last executing test programs: 9.384320812s ago: executing program 3 (id=831): openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0xf, 0x3, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x1a, 0x800, 0x8) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe\x00', 0x20c01, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8010) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x40000, 0x0) pread64$auto(r1, &(0x7f0000000040)='/dev/tty0\x00', 0x3, 0x7) select$auto(0xd, 0x0, 0x0, &(0x7f00000001c0)={[0x79, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0xc, 0xffffffffffff4811]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000240)={0x0, 0xf37c}, 0x8000001ff) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r4 = socket(0x2, 0x5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) 8.593618183s ago: executing program 1 (id=832): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timerfd_create$auto(0x9, 0x0) r0 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) read$auto(0x4, 0x0, 0xfdef) r1 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) close_range$auto(0x2, 0xa, 0x0) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) r2 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r3, 0x5393, r2) 7.991241718s ago: executing program 3 (id=836): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) remap_file_pages$auto(0x40, 0x2000fff, 0x0, 0xdc, 0x100000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) recvmmsg$auto(0x3, 0x0, 0x10000, 0x2, 0x0) ioprio_set$auto(0x2, 0x800000000, 0x8) mmap$auto(0x0, 0x4, 0x5, 0x40eb2, 0x402, 0x300000000000) socket(0x2, 0x2, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bind$auto(0x3, 0x0, 0x68) remap_file_pages$auto(0x16c, 0x0, 0xffffffff, 0x80000000, 0x6) 7.649321376s ago: executing program 1 (id=839): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000040)='/dev/binderfs/binder1\x00', 0x400000, 0x0) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) msgctl$auto_MSG_STAT_ANY(0x8, 0xd, &(0x7f0000000100)={{0xfd, 0xee00, 0xffffffffffffffff, 0x454, 0x0, 0x3, 0x9}, &(0x7f0000000080)=0x1, &(0x7f00000000c0)=0x1, 0xfffffffffffffffe, 0x2, 0x7, 0xffff, 0x6, 0x1ff, 0x73, 0x400, @raw=0x6, @raw=0x1}) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x5f, r1, 0x20, 0x70bd26, 0x25dfdbfa, {}, [@OVS_PACKET_ATTR_PACKET={0x0, 0x1, "2b6f304778f897d89306e7810bc7"}, @OVS_PACKET_ATTR_HASH={0x0, 0xb, 0x7fffffff}, @OVS_PACKET_ATTR_ACTIONS={0x0, 0x3, 0x0, 0x1, [@nested={0x0, 0x8d, 0x0, 0x1, [@typed={0x0, 0x106, 0x0, 0x0, @binary="f0e0c1a09806b00901d47e15f8ed0c3694fe21e54a2f3694187bfdab6d709bd8677f4b3abf88fb64220c440ab139689137aa3bea08f638557ea6905798c23b6bee2247e6397f1f9fdd12b1abf5e6df0938a15dd9acbbd2a56300e031996a2dd05470f6e2818351897ef7e0a56efa0995ec6ddff3fb3bb85a9de8b19a5e9eca5d4faf7e2d"}, @nested={0x0, 0xf6}, @typed={0x0, 0x66, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="7d1078f51d812ccbf3753401cde661", @generic="7ae567a34083b9c0fcef5ed0f369f44a92c7af858fe0badea7005b106c3c15a3da5d6858b7ce87490343984ce0f30e7f1f2f9fe7278d2a898ab1ba0ff0be66aad3338c0737ca54d55c4aeb06299043a53c250e89b876a373f712b0e22a4d008a29342c92dffbdf0dd9d670b996e953b2df8deddf40ad4b958ac075cac60ed2d9b81db07784f31b72a1cc4fb4a5ff53887871262ae2b19197f7755ae13a02b9d0fe9c3532c5acf20a2c8099a9ef5e2ae80003870981777782492456d6ba", @generic="4172bfcfaf6e41dc05c3d6e4bec3381f7991fe2c2e1f99f5686b232230bbac92a3e5cdd1133bc3c5562bac1d305c43c31c9e7666964f9f3c7a94630cf7ac90675e62c0eee53844de17ac04945cf7d5d6ef7458d2a10e3acaafe32ab85efdfd7a19527ff122e9c1c23faddcc5446a6f17daeb585a3f366d65bec66e8b7181b8f7e0965ccdbd493a0f54e125056c388e29ed9a6a87d3c52257ac14c85c139202ce386eca39f8e8be1c6c8eea43e912ce0b512d1d78cbef203afbf286"]}, @generic="ab7147736c3b2753a7ecf33d9e6c59b1195178db67cf098c0657344b5f477b624530a7afd3925238907c0beb3bd737e6f78a41695aaa14f077b0d03e08d928946e7322e2e8f6c2bc08ad523adcbc0ec5f3ac2760e7187cc60eba0f393c6ac877125439981c41e1dca2ea43c10ecd5d3e98ccadda4bdd209f03e77fc3945c23f5b509a436ebc0961efc18b49576a4700dcd5cca84d2", @nested={0x0, 0xf3, 0x0, 0x1, [@typed={0x0, 0x20, 0x0, 0x0, @u64=0x8}, @generic="c62ee4f56f4095c491f3e6ab1703f13634f00f1adc49699bef9131ecfd178998b0bf6f1121c88672c6f5080f543eab0a8d851f470ae5bbc508dd9595e7f4591ab3c6651dc89f5680feb5a968b986d5465338237e933f67eb042f1eca349298d49df6c6d90eb6dcb1a449408d3e208843303d2b53770d80c58f0584a071cee81e52468a64e872a758ebc5006b13896a3c486783eb613046ba", @generic="b5814db4d02d7d818332d373600db6742b756a311b7c59b94916c35f0e8dc5e23a9d3c36eb29b33957368424467adfccfa73ca9159cc560aa139acd6dded7c5d267cbf8a1bad6e0abb75d3d2645f31e6e2cc9c0c38c6aface7a9f7a581271959176f7a4141c9e627241b03ba8544bedd644148e8665c8c8510a28d70f107540f85217d9a41d6716ba47de840162b56f094adecfdc2dc8ed61b16b6257d479de57c6727dfba4458350372c243b9c282f7e715d81642db750512", @typed={0x0, 0x9a, 0x0, 0x0, @uid=r2}]}, @typed={0x0, 0x29, 0x0, 0x0, @ipv6=@mcast2}, @generic="36dbf7c5f44d6587e9401cd42112c85d3df36aabc7d1dd6fb3194f2b5bb927f6172e898b55595c836376715826f6b82d4f6426c8c0210b55d1286f251112cd67688e7dee4698ea85e6c0a04b0ebe560827276a45eb097e7bebc9d3416f601db1c5c385b534ec04e147815109eadeb71511cb9a9ea17312702a1268c70eaf206df6d98ef4fdf4514375bba2b831e2ebef906c6ca8125d83aac2ca0e5fc5c852a2fc7630ef2334447d2b88f72250044e2b4ac58fc5b385026c9067bc327db7ba9c64bef07771d0690061e903d3a51f", @generic="33908956d179fe50168d3c5a6ff3", @nested={0x0, 0xb5}, @typed={0x0, 0x25, 0x0, 0x0, @binary="fcc3d3d33355bba07ad5e70dccb19a00a17ebd6c6f8485e90a48dd8b19a3cf82d285cff425d79929f05df324e7c3c57a97428c7bb8a6ac5a6fd15fd1b55ed2a9928001f7b5d8442a25d6f883f7bf9d5e17d22fdfdf4cd7b55b0ef4a6ae063176d516d95ecd20109ec3dba898f553643e5008e0d43c7b9a5a261e1dd94df0f17c5487cca9b297c37c9971cb92194f6ecff193f45de6dc281b6595996c44bf0f7a4e0a8c8c7e01c7bea7cd292ea8a2943b11bd02f94f33a53fa81e9d6f40c248f08b4e1e6534ce003d81ab52c68519e061f30c27053a8f96dde8a17e305bfdb0377f16e80ae1a954cd38b7e67dadd1cb1fb7a0226c1a48c19e2dd1"}, @nested={0x0, 0xe4, 0x0, 0x1, [@nested={0x0, 0x105}, @generic="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", @nested={0x0, 0x9a}]}]}]}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0xc800) 7.19719833s ago: executing program 1 (id=840): openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/block/nbd11/sched/async_depth\x00', 0x2000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/netdevsim0/power/runtime_suspended_time\x00', 0x2400, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_CHANNEL_INFO2(r0, 0x80184132, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_pnetid(0x0, 0xffffffffffffffff) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/pcmC1D0p\x00', 0x0, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x2, 0x80002, 0x73) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/usb_storage/parameters/delay_use\x00', 0x181942, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x1f40) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x7, 0x3b, 0x3ff, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb2, 0x9, 0x3, 0xfffc, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0x0, 0x81, 0x0, 0x7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5]}, 0x202, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_MPATH(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)={0x474, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_HE_CAPABILITY={0x36, 0x10d, "bee35099262b3650ea6b14cc39f9b010ad6260912a3c7e5e68faf7f4dd90e6605039653d0c19673ab836f6717ae189ea82e3"}, @NL80211_ATTR_AUTH_DATA={0x1c, 0x9c, "11d606d638638dcf1700a730048af0e9baccddd2d6f8d106"}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x40}, @NL80211_ATTR_IE_ASSOC_RESP={0x3f8, 0x80, "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"}, @NL80211_ATTR_SPLIT_WIPHY_DUMP={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x100}]}, 0x474}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80502, 0x0) write$auto_tty_fops_tty_io(r3, &(0x7f0000000340)="2a3f9218659200008a677517d554c80b25c30000000000000071dde0152c549d44cf790bd304059e64ec347e9b173c52324e7de19a503727fe47d78e0bc2c5590e61b5d86887240d03bca3460f12f2107274ade4e6e53a728e346cef781b623364989314a43e5fd9e20e24417d6b21117b3308557a7b2aa2cb541dea5cb3b6a521b869ac5ff14cb52c4487dd3a3f4a81ff5957aa1109af5a3a1ce466381cc21fea0c67d8a165f29a6b9537b178bfdd013443481ba707ba4632e0478b951e619775f83f13b36d6426", 0xc8) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) 6.789356929s ago: executing program 3 (id=841): mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r1 = socket(0xa, 0x5, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) getsockopt$auto(r1, 0x0, 0x50, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) pread64$auto(0xffffffffffffffff, 0x0, 0x7fc, 0x400) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace\x00', 0x600, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) unshare$auto(0x40000080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(r2, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000280)={0x14, r3, 0xf3e97f51700e57cf, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x8020) mmap$auto(0x0, 0x400008, 0xe4, 0x9b72, 0x2, 0x400) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r4 = socket(0xa, 0x2, 0x88) capset$auto(0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x800, 0x100) setsockopt$auto(r4, 0x29, 0x10, 0x0, 0x1) socket(0xa, 0x801, 0x84) mmap$auto(0x9, 0x7fffffffffffffff, 0xe3b0, 0x16, r0, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0xffffffffffffffff, 0x0, 0xffffffe6) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mbind$auto(0x2001, 0x100000004, 0xfffffffc, 0x0, 0x6, 0x2) unshare$auto(0x40000080) 6.60478249s ago: executing program 0 (id=842): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/ieee80211/phy2/address_mask\x00', 0x88100, 0x0) mmap$auto(0x4, 0x100008001, 0xfffffffffffffff3, 0xebc, r0, 0xc791) r1 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000440)="d0207565a205830a0d588adcb44bbf75b4d888140f41c34b92e8626d70184316004304b7cd53cb6096247a71", 0x2c) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x4) sysfs$auto(0x2, 0x1a, 0x0) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2506, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x3a32182}, 0xed7138b}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) write$auto(0x3, 0x0, 0xfdef) close_range$auto(0x2, 0x8, 0x0) setresgid$auto(0xffffffffffffffff, 0x0, 0x7fffffffffffffff) r3 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0c\x00', 0x240601, 0x0) recvmmsg$auto(r3, &(0x7f0000000380)={{&(0x7f0000000100)="7faa331330012f3596a77287ca72693c3355ee49c1004b", 0x7, &(0x7f0000000280)={&(0x7f0000000240)="7e995939fe34cb2eeb6cf335e9ec0379214e56ab59b999a7bd5552215d7b916dae3e490a373e75e18ec3f64d21d182022f", 0xb8}, 0x2, &(0x7f00000002c0)="fadf6490f9e33e53c4a127a7943078aec05540e189b1bcef8fde0600eb4625f891fde4a5c69c46cccb761212e0ada005da10a87b9187888b9b2dd43f45041f73a5013b68d9d22eb822027a3dafa7f32c94204a643c894e50eb8cdabc4c8608cb2073732f7ff29c38bc19001e0634b88eed097bc898de69f622a48c4481fc1b0324dc656254bda6de28343c2831ce7fa7758f9cbae6eb6e925f832c03f662c7", 0x8, 0x3}, 0x6}, 0x800, 0xe63, &(0x7f00000003c0)={0x9, 0xffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'pimreg0\x00'}) bpf$auto(0x4, &(0x7f0000000180)=@query={@target_fd=r1, 0x9, 0x1, 0x6f7, 0x8, @count=0xf58000, 0x0, 0x7, 0x81, 0x0, 0xe}, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000c80), r4) sendmsg$auto_OVS_FLOW_CMD_SET(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYRES32=r5], 0x28}, 0x1, 0x0, 0x0, 0x24020000}, 0x480c0) 6.102190682s ago: executing program 0 (id=844): mbind$auto(0xfffffffffffff000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) r0 = clone$auto(0x3, 0x2, &(0x7f0000000000)=0x3ff, &(0x7f0000000040)=0x2, 0x1) prctl$auto(0x4, 0x6, r0, 0x2815, 0x8) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) socket(0x11, 0x2, 0x73) pipe2$auto(0x0, 0x0) io_uring_setup$auto(0x7e1b, 0x0) socket(0x2, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x2, 0x14) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x101e81, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0x3, 0x80000541b, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0xfffffffffffffffe, 0xffffffffffff0001, 0x15) open(&(0x7f0000000300)='./file0\x00', 0x7ffd, 0x12) write$auto(0x3, 0x0, 0x100082) clone$auto(0x7, 0x2000400000d, 0xfffffffffffffffc, 0x0, 0x3) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x200007, 0x19) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x29a02, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/rds/tcp/rds_tcp_sndbuf\x00', 0x40001, 0x0) 5.051023267s ago: executing program 1 (id=845): mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x20003b46, 0x7, 0x0, 0x0, 0x2) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0xa, 0x0, 0x4) mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000) sysfs$auto(0x2, 0x10, 0x0) fsopen$auto(0x0, 0x1) 5.048389858s ago: executing program 2 (id=846): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000001900)='/dev/adsp1\x00', 0x28082, 0x0) ioctl$auto_SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000040)) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) futex$auto(0x0, 0x85, 0x10005, 0x0, 0x0, 0x10000007) 4.877265403s ago: executing program 0 (id=847): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) r0 = socket(0xa, 0x1, 0x100) mmap$auto(0x0, 0x420008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r1, 0xc1004111, 0x0) getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, &(0x7f00000001c0)='/dev/virtual_nci\x00', &(0x7f0000000240)=0x7) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0040, 0x0) pread64$auto(r2, 0x0, 0x7ff, 0x400) r3 = socket(0x1e, 0x1, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x281, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) inotify_init1$auto(0x401) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendmsg$auto_IPVS_CMD_FLUSH(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="b2f40700", @ANYRES16=0x0, @ANYBLOB="080025bd7000ffdbdf25110000000800050006000000", @ANYBLOB="0c00290084660000000000008d1083b7312d58c5ebaf487bb998f3418a8151bb07f2443548e4f835120dabebd9cfacb4df6c09d5c51d5a796dcd884b3e930a755c3e6e9a8bf602ba954dddf50ba937da8e0eb88ee25349d036733e829ade17deaae15e1e9298ffa9cd09d12467d4b27c2248f3edabe64261dd558c1b9e518a", @ANYBLOB="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"], 0x390}, 0x1, 0x0, 0x0, 0x20018810}, 0x44040) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x55) ioctl$auto(0x3, 0x5411, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022ebd700001dcdfe20b0000000000faff0c0000000080"], 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x20000800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) 4.87595929s ago: executing program 2 (id=849): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x7, 0x4, 0xdf, 0x9b72, 0x7, 0x28007) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = gettid() mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) kill$auto(r1, 0x11) prctl$auto(0x16, 0x1, 0x6, 0xeffffffffffffffe, 0x3000) mmap$auto(0xffffffffffdffffc, 0xfcf, 0x1, 0xeb2, 0xffffffffffffffff, 0x20000007) socket(0xa, 0x2, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x40200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x0, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3d, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x7, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x5, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x208000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x100006]}, 0x0) open(&(0x7f0000000080)='./cgroup\x00', 0x40001, 0x6) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) read$auto(r4, 0x0, 0x53) r5 = openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$auto_safesetid_gid_file_fops_securityfs(r5, 0x0, 0xea) landlock_create_ruleset$auto(&(0x7f0000000000)={0xfffffffffffffff8, 0x6, 0x7}, 0x6, 0x1) landlock_restrict_self$auto(r0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) 4.759069604s ago: executing program 1 (id=850): set_mempolicy_home_node$auto(0x9, 0xfffffffffffffff9, 0x2, 0x3) ioperm$auto(0x7, 0x6, 0x2) r0 = semctl$auto_GETPID(0x7, 0x3, 0xb, 0x3) r1 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48101, 0x0) r2 = socket(0x1e, 0x80805, 0x0) listen$auto(r2, 0x9) accept$auto(r2, 0x0, 0x0) write$auto(r1, &(0x7f0000002e80)='#[-#\x00', 0x4) prctl$auto(0x1000000003b, 0xfffffffffffffffe, r0, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x440c0, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/amidi2\x00', 0x10001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) listmount$auto(0x0, 0x0, 0x4, 0x101) open(0x0, 0x261c2, 0x84) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x20009, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r4, 0x1002, 0x0, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x400005, 0xdf, 0x15, 0x2, 0x8000) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) sysinfo$auto(&(0x7f0000000100)={0x6, [0x7, 0xc, 0x100], 0x200, 0xd5, 0x0, 0x7, 0x6, 0x1, 0x1, 0x0, 0x100000004, 0x7, 0x219}) 3.682718753s ago: executing program 2 (id=851): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socket(0x22, 0x3, 0x0) bind$auto(0x3, &(0x7f0000000080)=@isdn={0x22, 0x3d, 0x7, 0x64, 0x7}, 0x6b) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyw5\x00', 0x28341, 0x0) ioctl$auto_TIOCMGET2(r1, 0x5415, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000400)='/dev/amidi2\x00', 0x201, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS64(r2, 0xc0385720, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, 0x0, 0x4000080) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mknod$auto(&(0x7f0000000280)='X))\x00', 0x63c5, 0x7bf) mknod$auto(&(0x7f0000000340)='\xe1\x9eHU\x00', 0x63c1, 0x7fc) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/workqueue/nf_ft_offload_add/power/runtime_active_time\x00', 0x20042, 0x0) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2c, 0x3, 0x0) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kcore\x00', 0x101000, 0x0) sendfile$auto(0x3, r3, 0x0, 0x2) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x66ab80, 0x0) r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) ioctl$auto_UI_SET_EVBIT(r4, 0x40045564, &(0x7f0000000180)=0x1) unshare$auto(0x40000080) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, 0x0) close_range$auto(0x2, 0x8, 0x0) bpf$auto(0x2, 0x0, 0xc) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vkms/graphics/fb0/bits_per_pixel\x00', 0x82942, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0) 3.135782743s ago: executing program 0 (id=852): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x100, 0x0) r1 = bpf$auto(0x1, &(0x7f0000000280)=@bpf_attr_7={@start_id=0x8, 0x2, 0x3, r0}, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x2, 0x1) connect$auto(r2, &(0x7f00000000c0), 0x55) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0x8000000000ac1, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x8000007, 0x40000000000fffd, 0x6, 0x81, 0x68198}, 0x6f3) io_uring_setup$auto(0x6, 0x0) write$auto(0x3, 0x0, 0x8000000000000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) sendmsg$auto_NFSD_CMD_POOL_MODE_GET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000088}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r4, 