last executing test programs: 3.714994042s ago: executing program 0 (id=1294): unshare$auto(0x8000000) semget$auto(0x0, 0x2e4a, 0x8000) semtimedop$auto(0x4e6, &(0x7f0000000040)={0x3, 0x8, 0x100}, 0x6, &(0x7f0000000080)={0x1ff, 0x5}) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x9, 0x36ec}, 0x1f4, 0x0) unshare$auto(0x8000400) 3.336476067s ago: executing program 1 (id=1299): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/sctp/udp_port\x00', 0x202, 0x0) sendfile$auto(r0, r0, 0x0, 0x1000008) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x72f3) r1 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/event2\x00', 0x8841, 0x0) mmap$auto(0x0, 0x9, 0x3ff57697, 0x9b72, 0x2, 0x8000000000008000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_lowpan_control_fops_6lowpan(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) getpeername$auto(r2, &(0x7f00000001c0)=@rc={0x1f, @any, 0x20}, &(0x7f0000000240)=0xfffffffa) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r4, 0x301, 0x70bd27, 0x25dfdc03}, 0x14}, 0x1, 0x0, 0x0, 0x2000001c}, 0x20000800) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x40000080) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:01.0/remove\x00', 0xb01, 0x0) write$auto(r5, &(0x7f0000000100)='9\x00d1L\xff\x15\xba\xa17=w\xc1\xf8\xff\xff\v\xb5^\xa1/\xfb\xaf\xc8\xfc\\\xa9@\xc0\xee\xa2[', 0x1) socket(0x10, 0x2, 0x0) r6 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r6, 0x0, 0x7) r7 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r7, &(0x7f0000000200)={0x0, 0x9}, 0x3) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) close_range$auto(0x2, 0xa, 0x0) 3.241449901s ago: executing program 3 (id=1301): r0 = socket(0x2, 0x2, 0x88) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x3, 0x0, 0x54) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) sendmmsg$auto(r0, 0x0, 0x9a6, 0xe000) write$auto(0x3, 0x0, 0x800) 3.027017453s ago: executing program 3 (id=1302): r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r0, 0x0, 0xc3) 2.784299946s ago: executing program 1 (id=1303): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1002}, 0x7) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x16, &(0x7f0000000040), 0x1) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) sysinfo$auto(0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="007000fe1cdf251b00000008379f0002000046010400080108004d01040000000800ef00000100"/54], 0x3c}, 0x1, 0x0, 0x0, 0x20040081}, 0x85) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x24302, 0x0) mmap$auto(0x3, 0x2000a, 0x10000000000df, 0xeb2, r0, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/input/event2\x00', 0x4a404, 0x0) socket(0x2, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x20001, 0x0) ppoll$auto(&(0x7f00000000c0)={r3, 0x0, 0x8}, 0xf7, &(0x7f0000000100)={0x80000000008000, 0x1}, 0x0, 0x8) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9) sendto$auto(0xffffffffffffffff, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80000700"}, 0x1c) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/sctp/assocs\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, 0x0, 0xfffffe36) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/034/001\x00', 0x20882, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000080)='7', 0x1) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={"2252f65ca1b92f72a92538725b0694521629e8c3e6ba91c62e2e9d42cf4aef15", 0x4, 0x3, 0x8004, 0x6, 0xff}) 2.672277247s ago: executing program 0 (id=1304): r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0xa, 0x5, 0x0) socket(0xa, 0x3, 0xff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) pidfd_open$auto(0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) socket(0x1e, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) getpid() ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5) 2.646430261s ago: executing program 3 (id=1305): mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) ioctl$auto(0xc8, 0x800454d7, 0x5c8d) (fail_nth: 8) 2.518033032s ago: executing program 3 (id=1306): r0 = openat$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x200, 0x8af5) mmap$auto(0x0, 0x100000020009, 0x800, 0x410, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x10, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) process_vm_writev$auto(0x1, &(0x7f0000002980)={0x0, 0x4}, 0x3, &(0x7f0000002a40)={0x0, 0x7}, 0x4, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv6/neigh/ip_vti0/base_reachable_time_ms\x00', 0x202, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x0, 0x0) epoll_create$auto(0xa223) mmap$auto(0x0, 0x400008, 0xdb, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd4/integrity/read_verify\x00', 0x20a800, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) setreuid$auto(0x15, 0x5) setrlimit$auto(0x8, 0x0) mlock$auto(0x81, 0xffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x101000, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, 0x0, 0x22641, 0x0) open(0x0, 0x161342, 0x0) socket(0x2, 0x5, 0x0) socketpair$auto(0x0, 0x3, 0x0, 0x0) semctl$auto(0x204, 0xfffffffe, 0x3, 0x4) r1 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r1, 0x0, 0xc3) 2.096345386s ago: executing program 2 (id=1307): futex$auto(&(0x7f0000000200)=0x2948, 0x6, 0x294a, 0x0, 0x0, 0x800b7) futex$auto(&(0x7f0000000080)=0x3, 0x3, 0x1f, 0x0, &(0x7f0000000100)=0x4, 0x440a48d3) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xffffffffffffffff, 0x40008000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$auto_F_CREATED_QUERY(0xffffffffffffffff, 0x404, 0x8) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000001c0), r1) sendmsg$auto_HWSIM_CMD_GET_RADIO(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010006bd7000feaab1250600000008000a0004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000240), r1) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0180, 0x0) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/mem\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x10, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) process_vm_writev$auto(0x1, &(0x7f0000002980)={0x0, 0x4}, 0x3, &(0x7f0000002a40)={0x0, 0x7}, 0x4, 0x0) ioctl$auto_XFS_IOC_ERROR_INJECTION(r3, 0x40085874, &(0x7f0000000140)={r3, 0x42}) mmap$auto(0x0, 0x70e, 0x2000000000000081, 0x11, 0xffffffffffffffff, 0xa) ptrace$auto_PTRACE_GETEVENTMSG(0x4201, r0, 0x80000000, 0x2) io_getevents$auto(0xdf4, 0x4, 0x7, &(0x7f0000000040)={0x0, 0x80, 0x200003, 0x7}, &(0x7f00000000c0)={0x8, 0x80000000000008}) r4 = epoll_create$auto(0x4) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video48\x00', 0x18a041, 0x0) epoll_ctl$auto(r4, 0x1, r5, 0x0) 1.682867742s ago: executing program 1 (id=1308): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/netfs/cookies\x00', 0xd00, 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000180)=""/249, 0xf9) r1 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000440), 0x20100, 0x0) ioctl$auto_LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) (async) ioctl$auto_LOOP_CTL_GET_FREE(r1, 0x4c82, 0x0) r2 = epoll_create$auto(0x4) (async) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video48\x00', 0x18a041, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), r4) (async) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) (async) r5 = socket(0x29, 0x2, 0x0) getsockopt$auto(r5, 0x116, 0x1, 0x0, 0x0) (async) epoll_ctl$auto(r2, 0x1, r3, 0x0) ioctl$auto_OTPGETREGIONINFO(r2, 0x400c4d0f, &(0x7f0000000000)={0x9, 0x0, 0x56b}) 1.656813271s ago: executing program 2 (id=1309): r0 = socket$nl_generic(0x10, 0x3, 0x10) setresgid$auto(0x800, 0xee01, 0xffffffffffffffff) setresgid$auto(0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5cbfa6fb", @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf250a000000100003800c0001000100000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x80802, 0x0) socket(0xa, 0x801, 0x84) r2 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) r4 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r6, r5, 0x4, 0x1, r4, @relative_id=0x13, 0xe600}, 0x80000000) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r2, 0x0, 0x3}, 0xc) bpf$auto(0x4, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xf) ioctl$auto_VHOST_SET_LOG_FD2(0xffffffffffffffff, 0x4004af07, &(0x7f0000000000)=0xffffffffffffffff) r8 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="010326bd7000fedbdf2501000000"], 0x14}, 0x1, 0xf0ffff, 0x0, 0x4005}, 0x91) r9 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r10}, 0x6a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'nr0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r7, &(0x7f0000000180)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="08002bbd7000fddbdf250a000000080003000002000001000200000008000200", @ANYRES32=r10, @ANYBLOB="080003007fffffff080003000400000008000300ff00000008000200", @ANYRES32=r11, @ANYBLOB="0800010001010000"], 0x5c}, 0x1, 0x0, 0x0, 0x8010}, 0x64004) mmap$auto(0x0, 0x800, 0x4000000000df, 0xeb1, 0x404, 0x80000008000) ioctl$auto(0xc8, 0x800454d7, 0x5c8d) 1.622779524s ago: executing program 0 (id=1310): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) timer_create$auto(0x3, 0x0, 0x0) timer_create$auto(0x9, 0x0, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$auto_SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x109801, 0x0) ioctl$auto(r1, 0x9210640b, 0xffffffffffffffff) io_uring_setup$auto(0x6, 0x0) r2 = open(0x0, 0x22240, 0x154) execveat$auto(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000001040), 0x109500, 0x0) io_cancel$auto(0x4, &(0x7f0000001080)={0x8, 0x9, 0x47c0, 0x8, 0x7f, r1, 0x70d16b920, 0x8000000000000000, 0x8000000000000001, 0x0, 0xa, r3}, &(0x7f00000010c0)={0x8, 0x100, 0x7fff, 0x8}) r5 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_BTRFS_IOC_SCAN_DEV(r5, 0x50009404, &(0x7f0000000040)={@raw=0x6, "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"}) setresuid$auto(0x0, 0x7, 0x8080) setfsuid$auto(0x0) read$auto(0xffffffffffffffff, 0x0, 0x4) fanotify_init$auto(0xc00, 0x2000000000002) r6 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000001140), r2) sendmsg$auto_SMC_PNETID_GET(r4, &(0x7f0000001280)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001240)={&(0x7f0000001180)={0x98, r6, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x28, 0x1, '/sys/devices/virtual/net/ifb0/flags\x00'}, @SMC_PNETID_NAME={0x28, 0x1, '/sys/devices/virtual/net/ifb0/flags\x00'}, @SMC_PNETID_IBNAME={0x28, 0x3, '/sys/devices/virtual/net/ifb0/flags\x00'}, @SMC_PNETID_NAME={0x9, 0x1, '-%@-\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x40010}, 0x20044040) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xb02, 0x0) socket(0x2b, 0x1, 0x0) sendfile$auto(r7, r7, 0x0, 0x3) open(0x0, 0x22240, 0x155) unshare$auto(0x40000080) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x492683, 0x0) 1.526744399s ago: executing program 0 (id=1311): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/sctp/udp_port\x00', 0x202, 0x0) sendfile$auto(r0, r0, 0x0, 0x1000008) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x72f3) r1 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/event2\x00', 0x8841, 0x0) mmap$auto(0x0, 0x9, 0x3ff57697, 0x9b72, 0x2, 0x8000000000008000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_lowpan_control_fops_6lowpan(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) getpeername$auto(r2, &(0x7f00000001c0)=@rc={0x1f, @any, 0x20}, &(0x7f0000000240)=0xfffffffa) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r4, 0x301, 0x70bd27, 0x25dfdc03}, 0x14}, 0x1, 0x0, 0x0, 0x2000001c}, 