580 [ 486.865137][T12675] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 486.865178][T12675] ? find_held_lock+0x2b/0x80 [ 486.865196][T12675] ? __fget_files+0x215/0x3d0 [ 486.865213][T12675] ? hook_file_ioctl_common+0x149/0x410 [ 486.865230][T12675] ? __fget_files+0x215/0x3d0 [ 486.865250][T12675] ? __fget_files+0x21f/0x3d0 [ 486.865270][T12675] security_file_ioctl+0xd3/0x230 [ 486.865289][T12675] __x64_sys_ioctl+0xb7/0x210 [ 486.865305][T12675] do_syscall_64+0x115/0x840 [ 486.865325][T12675] ? clear_bhb_loop+0x40/0x90 [ 486.865343][T12675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.865358][T12675] RIP: 0033:0x7efea8f9ce59 [ 486.865371][T12675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.865384][T12675] RSP: 002b:00007efea9e54028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 486.865399][T12675] RAX: ffffffffffffffda RBX: 00007efea9215fa0 RCX: 00007efea8f9ce59 [ 486.865409][T12675] RDX: 0000000000000000 RSI: 0000000040107447 RDI: 0000000000000007 [ 486.865417][T12675] RBP: 00007efea9e54090 R08: 0000000000000000 R09: 0000000000000000 [ 486.865426][T12675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.865434][T12675] R13: 00007efea9216038 R14: 00007efea9215fa0 R15: 00007fff5fd84de8 [ 486.865453][T12675] [ 486.865471][T12675] ERROR: Out of memory at tomoyo_realpath_from_path. [ 487.424040][T12683] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880780049c0 pfn:0x78004 [ 487.509831][T12683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 487.548959][T12683] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 487.616863][T12683] raw: ffff8880780049c0 0000000000000000 00000001ffffffff 0000000000000000 [ 487.682941][T12683] page dumped because: unmovable page [ 487.749411][T12683] page_owner tracks the page as allocated [ 487.791734][T12683] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x92cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC), pid 6288, tgid 6287 (syz.3.88), ts 126321445109, free_ts 126060314021 [ 487.919801][T12683] register_dummy_stack+0x74/0xb0 [ 487.958642][T12683] init_page_owner+0x42/0xa10 [ 487.989271][T12683] page_ext_init+0x71d/0x780 [ 488.023794][T12683] mm_core_init+0x229/0x270 [ 488.062608][T12683] page last free pid 6276 tgid 6275 stack trace: [ 488.103660][T12683] __free_frozen_pages+0x794/0x10a0 [ 488.152301][T12683] vhost_dev_free_iovecs+0xe6/0x2b0 [ 488.175100][T12683] vhost_dev_set_owner+0x821/0xa30 [ 488.208964][T12683] vhost_net_ioctl+0xfa3/0x1910 [ 488.243358][T12683] __x64_sys_ioctl+0x18e/0x210 [ 488.274151][T12683] do_syscall_64+0x115/0x840 [ 488.304943][T12683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.654199][T12702] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 492.171577][T12741] netlink: 130 bytes leftover after parsing attributes in process `syz.1.1394'. [ 495.237901][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032d5c000: rx timeout, send abort [ 495.246452][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888032d5c000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 499.030404][T12832] FAULT_INJECTION: forcing a failure. [ 499.030404][T12832] name failslab, interval 1, probability 0, space 0, times 0 [ 499.080854][T12832] CPU: 0 UID: 0 PID: 12832 Comm: syz.3.1412 Not tainted syzkaller #0 PREEMPT(full) [ 499.080876][T12832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 499.080886][T12832] Call Trace: [ 499.080891][T12832] [ 499.080898][T12832] dump_stack_lvl+0x100/0x190 [ 499.080919][T12832] should_fail_ex.cold+0x5/0xa [ 499.080939][T12832] should_failslab+0xc2/0x120 [ 499.080958][T12832] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 499.080981][T12832] ? security_inode_alloc+0x3b/0x2c0 [ 499.080998][T12832] ? lockdep_init_map_type+0x5c/0x250 [ 499.081024][T12832] security_inode_alloc+0x3b/0x2c0 [ 499.081041][T12832] inode_init_always_gfp+0xc77/0xfb0 [ 499.081061][T12832] ? __pfx_nfsd_fill_super+0x10/0x10 [ 499.081084][T12832] alloc_inode+0x8e/0x250 [ 499.081107][T12832] new_inode+0x22/0x1c0 [ 499.081129][T12832] ? __pfx_nfsd_fill_super+0x10/0x10 [ 499.081152][T12832] nfsd_fill_super+0x145/0x560 [ 499.081176][T12832] ? __pfx_nfsd_fill_super+0x10/0x10 [ 499.081198][T12832] get_tree_keyed+0x10e/0x1d0 [ 499.081225][T12832] vfs_get_tree+0x92/0x320 [ 499.081240][T12832] path_mount+0x7d0/0x23d0 [ 499.081265][T12832] ? __pfx_path_mount+0x10/0x10 [ 499.081284][T12832] ? lockdep_hardirqs_on+0x78/0x100 [ 499.081308][T12832] ? putname+0xb1/0x110 [ 499.081325][T12832] ? kmem_cache_free+0x127/0x6c0 [ 499.081353][T12832] ? __x64_sys_mount+0x293/0x310 [ 499.081373][T12832] __x64_sys_mount+0x293/0x310 [ 499.081394][T12832] ? __pfx___x64_sys_mount+0x10/0x10 [ 499.081418][T12832] ? rcu_is_watching+0x12/0xc0 [ 499.081438][T12832] do_syscall_64+0x115/0x840 [ 499.081457][T12832] ? clear_bhb_loop+0x40/0x90 [ 499.081476][T12832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.081492][T12832] RIP: 0033:0x7fa68639ce59 [ 499.081505][T12832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.081519][T12832] RSP: 002b:00007fa6871a0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 499.081533][T12832] RAX: ffffffffffffffda RBX: 00007fa686615fa0 RCX: 00007fa68639ce59 [ 499.081544][T12832] RDX: 0000200000000200 RSI: 00002000000000c0 RDI: 0000000000000000 [ 499.081553][T12832] RBP: 00007fa686432d6f R08: 0000000000000000 R09: 0000000000000000 [ 499.081562][T12832] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 499.081570][T12832] R13: 00007fa686616038 R14: 00007fa686615fa0 R15: 00007ffc137988f8 [ 499.081590][T12832] [ 501.424550][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.435264][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.946011][T12874] ubi0: attaching mtd0 [ 501.979805][T12874] ubi0: scanning is finished [ 502.007024][T12874] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 502.199690][T12874] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 502.988033][T12890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1425'. [ 503.316027][T12900] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1427'. [ 503.462711][ C0] sd 0:0:1:0: [sda] tag#1831 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 503.473207][ C0] sd 0:0:1:0: [sda] tag#1831 CDB: Read(6) 08 00 00 00 09 00 00 00 00 00 00 00 [ 503.945661][T12914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1429'. [ 505.362676][T12926] random: crng reseeded on system resumption [ 505.575092][T12952] ubi0: attaching mtd0 [ 505.591567][T12952] ubi0: scanning is finished [ 505.606411][T12952] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 505.740693][T12952] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 506.972182][T12984] ubi0: attaching mtd0 [ 507.010404][T12984] ubi0: scanning is finished [ 507.033554][T12984] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 507.161848][T12982] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 507.283563][T12984] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 507.316907][ T30] audit: type=1800 audit(1780501946.434:15): pid=12995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1447" name="version" dev="configfs" ino=40816 res=0 errno=0 [ 508.770654][T13042] Line length is too long: Should be less than 4094 [ 510.789476][T13042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1462'. [ 512.907267][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805cf2e400: rx timeout, send abort [ 512.915754][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805cf2e400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 513.005623][T13093] Process accounting paused [ 516.561204][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880274ccc00: rx timeout, send abort [ 516.569660][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880274ccc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 516.642090][T13157] Process accounting resumed [ 517.310723][T13177] FAULT_INJECTION: forcing a failure. [ 517.310723][T13177] name failslab, interval 1, probability 0, space 0, times 0 [ 517.381339][T13177] CPU: 0 UID: 0 PID: 13177 Comm: syz.0.1488 Not tainted syzkaller #0 PREEMPT(full) [ 517.381362][T13177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 517.381372][T13177] Call Trace: [ 517.381377][T13177] [ 517.381383][T13177] dump_stack_lvl+0x100/0x190 [ 517.381405][T13177] should_fail_ex.cold+0x5/0xa [ 517.381425][T13177] should_failslab+0xc2/0x120 [ 517.381444][T13177] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 517.381468][T13177] ? __d_alloc+0x34/0xa40 [ 517.381491][T13177] __d_alloc+0x34/0xa40 [ 517.381513][T13177] d_alloc+0x4a/0x1e0 [ 517.381533][T13177] lookup_one_qstr_excl+0x171/0x250 [ 517.381557][T13177] start_dirop+0x59/0xb0 [ 517.381575][T13177] simple_start_creating+0xf9/0x110 [ 517.381593][T13177] ? __pfx_simple_start_creating+0x10/0x10 [ 517.381615][T13177] nfsd_fill_super+0x1c9/0x560 [ 517.381640][T13177] ? __pfx_nfsd_fill_super+0x10/0x10 [ 517.381662][T13177] get_tree_keyed+0x10e/0x1d0 [ 517.381680][T13177] vfs_get_tree+0x92/0x320 [ 517.381694][T13177] path_mount+0x7d0/0x23d0 [ 517.381718][T13177] ? __pfx_path_mount+0x10/0x10 [ 517.381736][T13177] ? lockdep_hardirqs_on+0x78/0x100 [ 517.381759][T13177] ? putname+0xb1/0x110 [ 517.381777][T13177] ? kmem_cache_free+0x127/0x6c0 [ 517.381804][T13177] ? __x64_sys_mount+0x293/0x310 [ 517.381823][T13177] __x64_sys_mount+0x293/0x310 [ 517.381843][T13177] ? __pfx___x64_sys_mount+0x10/0x10 [ 517.381866][T13177] ? rcu_is_watching+0x12/0xc0 [ 517.381890][T13177] do_syscall_64+0x115/0x840 [ 517.381909][T13177] ? clear_bhb_loop+0x40/0x90 [ 517.381928][T13177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.381944][T13177] RIP: 0033:0x7f8dca99ce59 [ 517.381956][T13177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 517.381971][T13177] RSP: 002b:00007f8dcb922028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 517.381986][T13177] RAX: ffffffffffffffda RBX: 00007f8dcac15fa0 RCX: 00007f8dca99ce59 [ 517.381996][T13177] RDX: 0000200000000200 RSI: 00002000000000c0 RDI: 0000000000000000 [ 517.382005][T13177] RBP: 00007f8dcaa32d6f R08: 0000000000000000 R09: 0000000000000000 [ 517.382013][T13177] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 517.382022][T13177] R13: 00007f8dcac16038 R14: 00007f8dcac15fa0 R15: 00007fff9a3f0548 [ 517.382041][T13177] [ 518.648969][T13138] Process accounting paused [ 518.972946][T13193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1490'. [ 519.417192][T13154] Process accounting paused [ 521.886511][T13234] ubi0: attaching mtd0 [ 521.908907][T13234] ubi0: scanning is finished [ 521.944898][T13234] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 522.058655][T13233] netlink: 'syz.3.1498': attribute type 33 has an invalid length. [ 522.088587][T13233] netlink: 318 bytes leftover after parsing attributes in process `syz.3.1498'. [ 522.165702][T13234] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 523.561019][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d7f9000: rx timeout, send abort [ 523.569567][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d7f9000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 523.908420][T13253] FAULT_INJECTION: forcing a failure. [ 523.908420][T13253] name fail_futex, interval 1, probability 0, space 0, times 0 [ 523.975706][T13253] CPU: 0 UID: 0 PID: 13253 Comm: syz.2.1502 Not tainted syzkaller #0 PREEMPT(full) [ 523.975728][T13253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 523.975737][T13253] Call Trace: [ 523.975743][T13253] [ 523.975749][T13253] dump_stack_lvl+0x100/0x190 [ 523.975769][T13253] should_fail_ex.cold+0x5/0xa [ 523.975788][T13253] get_futex_key+0x1d2/0x1510 [ 523.975814][T13253] ? __pfx_get_futex_key+0x10/0x10 [ 523.975843][T13253] futex_wake+0xea/0x530 [ 523.975863][T13253] ? __pfx_futex_wake+0x10/0x10 [ 523.975882][T13253] ? lockdep_hardirqs_on+0x78/0x100 [ 523.975909][T13253] do_futex+0x32b/0x350 [ 523.975924][T13253] ? __pfx_do_futex+0x10/0x10 [ 523.975940][T13253] ? __pfx___might_resched+0x10/0x10 [ 523.975955][T13253] ? blkcg_maybe_throttle_current+0x5e8/0xeb0 [ 523.975978][T13253] ? _raw_spin_unlock_irq+0x23/0x50 [ 523.975999][T13253] __x64_sys_futex+0x34f/0x4d0 [ 523.976015][T13253] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 523.976033][T13253] ? __pfx___x64_sys_futex+0x10/0x10 [ 523.976047][T13253] ? exit_to_user_mode_loop+0xf3/0x670 [ 523.976069][T13253] ? rcu_is_watching+0x12/0xc0 [ 523.976085][T13253] ? exit_to_user_mode_loop+0xf3/0x670 [ 523.976109][T13253] ? rcu_is_watching+0x12/0xc0 [ 523.976127][T13253] do_syscall_64+0x115/0x840 [ 523.976146][T13253] ? clear_bhb_loop+0x40/0x90 [ 523.976163][T13253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.976178][T13253] RIP: 0033:0x7f81e5d9ce59 [ 523.976191][T13253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.976205][T13253] RSP: 002b:00007f81e6d2d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 523.976219][T13253] RAX: ffffffffffffffda RBX: 00007f81e6015fa8 RCX: 00007f81e5d9ce59 [ 523.976229][T13253] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f81e6015fac [ 523.976238][T13253] RBP: 00007f81e6015fa0 R08: 0000000000000001 R09: 0000000000000000 [ 523.976247][T13253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 523.976255][T13253] R13: 00007f81e6016038 R14: 00007fff7b8405a0 R15: 00007fff7b840688 [ 523.976274][T13253] [ 524.815184][T13265] netlink: 'syz.2.1504': attribute type 23 has an invalid length. [ 524.935229][T13250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1500'. [ 524.985370][ T7582] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 525.252965][T13274] kvm: kvm [13272]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x186) = 0x8003 [ 525.781131][T13290] ubi0: attaching mtd0 [ 525.821986][T13290] ubi0: scanning is finished [ 525.840846][T13290] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 526.069442][T13290] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 527.048746][ T6816] Bluetooth: hci3: command 0x2016 tx timeout [ 528.002844][T13321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1515'. [ 529.117954][ T6816] Bluetooth: hci3: command 0x2016 tx timeout [ 529.169183][T13339] FAULT_INJECTION: forcing a failure. [ 529.169183][T13339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 529.244819][T13339] CPU: 0 UID: 0 PID: 13339 Comm: syz.3.1518 Not tainted syzkaller #0 PREEMPT(full) [ 529.244841][T13339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 529.244850][T13339] Call Trace: [ 529.244855][T13339] [ 529.244861][T13339] dump_stack_lvl+0x100/0x190 [ 529.244882][T13339] should_fail_ex.cold+0x5/0xa [ 529.244902][T13339] _copy_from_user+0x2e/0xd0 [ 529.244923][T13339] __sys_bpf+0x243/0x4b90 [ 529.244940][T13339] ? __pfx___sys_bpf+0x10/0x10 [ 529.244953][T13339] ? proc_fail_nth_write+0x9f/0x220 [ 529.244976][T13339] ? find_held_lock+0x2b/0x80 [ 529.244998][T13339] ? find_held_lock+0x2b/0x80 [ 529.245014][T13339] ? ksys_write+0x190/0x250 [ 529.245030][T13339] ? ksys_write+0x190/0x250 [ 529.245049][T13339] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 529.245071][T13339] ? kernel_write+0x643/0x6c0 [ 529.245086][T13339] ? __fget_files+0x215/0x3d0 [ 529.245112][T13339] ? fput+0x79/0x100 [ 529.245132][T13339] ? ksys_write+0x1ac/0x250 [ 529.245148][T13339] ? __pfx_ksys_write+0x10/0x10 [ 529.245170][T13339] __x64_sys_bpf+0x7b/0xc0 [ 529.245185][T13339] ? lockdep_hardirqs_on+0x78/0x100 [ 529.245205][T13339] do_syscall_64+0x115/0x840 [ 529.245225][T13339] ? clear_bhb_loop+0x40/0x90 [ 529.245249][T13339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.245264][T13339] RIP: 0033:0x7fa68639ce59 [ 529.245277][T13339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.245291][T13339] RSP: 002b:00007fa6871a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 529.245306][T13339] RAX: ffffffffffffffda RBX: 00007fa686615fa0 RCX: 00007fa68639ce59 [ 529.245315][T13339] RDX: 00000000000006f4 RSI: 00002000000001c0 RDI: 0000000000000000 [ 529.245324][T13339] RBP: 00007fa6871a0090 R08: 0000000000000000 R09: 0000000000000000 [ 529.245333][T13339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.245341][T13339] R13: 00007fa686616038 R14: 00007fa686615fa0 R15: 00007ffc137988f8 [ 529.245360][T13339] [ 530.280709][T13352] FAULT_INJECTION: forcing a failure. [ 530.280709][T13352] name failslab, interval 1, probability 0, space 0, times 0 [ 530.316908][T13352] CPU: 0 UID: 0 PID: 13352 Comm: syz.2.1521 Not tainted syzkaller #0 PREEMPT(full) [ 