0x100, 0x70bd29, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 2.742204722s ago: executing program 2 (id=853): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x80080, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x2, 0x88) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) read$auto_dfs_global_fops_debug(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) socket(0xa, 0x3, 0x6) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(0x2, r1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0180, 0x0) r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x401f, 0x1, 0x8e051, r3, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0xffffffffffffffff, 0xae3d, 0xffffffffffffffff) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x30, 0xff, 0x0, @raw=0xfffff030}}) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) flistxattr$auto(0xffffffffffffffff, 0x0, 0x8) 2.292992164s ago: executing program 2 (id=854): socket(0x2, 0x1, 0x106) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) shmctl$auto(0x8, 0x8, 0x0) socket(0x2, 0x3, 0xa) (async) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_setup$auto(0x1, 0x0) (async) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) pselect6$auto(0xce9e, &(0x7f0000000000)={[0x8, 0x4, 0x0, 0x6, 0x10000008001, 0x4000000000002bc8, 0x3fd6d3f5, 0x0, 0x2, 0xffffffff, 0xc4e, 0x0, 0x2f, 0x2, 0xa, 0x7]}, 0x0, 0x0, 0x0, 0x0) futex_requeue$auto(&(0x7f0000000040)={0xb, 0x6, 0x2}, 0x0, 0xf, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x26142, 0x4b) (async) r1 = open(&(0x7f0000000000)='./file0\x00', 0x26142, 0x4b) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000100), 0x200200, 0x0) (async) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000100), 0x200200, 0x0) write$auto(r1, 0x0, 0x100082) ioctl$auto_FS_IOC_SETFLAGS2(r1, 0x40086602, 0x0) pwrite64$auto(r1, 0x0, 0x8, 0x200000000000003) close_range$auto(0x2, 0xa, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) (async) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) (async) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3f) 1.263582787s ago: executing program 1 (id=855): io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0x1, 0x1ff, 0x100, 0x83, 0x101, 0x6, 0x6}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x876c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x20020, 0x0) set_tid_address$auto(&(0x7f0000000040)=0x5) r1 = openat$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffff9c, &(0x7f0000000000), 0x48400, 0x0) mmap$auto(0x0, 0x400408, 0xffffffff, 0x9b72, r0, 0x8000) mprotect$auto(0x8000, 0x8, 0x8) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) ioctl$auto_FIONREAD(r1, 0xaa00, 0x8001) openat$auto_fops_atomic_t_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/fail_make_request/space\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyr0\x00', 0x60540, 0x0) mmap$auto(0xa, 0xa00009, 0x400002, 0x10, 0x602, 0x300000000000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) socket(0x15, 0x5, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = pipe2$auto(0x0, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x21, 0x2, 0x2) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3) sendmsg$auto_NL80211_CMD_GET_WIPHY(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="810b25bd7080fbdbdf250100"], 0x18}, 0x1, 0x0, 0x0, 0x24008010}, 0xc004) sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) syz_clone(0x23926000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.064274386s ago: executing program 3 (id=856): mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC2\x00', 0x2044c0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) landlock_create_ruleset$auto(0x0, 0x9, 0x0) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, 0x0, 0x40, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyzb\x00', 0x800, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$auto(0x3, 0x40076f3f, 0x38) socket(0xa, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x682, 0x0) ioctl$auto_SOUND_MIXER_READ_STEREODEVS2(r2, 0x80044dfb, &(0x7f0000000040)) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x5c, r3, 0x1, 0x70bd2b, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x2, 0x8, 0xc, 0xe3, 0x4000000002, 0x3}, 0x6f4) bpf$auto(0x18, &(0x7f0000000040)=@link_create={@prog_fd=r4, @target_fd=r4, 0x7fff, 0x40000, @kprobe_multi={0x6, 0x80000001, 0xb70, 0x733, 0x4}}, 0x92) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) 884.459987ms ago: executing program 0 (id=857): mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) futex$auto(0x0, 0x5, 0x0, 0x0, 0x0, 0xa0000001) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/net_prio.ifpriomap\x00', 0x10b142, 0x0) r1 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0xa0000, 0x0) epoll_pwait2$auto(r1, &(0x7f0000000080)={0x4, 0x1}, 0x3, &(0x7f00000000c0)={0x4, 0x370}, &(0x7f0000000100)={0x3}, 0x8) sendfile$auto(r0, r0, 0x0, 0x2) clock_getres$auto(0x1e, &(0x7f0000000000)={0x5, 0x3}) 759.827749ms ago: executing program 2 (id=858): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/pci0000:00/pci_bus/0000:00/rescan\x00', 0xa001, 0x0) mmap$auto(0x5, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GET2(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NET_SHAPER_A_IFINDEX={0x8, 0x8, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60040010}, 0x10) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x101fb, 0x8800000005) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) ioctl$auto_TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, &(0x7f0000001000)=0x4) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001080), 0xffffffffffffffff) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xc0180, 0x0) r4 = ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) mmap$auto(0x0, 0xa, 0x72, 0x8b72, 0x2, 0x8000) sysfs$auto(0x2, 0x8000000000001f, 0x0) socket(0x2, 0x801, 0x106) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), r4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0x4010ae42, 0x38) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x20, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0) 757.200593ms ago: executing program 3 (id=859): r0 = socket(0x17, 0x5, 0x88) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x3a9600, 0x0) (async) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x3a9600, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(r0, &(0x7f00000000c0)=@l2tp={0x2, 0x0, @broadcast, 0x1}, 0x10) (async) bind$auto(r0, &(0x7f00000000c0)=@l2tp={0x2, 0x0, @broadcast, 0x1}, 0x10) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) write$auto(r1, &(0x7f0000000180)='N\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x7ff) connect$auto(0x3, &(0x7f0000000080)=@isdn={0x22, 0xb, 0x9, 0x0, 0x4}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020007, 0xfffffffffffffffb, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x2020007, 0xfffffffffffffffb, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) ioctl$auto_SG_SET_FORCE_PACK_ID(r2, 0x227b, 0x0) (async) ioctl$auto_SG_SET_FORCE_PACK_ID(r2, 0x227b, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) pipe$auto(0x0) wait4$auto(0xffffffffffffffff, 0x0, 0x2, 0x0) madvise$auto(0x0, 0x7, 0x15) (async) madvise$auto(0x0, 0x7, 0x15) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r3 = io_uring_setup$auto(0x8, 0x0) mmap$auto(0x30, 0x2000d, 0x6, 0x11, r3, 0x101) prctl$auto(0x6, 0x1, 0x0, 0x0, 0x6) (async) prctl$auto(0x6, 0x1, 0x0, 0x0, 0x6) mmap$auto(0x0, 0x400008, 0x9ce8, 0x9b72, 0x2, 0x11a9) mprotect$auto(0x1, 0x400000, 0x5) setgroups$auto(0xe32, 0x0) futex$auto(0x0, 0x1000000d, 0x6, 0x0, 0x0, 0x8) (async) futex$auto(0x0, 0x1000000d, 0x6, 0x0, 0x0, 0x8) ioctl$auto_BLKSECTGET2(0xffffffffffffffff, 0x1267, 0x0) (async) ioctl$auto_BLKSECTGET2(0xffffffffffffffff, 0x1267, 0x0) open(0x0, 0x183242, 0x154) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop14\x00', 0x10f642, 0x0) open_by_handle_at$auto(0xffffffffffffffff, 0x0, 0xfbfffffd) (async) open_by_handle_at$auto(0xffffffffffffffff, 0x0, 0xfbfffffd) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0xe87454bb79aa0506, 0x0) 765.997µs ago: executing program 0 (id=860): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) remap_file_pages$auto(0x40, 0x2000fff, 0x0, 0xdc, 0x100000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) recvmmsg$auto(0x3, 0x0, 0x10000, 0x2, 0x0) ioprio_set$auto(0x2, 0x800000000, 0x8) mmap$auto(0x0, 0x4, 0x5, 0x40eb2, 0x402, 0x300000000000) socket(0x2, 0x2, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bind$auto(0x3, 0x0, 0x68) remap_file_pages$auto(0x16c, 0x0, 0xffffffff, 0x80000000, 0x6) 0s ago: executing program 3 (id=861): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) r0 = socket(0xa, 0x1, 0x100) mmap$auto(0x0, 0x420008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r1, 0xc1004111, 0x0) getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, &(0x7f00000001c0)='/dev/virtual_nci\x00', &(0x7f0000000240)=0x7) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0040, 0x0) pread64$auto(r2, 0x0, 0x7ff, 0x400) r3 = socket(0x1e, 0x1, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x281, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) inotify_init1$auto(0x401) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendmsg$auto_IPVS_CMD_FLUSH(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="b2f40700", @ANYRES16=0x0, @ANYBLOB="080025bd7000ffdbdf25110000000800050006000000", @ANYBLOB="0c00290084660000000000008d1083b7312d58c5ebaf487bb998f3418a8151bb07f2443548e4f835120dabebd9cfacb4df6c09d5c51d5a796dcd884b3e930a755c3e6e9a8bf602ba954dddf50ba937da8e0eb88ee25349d036733e829ade17deaae15e1e9298ffa9cd09d12467d4b27c2248f3edabe64261dd558c1b9e518a", @ANYBLOB="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"], 0x390}, 0x1, 0x0, 0x0, 0x20018810}, 0x44040) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x55) ioctl$auto(0x3, 0x5411, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022ebd700001dcdfe20b0000000000faff0c0000000080"], 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x20000800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) kernel console output (not intermixed with test programs): 040] random: crng reseeded on system resumption [ 193.204355][ T7106] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 193.382720][ T7106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.223'. [ 193.917486][ T7128] FAULT_INJECTION: forcing a failure. [ 193.917486][ T7128] name fail_futex, interval 1, probability 0, space 0, times 0 [ 193.965548][ T7128] CPU: 1 UID: 0 PID: 7128 Comm: syz.3.227 Not tainted syzkaller #0 PREEMPT(full) [ 193.965580][ T7128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 193.965593][ T7128] Call Trace: [ 193.965601][ T7128] [ 193.965609][ T7128] dump_stack_lvl+0x16c/0x1f0 [ 193.965649][ T7128] should_fail_ex+0x512/0x640 [ 193.965691][ T7128] get_futex_key+0x1d0/0x1560 [ 193.965721][ T7128] ? kernfs_put_active+0x86/0xe0 [ 193.965755][ T7128] ? __pfx_get_futex_key+0x10/0x10 [ 193.965783][ T7128] ? seq_read_iter+0x6b/0x12c0 [ 193.965813][ T7128] futex_wake+0xea/0x530 [ 193.965850][ T7128] ? __pfx_futex_wake+0x10/0x10 [ 193.965889][ T7128] ? ksys_read+0x190/0x250 [ 193.965921][ T7128] do_futex+0x1e3/0x350 [ 193.965950][ T7128] ? __pfx_do_futex+0x10/0x10 [ 193.965988][ T7128] __x64_sys_futex+0x1e0/0x4c0 [ 193.966025][ T7128] ? fput+0x9b/0xd0 [ 193.966057][ T7128] ? __pfx___x64_sys_futex+0x10/0x10 [ 193.966086][ T7128] ? ksys_read+0x1ac/0x250 [ 193.966111][ T7128] ? __pfx_ksys_read+0x10/0x10 [ 193.966146][ T7128] do_syscall_64+0xcd/0x4c0 [ 193.966168][ T7128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.966192][ T7128] RIP: 0033:0x7f860738eec9 [ 193.966210][ T7128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.966231][ T7128] RSP: 002b:00007f860824e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 193.966253][ T7128] RAX: ffffffffffffffda RBX: 00007f86075e5fa8 RCX: 00007f860738eec9 [ 193.966268][ T7128] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f86075e5fac [ 193.966281][ T7128] RBP: 00007f86075e5fa0 R08: 00007f860824f000 R09: 0000000000000000 [ 193.966295][ T7128] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 193.966308][ T7128] R13: 00007f86075e6038 R14: 00007ffc3b6fefc0 R15: 00007ffc3b6ff0a8 [ 193.966337][ T7128] [ 194.735791][ T7140] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078000000 pfn:0x78000 [ 194.769627][ T7140] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 194.781645][ T7140] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 194.790655][ T7140] raw: ffff888078000000 0000000000000000 00000001ffffffff 0000000000000000 [ 194.801026][ T7140] page dumped because: unmovable page [ 194.807503][ T7140] page_owner tracks the page as allocated [ 194.815104][ T7140] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO), pid 6040, tgid 6026 (syz.3.15), ts 117780741259, free_ts 114232739814 [ 194.962108][ T7140] post_alloc_hook+0x1c0/0x230 [ 194.971085][ T7140] get_page_from_freelist+0x132b/0x38e0 [ 194.991636][ T7140] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 195.032539][ T7140] alloc_pages_mpol+0x1fb/0x550 [ 195.037555][ T7140] alloc_pages_noprof+0x131/0x390 [ 195.042902][ T7140] brd_submit_bio+0x942/0x1180 [ 195.047751][ T7140] __submit_bio+0x304/0x690 [ 195.052429][ T7140] submit_bio_noacct_nocheck+0x852/0xd30 [ 195.058179][ T7140] submit_bio_noacct+0xc20/0x1ed0 [ 195.063351][ T7140] blkdev_direct_IO+0x14d2/0x2030 [ 195.068523][ T7140] blkdev_write_iter+0x703/0xe00 [ 195.073753][ T7140] vfs_write+0x7d0/0x11d0 [ 195.078185][ T7140] ksys_write+0x12a/0x250 [ 195.082777][ T7140] do_syscall_64+0xcd/0x4c0 [ 195.087401][ T7140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.093532][ T7140] page last free pid 23 tgid 23 stack trace: [ 195.099687][ T7140] __free_frozen_pages+0x7d5/0x10f0 [ 195.106076][ T7140] rcu_core+0x799/0x1530 [ 195.113673][ T7140] handle_softirqs+0x216/0x8e0 [ 195.120327][ T7140] run_ksoftirqd+0x3a/0x60 [ 195.128094][ T7140] smpboot_thread_fn+0x3f7/0xae0 [ 195.134722][ T7140] kthread+0x3c5/0x780 [ 195.140247][ T7140] ret_from_fork+0x56d/0x730 [ 195.148067][ T7140] ret_from_fork_asm+0x1a/0x30 [ 195.817163][ T7154] netlink: 28 bytes leftover after parsing attributes in process `syz.3.232'. [ 197.296477][ T7171] FAULT_INJECTION: forcing a failure. [ 197.296477][ T7171] name failslab, interval 1, probability 0, space 0, times 0 [ 197.316501][ T7171] CPU: 1 UID: 0 PID: 7171 Comm: syz.1.237 Not tainted syzkaller #0 PREEMPT(full) [ 197.316544][ T7171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 197.316563][ T7171] Call Trace: [ 197.316574][ T7171] [ 197.316587][ T7171] dump_stack_lvl+0x16c/0x1f0 [ 197.316644][ T7171] should_fail_ex+0x512/0x640 [ 197.316697][ T7171] ? fs_reclaim_acquire+0xae/0x150 [ 197.316761][ T7171] should_failslab+0xc2/0x120 [ 197.316808][ T7171] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 197.316850][ T7171] ? security_inode_alloc+0x3b/0x2b0 [ 197.316896][ T7171] security_inode_alloc+0x3b/0x2b0 [ 197.316937][ T7171] inode_init_always_gfp+0xce4/0x1030 [ 197.316984][ T7171] alloc_inode+0x86/0x240 [ 197.317034][ T7171] new_inode+0x22/0x1c0 [ 197.317080][ T7171] ? trace_cap_capable+0x18d/0x200 [ 197.317119][ T7171] shmem_get_inode+0x19a/0xfb0 [ 197.317174][ T7171] ? __vm_enough_memory+0x184/0x3f0 [ 197.317229][ T7171] __shmem_file_setup+0x279/0x330 [ 197.317268][ T7171] shmem_zero_setup+0x93/0x1a0 [ 197.317314][ T7171] __mmap_region+0x2081/0x27b0 [ 197.317357][ T7171] ? lock_acquire+0x179/0x350 [ 197.317403][ T7171] ? __pfx___mmap_region+0x10/0x10 [ 197.317454][ T7171] ? lockdep_hardirqs_on+0x7c/0x110 [ 197.317501][ T7171] ? finish_task_switch.isra.0+0x221/0xc10 [ 197.317534][ T7171] ? rcu_is_watching+0x12/0xc0 [ 197.317571][ T7171] ? trace_sched_exit_tp+0xd1/0x120 [ 197.317626][ T7171] ? __schedule+0x11a3/0x5de0 [ 197.317754][ T7171] ? rcu_is_watching+0x12/0xc0 [ 197.317802][ T7171] mmap_region+0x1ab/0x3f0 [ 197.317852][ T7171] do_mmap+0xa3e/0x1210 [ 197.317910][ T7171] ? __pfx_do_mmap+0x10/0x10 [ 197.317959][ T7171] ? __pfx_down_write_killable+0x10/0x10 [ 197.317992][ T7171] ? kmem_cache_free+0x2d1/0x4d0 [ 197.318034][ T7171] vm_mmap_pgoff+0x29e/0x470 [ 197.318085][ T7171] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 197.318142][ T7171] ? __x64_sys_futex+0x1e0/0x4c0 [ 197.318183][ T7171] ? __x64_sys_futex+0x1e9/0x4c0 [ 197.318231][ T7171] ksys_mmap_pgoff+0x7d/0x5c0 [ 197.318277][ T7171] ? xfd_validate_state+0x61/0x180 [ 197.318335][ T7171] __x64_sys_mmap+0x125/0x190 [ 197.318392][ T7171] do_syscall_64+0xcd/0x4c0 [ 197.318424][ T7171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.318456][ T7171] RIP: 0033:0x7fa07c38eec9 [ 197.318501][ T7171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.318533][ T7171] RSP: 002b:00007fa07d176038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 197.318562][ T7171] RAX: ffffffffffffffda RBX: 00007fa07c5e5fa0 RCX: 00007fa07c38eec9 [ 197.318580][ T7171] RDX: 0000000000000003 RSI: 000000000000e983 RDI: 0000000000000000 [ 197.318597][ T7171] RBP: 00007fa07c411f91 R08: ffffffffffffffff R09: 0000000000008000 [ 197.318617][ T7171] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 197.318636][ T7171] R13: 00007fa07c5e6038 R14: 00007fa07c5e5fa0 R15: 00007fffd31a31c8 [ 197.318679][ T7171] [ 197.619289][ T7171] GUP no longer grows the stack in syz.1.237 (7171): f000-401000 (0) [ 197.627874][ T7171] CPU: 1 UID: 0 PID: 7171 Comm: syz.1.237 Not tainted syzkaller #0 PREEMPT(full) [ 197.627920][ T7171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 197.627940][ T7171] Call Trace: [ 197.627951][ T7171] [ 197.627963][ T7171] dump_stack_lvl+0x16c/0x1f0 [ 197.628022][ T7171] gup_vma_lookup+0x1d2/0x220 [ 197.628073][ T7171] __get_user_pages+0x243/0x34a0 [ 197.628139][ T7171] ? down_read_killable+0x220/0x4b0 [ 197.628176][ T7171] ? __pfx___get_user_pages+0x10/0x10 [ 197.628232][ T7171] ? __lock_acquire+0x62e/0x1ce0 [ 197.628283][ T7171] __gup_longterm_locked+0xa92/0x17e0 [ 197.628349][ T7171] ? __pfx___gup_longterm_locked+0x10/0x10 [ 197.628408][ T7171] ? find_held_lock+0x2b/0x80 [ 197.628441][ T7171] ? sanity_check_pinned_pages+0x23/0x11d0 [ 197.628511][ T7171] gup_fast_fallback+0xf78/0x23f0 [ 197.628574][ T7171] ? __pfx_stack_trace_save+0x10/0x10 [ 197.628629][ T7171] ? blkdev_write_iter+0x703/0xe00 [ 197.628676][ T7171] ? __pfx_gup_fast_fallback+0x10/0x10 [ 197.628726][ T7171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.628782][ T7171] pin_user_pages_fast+0xa7/0xf0 [ 197.628836][ T7171] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 197.628901][ T7171] iov_iter_extract_pages+0x3a2/0x1ed0 [ 197.628954][ T7171] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 197.629000][ T7171] ? find_held_lock+0x2b/0x80 [ 197.629034][ T7171] ? bio_associate_blkg_from_css+0x394/0x13e0 [ 197.629092][ T7171] bio_iov_iter_get_pages+0x384/0x10d0 [ 197.629127][ T7171] ? bio_associate_blkg+0x137/0x2a0 [ 197.629188][ T7171] ? __pfx_bio_iov_iter_get_pages+0x10/0x10 [ 197.629225][ T7171] ? __pfx_bio_alloc_bioset+0x10/0x10 [ 197.629255][ T7171] ? ktime_get_coarse_real_ts64_mg+0x240/0x300 [ 197.629304][ T7171] ? rcu_is_watching+0x12/0xc0 [ 197.629337][ T7171] ? iov_iter_is_aligned+0xf2/0x5a0 [ 197.629389][ T7171] ? set_normalized_timespec64+0x69/0xc0 [ 197.629451][ T7171] blkdev_direct_IO+0x127f/0x2030 [ 197.629520][ T7171] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 197.629574][ T7171] ? filemap_check_errors+0xa9/0x160 [ 197.629642][ T7171] blkdev_write_iter+0x703/0xe00 [ 197.629697][ T7171] vfs_write+0x7d0/0x11d0 [ 197.629738][ T7171] ? __pfx_blkdev_write_iter+0x10/0x10 [ 197.629790][ T7171] ? __pfx_vfs_write+0x10/0x10 [ 197.629826][ T7171] ? find_held_lock+0x2b/0x80 [ 197.629887][ T7171] ksys_write+0x12a/0x250 [ 197.629926][ T7171] ? __pfx_ksys_write+0x10/0x10 [ 197.629979][ T7171] do_syscall_64+0xcd/0x4c0 [ 197.630014][ T7171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.630047][ T7171] RIP: 0033:0x7fa07c38eec9 [ 197.630075][ T7171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.630107][ T7171] RSP: 002b:00007fa07d176038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 197.630139][ T7171] RAX: ffffffffffffffda RBX: 00007fa07c5e5fa0 RCX: 00007fa07c38eec9 [ 197.630160][ T7171] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 197.630179][ T7171] RBP: 00007fa07c411f91 R08: 0000000000000000 R09: 0000000000000000 [ 197.630198][ T7171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.630217][ T7171] R13: 00007fa07c5e6038 R14: 00007fa07c5e5fa0 R15: 00007fffd31a31c8 [ 197.630259][ T7171] [ 198.000013][ T7172] random: crng reseeded on system resumption [ 200.002193][ T7200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.244'. [ 201.716168][ T7213] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(13) [ 204.597488][ T7263] FAULT_INJECTION: forcing a failure. [ 204.597488][ T7263] name failslab, interval 1, probability 0, space 0, times 0 [ 204.659093][ T7263] CPU: 0 UID: 0 PID: 7263 Comm: syz.3.252 Not tainted syzkaller #0 PREEMPT(full) [ 204.659136][ T7263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 204.659155][ T7263] Call Trace: [ 204.659165][ T7263] [ 204.659178][ T7263] dump_stack_lvl+0x16c/0x1f0 [ 204.659234][ T7263] should_fail_ex+0x512/0x640 [ 204.659287][ T7263] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 204.659327][ T7263] should_failslab+0xc2/0x120 [ 204.659373][ T7263] __kmalloc_cache_noprof+0x6a/0x3e0 [ 204.659407][ T7263] ? lockdep_init_map_type+0x5c/0x280 [ 204.659456][ T7263] ? nci_hci_allocate+0x45/0x330 [ 204.659515][ T7263] nci_hci_allocate+0x45/0x330 [ 204.659568][ T7263] nci_allocate_device+0x26f/0x430 [ 204.659614][ T7263] virtual_ncidev_open+0x6f/0x220 [ 204.659659][ T7263] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 204.659702][ T7263] misc_open+0x35a/0x420 [ 204.659744][ T7263] ? __pfx_misc_open+0x10/0x10 [ 204.659784][ T7263] chrdev_open+0x234/0x6a0 [ 204.659827][ T7263] ? __pfx_apparmor_file_open+0x10/0x10 [ 204.659866][ T7263] ? __pfx_chrdev_open+0x10/0x10 [ 204.659924][ T7263] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 204.659972][ T7263] do_dentry_open+0x982/0x1530 [ 204.660015][ T7263] ? __pfx_chrdev_open+0x10/0x10 [ 204.660067][ T7263] vfs_open+0x82/0x3f0 [ 204.660119][ T7263] path_openat+0x1de4/0x2cb0 [ 204.660175][ T7263] ? __pfx_path_openat+0x10/0x10 [ 204.660229][ T7263] do_filp_open+0x20b/0x470 [ 204.660269][ T7263] ? __pfx_do_filp_open+0x10/0x10 [ 204.660339][ T7263] ? alloc_fd+0x471/0x7d0 [ 204.660388][ T7263] do_sys_openat2+0x11b/0x1d0 [ 204.660440][ T7263] ? __pfx_do_sys_openat2+0x10/0x10 [ 204.660508][ T7263] __x64_sys_openat+0x174/0x210 [ 204.660538][ T7263] ? __pfx___x64_sys_openat+0x10/0x10 [ 204.660584][ T7263] do_syscall_64+0xcd/0x4c0 [ 204.660615][ T7263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.660649][ T7263] RIP: 0033:0x7f860738eec9 [ 204.660675][ T7263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.660706][ T7263] RSP: 002b:00007f860822d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 204.660738][ T7263] RAX: ffffffffffffffda RBX: 00007f86075e6090 RCX: 00007f860738eec9 [ 204.660759][ T7263] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 204.660777][ T7263] RBP: 00007f8607411f91 R08: 0000000000000000 R09: 0000000000000000 [ 204.660795][ T7263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.660813][ T7263] R13: 00007f86075e6128 R14: 00007f86075e6090 R15: 00007ffc3b6ff0a8 [ 204.660851][ T7263] [ 205.245712][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 205.282598][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 207.562869][ T7316] bond0: option peer_notif_delay: invalid value () [ 207.595586][ T7316] bond0: option peer_notif_delay: allowed values 0 - 300000 [ 208.184115][ T7341] FAULT_INJECTION: forcing a failure. [ 208.184115][ T7341] name failslab, interval 1, probability 0, space 0, times 0 [ 208.249831][ T7341] CPU: 0 UID: 0 PID: 7341 Comm: syz.3.267 Not tainted syzkaller #0 PREEMPT(full) [ 208.249883][ T7341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 208.249902][ T7341] Call Trace: [ 208.249913][ T7341] [ 208.249925][ T7341] dump_stack_lvl+0x16c/0x1f0 [ 208.249979][ T7341] should_fail_ex+0x512/0x640 [ 208.250030][ T7341] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 208.250076][ T7341] should_failslab+0xc2/0x120 [ 208.250119][ T7341] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 208.250159][ T7341] ? alloc_empty_file+0x55/0x1e0 [ 208.250216][ T7341] alloc_empty_file+0x55/0x1e0 [ 208.250267][ T7341] path_openat+0xda/0x2cb0 [ 208.250303][ T7341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.250352][ T7341] ? __pfx_path_openat+0x10/0x10 [ 208.250405][ T7341] do_filp_open+0x20b/0x470 [ 208.250445][ T7341] ? __pfx_do_filp_open+0x10/0x10 [ 208.250517][ T7341] ? alloc_fd+0x471/0x7d0 [ 208.250565][ T7341] do_sys_openat2+0x11b/0x1d0 [ 208.250618][ T7341] ? __pfx_do_sys_openat2+0x10/0x10 [ 208.250682][ T7341] __x64_sys_openat+0x174/0x210 [ 208.250715][ T7341] ? __pfx___x64_sys_openat+0x10/0x10 [ 208.250762][ T7341] do_syscall_64+0xcd/0x4c0 [ 208.250794][ T7341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.250828][ T7341] RIP: 0033:0x7f860738eec9 [ 208.250854][ T7341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.250895][ T7341] RSP: 002b:00007f860824e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 208.250926][ T7341] RAX: ffffffffffffffda RBX: 00007f86075e5fa0 RCX: 00007f860738eec9 [ 208.250948][ T7341] RDX: 8f3b7a51b80ebd01 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 208.250969][ T7341] RBP: 00007f8607411f91 R08: 0000000000000000 R09: 0000000000000000 [ 208.250987][ T7341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.251005][ T7341] R13: 00007f86075e6038 R14: 00007f86075e5fa0 R15: 00007ffc3b6ff0a8 [ 208.251046][ T7341] [ 208.702271][ T7346] netlink: 28 bytes leftover after parsing attributes in process `syz.2.268'. [ 208.785428][ T7346] bridge_slave_1: left allmulticast mode [ 208.791441][ T7346] bridge_slave_1: left promiscuous mode [ 208.801314][ T7346] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.836285][ T7346] bridge_slave_0: left allmulticast mode [ 208.883722][ T7346] bridge_slave_0: left promiscuous mode [ 208.889529][ T7346] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.662376][ T7393] device-mapper: ioctl: Invalid ioctl structure: name , dev 7f00010002 [ 211.521637][ T7410] netlink: 28 bytes leftover after parsing attributes in process `syz.2.280'. [ 211.835209][ T7410] ipvlan0: entered promiscuous mode [ 211.842806][ T7410] ipvlan0: entered allmulticast mode [ 211.852038][ T7410] veth0_vlan: entered allmulticast mode [ 212.255401][ T7408] syz.0.281: vmalloc error: size 268435456, failed to allocated page array size 524288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 212.306929][ T7408] CPU: 0 UID: 0 PID: 7408 Comm: syz.0.281 Not tainted syzkaller #0 PREEMPT(full) [ 212.306970][ T7408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 212.306994][ T7408] Call Trace: [ 212.307005][ T7408] [ 212.307016][ T7408] dump_stack_lvl+0x16c/0x1f0 [ 212.307068][ T7408] warn_alloc+0x248/0x3a0 [ 212.307107][ T7408] ? __pfx_warn_alloc+0x10/0x10 [ 212.307159][ T7408] ? packet_set_ring+0xb52/0x18d0 [ 212.307196][ T7408] ? __vmalloc_node_noprof+0xad/0xf0 [ 212.307232][ T7408] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 212.307277][ T7408] ? packet_set_ring+0xb52/0x18d0 [ 212.307339][ T7408] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 212.307369][ T7408] ? alloc_pages_mpol+0x25a/0x550 [ 212.307414][ T7408] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 212.307464][ T7408] ? packet_set_ring+0xb52/0x18d0 [ 212.307500][ T7408] __vmalloc_node_noprof+0xad/0xf0 [ 212.307530][ T7408] ? packet_set_ring+0xb52/0x18d0 [ 212.307574][ T7408] packet_set_ring+0xb52/0x18d0 [ 212.307630][ T7408] packet_setsockopt+0x121b/0x33c0 [ 212.307677][ T7408] ? __pfx___might_resched+0x10/0x10 [ 212.307711][ T7408] ? __lock_acquire+0x62e/0x1ce0 [ 212.307757][ T7408] ? __pfx_packet_setsockopt+0x10/0x10 [ 212.307800][ T7408] ? aa_sk_perm+0x2f4/0xb10 [ 212.307840][ T7408] ? file_init_path+0x4fe/0x760 [ 212.307891][ T7408] ? __pfx_aa_sk_perm+0x10/0x10 [ 212.307934][ T7408] ? find_held_lock+0x2b/0x80 [ 212.307968][ T7408] ? aa_sock_opt_perm+0xfd/0x1c0 [ 212.308001][ T7408] ? __pfx_packet_setsockopt+0x10/0x10 [ 212.308049][ T7408] do_sock_setsockopt+0xf3/0x1d0 [ 212.308089][ T7408] __sys_setsockopt+0x120/0x1a0 [ 212.308144][ T7408] __x64_sys_setsockopt+0xbd/0x160 [ 212.308190][ T7408] ? do_syscall_64+0x91/0x4c0 [ 212.308217][ T7408] ? lockdep_hardirqs_on+0x7c/0x110 [ 212.308265][ T7408] do_syscall_64+0xcd/0x4c0 [ 212.308296][ T7408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.308337][ T7408] RIP: 0033:0x7fbaf9b8eec9 [ 212.308362][ T7408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.308392][ T7408] RSP: 002b:00007fbafa9aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 212.308420][ T7408] RAX: ffffffffffffffda RBX: 00007fbaf9de5fa0 RCX: 00007fbaf9b8eec9 [ 212.308440][ T7408] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000003 [ 212.308457][ T7408] RBP: 00007fbaf9c11f91 R08: 000000000000ce24 R09: 0000000000000000 [ 212.308474][ T7408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.308491][ T7408] R13: 00007fbaf9de6038 R14: 00007fbaf9de5fa0 R15: 00007fff193f4198 [ 212.308530][ T7408] [ 212.308730][ T7408] Mem-Info: [ 212.523013][ C0] vkms_vblank_simulate: vblank timer overrun [ 212.622488][ T7408] active_anon:17478 inactive_anon:22 isolated_anon:0 [ 212.622488][ T7408] active_file:17075 inactive_file:41600 isolated_file:0 [ 212.622488][ T7408] unevictable:768 dirty:823 writeback:0 [ 212.622488][ T7408] slab_reclaimable:12849 slab_unreclaimable:92908 [ 212.622488][ T7408] mapped:33210 shmem:6833 pagetables:1218 [ 212.622488][ T7408] sec_pagetables:0 bounce:0 [ 212.622488][ T7408] kernel_misc_reclaimable:0 [ 212.622488][ T7408] free:1308618 free_pcp:5759 free_cma:0 [ 212.775587][ T7408] Node 0 active_anon:72616kB inactive_anon:88kB active_file:68300kB inactive_file:166844kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132868kB dirty:3316kB writeback:0kB shmem:25812kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:28672kB kernel_stack:11788kB pagetables:4696kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 213.005442][ T7408] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:140kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 213.037724][ T7408] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 213.072566][ T7408] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 213.078586][ T7408] Node 0 DMA32 free:1308164kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:70252kB inactive_anon:88kB active_file:68300kB inactive_file:165960kB unevictable:6716kB writepending:3316kB present:3129332kB managed:2539524kB mlocked:5180kB bounce:0kB free_pcp:16648kB local_pcp:6056kB free_cma:0kB [ 213.138819][ T7408] lowmem_reserve[]: 0 0 1 1 1 [ 213.166914][ T7408] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1304kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 213.282994][ T7408] lowmem_reserve[]: 0 0 0 0 0 [ 213.293418][ T7408] Node 1 Normal free:3908564kB boost:0kB min:55560kB low:69448kB high:83336kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:140kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:1940kB local_pcp:1176kB free_cma:0kB [ 213.324972][ C0] vkms_vblank_simulate: vblank timer overrun [ 213.423440][ T7408] lowmem_reserve[]: 0 0 0 0 0 [ 213.560866][ T7408] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 213.577759][ T7408] Node 0 DMA32: 274*4kB (UME) 1968*8kB (UME) 1175*16kB (UM) 844*32kB (M) 525*64kB (UM) 274*128kB (UM) 124*256kB (UME) 37*512kB (UM) 19*1024kB (UM) 7*2048kB (U) 266*4096kB (M) = 1305336kB [ 213.601415][ T7408] Node 0 Normal: 1*4kB (M) 2*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 213.676579][ T7408] Node 1 Normal: 129*4kB (UME) 12*8kB (UME) 13*16kB (UME) 185*32kB (UME) 108*64kB (UE) 33*128kB (UE) 12*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 2*2048kB (UE) 947*4096kB (M) = 3908564kB [ 213.783682][ T7408] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 213.794773][ T7408] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 213.805134][ T7408] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 213.815561][ T7408] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 213.839167][ T7408] 68229 total pagecache pages [ 213.844443][ T7408] 14 pages in swap cache [ 213.857748][ T7408] Free swap = 124836kB [ 213.862188][ T7408] Total swap = 124996kB [ 213.868779][ T7408] 2097051 pages RAM [ 213.912835][ T7408] 0 pages HighMem/MovableOnly [ 213.917592][ T7408] 430208 pages reserved [ 213.921820][ T7408] 0 pages cma reserved [ 214.404761][ T7446] netlink: 330 bytes leftover after parsing attributes in process `syz.2.288'. [ 215.157688][ T7439] usbcore.quirks: string doesn't fit in 127 chars. [ 218.071922][ T7467] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 218.093405][ T7498] device-mapper: ioctl: Invalid ioctl structure: name , dev 7f00010002 [ 220.827438][ T7543] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 222.089220][ T30] audit: type=1804 audit(4294975159.684:3): pid=7599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.308" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 222.288847][ T30] audit: type=1806 audit(4294975159.864:4): xattr="" res=-22 [ 222.844852][ T7607] device-mapper: ioctl: Invalid ioctl structure: name , dev 7f00010002 [ 222.927256][ T7621] netlink: 28 bytes leftover after parsing attributes in process `syz.1.311'. [ 223.038098][ T7621] ipvlan0: entered promiscuous mode [ 223.074909][ T7621] ipvlan0: entered allmulticast mode [ 223.085022][ T7621] veth0_vlan: entered allmulticast mode [ 224.567582][ T7646] cougar: G6 mapped to space [ 226.186795][ T7664] 0x000200000001-0xa29656a63616329 : "" [ 226.240387][ T7664] mtd: partition "" is out of reach -- disabled [ 226.264950][ T7674] netlink: 330 bytes leftover after parsing attributes in process `syz.0.322'. [ 226.309609][ T7664] ftl_cs: FTL header not found. [ 229.036113][ T7725] FAULT_INJECTION: forcing a failure. [ 229.036113][ T7725] name failslab, interval 1, probability 0, space 0, times 0 [ 229.067406][ T7725] CPU: 1 UID: 0 PID: 7725 Comm: syz.0.328 Not tainted syzkaller #0 PREEMPT(full) [ 229.067445][ T7725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 229.067459][ T7725] Call Trace: [ 229.067467][ T7725] [ 229.067476][ T7725] dump_stack_lvl+0x16c/0x1f0 [ 229.067519][ T7725] should_fail_ex+0x512/0x640 [ 229.067557][ T7725] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 229.067589][ T7725] should_failslab+0xc2/0x120 [ 229.067621][ T7725] __kmalloc_cache_node_noprof+0x6d/0x420 [ 229.067650][ T7725] ? blkg_alloc+0xb7/0xb00 [ 229.067679][ T7725] blkg_alloc+0xb7/0xb00 [ 229.067712][ T7725] blkcg_init_disk+0x51/0x160 [ 229.067744][ T7725] __alloc_disk_node+0x299/0x640 [ 229.067786][ T7725] __blk_mq_alloc_disk+0x89/0x120 [ 229.067826][ T7725] nbd_dev_add+0x492/0xbb0 [ 229.067865][ T7725] ? __pfx_nbd_dev_add+0x10/0x10 [ 229.067920][ T7725] ? bpf_lsm_capable+0x9/0x10 [ 229.067943][ T7725] ? __radix_tree_lookup+0x21f/0x2c0 [ 229.067982][ T7725] nbd_genl_connect+0x8b0/0x1c60 [ 229.068011][ T7725] ? __pfx_nbd_genl_connect+0x10/0x10 [ 229.068034][ T7725] ? __nla_parse+0x40/0x60 [ 229.068071][ T7725] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 229.068100][ T7725] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 229.068134][ T7725] genl_family_rcv_msg_doit+0x206/0x2f0 [ 229.068162][ T7725] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 229.068188][ T7725] ? genl_get_cmd+0x194/0x580 [ 229.068219][ T7725] ? __radix_tree_lookup+0x21f/0x2c0 [ 229.068258][ T7725] genl_rcv_msg+0x55c/0x800 [ 229.068286][ T7725] ? __pfx_genl_rcv_msg+0x10/0x10 [ 229.068312][ T7725] ? __pfx_nbd_genl_connect+0x10/0x10 [ 229.068346][ T7725] netlink_rcv_skb+0x155/0x420 [ 229.068383][ T7725] ? __pfx_genl_rcv_msg+0x10/0x10 [ 229.068409][ T7725] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 229.068472][ T7725] genl_rcv+0x28/0x40 [ 229.068493][ T7725] netlink_unicast+0x5aa/0x870 [ 229.068534][ T7725] ? __pfx_netlink_unicast+0x10/0x10 [ 229.068572][ T7725] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 229.068607][ T7725] ? __lock_acquire+0xb97/0x1ce0 [ 229.068647][ T7725] netlink_sendmsg+0x8d1/0xdd0 [ 229.068690][ T7725] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.068731][ T7725] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 229.068761][ T7725] ____sys_sendmsg+0xa95/0xc70 [ 229.068789][ T7725] ? copy_msghdr_from_user+0x10a/0x160 [ 229.068827][ T7725] ? __pfx_____sys_sendmsg+0x10/0x10 [ 229.068861][ T7725] ? __pfx_futex_wake_mark+0x10/0x10 [ 229.068902][ T7725] ___sys_sendmsg+0x134/0x1d0 [ 229.068941][ T7725] ? __pfx____sys_sendmsg+0x10/0x10 [ 229.069015][ T7725] __sys_sendmsg+0x16d/0x220 [ 229.069053][ T7725] ? __pfx___sys_sendmsg+0x10/0x10 [ 229.069095][ T7725] ? __x64_sys_futex+0x1e0/0x4c0 [ 229.069144][ T7725] do_syscall_64+0xcd/0x4c0 [ 229.069167][ T7725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.069191][ T7725] RIP: 0033:0x7fbaf9b8eec9 [ 229.069210][ T7725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.069232][ T7725] RSP: 002b:00007fbafa968038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.069254][ T7725] RAX: ffffffffffffffda RBX: 00007fbaf9de6180 RCX: 00007fbaf9b8eec9 [ 229.069269][ T7725] RDX: 0000000020040000 RSI: 0000200000000500 RDI: 0000000000000004 [ 229.069283][ T7725] RBP: 00007fbaf9c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 229.069298][ T7725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.069312][ T7725] R13: 00007fbaf9de6218 R14: 00007fbaf9de6180 R15: 00007fff193f4198 [ 229.069342][ T7725] [ 229.420375][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.538114][ T7741] random: crng reseeded on system resumption [ 229.554031][ T7725] nbd: failed to add new device [ 230.226678][ T7751] netlink: 44 bytes leftover after parsing attributes in process `syz.3.333'. [ 230.326907][ T7751] netlink: 12 bytes leftover after parsing attributes in process `syz.3.333'. [ 230.446961][ T7753] 0x000200000001-0xa29656a63616329 : "" [ 230.452913][ T7753] mtd: partition "" is out of reach -- disabled [ 230.465635][ T7753] ftl_cs: FTL header not found. [ 231.006855][ T7760] random: crng reseeded on system resumption [ 231.185777][ T7763] sd 0:0:1:0: PR command failed: 1026 [ 231.191380][ T7763] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 231.272569][ T7763] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 231.397798][ T7777] netlink: 28 bytes leftover after parsing attributes in process `syz.2.340'. [ 232.638614][ T7791] netlink: 350 bytes leftover after parsing attributes in process `syz.3.342'. [ 234.238833][ T7811] 0x000200000001-0xa29656a63616329 : "" [ 234.244605][ T7811] mtd: partition "" is out of reach -- disabled [ 234.256217][ T7811] ftl_cs: FTL header not found. [ 234.921921][ T7826] random: crng reseeded on system resumption [ 235.487778][ T7829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.350'. [ 236.008738][ T7844] FAULT_INJECTION: forcing a failure. [ 236.008738][ T7844] name failslab, interval 1, probability 0, space 0, times 0 [ 236.067195][ T7844] CPU: 0 UID: 0 PID: 7844 Comm: syz.1.355 Not tainted syzkaller #0 PREEMPT(full) [ 236.067240][ T7844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 236.067259][ T7844] Call Trace: [ 236.067269][ T7844] [ 236.067282][ T7844] dump_stack_lvl+0x16c/0x1f0 [ 236.067339][ T7844] should_fail_ex+0x512/0x640 [ 236.067392][ T7844] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 236.067437][ T7844] should_failslab+0xc2/0x120 [ 236.067510][ T7844] __kmalloc_cache_node_noprof+0x6d/0x420 [ 236.067552][ T7844] ? bdi_alloc+0x44/0x170 [ 236.067606][ T7844] bdi_alloc+0x44/0x170 [ 236.067650][ T7844] __alloc_disk_node+0xac/0x640 [ 236.067709][ T7844] __blk_mq_alloc_disk+0x89/0x120 [ 236.067762][ T7844] nbd_dev_add+0x492/0xbb0 [ 236.067818][ T7844] ? __pfx_nbd_dev_add+0x10/0x10 [ 236.067897][ T7844] ? bpf_lsm_capable+0x9/0x10 [ 236.067930][ T7844] ? __radix_tree_lookup+0x21f/0x2c0 [ 236.067985][ T7844] nbd_genl_connect+0x8b0/0x1c60 [ 236.068027][ T7844] ? __pfx_nbd_genl_connect+0x10/0x10 [ 236.068061][ T7844] ? __nla_parse+0x40/0x60 [ 236.068104][ T7844] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 236.068144][ T7844] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 236.068192][ T7844] genl_family_rcv_msg_doit+0x206/0x2f0 [ 236.068230][ T7844] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 236.068266][ T7844] ? genl_get_cmd+0x194/0x580 [ 236.068312][ T7844] ? __radix_tree_lookup+0x21f/0x2c0 [ 236.068367][ T7844] genl_rcv_msg+0x55c/0x800 [ 236.068409][ T7844] ? __pfx_genl_rcv_msg+0x10/0x10 [ 236.068446][ T7844] ? __pfx_nbd_genl_connect+0x10/0x10 [ 236.068504][ T7844] netlink_rcv_skb+0x155/0x420 [ 236.068557][ T7844] ? __pfx_genl_rcv_msg+0x10/0x10 [ 236.068594][ T7844] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 236.068662][ T7844] ? netlink_deliver_tap+0x1ae/0xd30 [ 236.068717][ T7844] genl_rcv+0x28/0x40 [ 236.068747][ T7844] netlink_unicast+0x5aa/0x870 [ 236.068804][ T7844] ? __pfx_netlink_unicast+0x10/0x10 [ 236.068857][ T7844] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 236.068908][ T7844] ? __lock_acquire+0xb97/0x1ce0 [ 236.068965][ T7844] netlink_sendmsg+0x8d1/0xdd0 [ 236.069025][ T7844] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.069084][ T7844] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 236.069129][ T7844] ____sys_sendmsg+0xa95/0xc70 [ 236.069168][ T7844] ? copy_msghdr_from_user+0x10a/0x160 [ 236.069219][ T7844] ? __pfx_____sys_sendmsg+0x10/0x10 [ 236.069268][ T7844] ? __pfx_futex_wake_mark+0x10/0x10 [ 236.069323][ T7844] ___sys_sendmsg+0x134/0x1d0 [ 236.069376][ T7844] ? __pfx____sys_sendmsg+0x10/0x10 [ 236.069474][ T7844] __sys_sendmsg+0x16d/0x220 [ 236.069535][ T7844] ? __pfx___sys_sendmsg+0x10/0x10 [ 236.069586][ T7844] ? __x64_sys_futex+0x1e0/0x4c0 [ 236.069658][ T7844] do_syscall_64+0xcd/0x4c0 [ 236.069691][ T7844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.069725][ T7844] RIP: 0033:0x7fa07c38eec9 [ 236.069752][ T7844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.069784][ T7844] RSP: 002b:00007fa07a5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.069816][ T7844] RAX: ffffffffffffffda RBX: 00007fa07c5e6180 RCX: 00007fa07c38eec9 [ 236.069836][ T7844] RDX: 0000000020040000 RSI: 0000200000000500 RDI: 0000000000000004 [ 236.069856][ T7844] RBP: 00007fa07c411f91 R08: 0000000000000000 R09: 0000000000000000 [ 236.069875][ T7844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.069894][ T7844] R13: 00007fa07c5e6218 R14: 00007fa07c5e6180 R15: 00007fffd31a31c8 [ 236.069937][ T7844] [ 236.724391][ T7844] nbd: failed to add new device [ 237.416193][ T7873] netlink: 44 bytes leftover after parsing attributes in process `syz.0.360'. [ 237.474051][ T7873] netlink: 12 bytes leftover after parsing attributes in process `syz.0.360'. [ 237.511011][ T7876] random: crng reseeded on system resumption [ 239.097791][ T7905] netlink: 186 bytes leftover after parsing attributes in process `syz.3.366'. [ 240.219265][ T7913] netlink: 28 bytes leftover after parsing attributes in process `syz.0.367'. [ 240.257015][ T7913] ipvlan0: entered promiscuous mode [ 240.269785][ T7913] ipvlan0: entered allmulticast mode [ 240.306795][ T7913] veth0_vlan: entered allmulticast mode [ 240.377797][ T7919] random: crng reseeded on system resumption [ 240.833280][ T7928] FAULT_INJECTION: forcing a failure. [ 240.833280][ T7928] name failslab, interval 1, probability 0, space 0, times 0 [ 240.907174][ T7928] CPU: 1 UID: 0 PID: 7928 Comm: syz.3.368 Not tainted syzkaller #0 PREEMPT(full) [ 240.907219][ T7928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 240.907238][ T7928] Call Trace: [ 240.907249][ T7928] [ 240.907262][ T7928] dump_stack_lvl+0x16c/0x1f0 [ 240.907321][ T7928] should_fail_ex+0x512/0x640 [ 240.907374][ T7928] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 240.907419][ T7928] should_failslab+0xc2/0x120 [ 240.907465][ T7928] __kmalloc_cache_node_noprof+0x6d/0x420 [ 240.907506][ T7928] ? lockdep_init_map_type+0x5c/0x280 [ 240.907552][ T7928] ? __alloc_workqueue+0x694/0x1810 [ 240.907605][ T7928] __alloc_workqueue+0x694/0x1810 [ 240.907666][ T7928] alloc_workqueue_noprof+0xd2/0x200 [ 240.907711][ T7928] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 240.907761][ T7928] ? kobject_init+0x8e/0x220 [ 240.907819][ T7928] nbd_dev_add+0x51b/0xbb0 [ 240.907875][ T7928] ? __pfx_nbd_dev_add+0x10/0x10 [ 240.907954][ T7928] ? bpf_lsm_capable+0x9/0x10 [ 240.907989][ T7928] ? __radix_tree_lookup+0x21f/0x2c0 [ 240.908045][ T7928] nbd_genl_connect+0x8b0/0x1c60 [ 240.908088][ T7928] ? __pfx_nbd_genl_connect+0x10/0x10 [ 240.908122][ T7928] ? __nla_parse+0x40/0x60 [ 240.908171][ T7928] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 240.908209][ T7928] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 240.908258][ T7928] genl_family_rcv_msg_doit+0x206/0x2f0 [ 240.908296][ T7928] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 240.908334][ T7928] ? genl_get_cmd+0x194/0x580 [ 240.908377][ T7928] ? netlink_alloc_large_skb+0x69/0x130 [ 240.908428][ T7928] ? netlink_sendmsg+0x6a1/0xdd0 [ 240.908478][ T7928] ? __radix_tree_lookup+0x21f/0x2c0 [ 240.908533][ T7928] genl_rcv_msg+0x55c/0x800 [ 240.908575][ T7928] ? __pfx_genl_rcv_msg+0x10/0x10 [ 240.908612][ T7928] ? __pfx_nbd_genl_connect+0x10/0x10 [ 240.908650][ T7928] ? __lock_acquire+0x62e/0x1ce0 [ 240.908704][ T7928] netlink_rcv_skb+0x155/0x420 [ 240.908756][ T7928] ? __pfx_genl_rcv_msg+0x10/0x10 [ 240.908806][ T7928] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 240.908880][ T7928] ? netlink_deliver_tap+0x1ae/0xd30 [ 240.908931][ T7928] ? is_vmalloc_addr+0x86/0xa0 [ 240.908977][ T7928] genl_rcv+0x28/0x40 [ 240.909007][ T7928] netlink_unicast+0x5aa/0x870 [ 240.909069][ T7928] ? __pfx_netlink_unicast+0x10/0x10 [ 240.909123][ T7928] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 240.909175][ T7928] ? __lock_acquire+0xb97/0x1ce0 [ 240.909233][ T7928] netlink_sendmsg+0x8d1/0xdd0 [ 240.909295][ T7928] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.909355][ T7928] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 240.909401][ T7928] ____sys_sendmsg+0xa95/0xc70 [ 240.909441][ T7928] ? copy_msghdr_from_user+0x10a/0x160 [ 240.909494][ T7928] ? __pfx_____sys_sendmsg+0x10/0x10 [ 240.909544][ T7928] ? __pfx_futex_wake_mark+0x10/0x10 [ 240.909603][ T7928] ___sys_sendmsg+0x134/0x1d0 [ 240.909658][ T7928] ? __pfx____sys_sendmsg+0x10/0x10 [ 240.909766][ T7928] __sys_sendmsg+0x16d/0x220 [ 240.909829][ T7928] ? __pfx___sys_sendmsg+0x10/0x10 [ 240.909882][ T7928] ? __x64_sys_futex+0x1e0/0x4c0 [ 240.909954][ T7928] do_syscall_64+0xcd/0x4c0 [ 240.909988][ T7928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.910023][ T7928] RIP: 0033:0x7f860738eec9 [ 240.910050][ T7928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.910082][ T7928] RSP: 002b:00007f860820c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 240.910112][ T7928] RAX: ffffffffffffffda RBX: 00007f86075e6180 RCX: 00007f860738eec9 [ 240.910134][ T7928] RDX: 0000000020040000 RSI: 0000200000000500 RDI: 0000000000000004 [ 240.910153][ T7928] RBP: 00007f8607411f91 R08: 0000000000000000 R09: 0000000000000000 [ 240.910172][ T7928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.910191][ T7928] R13: 00007f86075e6218 R14: 00007f86075e6180 R15: 00007ffc3b6ff0a8 [ 240.910234][ T7928] [ 240.911571][ T7928] block (null): Could not allocate knbd recv work queue. [ 241.332165][ T7928] nbd: failed to add new device [ 242.169514][ T7932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.370'. [ 244.495482][ T7974] netlink: 28 bytes leftover after parsing attributes in process `syz.0.378'. [ 245.345149][ T7982] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 245.659762][ T30] audit: type=1800 audit(4294975183.254:5): pid=7985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.383" name="dbroot" dev="configfs" ino=17390 res=0 errno=0 [ 245.685783][ T7985] db_root: not a directory: /dev/audio1 [ 246.345025][ T7993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.385'. [ 248.061173][ T8047] netlink: 28 bytes leftover after parsing attributes in process `syz.3.392'. [ 249.675577][ T8063] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 249.794632][ T8063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.398'. [ 250.045211][ T8072] vivid-012: ================= START STATUS ================= [ 250.152196][ T8072] vivid-012: ================== END STATUS ================== [ 250.166976][ T8072] vivid-012: ================= START STATUS ================= [ 250.222627][ T8072] vivid-012: ================== END STATUS ================== [ 250.230626][ T8072] vivid-012: ================= START STATUS ================= [ 250.282510][ T8072] vivid-012: ================== END STATUS ================== [ 250.290363][ T8072] vivid-012: ================= START STATUS ================= [ 250.298876][ T8072] vivid-012: ================== END STATUS ================== [ 250.309642][ T8072] vivid-012: ================= START STATUS ================= [ 250.317877][ T8072] vivid-012: ================== END STATUS ================== [ 250.338575][ T8072] vivid-012: ================= START STATUS ================= [ 250.372465][ T8072] vivid-012: ================== END STATUS ================== [ 250.397792][ T8072] vivid-012: ================= START STATUS ================= [ 250.464142][ T8072] vivid-012: ================== END STATUS ================== [ 250.480761][ T8072] vivid-012: ================= START STATUS ================= [ 250.492751][ T8072] vivid-012: ================== END STATUS ================== [ 250.509606][ T8072] vivid-012: ================= START STATUS ================= [ 250.573805][ T8072] vivid-012: ================== END STATUS ================== [ 250.620585][ T8072] vivid-012: ================= START STATUS ================= [ 250.643708][ T8072] vivid-012: ================== END STATUS ================== [ 250.717031][ T8072] vivid-012: ================= START STATUS ================= [ 250.741431][ T8072] vivid-012: ================== END STATUS ================== [ 250.790646][ T8072] vivid-012: ================= START STATUS ================= [ 250.849600][ T8072] vivid-012: ================== END STATUS ================== [ 251.787576][ T8090] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 252.977420][ T8101] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 253.029571][ T8101] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 253.062470][ T8101] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 253.605355][ T5873] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 253.620170][ T5873] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 253.640042][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 253.649871][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 253.658456][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 253.806890][ T8113] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.505594][ T8137] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 254.656721][ T8116] chnl_net:caif_netlink_parms(): no params data found [ 255.057150][ T8116] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.085235][ T8116] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.096004][ T8116] bridge_slave_0: entered allmulticast mode [ 255.104048][ T8116] bridge_slave_0: entered promiscuous mode [ 255.113180][ T8116] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.121610][ T8116] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.130032][ T8116] bridge_slave_1: entered allmulticast mode [ 255.137970][ T8116] bridge_slave_1: entered promiscuous mode [ 255.155659][ T9] Process accounting resumed [ 255.427245][ T8116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.478572][ T8153] FAULT_INJECTION: forcing a failure. [ 255.478572][ T8153] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 255.492680][ T8153] CPU: 0 UID: 0 PID: 8153 Comm: syz.2.428 Not tainted syzkaller #0 PREEMPT(full) [ 255.492721][ T8153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 255.492735][ T8153] Call Trace: [ 255.492746][ T8153] [ 255.492754][ T8153] dump_stack_lvl+0x16c/0x1f0 [ 255.492809][ T8153] should_fail_ex+0x512/0x640 [ 255.492851][ T8153] should_fail_alloc_page+0xe7/0x130 [ 255.492886][ T8153] prepare_alloc_pages+0x3c2/0x610 [ 255.492924][ T8153] ? copy_net_ns+0x2a6/0x5f0 [ 255.492947][ T8153] ? create_new_namespaces+0x3ea/0xa90 [ 255.492977][ T8153] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 255.493011][ T8153] ? find_entry.isra.0+0x1a0/0x280 [ 255.493051][ T8153] ? namecmp+0x49/0x60 [ 255.493080][ T8153] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 255.493109][ T8153] ? find_entry.isra.0+0x1a0/0x280 [ 255.493144][ T8153] ? drop_sysctl_table+0x434/0x5f0 [ 255.493176][ T8153] ? xlate_dir+0x1a7/0x240 [ 255.493211][ T8153] ? __pfx_drop_sysctl_table+0x10/0x10 [ 255.493249][ T8153] ? insert_header+0xf8d/0x1480 [ 255.493282][ T8153] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 255.493320][ T8153] ? policy_nodemask+0xea/0x4e0 [ 255.493355][ T8153] alloc_pages_mpol+0x1fb/0x550 [ 255.493388][ T8153] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 255.493428][ T8153] ___kmalloc_large_node+0xed/0x160 [ 255.493467][ T8153] ? __pfx_can_pernet_init+0x10/0x10 [ 255.493515][ T8153] __kmalloc_large_noprof+0x1c/0x70 [ 255.493556][ T8153] can_pernet_init+0x4b/0x370 [ 255.493595][ T8153] ? __pfx_can_pernet_init+0x10/0x10 [ 255.493627][ T8153] ops_init+0x1e2/0x5f0 [ 255.493668][ T8153] setup_net+0x10f/0x380 [ 255.493686][ T8153] ? lockdep_init_map_type+0x5c/0x280 [ 255.493725][ T8153] ? __pfx_setup_net+0x10/0x10 [ 255.493747][ T8153] ? debug_mutex_init+0x37/0x70 [ 255.493773][ T8153] copy_net_ns+0x2a6/0x5f0 [ 255.493807][ T8153] create_new_namespaces+0x3ea/0xa90 [ 255.493841][ T8153] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 255.493872][ T8153] ksys_unshare+0x45b/0xa40 [ 255.493906][ T8153] ? __pfx_ksys_unshare+0x10/0x10 [ 255.493940][ T8153] ? xfd_validate_state+0x61/0x180 [ 255.493984][ T8153] __x64_sys_unshare+0x31/0x40 [ 255.494017][ T8153] do_syscall_64+0xcd/0x4c0 [ 255.494040][ T8153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.494064][ T8153] RIP: 0033:0x7fe30758eec9 [ 255.494082][ T8153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.494105][ T8153] RSP: 002b:00007fe3083c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 255.494127][ T8153] RAX: ffffffffffffffda RBX: 00007fe3077e5fa0 RCX: 00007fe30758eec9 [ 255.494142][ T8153] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 255.494158][ T8153] RBP: 00007fe307611f91 R08: 0000000000000000 R09: 0000000000000000 [ 255.494172][ T8153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.494186][ T8153] R13: 00007fe3077e6038 R14: 00007fe3077e5fa0 R15: 00007fffcc0825e8 [ 255.494216][ T8153] [ 255.797332][ T51] Bluetooth: hci0: command tx timeout [ 255.839744][ T8116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.961426][ T8116] team0: Port device team_slave_0 added [ 255.975371][ T8116] team0: Port device team_slave_1 added [ 256.081121][ T8116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.088353][ T8116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.120208][ T8116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.137694][ T8116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.146074][ T8116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.182260][ T8116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.485370][ T8116] hsr_slave_0: entered promiscuous mode [ 256.506267][ T8116] hsr_slave_1: entered promiscuous mode [ 256.523402][ T8116] debugfs: 'hsr0' already exists in 'hsr' [ 256.562619][ T8116] Cannot create hsr debugfs directory [ 256.952432][ T30] audit: type=1806 audit(4294975194.514:6): xattr="" res=-22 [ 257.483558][ T8116] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.708825][ T8116] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.901729][ T51] Bluetooth: hci0: command tx timeout [ 258.091330][ T8116] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.951458][ T8116] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 258.995320][ T8197] netlink: 330 bytes leftover after parsing attributes in process `syz.2.427'. [ 259.020441][ T8197] : renamed from bond0 (while UP) [ 259.106538][ T8116] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 259.120639][ T8116] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 259.142940][ T8116] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 259.448580][ T8116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.566580][ T8116] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.609332][ T7580] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.616666][ T7580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.696721][ T1000] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.704237][ T1000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.972598][ T51] Bluetooth: hci0: command tx timeout [ 261.094954][ T8116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.287540][ T8116] veth0_vlan: entered promiscuous mode [ 261.445700][ T8116] veth1_vlan: entered