0x20000800) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x40000080) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:01.0/remove\x00', 0xb01, 0x0) write$auto(r5, &(0x7f0000000100)='9\x00d1L\xff\x15\xba\xa17=w\xc1\xf8\xff\xff\v\xb5^\xa1/\xfb\xaf\xc8\xfc\\\xa9@\xc0\xee\xa2[', 0x1) socket(0x10, 0x2, 0x0) r6 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r6, 0x0, 0x7) r7 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r7, &(0x7f0000000200)={0x0, 0x9}, 0x3) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) close_range$auto(0x2, 0xa, 0x0) 1.440231223s ago: executing program 2 (id=1312): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x4, 0x15, 0x1000, 0x47, 0xc, 0xf, 0x0, 0x0, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x3]}, 0x0, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) madvise$auto(0x0, 0x4, 0x15) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv6/conf/default/stable_secret\x00', 0x40d02, 0x0) r1 = bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)=@iter_create={r0, 0x10001}, 0x6) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x15d4, r2, 0x530, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0xa}, @NL80211_ATTR_AP_SETTINGS_FLAGS={0x8, 0x135, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x53}, @NL80211_ATTR_STA_FLAGS={0x88, 0x11, 0x0, 0x1, [@generic="726668e14d67a652c8bf1d175f65b170ca816b252c92c0a8ebbdfe86125751fefd59011e132000134c6f037eaa9ce7df094f841e9e6636022965ea739b6972563ecf3e71af8ef2faf3238684c6021b5091f3e8d291c97fa236fe2f080adccbdaec1efea920c5659f4ee635a7479da01dfea063c75e34974a24da152fedcff7de0578b2fc"]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x7, 0xf0}}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x8, 0xac, "ebd98aae"}, @NL80211_ATTR_EMA_RNR_ELEMS={0x1507, 0x145, 0x0, 0x1, [@generic="e0d742183eb6e70209021eb793f4312797fec9520f92ebf1d94205678c94667846b18ed63dd6ba600595e4e9b3af40e516ba2b8c9a279e9d6bd49edfa5ceaeec54368be751d0c4dc6feacce20ae40e8cb57ee307315b0dba1bb49fa3153600f4bd7876dbaacd992fb2ca42cf9e3a44ea1a59fb793d8167d9386d884556b39c09f18c29b919e9b9c653d7542ef49381b54fc9171cf77f34efc8bc82dafcd8a08b30c17a7a9e2e5e232900b86a76dfe78a55168b4af1c079de823e5778a4fb2a46d6fe0458a117da7e9b42d4566a8805df0b5c2c878d35887fdddfd6aa5e322312ed2b381234a85bf8", @typed={0x4, 0x15}, @typed={0x8, 0xbf, 0x0, 0x0, @fd=r0}, @nested={0x154, 0x107, 0x0, 0x1, [@typed={0x8, 0xce, 0x0, 0x0, @ipv4=@private=0xa010102}, @nested={0x4, 0x32}, @typed={0x79, 0x51, 0x0, 0x0, @binary="1d6c5ed653a5849bd66d574a48cfce4877bf8e09af5e1281cc952814ba79dcd3b7aa7cf69313924586675871d96222251efa86e62119280c3757087f89e0c6da2eafd83eb28ebcc074bfd4c27c1261209eda39c88ff70ef79429d87fa0ae7714b9b1e58829294a3283eff18fcae5b0fad8eed66be4"}, @typed={0x8, 0x87, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x67}, @generic="067eeac157272a31d0993f2d57889b26df1fa89c8b0ce02567bde8262f7cd08a48f0559dfda843c56a42d7fa4d2516b11aa2fbf8a75b960df6cadd803eca6e9c8015b21379c302c842dc38ea1bc670f38d9c38d039d325d9315ef2c077bff32b7a64fe0e2e6d2926040971d583cdd6bc1a5851efaf1e4c0999244e2682d9b0f50151a0c247e2f881c58340ad221df18f36549a0a4c1016c37cfa8a4b9fad1d2b115c9795f94462b2a5288daa8eed5f68cab6e2752dc2e08f75aac3e2"]}, @generic="4d0ee77360e8e7000044a8e7b4e32e99dfe5f99c5b109943f6c396f414dfa72d3ab44afe49e59a4f9ded25d660a223c133316fe1268adde37d1158174246a92d221dcccfe2574c1738608c80d41a48303803ab10ed7d0925c834c1d93eeaeff63c9f1bc0fba8e1ea98e4ffcf07014cc26af3cb5ccb6cc522ad4eda35b06bc8a5ededb82139194c4d43827b6811449a846d532b53419d0a1733a27320a57c4fba24c606c25302b8080950f29bd2e156b27733b68a6514bf2f18253ba6f57ec4ef7928c0bbf8c6552579460355da2371179b5aba3259facc91a05dfe4f44ef792059c6e787a158b8", @generic="e0969036044575d5d150518d1e02fa5d6875fa2cb1d2a8ddbf284cbf05921622b9b2bea8641f54a55830432e305ec08e4e5845c765fa2e07f9b31637e350ee73b92907a7242e94922624606c0bb84a24d446f088ae5a183cb1f9c1ec640c9256500aa6fe071decf6df48e24478ebf271281c78e211dd5910824cbf6592c2d6aebcea", @nested={0x10a3, 0xce, 0x0, 0x1, [@generic="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", @generic="73a9a961fc77ecc5e3b562f1598cb4755475679a7398f8b0a358984fc5f6c7070d25778410e7b089f4b4f011dda9f7ba9ec7bab47c74a23c8eca7046d590034fc24620ac72a1ce28b9c2c65149914a8e13d0979feceba85a24ec7e8d940077c2256fe38c90626af0d5ed676adaae1be919f8729fe7644358acaf038d8b7e7a1b5203042e3e206efceee3402257be67dd803fb2d61d057f32611e235784eca7"]}, @generic="3787aff44c0566986b860fb351bd9a6eae6e3b1d8c1fc52691d219afd9e6a0c028ead8d7dece8b2adc1f252f26704692e3d934499f19ddebcb13", @nested={0x72, 0xa7, 0x0, 0x1, [@generic="e99a898f1d1a8e22e725eb8d1c347562dd80d6637e1d9bf72b73855d7ed04b60280f9bf9bb39bb36c442f267e88fbad15d65e95424e7d4d6ecb6f28983e621bace0d169d970ac9777a43f97987abd8130cb40e1f51d183e1eb62de345e22ec0b1fa9764ea9", @nested={0x4, 0xee}, @generic='\x00', @nested={0x4, 0x6d}]}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xadda}]}, 0x15d4}, 0x1, 0x0, 0x0, 0x6040002}, 0x1) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x4, 0x4) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/fail-nth\x00', 0x480101, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) 1.410278621s ago: executing program 3 (id=1313): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1002}, 0x7) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x16, &(0x7f0000000040), 0x1) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) sysinfo$auto(0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="007000fe1cdf251b00000008379f0002000046010400080108004d01040000000800ef00000100"/54], 0x3c}, 0x1, 0x0, 0x0, 0x20040081}, 0x85) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x24302, 0x0) mmap$auto(0x3, 0x2000a, 0x10000000000df, 0xeb2, r0, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/input/event2\x00', 0x4a404, 0x0) socket(0x2, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x20001, 0x0) ppoll$auto(&(0x7f00000000c0)={r3, 0x0, 0x8}, 0xf7, &(0x7f0000000100)={0x80000000008000, 0x1}, 0x0, 0x8) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9) socket(0x4, 0x5, 0x84) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/sctp/assocs\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, 0x0, 0xfffffe36) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/034/001\x00', 0x20882, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000080)='7', 0x1) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={"2252f65ca1b92f72a92538725b0694521629e8c3e6ba91c62e2e9d42cf4aef15", 0x4, 0x3, 0x8004, 0x6, 0xff}) 1.404846803s ago: executing program 1 (id=1314): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1002}, 0x7) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x16, &(0x7f0000000040), 0x1) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) sysinfo$auto(0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="007000fe1cdf251b00000008379f0002000046010400080108004d01040000000800ef00000100"/54], 0x3c}, 0x1, 0x0, 0x0, 0x20040081}, 0x85) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x24302, 0x0) mmap$auto(0x3, 0x2000a, 0x10000000000df, 0xeb2, r0, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/input/event2\x00', 0x4a404, 0x0) socket(0x2, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x20001, 0x0) ppoll$auto(&(0x7f00000000c0)={r3, 0x0, 0x8}, 0xf7, &(0x7f0000000100)={0x80000000008000, 0x1}, 0x0, 0x8) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9) r4 = socket(0x4, 0x5, 0x84) sendto$auto(r4, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80000700"}, 0x1c) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0xfffffe36) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/034/001\x00', 0x20882, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000080)='7', 0x1) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={"2252f65ca1b92f72a92538725b0694521629e8c3e6ba91c62e2e9d42cf4aef15", 0x4, 0x3, 0x8004, 0x6, 0xff}) 1.094636474s ago: executing program 2 (id=1315): r0 = socket(0x2, 0x2, 0x88) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x12}}, 0x54) connect$auto(0x3, 0x0, 0x55) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r1, &(0x7f0000000040)='nbd\x00', 0x4) sendmmsg$auto(r0, 0x0, 0x9a6, 0xe000) write$auto(0x3, 0x0, 0x800) 1.074065115s ago: executing program 0 (id=1316): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1002}, 0x7) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x16, &(0x7f0000000040), 0x1) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) sysinfo$auto(0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="007000fe1cdf251b00000008379f0002000046010400080108004d01040000000800ef00000100"/54], 0x3c}, 0x1, 0x0, 0x0, 0x20040081}, 0x85) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x24302, 0x0) mmap$auto(0x3, 0x2000a, 0x10000000000df, 0xeb2, r0, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/input/event2\x00', 0x4a404, 0x0) socket(0x2, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x20001, 0x0) ppoll$auto(&(0x7f00000000c0)={r3, 0x0, 0x8}, 0xf7, &(0x7f0000000100)={0x80000000008000, 0x1}, 0x0, 0x8) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9) socket(0x4, 0x5, 0x84) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/sctp/assocs\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, 0x0, 0xfffffe36) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/034/001\x00', 0x20882, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000080)='7', 0x1) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={"2252f65ca1b92f72a92538725b0694521629e8c3e6ba91c62e2e9d42cf4aef15", 0x4, 0x3, 0x8004, 0x6, 0xff}) 759.696888ms ago: executing program 2 (id=1317): futex$auto(&(0x7f0000000200)=0x2948, 0x6, 0x294a, 0x0, 0x0, 0x800b7) futex$auto(&(0x7f0000000080)=0x3, 0x3, 0x1f, 0x0, &(0x7f0000000100)=0x4, 0x440a48d3) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xffffffffffffffff, 0x40008000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$auto_F_CREATED_QUERY(0xffffffffffffffff, 0x404, 0x8) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, r1) sendmsg$auto_HWSIM_CMD_GET_RADIO(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010006bd7000feaab1250600000008000a0004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000240), r1) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0180, 0x0) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/mem\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x10, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) process_vm_writev$auto(0x1, &(0x7f0000002980)={0x0, 0x4}, 0x3, &(0x7f0000002a40)={0x0, 0x7}, 0x4, 0x0) ioctl$auto_XFS_IOC_ERROR_INJECTION(r3, 0x40085874, &(0x7f0000000140)={r3, 0x42}) mmap$auto(0x0, 0x70e, 0x2000000000000081, 0x11, 0xffffffffffffffff, 0xa) ptrace$auto_PTRACE_GETEVENTMSG(0x4201, r0, 0x80000000, 0x2) io_getevents$auto(0xdf4, 0x4, 0x7, &(0x7f0000000040)={0x0, 0x80, 0x200003, 0x7}, &(0x7f00000000c0)={0x8, 0x80000000000008}) r4 = epoll_create$auto(0x4) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video48\x00', 0x18a041, 0x0) epoll_ctl$auto(r4, 0x1, r5, 0x0) 238.178653ms ago: executing program 2 (id=1318): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x3, 0x80000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r0, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x6, 0x2, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/graphics/fb0/rotate\x00', 0xb02, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/fs/o2cb/logmask/DLMFS\x00', 0x20a42, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/011/001\x00', 0xd8241, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0x2003f0, 0x18) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS2\x00', 0x161a41, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC0D0p\x00', 