530.316938][T13352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 530.316948][T13352] Call Trace: [ 530.316953][T13352] [ 530.316959][T13352] dump_stack_lvl+0x100/0x190 [ 530.316981][T13352] should_fail_ex.cold+0x5/0xa [ 530.317001][T13352] should_failslab+0xc2/0x120 [ 530.317020][T13352] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 530.317043][T13352] ? __kernfs_new_node+0xd2/0x9f0 [ 530.317064][T13352] __kernfs_new_node+0xd2/0x9f0 [ 530.317083][T13352] ? __pfx___kernfs_new_node+0x10/0x10 [ 530.317104][T13352] ? find_held_lock+0x2b/0x80 [ 530.317122][T13352] ? kernfs_root+0xee/0x2a0 [ 530.317137][T13352] ? kernfs_root+0xee/0x2a0 [ 530.317156][T13352] kernfs_new_node+0x11b/0x1a0 [ 530.317178][T13352] __kernfs_create_file+0x53/0x350 [ 530.317202][T13352] sysfs_add_file_mode_ns+0x207/0x3c0 [ 530.317222][T13352] internal_create_group+0x593/0xfb0 [ 530.317244][T13352] ? __pfx_internal_create_group+0x10/0x10 [ 530.317264][T13352] ? kernfs_create_link+0x1bd/0x240 [ 530.317288][T13352] internal_create_groups+0x9d/0x150 [ 530.317307][T13352] device_add+0x71a/0x1950 [ 530.317325][T13352] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 530.317345][T13352] ? __pfx_device_add+0x10/0x10 [ 530.317362][T13352] ? lockdep_init_map_type+0x5c/0x250 [ 530.317386][T13352] ? __init_waitqueue_head+0xca/0x150 [ 530.317414][T13352] netdev_register_kobject+0x1a9/0x3d0 [ 530.317438][T13352] register_netdevice+0x151c/0x24b0 [ 530.317459][T13352] ? __pfx_register_netdevice+0x10/0x10 [ 530.317475][T13352] ? net_generic+0xea/0x2a0 [ 530.317494][T13352] ppp_dev_configure+0x986/0xcb0 [ 530.317513][T13352] ppp_ioctl+0x9d7/0x27c0 [ 530.317530][T13352] ? find_held_lock+0x2b/0x80 [ 530.317547][T13352] ? __pfx_ppp_ioctl+0x10/0x10 [ 530.317566][T13352] ? __fget_files+0x21f/0x3d0 [ 530.317586][T13352] ? __pfx_ppp_ioctl+0x10/0x10 [ 530.317602][T13352] __x64_sys_ioctl+0x18e/0x210 [ 530.317618][T13352] do_syscall_64+0x115/0x840 [ 530.317638][T13352] ? clear_bhb_loop+0x40/0x90 [ 530.317658][T13352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.317674][T13352] RIP: 0033:0x7f81e5d9ce59 [ 530.317691][T13352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.317705][T13352] RSP: 002b:00007f81e6d0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 530.317721][T13352] RAX: ffffffffffffffda RBX: 00007f81e6016090 RCX: 00007f81e5d9ce59 [ 530.317731][T13352] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 000000000000000b [ 530.317741][T13352] RBP: 00007f81e5e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 530.317750][T13352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 530.317759][T13352] R13: 00007f81e6016128 R14: 00007f81e6016090 R15: 00007fff7b840688 [ 530.317779][T13352] [ 531.985113][ T30] audit: type=1800 audit(1780501971.222:16): pid=13368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1523" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 532.372307][T13373] FAULT_INJECTION: forcing a failure. [ 532.372307][T13373] name failslab, interval 1, probability 0, space 0, times 0 [ 533.421921][T13373] CPU: 0 UID: 0 PID: 13373 Comm: syz.0.1525 Not tainted syzkaller #0 PREEMPT(full) [ 533.421944][T13373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 533.421962][T13373] Call Trace: [ 533.421967][T13373] [ 533.421973][T13373] dump_stack_lvl+0x100/0x190 [ 533.421994][T13373] should_fail_ex.cold+0x5/0xa [ 533.422015][T13373] should_failslab+0xc2/0x120 [ 533.422033][T13373] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 533.422056][T13373] ? alloc_inode+0x183/0x250 [ 533.422083][T13373] alloc_inode+0x183/0x250 [ 533.422105][T13373] new_inode+0x22/0x1c0 [ 533.422129][T13373] nfsd_mkdir+0x78/0x460 [ 533.422154][T13373] nfsd_fill_super+0x3f9/0x560 [ 533.422178][T13373] ? __pfx_nfsd_fill_super+0x10/0x10 [ 533.422201][T13373] get_tree_keyed+0x10e/0x1d0 [ 533.422218][T13373] vfs_get_tree+0x92/0x320 [ 533.422232][T13373] path_mount+0x7d0/0x23d0 [ 533.422255][T13373] ? __pfx_path_mount+0x10/0x10 [ 533.422274][T13373] ? lockdep_hardirqs_on+0x78/0x100 [ 533.422297][T13373] ? putname+0xb1/0x110 [ 533.422314][T13373] ? kmem_cache_free+0x127/0x6c0 [ 533.422342][T13373] ? __x64_sys_mount+0x293/0x310 [ 533.422360][T13373] __x64_sys_mount+0x293/0x310 [ 533.422382][T13373] ? __pfx___x64_sys_mount+0x10/0x10 [ 533.422407][T13373] ? rcu_is_watching+0x12/0xc0 [ 533.422426][T13373] do_syscall_64+0x115/0x840 [ 533.422445][T13373] ? clear_bhb_loop+0x40/0x90 [ 533.422463][T13373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.422478][T13373] RIP: 0033:0x7f8dca99ce59 [ 533.422492][T13373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.422506][T13373] RSP: 002b:00007f8dcb922028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 533.422520][T13373] RAX: ffffffffffffffda RBX: 00007f8dcac15fa0 RCX: 00007f8dca99ce59 [ 533.422530][T13373] RDX: 0000200000000200 RSI: 00002000000000c0 RDI: 0000000000000000 [ 533.422540][T13373] RBP: 00007f8dcaa32d6f R08: 0000000000000000 R09: 0000000000000000 [ 533.422549][T13373] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 533.422558][T13373] R13: 00007f8dcac16038 R14: 00007f8dcac15fa0 R15: 00007fff9a3f0548 [ 533.422578][T13373] [ 533.642910][ C0] vcan0: j1939_tp_rxtimer: 0xffff888037241800: rx timeout, send abort [ 533.652506][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888037241800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 534.400092][T13390] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1530'. [ 534.720876][T13397] Invalid ELF header magic: != ELF [ 537.852851][T13444] ubi0: attaching mtd0 [ 537.870536][T13444] ubi0: scanning is finished [ 537.893678][T13444] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 538.220717][T13444] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 538.425494][T13456] netlink: 'syz.0.1542': attribute type 1 has an invalid length. [ 540.543685][T13495] FAULT_INJECTION: forcing a failure. [ 540.543685][T13495] name failslab, interval 1, probability 0, space 0, times 0 [ 540.653588][T13495] CPU: 0 UID: 0 PID: 13495 Comm: syz.0.1547 Not tainted syzkaller #0 PREEMPT(full) [ 540.653611][T13495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 540.653621][T13495] Call Trace: [ 540.653627][T13495] [ 540.653633][T13495] dump_stack_lvl+0x100/0x190 [ 540.653655][T13495] should_fail_ex.cold+0x5/0xa [ 540.653675][T13495] should_failslab+0xc2/0x120 [ 540.653695][T13495] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 540.653718][T13495] ? __d_alloc+0x34/0xa40 [ 540.653742][T13495] __d_alloc+0x34/0xa40 [ 540.653763][T13495] d_alloc+0x4a/0x1e0 [ 540.653784][T13495] lookup_one_qstr_excl+0x171/0x250 [ 540.653811][T13495] start_dirop+0x59/0xb0 [ 540.653828][T13495] simple_start_creating+0xf9/0x110 [ 540.653846][T13495] ? __pfx_simple_start_creating+0x10/0x10 [ 540.653869][T13495] nfsd_fill_super+0x1c9/0x560 [ 540.653893][T13495] ? __pfx_nfsd_fill_super+0x10/0x10 [ 540.653916][T13495] get_tree_keyed+0x10e/0x1d0 [ 540.653933][T13495] vfs_get_tree+0x92/0x320 [ 540.653948][T13495] path_mount+0x7d0/0x23d0 [ 540.653971][T13495] ? __pfx_path_mount+0x10/0x10 [ 540.653989][T13495] ? lockdep_hardirqs_on+0x78/0x100 [ 540.654012][T13495] ? putname+0xb1/0x110 [ 540.654030][T13495] ? kmem_cache_free+0x127/0x6c0 [ 540.654057][T13495] ? __x64_sys_mount+0x293/0x310 [ 540.654076][T13495] __x64_sys_mount+0x293/0x310 [ 540.654096][T13495] ? __pfx___x64_sys_mount+0x10/0x10 [ 540.654118][T13495] ? rcu_is_watching+0x12/0xc0 [ 540.654137][T13495] do_syscall_64+0x115/0x840 [ 540.654157][T13495] ? clear_bhb_loop+0x40/0x90 [ 540.654175][T13495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.654190][T13495] RIP: 0033:0x7f8dca99ce59 [ 540.654202][T13495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 540.654216][T13495] RSP: 002b:00007f8dcb922028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 540.654231][T13495] RAX: ffffffffffffffda RBX: 00007f8dcac15fa0 RCX: 00007f8dca99ce59 [ 540.654241][T13495] RDX: 0000200000000200 RSI: 00002000000000c0 RDI: 0000000000000000 [ 540.654250][T13495] RBP: 00007f8dcaa32d6f R08: 0000000000000000 R09: 0000000000000000 [ 540.654258][T13495] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 540.654266][T13495] R13: 00007f8dcac16038 R14: 00007f8dcac15fa0 R15: 00007fff9a3f0548 [ 540.654286][T13495] [ 542.738543][T13533] netlink: 'syz.2.1552': attribute type 1 has an invalid length. [ 542.778722][T13533] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1552'. [ 542.870025][T13537] netlink: 186 bytes leftover after parsing attributes in process `syz.3.1553'. [ 542.958880][T13535] can: request_module (can-proto-5) failed. [ 544.251090][T13566] Process accounting resumed [ 544.347779][T13526] Process accounting resumed [ 544.517174][T13577] random: crng reseeded on system resumption [ 546.289480][T13601] FAULT_INJECTION: forcing a failure. [ 546.289480][T13601] name failslab, interval 1, probability 0, space 0, times 0 [ 546.321412][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d537c00: rx timeout, send abort [ 546.330138][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d537c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 546.438824][T13601] CPU: 0 UID: 0 PID: 13601 Comm: syz.0.1563 Not tainted syzkaller #0 PREEMPT(full) [ 546.438849][T13601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 546.438858][T13601] Call Trace: [ 546.438863][T13601] [ 546.438870][T13601] dump_stack_lvl+0x100/0x190 [ 546.438892][T13601] should_fail_ex.cold+0x5/0xa [ 546.438912][T13601] ? lsm_blob_alloc+0x68/0x90 [ 546.438934][T13601] should_failslab+0xc2/0x120 [ 546.438953][T13601] __kmalloc_noprof+0xe0/0x850 [ 546.438967][T13601] ? trace_kmalloc+0xe3/0x110 [ 546.438987][T13601] lsm_blob_alloc+0x68/0x90 [ 546.439008][T13601] security_sk_alloc+0x2d/0x290 [ 546.439025][T13601] sk_prot_alloc+0x12a/0x2a0 [ 546.439045][T13601] sk_alloc+0x36/0xe80 [ 546.439059][T13601] __netlink_create+0x5e/0x2c0 [ 546.439075][T13601] ? __wake_up+0x3f/0x60 [ 546.439096][T13601] netlink_create+0x29b/0x610 [ 546.439112][T13601] ? __pfx_genl_bind+0x10/0x10 [ 546.439131][T13601] ? __pfx_genl_unbind+0x10/0x10 [ 546.439149][T13601] ? __pfx_genl_release+0x10/0x10 [ 546.439171][T13601] __sock_create+0x339/0x860 [ 546.439195][T13601] __sys_socket+0x14d/0x260 [ 546.439214][T13601] ? exc_page_fault+0x6f/0xd0 [ 546.439234][T13601] ? __pfx___sys_socket+0x10/0x10 [ 546.439259][T13601] __x64_sys_socket+0x72/0xb0 [ 546.439278][T13601] ? lockdep_hardirqs_on+0x78/0x100 [ 546.439298][T13601] do_syscall_64+0x115/0x840 [ 546.439317][T13601] ? clear_bhb_loop+0x40/0x90 [ 546.439335][T13601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.439359][T13601] RIP: 0033:0x7f8dca99e6c7 [ 546.439373][T13601] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.439389][T13601] RSP: 002b:00007f8dcb8fff98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 546.439404][T13601] RAX: ffffffffffffffda RBX: 00007f8dcac16090 RCX: 00007f8dca99e6c7 [ 546.439414][T13601] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 546.439423][T13601] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 546.439433][T13601] R10: 0000200000000100 R11: 0000000000000286 R12: 0000000000000000 [ 546.439442][T13601] R13: 00007f8dcac16128 R14: 00007f8dcac16090 R15: 00007fff9a3f0548 [ 546.439461][T13601] [ 546.684790][T13606] FAULT_INJECTION: forcing a failure. [ 546.684790][T13606] name failslab, interval 1, probability 0, space 0, times 0 [ 546.697613][T13606] CPU: 0 UID: 0 PID: 13606 Comm: syz.3.1565 Not tainted syzkaller #0 PREEMPT(full) [ 546.697633][T13606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 546.697642][T13606] Call Trace: [ 546.697647][T13606] [ 546.697653][T13606] dump_stack_lvl+0x100/0x190 [ 546.697673][T13606] should_fail_ex.cold+0x5/0xa [ 546.697692][T13606] should_failslab+0xc2/0x120 [ 546.697710][T13606] __kmalloc_cache_noprof+0x7a/0x6f0 [ 546.697731][T13606] ? snd_pcm_oss_change_params_locked+0x1db/0x39f0 [ 546.697757][T13606] snd_pcm_oss_change_params_locked+0x1db/0x39f0 [ 546.697783][T13606] ? __mutex_lock+0x26d/0x1b10 [ 546.697806][T13606] ? snd_pcm_oss_write+0x49a/0xa30 [ 546.697825][T13606] ? aa_file_perm+0x7f3/0x14d0 [ 546.697847][T13606] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 546.697871][T13606] ? __pfx___mutex_lock+0x10/0x10 [ 546.697898][T13606] ? __pfx___might_resched+0x10/0x10 [ 546.697914][T13606] ? get_pid_task+0xfc/0x250 [ 546.697937][T13606] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 546.697959][T13606] snd_pcm_oss_write+0x4bb/0xa30 [ 546.697980][T13606] ? bpf_lsm_file_permission+0x9/0x10 [ 546.697993][T13606] ? security_file_permission+0x76/0x210 [ 546.698017][T13606] vfs_write+0x2aa/0x1070 [ 546.698035][T13606] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 546.698057][T13606] ? __pfx_vfs_write+0x10/0x10 [ 546.698072][T13606] ? find_held_lock+0x2b/0x80 [ 546.698090][T13606] ? __fget_files+0x215/0x3d0 [ 546.698107][T13606] ? __fget_files+0x215/0x3d0 [ 546.698132][T13606] ? __fget_files+0x21f/0x3d0 [ 546.698154][T13606] ksys_write+0x12a/0x250 [ 546.698171][T13606] ? __pfx_ksys_write+0x10/0x10 [ 546.698189][T13606] ? rcu_is_watching+0x12/0xc0 [ 546.698209][T13606] do_syscall_64+0x115/0x840 [ 546.698228][T13606] ? clear_bhb_loop+0x40/0x90 [ 546.698247][T13606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.698262][T13606] RIP: 0033:0x7fa68639ce59 [ 546.698275][T13606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.698289][T13606] RSP: 002b:00007fa6871a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 546.698304][T13606] RAX: ffffffffffffffda RBX: 00007fa686615fa0 RCX: 00007fa68639ce59 [ 546.698314][T13606] RDX: 0000000080000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 546.698322][T13606] RBP: 00007fa6871a0090 R08: 0000000000000000 R09: 0000000000000000 [ 546.698331][T13606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.698339][T13606] R13: 00007fa686616038 R14: 00007fa686615fa0 R15: 00007ffc137988f8 [ 546.698359][T13606] [ 547.120533][T13601] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 547.501519][T13604] Process accounting paused [ 548.665789][T13644] FAULT_INJECTION: forcing a failure. [ 548.665789][T13644] name failslab, interval 1, probability 0, space 0, times 0 [ 548.737200][T13644] CPU: 0 UID: 0 PID: 13644 Comm: syz.0.1570 Not tainted syzkaller #0 PREEMPT(full) [ 548.737223][T13644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 548.737233][T13644] Call Trace: [ 548.737239][T13644] [ 548.737246][T13644] dump_stack_lvl+0x100/0x190 [ 548.737267][T13644] should_fail_ex.cold+0x5/0xa [ 548.737287][T13644] should_failslab+0xc2/0x120 [ 548.737306][T13644] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 548.737329][T13644] ? security_inode_alloc+0x3b/0x2c0 [ 548.737346][T13644] ? lockdep_init_map_type+0x5c/0x250 [ 548.737373][T13644] security_inode_alloc+0x3b/0x2c0 [ 548.737390][T13644] inode_init_always_gfp+0xc77/0xfb0 [ 548.737411][T13644] ? __pfx_nfsd_fill_super+0x10/0x10 [ 548.737434][T13644] alloc_inode+0x8e/0x250 [ 548.737456][T13644] new_inode+0x22/0x1c0 [ 548.737478][T13644] ? __pfx_nfsd_fill_super+0x10/0x10 [ 548.737500][T13644] nfsd_fill_super+0x145/0x560 [ 548.737523][T13644] ? __pfx_nfsd_fill_super+0x10/0x10 [ 548.737546][T13644] get_tree_keyed+0x10e/0x1d0 [ 548.737563][T13644] vfs_get_tree+0x92/0x320 [ 548.737577][T13644] path_mount+0x7d0/0x23d0 [ 548.737601][T13644] ? __pfx_path_mount+0x10/0x10 [ 548.737619][T13644] ? lockdep_hardirqs_on+0x78/0x100 [ 548.737641][T13644] ? putname+0xb1/0x110 [ 548.737659][T13644] ? kmem_cache_free+0x127/0x6c0 [ 548.737693][T13644] ? __x64_sys_mount+0x293/0x310 [ 548.737716][T13644] __x64_sys_mount+0x293/0x310 [ 548.737737][T13644] ? __pfx___x64_sys_mount+0x10/0x10 [ 548.737759][T13644] ? rcu_is_watching+0x12/0xc0 [ 548.737778][T13644] do_syscall_64+0x115/0x840 [ 548.737798][T13644] ? clear_bhb_loop+0x40/0x90 [ 548.737817][T13644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.737832][T13644] RIP: 0033:0x7f8dca99ce59 [ 548.737845][T13644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 548.737859][T13644] RSP: 002b:00007f8dcb922028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 548.737874][T13644] RAX: ffffffffffffffda RBX: 00007f8dcac15fa0 RCX: 00007f8dca99ce59 [ 548.737885][T13644] RDX: 0000200000000200 RSI: 00002000000000c0 RDI: 0000000000000000 [ 548.737894][T13644] RBP: 00007f8dcaa32d6f R08: 0000000000000000 R09: 0000000000000000 [ 548.737903][T13644] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 548.737912][T13644] R13: 