promiscuous mode [ 261.627449][ T8116] veth0_macvtap: entered promiscuous mode [ 261.719012][ T8116] veth1_macvtap: entered promiscuous mode [ 261.797932][ T8116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.838579][ T8116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.928082][ T1000] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.004505][ T1000] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.028056][ T1000] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.043690][ T51] Bluetooth: hci0: command tx timeout [ 262.077412][ T1000] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.351044][ T7726] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.394954][ T7726] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.470891][ T7567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.510355][ T8254] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input13 [ 262.542504][ T7567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.407154][ T8284] netlink: 330 bytes leftover after parsing attributes in process `syz.1.445'. [ 264.422667][ T8284] mac80211_hwsim hwsim7 : renamed from wlan0 (while UP) [ 265.554811][ T8299] aoe: copy from user failed [ 265.560867][ T8299] aoe: could not set interface list: too many interfaces [ 265.877933][ T8287] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.743314][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.750093][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.032882][ T8339] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 270.291765][ T8392] FAULT_INJECTION: forcing a failure. [ 270.291765][ T8392] name fail_futex, interval 1, probability 0, space 0, times 0 [ 270.367709][ T8392] CPU: 1 UID: 0 PID: 8392 Comm: syz.1.464 Not tainted syzkaller #0 PREEMPT(full) [ 270.367751][ T8392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 270.367769][ T8392] Call Trace: [ 270.367780][ T8392] [ 270.367791][ T8392] dump_stack_lvl+0x16c/0x1f0 [ 270.367846][ T8392] should_fail_ex+0x512/0x640 [ 270.367895][ T8392] ? unwind_get_return_address+0x59/0xa0 [ 270.367935][ T8392] get_futex_key+0x1d0/0x1560 [ 270.367979][ T8392] ? __pfx_get_futex_key+0x10/0x10 [ 270.368019][ T8392] ? stack_trace_save+0x8e/0xc0 [ 270.368056][ T8392] ? __pfx_stack_trace_save+0x10/0x10 [ 270.368101][ T8392] futex_wait_setup+0x9d/0x550 [ 270.368163][ T8392] __futex_wait+0x194/0x2f0 [ 270.368214][ T8392] ? __pfx___futex_wait+0x10/0x10 [ 270.368280][ T8392] ? __pfx_futex_wake_mark+0x10/0x10 [ 270.368334][ T8392] ? futex_private_hash_put+0x176/0x300 [ 270.368379][ T8392] ? futex_private_hash_put+0x18a/0x300 [ 270.368421][ T8392] futex_wait+0xe8/0x380 [ 270.368468][ T8392] ? __pfx_futex_wait+0x10/0x10 [ 270.368527][ T8392] ? kmem_cache_free+0x2d1/0x4d0 [ 270.368560][ T8392] ? fd_install+0x225/0x750 [ 270.368592][ T8392] ? putname+0x154/0x1a0 [ 270.368645][ T8392] do_futex+0x229/0x350 [ 270.368686][ T8392] ? __pfx_do_futex+0x10/0x10 [ 270.368740][ T8392] __x64_sys_futex+0x1e0/0x4c0 [ 270.368784][ T8392] ? __x64_sys_openat+0x174/0x210 [ 270.368813][ T8392] ? __pfx___x64_sys_futex+0x10/0x10 [ 270.368873][ T8392] do_syscall_64+0xcd/0x4c0 [ 270.368905][ T8392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.368937][ T8392] RIP: 0033:0x7fa07c38eec9 [ 270.368962][ T8392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.368992][ T8392] RSP: 002b:00007fa07d1550e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 270.369022][ T8392] RAX: ffffffffffffffda RBX: 00007fa07c5e6098 RCX: 00007fa07c38eec9 [ 270.369043][ T8392] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa07c5e6098 [ 270.369062][ T8392] RBP: 00007fa07c5e6090 R08: 0000000000000000 R09: 0000000000000000 [ 270.369082][ T8392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.369100][ T8392] R13: 00007fa07c5e6128 R14: 00007fffd31a30e0 R15: 00007fffd31a31c8 [ 270.369142][ T8392] [ 272.082815][ T8432] netlink: 330 bytes leftover after parsing attributes in process `syz.2.470'. [ 272.520464][ T8432] mac80211_hwsim hwsim6 : renamed from wlan0 (while UP) [ 272.592768][ T8448] netlink: 342 bytes leftover after parsing attributes in process `syz.0.472'. [ 275.727291][ T8501] FAULT_INJECTION: forcing a failure. [ 275.727291][ T8501] name failslab, interval 1, probability 0, space 0, times 0 [ 275.741030][ T8501] CPU: 0 UID: 0 PID: 8501 Comm: syz.1.482 Not tainted syzkaller #0 PREEMPT(full) [ 275.741074][ T8501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 275.741093][ T8501] Call Trace: [ 275.741103][ T8501] [ 275.741115][ T8501] dump_stack_lvl+0x16c/0x1f0 [ 275.741170][ T8501] should_fail_ex+0x512/0x640 [ 275.741221][ T8501] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 275.741268][ T8501] should_failslab+0xc2/0x120 [ 275.741313][ T8501] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 275.741351][ T8501] ? d_instantiate+0x77/0x90 [ 275.741391][ T8501] ? alloc_empty_file+0x55/0x1e0 [ 275.741444][ T8501] alloc_empty_file+0x55/0x1e0 [ 275.741493][ T8501] alloc_file_pseudo+0x13a/0x230 [ 275.741545][ T8501] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 275.741597][ T8501] ? hugetlbfs_get_inode+0x31f/0x730 [ 275.741640][ T8501] hugetlb_file_setup+0x4ce/0x620 [ 275.741681][ T8501] ksys_mmap_pgoff+0x189/0x5c0 [ 275.741737][ T8501] __x64_sys_mmap+0x125/0x190 [ 275.741795][ T8501] do_syscall_64+0xcd/0x4c0 [ 275.741856][ T8501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.741889][ T8501] RIP: 0033:0x7fa07c38eec9 [ 275.741915][ T8501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.741947][ T8501] RSP: 002b:00007fa07d176038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 275.741977][ T8501] RAX: ffffffffffffffda RBX: 00007fa07c5e5fa0 RCX: 00007fa07c38eec9 [ 275.741997][ T8501] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 275.742015][ T8501] RBP: 00007fa07c411f91 R08: 0000000000000004 R09: 0000300000000000 [ 275.742034][ T8501] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 275.742052][ T8501] R13: 00007fa07c5e6038 R14: 00007fa07c5e5fa0 R15: 00007fffd31a31c8 [ 275.742093][ T8501] [ 276.906167][ T8506] netlink: 330 bytes leftover after parsing attributes in process `syz.0.483'. [ 277.065799][ T8506] mac80211_hwsim hwsim16 : renamed from wlan0 (while UP) [ 278.932848][ T8559] netlink: 338 bytes leftover after parsing attributes in process `syz.0.493'. [ 279.391722][ T8564] FAULT_INJECTION: forcing a failure. [ 279.391722][ T8564] name failslab, interval 1, probability 0, space 0, times 0 [ 279.412670][ T8564] CPU: 0 UID: 0 PID: 8564 Comm: syz.0.494 Not tainted syzkaller #0 PREEMPT(full) [ 279.412714][ T8564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 279.412747][ T8564] Call Trace: [ 279.412759][ T8564] [ 279.412772][ T8564] dump_stack_lvl+0x16c/0x1f0 [ 279.412830][ T8564] should_fail_ex+0x512/0x640 [ 279.412882][ T8564] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 279.412933][ T8564] should_failslab+0xc2/0x120 [ 279.412977][ T8564] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 279.413016][ T8564] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 279.413067][ T8564] ? __d_alloc+0x32/0xae0 [ 279.413101][ T8564] __d_alloc+0x32/0xae0 [ 279.413134][ T8564] d_alloc_pseudo+0x1c/0xc0 [ 279.413170][ T8564] alloc_file_pseudo+0xcf/0x230 [ 279.413208][ T8564] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 279.413245][ T8564] ? alloc_fd+0x471/0x7d0 [ 279.413275][ T8564] sock_alloc_file+0x50/0x210 [ 279.413298][ T8564] __sys_socket+0x1c0/0x260 [ 279.413326][ T8564] ? __pfx___sys_socket+0x10/0x10 [ 279.413354][ T8564] ? xfd_validate_state+0x61/0x180 [ 279.413388][ T8564] ? __pfx_ksys_write+0x10/0x10 [ 279.413424][ T8564] __x64_sys_socket+0x72/0xb0 [ 279.413461][ T8564] ? lockdep_hardirqs_on+0x7c/0x110 [ 279.413507][ T8564] do_syscall_64+0xcd/0x4c0 [ 279.413539][ T8564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.413570][ T8564] RIP: 0033:0x7efc19f8eec9 [ 279.413589][ T8564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.413612][ T8564] RSP: 002b:00007efc1ae4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 279.413633][ T8564] RAX: ffffffffffffffda RBX: 00007efc1a1e5fa0 RCX: 00007efc19f8eec9 [ 279.413649][ T8564] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000002c [ 279.413662][ T8564] RBP: 00007efc1a011f91 R08: 0000000000000000 R09: 0000000000000000 [ 279.413676][ T8564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.413690][ T8564] R13: 00007efc1a1e6038 R14: 00007efc1a1e5fa0 R15: 00007ffcc1380748 [ 279.413719][ T8564] [ 280.776385][ T8588] [U] [ 280.779279][ T8588] [U] [ 280.782027][ T8588] [U] [ 280.784846][ T8588] [U] [ 280.845888][ T8588] [U] [ 280.848711][ T8588] [U] [ 280.851476][ T8588] [U] [ 280.854209][ T8588] [U] [ 280.867901][ T8588] [U] [ 280.870704][ T8588] [U] [ 280.873426][ T8588] [U] [ 280.876141][ T8588] [U] [ 280.933778][ T8588] [U] [ 280.936542][ T8588] [U] [ 280.939265][ T8588] [U] [ 280.942020][ T8588] [U] [ 280.965774][ T8588] [U] [ 280.968530][ T8588] [U] [ 280.971246][ T8588] [U] [ 280.973984][ T8588] [U] [ 280.996753][ T8588] [U] [ 280.999548][ T8588] [U] [ 281.002302][ T8588] [U] [ 281.005053][ T8588] [U] [ 281.101740][ T8588] [U] [ 281.104548][ T8588] [U] [ 281.107343][ T8588] [U] [ 281.110059][ T8588] [U] [ 281.165390][ T8588] [U] [ 281.168149][ T8588] [U] [ 281.170865][ T8588] [U] [ 281.173584][ T8588] [U] [ 281.277821][ T8588] [U] [ 281.280578][ T8588] [U] [ 281.283407][ T8588] [U] [ 281.283595][ T8597] FAULT_INJECTION: forcing a failure. [ 281.283595][ T8597] name failslab, interval 1, probability 0, space 0, times 0 [ 281.286346][ T8588] [U] [ 281.315276][ T8597] CPU: 1 UID: 0 PID: 8597 Comm: syz.1.502 Not tainted syzkaller #0 PREEMPT(full) [ 281.315330][ T8597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 281.315349][ T8597] Call Trace: [ 281.315359][ T8597] [ 281.315372][ T8597] dump_stack_lvl+0x16c/0x1f0 [ 281.315427][ T8597] should_fail_ex+0x512/0x640 [ 281.315478][ T8597] ? __kmalloc_noprof+0xbf/0x510 [ 281.315519][ T8597] ? group_cpus_evenly+0xeb/0x650 [ 281.315558][ T8597] should_failslab+0xc2/0x120 [ 281.315600][ T8597] __kmalloc_noprof+0xd2/0x510 [ 281.315648][ T8597] group_cpus_evenly+0xeb/0x650 [ 281.315693][ T8597] ? __pfx_group_cpus_evenly+0x10/0x10 [ 281.315751][ T8597] blk_mq_map_queues+0xa5/0x4d0 [ 281.315793][ T8597] ? __pfx_blk_mq_map_queues+0x10/0x10 [ 281.315836][ T8597] ? rcu_is_watching+0x12/0xc0 [ 281.315876][ T8597] blk_mq_update_queue_map+0x34a/0x3e0 [ 281.315939][ T8597] blk_mq_alloc_tag_set+0x61a/0x1260 [ 281.316004][ T8597] loop_add+0x3b2/0xb70 [ 281.316048][ T8597] ? __pfx_loop_add+0x10/0x10 [ 281.316117][ T8597] ? find_held_lock+0x2b/0x80 [ 281.316158][ T8597] loop_control_ioctl+0x13e/0x630 [ 281.316203][ T8597] ? __pfx_loop_control_ioctl+0x10/0x10 [ 281.316251][ T8597] ? __pfx_loop_control_ioctl+0x10/0x10 [ 281.316297][ T8597] __x64_sys_ioctl+0x18e/0x210 [ 281.316367][ T8597] do_syscall_64+0xcd/0x4c0 [ 281.316401][ T8597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.316436][ T8597] RIP: 0033:0x7fa07c38eec9 [ 281.316462][ T8597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.316494][ T8597] RSP: 002b:00007fa07d176038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 281.316524][ T8597] RAX: ffffffffffffffda RBX: 00007fa07c5e5fa0 RCX: 00007fa07c38eec9 [ 281.316546][ T8597] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000005 [ 281.316566][ T8597] RBP: 00007fa07c411f91 R08: 0000000000000000 R09: 0000000000000000 [ 281.316585][ T8597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.316603][ T8597] R13: 00007fa07c5e6038 R14: 00007fa07c5e5fa0 R15: 00007fffd31a31c8 [ 281.316645][ T8597] [ 281.333391][ T8588] [U] [ 281.333455][ T8588] [U] [ 281.333513][ T8588] [U] [ 281.333585][ T8588] [U] [ 281.333973][ T8588] [U] [ 281.334037][ T8588] [U] [ 281.334097][ T8588] [U] [ 281.334159][ T8588] [U] [ 281.334429][ T8588] [U] [ 281.334490][ T8588] [U] [ 281.334550][ T8588] [U] [ 281.334622][ T8588] [U] [ 281.334986][ T8588] [U] [ 281.335048][ T8588] [U] [ 281.335104][ T8588] [U] [ 281.335162][ T8588] [U] [ 281.335473][ T8588] [U] [ 281.335536][ T8588] [U] [ 281.335605][ T8588] [U] [ 281.335665][ T8588] [U] [ 281.337804][ T8588] [U] [ 281.337861][ T8588] [U] [ 281.337911][ T8588] [U] [ 281.337964][ T8588] [U] [ 281.338341][ T8588] [U] [ 281.338406][ T8588] [U] [ 281.338468][ T8588] [U] [ 281.338529][ T8588] [U] [ 281.338919][ T8588] [U] [ 281.338981][ T8588] [U] [ 281.339044][ T8588] [U] [ 281.339106][ T8588] [U] [ 281.339381][ T8588] [U] [ 281.339444][ T8588] [U] [ 281.339504][ T8588] [U] [ 281.339576][ T8588] [U] [ 281.339949][ T8588] [U] [ 281.340013][ T8588] [U] [ 281.340073][ T8588] [U] [ 281.340135][ T8588] [U] [ 281.340511][ T8588] [U] [ 281.340582][ T8588] [U] [ 281.340643][ T8588] [U] [ 281.340702][ T8588] [U] [ 281.341082][ T8588] [U] [ 281.341146][ T8588] [U] [ 281.341202][ T8588] [U] [ 281.341258][ T8588] [U] [ 281.341570][ T8588] [U] [ 281.341632][ T8588] [U] [ 281.341692][ T8588] [U] [ 281.341753][ T8588] [U] [ 281.342127][ T8588] [U] [ 281.342192][ T8588] [U] [ 281.342254][ T8588] [U] [ 281.342315][ T8588] [U] [ 281.343317][ T8588] [U] [ 281.343379][ T8588] [U] [ 281.343438][ T8588] [U] [ 281.343498][ T8588] [U] [ 281.343887][ T8588] [U] [ 281.343945][ T8588] [U] [ 281.344005][ T8588] [U] [ 281.344068][ T8588] [U] [ 281.344355][ T8588] [U] [ 281.344416][ T8588] [U] [ 281.344477][ T8588] [U] [ 281.344540][ T8588] [U] [ 281.344924][ T8588] [U] [ 281.344987][ T8588] [U] [ 281.345049][ T8588] [U] [ 281.345111][ T8588] [U] [ 281.345390][ T8588] [U] [ 281.345451][ T8588] [U] [ 281.345511][ T8588] [U] [ 281.345581][ T8588] [U] [ 281.345963][ T8588] [U] [ 281.346024][ T8588] [U] [ 281.346086][ T8588] [U] [ 281.346148][ T8588] [U] [ 281.346435][ T8588] [U] [ 281.346497][ T8588] [U] [ 281.346577][ T8588] [U] [ 281.346640][ T8588] [U] [ 281.346918][ T8588] [U] [ 281.346981][ T8588] [U] [ 281.347041][ T8588] [U] [ 281.347103][ T8588] [U] [ 281.347324][ T8588] [U] [ 281.347384][ T8588] [U] [ 281.347447][ T8588] [U] [ 281.347644][ T8588] [U] [ 281.611470][ T8588] netlink: 25 bytes leftover after parsing attributes in process `syz.0.500'. [ 282.149711][ T8588] ima: policy update failed [ 282.210844][ T30] audit: type=1802 audit(4294967309.310:7): pid=8588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.500" res=0 errno=0 [ 282.911061][ T8617] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 282.960339][ T51] Bluetooth: hci0: Malformed LE Event: 0x0b [ 285.776312][ T8663] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 286.871487][ T8675] FAULT_INJECTION: forcing a failure. [ 286.871487][ T8675] name failslab, interval 1, probability 0, space 0, times 0 [ 286.907274][ T8675] CPU: 1 UID: 0 PID: 8675 Comm: syz.2.512 Not tainted syzkaller #0 PREEMPT(full) [ 286.907321][ T8675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 286.907340][ T8675] Call Trace: [ 286.907352][ T8675] [ 286.907364][ T8675] dump_stack_lvl+0x16c/0x1f0 [ 286.907425][ T8675] should_fail_ex+0x512/0x640 [ 286.907475][ T8675] ? __kmalloc_node_noprof+0xc5/0x500 [ 286.907521][ T8675] should_failslab+0xc2/0x120 [ 286.907565][ T8675] __kmalloc_node_noprof+0xd8/0x500 [ 286.907608][ T8675] ? blk_mq_alloc_tag_set+0x534/0x1260 [ 286.907665][ T8675] blk_mq_alloc_tag_set+0x534/0x1260 [ 286.907729][ T8675] loop_add+0x3b2/0xb70 [ 286.907772][ T8675] ? __pfx_loop_add+0x10/0x10 [ 286.907839][ T8675] ? find_held_lock+0x2b/0x80 [ 286.907878][ T8675] loop_control_ioctl+0x13e/0x630 [ 286.907931][ T8675] ? __pfx_loop_control_ioctl+0x10/0x10 [ 286.907981][ T8675] ? __pfx_loop_control_ioctl+0x10/0x10 [ 286.908026][ T8675] __x64_sys_ioctl+0x18e/0x210 [ 286.908087][ T8675] do_syscall_64+0xcd/0x4c0 [ 286.908122][ T8675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.908155][ T8675] RIP: 0033:0x7fe30758eec9 [ 286.908182][ T8675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.908214][ T8675] RSP: 002b:00007fe3083c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.908244][ T8675] RAX: ffffffffffffffda RBX: 00007fe3077e5fa0 RCX: 00007fe30758eec9 [ 286.908265][ T8675] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000005 [ 286.908284][ T8675] RBP: 00007fe307611f91 R08: 0000000000000000 R09: 0000000000000000 [ 286.908303][ T8675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.908321][ T8675] R13: 00007fe3077e6038 R14: 00007fe3077e5fa0 R15: 00007fffcc0825e8 [ 286.908362][ T8675] [ 287.409971][ T8679] [U] [ 287.412863][ T8679] [U] [ 287.415630][ T8679] [U] [ 287.418405][ T8679] [U] [ 287.452304][ T8679] [U] [ 287.455104][ T8679] [U] [ 287.457973][ T8679] [U] [ 287.460733][ T8679] [U] [ 287.509025][ T8679] [U] [ 287.511851][ T8679] [U] [ 287.515092][ T8679] [U] [ 287.517877][ T8679] [U] [ 287.582125][ T8679] [U] [ 287.582195][ T8679] [U] [ 287.582264][ T8679] [U] [ 287.582320][ T8679] [U] [ 287.595588][ T8679] [U] [ 287.595656][ T8679] [U] [ 287.595717][ T8679] [U] [ 287.595778][ T8679] [U] [ 287.596052][ T8679] [U] [ 287.596124][ T8679] [U] [ 287.596189][ T8679] [U] [ 287.596252][ T8679] [U] [ 287.596610][ T8679] [U] [ 287.596671][ T8679] [U] [ 287.596734][ T8679] [U] [ 287.596797][ T8679] [U] [ 287.597063][ T8679] [U] [ 287.597131][ T8679] [U] [ 287.597189][ T8679] [U] [ 287.597250][ T8679] [U] [ 287.597609][ T8679] [U] [ 287.597668][ T8679] [U] [ 287.597726][ T8679] [U] [ 287.597784][ T8679] [U] [ 287.598048][ T8679] [U] [ 287.598120][ T8679] [U] [ 287.598181][ T8679] [U] [ 287.598243][ T8679] [U] [ 287.598586][ T8679] [U] [ 287.598649][ T8679] [U] [ 287.598708][ T8679] [U] [ 287.598766][ T8679] [U] [ 287.599062][ T8679] [U] [ 287.599130][ T8679] [U] [ 287.599192][ T8679] [U] [ 287.599253][ T8679] [U] [ 287.599628][ T8679] [U] [ 287.599711][ T8679] [U] [ 287.599776][ T8679] [U] [ 287.599842][ T8679] [U] [ 287.600180][ T8679] [U] [ 287.600242][ T8679] [U] [ 287.600303][ T8679] [U] [ 287.600365][ T8679] [U] [ 287.600742][ T8679] [U] [ 287.600806][ T8679] [U] [ 287.600867][ T8679] [U] [ 287.600930][ T8679] [U] [ 287.601211][ T8679] [U] [ 287.601275][ T8679] [U] [ 287.601337][ T8679] [U] [ 287.601399][ T8679] [U] [ 287.601767][ T8679] [U] [ 287.601830][ T8679] [U] [ 287.601887][ T8679] [U] [ 287.601947][ T8679] [U] [ 287.602235][ T8679] [U] [ 287.602298][ T8679] [U] [ 287.602356][ T8679] [U] [ 287.602413][ T8679] [U] [ 287.631190][ T8679] [U] [ 287.631259][ T8679] [U] [ 287.631323][ T8679] [U] [ 287.631387][ T8679] [U] [ 287.639660][ T8679] [U] [ 287.639730][ T8679] [U] [ 287.639793][ T8679] [U] [ 287.639853][ T8679] [U] [ 287.640260][ T8679] [U] [ 287.640325][ T8679] [U] [ 287.640386][ T8679] [U] [ 287.640449][ T8679] [U] [ 287.640828][ T8679] [U] [ 287.640893][ T8679] [U] [ 287.640956][ T8679] [U] [ 287.641019][ T8679] [U] [ 287.641565][ T8679] [U] [ 287.641630][ T8679] [U] [ 287.641693][ T8679] [U] [ 287.641756][ T8679] [U] [ 287.642027][ T8679] [U] [ 287.642096][ T8679] [U] [ 287.642158][ T8679] [U] [ 287.642221][ T8679] [U] [ 287.651845][ T8679] [U] [ 287.651914][ T8679] [U] [ 287.651976][ T8679] [U] [ 287.652050][ T8679] [U] [ 287.652439][ T8679] [U] [ 287.652500][ T8679] [U] [ 287.652564][ T8679] [U] [ 287.652624][ T8679] [U] [ 287.652995][ T8679] [U] [ 287.653067][ T8679] [U] [ 287.653128][ T8679] [U] [ 287.653184][ T8679] [U] [ 287.653455][ T8679] [U] [ 