0x10000, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r1, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) semctl$auto_SETVAL(0x4, 0xfffffff7, 0x10, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) 224.429335ms ago: executing program 3 (id=1319): mmap$auto(0x0, 0x400006, 0x7, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/vm/nr_overcommit_hugepages\x00', 0x100, 0x0) read$auto(r0, &(0x7f0000000240)='nl80211\x00', 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x3, 0x0) futex$auto(&(0x7f00000001c0)=0x6, 0xd6, 0xfb, &(0x7f0000000280)={0x8, 0x401}, &(0x7f00000002c0), 0x0) mount_setattr$auto(0x0, 0xfffffffffffffffe, 0x100, 0x0, 0x20) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100253d7000fddbdf2501000000100007800c00018008000180000000000c0002000600000080000000164f6caad19e139bba76db7bc99f463d444447d8012a5778abefd177566400"/85], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8880) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) getsockopt$auto_SO_INCOMING_CPU(r1, 0x4, 0x31, &(0x7f0000000000)='TIPCv2\x00', &(0x7f0000000080)=0x401) unshare$auto(0x40000080) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x2c201, 0x0) ioctl$auto_IOC_PR_RESERVE(r3, 0x401070c9, &(0x7f00000000c0)={0xffffffffffffffff, 0x5, 0x1}) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv6/conf/default/ignore_routes_with_linkdown\x00', 0x42a81, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/mode\x00', 0x0, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) write$auto(0x3, 0x0, 0x20000) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/driver/usbserial\x00', 0x40000, 0x0) read$auto_proc_iter_file_ops_compat_inode(r5, &(0x7f0000000400)=""/232, 0xe8) clock_adjtime$auto(0x1, &(0x7f0000000280)={0x4, 0x0, 0x6fe, 0x100000021, 0x7, 0x4, 0x8227, 0x0, 0x2, 0x240000, 0x8, {0x7, 0x800}, 0x101, 0xf8, 0xa, 0xd94, 0x0, 0x3, 0x4, 0x406, 0xa9, 0x3, 0xfffffffe}) r6 = openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/o2hb/live_regions\x00', 0x2000, 0x0) fsconfig$auto_HIDEPID_NOT_PTRACEABLE(r6, 0x40, &(0x7f0000000540)='})*($$\x00', &(0x7f0000000580)="9aaeafc3310f260c04652c2288ed5f121c53ec1adfc7b4269b4823cd2c811c0e16ccc22241f5dce356cfe47e547e199c935277bb8d185da7b1b432d6564a51a31d4345a413aa40c4f7a7977486f38f21a48a27241d61b15764128637dbbff9d18bfbd756f96757ba956cc59d581b58aa786f3cb1d1a66f786ff5a39cf577660cc51d6d7d870764c8fe6f29e357a453ca9d", 0x4) 154.999144ms ago: executing program 1 (id=1320): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/pci0000:00/0000:00:04.0/class\x00', 0x0, 0x0) fcntl$auto_F_ADD_SEALS(r0, 0x409, 0x2) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/44, 0x2c) 1.607057ms ago: executing program 1 (id=1321): r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec2\x00', 0x101000, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"58f99464", 0x8, 0x6, 0x1, 0x3, 0x5, "4bb69ec4b3f4c14539898e4c5682f5", "347f00", "a630df9d", "a0ed9959", ["cd9196b8fe1a8a7eb90401a9", "2f9c30017721de33c560b95a", "d3fe6c55a78d6932211c9b69", "ea334f1f1e5e27a1320d6edb"]}) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000048c0)='/dev/dsp1\x00', 0x20000, 0x0) ioctl$auto_SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000180)="6da6b940dfe114cacac8b7cca871a393aaf922f69708e0") close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\b', @ANYRES16=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="141e00dd7f0038537b7ff52045486a0bdc6901c61ba3777428b50129f254b446ab6e3cd3484bc5bcf0c592fda4190103f7628098f1a4beb3baedae7f610449c0a60af75192dab729c77501353be2d6a1f14874b6bf8502f42e46d89d75ff897b6c7e9ba71ce612dac5b0d20585e9179c0db9e9a4e4d921abdbc02e1f7933ad0634219be36cef0bc6f309551f8711769dfbc465b60f8436f24f87c89bee8aaae1eab8266fb70f08eb1904ebd16797f22648", @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x9}, 0x3, 0x0) write$auto(0xca, &(0x7f0000000040)='\x045h\xd5\x89|d\v\x00\x00\x00\x00\x81\x00\x00\x00\xf6\xf5\x00\xdf\xff\x00', 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event1\x00', 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_RXSC(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=0x0], 0x2c}, 0x1, 0x0, 0x0, 0x20004054}, 0x480b0) 0s ago: executing program 0 (id=1322): r0 = openat$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x200, 0x8af5) mmap$auto(0x0, 0x100000020009, 0x800, 0x410, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x10, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) process_vm_writev$auto(0x1, &(0x7f0000002980)={0x0, 0x4}, 0x3, &(0x7f0000002a40)={0x0, 0x7}, 0x4, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv6/neigh/ip_vti0/base_reachable_time_ms\x00', 0x202, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x0, 0x0) epoll_create$auto(0xa223) mmap$auto(0x0, 0x400008, 0xdb, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd4/integrity/read_verify\x00', 0x20a800, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) setreuid$auto(0x15, 0x5) setrlimit$auto(0x8, 0x0) mlock$auto(0x81, 0xffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x101000, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, 0x0, 0x22641, 0x0) open(0x0, 0x161342, 0x0) socket(0x2, 0x5, 0x0) socketpair$auto(0x0, 0x3, 0x0, 0x0) semctl$auto(0x204, 0xfffffffe, 0x3, 0x4) r1 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r1, 0x0, 0xc3) kernel console output (not intermixed with test programs): 0 [ 257.061263][ T9231] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 257.061287][ T9231] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 257.061311][ T9231] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 257.061338][ T9231] alloc_inode+0x64/0x240 [ 257.061373][ T9231] new_inode+0x22/0x1c0 [ 257.061410][ T9231] hugetlbfs_get_inode+0x354/0x730 [ 257.061439][ T9231] hugetlb_file_setup+0x15b/0x620 [ 257.061469][ T9231] ksys_mmap_pgoff+0x189/0x5c0 [ 257.061508][ T9231] __x64_sys_mmap+0x125/0x190 [ 257.061551][ T9231] do_syscall_64+0xcd/0xfa0 [ 257.061587][ T9231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.061616][ T9231] RIP: 0033:0x7fcb8118f6c9 [ 257.061637][ T9231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.061664][ T9231] RSP: 002b:00007fcb820ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 257.061692][ T9231] RAX: ffffffffffffffda RBX: 00007fcb813e5fa0 RCX: 00007fcb8118f6c9 [ 257.061710][ T9231] RDX: 0000000000000002 RSI: 0000000000000005 RDI: 0000000000000000 [ 257.061727][ T9231] RBP: 00007fcb81211f91 R08: 0000000000000401 R09: 0000300000000000 [ 257.061745][ T9231] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 257.061762][ T9231] R13: 00007fcb813e6038 R14: 00007fcb813e5fa0 R15: 00007ffc323b8da8 [ 257.061808][ T9231] [ 257.365130][ T5837] Bluetooth: hci0: unexpected event 0x35 length: 13 > 6 [ 257.368238][ T9233] netlink: 11 bytes leftover after parsing attributes in process `syz.0.760'. [ 258.070353][ T9245] FAULT_INJECTION: forcing a failure. [ 258.070353][ T9245] name fail_futex, interval 1, probability 0, space 0, times 0 [ 258.089717][ T9248] dyndbg: expected <4096 bytes into control [ 258.100759][ T9245] CPU: 0 UID: 0 PID: 9245 Comm: syz.1.763 Not tainted syzkaller #0 PREEMPT(full) [ 258.100797][ T9245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 258.100813][ T9245] Call Trace: [ 258.100822][ T9245] [ 258.100832][ T9245] dump_stack_lvl+0x16c/0x1f0 [ 258.100867][ T9245] should_fail_ex+0x512/0x640 [ 258.100913][ T9245] get_futex_key+0x1d0/0x1560 [ 258.100953][ T9245] ? __pfx_get_futex_key+0x10/0x10 [ 258.100987][ T9245] ? __pfx___schedule+0x10/0x10 [ 258.101014][ T9245] ? find_held_lock+0x2b/0x80 [ 258.101046][ T9245] futex_wait_setup+0x9d/0x550 [ 258.101096][ T9245] __futex_wait+0x193/0x2f0 [ 258.101137][ T9245] ? __pfx___futex_wait+0x10/0x10 [ 258.101182][ T9245] ? __pfx_futex_wake_mark+0x10/0x10 [ 258.101227][ T9245] ? futex_private_hash_put+0x176/0x300 [ 258.101265][ T9245] ? futex_private_hash_put+0x18a/0x300 [ 258.101301][ T9245] futex_wait+0xe8/0x380 [ 258.101324][ T9245] ? __pfx_futex_wait+0x10/0x10 [ 258.101373][ T9245] ? task_mm_cid_work+0x37b/0x900 [ 258.101406][ T9245] do_futex+0x229/0x350 [ 258.101454][ T9245] ? __pfx_do_futex+0x10/0x10 [ 258.101489][ T9245] ? __pfx_task_mm_cid_work+0x10/0x10 [ 258.101516][ T9245] ? __pfx___might_resched+0x10/0x10 [ 258.101547][ T9245] __x64_sys_futex+0x1e0/0x4c0 [ 258.101584][ T9245] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 258.101616][ T9245] ? __pfx___x64_sys_futex+0x10/0x10 [ 258.101652][ T9245] ? xfd_validate_state+0x61/0x180 [ 258.101687][ T9245] ? __pfx___do_sys_close_range+0x10/0x10 [ 258.101727][ T9245] do_syscall_64+0xcd/0xfa0 [ 258.101758][ T9245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.101789][ T9245] RIP: 0033:0x7fcfbd98f6c9 [ 258.101809][ T9245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.101836][ T9245] RSP: 002b:00007fcfbe8550e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 258.101862][ T9245] RAX: ffffffffffffffda RBX: 00007fcfbdbe6098 RCX: 00007fcfbd98f6c9 [ 258.101881][ T9245] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcfbdbe6098 [ 258.101899][ T9245] RBP: 00007fcfbdbe6090 R08: 0000000000000000 R09: 0000000000000000 [ 258.101915][ T9245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.101932][ T9245] R13: 00007fcfbdbe6128 R14: 00007ffc0fd93010 R15: 00007ffc0fd930f8 [ 258.101968][ T9245] [ 258.129511][ T9248] dyndbg: bad flag-op /, at start of /%*^[ [ 258.361077][ T9248] dyndbg: flags parse failed [ 258.965514][ T5837] Bluetooth: hci2: unexpected event 0x35 length: 13 > 6 [ 258.971672][ T9264] netlink: 11 bytes leftover after parsing attributes in process `syz.2.769'. [ 259.177818][ T9263] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 259.209605][ T9273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.772'. [ 259.226896][ T9263] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 259.724607][ T9263] blktrace: Concurrent blktraces are not allowed on loop2 [ 261.432912][ T5837] Bluetooth: hci2: unexpected event 0x35 length: 13 > 6 [ 261.436117][ T9325] netlink: 11 bytes leftover after parsing attributes in process `syz.2.780'. [ 261.530304][ T9328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.781'. [ 262.242623][ T9337] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 262.250341][ T9340] FAULT_INJECTION: forcing a failure. [ 262.250341][ T9340] name fail_futex, interval 1, probability 0, space 0, times 0 [ 262.268322][ T9337] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 262.287655][ T9340] CPU: 0 UID: 0 PID: 9340 Comm: syz.2.784 Not tainted syzkaller #0 PREEMPT(full) [ 262.287689][ T9340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 262.287701][ T9340] Call Trace: [ 262.287708][ T9340] [ 262.287718][ T9340] dump_stack_lvl+0x16c/0x1f0 [ 262.287750][ T9340] should_fail_ex+0x512/0x640 [ 262.287787][ T9340] get_futex_key+0x293/0x1560 [ 262.287824][ T9340] ? __pfx_get_futex_key+0x10/0x10 [ 262.287855][ T9340] ? __mutex_trylock_common+0xe9/0x250 [ 262.287900][ T9340] futex_wake+0xea/0x530 [ 262.287949][ T9340] ? __pfx_futex_wake+0x10/0x10 [ 262.287983][ T9340] ? __lock_acquire+0xb8a/0x1c90 [ 262.288032][ T9340] do_futex+0x1e3/0x350 [ 262.288066][ T9340] ? __pfx_do_futex+0x10/0x10 [ 262.288096][ T9340] ? __might_fault+0xe3/0x190 [ 262.288131][ T9340] mm_release+0x24e/0x300 [ 262.288160][ T9340] do_exit+0x68e/0x2bf0 [ 262.288200][ T9340] ? __pfx_do_exit+0x10/0x10 [ 262.288233][ T9340] ? do_raw_spin_lock+0x12c/0x2b0 [ 262.288270][ T9340] ? find_held_lock+0x2b/0x80 [ 262.288301][ T9340] do_group_exit+0xd3/0x2a0 [ 262.288338][ T9340] get_signal+0x2671/0x26d0 [ 262.288379][ T9340] ? __pfx_get_signal+0x10/0x10 [ 262.288408][ T9340] ? do_futex+0x122/0x350 [ 262.288441][ T9340] ? __pfx_do_futex+0x10/0x10 [ 262.288477][ T9340] arch_do_signal_or_restart+0x8f/0x790 [ 262.288514][ T9340] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 262.288557][ T9340] ? syscall_user_dispatch+0x78/0x140 [ 262.288602][ T9340] exit_to_user_mode_loop+0x85/0x130 [ 262.288640][ T9340] do_syscall_64+0x426/0xfa0 [ 262.288670][ T9340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.288696][ T9340] RIP: 0033:0x7fcb8118f6c9 [ 262.288715][ T9340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.288740][ T9340] RSP: 002b:00007fcb8208a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 262.288764][ T9340] RAX: fffffffffffffe00 RBX: 00007fcb813e6098 RCX: 00007fcb8118f6c9 [ 262.288782][ T9340] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcb813e6098 [ 262.288797][ T9340] RBP: 00007fcb813e6090 R08: 0000000000000000 R09: 0000000000000000 [ 262.288813][ T9340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.288828][ T9340] R13: 00007fcb813e6128 R14: 00007ffc323b8cc0 R15: 00007ffc323b8da8 [ 262.288864][ T9340] [ 262.574082][ T9337] blktrace: Concurrent blktraces are not allowed on loop2 [ 263.037569][ T9364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.789'. [ 263.051434][ T9359] FAULT_INJECTION: forcing a failure. [ 263.051434][ T9359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.109989][ T9359] CPU: 0 UID: 0 PID: 9359 Comm: syz.2.787 Not tainted syzkaller #0 PREEMPT(full) [ 263.110023][ T9359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 263.110037][ T9359] Call Trace: [ 263.110045][ T9359] [ 263.110054][ T9359] dump_stack_lvl+0x16c/0x1f0 [ 263.110084][ T9359] should_fail_ex+0x512/0x640 [ 263.110123][ T9359] _copy_from_user+0x2e/0xd0 [ 263.110162][ T9359] snd_pcm_oss_write2+0x1c2/0x410 [ 263.110196][ T9359] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 263.110226][ T9359] ? snd_pcm_kernel_ioctl+0x267/0x2e0 [ 263.110275][ T9359] snd_pcm_oss_write+0x710/0xa10 [ 263.110311][ T9359] ? security_file_permission+0x71/0x210 [ 263.110345][ T9359] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 263.110376][ T9359] vfs_write+0x2a0/0x11d0 [ 263.110410][ T9359] ? __pfx_vfs_write+0x10/0x10 [ 263.110432][ T9359] ? find_held_lock+0x2b/0x80 [ 263.110456][ T9359] ? __fget_files+0x204/0x3c0 [ 263.110483][ T9359] ? __fget_files+0x20e/0x3c0 [ 263.110514][ T9359] ksys_write+0x12a/0x250 [ 263.110539][ T9359] ? __pfx_ksys_write+0x10/0x10 [ 263.110573][ T9359] do_syscall_64+0xcd/0xfa0 [ 263.110604][ T9359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.110629][ T9359] RIP: 0033:0x7fcb8118f6c9 [ 263.110645][ T9359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.110665][ T9359] RSP: 002b:00007fcb82069038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 263.110687][ T9359] RAX: ffffffffffffffda RBX: 00007fcb813e6180 RCX: 00007fcb8118f6c9 [ 263.110701][ T9359] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 263.110714][ T9359] RBP: 00007fcb82069090 R08: 0000000000000000 R09: 0000000000000000 [ 263.110727][ T9359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.110739][ T9359] R13: 00007fcb813e6218 R14: 00007fcb813e6180 R15: 00007ffc323b8da8 [ 263.110770][ T9359] [ 263.576839][ T9368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.791'. [ 263.815614][ T9376] netlink: 504 bytes leftover after parsing attributes in process `syz.3.793'. [ 264.032933][ T9379] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 264.049388][ T9379] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 264.224495][ T9382] FAULT_INJECTION: forcing a failure. [ 264.224495][ T9382] name failslab, interval 1, probability 0, space 0, times 0 [ 264.252822][ T9382] CPU: 0 UID: 0 PID: 9382 Comm: syz.1.795 Not tainted syzkaller #0 PREEMPT(full) [ 264.252858][ T9382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 264.252872][ T9382] Call Trace: [ 264.252880][ T9382] [ 264.252890][ T9382] dump_stack_lvl+0x16c/0x1f0 [ 264.252923][ T9382] should_fail_ex+0x512/0x640 [ 264.252958][ T9382] ? __kmalloc_cache_noprof+0x5f/0x780 [ 264.253000][ T9382] should_failslab+0xc2/0x120 [ 264.253033][ T9382] __kmalloc_cache_noprof+0x72/0x780 [ 264.253070][ T9382] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 264.253101][ T9382] ? _request_firmware+0x2a4/0x1470 [ 264.253137][ T9382] ? _request_firmware+0x2a4/0x1470 [ 264.253164][ T9382] _request_firmware+0x2a4/0x1470 [ 264.253203][ T9382] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 264.253228][ T9382] ? __rtnl_unlock+0x68/0xf0 [ 264.253258][ T9382] ? netdev_run_todo+0x864/0x1320 [ 264.253286][ T9382] ? __pfx__request_firmware+0x10/0x10 [ 264.253315][ T9382] ? __pfx_netdev_run_todo+0x10/0x10 [ 264.253339][ T9382] ? __pfx___mutex_lock+0x10/0x10 [ 264.253380][ T9382] request_firmware+0x35/0x50 [ 264.253410][ T9382] reg_reload_regdb+0x85/0x460 [ 264.253445][ T9382] ? __pfx_reg_reload_regdb+0x10/0x10 [ 264.253480][ T9382] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 264.253504][ T9382] ? nl80211_pre_doit+0x1b0/0xb10 [ 264.253555][ T9382] genl_family_rcv_msg_doit+0x209/0x2f0 [ 264.253590][ T9382] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 264.253620][ T9382] ? rcu_is_watching+0x12/0xc0 [ 264.253665][ T9382] ? bpf_lsm_capable+0x9/0x10 [ 264.253696][ T9382] ? security_capable+0x7e/0x260 [ 264.253737][ T9382] genl_rcv_msg+0x55c/0x800 [ 264.253772][ T9382] ? __pfx_genl_rcv_msg+0x10/0x10 [ 264.253802][ T9382] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 264.253826][ T9382] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 264.253856][ T9382] ? __pfx_nl80211_post_doit+0x10/0x10 [ 264.253902][ T9382] netlink_rcv_skb+0x158/0x420 [ 264.253929][ T9382] ? __pfx_genl_rcv_msg+0x10/0x10 [ 264.253961][ T9382] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 264.254003][ T9382] ? netlink_deliver_tap+0x1ae/0xd30 [ 264.254034][ T9382] genl_rcv+0x28/0x40 [ 264.254060][ T9382] netlink_unicast+0x5aa/0x870 [ 264.254093][ T9382] ? __pfx_netlink_unicast+0x10/0x10 [ 264.254133][ T9382] netlink_sendmsg+0x8c8/0xdd0 [ 264.254166][ T9382] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.254198][ T9382] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 264.254240][ T9382] ____sys_sendmsg+0xa98/0xc70 [ 264.254272][ T9382] ? copy_msghdr_from_user+0x10a/0x160 [ 264.254297][ T9382] ? __pfx_____sys_sendmsg+0x10/0x10 [ 264.254345][ T9382] ___sys_sendmsg+0x134/0x1d0 [ 264.254372][ T9382] ? __pfx____sys_sendmsg+0x10/0x10 [ 264.254394][ T9382] ? __lock_acquire+0x622/0x1c90 [ 264.254472][ T9382] __sys_sendmsg+0x16d/0x220 [ 264.254498][ T9382] ? __pfx___sys_sendmsg+0x10/0x10 [ 264.254547][ T9382] do_syscall_64+0xcd/0xfa0 [ 264.254578][ T9382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.254603][ T9382] RIP: 0033:0x7fcfbd98f6c9 [ 264.254623][ T9382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.254652][ T9382] RSP: 002b:00007fcfbe876038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 264.254676][ T9382] RAX: ffffffffffffffda RBX: 00007fcfbdbe5fa0 RCX: 00007fcfbd98f6c9 [ 264.254693][ T9382] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 264.254708][ T9382] RBP: 00007fcfbe876090 R08: 0000000000000000 R09: 0000000000000000 [ 264.254724][ T9382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.254739][ T9382] R13: 00007fcfbdbe6038 R14: 00007fcfbdbe5fa0 R15: 00007ffc0fd930f8 [ 264.254775][ T9382] [ 264.257044][ T9382] faux_driver regulatory: _request_firmware_prepare: kmalloc(struct firmware) failed [ 264.304336][ T9379] blktrace: Concurrent blktraces are not allowed on loop2 [ 264.865532][ T9399] FAULT_INJECTION: forcing a failure. [ 264.865532][ T9399] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 264.919792][ T9399] CPU: 1 UID: 0 PID: 9399 Comm: syz.0.799 Not tainted syzkaller #0 PREEMPT(full) [ 264.919828][ T9399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 264.919844][ T9399] Call Trace: [ 264.919852][ T9399] [ 264.919869][ T9399] dump_stack_lvl+0x16c/0x1f0 [ 264.919904][ T9399] should_fail_ex+0x512/0x640 [ 264.919946][ T9399] should_fail_alloc_page+0xe7/0x130 [ 264.919982][ T9399] prepare_alloc_pages+0x3c2/0x610 [ 264.920024][ T9399] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 264.920059][ T9399] ? lock_acquire+0x179/0x350 [ 264.920092][ T9399] ? find_held_lock+0x2b/0x80 [ 264.920122][ T9399] ? mark_held_locks+0x49/0x80 [ 264.920154][ T9399] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 264.920183][ T9399] ? finish_task_switch.isra.0+0x221/0xc10 [ 264.920212][ T9399] ? rcu_is_watching+0x12/0xc0 [ 264.920244][ T9399] ? __pfx_perf_event_mmap+0x10/0x10 [ 264.920279][ T9399] ? vma_wants_writenotify+0x10b/0x390 [ 264.920305][ T9399] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 264.920348][ T9399] ? policy_nodemask+0xea/0x4e0 [ 264.920384][ T9399] alloc_pages_mpol+0x1fb/0x550 [ 264.920419][ T9399] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 264.920463][ T9399] alloc_pages_noprof+0x131/0x390 [ 264.920498][ T9399] __pmd_alloc+0x3b/0x8b0 [ 264.920529][ T9399] ? find_held_lock+0x2b/0x80 [ 264.920557][ T9399] __handle_mm_fault+0xada/0x2aa0 [ 264.920606][ T9399] ? __pfx___handle_mm_fault+0x10/0x10 [ 264.920674][ T9399] handle_mm_fault+0x589/0xd10 [ 264.920719][ T9399] __get_user_pages+0x54e/0x3530 [ 264.920769][ T9399] ? __pfx___get_user_pages+0x10/0x10 [ 264.920819][ T9399] populate_vma_page_range+0x267/0x3f0 [ 264.920863][ T9399] ? __pfx_populate_vma_page_range+0x10/0x10 [ 264.920898][ T9399] ? __pfx_find_vma_intersection+0x10/0x10 [ 264.920932][ T9399] ? do_mmap+0x69c/0x1210 [ 264.920968][ T9399] __mm_populate+0x1d8/0x380 [ 264.921004][ T9399] ? __pfx___mm_populate+0x10/0x10 [ 264.921042][ T9399] ? up_write+0x1b2/0x520 [ 264.921082][ T9399] vm_mmap_pgoff+0x37f/0x470 [ 264.921118][ T9399] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 264.921154][ T9399] ? __fget_files+0x20e/0x3c0 [ 264.921190][ T9399] ksys_mmap_pgoff+0x7d/0x5c0 [ 264.921221][ T9399] ? __pfx_ksys_write+0x10/0x10 [ 264.921253][ T9399] __x64_sys_mmap+0x125/0x190 [ 264.921294][ T9399] do_syscall_64+0xcd/0xfa0 [ 264.921325][ T9399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.921351][ T9399] RIP: 0033:0x7f92d1f8f6c9 [ 264.921374][ T9399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.921398][ T9399] RSP: 002b:00007f92d2e2d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 264.921424][ T9399] RAX: ffffffffffffffda RBX: 00007f92d21e5fa0 RCX: 00007f92d1f8f6c9 [ 264.921442][ T9399] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 264.921457][ T9399] RBP: 00007f92d2e2d090 R08: 0000000000000002 R09: 0000040000008000 [ 264.921473][ T9399] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000001 [ 264.921489][ T9399] R13: 00007f92d21e6038 R14: 00007f92d21e5fa0 R15: 00007fff2d39ef08 [ 264.921525][ T9399] [ 265.783020][ T9411] program syz.0.803 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 266.069543][ T9418] ptrace attach of "./syz-executor exec"[5833] was attempted by ""[9418] [ 266.235096][ T9416] netlink: 338 bytes leftover after parsing attributes in process `syz.3.804'. [ 266.285544][ T9416] netlink: 338 bytes leftover after parsing attributes in process `syz.3.804'. [ 266.693606][ T9424] netlink: 504 bytes leftover after parsing attributes in process `syz.2.806'. [ 266.732240][ T9427] ptrace attach of "./syz-executor exec"[5827] was attempted by ""[9427] [ 267.331262][ T9423] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 267.366449][ T9423] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 267.540417][ T5837] Bluetooth: hci2: unexpected event 0x35 length: 13 > 6 [ 267.562202][ T9436] netlink: 11 bytes leftover after parsing attributes in process `syz.2.811'. [ 267.807534][ T9423] blktrace: Concurrent blktraces are not allowed on loop2 [ 268.690657][ T9449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.814'. [ 268.920745][ T9455] netlink: 504 bytes leftover after parsing attributes in process `syz.0.817'. [ 269.053632][ T9458] FAULT_INJECTION: forcing a failure. [ 269.053632][ T9458] name failslab, interval 1, probability 0, space 0, times 0 [ 269.089415][ T9458] CPU: 0 UID: 0 PID: 9458 Comm: syz.1.812 Not tainted syzkaller #0 PREEMPT(full) [ 269.089453][ T9458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 269.089468][ T9458] Call Trace: [ 269.089477][ T9458] [ 269.089487][ T9458] dump_stack_lvl+0x16c/0x1f0 [ 269.089524][ T9458] should_fail_ex+0x512/0x640 [ 269.089562][ T9458] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 269.089594][ T9458] should_failslab+0xc2/0x120 [ 269.089629][ T9458] kmem_cache_alloc_noprof+0x75/0x6e0 [ 269.089657][ T9458] ? __kernfs_new_node+0xd2/0x8e0 [ 269.089696][ T9458] ? __kernfs_new_node+0xd2/0x8e0 [ 269.089727][ T9458] __kernfs_new_node+0xd2/0x8e0 [ 269.089765][ T9458] ? __pfx___kernfs_new_node+0x10/0x10 [ 269.089807][ T9458] ? find_held_lock+0x2b/0x80 [ 269.089833][ T9458] ? kernfs_root+0xee/0x2a0 [ 269.089873][ T9458] kernfs_new_node+0x13c/0x1e0 [ 269.089917][ T9458] __kernfs_create_file+0x53/0x350 [ 269.089948][ T9458] sysfs_add_file_mode_ns+0x207/0x3c0 [ 269.089988][ T9458] internal_create_group+0x578/0xf30 [ 269.090031][ T9458] ? __pfx_internal_create_group+0x10/0x10 [ 269.090071][ T9458] ? kernfs_create_link+0x1bd/0x240 [ 269.090103][ T9458] internal_create_groups+0x9d/0x150 [ 269.090152][ T9458] device_add+0x731/0x1aa0 [ 269.090198][ T9458] ? __pfx_device_add+0x10/0x10 [ 269.090235][ T9458] ? __pfx___mutex_lock+0x10/0x10 [ 269.090281][ T9458] input_register_device+0x7e8/0x1180 [ 269.090318][ T9458] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 269.090357][ T9458] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 269.090394][ T9458] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 269.090436][ T9458] ? find_held_lock+0x2b/0x80 [ 269.090475][ T9458] ? __pfx_uinput_ioctl+0x10/0x10 [ 269.090509][ T9458] __x64_sys_ioctl+0x18e/0x210 [ 269.090546][ T9458] do_syscall_64+0xcd/0xfa0 [ 269.090579][ T9458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.090606][ T9458] RIP: 0033:0x7fcfbd98f6c9 [ 269.090627][ T9458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.090652][ T9458] RSP: 002b:00007fcfbe876038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 269.090677][ T9458] RAX: ffffffffffffffda RBX: 00007fcfbdbe5fa0 RCX: 00007fcfbd98f6c9 [ 269.090695][ T9458] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000008 [ 269.090712][ T9458] RBP: 00007fcfbda11f91 R08: 0000000000000000 R09: 0000000000000000 [ 269.090729][ T9458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.090745][ T9458] R13: 00007fcfbdbe6038 R14: 00007fcfbdbe5fa0 R15: 00007ffc0fd930f8 [ 269.090784][ T9458] [ 270.197656][ T9476] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 270.219313][ T9474] FAULT_INJECTION: forcing a failure. [ 270.219313][ T9474] name fail_futex, interval 1, probability 0, space 0, times 0 [ 270.246890][ T9476] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 270.269581][ T9474] CPU: 0 UID: 0 PID: 9474 Comm: syz.0.820 Not tainted syzkaller #0 PREEMPT(full) [ 270.269618][ T9474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 270.269632][ T9474] Call Trace: [ 270.269641][ T9474] [ 270.269650][ T9474] dump_stack_lvl+0x16c/0x1f0 [ 270.269679][ T9474] should_fail_ex+0x512/0x640 [ 270.269721][ T9474] get_futex_key+0x293/0x1560 [ 270.269757][ T9474] ? __pfx_get_futex_key+0x10/0x10 [ 270.269784][ T9474] ? __mutex_trylock_common+0xe9/0x250 [ 270.269826][ T9474] futex_wake+0xea/0x530 [ 270.269864][ T9474] ? __pfx_futex_wake+0x10/0x10 [ 270.269893][ T9474] ? __lock_acquire+0xb8a/0x1c90 [ 270.269937][ T9474] do_futex+0x1e3/0x350 [ 270.269966][ T9474] ? __pfx_do_futex+0x10/0x10 [ 270.269992][ T9474] ? __might_fault+0xe3/0x190 [ 270.270025][ T9474] mm_release+0x24e/0x300 [ 270.270053][ T9474] do_exit+0x68e/0x2bf0 [ 270.270092][ T9474] ? __pfx_do_exit+0x10/0x10 [ 270.270125][ T9474] ? do_raw_spin_lock+0x12c/0x2b0 [ 270.270162][ T9474] ? find_held_lock+0x2b/0x80 [ 270.270194][ T9474] do_group_exit+0xd3/0x2a0 [ 270.270238][ T9474] get_signal+0x2671/0x26d0 [ 270.270281][ T9474] ? __pfx_get_signal+0x10/0x10 [ 270.270309][ T9474] ? do_futex+0x122/0x350 [ 270.270342][ T9474] ? __pfx_do_futex+0x10/0x10 [ 270.270379][ T9474] arch_do_signal_or_restart+0x8f/0x790 [ 270.270412][ T9474] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 270.270456][ T9474] ? syscall_user_dispatch+0x78/0x140 [ 270.270502][ T9474] exit_to_user_mode_loop+0x85/0x130 [ 270.270539][ T9474] do_syscall_64+0x426/0xfa0 [ 270.270571][ T9474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.270595][ T9474] RIP: 0033:0x7f92d1f8f6c9 [ 270.270616][ T9474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.270641][ T9474] RSP: 002b:00007f92d2e0c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 270.270666][ T9474] RAX: fffffffffffffe00 RBX: 00007f92d21e6098 RCX: 00007f92d1f8f6c9 [ 270.270682][ T9474] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f92d21e6098 [ 270.270698][ T9474] RBP: 00007f92d21e6090 R08: 0000000000000000 R09: 0000000000000000 [ 270.270714][ T9474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.270729][ T9474] R13: 00007f92d21e6128 R14: 00007fff2d39ee20 R15: 00007fff2d39ef08 [ 270.270766][ T9474] [ 270.422719][ T9475] blktrace: Concurrent blktraces are not allowed on loop2 [ 271.259154][ T9493] zswap: compressor 000 not available [ 271.794655][ T9480] kexec: Could not allocate control_code_buffer [ 273.611817][ T9528] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 273.619171][ T9528] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 274.146889][ T9528] blktrace: Concurrent blktraces are not allowed on loop2 [ 275.070763][ T9558] netlink: 504 bytes leftover after parsing attributes in process `syz.0.841'. [ 275.877020][ T9580] ptrace attach of "./syz-executor exec"[5833] was attempted by ""[9580] [ 276.606669][ T9588] vcan0: tx drop: invalid sa for name 0x00000000000000fd [ 276.714284][ T9588] vcan0: tx drop: invalid sa for name 0x00000000000000fd [ 277.083569][ T9596] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 277.152191][ T9596] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 277.672662][ T9621] netlink: 504 bytes leftover after parsing attributes in process `syz.2.852'. [ 278.031831][ T9596] blktrace: Concurrent blktraces are not allowed on loop2 [ 278.384571][ T9636] ptrace attach of "./syz-executor exec"[5833] was attempted by ""[9636] [ 280.092987][ T9647] size and base must be multiples of 4 kiB [ 280.098841][ T9647] CPU: 1 UID: 0 PID: 9647 Comm: syz.1.860 Not tainted syzkaller #0 PREEMPT(full) [ 280.098861][ T9647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 280.098871][ T9647] Call Trace: [ 280.098876][ T9647] [ 280.098882][ T9647] dump_stack_lvl+0x16c/0x1f0 [ 280.098903][ T9647] mtrr_del+0xd1/0x110 [ 280.098924][ T9647] mtrr_ioctl+0x922/0xcf0 [ 280.098944][ T9647] ? __pfx_mtrr_ioctl+0x10/0x10 [ 280.098966][ T9647] ? find_held_lock+0x2b/0x80 [ 280.098988][ T9647] ? __fget_files+0x20e/0x3c0 [ 280.099002][ T9647] ? __pfx_mtrr_ioctl+0x10/0x10 [ 280.099020][ T9647] proc_reg_unlocked_ioctl+0x229/0x320 [ 280.099039][ T9647] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 280.099059][ T9647] __x64_sys_ioctl+0x18e/0x210 [ 280.099089][ T9647] do_syscall_64+0xcd/0xfa0 [ 280.099107][ T9647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.099121][ T9647] RIP: 0033:0x7fcfbd98f6c9 [ 280.099134][ T9647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.099147][ T9647] RSP: 002b:00007fcfbe855038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 280.099161][ T9647] RAX: ffffffffffffffda RBX: 00007fcfbdbe6090 RCX: 00007fcfbd98f6c9 [ 280.099171][ T9647] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000003 [ 280.099180][ T9647] RBP: 00007fcfbda11f91 R08: 0000000000000000 R09: 0000000000000000 [ 280.099188][ T9647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.099197][ T9647] R13: 00007fcfbdbe6128 R14: 00007fcfbdbe6090 R15: 00007ffc0fd930f8 [ 280.099223][ T9647] [ 280.690019][ T9666] netlink: 146 bytes leftover after parsing attributes in process `syz.1.862'. [ 280.768119][ T5837] Bluetooth: hci2: unexpected event 0x35 length: 13 > 6 [ 280.769623][ T9669] netlink: 11 bytes leftover after parsing attributes in process `syz.2.869'. [ 281.662846][ T9685] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 281.748297][ T9694] FAULT_INJECTION: forcing a failure. [ 281.748297][ T9694] name failslab, interval 1, probability 0, space 0, times 0 [ 281.761349][ T9685] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 281.807705][ T9694] CPU: 1 UID: 0 PID: 9694 Comm: syz.2.867 Not tainted syzkaller #0 PREEMPT(full) [ 281.807741][ T9694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 281.807756][ T9694] Call Trace: [ 281.807766][ T9694] [ 281.807775][ T9694] dump_stack_lvl+0x16c/0x1f0 [ 281.807809][ T9694] should_fail_ex+0x512/0x640 [ 281.807845][ T9694] ? __kmalloc_cache_noprof+0x5f/0x780 [ 281.807888][ T9694] should_failslab+0xc2/0x120 [ 281.807920][ T9694] __kmalloc_cache_noprof+0x72/0x780 [ 281.807957][ T9694] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 281.807988][ T9694] ? _request_firmware+0x2a4/0x1470 [ 281.808025][ T9694] ? _request_firmware+0x2a4/0x1470 [ 281.808053][ T9694] _request_firmware+0x2a4/0x1470 [ 281.808089][ T9694] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 281.808113][ T9694] ? __rtnl_unlock+0x68/0xf0 [ 281.808142][ T9694] ? netdev_run_todo+0x864/0x1320 [ 281.808171][ T9694] ? __pfx__request_firmware+0x10/0x10 [ 281.808201][ T9694] ? __pfx_netdev_run_todo+0x10/0x10 [ 281.808226][ T9694] ? __pfx___mutex_lock+0x10/0x10 [ 281.808267][ T9694] request_firmware+0x35/0x50 [ 281.808298][ T9694] reg_reload_regdb+0x85/0x460 [ 281.808334][ T9694] ? __pfx_reg_reload_regdb+0x10/0x10 [ 281.808370][ T9694] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 281.808395][ T9694] ? nl80211_pre_doit+0x1b0/0xb10 [ 281.808424][ T9694] genl_family_rcv_msg_doit+0x209/0x2f0 [ 281.808458][ T9694] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 281.808487][ T9694] ? rcu_is_watching+0x12/0xc0 [ 281.808526][ T9694] ? bpf_lsm_capable+0x9/0x10 [ 281.808558][ T9694] ? security_capable+0x7e/0x260 [ 281.808607][ T9694] genl_rcv_msg+0x55c/0x800 [ 281.808643][ T9694] ? __pfx_genl_rcv_msg+0x10/0x10 [ 281.808673][ T9694] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 281.808698][ T9694] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 281.808729][ T9694] ? __pfx_nl80211_post_doit+0x10/0x10 [ 281.808771][ T9694] netlink_rcv_skb+0x158/0x420 [ 281.808796][ T9694] ? __pfx_genl_rcv_msg+0x10/0x10 [ 281.808829][ T9694] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 281.808870][ T9694] ? netlink_deliver_tap+0x1ae/0xd30 [ 281.808903][ T9694] genl_rcv+0x28/0x40 [ 281.808929][ T9694] netlink_unicast+0x5aa/0x870 [ 281.808961][ T9694] ? __pfx_netlink_unicast+0x10/0x10 [ 281.809000][ T9694] netlink_sendmsg+0x8c8/0xdd0 [ 281.809033][ T9694] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.809064][ T9694] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 