00007f8dcac16038 R14: 00007f8dcac15fa0 R15: 00007fff9a3f0548 [ 548.737932][T13644] [ 549.142799][T13651] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.131072.4294967293), cmd(3) [ 550.324547][T13642] Process accounting resumed [ 551.043626][T13686] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1581'. [ 551.234276][T11616] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 3391 with max blocks 193 with error 117 [ 551.366380][T11616] EXT4-fs (sda1): This should not happen!! Data will be lost [ 551.366380][T11616] [ 551.981732][T13700] ubi0: attaching mtd0 [ 552.012166][T13700] ubi0: scanning is finished [ 552.045005][T13700] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 552.329117][T13700] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 553.768102][T13735] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 555.571400][T13760] FAULT_INJECTION: forcing a failure. [ 555.571400][T13760] name failslab, interval 1, probability 0, space 0, times 0 [ 555.601562][T13760] CPU: 1 UID: 0 PID: 13760 Comm: syz.0.1593 Not tainted syzkaller #0 PREEMPT(full) [ 555.601603][T13760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 555.601621][T13760] Call Trace: [ 555.601631][T13760] [ 555.601642][T13760] dump_stack_lvl+0x100/0x190 [ 555.601680][T13760] should_fail_ex.cold+0x5/0xa [ 555.601719][T13760] should_failslab+0xc2/0x120 [ 555.601754][T13760] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 555.601800][T13760] ? __d_alloc+0x34/0xa40 [ 555.601847][T13760] __d_alloc+0x34/0xa40 [ 555.601889][T13760] d_alloc+0x4a/0x1e0 [ 555.601929][T13760] lookup_one_qstr_excl+0x171/0x250 [ 555.601978][T13760] start_dirop+0x59/0xb0 [ 555.602010][T13760] simple_start_creating+0xf9/0x110 [ 555.602046][T13760] ? __pfx_simple_start_creating+0x10/0x10 [ 555.602090][T13760] nfsd_fill_super+0x1c9/0x560 [ 555.602138][T13760] ? __pfx_nfsd_fill_super+0x10/0x10 [ 555.602182][T13760] get_tree_keyed+0x10e/0x1d0 [ 555.602217][T13760] vfs_get_tree+0x92/0x320 [ 555.602244][T13760] path_mount+0x7d0/0x23d0 [ 555.602290][T13760] ? __pfx_path_mount+0x10/0x10 [ 555.602327][T13760] ? lockdep_hardirqs_on+0x78/0x100 [ 555.602371][T13760] ? putname+0xb1/0x110 [ 555.602407][T13760] ? kmem_cache_free+0x127/0x6c0 [ 555.602467][T13760] ? __x64_sys_mount+0x293/0x310 [ 555.602513][T13760] __x64_sys_mount+0x293/0x310 [ 555.602554][T13760] ? __pfx___x64_sys_mount+0x10/0x10 [ 555.602600][T13760] ? rcu_is_watching+0x12/0xc0 [ 555.602639][T13760] do_syscall_64+0x115/0x840 [ 555.602677][T13760] ? clear_bhb_loop+0x40/0x90 [ 555.602712][T13760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.602740][T13760] RIP: 0033:0x7f8dca99ce59 [ 555.602765][T13760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.602792][T13760] RSP: 002b:00007f8dcb922028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 555.602820][T13760] RAX: ffffffffffffffda RBX: 00007f8dcac15fa0 RCX: 00007f8dca99ce59 [ 555.602839][T13760] RDX: 0000200000000200 RSI: 00002000000000c0 RDI: 0000000000000000 [ 555.602857][T13760] RBP: 00007f8dcaa32d6f R08: 0000000000000000 R09: 0000000000000000 [ 555.602874][T13760] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 555.602890][T13760] R13: 00007f8dcac16038 R14: 00007f8dcac15fa0 R15: 00007fff9a3f0548 [ 555.602930][T13760] [ 556.187769][T13773] ubi0: attaching mtd0 [ 556.195576][T13773] ubi0: scanning is finished [ 556.218521][T13773] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 556.438982][T13777] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1595'. [ 556.517356][T13773] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 557.354011][T13808] ubi0: attaching mtd0 [ 557.361440][T13808] ubi0: scanning is finished [ 557.386159][T13808] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 557.811330][T13808] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 558.985397][T13833] FAULT_INJECTION: forcing a failure. [ 558.985397][T13833] name failslab, interval 1, probability 0, space 0, times 0 [ 559.088303][T13833] CPU: 1 UID: 0 PID: 13833 Comm: syz.2.1604 Not tainted syzkaller #0 PREEMPT(full) [ 559.088343][T13833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 559.088360][T13833] Call Trace: [ 559.088369][T13833] [ 559.088379][T13833] dump_stack_lvl+0x100/0x190 [ 559.088415][T13833] should_fail_ex.cold+0x5/0xa [ 559.088449][T13833] ? __pfx_nfsd_fill_super+0x10/0x10 [ 559.088495][T13833] should_failslab+0xc2/0x120 [ 559.088531][T13833] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 559.088579][T13833] ? alloc_inode+0x183/0x250 [ 559.088629][T13833] ? __pfx_nfsd_fill_super+0x10/0x10 [ 559.088674][T13833] alloc_inode+0x183/0x250 [ 559.088718][T13833] new_inode+0x22/0x1c0 [ 559.088763][T13833] ? __pfx_nfsd_fill_super+0x10/0x10 [ 559.088807][T13833] nfsd_fill_super+0x145/0x560 [ 559.088855][T13833] ? __pfx_nfsd_fill_super+0x10/0x10 [ 559.088900][T13833] get_tree_keyed+0x10e/0x1d0 [ 559.088934][T13833] vfs_get_tree+0x92/0x320 [ 559.088963][T13833] path_mount+0x7d0/0x23d0 [ 559.089013][T13833] ? __pfx_path_mount+0x10/0x10 [ 559.089051][T13833] ? lockdep_hardirqs_on+0x78/0x100 [ 559.089097][T13833] ? putname+0xb1/0x110 [ 559.089132][T13833] ? kmem_cache_free+0x127/0x6c0 [ 559.089188][T13833] ? __x64_sys_mount+0x293/0x310 [ 559.089227][T13833] __x64_sys_mount+0x293/0x310 [ 559.089286][T13833] ? __pfx___x64_sys_mount+0x10/0x10 [ 559.089332][T13833] ? rcu_is_watching+0x12/0xc0 [ 559.089370][T13833] do_syscall_64+0x115/0x840 [ 559.089409][T13833] ? clear_bhb_loop+0x40/0x90 [ 559.089444][T13833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.089474][T13833] RIP: 0033:0x7f81e5d9ce59 [ 559.089498][T13833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 559.089526][T13833] RSP: 002b:00007f81e6d2d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 559.089554][T13833] RAX: ffffffffffffffda RBX: 00007f81e6015fa0 RCX: 00007f81e5d9ce59 [ 559.089574][T13833] RDX: 0000200000000200 RSI: 00002000000000c0 RDI: 0000000000000000 [ 559.089592][T13833] RBP: 00007f81e5e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 559.089610][T13833] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 559.089627][T13833] R13: 00007f81e6016038 R14: 00007f81e6015fa0 R15: 00007fff7b840688 [ 559.089667][T13833] [ 559.815807][T13839] FAULT_INJECTION: forcing a failure. [ 559.815807][T13839] name failslab, interval 1, probability 0, space 0, times 0 [ 559.867195][T13839] CPU: 0 UID: 0 PID: 13839 Comm: syz.2.1607 Not tainted syzkaller #0 PREEMPT(full) [ 559.867235][T13839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 559.867251][T13839] Call Trace: [ 559.867259][T13839] [ 559.867269][T13839] dump_stack_lvl+0x100/0x190 [ 559.867319][T13839] should_fail_ex.cold+0x5/0xa [ 559.867357][T13839] should_failslab+0xc2/0x120 [ 559.867390][T13839] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 559.867434][T13839] ? __d_alloc+0x34/0xa40 [ 559.867480][T13839] __d_alloc+0x34/0xa40 [ 559.867523][T13839] d_alloc+0x4a/0x1e0 [ 559.867563][T13839] lookup_one_qstr_excl+0x171/0x250 [ 559.867610][T13839] start_dirop+0x59/0xb0 [ 559.867645][T13839] simple_start_creating+0xf9/0x110 [ 559.867680][T13839] ? __pfx_simple_start_creating+0x10/0x10 [ 559.867725][T13839] nfsd_fill_super+0x1c9/0x560 [ 559.867773][T13839] ? __pfx_nfsd_fill_super+0x10/0x10 [ 559.867811][T13839] get_tree_keyed+0x10e/0x1d0 [ 559.867841][T13839] vfs_get_tree+0x92/0x320 [ 559.867867][T13839] path_mount+0x7d0/0x23d0 [ 559.867911][T13839] ? __pfx_path_mount+0x10/0x10 [ 559.867948][T13839] ? lockdep_hardirqs_on+0x78/0x100 [ 559.867993][T13839] ? putname+0xb1/0x110 [ 559.868028][T13839] ? kmem_cache_free+0x127/0x6c0 [ 559.868079][T13839] ? __x64_sys_mount+0x293/0x310 [ 559.868117][T13839] __x64_sys_mount+0x293/0x310 [ 559.868158][T13839] ? __pfx___x64_sys_mount+0x10/0x10 [ 559.868202][T13839] ? rcu_is_watching+0x12/0xc0 [ 559.868241][T13839] do_syscall_64+0x115/0x840 [ 559.868279][T13839] ? clear_bhb_loop+0x40/0x90 [ 559.868323][T13839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.868349][T13839] RIP: 0033:0x7f81e5d9ce59 [ 559.868372][T13839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 559.868401][T13839] RSP: 002b:00007f81e6d2d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 559.868427][T13839] RAX: ffffffffffffffda RBX: 00007f81e6015fa0 RCX: 00007f81e5d9ce59 [ 559.868447][T13839] RDX: 0000200000000200 RSI: 00002000000000c0 RDI: 0000000000000000 [ 559.868465][T13839] RBP: 00007f81e5e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 559.868483][T13839] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 559.868499][T13839] R13: 00007f81e6016038 R14: 00007f81e6015fa0 R15: 00007fff7b840688 [ 559.868538][T13839] [ 560.720989][T13845] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880780049c0 pfn:0x78004 [ 560.753357][T13845] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 560.777801][T13845] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 560.817155][T13845] raw: ffff8880780049c0 0000000000000000 00000001ffffffff 0000000000000000 [ 560.875053][T13845] page dumped because: unmovable page [ 560.916501][T13845] page_owner tracks the page as allocated [ 560.981000][T13845] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x92cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC), pid 6288, tgid 6287 (syz.3.88), ts 126321445109, free_ts 126060314021 [ 561.098813][T13845] register_dummy_stack+0x74/0xb0 [ 561.121569][T13845] init_page_owner+0x42/0xa10 [ 561.130151][T13845] page_ext_init+0x71d/0x780 [ 561.149013][T13845] mm_core_init+0x229/0x270 [ 561.160240][T13845] page last free pid 6276 tgid 6275 stack trace: [ 561.179118][T13845] __free_frozen_pages+0x794/0x10a0 [ 561.188318][T13845] vhost_dev_free_iovecs+0xe6/0x2b0 [ 561.203934][T13845] vhost_dev_set_owner+0x821/0xa30 [ 561.218463][T13845] vhost_net_ioctl+0xfa3/0x1910 [ 561.231553][T13845] __x64_sys_ioctl+0x18e/0x210 [ 561.248472][T13845] do_syscall_64+0x115/0x840 [ 561.264369][T13845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.962925][T13855] can: request_module (can-proto-4) failed. [ 562.337600][T13861] random: crng reseeded on system resumption [ 562.566932][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.573401][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.163456][T13890] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 565.494708][T13914] ubi0: attaching mtd0 [ 565.535749][T13914] ubi0: scanning is finished [ 565.585876][T13914] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 565.883693][T13914] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 569.057601][T13960] ubi0: attaching mtd0 [ 569.067077][T13960] ubi0: scanning is finished [ 569.080050][T13960] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 569.331104][T13960] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 570.460340][T13977] ubi0: attaching mtd0 [ 570.471423][T13977] ubi0: scanning is finished [ 570.491041][T13977] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 570.754922][T13977] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 572.497334][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c7fec00: rx timeout, send abort [ 572.534787][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c7fec00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 573.875070][T14021] FAULT_INJECTION: forcing a failure. [ 573.875070][T14021] name failslab, interval 1, probability 0, space 0, times 0 [ 573.918888][T14021] CPU: 1 UID: 0 PID: 14021 Comm: syz.2.1643 Not tainted syzkaller #0 PREEMPT(full) [ 573.918926][T14021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 573.918943][T14021] Call Trace: [ 573.918952][T14021] [ 573.918962][T14021] dump_stack_lvl+0x100/0x190 [ 573.918997][T14021] should_fail_ex.cold+0x5/0xa [ 573.919034][T14021] should_failslab+0xc2/0x120 [ 573.919069][T14021] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 573.919115][T14021] ? alloc_inode+0x183/0x250 [ 573.919167][T14021] alloc_inode+0x183/0x250 [ 573.919211][T14021] new_inode+0x22/0x1c0 [ 573.919257][T14021] nfsd_mkdir+0x78/0x460 [ 573.919316][T14021] nfsd_fill_super+0x3f9/0x560 [ 573.919364][T14021] ? __pfx_nfsd_fill_super+0x10/0x10 [ 573.919410][T14021] get_tree_keyed+0x10e/0x1d0 [ 573.919444][T14021] vfs_get_tree+0x92/0x320 [ 573.919471][T14021] path_mount+0x7d0/0x23d0 [ 573.919513][T14021] ? __pfx_path_mount+0x10/0x10 [ 573.919544][T14021] ? lockdep_hardirqs_on+0x78/0x100 [ 573.919586][T14021] ? putname+0xb1/0x110 [ 573.919618][T14021] ? kmem_cache_free+0x127/0x6c0 [ 573.919667][T14021] ? __x64_sys_mount+0x293/0x310 [ 573.919701][T14021] __x64_sys_mount+0x293/0x310 [ 573.919739][T14021] ? __pfx___x64_sys_mount+0x10/0x10 [ 573.919781][T14021] ? rcu_is_watching+0x12/0xc0 [ 573.919816][T14021] do_syscall_64+0x115/0x840 [ 573.919852][T14021] ? clear_bhb_loop+0x40/0x90 [ 573.919888][T14021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.919917][T14021] RIP: 0033:0x7f81e5d9ce59 [ 573.919941][T14021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 573.919967][T14021] RSP: 002b:00007f81e6d2d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 573.919993][T14021] RAX: ffffffffffffffda RBX: 00007f81e6015fa0 RCX: 00007f81e5d9ce59 [ 573.920011][T14021] RDX: 0000200000000200 RSI: 00002000000000c0 RDI: 0000000000000000 [ 573.920028][T14021] RBP: 00007f81e5e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 573.920044][T14021] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 573.920058][T14021] R13: 00007f81e6016038 R14: 00007f81e6015fa0 R15: 00007fff7b840688 [ 573.920095][T14021] [ 574.645514][T14025] Process accounting paused [ 575.173768][T14036] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1646'. [ 575.412501][T14008] Process accounting paused [ 576.060527][T14046] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1648'. [ 576.082913][T14056] ubi0: attaching mtd0 [ 576.102015][T14056] ubi0: scanning is finished [ 576.118539][T14056] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 576.373685][T14056] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 577.982116][T14090] Process accounting resumed [ 578.181603][T14096] ubi0: attaching mtd0 [ 578.196612][T14096] ubi0: scanning is finished [ 578.218283][T14096] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 578.524475][T14096] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 578.891480][T14110] ubi0: attaching mtd0 [ 578.902137][T14110] ubi0: scanning is finished [ 578.917064][T14110] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 579.200366][T14110] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 580.238837][T14127] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1662'. [ 580.420133][T14117] Process accounting paused [ 580.874886][T14137] can: request_module (can-proto-4) failed. [ 581.464237][T14155] ubi0: attaching mtd0 [ 581.478609][T14155] ubi0: scanning is finished [ 581.504887][T14155] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 581.774678][T14155] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 582.572777][T14180] ubi0: attaching mtd0 [ 582.585813][T14180] ubi0: scanning is finished [ 582.614683][T14180] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 582.806625][T14180] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 584.062735][T14208] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1677'. [ 585.281929][T14229] ubi0: attaching mtd0 [ 585.295415][T14229] ubi0: scanning is finished [ 585.321991][T14229] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 585.595406][T14229] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 587.148579][T14270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1693'. [ 588.150215][T14290] FAULT_INJECTION: forcing a failure. [ 588.150215][T14290] name failslab, interval 1, probability 0, space 0, times 0 [ 588.171978][T14290] CPU: 0 UID: 0 PID: 14290 Comm: syz.0.1697 Not tainted syzkaller #0 PREEMPT(full) [ 588.172016][T14290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 588.172034][T14290] Call Trace: [ 588.172043][T14290] [ 588.172054][T14290] dump_stack_lvl+0x100/0x190 [ 588.172089][T14290] should_fail_ex.cold+0x5/0xa [ 588.172125][T14290] ? __pfx_nfsd_fill_super+0x10/0x10 [ 588.172170][T14290] should_failslab+0xc2/0x120 [ 588.172205][T14290] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 588.172250][T14290] ? alloc_inode+0x183/0x250 [ 588.172294][T14290] ? __pfx_nfsd_fill_super+0x10/0x10 [ 588.172336][T14290] alloc_inode+0x183/0x250 [ 588.172377][T14290] new_inode+0x22/0x1c0 [ 588.172419][T14290] ? __pfx_nfsd_fill_super+0x10/0x10 [ 588.172460][T14290] nfsd_fill_super+0x145/0x560 [ 588.172503][T14290] ? __pfx_nfsd_fill_super+0x10/0x10 [ 588.172545][T14290] get_tree_keyed+0x10e/0x1d0 [ 588.172578][T14290] vfs_get_tree+0x92/0x320 [ 588.172614][T14290] path_mount+0x7d0/0x23d0 [ 588.172662][T14290] ? __pfx_path_mount+0x10/0x10 [ 588.172702][T14290] ? lockdep_hardirqs_on+0x78/0x100 [ 588.172748][T14290] ? putname+0xb1/0x110 [ 588.172784][T14290] ? kmem_cache_free+0x127/0x6c0 [ 588.172839][T14290] ? __x64_sys_mount+0x293/0x310 [ 588.172878][T14290] __x64_sys_mount+0x293/0x310 [ 588.172919][T14290] ? __pfx___x64_sys_mount+0x10/0x10 [ 588.172967][T14290] ? rcu_is_watching+0x12/0xc0 [ 588.173007][T14290] do_syscall_64+0x115/0x840 [ 588.173046][T14290] ? clear_bhb_loop+0x40/0x90 [ 588.173082][T14290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.173113][T14290] RIP: 0033:0x7f8dca99ce59 [ 588.173138][T14290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 588.173167][T14290] RSP: 002b:00007f8dcb922028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 588.173196][T14290] RAX: ffffffffffffffda RBX: 00007f8dcac15fa0 RCX: 00007f8dca99ce59 [ 588.173216][T14290] RDX: 0000200000000200 RSI: 00002000000000c0 RDI: 0000000000000000 [ 588.173234][T14290] RBP: 00007f8dcaa32d6f R08: 0000000000000000 R09: 0000000000000000 [ 588.173252][T14290] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 588.173269][T14290] R13: 00007f8dcac16038 R14: 00007f8dcac15fa0 R15: 00007fff9a3f0548 [ 588.173309][T14290] [ 589.096621][T14299] FAULT_INJECTION: forcing a failure. [ 589.096621][T14299] name failslab, interval 1, probability 0, space 0, times 0 [ 589.128770][T14299] CPU: 0 UID: 0 PID: 14299 Comm: syz.0.1699 Not tainted syzkaller #0 PREEMPT(full) [ 589.128812][T14299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 589.128831][T14299] Call Trace: [ 589.128841][T14299] [ 589.128852][T14299] dump_stack_lvl+0x100/0x190 [ 589.128891][T14299] should_fail_ex.cold+0x5/0xa [ 589.128930][T14299] should_failslab+0xc2/0x120 [ 589.128965][T14299] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 589.129011][T14299] ? __d_alloc+0x34/0xa40 [ 589.129057][T14299] __d_alloc+0x34/0xa40 [ 589.129103][T14299] d_alloc+0x4a/0x1e0 [ 589.129144][T14299] lookup_one_qstr_excl+0x171/0x250 [ 589.129192][T14299] start_dirop+0x59/0xb0 [ 589.129222][T14299] simple_start_creating+0xf9/0x110 [ 589.129272][T14299] ? __pfx_simple_start_creating+0x10/0x10 [ 589.129320][T14299] nfsd_fill_super+0x1c9/0x560 [ 589.129370][T14299] ? __pfx_nfsd_fill_super+0x10/0x10 [ 589.129414][T14299] get_tree_keyed+0x10e/0x1d0 [ 589.129447][T14299] vfs_get_tree+0x92/0x320 [ 589.129475][T14299] path_mount+0x7d0/0x23d0 [ 589.129521][T14299] ? __pfx_path_mount+0x10/0x10 [ 589.129557][T14299] ? lockdep_hardirqs_on+0x78/0x100 [ 589.129602][T14299] ? putname+0xb1/0x110 [ 589.129636][T14299] ? kmem_cache_free+0x127/0x6c0 [ 589.129692][T14299] ? __x64_sys_mount+0x293/0x310 [ 589.129730][T14299] __x64_sys_mount+0x293/0x310 [ 589.129771][T14299] ? __pfx___x64_sys_mount+0x10/0x10 [ 589.129816][T14299] ? rcu_is_watching+0x12/0xc0 [ 589.129854][T14299] do_syscall_64+0x115/0x840 [ 589.129890][T14299] ? clear_bhb_loop+0x40/0x90 [ 589.129927][T14299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.129956][T14299] RIP: 0033:0x7f8dca99ce59 [ 589.129980][T14299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 589.130008][T14299] RSP: 002b:00007f8dcb922028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 589.130036][T14299] RAX: ffffffffffffffda RBX: 00007f8dcac15fa0 RCX: 00007f8dca99ce59 [ 589.130056][T14299] RDX: 0000200000000200 RSI: 00002000000000c0 RDI: 0000000000000000 [ 589.130074][T14299] RBP: 00007f8dcaa32d6f R08: 0000000000000000 R09: 0000000000000000 [ 589.130092][T14299] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 589.130108][T14299] R13: 00007f8dcac16038 R14: 00007f8dcac15fa0 R15: 00007fff9a3f0548 [ 589.130147][T14299] [ 590.935681][T14325] FAULT_INJECTION: forcing a failure. [ 590.935681][T14325] name failslab, interval 1, probability 0, space 0, times 0 [ 590.968565][T14325] CPU: 1 UID: 0 PID: 14325 Comm: syz.1.1705 Not tainted syzkaller #0 PREEMPT(full) [ 590.968605][T14325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 590.968622][T14325] Call Trace: [ 590.968631][T14325] [ 590.968642][T14325] dump_stack_lvl+0x100/0x190 [ 590.968678][T14325] should_fail_ex.cold+0x5/0xa [ 590.968716][T14325] should_failslab+0xc2/0x120 [ 590.968752][T14325] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 590.968798][T14325] ? alloc_inode+0x183/0x250 [ 590.968851][T14325] alloc_inode+0x183/0x250 [ 590.968894][T14325] new_inode+0x22/0x1c0 [ 590.968941][T14325] nfsd_mkdir+0x78/0x460 [ 590.968995][T14325] nfsd_fill_super+0x3f9/0x560 [ 590.969042][T14325] ? __pfx_nfsd_fill_super+0x10/0x10 [ 590.969087][T14325] get_tree_keyed+0x10e/0x1d0 [ 590.969118][T14325] vfs_get_tree+0x92/0x320 [ 590.969160][T14325] path_mount+0x7d0/0x23d0 [ 590.969199][T14325] ? __pfx_path_mount+0x10/0x10 [ 590.969228][T14325] ? lockdep_hardirqs_on+0x78/0x100 [ 590.969270][T14325] ? putname+0xb1/0x110 [ 590.969303][T14325] ? kmem_cache_free+0x127/0x6c0 [ 590.969355][T14325] ? __x64_sys_mount+0x293/0x310 [ 590.969391][T14325] __x64_sys_mount+0x293/0x310 [ 590.969439][T14325] ? __pfx___x64_sys_mount+0x10/0x10 [ 590.969489][T14325] ? rcu_is_watching+0x12/0xc0 [ 590.969526][T14325] do_syscall_64+0x115/0x840 [ 590.969566][T14325] ? clear_bhb_loop+0x40/0x90 [ 590.969607][T14325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.969637][T14325] RIP: 0033:0x7efea8f9ce59 [ 590.969662][T14325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 590.969690][T14325] RSP: 002b:00007efea9e54028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 590.969719][T14325] RAX: ffffffffffffffda RBX: 00007efea9215fa0 RCX: 00007efea8f9ce59 [ 590.969738][T14325] RDX: 0000200000000200 RSI: 00002000000000c0 RDI: 0000000000000000 [ 590.969756][T14325] RBP: 00007efea9032d6f R08: 0000000000000000 R09: 0000000000000000 [ 590.969773][T14325] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 590.969789][T14325] R13: 00007efea9216038 R14: 00007efea9215fa0 R15: 00007fff5fd84de8 [ 590.969829][T14325] [ 591.566915][T14331] smpboot: CPU 1 is now offline [ 591.800814][T14338] FAULT_INJECTION: forcing a failure. [ 591.800814][T14338] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 591.822347][T14340] FAULT_INJECTION: forcing a failure. [ 591.822347][T14340] name failslab, interval 1, probability 0, space 0, times 0 syzkaller syzkaller login: [ 591.860885][T14338] CPU: 0 UID: 0 PID: 14338 Comm: syz.0.1717 Not tainted syzkaller #0 PREEMPT(full) [ 591.860916][T14338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 591.860925][T14338] Call Trace: [ 591.860930][T14338] [ 591.860936][T14338] dump_stack_lvl+0x100/0x190 [ 591.860957][T14338] should_fail_ex.cold+0x5/0xa [ 591.860975][T14338] ? prepare_alloc_pages+0x16d/0x5f0 [ 591.860997][T14338] should_fail_alloc_page+0xeb/0x140 [ 591.861016][T14338] prepare_alloc_pages+0x1f0/0x5f0 [ 591.861037][T14338] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 591.861062][T14338] ? write_profile+0xb1/0x150 [ 591.861092][T14338] ? __lock_acquire+0x4a5/0x2630 [ 591.861114][T14338] ? __css_rstat_updated+0x1ce/0x5a0 [ 591.861138][T14338] ? __pfx___css_rstat_updated+0x10/0x10 [ 591.861161][T14338] ? xas_create+0x1f4/0x14e0 [ 591.861182][T14338] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 591.861208][T14338] ? rcu_is_watching+0x12/0xc0 [ 591.861225][T14338] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 591.861252][T14338] ? find_held_lock+0x2b/0x80 [ 591.861274][T14338] ? __lock_acquire+0x4a5/0x2630 [ 591.861296][T14338] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 591.861317][T14338] ? policy_nodemask+0xed/0x4f0 [ 591.861336][T14338] alloc_pages_mpol+0x1fb/0x540 [ 591.861354][T14338] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 591.861371][T14338] ? filemap_get_entry+0x22d/0x450 [ 591.861385][T14338] ? filemap_get_entry+0x22d/0x450 [ 591.861402][T14338] folio_alloc_noprof+0x22/0x250 [ 591.861422][T14338] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 591.861445][T14338] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 591.861467][T14338] ? rcu_is_watching+0x12/0xc0 [ 591.861485][T14338] __filemap_get_folio_mpol+0x6a4/0xe70 [ 591.861506][T14338] ioctx_alloc+0x7e1/0x21a0 [ 591.861533][T14338] ? __pfx_ioctx_alloc+0x10/0x10 [ 591.861558][T14338] __x64_sys_io_setup+0xc9/0x220 [ 591.861580][T14338] do_syscall_64+0x115/0x840 [ 591.861608][T14338] ? clear_bhb_loop+0x40/0x90 [ 591.861628][T14338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.861643][T14338] RIP: 0033:0x7f8dca99ce59 [ 591.861657][T14338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 591.861671][T14338] RSP: 002b:00007f8dcb922028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 591.861686][T14338] RAX: ffffffffffffffda RBX: 00007f8dcac15fa0 RCX: 00007f8dca99ce59 [ 591.861696][T14338] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000401 [ 591.861705][T14338] RBP: 00007f8dcaa32d6f R08: 0000000000000000 R09: 0000000000000000 [ 591.861713][T14338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 591.861722][T14338] R13: 00007f8dcac16038 R14: 00007f8dcac15fa0 R15: 00007fff9a3f0548 [ 591.861742][T14338] [ 592.429416][T14340] CPU: 0 UID: 0 PID: 14340 Comm: syz.3.1709 Not tainted syzkaller #0 PREEMPT(full) [ 592.429440][T14340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 592.429449][T14340] Call Trace: [ 592.429455][T14340] [ 592.429460][T14340] dump_stack_lvl+0x100/0x190 [ 592.429481][T14340] should_fail_ex.cold+0x5/0xa [ 592.429501][T14340] should_failslab+0xc2/0x120 [ 592.429520][T14340] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 592.429543][T14340] ? security_inode_alloc+0x3b/0x2c0 [ 592.429559][T14340] ? lockdep_init_map_type+0x5c/0x250 [ 592.429585][T14340] security_inode_alloc+0x3b/0x2c0 [ 592.429603][T14340] inode_init_always_gfp+0xc77/0xfb0 [ 592.429624][T14340] alloc_inode+0x8e/0x250 [ 592.429646][T14340] new_inode+0x22/0x1c0 [ 592.429668][T14340] nfsd_mkdir+0x78/0x460 [ 592.429693][T14340] nfsd_fill_super+0x3f9/0x560 [ 592.429716][T14340] ? __pfx_nfsd_fill_super+0x10/0x10 [ 592.429738][T14340] get_tree_keyed+0x10e/0x1d0 [ 592.429756][T14340] vfs_get_tree+0x92/0x320 [ 592.429770][T14340] path_mount+0x7d0/0x23d0 [ 592.429793][T14340] ? __pfx_path_mount+0x10/0x10 [ 592.429811][T14340] ? lockdep_hardirqs_on+0x78/0x100 [ 592.429833][T14340] ? putname+0xb1/0x110 [ 592.429851][T14340] ? kmem_cache_free+0x127/0x6c0 [ 592.429878][T14340] ? __x64_sys_mount+0x293/0x310 [ 592.429897][T14340] __x64_sys_mount+0x293/0x310 [ 592.429918][T14340] ? __pfx___x64_sys_mount+0x10/0x10 [ 592.429940][T14340] ? rcu_is_watching+0x12/0xc0 [ 592.429959][T14340] do_syscall_64+0x115/0x840 [ 592.429978][T14340] ? clear_bhb_loop+0x40/0x90 [ 592.429996][T14340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.430010][T14340] RIP: 0033:0x7fa68639ce59 [ 592.430023][T14340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.430037][T14340] RSP: 002b:00007fa6871a0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 592.430052][T14340] RAX: ffffffffffffffda RBX: 00007fa686615fa0 RCX: 00007fa68639ce59 [ 592.430062][T14340] RDX: 0000200000000200 RSI: 00002000000000c0 RDI: 0000000000000000 [ 592.430071][T14340] RBP: 00007fa686432d6f R08: 0000000000000000 R09: 0000000000000000 [ 592.430080][T14340] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 592.430088][T14340] R13: 00007fa686616038 R14: 00007fa686615fa0 R15: 00007ffc137988f8 [ 592.430119][T14340] [ 593.891532][T14353] ubi0: attaching mtd0 [ 593.924478][T14353] ubi0: scanning is finished [ 593.948733][T14353] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 594.166986][T14353] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 594.247112][T14361] ubi0: attaching mtd0 [ 594.267028][T14361] ubi0: scanning is finished [ 594.282416][T14361] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 594.413384][T14361] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 595.166224][T14379] FAULT_INJECTION: forcing a failure. [ 595.166224][T14379] name failslab, interval 1, probability 0, space 0, times 0 [ 595.220774][T14379] CPU: 0 UID: 0 PID: 14379 Comm: syz.3.1716 Not tainted syzkaller #0 PREEMPT(full) [ 595.220796][T14379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 595.220805][T14379] Call Trace: [ 595.220811][T14379] [ 595.220817][T14379] dump_stack_lvl+0x100/0x190 [ 595.220838][T14379] should_fail_ex.cold+0x5/0xa [ 595.220858][T14379] should_failslab+0xc2/0x120 [ 595.220887][T14379] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 595.220911][T14379] ? security_inode_alloc+0x3b/0x2c0 [ 595.220928][T14379] ? lockdep_init_map_type+0x5c/0x250 [ 595.220953][T14379] security_inode_alloc+0x3b/0x2c0 [ 595.220970][T14379] inode_init_always_gfp+0xc77/0xfb0 [ 595.220991][T14379] alloc_inode+0x8e/0x250 [ 595.221013][T14379] new_inode+0x22/0x1c0 [ 595.221033][T14379] ? dput.part.0+0xdd/0x570 [ 595.221055][T14379] simple_fill_super+0x2d9/0x680 [ 595.221076][T14379] ? __pfx_nfsd_fill_super+0x10/0x10 [ 595.221100][T14379] nfsd_fill_super+0x98/0x560 [ 595.221121][T14379] ? __pfx_set_anon_super_fc+0x10/0x10 [ 595.221136][T14379] ? __pfx_nfsd_fill_super+0x10/0x10 [ 595.221159][T14379] get_tree_keyed+0x10e/0x1d0 [ 595.221176][T14379] vfs_get_tree+0x92/0x320 [ 595.221191][T14379] path_mount+0x7d0/0x23d0 [ 595.221214][T14379] ? __pfx_path_mount+0x10/0x10 [ 595.221232][T14379] ? lockdep_hardirqs_on+0x78/0x100 [ 595.221255][T14379] ? putname+0xb1/0x110 [ 595.221273][T14379] ? kmem_cache_free+0x127/0x6c0 [ 595.221301][T14379] ? __x64_sys_mount+0x293/0x310 [ 595.221323][T14379] __x64_sys_mount+0x293/0x310 [ 595.221344][T14379] ? __pfx___x64_sys_mount+0x10/0x10 [ 595.221366][T14379] ? rcu_is_watching+0x12/0xc0 [ 595.221385][T14379] do_syscall_64+0x115/0x840 [ 595.221405][T14379] ? clear_bhb_loop+0x40/0x90 [ 595.221423][T14379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.221437][T14379] RIP: 0033:0x7fa68639ce59 [ 595.221450][T14379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 595.221465][T14379] RSP: 002b:00007fa6871a0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 595.221480][T14379] RAX: ffffffffffffffda RBX: 00007fa686615fa0 RCX: 00007fa68639ce59 [ 595.221490][T14379] RDX: 0000200000000200 RSI: 00002000000000c0 RDI: 0000000000000000 [ 595.221499][T14379] RBP: 00007fa686432d6f R08: 0000000000000000 R09: 0000000000000000 [ 595.221507][T14379] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 595.221516][T14379] R13: 00007fa686616038 R14: 00007fa686615fa0 R15: 00007ffc137988f8 [ 595.221535][T14379] [ 596.121095][T14388] zram: Cannot change disksize for initialized device [ 597.768045][T14420] ubi0: attaching mtd0 [ 597.813349][T14420] ubi0: scanning is finished [ 597.836703][T14420] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 597.941024][T14414] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1725'. [ 598.012079][T14420] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 599.861200][ T7582] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 600.882366][T14470] FAULT_INJECTION: forcing a failure. [ 600.882366][T14470] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 600.975061][T14470] CPU: 0 UID: 0 PID: 14470 Comm: syz.1.1737 Not tainted syzkaller #0 PREEMPT(full) [ 600.975084][T14470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 600.975093][T14470] Call Trace: [ 600.975098][T14470] [ 600.975104][T14470] dump_stack_lvl+0x100/0x190 [ 600.975125][T14470] should_fail_ex.cold+0x5/0xa [ 600.975141][T14470] ? prepare_alloc_pages+0x16d/0x5f0 [ 600.975164][T14470] should_fail_alloc_page+0xeb/0x140 [ 600.975183][T14470] prepare_alloc_pages+0x1f0/0x5f0 [ 600.975206][T14470] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 600.975231][T14470] ? kmem_cache_alloc_lru_noprof+0x297/0x6e0 [ 600.975257][T14470] ? __lock_acquire+0x4a5/0x2630 [ 600.975278][T14470] ? __css_rstat_updated+0x1ce/0x5a0 [ 600.975301][T14470] ? __pfx___css_rstat_updated+0x10/0x10 [ 600.975323][T14470] ? xas_create+0x1f4/0x14e0 [ 600.975343][T14470] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 600.975369][T14470] ? rcu_is_watching+0x12/0xc0 [ 600.975386][T14470] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 600.975409][T14470] ? find_held_lock+0x2b/0x80 [ 600.975432][T14470] ? __lock_acquire+0x4a5/0x2630 [ 