287.653519][ T8679] [U] [ 287.653578][ T8679] [U] [ 287.653637][ T8679] [U] [ 287.654030][ T8679] [U] [ 287.654100][ T8679] [U] [ 287.654160][ T8679] [U] [ 287.654223][ T8679] [U] [ 287.654493][ T8679] [U] [ 287.654556][ T8679] [U] [ 287.654616][ T8679] [U] [ 287.654678][ T8679] [U] [ 287.654957][ T8679] [U] [ 287.655020][ T8679] [U] [ 287.655089][ T8679] [U] [ 287.655151][ T8679] [U] [ 287.655371][ T8679] [U] [ 287.655433][ T8679] [U] [ 287.655496][ T8679] [U] [ 287.655601][ T8679] [U] [ 287.672940][ T8686] HSR: entered promiscuous mode [ 288.006786][ T8681] bond0: option all_slaves_active: invalid value () [ 288.079783][ T8679] netlink: 25 bytes leftover after parsing attributes in process `syz.3.513'. [ 288.094534][ T8679] ima: policy update failed [ 288.107989][ T30] audit: type=1802 audit(4294967301.420:8): pid=8679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.513" res=0 errno=0 [ 288.695393][ T51] Bluetooth: hci3: Malformed LE Event: 0x0b [ 292.406970][ T8774] ima: policy update failed [ 292.411717][ T30] audit: type=1802 audit(4294967305.730:9): pid=8774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.529" res=0 errno=0 [ 293.098513][ T51] Bluetooth: hci1: Malformed LE Event: 0x0b [ 295.826998][ T8831] svc: failed to register nfsdv3 RPC service (errno 111). [ 295.856618][ T8831] svc: failed to register nfsaclv3 RPC service (errno 111). [ 295.860356][ T8834] netlink: 28 bytes leftover after parsing attributes in process `syz.1.540'. [ 296.011186][ T8843] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 297.172639][ T8859] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16 [ 298.552346][ T8869] netlink: 338 bytes leftover after parsing attributes in process `syz.3.548'. [ 298.913957][ T8883] netlink: 28 bytes leftover after parsing attributes in process `syz.2.550'. [ 301.447741][ T8916] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.0.554: iget: checksum invalid [ 301.686240][ T8916] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 301.710483][ T8916] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.0.554: iget: checksum invalid [ 301.723790][ T8916] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 301.868440][ T8916] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.0.554: iget: checksum invalid [ 301.880021][ T8916] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 301.911442][ T8916] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.0.554: iget: checksum invalid [ 301.962460][ T8916] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 301.981348][ T8916] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 301.991208][ T8916] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 303.097625][ T8939] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17 [ 304.262892][ T8941] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18 [ 308.912723][ T9025] netlink: 338 bytes leftover after parsing attributes in process `syz.0.571'. [ 309.295719][ T9031] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.572: iget: checksum invalid [ 309.311142][ T9031] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 309.648587][ T9031] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.572: iget: checksum invalid [ 309.736876][ T9031] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 309.749707][ T9031] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.572: iget: checksum invalid [ 309.798795][ T9031] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 309.824207][ T9031] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.572: iget: checksum invalid [ 309.844532][ T9031] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 310.022488][ T9031] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 310.032211][ T9031] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 310.769669][ T9041] netlink: 'syz.0.574': attribute type 1 has an invalid length. [ 310.814137][ T9040] netlink: 'syz.0.574': attribute type 1 has an invalid length. [ 312.661953][ T30] audit: type=1800 audit(4294967325.980:10): pid=9071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.579" name="dbroot" dev="configfs" ino=23603 res=0 errno=0 [ 313.679912][ T9087] FAULT_INJECTION: forcing a failure. [ 313.679912][ T9087] name failslab, interval 1, probability 0, space 0, times 0 [ 313.772432][ T9087] CPU: 1 UID: 0 PID: 9087 Comm: syz.0.581 Not tainted syzkaller #0 PREEMPT(full) [ 313.772478][ T9087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 313.772510][ T9087] Call Trace: [ 313.772521][ T9087] [ 313.772533][ T9087] dump_stack_lvl+0x16c/0x1f0 [ 313.772587][ T9087] should_fail_ex+0x512/0x640 [ 313.772641][ T9087] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 313.772688][ T9087] should_failslab+0xc2/0x120 [ 313.772735][ T9087] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 313.772775][ T9087] ? __proc_create+0xc3/0x8e0 [ 313.772832][ T9087] ? __proc_create+0x2ce/0x8e0 [ 313.772888][ T9087] __proc_create+0x2ce/0x8e0 [ 313.772941][ T9087] ? __pfx___proc_create+0x10/0x10 [ 313.772996][ T9087] ? _raw_write_unlock+0x28/0x50 [ 313.773045][ T9087] ? proc_register+0x559/0x8b0 [ 313.773101][ T9087] proc_create_reg+0x7d/0x180 [ 313.773155][ T9087] ? __pfx_can_rcvlist_eff_proc_show+0x10/0x10 [ 313.773209][ T9087] proc_create_net_single+0x86/0x180 [ 313.773267][ T9087] ? __pfx_proc_create_net_single+0x10/0x10 [ 313.773336][ T9087] can_init_proc+0x319/0x4d0 [ 313.773388][ T9087] can_pernet_init+0x1e4/0x370 [ 313.773438][ T9087] ? __pfx_can_pernet_init+0x10/0x10 [ 313.773483][ T9087] ops_init+0x1e2/0x5f0 [ 313.773540][ T9087] setup_net+0x10f/0x380 [ 313.773566][ T9087] ? lockdep_init_map_type+0x5c/0x280 [ 313.773615][ T9087] ? __pfx_setup_net+0x10/0x10 [ 313.773646][ T9087] ? debug_mutex_init+0x37/0x70 [ 313.773685][ T9087] copy_net_ns+0x2a6/0x5f0 [ 313.773724][ T9087] create_new_namespaces+0x3ea/0xa90 [ 313.773774][ T9087] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 313.773825][ T9087] ksys_unshare+0x45b/0xa40 [ 313.773873][ T9087] ? __pfx_ksys_unshare+0x10/0x10 [ 313.773922][ T9087] ? xfd_validate_state+0x61/0x180 [ 313.773986][ T9087] __x64_sys_unshare+0x31/0x40 [ 313.774033][ T9087] do_syscall_64+0xcd/0x4c0 [ 313.774066][ T9087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.774099][ T9087] RIP: 0033:0x7efc19f8eec9 [ 313.774126][ T9087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.774158][ T9087] RSP: 002b:00007efc1ae2a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 313.774190][ T9087] RAX: ffffffffffffffda RBX: 00007efc1a1e6090 RCX: 00007efc19f8eec9 [ 313.774212][ T9087] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 313.774232][ T9087] RBP: 00007efc1a011f91 R08: 0000000000000000 R09: 0000000000000000 [ 313.774252][ T9087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.774272][ T9087] R13: 00007efc1a1e6128 R14: 00007efc1a1e6090 R15: 00007ffcc1380748 [ 313.774315][ T9087] [ 314.692537][ T9086] FAULT_INJECTION: forcing a failure. [ 314.692537][ T9086] name failslab, interval 1, probability 0, space 0, times 0 [ 314.705417][ T9086] CPU: 1 UID: 0 PID: 9086 Comm: syz.2.583 Not tainted syzkaller #0 PREEMPT(full) [ 314.705458][ T9086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 314.705473][ T9086] Call Trace: [ 314.705481][ T9086] [ 314.705490][ T9086] dump_stack_lvl+0x16c/0x1f0 [ 314.705537][ T9086] should_fail_ex+0x512/0x640 [ 314.705598][ T9086] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 314.705632][ T9086] should_failslab+0xc2/0x120 [ 314.705665][ T9086] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 314.705753][ T9086] ? locks_get_lock_context+0x243/0x410 [ 314.705810][ T9086] locks_get_lock_context+0x243/0x410 [ 314.705853][ T9086] generic_setlease+0x5e7/0x1300 [ 314.705881][ T9086] ? find_held_lock+0x2b/0x80 [ 314.705907][ T9086] ? __pfx_generic_setlease+0x10/0x10 [ 314.705939][ T9086] kernel_setlease+0x106/0x140 [ 314.705970][ T9086] vfs_setlease+0x258/0x2d0 [ 314.705996][ T9086] fcntl_setlease+0x3ed/0x5a0 [ 314.706020][ T9086] ? __pfx_fcntl_setlease+0x10/0x10 [ 314.706058][ T9086] do_fcntl+0x751/0x15a0 [ 314.706094][ T9086] ? __pfx_do_fcntl+0x10/0x10 [ 314.706135][ T9086] ? tomoyo_file_fcntl+0x6c/0xc0 [ 314.706163][ T9086] __x64_sys_fcntl+0x163/0x200 [ 314.706202][ T9086] do_syscall_64+0xcd/0x4c0 [ 314.706226][ T9086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.706251][ T9086] RIP: 0033:0x7fe30758eec9 [ 314.706270][ T9086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.706294][ T9086] RSP: 002b:00007fe3083a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 314.706316][ T9086] RAX: ffffffffffffffda RBX: 00007fe3077e6090 RCX: 00007fe30758eec9 [ 314.706332][ T9086] RDX: 0000000000000001 RSI: 0000000000000400 RDI: 0000000000000005 [ 314.706347][ T9086] RBP: 00007fe307611f91 R08: 0000000000000000 R09: 0000000000000000 [ 314.706361][ T9086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.706375][ T9086] R13: 00007fe3077e6128 R14: 00007fe3077e6090 R15: 00007fffcc0825e8 [ 314.706405][ T9086] [ 316.435304][ T9108] netlink: 268 bytes leftover after parsing attributes in process `syz.3.587'. [ 316.528235][ T9108] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.587: iget: checksum invalid [ 316.554219][ T9108] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 316.633473][ T9108] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.587: iget: checksum invalid [ 316.652918][ T9108] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 316.670137][ T9108] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.587: iget: checksum invalid [ 316.681877][ T9108] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 316.692918][ T9108] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.587: iget: checksum invalid [ 316.708577][ T9108] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 316.718433][ T9108] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 316.728393][ T9108] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 316.822043][ T9113] FAULT_INJECTION: forcing a failure. [ 316.822043][ T9113] name failslab, interval 1, probability 0, space 0, times 0 [ 316.949950][ T9113] CPU: 0 UID: 0 PID: 9113 Comm: syz.2.588 Not tainted syzkaller #0 PREEMPT(full) [ 316.949983][ T9113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 316.949999][ T9113] Call Trace: [ 316.950008][ T9113] [ 316.950017][ T9113] dump_stack_lvl+0x16c/0x1f0 [ 316.950059][ T9113] should_fail_ex+0x512/0x640 [ 316.950097][ T9113] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 316.950125][ T9113] should_failslab+0xc2/0x120 [ 316.950157][ T9113] __kmalloc_cache_noprof+0x6a/0x3e0 [ 316.950182][ T9113] ? resv_map_alloc+0x7e/0x400 [ 316.950218][ T9113] resv_map_alloc+0x7e/0x400 [ 316.950253][ T9113] hugetlbfs_get_inode+0x33f/0x730 [ 316.950286][ T9113] hugetlb_file_setup+0x15b/0x620 [ 316.950314][ T9113] ksys_mmap_pgoff+0x189/0x5c0 [ 316.950354][ T9113] __x64_sys_mmap+0x125/0x190 [ 316.950395][ T9113] do_syscall_64+0xcd/0x4c0 [ 316.950418][ T9113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.950443][ T9113] RIP: 0033:0x7fe30758eec9 [ 316.950461][ T9113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.950492][ T9113] RSP: 002b:00007fe3083a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 316.950528][ T9113] RAX: ffffffffffffffda RBX: 00007fe3077e6090 RCX: 00007fe30758eec9 [ 316.950544][ T9113] RDX: 0000000000000002 RSI: 0000000000200006 RDI: 0000000000000000 [ 316.950558][ T9113] RBP: 00007fe307611f91 R08: 0000000000000602 R09: 0000300000000000 [ 316.950573][ T9113] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 316.950588][ T9113] R13: 00007fe3077e6128 R14: 00007fe3077e6090 R15: 00007fffcc0825e8 [ 316.950617][ T9113] [ 320.145899][ T9155] FAULT_INJECTION: forcing a failure. [ 320.145899][ T9155] name failslab, interval 1, probability 0, space 0, times 0 [ 320.193984][ T9155] CPU: 1 UID: 0 PID: 9155 Comm: syz.2.595 Not tainted syzkaller #0 PREEMPT(full) [ 320.194024][ T9155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 320.194040][ T9155] Call Trace: [ 320.194049][ T9155] [ 320.194057][ T9155] dump_stack_lvl+0x16c/0x1f0 [ 320.194099][ T9155] should_fail_ex+0x512/0x640 [ 320.194137][ T9155] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 320.194171][ T9155] should_failslab+0xc2/0x120 [ 320.194204][ T9155] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 320.194233][ T9155] ? __proc_create+0xc3/0x8e0 [ 320.194267][ T9155] ? __proc_create+0x2ce/0x8e0 [ 320.194312][ T9155] __proc_create+0x2ce/0x8e0 [ 320.194350][ T9155] ? __pfx___proc_create+0x10/0x10 [ 320.194389][ T9155] ? _raw_write_unlock+0x28/0x50 [ 320.194423][ T9155] ? proc_register+0x559/0x8b0 [ 320.194462][ T9155] proc_create_reg+0x7d/0x180 [ 320.194501][ T9155] proc_create_data+0x86/0x110 [ 320.194538][ T9155] ? __pfx_proc_create_data+0x10/0x10 [ 320.194578][ T9155] ? cache_register_net+0x137/0x5e0 [ 320.194619][ T9155] cache_register_net+0x25a/0x5e0 [ 320.194658][ T9155] gss_svc_init_net+0x151/0x660 [ 320.194687][ T9155] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 320.194726][ T9155] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 320.194758][ T9155] ops_init+0x1e2/0x5f0 [ 320.194798][ T9155] setup_net+0x10f/0x380 [ 320.194817][ T9155] ? lockdep_init_map_type+0x5c/0x280 [ 320.194851][ T9155] ? __pfx_setup_net+0x10/0x10 [ 320.194874][ T9155] ? debug_mutex_init+0x37/0x70 [ 320.194901][ T9155] copy_net_ns+0x2a6/0x5f0 [ 320.194928][ T9155] create_new_namespaces+0x3ea/0xa90 [ 320.194962][ T9155] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 320.194993][ T9155] ksys_unshare+0x45b/0xa40 [ 320.195032][ T9155] ? __pfx_ksys_unshare+0x10/0x10 [ 320.195081][ T9155] ? xfd_validate_state+0x61/0x180 [ 320.195142][ T9155] __x64_sys_unshare+0x31/0x40 [ 320.195188][ T9155] do_syscall_64+0xcd/0x4c0 [ 320.195221][ T9155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.195255][ T9155] RIP: 0033:0x7fe30758eec9 [ 320.195282][ T9155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.195323][ T9155] RSP: 002b:00007fe3083a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 320.195352][ T9155] RAX: ffffffffffffffda RBX: 00007fe3077e6090 RCX: 00007fe30758eec9 [ 320.195374][ T9155] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 320.195393][ T9155] RBP: 00007fe307611f91 R08: 0000000000000000 R09: 0000000000000000 [ 320.195413][ T9155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.195431][ T9155] R13: 00007fe3077e6128 R14: 00007fe3077e6090 R15: 00007fffcc0825e8 [ 320.195475][ T9155] [ 320.467257][ C1] vkms_vblank_simulate: vblank timer overrun [ 322.069402][ T51] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 322.077336][ T51] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 323.529102][ T9185] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.1.599: iget: checksum invalid [ 323.540777][ T9185] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 323.552837][ T9185] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.1.599: iget: checksum invalid [ 323.564650][ T9185] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 323.575596][ T9185] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.1.599: iget: checksum invalid [ 323.587160][ T9185] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 323.601301][ T9185] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.1.599: iget: checksum invalid [ 323.734155][ T9185] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 323.744619][ T9185] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 323.754572][ T9185] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 324.081736][ T9195] netlink: 28 bytes leftover after parsing attributes in process `syz.2.601'. [ 326.920170][ T9236] netlink: 20 bytes leftover after parsing attributes in process `syz.2.610'. [ 327.008630][ T9237] netlink: 20 bytes leftover after parsing attributes in process `syz.2.610'. [ 327.326436][ T9236] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 328.127200][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 328.133989][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.808821][ T9265] vhci_hcd: invalid port number 16 [ 328.846490][ T9265] vhci_hcd: invalid port number 16 [ 329.783209][ T9274] netlink: 268 bytes leftover after parsing attributes in process `syz.0.616'. [ 329.844088][ T9274] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.0.616: iget: checksum invalid [ 329.874791][ T9274] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 329.911471][ T9274] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.0.616: iget: checksum invalid [ 329.978595][ T51] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 329.987199][ T51] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 330.026407][ T9274] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 330.102690][ T9274] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.0.616: iget: checksum invalid [ 330.205030][ T9274] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 330.277555][ T9274] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.0.616: iget: checksum invalid [ 330.569611][ T9274] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 330.616961][ T9274] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 330.652225][ T9274] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 331.810977][ T9317] vivid-003: ================= START STATUS ================= [ 331.820246][ T9317] vivid-003: Radio HW Seek Mode: Bounded [ 331.830387][ T9317] vivid-003: Radio Programmable HW Seek: false [ 331.838683][ T9317] vivid-003: RDS Rx I/O Mode: Block I/O [ 331.852355][ T9317] vivid-003: Generate RBDS Instead of RDS: false [ 331.858882][ T9317] vivid-003: RDS Reception: true [ 331.864548][ T9317] vivid-003: RDS Program Type: 0 inactive [ 331.870567][ T9317] vivid-003: RDS PS Name: inactive [ 331.876915][ T9317] vivid-003: RDS Radio Text: inactive [ 331.887013][ T9317] vivid-003: RDS Traffic Announcement: false inactive [ 331.897827][ T9317] vivid-003: RDS Traffic Program: false inactive [ 331.934772][ T9317] vivid-003: RDS Music: false inactive [ 331.992688][ T9317] vivid-003: ================== END STATUS ================== [ 332.163653][ T9326] FAULT_INJECTION: forcing a failure. [ 332.163653][ T9326] name failslab, interval 1, probability 0, space 0, times 0 [ 332.180836][ T9318] queue_state_write: unsupported operation '237' [ 332.227096][ T9318] queue_state_write: use 'run', 'start' or 'kick' [ 332.245734][ T9326] CPU: 1 UID: 0 PID: 9326 Comm: syz.3.624 Not tainted syzkaller #0 PREEMPT(full) [ 332.245767][ T9326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 332.245783][ T9326] Call Trace: [ 332.245790][ T9326] [ 332.245799][ T9326] dump_stack_lvl+0x16c/0x1f0 [ 332.245841][ T9326] should_fail_ex+0x512/0x640 [ 332.245880][ T9326] ? fs_reclaim_acquire+0xae/0x150 [ 332.245920][ T9326] should_failslab+0xc2/0x120 [ 332.245954][ T9326] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 332.245984][ T9326] ? security_inode_alloc+0x3b/0x2b0 [ 332.246030][ T9326] security_inode_alloc+0x3b/0x2b0 [ 332.246058][ T9326] inode_init_always_gfp+0xce4/0x1030 [ 332.246091][ T9326] alloc_inode+0x86/0x240 [ 332.246126][ T9326] sock_alloc+0x40/0x280 [ 332.246149][ T9326] sock_create_lite+0x82/0x120 [ 332.246175][ T9326] __netlink_kernel_create+0xbd/0x750 [ 332.246211][ T9326] ? trace_kmalloc+0x2b/0xd0 [ 332.246245][ T9326] ? __kvmalloc_node_noprof+0x298/0x620 [ 332.246274][ T9326] ? __pfx___netlink_kernel_create+0x10/0x10 [ 332.246310][ T9326] ? fib4_semantics_init+0x25/0x100 [ 332.246351][ T9326] fib_net_init+0x26d/0x3f0 [ 332.246372][ T9326] ? __pfx___register_sysctl_table+0x10/0x10 [ 332.246409][ T9326] ? __pfx_fib_net_init+0x10/0x10 [ 332.246431][ T9326] ? lockdep_init_map_type+0x5c/0x280 [ 332.246466][ T9326] ? __pfx_nl_fib_input+0x10/0x10 [ 332.246492][ T9326] ? devinet_init_net+0x5c2/0x910 [ 332.246520][ T9326] ? __pfx_fib_net_init+0x10/0x10 [ 332.246541][ T9326] ops_init+0x1e2/0x5f0 [ 332.246582][ T9326] setup_net+0x10f/0x380 [ 332.246601][ T9326] ? lockdep_init_map_type+0x5c/0x280 [ 332.246635][ T9326] ? __pfx_setup_net+0x10/0x10 [ 332.246658][ T9326] ? debug_mutex_init+0x37/0x70 [ 332.246685][ T9326] copy_net_ns+0x2a6/0x5f0 [ 332.246712][ T9326] create_new_namespaces+0x3ea/0xa90 [ 332.246748][ T9326] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 332.246779][ T9326] ksys_unshare+0x45b/0xa40 [ 332.246813][ T9326] ? __pfx_ksys_unshare+0x10/0x10 [ 332.246848][ T9326] ? xfd_validate_state+0x61/0x180 [ 332.246894][ T9326] __x64_sys_unshare+0x31/0x40 [ 332.246927][ T9326] do_syscall_64+0xcd/0x4c0 [ 332.246966][ T9326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.246990][ T9326] RIP: 0033:0x7f860738eec9 [ 332.247014][ T9326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.247042][ T9326] RSP: 002b:00007f860824e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 332.247064][ T9326] RAX: ffffffffffffffda RBX: 00007f86075e5fa0 RCX: 00007f860738eec9 [ 332.247080][ T9326] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 332.247095][ T9326] RBP: 00007f8607411f91 R08: 0000000000000000 R09: 0000000000000000 [ 332.247110][ T9326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.247124][ T9326] R13: 00007f86075e6038 R14: 00007f86075e5fa0 R15: 00007ffc3b6ff0a8 [ 332.247155][ T9326] [ 334.070511][ T9346] ima: policy update failed [ 334.078142][ T30] audit: type=1802 audit(4294967347.400:11): pid=9346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.630" res=0 errno=0 [ 335.935592][ T9382] kAFS: Invalid Command on /proc/fs/afs/cells file [ 336.312509][ T9385] vhci_hcd: not connected 4 [ 336.331571][ T7592] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:36: iget: checksum invalid [ 336.353396][ T7580] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:24: iget: checksum invalid [ 336.365676][ T7592] (NULL device *): loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 336.384698][ T7580] (NULL device *): loading /lib/firmware/updates/syzkaller/regulatory.db.p7s failed with error -74 [ 336.396688][ T7592] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:36: iget: checksum invalid [ 336.441143][ T7592] (NULL device *): loading /lib/firmware/updates/regulatory.db failed with error -74 [ 336.467076][ T7592] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:36: iget: checksum invalid [ 336.515186][ T7592] (NULL device *): loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 336.522544][ T7580] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:24: iget: checksum invalid [ 336.572864][ T7580] (NULL device *): loading /lib/firmware/updates/regulatory.db.p7s failed with error -74 [ 336.574263][ T7592] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:36: iget: checksum invalid [ 336.818328][ T7592] (NULL device *): loading /lib/firmware/regulatory.db failed with error -74 [ 336.827699][ T7580] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:24: iget: checksum invalid [ 336.857795][ T7592] (NULL device *): Direct firmware load for regulatory.db failed with error -74 [ 336.871406][ T7580] (NULL device *): loading /lib/firmware/syzkaller/regulatory.db.p7s failed with error -74 [ 336.888924][ T7592] (NULL device *): Falling back to sysfs fallback for: regulatory.db [ 336.902804][ T7580] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:24: iget: checksum invalid [ 336.957851][ T7580] (NULL device *): loading /lib/firmware/regulatory.db.p7s failed with error -74 [ 336.986027][ T7580] (NULL device *): Direct firmware load for regulatory.db.p7s failed with error -74 [ 337.025106][ T7580] (NULL device *): Falling back to sysfs fallback for: regulatory.db.p7s [ 337.048358][ T9393] usbip-vudc usbip-vudc.0: gadget not bound [ 347.383884][ T9385] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 347.390574][ T9385] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 347.397442][ T9385] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 347.404561][ T9385] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 347.419379][ T9385] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 347.427687][ T9385] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 347.435845][ T9385] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 349.249885][ T9459] vhci_hcd: not connected 4 [ 349.329786][ T7582] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:26: iget: checksum invalid [ 349.404713][ T7582] (NULL device *): loading /lib/firmware/updates/syzkaller/regulatory.db.p7s failed with error -74 [ 349.404772][ T7726] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:42: iget: checksum invalid [ 349.422339][ T5185] Bluetooth: hci3: command 0x0c1a tx timeout [ 349.430937][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 349.433966][ T5185] Bluetooth: hci2: command 0x0c1a tx timeout [ 349.455899][ T7726] (NULL device *): loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 349.467554][ T7582] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:26: iget: checksum invalid [ 349.485144][ T7726] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:42: iget: checksum invalid [ 349.496900][ T5185] Bluetooth: hci0: command 0x0c1a tx timeout [ 349.504543][ T7582] (NULL device *): loading /lib/firmware/updates/regulatory.db.p7s failed with error -74 [ 349.514991][ T7582] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:26: iget: checksum invalid [ 349.526629][ T7726] (NULL device *): loading /lib/firmware/updates/regulatory.db failed with error -74 [ 349.537681][ T7726] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:42: iget: checksum invalid [ 349.542785][ T7582] (NULL device *): loading /lib/firmware/syzkaller/regulatory.db.p7s failed with error -74 [ 349.549740][ T7726] (NULL device *): loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 349.569995][ T7726] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:42: iget: checksum invalid [ 349.582215][ T7726] (NULL device *): loading /lib/firmware/regulatory.db failed with error -74 [ 349.592203][ T7726] (NULL device *): Direct firmware load for regulatory.db failed with error -74 [ 349.599611][ T7582] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:26: iget: checksum invalid [ 349.655579][ T7582] (NULL device *): loading /lib/firmware/regulatory.db.p7s failed with error -74 [ 349.668799][ T7582] (NULL device *): Direct firmware load for regulatory.db.p7s failed with error -74 [ 349.691884][ T7582] (NULL device *): Falling back to sysfs fallback for: regulatory.db.p7s [ 349.722736][ T7726] (NULL device *): Falling back to sysfs fallback for: regulatory.db [ 350.330266][ T5185] Bluetooth: hci3: SCO packet too small [ 351.482585][ T5185] Bluetooth: hci3: command 0x0c1a tx timeout [ 351.562523][ T5185] Bluetooth: hci0: command 0x0c1a tx timeout [ 353.642620][ T5185] Bluetooth: hci0: command 0x0c1a tx timeout [ 358.881024][ T7580] bridge_slave_1: left allmulticast mode [ 358.887003][ T7580] bridge_slave_1: left promiscuous mode [ 358.895618][ T7580] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.910996][ T7580] bridge_slave_0: left allmulticast mode [ 358.917146][ T7580] bridge_slave_0: left promiscuous mode [ 358.923266][ T7580] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.270160][ T7580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.283396][ T7580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.294454][ T7580] bond0 (unregistering): Released all slaves [ 359.678568][ T7580] hsr_slave_0: left promiscuous mode [ 359.685193][ T7580] hsr_slave_1: left promiscuous mode [ 359.691265][ T7580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.699662][ T7580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.709651][ T7580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.717621][ T7580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.747786][ T7580] veth1_macvtap: left promiscuous mode [ 359.753920][ T7580] veth0_macvtap: left promiscuous mode [ 359.759708][ T7580] veth1_vlan: left promiscuous mode [ 359.765301][ T7580] veth0_vlan: left promiscuous mode [ 360.260447][ T7580] team0 (unregistering): Port device team_slave_1 removed [ 360.304519][ T7580] team0 (unregistering): Port device team_slave_0 removed [ 360.796769][ T9459] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 360.815993][ T9459] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 360.823900][ T9459] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 360.831061][ T9459] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 361.122145][ T5185] Bluetooth: hci2: unexpected event 0x03 length: 47 > 11 [ 361.141793][ T9496] netlink: 44 bytes leftover after parsing attributes in process `syz.2.658'. [ 362.843324][ T5185] Bluetooth: hci0: command 0x0c1a tx timeout [ 362.848300][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 362.849415][ T5185] Bluetooth: hci1: command 0x0c1a tx timeout [ 362.856278][ T5873] Bluetooth: hci2: command 0x0c1a tx timeout [ 362.893018][ T9517] netlink: 'syz.1.665': attribute type 11 has an invalid length. [ 362.941013][ T1000] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:5: iget: checksum invalid [ 362.979413][ T1000] (NULL device *): loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 362.980524][ T7580] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:24: iget: checksum invalid [ 363.071949][ T7580] (NULL device *): loading /lib/firmware/updates/syzkaller/regulatory.db.p7s failed with error -74 [ 363.072012][ T1000] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:5: iget: checksum invalid [ 363.073941][ T1000] (NULL device *): loading /lib/firmware/updates/regulatory.db failed with error -74 [ 363.073982][ T7580] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:24: iget: checksum invalid [ 363.074300][ T7580] (NULL device *): loading /lib/firmware/updates/regulatory.db.p7s failed with error -74 [ 363.074359][ T1000] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:5: iget: checksum invalid [ 363.074687][ T1000] (NULL device *): loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 363.074706][ T7580] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:24: iget: checksum invalid [ 363.075018][ T7580] (NULL device *): loading /lib/firmware/syzkaller/regulatory.db.p7s failed with error -74 [ 363.075139][ T7580] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:24: iget: checksum invalid [ 363.075364][ T7580] (NULL device *): loading /lib/firmware/regulatory.db.p7s failed with error -74 [ 363.075394][ T7580] (NULL device *): Direct firmware load for regulatory.db.p7s failed with error -74 [ 363.075413][ T7580] (NULL device *): Falling back to sysfs fallback for: regulatory.db.p7s [ 363.078875][ T1000] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:5: iget: checksum invalid [ 363.079234][ T1000] (NULL device *): loading /lib/firmware/regulatory.db failed with error -74 [ 363.079278][ T1000] (NULL device *): Direct firmware load for regulatory.db failed with error -74 [ 363.079304][ T1000] (NULL device *): Falling back to sysfs fallback for: regulatory.db [ 363.602204][ T9511] kexec: Could not allocate control_code_buffer [ 364.900695][ T5873] Bluetooth: hci1: SCO packet too small [ 373.624638][ T9518] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 373.630763][ T9518] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 373.637201][ T9518] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 373.644274][ T9518] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 373.982599][ T9583] FAULT_INJECTION: forcing a failure. [ 373.982599][ T9583] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 374.021406][ T9580] delete_channel: no stack [ 374.029337][ T9583] CPU: 1 UID: 0 PID: 9583 Comm: syz.1.677 Not tainted syzkaller #0 PREEMPT(full) [ 374.029383][ T9583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 374.029409][ T9583] Call Trace: [ 374.029419][ T9583] [ 374.029431][ T9583] dump_stack_lvl+0x16c/0x1f0 [ 374.029497][ T9583] should_fail_ex+0x512/0x640 [ 374.029556][ T9583] should_fail_alloc_page+0xe7/0x130 [ 374.029606][ T9583] prepare_alloc_pages+0x3c2/0x610 [ 374.029665][ T9583] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 374.029730][ T9583] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 374.029778][ T9583] ? validate_mm+0x40a/0x570 [ 374.029818][ T9583] ? __pfx_validate_mm+0x10/0x10 [ 374.029850][ T9583] ? __vma_enter_locked+0x163/0x3f0 [ 374.029892][ T9583] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 374.029947][ T9583] ? policy_nodemask+0xea/0x4e0 [ 374.029997][ T9583] alloc_pages_mpol+0x1fb/0x550 [ 374.030044][ T9583] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 374.030101][ T9583] alloc_pages_noprof+0x131/0x390 [ 374.030149][ T9583] __pmd_alloc+0x3b/0x930 [ 374.030205][ T9583] move_page_tables+0x30b7/0x4230 [ 374.030254][ T9583] ? __pfx_copy_vma+0x10/0x10 [ 374.030293][ T9583] ? __lock_acquire+0xb97/0x1ce0 [ 374.030344][ T9583] ? __pfx_move_page_tables+0x10/0x10 [ 374.030400][ T9583] ? rcu_is_watching+0x12/0xc0 [ 374.030434][ T9583] ? finish_task_switch.isra.0+0x221/0xc10 [ 374.030469][ T9583] ? lockdep_hardirqs_on+0x7c/0x110 [ 374.030538][ T9583] copy_vma_and_data+0x24e/0x790 [ 374.030584][ T9583] ? __pfx_copy_vma_and_data+0x10/0x10 [ 374.030632][ T9583] ? __vma_enter_locked+0x163/0x3f0 [ 374.030670][ T9583] ? find_held_lock+0x2b/0x80 [ 374.030704][ T9583] ? move_vma+0x536/0x1780 [ 374.030739][ T9583] ? __vm_enough_memory+0x184/0x3f0 [ 374.030795][ T9583] move_vma+0x548/0x1780 [ 374.030840][ T9583] ? __pfx_move_vma+0x10/0x10 [ 374.030886][ T9583] ? mm_get_unmapped_area_vmflags+0x97/0xe0 [ 374.030938][ T9583] ? cap_mmap_addr+0x4b/0x120 [ 374.030973][ T9583] ? bpf_lsm_mmap_addr+0x9/0x10 [ 374.031026][ T9583] ? security_mmap_addr+0x6c/0x1e0 [ 374.031080][ T9583] ? __get_unmapped_area+0x267/0x440 [ 374.031134][ T9583] ? vrm_set_new_addr+0x208/0x290 [ 374.031176][ T9583] mremap_to+0x1b7/0x450 [ 374.031216][ T9583] do_mremap+0x13b0/0x2030 [ 374.031257][ T9583] ? futex_private_hash_put+0xa0/0x300 [ 374.031308][ T9583] ? __pfx_do_mremap+0x10/0x10 [ 374.031357][ T9583] ? ksys_write+0x190/0x250 [ 374.031407][ T9583] __do_sys_mremap+0x119/0x170 [ 374.031446][ T9583] ? __pfx___do_sys_mremap+0x10/0x10 [ 374.031505][ T9583] ? __x64_sys_futex+0x1e0/0x4c0 [ 374.031573][ T9583] do_syscall_64+0xcd/0x4c0 [ 374.031606][ T9583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.031639][ T9583] RIP: 0033:0x7fa07c38eec9 [ 374.031664][ T9583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.031697][ T9583] RSP: 002b:00007fa07d155038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 374.031726][ T9583] RAX: ffffffffffffffda RBX: 00007fa07c5e6090 RCX: 00007fa07c38eec9 [ 374.031748][ T9583] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 374.031768][ T9583] RBP: 00007fa07c411f91 R08: 0000000100000000 R09: 0000000000000000 [ 374.031787][ T9583] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 374.031805][ T9583] R13: 00007fa07c5e6128 R14: 00007fa07c5e6090 R15: 00007fffd31a31c8 [ 374.031846][ T9583] [ 374.423223][ T5873] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 374.423269][ T5873] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 374.438972][ T5873] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 374.439020][ T5873] Bluetooth: hci2: adv larger than maximum supported [ 374.446541][ T5873] Bluetooth: hci2: adv larger than maximum supported [ 374.453590][ T5873] Bluetooth: hci2: Malformed LE Event: 0x0d [ 375.648993][ T5873] Bluetooth: hci3: command 0x0c1a tx timeout [ 375.649017][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 375.655330][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 375.722614][ T5873] Bluetooth: hci0: command 0x0c1a tx timeout [ 376.402483][ T5873] Bluetooth: hci2: SCO packet too small [ 379.845108][ T9677] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 380.770405][ T9696] input: f as /devices/virtual/input/input22 [ 382.349392][ T9712] kexec: Could not allocate control_code_buffer [ 382.982595][ T9724] ptrace attach of "./syz-executor exec"[8116] was attempted by ""[9724] [ 385.396979][ T9781] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 385.778869][ T9779] netlink: 28 bytes leftover after parsing attributes in process `syz.0.715'. [ 389.567948][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.574411][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 390.108529][ T9845] sctp: [Deprecated]: syz.0.726 (pid 9845) Use of struct sctp_assoc_value in delayed_ack socket option. [ 390.108529][ T9845] Use struct sctp_sack_info instead [ 390.781510][ T9858] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 393.694642][ T9898] netlink: 16 bytes leftover after parsing attributes in process `syz.0.737'. [ 393.760772][ T9898] netlink: 'syz.0.737': attribute type 2 has an invalid length. [ 394.048516][ T9905] netlink: 4128 bytes leftover after parsing attributes in process `syz.2.739'. [ 394.106036][ T9905] netlink: 4128 bytes leftover after parsing attributes in process `syz.2.739'. [ 394.188170][ T9911] FAULT_INJECTION: forcing a failure. [ 394.188170][ T9911] name failslab, interval 1, probability 0, space 0, times 0 [ 394.201206][ T9911] CPU: 0 UID: 0 PID: 9911 Comm: syz.1.740 Not tainted syzkaller #0 PREEMPT(full) [ 394.201239][ T9911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 394.201254][ T9911] Call Trace: [ 394.201261][ T9911] [ 394.201271][ T9911] dump_stack_lvl+0x16c/0x1f0 [ 394.201313][ T9911] should_fail_ex+0x512/0x640 [ 394.201350][ T9911] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 394.201386][ T9911] should_failslab+0xc2/0x120 [ 394.201418][ T9911] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 394.201450][ T9911] ? __pfx_kasprintf+0x10/0x10 [ 394.201476][ T9911] ? debugfs_create_symlink+0x29/0x320 [ 394.201509][ T9911] kstrdup+0x53/0x100 [ 394.201539][ T9911] debugfs_create_symlink+0x29/0x320 [ 394.201570][ T9911] drm_debugfs_clients_add+0x195/0x200 [ 394.201596][ T9911] drm_file_alloc+0x5c6/0xb40 [ 394.201626][ T9911] drm_open_helper+0x204/0x550 [ 394.201676][ T9911] drm_open+0x1a0/0x3e0 [ 394.201702][ T9911] ? __pfx_drm_open+0x10/0x10 [ 394.201729][ T9911] drm_stub_open+0x20c/0x380 [ 394.201757][ T9911] ? __pfx_drm_stub_open+0x10/0x10 [ 394.201783][ T9911] chrdev_open+0x234/0x6a0 [ 394.201814][ T9911] ? __pfx_apparmor_file_open+0x10/0x10 [ 394.201842][ T9911] ? __pfx_chrdev_open+0x10/0x10 [ 394.201875][ T9911] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 394.201908][ T9911] do_dentry_open+0x982/0x1530 [ 394.201938][ T9911] ? __pfx_chrdev_open+0x10/0x10 [ 394.201984][ T9911] vfs_open+0x82/0x3f0 [ 394.202024][ T9911] dentry_open+0x71/0xd0 [ 394.202059][ T9911] drm_mode_create_lease_ioctl+0x16b9/0x1fb0 [ 394.202096][ T9911] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 394.202126][ T9911] ? kasan_quarantine_put+0x10a/0x240 [ 394.202166][ T9911] ? drm_is_current_master+0x2c/0x40 [ 394.202199][ T9911] ? do_raw_spin_unlock+0x172/0x230 [ 394.202259][ T9911] drm_ioctl_kernel+0x1f1/0x3e0 [ 394.202289][ T9911] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 394.202327][ T9911] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 394.202371][ T9911] drm_ioctl+0x5c9/0xc30 [ 394.202406][ T9911] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 394.202435][ T9911] ? __pfx_drm_ioctl+0x10/0x10 [ 394.202459][ T9911] ? find_held_lock+0x2b/0x80 [ 394.202496][ T9911] ? __pfx_drm_ioctl+0x10/0x10 [ 394.202520][ T9911] __x64_sys_ioctl+0x18e/0x210 [ 394.202561][ T9911] do_syscall_64+0xcd/0x4c0 [ 394.202584][ T9911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.202608][ T9911] RIP: 0033:0x7fa07c38eec9 [ 394.202628][ T9911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.202651][ T9911] RSP: 002b:00007fa07d155038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 394.202673][ T9911] RAX: ffffffffffffffda RBX: 00007fa07c5e6090 RCX: 00007fa07c38eec9 [ 394.202689][ T9911] RDX: 0000000000000006 RSI: 00000000000064c6 RDI: 0000000000000002 [ 394.202704][ T9911] RBP: 00007fa07c411f91 R08: 0000000000000000 R09: 0000000000000000 [ 394.202718][ T9911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 394.202732][ T9911] R13: 00007fa07c5e6128 R14: 00007fa07c5e6090 R15: 00007fffd31a31c8 [ 394.202762][ T9911] [ 394.330727][ T9905] netlink: 4128 bytes leftover after parsing attributes in process `syz.2.739'. [ 395.423176][ T9919] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078000000 pfn:0x78000 [ 395.545234][ T9919] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 395.566328][ T9919] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 395.577096][ T9919] raw: ffff888078000000 0000000000000000 00000001ffffffff 0000000000000000 [ 395.588322][ T9919] page dumped because: unmovable page [ 395.622719][ T9919] page_owner tracks the page as allocated [ 395.697055][ T9919] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO), pid 6040, tgid 6026 (syz.3.15), ts 117780741259, free_ts 114232739814 [ 395.785213][ T9919] post_alloc_hook+0x1c0/0x230 [ 395.790075][ T9919] get_page_from_freelist+0x132b/0x38e0 [ 395.850397][ T9919] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 395.857928][ T9919] alloc_pages_mpol+0x1fb/0x550 [ 395.863099][ T9919] alloc_pages_noprof+0x131/0x390 [ 395.869565][ T9919] brd_submit_bio+0x942/0x1180 [ 395.874720][ T9919] __submit_bio+0x304/0x690 [ 395.879987][ T9919] submit_bio_noacct_nocheck+0x852/0xd30 [ 395.885879][ T9919] submit_bio_noacct+0xc20/0x1ed0 [ 395.891245][ T9919] blkdev_direct_IO+0x14d2/0x2030 [ 395.896473][ T9919] blkdev_write_iter+0x703/0xe00 [ 395.901727][ T9919] vfs_write+0x7d0/0x11d0 [ 395.906221][ T9919] ksys_write+0x12a/0x250 [ 395.911920][ T9919] do_syscall_64+0xcd/0x4c0 [ 395.983133][ T9919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.989119][ T9919] page last free pid 23 tgid 23 stack trace: [ 396.046302][ T9919] __free_frozen_pages+0x7d5/0x10f0 [ 396.063657][ T9919] rcu_core+0x799/0x1530 [ 396.067965][ T9919] handle_softirqs+0x216/0x8e0 [ 396.073547][ T9919] run_ksoftirqd+0x3a/0x60 [ 396.078259][ T9919] smpboot_thread_fn+0x3f7/0xae0 [ 396.084436][ T9919] kthread+0x3c5/0x780 [ 396.088761][ T9919] ret_from_fork+0x56d/0x730 [ 396.093900][ T9919] ret_from_fork_asm+0x1a/0x30 [ 398.089960][ T9944] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 401.984673][ T9994] Unable to find swap-space signature [ 403.310575][T10029] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 408.240797][T10116] FAULT_INJECTION: forcing a failure. [ 408.240797][T10116] name failslab, interval 1, probability 0, space 0, times 0 [ 408.272795][T10116] CPU: 1 UID: 0 PID: 10116 Comm: syz.1.779 Not tainted syzkaller #0 PREEMPT(full) [ 408.272842][T10116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 408.272864][T10116] Call Trace: [ 408.272875][T10116] [ 408.272887][T10116] dump_stack_lvl+0x16c/0x1f0 [ 408.272945][T10116] should_fail_ex+0x512/0x640 [ 408.272994][T10116] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 408.273039][T10116] should_failslab+0xc2/0x120 [ 408.273084][T10116] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 408.273127][T10116] ? security_file_alloc+0x34/0x2b0 [ 408.273179][T10116] security_file_alloc+0x34/0x2b0 [ 408.273225][T10116] init_file+0x93/0x4c0 [ 408.273273][T10116] alloc_empty_file+0x73/0x1e0 [ 408.273326][T10116] path_openat+0xda/0x2cb0 [ 408.273357][T10116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.273397][T10116] ? __pfx_path_openat+0x10/0x10 [ 408.273439][T10116] do_filp_open+0x20b/0x470 [ 408.273477][T10116] ? __pfx_do_filp_open+0x10/0x10 [ 408.273536][T10116] ? alloc_fd+0x471/0x7d0 [ 408.273575][T10116] do_sys_openat2+0x11b/0x1d0 [ 408.273617][T10116] ? __pfx_do_sys_openat2+0x10/0x10 [ 408.273674][T10116] __x64_sys_openat+0x174/0x210 [ 408.273699][T10116] ? __pfx___x64_sys_openat+0x10/0x10 [ 408.273737][T10116] do_syscall_64+0xcd/0x4c0 [ 408.273769][T10116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.273798][T10116] RIP: 0033:0x7fa07c38eec9 [ 408.273820][T10116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.273848][T10116] RSP: 002b:00007fa07d155038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 408.273875][T10116] RAX: ffffffffffffffda RBX: 00007fa07c5e6090 RCX: 00007fa07c38eec9 [ 408.273893][T10116] RDX: 0000000000000180 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 408.273910][T10116] RBP: 00007fa07c411f91 R08: 0000000000000000 R09: 0000000000000000 [ 408.273927][T10116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.273942][T10116] R13: 00007fa07c5e6128 R14: 00007fa07c5e6090 R15: 00007fffd31a31c8 [ 408.273982][T10116] [ 408.292191][T10103] zswap: compressor not available [ 409.363651][ T30] audit: type=1800 audit(4294967422.690:12): pid=10131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.784" name="dbroot" dev="configfs" ino=27958 res=0 errno=0 [ 409.608007][T10126] zswap: compressor not available [ 411.688058][T10176] FAULT_INJECTION: forcing a failure. [ 411.688058][T10176] name failslab, interval 1, probability 0, space 0, times 0 [ 411.707438][T10177] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 411.728483][T10176] CPU: 1 UID: 0 PID: 10176 Comm: syz.3.792 Not tainted syzkaller #0 PREEMPT(full) [ 411.728528][T10176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 411.728549][T10176] Call Trace: [ 411.728561][T10176] [ 411.728574][T10176] dump_stack_lvl+0x16c/0x1f0 [ 411.728632][T10176] should_fail_ex+0x512/0x640 [ 411.728684][T10176] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 411.728727][T10176] should_failslab+0xc2/0x120 [ 411.728772][T10176] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 411.728813][T10176] ? d_instantiate+0x77/0x90 [ 411.728855][T10176] ? alloc_empty_file+0x55/0x1e0 [ 411.728912][T10176] alloc_empty_file+0x55/0x1e0 [ 411.728965][T10176] alloc_file_pseudo+0x13a/0x230 [ 411.729019][T10176] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 411.729069][T10176] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 411.729122][T10176] create_pipe_files+0x364/0x9a0 [ 411.729172][T10176] do_pipe2+0xaf/0x1c0 [ 411.729214][T10176] ? __pfx_do_pipe2+0x10/0x10 [ 411.729259][T10176] ? xfd_validate_state+0x61/0x180 [ 411.729308][T10176] ? __pfx_ksys_write+0x10/0x10 [ 411.729359][T10176] __x64_sys_pipe+0x33/0x50 [ 411.729401][T10176] do_syscall_64+0xcd/0x4c0 [ 411.729435][T10176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.729474][T10176] RIP: 0033:0x7f860738eec9 [ 411.729501][T10176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.729535][T10176] RSP: 002b:00007f860822d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 411.729566][T10176] RAX: ffffffffffffffda RBX: 00007f86075e6090 RCX: 00007f860738eec9 [ 411.729588][T10176] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 411.729607][T10176] RBP: 00007f8607411f91 R08: 0000000000000000 R09: 0000000000000000 [ 411.729627][T10176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.729647][T10176] R13: 00007f86075e6128 R14: 00007f86075e6090 R15: 00007ffc3b6ff0a8 [ 411.729688][T10176] [ 412.904955][T10209] bond0: invalid ARP target specified [ 413.997889][T10247] delete_channel: no stack [ 414.163587][T10250] vhci_hcd: default hub control req: 0300 v0000 i0004 l0 [ 415.341298][T10273] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 416.485477][T10288] netlink: 16 bytes leftover after parsing attributes in process `syz.2.817'. [ 416.503821][T10288] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 418.717279][T10320] svc: failed to register nfsdv3 RPC service (errno 111). [ 418.793917][T10320] svc: failed to register nfsaclv3 RPC service (errno 111). [ 419.027308][ T5873] Bluetooth: hci3: unexpected event 0x01 length: 5 > 1 [ 419.027509][ T5873] Bluetooth: hci3: unexpected event 0x01 length: 5 > 1 [ 422.623727][T10397] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input25 [ 422.769441][T10408] Process accounting resumed [ 423.421184][T10417] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 423.997732][T10428] netlink: 326 bytes leftover after parsing attributes in process `syz.2.843'. [ 425.223530][T10441] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 425.461647][ T30] audit: type=1326 audit(4294967438.780:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10445 comm="syz.2.849" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe30758eec9 code=0x0 [ 425.886900][T10456] ima: policy update failed [ 426.004713][ T30] audit: type=1802 audit(4294967439.310:14): pid=10456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.850" res=0 errno=0 [ 427.619572][T10472] svc: failed to register nfsdv3 RPC service (errno 111). [ 427.805226][T10472] svc: failed to register nfsaclv3 RPC service (errno 111). [ 428.341845][T10482] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 429.518473][ T7573] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:17: iget: checksum invalid [ 429.542706][ T7583] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:27: iget: checksum invalid [ 429.555567][ T7573] (NULL device *): loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 429.572564][T10498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.855'. [ 429.593322][ T7583] (NULL device *): loading /lib/firmware/updates/syzkaller/regulatory.db.p7s failed with error -74 [ 429.612566][ T7573] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:17: iget: checksum invalid [ 429.654716][ T7573] (NULL device *): loading /lib/firmware/updates/regulatory.db failed with error -74 [ 429.666418][ T7583] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:27: iget: checksum invalid [ 429.692840][ T7583] (NULL device *): loading /lib/firmware/updates/regulatory.db.p7s failed with error -74 [ 429.703806][ T7573] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:17: iget: checksum invalid [ 429.751080][ T7573] (NULL device *): loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 429.764290][ T7583] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:27: iget: checksum invalid [ 429.812568][ T7583] (NULL device *): loading /lib/firmware/syzkaller/regulatory.db.p7s failed with error -74 [ 429.831131][ T7573] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:17: iget: checksum invalid [ 429.853351][ T7573] (NULL device *): loading /lib/firmware/regulatory.db failed with error -74 [ 429.862558][ T7583] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:27: iget: checksum invalid [ 429.909244][ T7573] (NULL device *): Direct firmware load for regulatory.db failed with error -74 [ 429.922938][ T7583] (NULL device *): loading /lib/firmware/regulatory.db.p7s failed with error -74 [ 429.952333][ T7573] (NULL device *): Falling back to sysfs fallback for: regulatory.db [ 429.964407][ T7583] (NULL device *): Direct firmware load for regulatory.db.p7s failed with error -74 [ 429.994010][ T7583] (NULL device *): Falling back to sysfs fallback for: regulatory.db.p7s [ 431.986815][T10477] ------------[ cut here ]------------ [ 431.992616][T10477] WARNING: CPU: 1 PID: 10477 at kernel/trace/trace.c:8604 tracing_buffers_mmap_close+0xdd/0x130 [ 432.003331][T10477] Modules linked in: [ 432.007617][T10477] CPU: 1 UID: 0 PID: 10477 Comm: syz.2.853 Not tainted syzkaller #0 PREEMPT(full) [ 432.017122][T10477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 432.027505][T10477] RIP: 0010:tracing_buffers_mmap_close+0xdd/0x130 [ 432.034194][T10477] Code: 75 46 48 8b 7b 08 e8 02 96 ff ff 31 ff 89 c3 89 c6 e8 e7 58 fb ff 85 db 75 0a 48 83 c4 08 5b e9 99 5d fb ff e8 94 5d fb ff 90 <0f> 0b 90 48 83 c4 08 5b e9 86 5d fb ff e8 51 cd 60 00 eb 87 e8 7a [ 432.054098][T10477] RSP: 0018:ffffc9001abf79c0 EFLAGS: 00010293 [ 432.060233][T10477] RAX: 0000000000000000 RBX: 00000000ffffffed RCX: ffffffff81bfadb9 [ 432.068643][T10477] RDX: ffff88802cf83c00 RSI: ffffffff81bfadcc RDI: 0000000000000005 [ 432.076960][T10477] RBP: ffffffff81bfacf0 R08: 0000000000000005 R09: 0000000000000000 [ 432.085079][T10477] R10: 00000000ffffffed R11: 0000000000000000 R12: ffff888086cd7cc8 [ 432.093205][T10477] R13: dffffc0000000000 R14: ffffc9001abf7a58 R15: 0000000000000000 [ 432.101226][T10477] FS: 0000000000000000(0000) GS:ffff8881247b9000(0000) knlGS:0000000000000000 [ 432.110250][T10477] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 432.116969][T10477] CR2: 00005555587fa5c8 CR3: 0000000027c66000 CR4: 00000000003526f0 [ 432.125333][T10477] Call Trace: [ 432.128652][T10477] [ 432.131623][T10477] remove_vma+0x85/0x160 [ 432.136001][T10477] exit_mmap+0x511/0xb90 [ 432.140323][T10477] ? __pfx_exit_mmap+0x10/0x10 [ 432.145408][T10477] ? rcu_is_watching+0x12/0xc0 [ 432.150227][T10477] ? kasan_quarantine_put+0x10a/0x240 [ 432.155742][T10477] __mmput+0x12a/0x410 [ 432.159872][T10477] mmput+0x62/0x70 [ 432.163751][T10477] do_exit+0x7c7/0x2bf0 [ 432.168248][T10477] ? proc_coredump_connector+0x2d1/0x4f0 [ 432.174312][T10477] ? __pfx_do_exit+0x10/0x10 [ 432.179013][T10477] do_group_exit+0xd3/0x2a0 [ 432.183677][T10477] get_signal+0x2673/0x26d0 [ 432.188249][T10477] ? force_sig_fault+0xc4/0x100 [ 432.193238][T10477] ? __pfx_get_signal+0x10/0x10 [ 432.198156][T10477] arch_do_signal_or_restart+0x8f/0x790 [ 432.203984][T10477] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 432.210120][T10477] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 432.216431][T10477] irqentry_exit_to_user_mode+0x13e/0x290 [ 432.222301][T10477] asm_exc_page_fault+0x26/0x30 [ 432.227201][T10477] RIP: 0033:0x40fff [ 432.231048][T10477] Code: Unable to access opcode bytes at 0x40fd5. [ 432.237560][T10477] RSP: 002b:000000000000000a EFLAGS: 00010206 [ 432.243732][T10477] RAX: 0000000000000000 RBX: 00007fe3077e6090 RCX: 00007fe30758eec9 [ 432.251843][T10477] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 432.259994][T10477] RBP: 00007fe307611f91 R08: 0000000000000002 R09: 0000000000000000 [ 432.268322][T10477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 432.276645][T10477] R13: 00007fe3077e6128 R14: 00007fe3077e6090 R15: 00007fffcc0825e8 [ 432.284839][T10477] [ 432.287905][T10477] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 432.295217][T10477] CPU: 1 UID: 0 PID: 10477 Comm: syz.2.853 Not tainted syzkaller #0 PREEMPT(full) [ 432.304526][T10477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 432.314633][T10477] Call Trace: [ 432.317931][T10477] [ 432.320876][T10477] dump_stack_lvl+0x3d/0x1f0 [ 432.325507][T10477] vpanic+0x6e8/0x7a0 [ 432.329523][T10477] ? __pfx_vpanic+0x10/0x10 [ 432.334259][T10477] ? tracing_buffers_mmap_close+0xdd/0x130 [ 432.340096][T10477] panic+0xca/0xd0 [ 432.343860][T10477] ? __pfx_panic+0x10/0x10 [ 432.348322][T10477] ? check_panic_on_warn+0x1f/0xb0 [ 432.353471][T10477] check_panic_on_warn+0xab/0xb0 [ 432.358449][T10477] __warn+0xf6/0x3c0 [ 432.362390][T10477] ? tracing_buffers_mmap_close+0xdd/0x130 [ 432.368247][T10477] report_bug+0x3c3/0x580 [ 432.372616][T10477] ? tracing_buffers_mmap_close+0xdd/0x130 [ 432.378456][T10477] handle_bug+0x184/0x210 [ 432.382811][T10477] exc_invalid_op+0x17/0x50 [ 432.387352][T10477] asm_exc_invalid_op+0x1a/0x20 [ 432.392228][T10477] RIP: 0010:tracing_buffers_mmap_close+0xdd/0x130 [ 432.398677][T10477] Code: 75 46 48 8b 7b 08 e8 02 96 ff ff 31 ff 89 c3 89 c6 e8 e7 58 fb ff 85 db 75 0a 48 83 c4 08 5b e9 99 5d fb ff e8 94 5d fb ff 90 <0f> 0b 90 48 83 c4 08 5b e9 86 5d fb ff e8 51 cd 60 00 eb 87 e8 7a [ 432.418307][T10477] RSP: 0018:ffffc9001abf79c0 EFLAGS: 00010293 [ 432.424422][T10477] RAX: 0000000000000000 RBX: 00000000ffffffed RCX: ffffffff81bfadb9 [ 432.432432][T10477] RDX: ffff88802cf83c00 RSI: ffffffff81bfadcc RDI: 0000000000000005 [ 432.440425][T10477] RBP: ffffffff81bfacf0 R08: 0000000000000005 R09: 0000000000000000 [ 432.448423][T10477] R10: 00000000ffffffed R11: 0000000000000000 R12: ffff888086cd7cc8 [ 432.456413][T10477] R13: dffffc0000000000 R14: ffffc9001abf7a58 R15: 0000000000000000 [ 432.464410][T10477] ? __pfx_tracing_buffers_mmap_close+0x10/0x10 [ 432.470713][T10477] ? tracing_buffers_mmap_close+0xc9/0x130 [ 432.476550][T10477] ? tracing_buffers_mmap_close+0xdc/0x130 [ 432.482390][T10477] remove_vma+0x85/0x160 [ 432.486672][T10477] exit_mmap+0x511/0xb90 [ 432.490968][T10477] ? __pfx_exit_mmap+0x10/0x10 [ 432.495797][T10477] ? rcu_is_watching+0x12/0xc0 [ 432.500594][T10477] ? kasan_quarantine_put+0x10a/0x240 [ 432.506028][T10477] __mmput+0x12a/0x410 [ 432.510134][T10477] mmput+0x62/0x70 [ 432.513887][T10477] do_exit+0x7c7/0x2bf0 [ 432.518079][T10477] ? proc_coredump_connector+0x2d1/0x4f0 [ 432.523743][T10477] ? __pfx_do_exit+0x10/0x10 [ 432.528383][T10477] do_group_exit+0xd3/0x2a0 [ 432.532945][T10477] get_signal+0x2673/0x26d0 [ 432.537488][T10477] ? force_sig_fault+0xc4/0x100 [ 432.542373][T10477] ? __pfx_get_signal+0x10/0x10 [ 432.547307][T10477] arch_do_signal_or_restart+0x8f/0x790 [ 432.552889][T10477] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 432.558996][T10477] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 432.565201][T10477] irqentry_exit_to_user_mode+0x13e/0x290 [ 432.570966][T10477] asm_exc_page_fault+0x26/0x30 [ 432.575853][T10477] RIP: 0033:0x40fff [ 432.579689][T10477] Code: Unable to access opcode bytes at 0x40fd5. [ 432.586110][T10477] RSP: 002b:000000000000000a EFLAGS: 00010206 [ 432.592206][T10477] RAX: 0000000000000000 RBX: 00007fe3077e6090 RCX: 00007fe30758eec9 [ 432.600206][T10477] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 432.608193][T10477] RBP: 00007fe307611f91 R08: 0000000000000002 R09: 0000000000000000 [ 432.616183][T10477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 432.624301][T10477] R13: 00007fe3077e6128 R14: 00007fe3077e6090 R15: 00007fffcc0825e8 [ 432.632322][T10477] [ 432.635666][T10477] Kernel Offset: disabled [ 432.640006][T10477] Rebooting in 86400 seconds..