281.809105][ T9694] ____sys_sendmsg+0xa98/0xc70 [ 281.809138][ T9694] ? copy_msghdr_from_user+0x10a/0x160 [ 281.809160][ T9694] ? __pfx_____sys_sendmsg+0x10/0x10 [ 281.809209][ T9694] ___sys_sendmsg+0x134/0x1d0 [ 281.809237][ T9694] ? __pfx____sys_sendmsg+0x10/0x10 [ 281.809257][ T9694] ? __lock_acquire+0x622/0x1c90 [ 281.809331][ T9694] __sys_sendmsg+0x16d/0x220 [ 281.809358][ T9694] ? __pfx___sys_sendmsg+0x10/0x10 [ 281.809405][ T9694] do_syscall_64+0xcd/0xfa0 [ 281.809437][ T9694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.809462][ T9694] RIP: 0033:0x7fcb8118f6c9 [ 281.809482][ T9694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.809506][ T9694] RSP: 002b:00007fcb8208a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.809530][ T9694] RAX: ffffffffffffffda RBX: 00007fcb813e6090 RCX: 00007fcb8118f6c9 [ 281.809547][ T9694] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 281.809563][ T9694] RBP: 00007fcb8208a090 R08: 0000000000000000 R09: 0000000000000000 [ 281.809578][ T9694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.809600][ T9694] R13: 00007fcb813e6128 R14: 00007fcb813e6090 R15: 00007ffc323b8da8 [ 281.809637][ T9694] [ 282.175427][ T9694] faux_driver regulatory: _request_firmware_prepare: kmalloc(struct firmware) failed [ 282.515718][ T9681] netlink: 504 bytes leftover after parsing attributes in process `syz.1.865'. [ 282.858381][ T9685] blktrace: Concurrent blktraces are not allowed on loop2 [ 283.162461][ T9714] vcan0: tx drop: invalid sa for name 0x00000000000000fd [ 284.281480][ T5837] Bluetooth: hci1: unexpected event 0x35 length: 13 > 6 [ 284.339597][ T9740] netlink: 11 bytes leftover after parsing attributes in process `syz.1.878'. [ 284.606377][ T9747] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 284.614720][ T9747] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 284.640162][ T9738] size and base must be multiples of 4 kiB [ 284.652793][ T9738] CPU: 1 UID: 0 PID: 9738 Comm: syz.2.877 Not tainted syzkaller #0 PREEMPT(full) [ 284.652825][ T9738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 284.652841][ T9738] Call Trace: [ 284.652849][ T9738] [ 284.652859][ T9738] dump_stack_lvl+0x16c/0x1f0 [ 284.652894][ T9738] mtrr_del+0xd1/0x110 [ 284.652915][ T9738] mtrr_ioctl+0x922/0xcf0 [ 284.652934][ T9738] ? __pfx_mtrr_ioctl+0x10/0x10 [ 284.652956][ T9738] ? find_held_lock+0x2b/0x80 [ 284.652977][ T9738] ? __fget_files+0x20e/0x3c0 [ 284.652992][ T9738] ? __pfx_mtrr_ioctl+0x10/0x10 [ 284.653009][ T9738] proc_reg_unlocked_ioctl+0x229/0x320 [ 284.653028][ T9738] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 284.653048][ T9738] __x64_sys_ioctl+0x18e/0x210 [ 284.653069][ T9738] do_syscall_64+0xcd/0xfa0 [ 284.653085][ T9738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.653100][ T9738] RIP: 0033:0x7fcb8118f6c9 [ 284.653111][ T9738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.653124][ T9738] RSP: 002b:00007fcb8208a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 284.653138][ T9738] RAX: ffffffffffffffda RBX: 00007fcb813e6090 RCX: 00007fcb8118f6c9 [ 284.653147][ T9738] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000003 [ 284.653155][ T9738] RBP: 00007fcb81211f91 R08: 0000000000000000 R09: 0000000000000000 [ 284.653163][ T9738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.653171][ T9738] R13: 00007fcb813e6128 R14: 00007fcb813e6090 R15: 00007ffc323b8da8 [ 284.653190][ T9738] [ 285.113541][ T9747] blktrace: Concurrent blktraces are not allowed on loop2 [ 287.126609][ T9788] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 287.211463][ T9788] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 287.340788][ T9789] size and base must be multiples of 4 kiB [ 287.346612][ T9789] CPU: 0 UID: 0 PID: 9789 Comm: syz.0.891 Not tainted syzkaller #0 PREEMPT(full) [ 287.346633][ T9789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 287.346642][ T9789] Call Trace: [ 287.346648][ T9789] [ 287.346654][ T9789] dump_stack_lvl+0x16c/0x1f0 [ 287.346675][ T9789] mtrr_del+0xd1/0x110 [ 287.346696][ T9789] mtrr_ioctl+0x922/0xcf0 [ 287.346715][ T9789] ? __pfx_mtrr_ioctl+0x10/0x10 [ 287.346738][ T9789] ? find_held_lock+0x2b/0x80 [ 287.346758][ T9789] ? __fget_files+0x20e/0x3c0 [ 287.346773][ T9789] ? __pfx_mtrr_ioctl+0x10/0x10 [ 287.346791][ T9789] proc_reg_unlocked_ioctl+0x229/0x320 [ 287.346810][ T9789] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 287.346830][ T9789] __x64_sys_ioctl+0x18e/0x210 [ 287.346851][ T9789] do_syscall_64+0xcd/0xfa0 [ 287.346868][ T9789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.346882][ T9789] RIP: 0033:0x7f92d1f8f6c9 [ 287.346894][ T9789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.346909][ T9789] RSP: 002b:00007f92d2e0c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 287.346928][ T9789] RAX: ffffffffffffffda RBX: 00007f92d21e6090 RCX: 00007f92d1f8f6c9 [ 287.346937][ T9789] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000003 [ 287.346946][ T9789] RBP: 00007f92d2011f91 R08: 0000000000000000 R09: 0000000000000000 [ 287.346954][ T9789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.346962][ T9789] R13: 00007f92d21e6128 R14: 00007f92d21e6090 R15: 00007fff2d39ef08 [ 287.346981][ T9789] [ 287.544922][ T9797] ptrace attach of "./syz-executor exec"[5833] was attempted by ""[9797] [ 287.816519][ T9788] blktrace: Concurrent blktraces are not allowed on loop2 [ 287.920613][ T9803] ptrace attach of "./syz-executor exec"[5833] was attempted by ""[9803] [ 289.047720][ T9824] ptrace attach of "./syz-executor exec"[5834] was attempted by ""[9824] [ 289.446548][ T9829] ptrace attach of "./syz-executor exec"[5832] was attempted by ""[9829] [ 289.457048][ T9838] ptrace attach of "./syz-executor exec"[5827] was attempted by ""[9838] [ 289.521776][ T9836] size and base must be multiples of 4 kiB [ 289.527982][ T9836] CPU: 1 UID: 0 PID: 9836 Comm: syz.2.905 Not tainted syzkaller #0 PREEMPT(full) [ 289.528016][ T9836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 289.528031][ T9836] Call Trace: [ 289.528040][ T9836] [ 289.528050][ T9836] dump_stack_lvl+0x16c/0x1f0 [ 289.528085][ T9836] mtrr_del+0xd1/0x110 [ 289.528121][ T9836] mtrr_ioctl+0x922/0xcf0 [ 289.528156][ T9836] ? __pfx_mtrr_ioctl+0x10/0x10 [ 289.528200][ T9836] ? find_held_lock+0x2b/0x80 [ 289.528236][ T9836] ? __fget_files+0x20e/0x3c0 [ 289.528264][ T9836] ? __pfx_mtrr_ioctl+0x10/0x10 [ 289.528299][ T9836] proc_reg_unlocked_ioctl+0x229/0x320 [ 289.528333][ T9836] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 289.528372][ T9836] __x64_sys_ioctl+0x18e/0x210 [ 289.528412][ T9836] do_syscall_64+0xcd/0xfa0 [ 289.528444][ T9836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.528470][ T9836] RIP: 0033:0x7fcb8118f6c9 [ 289.528496][ T9836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.528521][ T9836] RSP: 002b:00007fcb8208a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 289.528546][ T9836] RAX: ffffffffffffffda RBX: 00007fcb813e6090 RCX: 00007fcb8118f6c9 [ 289.528564][ T9836] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000003 [ 289.528581][ T9836] RBP: 00007fcb81211f91 R08: 0000000000000000 R09: 0000000000000000 [ 289.528598][ T9836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.528613][ T9836] R13: 00007fcb813e6128 R14: 00007fcb813e6090 R15: 00007ffc323b8da8 [ 289.528650][ T9836] [ 289.724403][ T9835] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 289.732203][ T9835] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 289.814712][ T9835] blktrace: Concurrent blktraces are not allowed on loop2 [ 290.570048][ T5837] Bluetooth: hci2: unexpected event 0x35 length: 13 > 6 [ 290.586987][ T9852] netlink: 11 bytes leftover after parsing attributes in process `syz.2.911'. [ 291.341824][ T9872] ptrace attach of "./syz-executor exec"[5833] was attempted by ""[9872] [ 291.484180][ T9875] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 291.509049][ T9875] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 291.550443][ T5837] Bluetooth: hci2: unexpected event 0x35 length: 13 > 6 [ 291.553414][ T9882] netlink: 11 bytes leftover after parsing attributes in process `syz.2.920'. [ 291.661447][ T9875] blktrace: Concurrent blktraces are not allowed on loop2 [ 291.881598][ T9885] netlink: 504 bytes leftover after parsing attributes in process `syz.2.921'. [ 292.722302][ T5837] Bluetooth: hci1: unexpected event 0x35 length: 13 > 6 [ 292.726317][ T9909] netlink: 11 bytes leftover after parsing attributes in process `syz.1.929'. [ 292.801860][ T9901] netlink: 504 bytes leftover after parsing attributes in process `syz.0.925'. [ 293.030865][ T9899] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 293.040108][ T9899] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 293.046307][ T9899] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 293.072426][ T9899] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 293.253795][ T9925] FAULT_INJECTION: forcing a failure. [ 293.253795][ T9925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.268189][ T9925] CPU: 0 UID: 0 PID: 9925 Comm: syz.3.933 Not tainted syzkaller #0 PREEMPT(full) [ 293.268226][ T9925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 293.268241][ T9925] Call Trace: [ 293.268249][ T9925] [ 293.268259][ T9925] dump_stack_lvl+0x16c/0x1f0 [ 293.268293][ T9925] should_fail_ex+0x512/0x640 [ 293.268335][ T9925] _copy_to_user+0x32/0xd0 [ 293.268376][ T9925] simple_read_from_buffer+0xcb/0x170 [ 293.268417][ T9925] proc_fail_nth_read+0x197/0x240 [ 293.268446][ T9925] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 293.268482][ T9925] ? rw_verify_area+0xcf/0x6c0 [ 293.268506][ T9925] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 293.268534][ T9925] vfs_read+0x1e4/0xcf0 [ 293.268566][ T9925] ? __pfx___mutex_lock+0x10/0x10 [ 293.268596][ T9925] ? __pfx_vfs_read+0x10/0x10 [ 293.268632][ T9925] ? __fget_files+0x20e/0x3c0 [ 293.268669][ T9925] ksys_read+0x12a/0x250 [ 293.268694][ T9925] ? __pfx_ksys_read+0x10/0x10 [ 293.268721][ T9925] ? fput+0x9b/0xd0 [ 293.268759][ T9925] do_syscall_64+0xcd/0xfa0 [ 293.268790][ T9925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.268815][ T9925] RIP: 0033:0x7f4b4258e0dc [ 293.268836][ T9925] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 293.268860][ T9925] RSP: 002b:00007f4b4335d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 293.268884][ T9925] RAX: ffffffffffffffda RBX: 00007f4b427e5fa0 RCX: 00007f4b4258e0dc [ 293.268902][ T9925] RDX: 000000000000000f RSI: 00007f4b4335d0a0 RDI: 000000000000000a [ 293.268917][ T9925] RBP: 00007f4b4335d090 R08: 0000000000000000 R09: 0000000000000000 [ 293.268933][ T9925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.268948][ T9925] R13: 00007f4b427e6038 R14: 00007f4b427e5fa0 R15: 00007ffe4033c3d8 [ 293.268985][ T9925] [ 293.634729][ T9912] netlink: 504 bytes leftover after parsing attributes in process `syz.1.931'. [ 293.737571][ T9915] netlink: 504 bytes leftover after parsing attributes in process `syz.2.930'. [ 294.382827][ T9938] ptrace attach of "./syz-executor exec"[5833] was attempted by ""[9938] [ 294.460495][ T9943] ptrace attach of "./syz-executor exec"[5832] was attempted by ""[9943] [ 294.906519][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 295.060485][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 295.066641][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 295.093472][ T5841] Bluetooth: hci1: unexpected event 0x35 length: 13 > 6 [ 295.099710][ T9953] netlink: 11 bytes leftover after parsing attributes in process `syz.1.939'. [ 