600.975454][T14470] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 600.975476][T14470] ? policy_nodemask+0xed/0x4f0 [ 600.975494][T14470] alloc_pages_mpol+0x1fb/0x540 [ 600.975513][T14470] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 600.975539][T14470] ? filemap_get_entry+0x22d/0x450 [ 600.975554][T14470] ? filemap_get_entry+0x22d/0x450 [ 600.975572][T14470] folio_alloc_noprof+0x22/0x250 [ 600.975592][T14470] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 600.975615][T14470] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 600.975638][T14470] ? rcu_is_watching+0x12/0xc0 [ 600.975656][T14470] __filemap_get_folio_mpol+0x6a4/0xe70 [ 600.975677][T14470] ioctx_alloc+0x7e1/0x21a0 [ 600.975704][T14470] ? __pfx_ioctx_alloc+0x10/0x10 [ 600.975730][T14470] __x64_sys_io_setup+0xc9/0x220 [ 600.975751][T14470] do_syscall_64+0x115/0x840 [ 600.975771][T14470] ? clear_bhb_loop+0x40/0x90 [ 600.975789][T14470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.975804][T14470] RIP: 0033:0x7efea8f9ce59 [ 600.975818][T14470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.975832][T14470] RSP: 002b:00007efea9e54028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 600.975847][T14470] RAX: ffffffffffffffda RBX: 00007efea9215fa0 RCX: 00007efea8f9ce59 [ 600.975856][T14470] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000401 [ 600.975865][T14470] RBP: 00007efea9032d6f R08: 0000000000000000 R09: 0000000000000000 [ 600.975873][T14470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 600.975882][T14470] R13: 00007efea9216038 R14: 00007efea9215fa0 R15: 00007fff5fd84de8 [ 600.975902][T14470] [ 602.727781][T14494] ubi0: attaching mtd0 [ 602.747143][T14494] ubi0: scanning is finished [ 602.773577][T14494] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 602.950595][T14494] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 603.902569][T14517] FAULT_INJECTION: forcing a failure. [ 603.902569][T14517] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 603.973842][T14517] CPU: 0 UID: 0 PID: 14517 Comm: syz.3.1749 Not tainted syzkaller #0 PREEMPT(full) [ 603.973866][T14517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 603.973875][T14517] Call Trace: [ 603.973881][T14517] [ 603.973887][T14517] dump_stack_lvl+0x100/0x190 [ 603.973908][T14517] should_fail_ex.cold+0x5/0xa [ 603.973924][T14517] ? prepare_alloc_pages+0x16d/0x5f0 [ 603.973945][T14517] should_fail_alloc_page+0xeb/0x140 [ 603.973964][T14517] prepare_alloc_pages+0x1f0/0x5f0 [ 603.973986][T14517] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 603.974011][T14517] ? kmem_cache_alloc_lru_noprof+0x297/0x6e0 [ 603.974037][T14517] ? __lock_acquire+0x4a5/0x2630 [ 603.974060][T14517] ? __css_rstat_updated+0x1ce/0x5a0 [ 603.974082][T14517] ? __pfx___css_rstat_updated+0x10/0x10 [ 603.974108][T14517] ? xas_create+0x1f4/0x14e0 [ 603.974128][T14517] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 603.974156][T14517] ? rcu_is_watching+0x12/0xc0 [ 603.974173][T14517] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 603.974197][T14517] ? find_held_lock+0x2b/0x80 [ 603.974220][T14517] ? __lock_acquire+0x4a5/0x2630 [ 603.974241][T14517] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 603.974263][T14517] ? policy_nodemask+0xed/0x4f0 [ 603.974282][T14517] alloc_pages_mpol+0x1fb/0x540 [ 603.974299][T14517] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 603.974317][T14517] ? filemap_get_entry+0x22d/0x450 [ 603.974331][T14517] ? filemap_get_entry+0x22d/0x450 [ 603.974349][T14517] folio_alloc_noprof+0x22/0x250 [ 603.974369][T14517] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 603.974391][T14517] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 603.974414][T14517] ? rcu_is_watching+0x12/0xc0 [ 603.974432][T14517] __filemap_get_folio_mpol+0x6a4/0xe70 [ 603.974452][T14517] ioctx_alloc+0x7e1/0x21a0 [ 603.974480][T14517] ? __pfx_ioctx_alloc+0x10/0x10 [ 603.974505][T14517] __x64_sys_io_setup+0xc9/0x220 [ 603.974527][T14517] do_syscall_64+0x115/0x840 [ 603.974547][T14517] ? clear_bhb_loop+0x40/0x90 [ 603.974564][T14517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.974580][T14517] RIP: 0033:0x7fa68639ce59 [ 603.974594][T14517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 603.974608][T14517] RSP: 002b:00007fa6871a0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 603.974630][T14517] RAX: ffffffffffffffda RBX: 00007fa686615fa0 RCX: 00007fa68639ce59 [ 603.974641][T14517] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000401 [ 603.974650][T14517] RBP: 00007fa686432d6f R08: 0000000000000000 R09: 0000000000000000 [ 603.974659][T14517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 603.974668][T14517] R13: 00007fa686616038 R14: 00007fa686615fa0 R15: 00007ffc137988f8 [ 603.974689][T14517] [ 605.189268][T14542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1754'. [ 605.477778][T14523] Process accounting resumed [ 605.690682][T14554] FAULT_INJECTION: forcing a failure. [ 605.690682][T14554] name failslab, interval 1, probability 0, space 0, times 0 [ 605.789141][T14554] CPU: 0 UID: 0 PID: 14554 Comm: syz.1.1757 Not tainted syzkaller #0 PREEMPT(full) [ 605.789165][T14554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 605.789176][T14554] Call Trace: [ 605.789197][T14554] [ 605.789204][T14554] dump_stack_lvl+0x100/0x190 [ 605.789226][T14554] should_fail_ex.cold+0x5/0xa [ 605.789247][T14554] should_failslab+0xc2/0x120 [ 605.789266][T14554] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 605.789289][T14554] ? security_inode_alloc+0x3b/0x2c0 [ 605.789306][T14554] ? lockdep_init_map_type+0x5c/0x250 [ 605.789332][T14554] security_inode_alloc+0x3b/0x2c0 [ 605.789349][T14554] inode_init_always_gfp+0xc77/0xfb0 [ 605.789370][T14554] alloc_inode+0x8e/0x250 [ 605.789398][T14554] new_inode+0x22/0x1c0 [ 605.789421][T14554] nfsd_mkdir+0x78/0x460 [ 605.789448][T14554] nfsd_fill_super+0x3f9/0x560 [ 605.789480][T14554] ? __pfx_nfsd_fill_super+0x10/0x10 [ 605.789505][T14554] get_tree_keyed+0x10e/0x1d0 [ 605.789523][T14554] vfs_get_tree+0x92/0x320 [ 605.789538][T14554] path_mount+0x7d0/0x23d0 [ 605.789563][T14554] ? __pfx_path_mount+0x10/0x10 [ 605.789581][T14554] ? lockdep_hardirqs_on+0x78/0x100 [ 605.789603][T14554] ? putname+0xb1/0x110 [ 605.789621][T14554] ? kmem_cache_free+0x127/0x6c0 [ 605.789651][T14554] ? __x64_sys_mount+0x293/0x310 [ 605.789671][T14554] __x64_sys_mount+0x293/0x310 [ 605.789691][T14554] ? __pfx___x64_sys_mount+0x10/0x10 [ 605.789713][T14554] ? rcu_is_watching+0x12/0xc0 [ 605.789732][T14554] do_syscall_64+0x115/0x840 [ 605.789752][T14554] ? clear_bhb_loop+0x40/0x90 [ 605.789770][T14554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.789785][T14554] RIP: 0033:0x7efea8f9ce59 [ 605.789798][T14554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 605.789813][T14554] RSP: 002b:00007efea9e54028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 605.789828][T14554] RAX: ffffffffffffffda RBX: 00007efea9215fa0 RCX: 00007efea8f9ce59 [ 605.789839][T14554] RDX: 0000200000000200 RSI: 00002000000000c0 RDI: 0000000000000000 [ 605.789849][T14554] RBP: 00007efea9032d6f R08: 0000000000000000 R09: 0000000000000000 [ 605.789858][T14554] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 605.789866][T14554] R13: 00007efea9216038 R14: 00007efea9215fa0 R15: 00007fff5fd84de8 [ 605.789886][T14554] [ 606.703562][T14561] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 607.398738][T14576] FAULT_INJECTION: forcing a failure. [ 607.398738][T14576] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 607.419769][T14576] CPU: 0 UID: 0 PID: 14576 Comm: syz.3.1761 Not tainted syzkaller #0 PREEMPT(full) [ 607.419810][T14576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 607.419828][T14576] Call Trace: [ 607.419836][T14576] [ 607.419847][T14576] dump_stack_lvl+0x100/0x190 [ 607.419884][T14576] should_fail_ex.cold+0x5/0xa [ 607.419916][T14576] ? prepare_alloc_pages+0x16d/0x5f0 [ 607.419959][T14576] should_fail_alloc_page+0xeb/0x140 [ 607.419993][T14576] prepare_alloc_pages+0x1f0/0x5f0 [ 607.420033][T14576] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 607.420100][T14576] ? __lock_acquire+0x4a5/0x2630 [ 607.420143][T14576] ? __css_rstat_updated+0x1ce/0x5a0 [ 607.420183][T14576] ? __pfx___css_rstat_updated+0x10/0x10 [ 607.420227][T14576] ? xas_create+0x1f4/0x14e0 [ 607.420264][T14576] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 607.420314][T14576] ? rcu_is_watching+0x12/0xc0 [ 607.420347][T14576] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 607.420394][T14576] ? find_held_lock+0x2b/0x80 [ 607.420439][T14576] ? __lock_acquire+0x4a5/0x2630 [ 607.420480][T14576] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 607.420517][T14576] ? policy_nodemask+0xed/0x4f0 [ 607.420548][T14576] alloc_pages_mpol+0x1fb/0x540 [ 607.420580][T14576] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 607.420613][T14576] ? filemap_get_entry+0x22d/0x450 [ 607.420640][T14576] ? filemap_get_entry+0x22d/0x450 [ 607.420673][T14576] folio_alloc_noprof+0x22/0x250 [ 607.420714][T14576] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 607.420758][T14576] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 607.420803][T14576] ? rcu_is_watching+0x12/0xc0 [ 607.420839][T14576] __filemap_get_folio_mpol+0x6a4/0xe70 [ 607.420877][T14576] ioctx_alloc+0x7e1/0x21a0 [ 607.420932][T14576] ? __pfx_ioctx_alloc+0x10/0x10 [ 607.420985][T14576] __x64_sys_io_setup+0xc9/0x220 [ 607.421029][T14576] do_syscall_64+0x115/0x840 [ 607.421080][T14576] ? clear_bhb_loop+0x40/0x90 [ 607.421116][T14576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.421145][T14576] RIP: 0033:0x7fa68639ce59 [ 607.421170][T14576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 607.421197][T14576] RSP: 002b:00007fa6871a0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 607.421224][T14576] RAX: ffffffffffffffda RBX: 00007fa686615fa0 RCX: 00007fa68639ce59 [ 607.421241][T14576] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000401 [ 607.421257][T14576] RBP: 00007fa686432d6f R08: 0000000000000000 R09: 0000000000000000 [ 607.421272][T14576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 607.421286][T14576] R13: 00007fa686616038 R14: 00007fa686615fa0 R15: 00007ffc137988f8 [ 607.421321][T14576] [ 608.136476][T14505] Process accounting resumed [ 608.459211][T14577] Process accounting paused [ 609.087966][T14597] FAULT_INJECTION: forcing a failure. [ 609.087966][T14597] name failslab, interval 1, probability 0, space 0, times 0 [ 609.141764][T14597] CPU: 0 UID: 0 PID: 14597 Comm: syz.1.1766 Not tainted syzkaller #0 PREEMPT(full) [ 609.141800][T14597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 609.141817][T14597] Call Trace: [ 609.141826][T14597] [ 609.141837][T14597] dump_stack_lvl+0x100/0x190 [ 609.141874][T14597] should_fail_ex.cold+0x5/0xa [ 609.141910][T14597] should_failslab+0xc2/0x120 [ 609.141943][T14597] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 609.141983][T14597] ? security_inode_alloc+0x3b/0x2c0 [ 609.142025][T14597] ? lockdep_init_map_type+0x5c/0x250 [ 609.142078][T14597] security_inode_alloc+0x3b/0x2c0 [ 609.142112][T14597] inode_init_always_gfp+0xc77/0xfb0 [ 609.142154][T14597] alloc_inode+0x8e/0x250 [ 609.142199][T14597] new_inode+0x22/0x1c0 [ 609.142245][T14597] nfsd_mkdir+0x78/0x460 [ 609.142293][T14597] nfsd_fill_super+0x3f9/0x560 [ 609.142341][T14597] ? __pfx_nfsd_fill_super+0x10/0x10 [ 609.142385][T14597] get_tree_keyed+0x10e/0x1d0 [ 609.142420][T14597] vfs_get_tree+0x92/0x320 [ 609.142448][T14597] path_mount+0x7d0/0x23d0 [ 609.142494][T14597] ? __pfx_path_mount+0x10/0x10 [ 609.142531][T14597] ? lockdep_hardirqs_on+0x78/0x100 [ 609.142577][T14597] ? putname+0xb1/0x110 [ 609.142613][T14597] ? kmem_cache_free+0x127/0x6c0 [ 609.142669][T14597] ? __x64_sys_mount+0x293/0x310 [ 609.142707][T14597] __x64_sys_mount+0x293/0x310 [ 609.142746][T14597] ? __pfx___x64_sys_mount+0x10/0x10 [ 609.142788][T14597] ? rcu_is_watching+0x12/0xc0 [ 609.142827][T14597] do_syscall_64+0x115/0x840 [ 609.142865][T14597] ? clear_bhb_loop+0x40/0x90 [ 609.142901][T14597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.142931][T14597] RIP: 0033:0x7efea8f9ce59 [ 609.142955][T14597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.142983][T14597] RSP: 002b:00007efea9e54028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 609.143019][T14597] RAX: ffffffffffffffda RBX: 00007efea9215fa0 RCX: 00007efea8f9ce59 [ 609.143039][T14597] RDX: 0000200000000200 RSI: 00002000000000c0 RDI: 0000000000000000 [ 609.143058][T14597] RBP: 00007efea9032d6f R08: 0000000000000000 R09: 0000000000000000 [ 609.143076][T14597] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 609.143093][T14597] R13: 00007efea9216038 R14: 00007efea9215fa0 R15: 00007fff5fd84de8 [ 609.143132][T14597] [ 609.884957][T14602] Process accounting resumed [ 609.983368][T14612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1769'. [ 610.034328][ T7582] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 610.587103][T14620] smpboot: CPU 1 is now offline [ 610.659325][T14623] FAULT_INJECTION: forcing a failure. [ 610.659325][T14623] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 610.724736][T14623] CPU: 0 UID: 0 PID: 14623 Comm: syz.2.1772 Not tainted syzkaller #0 PREEMPT(full) [ 610.724760][T14623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 610.724770][T14623] Call Trace: [ 610.724775][T14623] [ 610.724781][T14623] dump_stack_lvl+0x100/0x190 [ 610.724802][T14623] should_fail_ex.cold+0x5/0xa [ 610.724819][T14623] ? prepare_alloc_pages+0x16d/0x5f0 [ 610.724840][T14623] should_fail_alloc_page+0xeb/0x140 [ 610.724863][T14623] prepare_alloc_pages+0x1f0/0x5f0 [ 610.724892][T14623] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 610.724917][T14623] ? kmem_cache_alloc_lru_noprof+0x297/0x6e0 [ 610.724944][T14623] ? __lock_acquire+0x4a5/0x2630 [ 610.724966][T14623] ? __css_rstat_updated+0x1ce/0x5a0 [ 610.724989][T14623] ? __pfx___css_rstat_updated+0x10/0x10 [ 610.725011][T14623] ? xas_create+0x1f4/0x14e0 [ 610.725032][T14623] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 610.725058][T14623] ? rcu_is_watching+0x12/0xc0 [ 610.725076][T14623] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 610.725101][T14623] ? find_held_lock+0x2b/0x80 [ 610.725124][T14623] ? __lock_acquire+0x4a5/0x2630 [ 610.725146][T14623] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 610.725168][T14623] ? policy_nodemask+0xed/0x4f0 [ 610.725187][T14623] alloc_pages_mpol+0x1fb/0x540 [ 610.725206][T14623] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 610.725223][T14623] ? filemap_get_entry+0x22d/0x450 [ 610.725238][T14623] ? filemap_get_entry+0x22d/0x450 [ 610.725255][T14623] folio_alloc_noprof+0x22/0x250 [ 610.725276][T14623] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 610.725299][T14623] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 610.725322][T14623] ? rcu_is_watching+0x12/0xc0 [ 610.725341][T14623] __filemap_get_folio_mpol+0x6a4/0xe70 [ 610.725361][T14623] ioctx_alloc+0x7e1/0x21a0 [ 610.725390][T14623] ? __pfx_ioctx_alloc+0x10/0x10 [ 610.725415][T14623] __x64_sys_io_setup+0xc9/0x220 [ 610.725437][T14623] do_syscall_64+0x115/0x840 [ 610.725457][T14623] ? clear_bhb_loop+0x40/0x90 [ 610.725476][T14623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.725491][T14623] RIP: 0033:0x7f81e5d9ce59 [ 610.725504][T14623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 610.725520][T14623] RSP: 002b:00007f81e6d2d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 610.725535][T14623] RAX: ffffffffffffffda RBX: 00007f81e6015fa0 RCX: 00007f81e5d9ce59 [ 610.725545][T14623] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000401 [ 610.725554][T14623] RBP: 00007f81e5e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 610.725564][T14623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 610.725574][T14623] R13: 00007f81e6016038 R14: 00007f81e6015fa0 R15: 00007fff7b840688 [ 610.725595][T14623] [ 612.049832][ T7582] Bluetooth: hci3: command 0x2016 tx timeout [ 613.129426][T14645] FAULT_INJECTION: forcing a failure. [ 613.129426][T14645] name failslab, interval 1, probability 0, space 0, times 0 [ 613.224165][T14645] CPU: 0 UID: 0 PID: 14645 Comm: syz.3.1777 Not tainted syzkaller #0 PREEMPT(full) [ 613.224189][T14645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 613.224200][T14645] Call Trace: [ 613.224205][T14645] [ 613.224211][T14645] dump_stack_lvl+0x100/0x190 [ 