295.149653][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 295.571407][ T9972] netlink: 11 bytes leftover after parsing attributes in process `syz.0.943'. [ 295.580471][ T5841] Bluetooth: hci0: unexpected event 0x35 length: 13 > 6 [ 296.330530][ T9983] netlink: 504 bytes leftover after parsing attributes in process `syz.3.945'. [ 297.016226][T10003] ptrace attach of "./syz-executor exec"[5834] was attempted by "./syz-executor exec"[10003] [ 297.452803][ T5841] Bluetooth: hci2: unexpected event 0x35 length: 13 > 6 [ 297.456080][T10017] netlink: 11 bytes leftover after parsing attributes in process `syz.2.952'. [ 297.818113][ T5841] Bluetooth: hci3: unexpected event 0x35 length: 13 > 6 [ 297.878113][T10021] netlink: 11 bytes leftover after parsing attributes in process `syz.3.955'. [ 298.413687][T10026] netlink: 504 bytes leftover after parsing attributes in process `syz.2.956'. [ 298.783174][T10042] ptrace attach of "./syz-executor exec"[5833] was attempted by "./syz-executor exec"[10042] [ 298.844463][T10037] size and base must be multiples of 4 kiB [ 298.853435][T10037] CPU: 1 UID: 0 PID: 10037 Comm: syz.3.957 Not tainted syzkaller #0 PREEMPT(full) [ 298.853470][T10037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 298.853487][T10037] Call Trace: [ 298.853495][T10037] [ 298.853504][T10037] dump_stack_lvl+0x16c/0x1f0 [ 298.853539][T10037] mtrr_del+0xd1/0x110 [ 298.853570][T10037] mtrr_ioctl+0x922/0xcf0 [ 298.853590][T10037] ? __pfx_mtrr_ioctl+0x10/0x10 [ 298.853612][T10037] ? find_held_lock+0x2b/0x80 [ 298.853632][T10037] ? __fget_files+0x20e/0x3c0 [ 298.853647][T10037] ? __pfx_mtrr_ioctl+0x10/0x10 [ 298.853666][T10037] proc_reg_unlocked_ioctl+0x229/0x320 [ 298.853685][T10037] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 298.853705][T10037] __x64_sys_ioctl+0x18e/0x210 [ 298.853726][T10037] do_syscall_64+0xcd/0xfa0 [ 298.853742][T10037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.853756][T10037] RIP: 0033:0x7f4b4258f6c9 [ 298.853769][T10037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.853790][T10037] RSP: 002b:00007f4b407d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 298.853805][T10037] RAX: ffffffffffffffda RBX: 00007f4b427e6180 RCX: 00007f4b4258f6c9 [ 298.853814][T10037] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000003 [ 298.853823][T10037] RBP: 00007f4b42611f91 R08: 0000000000000000 R09: 0000000000000000 [ 298.853832][T10037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.853841][T10037] R13: 00007f4b427e6218 R14: 00007f4b427e6180 R15: 00007ffe4033c3d8 [ 298.853860][T10037] [ 299.045358][T10034] size and base must be multiples of 4 kiB [ 299.051414][T10034] CPU: 1 UID: 0 PID: 10034 Comm: syz.0.958 Not tainted syzkaller #0 PREEMPT(full) [ 299.051443][T10034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 299.051452][T10034] Call Trace: [ 299.051457][T10034] [ 299.051464][T10034] dump_stack_lvl+0x16c/0x1f0 [ 299.051485][T10034] mtrr_del+0xd1/0x110 [ 299.051506][T10034] mtrr_ioctl+0x922/0xcf0 [ 299.051525][T10034] ? __pfx_mtrr_ioctl+0x10/0x10 [ 299.051549][T10034] ? find_held_lock+0x2b/0x80 [ 299.051569][T10034] ? __fget_files+0x20e/0x3c0 [ 299.051583][T10034] ? __pfx_mtrr_ioctl+0x10/0x10 [ 299.051601][T10034] proc_reg_unlocked_ioctl+0x229/0x320 [ 299.051632][T10034] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 299.051652][T10034] __x64_sys_ioctl+0x18e/0x210 [ 299.051675][T10034] do_syscall_64+0xcd/0xfa0 [ 299.051691][T10034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.051705][T10034] RIP: 0033:0x7f92d1f8f6c9 [ 299.051716][T10034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.051729][T10034] RSP: 002b:00007f92d2e0c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 299.051744][T10034] RAX: ffffffffffffffda RBX: 00007f92d21e6090 RCX: 00007f92d1f8f6c9 [ 299.051753][T10034] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000003 [ 299.051762][T10034] RBP: 00007f92d2011f91 R08: 0000000000000000 R09: 0000000000000000 [ 299.051771][T10034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.051779][T10034] R13: 00007f92d21e6128 R14: 00007f92d21e6090 R15: 00007fff2d39ef08 [ 299.051803][T10034] [ 300.814297][T10055] size and base must be multiples of 4 kiB [ 300.953054][T10055] CPU: 1 UID: 0 PID: 10055 Comm: syz.2.964 Not tainted syzkaller #0 PREEMPT(full) [ 300.953088][T10055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 300.953102][T10055] Call Trace: [ 300.953111][T10055] [ 300.953121][T10055] dump_stack_lvl+0x16c/0x1f0 [ 300.953156][T10055] mtrr_del+0xd1/0x110 [ 300.953177][T10055] mtrr_ioctl+0x922/0xcf0 [ 300.953196][T10055] ? __pfx_mtrr_ioctl+0x10/0x10 [ 300.953219][T10055] ? find_held_lock+0x2b/0x80 [ 300.953239][T10055] ? __fget_files+0x20e/0x3c0 [ 300.953253][T10055] ? __pfx_mtrr_ioctl+0x10/0x10 [ 300.953297][T10055] proc_reg_unlocked_ioctl+0x229/0x320 [ 300.953317][T10055] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 300.953338][T10055] __x64_sys_ioctl+0x18e/0x210 [ 300.953361][T10055] do_syscall_64+0xcd/0xfa0 [ 300.953377][T10055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.953392][T10055] RIP: 0033:0x7fcb8118f6c9 [ 300.953404][T10055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.953417][T10055] RSP: 002b:00007fcb8208a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 300.953432][T10055] RAX: ffffffffffffffda RBX: 00007fcb813e6090 RCX: 00007fcb8118f6c9 [ 300.953441][T10055] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000003 [ 300.953449][T10055] RBP: 00007fcb81211f91 R08: 0000000000000000 R09: 0000000000000000 [ 300.953457][T10055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.953465][T10055] R13: 00007fcb813e6128 R14: 00007fcb813e6090 R15: 00007ffc323b8da8 [ 300.953484][T10055] [ 301.123081][T10065] bond0: option all_slaves_active: invalid value () [ 302.362610][T10091] size and base must be multiples of 4 kiB [ 302.368702][T10091] CPU: 1 UID: 0 PID: 10091 Comm: syz.1.971 Not tainted syzkaller #0 PREEMPT(full) [ 302.368728][T10091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 302.368737][T10091] Call Trace: [ 302.368742][T10091] [ 302.368748][T10091] dump_stack_lvl+0x16c/0x1f0 [ 302.368768][T10091] mtrr_del+0xd1/0x110 [ 302.368789][T10091] mtrr_ioctl+0x922/0xcf0 [ 302.368808][T10091] ? __pfx_mtrr_ioctl+0x10/0x10 [ 302.368831][T10091] ? find_held_lock+0x2b/0x80 [ 302.368850][T10091] ? __fget_files+0x20e/0x3c0 [ 302.368865][T10091] ? __pfx_mtrr_ioctl+0x10/0x10 [ 302.368883][T10091] proc_reg_unlocked_ioctl+0x229/0x320 [ 302.368901][T10091] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 302.368921][T10091] __x64_sys_ioctl+0x18e/0x210 [ 302.368942][T10091] do_syscall_64+0xcd/0xfa0 [ 302.368974][T10091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.368989][T10091] RIP: 0033:0x7fcfbd98f6c9 [ 302.369000][T10091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.369015][T10091] RSP: 002b:00007fcfbe855038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 302.369029][T10091] RAX: ffffffffffffffda RBX: 00007fcfbdbe6090 RCX: 00007fcfbd98f6c9 [ 302.369039][T10091] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000003 [ 302.369047][T10091] RBP: 00007fcfbda11f91 R08: 0000000000000000 R09: 0000000000000000 [ 302.369055][T10091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.369063][T10091] R13: 00007fcfbdbe6128 R14: 00007fcfbdbe6090 R15: 00007ffc0fd930f8 [ 302.369082][T10091] [ 303.681059][T10112] ptrace attach of "./syz-executor exec"[5832] was attempted by ""[10112] [ 304.276621][T10140] MTRR 1 not used [ 306.222204][ T5841] Bluetooth: hci0: unexpected event 0x35 length: 13 > 6 [ 306.232381][T10182] netlink: 11 bytes leftover after parsing attributes in process `syz.0.992'. [ 307.944911][ T5841] Bluetooth: hci2: unexpected event 0x35 length: 13 > 6 [ 307.955989][T10214] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1002'. [ 308.154205][T10226] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 308.184569][T10226] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 308.294321][T10226] blktrace: Concurrent blktraces are not allowed on loop2 [ 309.423499][T10259] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 309.504245][T10259] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 309.924707][T10270] vcan0: tx drop: invalid sa for name 0x00000000000000fd [ 309.981146][T10270] vcan0: tx drop: invalid sa for name 0x00000000000000fd [ 310.556114][T10253] blktrace: Concurrent blktraces are not allowed on loop2 [ 311.059929][ T5841] Bluetooth: hci0: unexpected event 0x35 length: 13 > 6 [ 311.064361][T10302] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1020'. [ 311.607798][T10306] size and base must be multiples of 4 kiB [ 311.623688][T10306] CPU: 0 UID: 0 PID: 10306 Comm: syz.3.1022 Not tainted syzkaller #0 PREEMPT(full) [ 311.623737][T10306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 311.623753][T10306] Call Trace: [ 311.623761][T10306] [ 311.623772][T10306] dump_stack_lvl+0x16c/0x1f0 [ 311.623814][T10306] mtrr_del+0xd1/0x110 [ 311.623854][T10306] mtrr_ioctl+0x922/0xcf0 [ 311.623907][T10306] ? __pfx_mtrr_ioctl+0x10/0x10 [ 311.623950][T10306] ? find_held_lock+0x2b/0x80 [ 311.623986][T10306] ? __fget_files+0x20e/0x3c0 [ 311.624015][T10306] ? __pfx_mtrr_ioctl+0x10/0x10 [ 311.624043][T10306] proc_reg_unlocked_ioctl+0x229/0x320 [ 311.624064][T10306] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 311.624084][T10306] __x64_sys_ioctl+0x18e/0x210 [ 311.624106][T10306] do_syscall_64+0xcd/0xfa0 [ 311.624123][T10306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.624139][T10306] RIP: 0033:0x7f4b4258f6c9 [ 311.624164][T10306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.624180][T10306] RSP: 002b:00007f4b407f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 311.624196][T10306] RAX: ffffffffffffffda RBX: 00007f4b427e6090 RCX: 00007f4b4258f6c9 [ 311.624207][T10306] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000003 [ 311.624217][T10306] RBP: 00007f4b42611f91 R08: 0000000000000000 R09: 0000000000000000 [ 311.624227][T10306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.624237][T10306] R13: 00007f4b427e6128 R14: 00007f4b427e6090 R15: 00007ffe4033c3d8 [ 311.624258][T10306] [ 312.536717][T10329] vcan0: tx drop: invalid sa for name 0x00000000000000fd [ 312.582478][T10329] vcan0: tx drop: invalid sa for name 0x00000000000000fd [ 312.620769][T10326] size and base must be multiples of 4 kiB [ 312.626777][T10326] CPU: 0 UID: 0 PID: 10326 Comm: syz.3.1025 Not tainted syzkaller #0 PREEMPT(full) [ 312.626797][T10326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 312.626805][T10326] Call Trace: [ 312.626811][T10326] [ 312.626816][T10326] dump_stack_lvl+0x16c/0x1f0 [ 312.626839][T10326] mtrr_del+0xd1/0x110 [ 312.626861][T10326] mtrr_ioctl+0x922/0xcf0 [ 312.626880][T10326] ? __pfx_mtrr_ioctl+0x10/0x10 [ 312.626902][T10326] ? find_held_lock+0x2b/0x80 [ 312.626924][T10326] ? __fget_files+0x20e/0x3c0 [ 312.626940][T10326] ? __pfx_mtrr_ioctl+0x10/0x10 [ 312.626958][T10326] proc_reg_unlocked_ioctl+0x229/0x320 [ 312.626978][T10326] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 312.626998][T10326] __x64_sys_ioctl+0x18e/0x210 [ 312.627019][T10326] do_syscall_64+0xcd/0xfa0 [ 312.627037][T10326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.627051][T10326] RIP: 0033:0x7f4b4258f6c9 [ 312.627062][T10326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.627076][T10326] RSP: 002b:00007f4b407f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 312.627091][T10326] RAX: ffffffffffffffda RBX: 00007f4b427e6090 RCX: 