613.224232][T14645] should_fail_ex.cold+0x5/0xa [ 613.224253][T14645] should_failslab+0xc2/0x120 [ 613.224272][T14645] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 613.224295][T14645] ? alloc_inode+0x183/0x250 [ 613.224321][T14645] alloc_inode+0x183/0x250 [ 613.224343][T14645] new_inode+0x22/0x1c0 [ 613.224366][T14645] nfsd_mkdir+0x78/0x460 [ 613.224391][T14645] nfsd_fill_super+0x3f9/0x560 [ 613.224415][T14645] ? __pfx_nfsd_fill_super+0x10/0x10 [ 613.224438][T14645] get_tree_keyed+0x10e/0x1d0 [ 613.224456][T14645] vfs_get_tree+0x92/0x320 [ 613.224470][T14645] path_mount+0x7d0/0x23d0 [ 613.224494][T14645] ? __pfx_path_mount+0x10/0x10 [ 613.224512][T14645] ? lockdep_hardirqs_on+0x78/0x100 [ 613.224536][T14645] ? putname+0xb1/0x110 [ 613.224553][T14645] ? kmem_cache_free+0x127/0x6c0 [ 613.224580][T14645] ? __x64_sys_mount+0x293/0x310 [ 613.224599][T14645] __x64_sys_mount+0x293/0x310 [ 613.224621][T14645] ? __pfx___x64_sys_mount+0x10/0x10 [ 613.224643][T14645] ? rcu_is_watching+0x12/0xc0 [ 613.224662][T14645] do_syscall_64+0x115/0x840 [ 613.224681][T14645] ? clear_bhb_loop+0x40/0x90 [ 613.224699][T14645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.224714][T14645] RIP: 0033:0x7fa68639ce59 [ 613.224727][T14645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 613.224741][T14645] RSP: 002b:00007fa6871a0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 613.224762][T14645] RAX: ffffffffffffffda RBX: 00007fa686615fa0 RCX: 00007fa68639ce59 [ 613.224772][T14645] RDX: 0000200000000200 RSI: 00002000000000c0 RDI: 0000000000000000 [ 613.224782][T14645] RBP: 00007fa686432d6f R08: 0000000000000000 R09: 0000000000000000 [ 613.224791][T14645] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 613.224800][T14645] R13: 00007fa686616038 R14: 00007fa686615fa0 R15: 00007ffc137988f8 [ 613.224820][T14645] [ 614.116064][ T6816] Bluetooth: hci3: command 0x2016 tx timeout [ 616.061030][T14680] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 617.219433][T14699] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1786'. [ 617.422981][T14699] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1786'. [ 618.957495][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807939f000: rx timeout, send abort [ 618.970264][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807939f000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 620.881023][T14726] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 620.924242][T14726] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 620.940603][T14726] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 620.947007][T14726] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 622.190000][T14755] FAULT_INJECTION: forcing a failure. [ 622.190000][T14755] name fail_futex, interval 1, probability 0, space 0, times 0 [ 622.242669][T14755] CPU: 1 UID: 0 PID: 14755 Comm: syz.0.1796 Not tainted syzkaller #0 PREEMPT(full) [ 622.242708][T14755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 622.242726][T14755] Call Trace: [ 622.242735][T14755] [ 622.242746][T14755] dump_stack_lvl+0x100/0x190 [ 622.242781][T14755] should_fail_ex.cold+0x5/0xa [ 622.242818][T14755] get_futex_key+0x1d2/0x1510 [ 622.242869][T14755] ? __pfx_get_futex_key+0x10/0x10 [ 622.242911][T14755] ? futex_hash+0x2ad/0x370 [ 622.242957][T14755] ? futex_hash+0x141/0x370 [ 622.243005][T14755] futex_wake+0xea/0x530 [ 622.243043][T14755] ? __pfx_futex_wake+0x10/0x10 [ 622.243081][T14755] ? find_held_lock+0x2b/0x80 [ 622.243115][T14755] ? do_sys_openat2+0x1b4/0x1e0 [ 622.243165][T14755] do_futex+0x32b/0x350 [ 622.243195][T14755] ? __pfx_do_futex+0x10/0x10 [ 622.243234][T14755] __x64_sys_futex+0x34f/0x4d0 [ 622.243267][T14755] ? fdget_pos+0x2c0/0x380 [ 622.243302][T14755] ? __pfx___x64_sys_futex+0x10/0x10 [ 622.243330][T14755] ? ksys_write+0x1ac/0x250 [ 622.243362][T14755] ? __pfx_ksys_write+0x10/0x10 [ 622.243404][T14755] ? rcu_is_watching+0x12/0xc0 [ 622.243437][T14755] do_syscall_64+0x115/0x840 [ 622.243477][T14755] ? clear_bhb_loop+0x40/0x90 [ 622.243512][T14755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.243541][T14755] RIP: 0033:0x7f8dca99ce59 [ 622.243565][T14755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.243592][T14755] RSP: 002b:00007f8dcb8e00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 622.243618][T14755] RAX: ffffffffffffffda RBX: 00007f8dcac16188 RCX: 00007f8dca99ce59 [ 622.243637][T14755] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8dcac1618c [ 622.243655][T14755] RBP: 00007f8dcac16180 R08: 0000000000000001 R09: 0000000000000000 [ 622.243673][T14755] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 622.243690][T14755] R13: 00007f8dcac16218 R14: 00007fff9a3f0460 R15: 00007fff9a3f0548 [ 622.243729][T14755] [ 622.456702][ T7582] Bluetooth: hci0: command 0x0406 tx timeout [ 622.950448][ T6816] Bluetooth: hci2: command 0x0406 tx timeout [ 622.956689][ T6816] Bluetooth: hci1: command 0x0406 tx timeout [ 622.962952][ T7582] Bluetooth: hci3: command 0x2016 tx timeout [ 623.674755][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.684869][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.883221][T14781] FAULT_INJECTION: forcing a failure. [ 623.883221][T14781] name failslab, interval 1, probability 0, space 0, times 0 [ 623.909047][T14781] CPU: 1 UID: 0 PID: 14781 Comm: syz.3.1803 Not tainted syzkaller #0 PREEMPT(full) [ 623.909097][T14781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 623.909116][T14781] Call Trace: [ 623.909126][T14781] [ 623.909137][T14781] dump_stack_lvl+0x100/0x190 [ 623.909173][T14781] should_fail_ex.cold+0x5/0xa [ 623.909211][T14781] should_failslab+0xc2/0x120 [ 623.909246][T14781] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 623.909293][T14781] ? alloc_inode+0x183/0x250 [ 623.909345][T14781] alloc_inode+0x183/0x250 [ 623.909388][T14781] new_inode+0x22/0x1c0 [ 623.909438][T14781] nfsd_mkdir+0x78/0x460 [ 623.909487][T14781] nfsd_fill_super+0x3f9/0x560 [ 623.909537][T14781] ? __pfx_nfsd_fill_super+0x10/0x10 [ 623.909583][T14781] get_tree_keyed+0x10e/0x1d0 [ 623.909618][T14781] vfs_get_tree+0x92/0x320 [ 623.909646][T14781] path_mount+0x7d0/0x23d0 [ 623.909693][T14781] ? __pfx_path_mount+0x10/0x10 [ 623.909730][T14781] ? lockdep_hardirqs_on+0x78/0x100 [ 623.909775][T14781] ? putname+0xb1/0x110 [ 623.909810][T14781] ? kmem_cache_free+0x127/0x6c0 [ 623.909866][T14781] ? __x64_sys_mount+0x293/0x310 [ 623.909905][T14781] __x64_sys_mount+0x293/0x310 [ 623.909946][T14781] ? __pfx___x64_sys_mount+0x10/0x10 [ 623.909991][T14781] ? rcu_is_watching+0x12/0xc0 [ 623.910029][T14781] do_syscall_64+0x115/0x840 [ 623.910073][T14781] ? clear_bhb_loop+0x40/0x90 [ 623.910109][T14781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.910139][T14781] RIP: 0033:0x7fa68639ce59 [ 623.910162][T14781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 623.910191][T14781] RSP: 002b:00007fa6871a0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 623.910220][T14781] RAX: ffffffffffffffda RBX: 00007fa686615fa0 RCX: 00007fa68639ce59 [ 623.910240][T14781] RDX: 0000200000000200 RSI: 00002000000000c0 RDI: 0000000000000000 [ 623.910259][T14781] RBP: 00007fa686432d6f R08: 0000000000000000 R09: 0000000000000000 [ 623.910276][T14781] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 623.910293][T14781] R13: 00007fa686616038 R14: 00007fa686615fa0 R15: 00007ffc137988f8 [ 623.910332][T14781] [ 625.578364][T14833] FAULT_INJECTION: forcing a failure. [ 625.578364][T14833] name failslab, interval 1, probability 0, space 0, times 0 [ 625.635143][T14833] CPU: 1 UID: 0 PID: 14833 Comm: syz.0.1815 Not tainted syzkaller #0 PREEMPT(full) [ 625.635182][T14833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 625.635200][T14833] Call Trace: [ 625.635210][T14833] [ 625.635221][T14833] dump_stack_lvl+0x100/0x190 [ 625.635257][T14833] should_fail_ex.cold+0x5/0xa [ 625.635293][T14833] ? __pfx_nfsd_fill_super+0x10/0x10 [ 625.635340][T14833] should_failslab+0xc2/0x120 [ 625.635375][T14833] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 625.635422][T14833] ? alloc_inode+0x183/0x250 [ 625.635471][T14833] ? __pfx_nfsd_fill_super+0x10/0x10 [ 625.635516][T14833] alloc_inode+0x183/0x250 [ 625.635560][T14833] new_inode+0x22/0x1c0 [ 625.635603][T14833] ? __pfx_nfsd_fill_super+0x10/0x10 [ 625.635649][T14833] nfsd_fill_super+0x145/0x560 [ 625.635694][T14833] ? __pfx_nfsd_fill_super+0x10/0x10 [ 625.635738][T14833] get_tree_keyed+0x10e/0x1d0 [ 625.635774][T14833] vfs_get_tree+0x92/0x320 [ 625.635799][T14833] path_mount+0x7d0/0x23d0 [ 625.635841][T14833] ? __pfx_path_mount+0x10/0x10 [ 625.635884][T14833] ? lockdep_hardirqs_on+0x78/0x100 [ 625.635926][T14833] ? putname+0xb1/0x110 [ 625.635959][T14833] ? kmem_cache_free+0x127/0x6c0 [ 625.636016][T14833] ? __x64_sys_mount+0x293/0x310 [ 625.636053][T14833] __x64_sys_mount+0x293/0x310 [ 625.636093][T14833] ? __pfx___x64_sys_mount+0x10/0x10 [ 625.636136][T14833] ? rcu_is_watching+0x12/0xc0 [ 625.636173][T14833] do_syscall_64+0x115/0x840 [ 625.636212][T14833] ? clear_bhb_loop+0x40/0x90 [ 625.636248][T14833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.636277][T14833] RIP: 0033:0x7f8dca99ce59 [ 625.636300][T14833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.636328][T14833] RSP: 002b:00007f8dcb922028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 625.636355][T14833] RAX: ffffffffffffffda RBX: 00007f8dcac15fa0 RCX: 00007f8dca99ce59 [ 625.636375][T14833] RDX: 0000200000000200 RSI: 00002000000000c0 RDI: 0000000000000000 [ 625.636393][T14833] RBP: 00007f8dcaa32d6f R08: 0000000000000000 R09: 0000000000000000 [ 625.636410][T14833] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 625.636427][T14833] R13: 00007f8dcac16038 R14: 00007f8dcac15fa0 R15: 00007fff9a3f0548 [ 625.636466][T14833] [ 626.601697][T14859] smpboot: CPU 1 is now offline [ 626.735488][T14868] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1822'. [ 626.791786][T14852] FAULT_INJECTION: forcing a failure. [ 626.791786][T14852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 626.827686][T14868] FAULT_INJECTION: forcing a failure. [ 626.827686][T14868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 626.901335][T14852] CPU: 0 UID: 0 PID: 14852 Comm: syz.0.1817 Not tainted syzkaller #0 PREEMPT(full) [ 626.901357][T14852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 626.901366][T14852] Call Trace: [ 626.901371][T14852] [ 626.901376][T14852] dump_stack_lvl+0x100/0x190 [ 626.901396][T14852] should_fail_ex.cold+0x5/0xa [ 626.901415][T14852] _copy_from_user+0x2e/0xd0 [ 626.901437][T14852] copy_msghdr_from_user+0x9f/0x4f0 [ 626.901459][T14852] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 626.901482][T14852] ? rcu_is_watching+0x12/0xc0 [ 626.901498][T14852] ? ___sys_recvmsg+0x177/0x1a0 [ 626.901517][T14852] ? kfree+0x1dd/0x6c0 [ 626.901540][T14852] ___sys_recvmsg+0xdd/0x1a0 [ 626.901560][T14852] ? __pfx____sys_recvmsg+0x10/0x10 [ 626.901594][T14852] ? __pfx___might_resched+0x10/0x10 [ 626.901614][T14852] do_recvmmsg+0x301/0x760 [ 626.901637][T14852] ? __pfx_do_recvmmsg+0x10/0x10 [ 626.901660][T14852] ? ksys_write+0x190/0x250 [ 626.901681][T14852] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 626.901703][T14852] ? kernel_write+0x643/0x6c0 [ 626.901724][T14852] ? __fget_files+0x21f/0x3d0 [ 626.901745][T14852] __x64_sys_recvmmsg+0x22a/0x280 [ 626.901763][T14852] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 626.901783][T14852] ? rcu_is_watching+0x12/0xc0 [ 626.901802][T14852] do_syscall_64+0x115/0x840 [ 626.901822][T14852] ? clear_bhb_loop+0x40/0x90 [ 626.901840][T14852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.901854][T14852] RIP: 0033:0x7f8dca99ce59 [ 626.901867][T14852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 626.901881][T14852] RSP: 002b:00007f8dcb922028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 626.901896][T14852] RAX: ffffffffffffffda RBX: 00007f8dcac15fa0 RCX: 00007f8dca99ce59 [ 626.901905][T14852] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 626.901913][T14852] RBP: 00007f8dcb922090 R08: 0000000000000000 R09: 0000000000000000 [ 626.901922][T14852] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000001 [ 626.901931][T14852] R13: 00007f8dcac16038 R14: 00007f8dcac15fa0 R15: 00007fff9a3f0548 [ 626.901949][T14852] [ 627.149659][T14868] CPU: 0 UID: 0 PID: 14868 Comm: syz.2.1822 Not tainted syzkaller #0 PREEMPT(full) [ 627.149681][T14868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 627.149690][T14868] Call Trace: [ 627.149695][T14868] [ 627.149701][T14868] dump_stack_lvl+0x100/0x190 [ 627.149721][T14868] should_fail_ex.cold+0x5/0xa [ 627.149749][T14868] _copy_to_user+0x32/0xd0 [ 627.149772][T14868] simple_read_from_buffer+0xcb/0x170 [ 627.149792][T14868] proc_fail_nth_read+0x1af/0x230 [ 627.149815][T14868] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 627.149839][T14868] ? rw_verify_area+0xce/0x6d0 [ 627.149853][T14868] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 627.149876][T14868] vfs_read+0x1e4/0xb30 [ 627.149895][T14868] ? __pfx_vfs_read+0x10/0x10 [ 627.149911][T14868] ? __fget_files+0x215/0x3d0 [ 627.149933][T14868] ? __fget_files+0x21f/0x3d0 [ 627.149955][T14868] ksys_read+0x12a/0x250 [ 627.149971][T14868] ? __pfx_ksys_read+0x10/0x10 [ 627.149992][T14868] ? rcu_is_watching+0x12/0xc0 [ 627.150012][T14868] do_syscall_64+0x115/0x840 [ 627.150032][T14868] ? clear_bhb_loop+0x40/0x90 [ 627.150050][T14868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.150065][T14868] RIP: 0033:0x7f81e5d5d68e [ 627.150078][T14868] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 627.150092][T14868] RSP: 002b:00007f81e6d2cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 627.150107][T14868] RAX: ffffffffffffffda RBX: 00007f81e6d2d6c0 RCX: 00007f81e5d5d68e [ 627.150117][T14868] RDX: 000000000000000f RSI: 00007f81e6d2d0a0 RDI: 0000000000000006 [ 627.150126][T14868] RBP: 00007f81e6d2d090 R08: 0000000000000000 R09: 0000000000000000 [ 627.150134][T14868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 627.150143][T14868] R13: 00007f81e6016038 R14: 00007f81e6015fa0 R15: 00007fff7b840688 [ 627.150162][T14868] [ 627.589924][T14882] FAULT_INJECTION: forcing a failure. [ 627.589924][T14882] name failslab, interval 1, probability 0, space 0, times 0 [ 627.632765][T14882] CPU: 0 UID: 0 PID: 14882 Comm: syz.2.1826 Not tainted syzkaller #0 PREEMPT(full) [ 627.632788][T14882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 627.632798][T14882] Call Trace: [ 627.632804][T14882] [ 627.632810][T14882] dump_stack_lvl+0x100/0x190 [ 627.632831][T14882] should_fail_ex.cold+0x5/0xa [ 627.632851][T14882] should_failslab+0xc2/0x120 [ 627.632870][T14882] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 627.632893][T14882] ? alloc_inode+0x183/0x250 [ 627.632921][T14882] alloc_inode+0x183/0x250 [ 627.632943][T14882] new_inode+0x22/0x1c0 [ 627.632966][T14882] nfsd_mkdir+0x78/0x460 [ 627.632995][T14882] nfsd_fill_super+0x3f9/0x560 [ 627.633018][T14882] ? __pfx_nfsd_fill_super+0x10/0x10 [ 627.633040][T14882] get_tree_keyed+0x10e/0x1d0 [ 627.633058][T14882] vfs_get_tree+0x92/0x320 [ 627.633072][T14882] path_mount+0x7d0/0x23d0 [ 627.633095][T14882] ? __pfx_path_mount+0x10/0x10 [ 627.633113][T14882] ? lockdep_hardirqs_on+0x78/0x100 [ 627.633137][T14882] ? putname+0xb1/0x110 [ 627.633154][T14882] ? kmem_cache_free+0x127/0x6c0 [ 627.633181][T14882] ? __x64_sys_mount+0x293/0x310 [ 627.633200][T14882] __x64_sys_mount+0x293/0x310 [ 627.633220][T14882] ? __pfx___x64_sys_mount+0x10/0x10 [ 627.633242][T14882] ? rcu_is_watching+0x12/0xc0 [ 627.633261][T14882] do_syscall_64+0x115/0x840 [ 627.633280][T14882] ? clear_bhb_loop+0x40/0x90 [ 627.633298][T14882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.633313][T14882] RIP: 0033:0x7f81e5d9ce59 [ 627.633327][T14882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 627.633342][T14882] RSP: 002b:00007f81e6d2d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 627.633356][T14882] RAX: ffffffffffffffda RBX: 00007f81e6015fa0 RCX: 00007f81e5d9ce59 [ 627.633366][T14882] RDX: 0000200000000200 RSI: 00002000000000c0 RDI: 0000000000000000 [ 627.633375][T14882] RBP: 00007f81e5e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 627.633384][T14882] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 627.633392][T14882] R13: 00007f81e6016038 R14: 00007f81e6015fa0 R15: 00007fff7b840688 [ 627.633412][T14882] [ 628.007978][T14892] ubi0: attaching mtd0 [ 628.013212][T14892] ubi0: scanning is finished [ 628.017953][T14892] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 628.157465][T14874] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 628.414201][T14892] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 629.568334][T14931] FAULT_INJECTION: forcing a failure. [ 629.568334][T14931] name failslab, interval 1, probability 0, space 0, times 0 [ 629.632300][T14931] CPU: 1 UID: 0 PID: 14931 Comm: syz.0.1833 Not tainted syzkaller #0 PREEMPT(full) [ 629.632338][T14931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 629.632354][T14931] Call Trace: [ 629.632363][T14931] [ 629.632373][T14931] dump_stack_lvl+0x100/0x190 [ 629.632408][T14931] should_fail_ex.cold+0x5/0xa [ 629.632444][T14931] should_failslab+0xc2/0x120 [ 629.632476][T14931] __kmalloc_cache_noprof+0x7a/0x6f0 [ 629.632511][T14931] ? snd_pcm_oss_change_params_locked+0x211/0x39f0 [ 629.632544][T14931] snd_pcm_oss_change_params_locked+0x211/0x39f0 [ 629.632598][T14931] ? __mutex_lock+0x26d/0x1b10 [ 629.632622][T14931] ? snd_pcm_oss_write+0x49a/0xa30 [ 629.632641][T14931] ? aa_file_perm+0x7f3/0x14d0 [ 629.632663][T14931] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 629.632686][T14931] ? __pfx___mutex_lock+0x10/0x10 [ 629.632714][T14931] ? __pfx___might_resched+0x10/0x10 [ 629.632729][T14931] ? get_pid_task+0xfc/0x250 [ 629.632752][T14931] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 629.632775][T14931] snd_pcm_oss_write+0x4bb/0xa30 [ 629.632796][T14931] ? bpf_lsm_file_permission+0x9/0x10 [ 629.632810][T14931] ? security_file_permission+0x76/0x210 [ 629.632836][T14931] vfs_write+0x2aa/0x1070 [ 629.632854][T14931] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 629.632877][T14931] ? __pfx_vfs_write+0x10/0x10 [ 629.632891][T14931] ? find_held_lock+0x2b/0x80 [ 629.632909][T14931] ? __fget_files+0x215/0x3d0 [ 629.632926][T14931] ? __fget_files+0x215/0x3d0 [ 629.632953][T14931] ? __fget_files+0x21f/0x3d0 [ 629.632985][T14931] ksys_write+0x12a/0x250 [ 629.633002][T14931] ? __pfx_ksys_write+0x10/0x10 [ 629.633020][T14931] ? rcu_is_watching+0x12/0xc0 [ 629.633040][T14931] do_syscall_64+0x115/0x840 [ 629.633059][T14931] ? clear_bhb_loop+0x40/0x90 [ 629.633077][T14931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.633093][T14931] RIP: 0033:0x7f8dca99ce59 [ 629.633106][T14931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 629.633120][T14931] RSP: 002b:00007f8dcb922028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 629.633135][T14931] RAX: ffffffffffffffda RBX: 00007f8dcac15fa0 RCX: 00007f8dca99ce59 [ 629.633146][T14931] RDX: 0000000080000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 629.633154][T14931] RBP: 00007f8dcb922090 R08: 0000000000000000 R09: 0000000000000000 [ 629.633163][T14931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 629.633172][T14931] R13: 00007f8dcac16038 R14: 00007f8dcac15fa0 R15: 00007fff9a3f0548 [ 629.633191][T14931] [ 630.285058][T14934] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1832'. [ 631.598803][T14963] random: crng reseeded on system resumption [ 631.614107][T14962] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 631.830818][T11621] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 3559 with max blocks 25 with error 117 [ 631.847804][T11621] EXT4-fs (sda1): This should not happen!! Data will be lost [ 631.847804][T11621] [ 634.209067][T14992] FAULT_INJECTION: forcing a failure. [ 634.209067][T14992] name failslab, interval 1, probability 0, space 0, times 0 [ 634.238312][T14992] CPU: 0 UID: 0 PID: 14992 Comm: syz.1.1844 Not tainted syzkaller #0 PREEMPT(full) [ 634.238353][T14992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 634.238371][T14992] Call Trace: [ 634.238381][T14992] [ 634.238392][T14992] dump_stack_lvl+0x100/0x190 [ 634.238429][T14992] should_fail_ex.cold+0x5/0xa [ 634.238468][T14992] should_failslab+0xc2/0x120 [ 634.238504][T14992] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 634.238550][T14992] ? __d_alloc+0x34/0xa40 [ 634.238597][T14992] __d_alloc+0x34/0xa40 [ 634.238640][T14992] d_alloc+0x4a/0x1e0 [ 634.238680][T14992] lookup_one_qstr_excl+0x171/0x250 [ 634.238729][T14992] start_dirop+0x59/0xb0 [ 634.238763][T14992] simple_start_creating+0xf9/0x110 [ 634.238798][T14992] ? __pfx_simple_start_creating+0x10/0x10 [ 634.238843][T14992] nfsd_fill_super+0x1c9/0x560 [ 634.238892][T14992] ? __pfx_nfsd_fill_super+0x10/0x10 [ 634.238937][T14992] get_tree_keyed+0x10e/0x1d0 [ 634.238972][T14992] vfs_get_tree+0x92/0x320 [ 634.239001][T14992] path_mount+0x7d0/0x23d0 [ 634.239048][T14992] ? __pfx_path_mount+0x10/0x10 [ 634.239085][T14992] ? lockdep_hardirqs_on+0x78/0x100 [ 634.239131][T14992] ? putname+0xb1/0x110 [ 634.239165][T14992] ? kmem_cache_free+0x127/0x6c0 [ 634.239222][T14992] ? __x64_sys_mount+0x293/0x310 [ 634.239259][T14992] __x64_sys_mount+0x293/0x310 [ 634.239308][T14992] ? __pfx___x64_sys_mount+0x10/0x10 [ 634.239353][T14992] ? rcu_is_watching+0x12/0xc0 [ 634.239393][T14992] do_syscall_64+0x115/0x840 [ 634.239433][T14992] ? clear_bhb_loop+0x40/0x90 [ 634.239469][T14992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.239499][T14992] RIP: 0033:0x7efea8f9ce59 [ 634.239523][T14992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 634.239552][T14992] RSP: 002b:00007efea9e54028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 634.239579][T14992] RAX: ffffffffffffffda RBX: 00007efea9215fa0 RCX: 00007efea8f9ce59 [ 634.239598][T14992] RDX: 0000200000000200 RSI: 00002000000000c0 RDI: 0000000000000000 [ 634.239617][T14992] RBP: 00007efea9032d6f R08: 0000000000000000 R09: 0000000000000000 [ 634.239635][T14992] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 634.239651][T14992] R13: 00007efea9216038 R14: 00007efea9215fa0 R15: 00007fff5fd84de8 [ 634.239691][T14992] [ 634.976231][T14999] FAULT_INJECTION: forcing a failure. [ 634.976231][T14999] name fail_futex, interval 1, probability 0, space 0, times 0 [ 635.007217][T14999] CPU: 1 UID: 0 PID: 14999 Comm: syz.2.1846 Not tainted syzkaller #0 PREEMPT(full) [ 635.007257][T14999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 635.007274][T14999] Call Trace: [ 635.007283][T14999] [ 635.007294][T14999] dump_stack_lvl+0x100/0x190 [ 635.007336][T14999] should_fail_ex.cold+0x5/0xa [ 635.007374][T14999] get_futex_key+0x1d2/0x1510 [ 635.007422][T14999] ? __pfx_get_futex_key+0x10/0x10 [ 635.007479][T14999] futex_wait_setup+0x83/0x510 [ 635.007523][T14999] __futex_wait+0x19f/0x300 [ 635.007560][T14999] ? __pfx___futex_wait+0x10/0x10 [ 635.007593][T14999] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 635.007637][T14999] ? __pfx_futex_wake_mark+0x10/0x10 [ 635.007676][T14999] ? futex_hash+0x2ad/0x370 [ 635.007721][T14999] ? futex_hash+0x141/0x370 [ 635.007767][T14999] futex_wait+0xe6/0x370 [ 635.007803][T14999] ? __pfx_futex_wait+0x10/0x10 [ 635.007846][T14999] ? __fget_files+0x215/0x3d0 [ 635.007888][T14999] do_futex+0x1ef/0x350 [ 635.007918][T14999] ? __pfx_do_futex+0x10/0x10 [ 635.007947][T14999] ? fdget+0x18b/0x210 [ 635.007980][T14999] ? __sys_sendmsg+0x18f/0x220 [ 635.008012][T14999] __x64_sys_futex+0x34f/0x4d0 [ 635.008047][T14999] ? __pfx___x64_sys_futex+0x10/0x10 [ 635.008085][T14999] ? rcu_is_watching+0x12/0xc0 [ 635.008121][T14999] do_syscall_64+0x115/0x840 [ 635.008164][T14999] ? clear_bhb_loop+0x40/0x90 [ 635.008199][T14999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.008229][T14999] RIP: 0033:0x7f81e5d9ce59 [ 635.008252][T14999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.008289][T14999] RSP: 002b:00007f81e6d2d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 635.008322][T14999] RAX: ffffffffffffffda RBX: 00007f81e6015fa8 RCX: 00007f81e5d9ce59 [ 635.008339][T14999] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f81e6015fa8 [ 635.008357][T14999] RBP: 00007f81e6015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 635.008374][T14999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 635.008390][T14999] R13: 00007f81e6016038 R14: 00007fff7b8405a0 R15: 00007fff7b840688 [ 635.008427][T14999] [ 635.009228][T14999] netlink: 'syz.2.1846': attribute type 15 has an invalid length. [ 635.244802][T14999] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1846'. [ 636.691629][T15027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1853'. [ 636.705025][T14970] Process accounting paused [ 638.027922][T15043] random: crng reseeded on system resumption [ 638.480471][T15048] Process accounting paused [ 638.995767][T15051] Process accounting resumed [ 640.039342][T15069] netlink: 'syz.1.1862': attribute type 33 has an invalid length. [ 640.052341][T15069] netlink: 318 bytes leftover after parsing attributes in process `syz.1.1862'. [ 640.378200][T15080] smpboot: CPU 1 is now offline [ 640.924610][T15075] Process accounting paused [ 641.678124][T15098] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 641.701247][T15073] ------------[ cut here ]------------ [ 641.702711][T15073] [ 641.702720][T15073] ====================================================== [ 641.702731][T15073] WARNING: possible circular locking dependency detected [ 641.702742][T15073] syzkaller #0 Not tainted [ 641.702755][T15073] ------------------------------------------------------ [ 641.702765][T15073] syz.0.1863/15073 is trying to acquire lock: [ 641.702780][T15073] ffffffff8e6f14a0 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 641.702862][T15073] [ 641.702862][T15073] but task is already holding lock: [ 641.702870][T15073] ffff8880b843b420 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 641.702938][T15073] [ 641.702938][T15073] which lock already depends on the new lock. [ 641.702938][T15073] [ 641.702948][T15073] [ 641.702948][T15073] the existing dependency chain (in reverse order) is: [ 641.702958][T15073] [ 641.702958][T15073] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 641.702993][T15073] _raw_spin_lock_nested+0x31/0x40 [ 641.703027][T15073] raw_spin_rq_lock_nested+0x2c/0x140 [ 641.703061][T15073] _task_rq_lock+0xcf/0x510 [ 641.703093][T15073] cgroup_move_task+0x81/0x320 [ 641.703131][T15073] css_set_move_task+0x285/0x600 [ 641.703172][T15073] cgroup_post_fork+0x202/0x9b0 [ 641.703210][T15073] copy_process+0x5b9a/0x7ed0 [ 641.703245][T15073] kernel_clone+0x176/0x9e0 [ 641.703280][T15073] user_mode_thread+0xcc/0x110 [ 641.703315][T15073] rest_init+0x21/0x260 [ 641.703340][T15073] start_kernel+0x484/0x490 [ 641.703382][T15073] x86_64_start_reservations+0x24/0x30 [ 641.703409][T15073] x86_64_start_kernel+0x12b/0x130 [ 641.703434][T15073] common_startup_64+0x13e/0x148 [ 641.703468][T15073] [ 641.703468][T15073] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 641.703502][T15073] _raw_spin_lock_irqsave+0x3a/0x60 [ 641.703536][T15073] try_to_wake_up+0xb5/0x1900 [ 641.703568][T15073] __wake_up_common+0x135/0x1f0 [ 641.703609][T15073] __wake_up+0x31/0x60 [ 641.703644][T15073] tty_port_default_wakeup+0x52/0x70 [ 641.703684][T15073] serial8250_tx_chars+0x68f/0x860 [ 641.703722][T15073] serial8250_handle_irq_locked+0x5e6/0x7e0 [ 641.703762][T15073] serial8250_handle_irq.part.0+0xb4/0x530 [ 641.703802][T15073] serial8250_default_handle_irq+0xc2/0x290 [ 641.703848][T15073] serial8250_interrupt+0xf8/0x1c0 [ 641.703891][T15073] __handle_irq_event_percpu+0x235/0x8c0 [ 641.703924][T15073] handle_irq_event+0xab/0x1e0 [ 641.703956][T15073] handle_edge_irq+0x35e/0x960 [ 641.703985][T15073] __common_interrupt+0xd8/0x2f0 [ 641.704026][T15073] common_interrupt+0xb9/0xe0 [ 641.704053][T15073] asm_common_interrupt+0x26/0x40 [ 641.704079][T15073] bad_range+0xe9/0x3f0 [ 641.704112][T15073] get_page_from_freelist+0x1185/0x3410 [ 641.704154][T15073] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 641.704198][T15073] new_slab+0xa6/0x6c0 [ 641.704233][T15073] refill_objects+0x277/0x420 [ 641.704274][T15073] __pcs_replace_empty_main+0x375/0x650 [ 641.704316][T15073] __kmalloc_cache_noprof+0x493/0x6f0 [ 641.704356][T15073] kmem_cache_free+0x41e/0x6c0 [ 641.704395][T15073] tear_down_vmas+0x2a5/0x600 [ 641.704426][T15073] exit_mmap+0x469/0xa10 [ 641.704458][T15073] __mmput+0x12a/0x410 [ 641.704489][T15073] mmput+0x67/0x80 [ 641.704518][T15073] do_exit+0x8b2/0x2af0 [ 641.704556][T15073] do_group_exit+0xd5/0x2a0 [ 641.704595][T15073] __x64_sys_exit_group+0x3e/0x50 [ 641.704636][T15073] x64_sys_call+0x102c/0x1530 [ 641.704672][T15073] do_syscall_64+0x115/0x840 [ 641.704709][T15073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.704738][T15073] [ 641.704738][T15073] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 641.704774][T15073] _raw_spin_lock_irqsave+0x3a/0x60 [ 641.704807][T15073] __wake_up+0x1c/0x60 [ 641.704847][T15073] tty_port_default_wakeup+0x52/0x70 [ 641.704885][T15073] serial8250_tx_chars+0x68f/0x860 [ 641.704922][T15073] serial8250_handle_irq_locked+0x5e6/0x7e0 [ 641.704962][T15073] serial8250_handle_irq.part.0+0xb4/0x530 [ 641.705002][T15073] serial8250_default_handle_irq+0xc2/0x290 [ 641.705042][T15073] serial8250_interrupt+0xf8/0x1c0 [ 641.705084][T15073] __handle_irq_event_percpu+0x235/0x8c0 [ 641.705117][T15073] handle_irq_event+0xab/0x1e0 [ 641.705148][T15073] handle_edge_irq+0x35e/0x960 [ 641.705177][T15073] __common_interrupt+0xd8/0x2f0 [ 641.705218][T15073] common_interrupt+0xb9/0xe0 [ 641.705244][T15073] asm_common_interrupt+0x26/0x40 [ 641.705272][T15073] _raw_spin_unlock_irqrestore+0x31/0x80 [ 641.705307][T15073] uart_write+0x29d/0xb20 [ 641.705340][T15073] n_tty_write+0x431/0x11c0 [ 641.705379][T15073] file_tty_write.isra.0+0x4d2/0x890 [ 641.705413][T15073] redirected_tty_write+0xd4/0x120 [ 641.705447][T15073] vfs_write+0x6ac/0x1070 [ 641.705476][T15073] ksys_write+0x12a/0x250 [ 641.705505][T15073] do_syscall_64+0x115/0x840 [ 641.705540][T15073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.705569][T15073] [ 641.705569][T15073] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 641.705604][T15073] _raw_spin_lock_irqsave+0x3a/0x60 [ 641.705637][T15073] serial8250_console_write+0x17e/0x1900 [ 641.705679][T15073] console_flush_one_record+0x790/0xe50 [ 641.705712][T15073] console_unlock+0x103/0x260 [ 641.705742][T15073] vprintk_emit+0x407/0x6b0 [ 641.705791][T15073] _printk+0xcf/0x110 [ 641.705820][T15073] register_console.cold+0xc0/0x248 [ 641.705849][T15073] univ8250_console_init+0x6f/0x80 [ 641.705886][T15073] console_init+0x3f7/0x5e0 [ 641.705917][T15073] start_kernel+0x30a/0x490 [ 641.705957][T15073] x86_64_start_reservations+0x24/0x30 [ 641.705984][T15073] x86_64_start_kernel+0x12b/0x130 [ 641.706010][T15073] common_startup_64+0x13e/0x148 [ 641.706043][T15073] [ 641.706043][T15073] -> #0 (console_owner){-.-.}-{0:0}: [ 641.706078][T15073] __lock_acquire+0x14b8/0x2630 [ 641.706119][T15073] lock_acquire+0x1b1/0x370 [ 641.706159][T15073] console_lock_spinning_enable+0x72/0x80 [ 641.706191][T15073] console_flush_one_record+0x739/0xe50 [ 641.706223][T15073] console_unlock+0x103/0x260 [ 641.706253][T15073] vprintk_emit+0x407/0x6b0 [ 641.706285][T15073] _printk+0xcf/0x110 [ 641.706309][T15073] __report_bug.cold+0x15/0x137 [ 641.706351][T15073] report_bug+0xb2/0x220 [ 641.706383][T15073] handle_bug+0x16a/0x2a0 [ 641.706406][T15073] exc_invalid_op+0x17/0x50 [ 641.706429][T15073] asm_exc_invalid_op+0x1a/0x20 [ 641.706454][T15073] update_rq_clock+0x40a/0xd20 [ 641.706488][T15073] __schedule+0x1e84/0x67a0 [ 641.706520][T15073] preempt_schedule_irq+0x50/0x90 [ 641.706555][T15073] irqentry_exit+0x205/0x970 [ 641.706592][T15073] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 641.706621][T15073] __sanitizer_cov_trace_pc+0x0/0x70 [ 641.706658][T15073] queue_work_on+0x141/0x1e0 [ 641.706683][T15073] snd_virmidi_output_trigger+0xf6/0x140 [ 641.706717][T15073] snd_rawmidi_kernel_write1+0x51f/0x7c0 [ 641.706759][T15073] snd_rawmidi_write+0x2dc/0xc60 [ 641.706798][T15073] vfs_write+0x2aa/0x1070 [ 641.706831][T15073] ksys_write+0x1f8/0x250 [ 641.706860][T15073] do_syscall_64+0x115/0x840 [ 641.706897][T15073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.706925][T15073] [ 641.706925][T15073] other info that might help us debug this: [ 641.706925][T15073] [ 641.706933][T15073] Chain exists of: [ 641.706933][T15073] console_owner --> &p->pi_lock --> &rq->__lock [ 641.706933][T15073] [ 641.706973][T15073] Possible unsafe locking scenario: [ 641.706973][T15073] [ 641.706981][T15073] CPU0 CPU1 [ 641.706989][T15073] ---- ---- [ 641.706997][T15073] lock(&rq->__lock); [ 641.707013][T15073] lock(&p->pi_lock); [ 641.707033][T15073] lock(&rq->__lock); [ 641.707051][T15073] lock(console_owner); [ 641.707068][T15073] [ 641.707068][T15073] *** DEADLOCK *** [ 641.707068][T15073] [ 641.707075][T15073] 3 locks held by syz.0.1863/15073: [ 641.707091][T15073] #0: ffff8880b843b420 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 641.707165][T15073] #1: ffffffff8e7d18e0 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x110 [ 641.707228][T15073] #2: ffffffff8e7d1958 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfd/0xe50 [ 641.707298][T15073] [ 641.707298][T15073] stack backtrace: [ 641.707310][T15073] CPU: 0 UID: 0 PID: 15073 Comm: syz.0.1863 Not tainted syzkaller #0 PREEMPT(full) [ 641.707343][T15073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 641.707360][T15073] Call Trace: [ 641.707369][T15073] [ 641.707380][T15073] dump_stack_lvl+0x100/0x190 [ 641.707407][T15073] print_circular_bug.cold+0x178/0x1c7 [ 641.707453][T15073] check_noncircular+0x146/0x160 [ 641.707497][T15073] __lock_acquire+0x14b8/0x2630 [ 641.707546][T15073] lock_acquire+0x1b1/0x370 [ 641.707587][T15073] ? console_lock_spinning_enable+0x61/0x80 [ 641.707622][T15073] ? console_lock_spinning_enable+0x4a/0x80 [ 641.707659][T15073] console_lock_spinning_enable+0x72/0x80 [ 641.707691][T15073] ? console_lock_spinning_enable+0x61/0x80 [ 641.707724][T15073] console_flush_one_record+0x739/0xe50 [ 641.707762][T15073] ? __pfx_console_flush_one_record+0x10/0x10 [ 641.707802][T15073] ? is_printk_cpu_sync_owner+0x32/0x40 [ 641.707847][T15073] console_unlock+0x103/0x260 [ 641.707880][T15073] ? __pfx_console_unlock+0x10/0x10 [ 641.707915][T15073] ? do_raw_spin_unlock+0x145/0x1e0 [ 641.707947][T15073] ? _printk+0xcf/0x110 [ 641.707976][T15073] vprintk_emit+0x407/0x6b0 [ 641.708011][T15073] ? __pfx_vprintk_emit+0x10/0x10 [ 641.708046][T15073] ? __lock_acquire+0x4a5/0x2630 [ 641.708091][T15073] _printk+0xcf/0x110 [ 641.708117][T15073] ? __pfx__printk+0x10/0x10 [ 641.708146][T15073] ? lock_acquire+0x1b1/0x370 [ 641.708189][T15073] ? __report_bug.cold+0x5/0x137 [ 641.708234][T15073] __report_bug.cold+0x15/0x137 [ 641.708277][T15073] ? update_rq_clock+0x40a/0xd20 [ 641.708314][T15073] ? __pfx___report_bug+0x10/0x10 [ 641.708349][T15073] ? bpf_ksym_find+0x124/0x1c0 [ 641.708378][T15073] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 641.708418][T15073] ? is_bpf_text_address+0x94/0x1a0 [ 641.708460][T15073] ? update_rq_clock+0x40a/0xd20 [ 641.708497][T15073] report_bug+0xb2/0x220 [ 641.708531][T15073] ? update_rq_clock+0x40a/0xd20 [ 641.708567][T15073] handle_bug+0x16a/0x2a0 [ 641.708592][T15073] exc_invalid_op+0x17/0x50 [ 641.708617][T15073] asm_exc_invalid_op+0x1a/0x20 [ 641.708644][T15073] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 641.708683][T15073] Code: ab 88 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 18 e5 b4 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 80 0b 00 00 48 b8 00 00 00 00 00 [ 641.708712][T15073] RSP: 0018:ffffc90005b87808 EFLAGS: 00010046 [ 641.708735][T15073] RAX: 0000000000000000 RBX: ffff8880b853b3c0 RCX: 0000000000000001 [ 641.708753][T15073] RDX: 0000000000000046 RSI: ffffffff8def561d RDI: ffffffff8c1c4580 [ 641.708773][T15073] RBP: ffffc90005b879b8 R08: 0000000000000001 R09: 0000000000000001 [ 641.708791][T15073] R10: ffffffff90d73e57 R11: 0000000000000000 R12: ffffffff90d771c4 [ 641.708844][T15073] R13: ffff8880b853c260 R14: ffff88801e2f9f00 R15: ffff8880b853b3c0 [ 641.708872][T15073] ? update_rq_clock+0x9c/0xd20 [ 641.708911][T15073] __schedule+0x1e84/0x67a0 [ 641.708945][T15073] ? do_raw_spin_unlock+0x145/0x1e0 [ 641.708986][T15073] ? __pfx___schedule+0x10/0x10 [ 641.709026][T15073] preempt_schedule_irq+0x50/0x90 [ 641.709063][T15073] irqentry_exit+0x205/0x970 [ 641.709100][T15073] ? trace_reschedule_exit.constprop.0+0x6b/0x220 [ 641.709148][T15073] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 641.709178][T15073] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 641.709219][T15073] Code: d6 8a 5b 00 48 89 df 5b e9 1d 1b 61 00 be 03 00 00 00 5b e9 92 0e ef 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 8b 05 e5 63 01 12 48 8b 34 24 65 48 8b 15 c1 63 01 [ 641.709247][T15073] RSP: 0018:ffffc90005b87ad8 EFLAGS: 00000246 [ 641.709269][T15073] RAX: 0000000000080000 RBX: 0000000000000000 RCX: ffffc90004981000 [ 641.709288][T15073] RDX: 0000000000080000 RSI: ffffffff81ce9a5b RDI: ffff88807aa63e00 [ 641.709308][T15073] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 641.709325][T15073] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000008 [ 641.709343][T15073] R13: ffff88813fe56c00 R14: ffff888031bfb300 R15: 0000000000001000 [ 641.709368][T15073] ? queue_work_on+0x13b/0x1e0 [ 641.709398][T15073] queue_work_on+0x141/0x1e0 [ 641.709426][T15073] snd_virmidi_output_trigger+0xf6/0x140 [ 641.709463][T15073] snd_rawmidi_kernel_write1+0x51f/0x7c0 [ 641.709513][T15073] snd_rawmidi_write+0x2dc/0xc60 [ 641.709559][T15073] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 641.709603][T15073] ? __pfx_default_wake_function+0x10/0x10 [ 641.709642][T15073] ? bpf_lsm_file_permission+0x9/0x10 [ 641.709669][T15073] ? security_file_permission+0x76/0x210 [ 641.709708][T15073] ? rw_verify_area+0xce/0x6d0 [ 641.709738][T15073] vfs_write+0x2aa/0x1070 [ 641.709769][T15073] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 641.709818][T15073] ? __pfx_vfs_write+0x10/0x10 [ 641.709848][T15073] ? find_held_lock+0x2b/0x80 [ 641.709881][T15073] ? __fget_files+0x215/0x3d0 [ 641.709913][T15073] ? __fget_files+0x215/0x3d0 [ 641.709949][T15073] ? __fget_files+0x21f/0x3d0 [ 641.709985][T15073] ksys_write+0x1f8/0x250 [ 641.710017][T15073] ? __pfx_ksys_write+0x10/0x10 [ 641.710050][T15073] ? rcu_is_watching+0x12/0xc0 [ 641.710084][T15073] do_syscall_64+0x115/0x840 [ 641.710122][T15073] ? clear_bhb_loop+0x40/0x90 [ 641.710155][T15073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.710184][T15073] RIP: 0033:0x7f8dca99ce59 [ 641.710206][T15073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 641.710235][T15073] RSP: 002b:00007f8dcb922028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 641.710261][T15073] RAX: ffffffffffffffda RBX: 00007f8dcac15fa0 RCX: 00007f8dca99ce59 [ 641.710282][T15073] RDX: 000004100000a3d7 RSI: 0000200000001380 RDI: 0000000000000005 [ 641.710300][T15073] RBP: 00007f8dcaa32d6f R08: 0000000000000000 R09: 0000000000000000 [ 641.710318][T15073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 641.710336][T15073] R13: 00007f8dcac16038 R14: 00007f8dcac15fa0 R15: 00007fff9a3f0548 [ 641.710364][T15073] [ 643.116190][T15073] debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0) [ 643.116221][T15073] WARNING: kernel/sched/sched.h:1612 at update_rq_clock+0x40a/0xd20, CPU#0: syz.0.1863/15073 [ 643.134192][T15073] Modules linked in: [ 643.138100][T15073] CPU: 0 UID: 0 PID: 15073 Comm: syz.0.1863 Not tainted syzkaller #0 PREEMPT(full) [ 643.147567][T15073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 643.157626][T15073] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 643.163197][T15073] Code: ab 88 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 18 e5 b4 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 80 0b 00 00 48 b8 00 00 00 00 00 [ 643.182826][T15073] RSP: 0018:ffffc90005b87808 EFLAGS: 00010046 [ 643.188919][T15073] RAX: 0000000000000000 RBX: ffff8880b853b3c0 RCX: 0000000000000001 [ 643.196932][T15073] RDX: 0000000000000046 RSI: ffffffff8def561d RDI: ffffffff8c1c4580 [ 643.205003][T15073] RBP: ffffc90005b879b8 R08: 0000000000000001 R09: 0000000000000001 [ 643.212983][T15073] R10: ffffffff90d73e57 R11: 0000000000000000 R12: ffffffff90d771c4 [ 643.221220][T15073] R13: ffff8880b853c260 R14: ffff88801e2f9f00 R15: ffff8880b853b3c0 [ 643.229199][T15073] FS: 00007f8dcb9226c0(0000) GS:ffff88812438a000(0000) knlGS:0000000000000000 [ 643.238137][T15073] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 643.244732][T15073] CR2: 0000200001000000 CR3: 0000000058ea2000 CR4: 00000000003526f0 [ 643.252711][T15073] Call Trace: [ 643.256164][T15073] [ 643.259104][T15073] __schedule+0x1e84/0x67a0 [ 643.263903][T15073] ? do_raw_spin_unlock+0x145/0x1e0 [ 643.269301][T15073] ? __pfx___schedule+0x10/0x10 [ 643.274174][T15073] preempt_schedule_irq+0x50/0x90 [ 643.279231][T15073] irqentry_exit+0x205/0x970 [ 643.283880][T15073] ? trace_reschedule_exit.constprop.0+0x6b/0x220 [ 643.290321][T15073] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 643.295791][T15073] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 643.301890][T15073] Code: d6 8a 5b 00 48 89 df 5b e9 1d 1b 61 00 be 03 00 00 00 5b e9 92 0e ef 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 8b 05 e5 63 01 12 48 8b 34 24 65 48 8b 15 c1 63 01 [ 643.321608][T15073] RSP: 0018:ffffc90005b87ad8 EFLAGS: 00000246 [ 643.327685][T15073] RAX: 0000000000080000 RBX: 0000000000000000 RCX: ffffc90004981000 [ 643.335661][T15073] RDX: 0000000000080000 RSI: ffffffff81ce9a5b RDI: ffff88807aa63e00 [ 643.343636][T15073] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 643.351610][T15073] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000008 [ 643.359584][T15073] R13: ffff88813fe56c00 R14: ffff888031bfb300 R15: 0000000000001000 [ 643.367566][T15073] ? queue_work_on+0x13b/0x1e0 [ 643.372345][T15073] queue_work_on+0x141/0x1e0 [ 643.377036][T15073] snd_virmidi_output_trigger+0xf6/0x140 [ 643.382729][T15073] snd_rawmidi_kernel_write1+0x51f/0x7c0 [ 643.388496][T15073] snd_rawmidi_write+0x2dc/0xc60 [ 643.393476][T15073] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 643.398960][T15073] ? __pfx_default_wake_function+0x10/0x10 [ 643.404785][T15073] ? bpf_lsm_file_permission+0x9/0x10 [ 643.410168][T15073] ? security_file_permission+0x76/0x210 [ 643.415823][T15073] ? rw_verify_area+0xce/0x6d0 [ 643.420596][T15073] vfs_write+0x2aa/0x1070 [ 643.424939][T15073] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 643.430423][T15073] ? __pfx_vfs_write+0x10/0x10 [ 643.435201][T15073] ? find_held_lock+0x2b/0x80 [ 643.439893][T15073] ? __fget_files+0x215/0x3d0 [ 643.444599][T15073] ? __fget_files+0x215/0x3d0 [ 643.449312][T15073] ? __fget_files+0x21f/0x3d0 [ 643.454013][T15073] ksys_write+0x1f8/0x250 [ 643.458363][T15073] ? __pfx_ksys_write+0x10/0x10 [ 643.463234][T15073] ? rcu_is_watching+0x12/0xc0 [ 643.468021][T15073] do_syscall_64+0x115/0x840 [ 643.472633][T15073] ? clear_bhb_loop+0x40/0x90 [ 643.477327][T15073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.483275][T15073] RIP: 0033:0x7f8dca99ce59 [ 643.487699][T15073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.507335][T15073] RSP: 002b:00007f8dcb922028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 643.515778][T15073] RAX: ffffffffffffffda RBX: 00007f8dcac15fa0 RCX: 00007f8dca99ce59 [ 643.523764][T15073] RDX: 000004100000a3d7 RSI: 0000200000001380 RDI: 0000000000000005 [ 643.531865][T15073] RBP: 00007f8dcaa32d6f R08: 0000000000000000 R09: 0000000000000000 [ 643.539866][T15073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 643.547868][T15073] R13: 00007f8dcac16038 R14: 00007f8dcac15fa0 R15: 00007fff9a3f0548 [ 643.555872][T15073] [ 643.558922][T15073] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 643.566208][T15073] CPU: 0 UID: 0 PID: 15073 Comm: syz.0.1863 Not tainted syzkaller #0 PREEMPT(full) [ 643.575607][T15073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 643.585687][T15073] Call Trace: [ 643.589022][T15073] [ 643.591993][T15073] dump_stack_lvl+0x100/0x190 [ 643.596700][T15073] vpanic+0x552/0x970 [ 643.600786][T15073] ? __pfx_vpanic+0x10/0x10 [ 643.605308][T15073] ? lock_release+0x245/0x310 [ 643.610015][T15073] panic+0xd1/0xe0 [ 643.613743][T15073] ? __pfx_panic+0x10/0x10 [ 643.618177][T15073] check_panic_on_warn.cold+0x19/0x34 [ 643.623561][T15073] ? update_rq_clock+0x40a/0xd20 [ 643.628520][T15073] __warn.cold+0x191/0x328 [ 643.633001][T15073] __report_bug+0x296/0x3d0 [ 643.637559][T15073] ? update_rq_clock+0x40a/0xd20 [ 643.642566][T15073] ? __pfx___report_bug+0x10/0x10 [ 643.647617][T15073] ? bpf_ksym_find+0x124/0x1c0 [ 643.652396][T15073] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 643.658574][T15073] ? is_bpf_text_address+0x94/0x1a0 [ 643.663801][T15073] ? update_rq_clock+0x40a/0xd20 [ 643.668954][T15073] report_bug+0xb2/0x220 [ 643.673218][T15073] ? update_rq_clock+0x40a/0xd20 [ 643.678183][T15073] handle_bug+0x16a/0x2a0 [ 643.682521][T15073] exc_invalid_op+0x17/0x50 [ 643.687033][T15073] asm_exc_invalid_op+0x1a/0x20 [ 643.691896][T15073] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 643.697480][T15073] Code: ab 88 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 18 e5 b4 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 80 0b 00 00 48 b8 00 00 00 00 00 [ 643.717272][T15073] RSP: 0018:ffffc90005b87808 EFLAGS: 00010046 [ 643.723441][T15073] RAX: 0000000000000000 RBX: ffff8880b853b3c0 RCX: 0000000000000001 [ 643.731424][T15073] RDX: 0000000000000046 RSI: ffffffff8def561d RDI: ffffffff8c1c4580 [ 643.739490][T15073] RBP: ffffc90005b879b8 R08: 0000000000000001 R09: 0000000000000001 [ 643.748165][T15073] R10: ffffffff90d73e57 R11: 0000000000000000 R12: ffffffff90d771c4 [ 643.756233][T15073] R13: ffff8880b853c260 R14: ffff88801e2f9f00 R15: ffff8880b853b3c0 [ 643.764223][T15073] ? update_rq_clock+0x9c/0xd20 [ 643.769110][T15073] __schedule+0x1e84/0x67a0 [ 643.773638][T15073] ? do_raw_spin_unlock+0x145/0x1e0 [ 643.778860][T15073] ? __pfx___schedule+0x10/0x10 [ 643.783742][T15073] preempt_schedule_irq+0x50/0x90 [ 643.788787][T15073] irqentry_exit+0x205/0x970 [ 643.793396][T15073] ? trace_reschedule_exit.constprop.0+0x6b/0x220 [ 643.799843][T15073] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 643.805314][T15073] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 643.811512][T15073] Code: d6 8a 5b 00 48 89 df 5b e9 1d 1b 61 00 be 03 00 00 00 5b e9 92 0e ef 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 8b 05 e5 63 01 12 48 8b 34 24 65 48 8b 15 c1 63 01 [ 643.831130][T15073] RSP: 0018:ffffc90005b87ad8 EFLAGS: 00000246 [ 643.837307][T15073] RAX: 0000000000080000 RBX: 0000000000000000 RCX: ffffc90004981000 [ 643.845285][T15073] RDX: 0000000000080000 RSI: ffffffff81ce9a5b RDI: ffff88807aa63e00 [ 643.853262][T15073] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 643.861248][T15073] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000008 [ 643.869226][T15073] R13: ffff88813fe56c00 R14: ffff888031bfb300 R15: 0000000000001000 [ 643.877219][T15073] ? queue_work_on+0x13b/0x1e0 [ 643.882003][T15073] queue_work_on+0x141/0x1e0 [ 643.886605][T15073] snd_virmidi_output_trigger+0xf6/0x140 [ 643.892434][T15073] snd_rawmidi_kernel_write1+0x51f/0x7c0 [ 643.898120][T15073] snd_rawmidi_write+0x2dc/0xc60 [ 643.903198][T15073] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 643.908690][T15073] ? __pfx_default_wake_function+0x10/0x10 [ 643.914522][T15073] ? bpf_lsm_file_permission+0x9/0x10 [ 643.919903][T15073] ? security_file_permission+0x76/0x210 [ 643.925562][T15073] ? rw_verify_area+0xce/0x6d0 [ 643.930337][T15073] vfs_write+0x2aa/0x1070 [ 643.934682][T15073] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 643.940174][T15073] ? __pfx_vfs_write+0x10/0x10 [ 643.944953][T15073] ? find_held_lock+0x2b/0x80 [ 643.949649][T15073] ? __fget_files+0x215/0x3d0 [ 643.954348][T15073] ? __fget_files+0x215/0x3d0 [ 643.959042][T15073] ? __fget_files+0x21f/0x3d0 [ 643.963749][T15073] ksys_write+0x1f8/0x250 [ 643.968101][T15073] ? __pfx_ksys_write+0x10/0x10 [ 643.972985][T15073] ? rcu_is_watching+0x12/0xc0 [ 643.977828][T15073] do_syscall_64+0x115/0x840 [ 643.982437][T15073] ? clear_bhb_loop+0x40/0x90 [ 643.987139][T15073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.993129][T15073] RIP: 0033:0x7f8dca99ce59 [ 643.997554][T15073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 644.017262][T15073] RSP: 002b:00007f8dcb922028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 644.025689][T15073] RAX: ffffffffffffffda RBX: 00007f8dcac15fa0 RCX: 00007f8dca99ce59 [ 644.033668][T15073] RDX: 000004100000a3d7 RSI: 0000200000001380 RDI: 0000000000000005 [ 644.041648][T15073] RBP: 00007f8dcaa32d6f R08: 0000000000000000 R09: 0000000000000000 [ 644.049626][T15073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 644.057690][T15073] R13: 00007f8dcac16038 R14: 00007f8dcac15fa0 R15: 00007fff9a3f0548 [ 644.065679][T15073] [ 644.069073][T15073] Kernel Offset: disabled [ 644.073407][T15073] Rebooting in 86400 seconds..