00007f4b4258f6c9 [ 312.627100][T10326] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000003 [ 312.627108][T10326] RBP: 00007f4b42611f91 R08: 0000000000000000 R09: 0000000000000000 [ 312.627116][T10326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.627124][T10326] R13: 00007f4b427e6128 R14: 00007f4b427e6090 R15: 00007ffe4033c3d8 [ 312.627143][T10326] [ 314.138354][ T5841] Bluetooth: hci2: unexpected event 0x35 length: 13 > 6 [ 314.147797][T10357] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1031'. [ 314.411092][T10365] size and base must be multiples of 4 kiB [ 314.416938][T10365] CPU: 0 UID: 0 PID: 10365 Comm: syz.0.1034 Not tainted syzkaller #0 PREEMPT(full) [ 314.416959][T10365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 314.416968][T10365] Call Trace: [ 314.416974][T10365] [ 314.416980][T10365] dump_stack_lvl+0x16c/0x1f0 [ 314.417001][T10365] mtrr_del+0xd1/0x110 [ 314.417023][T10365] mtrr_ioctl+0x922/0xcf0 [ 314.417042][T10365] ? __pfx_mtrr_ioctl+0x10/0x10 [ 314.417065][T10365] ? find_held_lock+0x2b/0x80 [ 314.417085][T10365] ? __fget_files+0x20e/0x3c0 [ 314.417099][T10365] ? __pfx_mtrr_ioctl+0x10/0x10 [ 314.417117][T10365] proc_reg_unlocked_ioctl+0x229/0x320 [ 314.417136][T10365] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 314.417156][T10365] __x64_sys_ioctl+0x18e/0x210 [ 314.417177][T10365] do_syscall_64+0xcd/0xfa0 [ 314.417193][T10365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.417208][T10365] RIP: 0033:0x7f92d1f8f6c9 [ 314.417220][T10365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.417234][T10365] RSP: 002b:00007f92d2e0c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 314.417248][T10365] RAX: ffffffffffffffda RBX: 00007f92d21e6090 RCX: 00007f92d1f8f6c9 [ 314.417258][T10365] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000003 [ 314.417267][T10365] RBP: 00007f92d2011f91 R08: 0000000000000000 R09: 0000000000000000 [ 314.417276][T10365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.417285][T10365] R13: 00007f92d21e6128 R14: 00007f92d21e6090 R15: 00007fff2d39ef08 [ 314.417304][T10365] [ 315.279127][T10364] size and base must be multiples of 4 kiB [ 315.285978][T10364] CPU: 0 UID: 0 PID: 10364 Comm: syz.3.1032 Not tainted syzkaller #0 PREEMPT(full) [ 315.286012][T10364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 315.286029][T10364] Call Trace: [ 315.286037][T10364] [ 315.286047][T10364] dump_stack_lvl+0x16c/0x1f0 [ 315.286083][T10364] mtrr_del+0xd1/0x110 [ 315.286119][T10364] mtrr_ioctl+0x922/0xcf0 [ 315.286156][T10364] ? __pfx_mtrr_ioctl+0x10/0x10 [ 315.286200][T10364] ? find_held_lock+0x2b/0x80 [ 315.286238][T10364] ? __fget_files+0x20e/0x3c0 [ 315.286266][T10364] ? __pfx_mtrr_ioctl+0x10/0x10 [ 315.286302][T10364] proc_reg_unlocked_ioctl+0x229/0x320 [ 315.286338][T10364] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 315.286377][T10364] __x64_sys_ioctl+0x18e/0x210 [ 315.286414][T10364] do_syscall_64+0xcd/0xfa0 [ 315.286445][T10364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.286472][T10364] RIP: 0033:0x7f4b4258f6c9 [ 315.286493][T10364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.286519][T10364] RSP: 002b:00007f4b407f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 315.286544][T10364] RAX: ffffffffffffffda RBX: 00007f4b427e6090 RCX: 00007f4b4258f6c9 [ 315.286563][T10364] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000003 [ 315.286579][T10364] RBP: 00007f4b42611f91 R08: 0000000000000000 R09: 0000000000000000 [ 315.286595][T10364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.286610][T10364] R13: 00007f4b427e6128 R14: 00007f4b427e6090 R15: 00007ffe4033c3d8 [ 315.286646][T10364] [ 316.631854][T10397] size and base must be multiples of 4 kiB [ 316.637746][T10397] CPU: 1 UID: 0 PID: 10397 Comm: syz.2.1042 Not tainted syzkaller #0 PREEMPT(full) [ 316.637767][T10397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 316.637776][T10397] Call Trace: [ 316.637783][T10397] [ 316.637788][T10397] dump_stack_lvl+0x16c/0x1f0 [ 316.637810][T10397] mtrr_del+0xd1/0x110 [ 316.637830][T10397] mtrr_ioctl+0x922/0xcf0 [ 316.637850][T10397] ? __pfx_mtrr_ioctl+0x10/0x10 [ 316.637878][T10397] ? __fget_files+0x20e/0x3c0 [ 316.637893][T10397] ? __pfx_mtrr_ioctl+0x10/0x10 [ 316.637912][T10397] proc_reg_unlocked_ioctl+0x229/0x320 [ 316.637930][T10397] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 316.637950][T10397] __x64_sys_ioctl+0x18e/0x210 [ 316.637971][T10397] do_syscall_64+0xcd/0xfa0 [ 316.637987][T10397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.638001][T10397] RIP: 0033:0x7fcb8118f6c9 [ 316.638013][T10397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.638027][T10397] RSP: 002b:00007fcb8208a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 316.638040][T10397] RAX: ffffffffffffffda RBX: 00007fcb813e6090 RCX: 00007fcb8118f6c9 [ 316.638049][T10397] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000003 [ 316.638058][T10397] RBP: 00007fcb81211f91 R08: 0000000000000000 R09: 0000000000000000 [ 316.638066][T10397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.638074][T10397] R13: 00007fcb813e6128 R14: 00007fcb813e6090 R15: 00007ffc323b8da8 [ 316.638094][T10397] [ 317.032839][T10399] netlink: 504 bytes leftover after parsing attributes in process `syz.3.1043'. [ 317.224715][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.231610][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.371776][ T5841] Bluetooth: hci0: unexpected event 0x35 length: 13 > 6 [ 317.375351][T10406] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1044'. [ 317.649869][T10417] size and base must be multiples of 4 kiB [ 317.655811][T10417] CPU: 0 UID: 0 PID: 10417 Comm: syz.1.1047 Not tainted syzkaller #0 PREEMPT(full) [ 317.655843][T10417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 317.655857][T10417] Call Trace: [ 317.655865][T10417] [ 317.655875][T10417] dump_stack_lvl+0x16c/0x1f0 [ 317.655909][T10417] mtrr_del+0xd1/0x110 [ 317.655941][T10417] mtrr_ioctl+0x922/0xcf0 [ 317.655961][T10417] ? __pfx_mtrr_ioctl+0x10/0x10 [ 317.655984][T10417] ? find_held_lock+0x2b/0x80 [ 317.656005][T10417] ? __fget_files+0x20e/0x3c0 [ 317.656019][T10417] ? __pfx_mtrr_ioctl+0x10/0x10 [ 317.656037][T10417] proc_reg_unlocked_ioctl+0x229/0x320 [ 317.656056][T10417] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 317.656076][T10417] __x64_sys_ioctl+0x18e/0x210 [ 317.656097][T10417] do_syscall_64+0xcd/0xfa0 [ 317.656114][T10417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.656128][T10417] RIP: 0033:0x7fcfbd98f6c9 [ 317.656140][T10417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.656154][T10417] RSP: 002b:00007fcfbe834038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 317.656168][T10417] RAX: ffffffffffffffda RBX: 00007fcfbdbe6180 RCX: 00007fcfbd98f6c9 [ 317.656177][T10417] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000003 [ 317.656185][T10417] RBP: 00007fcfbda11f91 R08: 0000000000000000 R09: 0000000000000000 [ 317.656193][T10417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.656201][T10417] R13: 00007fcfbdbe6218 R14: 00007fcfbdbe6180 R15: 00007ffc0fd930f8 [ 317.656220][T10417] [ 319.735910][T10446] vcan0: tx drop: invalid sa for name 0x00000000000000fd [ 319.860431][T10441] vcan0: tx drop: invalid sa for name 0x00000000000000fd [ 320.525872][T10450] netlink: 504 bytes leftover after parsing attributes in process `syz.3.1053'. [ 320.564576][T10455] zswap: compressor 000 not available [ 322.483430][T10482] vcan0: tx drop: invalid sa for name 0x00000000000000fd [ 322.807109][T10482] vcan0: tx drop: invalid sa for name 0x00000000000000fd [ 323.014306][T10504] ptrace attach of "./syz-executor exec"[5832] was attempted by ""[10504] [ 324.848370][T10526] size and base must be multiples of 4 kiB [ 324.854471][T10526] CPU: 1 UID: 0 PID: 10526 Comm: syz.0.1071 Not tainted syzkaller #0 PREEMPT(full) [ 324.854504][T10526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 324.854519][T10526] Call Trace: [ 324.854527][T10526] [ 324.854537][T10526] dump_stack_lvl+0x16c/0x1f0 [ 324.854571][T10526] mtrr_del+0xd1/0x110 [ 324.854599][T10526] mtrr_ioctl+0x922/0xcf0 [ 324.854618][T10526] ? __pfx_mtrr_ioctl+0x10/0x10 [ 324.854641][T10526] ? find_held_lock+0x2b/0x80 [ 324.854660][T10526] ? __fget_files+0x20e/0x3c0 [ 324.854675][T10526] ? __pfx_mtrr_ioctl+0x10/0x10 [ 324.854693][T10526] proc_reg_unlocked_ioctl+0x229/0x320 [ 324.854721][T10526] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 324.854742][T10526] __x64_sys_ioctl+0x18e/0x210 [ 324.854764][T10526] do_syscall_64+0xcd/0xfa0 [ 324.854782][T10526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.854796][T10526] RIP: 0033:0x7f92d1f8f6c9 [ 324.854808][T10526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.854821][T10526] RSP: 002b:00007f92d2e0c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 324.854834][T10526] RAX: ffffffffffffffda RBX: 00007f92d21e6090 RCX: 00007f92d1f8f6c9 [ 324.854844][T10526] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000003 [ 324.854852][T10526] RBP: 00007f92d2011f91 R08: 0000000000000000 R09: 0000000000000000 [ 324.854860][T10526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.854868][T10526] R13: 00007f92d21e6128 R14: 00007f92d21e6090 R15: 00007fff2d39ef08 [ 324.854887][T10526] [ 325.562185][T10538] size and base must be multiples of 4 kiB [ 325.568268][T10538] CPU: 0 UID: 0 PID: 10538 Comm: syz.1.1074 Not tainted syzkaller #0 PREEMPT(full) [ 325.568300][T10538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 325.568309][T10538] Call Trace: [ 325.568316][T10538] [ 325.568323][T10538] dump_stack_lvl+0x16c/0x1f0 [ 325.568344][T10538] mtrr_del+0xd1/0x110 [ 325.568367][T10538] mtrr_ioctl+0x922/0xcf0 [ 325.568387][T10538] ? __pfx_mtrr_ioctl+0x10/0x10 [ 325.568408][T10538] ? find_held_lock+0x2b/0x80 [ 325.568428][T10538] ? __fget_files+0x20e/0x3c0 [ 325.568442][T10538] ? __pfx_mtrr_ioctl+0x10/0x10 [ 325.568461][T10538] proc_reg_unlocked_ioctl+0x229/0x320 [ 325.568479][T10538] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 325.568499][T10538] __x64_sys_ioctl+0x18e/0x210 [ 325.568520][T10538] do_syscall_64+0xcd/0xfa0 [ 325.568537][T10538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.568551][T10538] RIP: 0033:0x7fcfbd98f6c9 [ 325.568563][T10538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.568577][T10538] RSP: 002b:00007fcfbe855038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 325.568590][T10538] RAX: ffffffffffffffda RBX: 00007fcfbdbe6090 RCX: 00007fcfbd98f6c9 [ 325.568606][T10538] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000003 [ 325.568616][T10538] RBP: 00007fcfbda11f91 R08: 0000000000000000 R09: 0000000000000000 [ 325.568624][T10538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.568633][T10538] R13: 00007fcfbdbe6128 R14: 00007fcfbdbe6090 R15: 00007ffc0fd930f8 [ 325.568652][T10538] [ 325.830908][T10541] ptrace attach of "./syz-executor exec"[5827] was attempted by ""[10541] [ 326.628724][T10561] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1078'. [ 326.728626][T10559] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 326.736210][T10559] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 326.883859][T10553] netlink: 504 bytes leftover after parsing attributes in process `syz.0.1077'. [ 327.361065][T10559] blktrace: Concurrent blktraces are not allowed on loop2 [ 328.721667][ T5841] Bluetooth: hci1: unexpected event 0x35 length: 13 > 6 [ 328.729567][T10612] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1089'. [ 329.361010][T10622] netlink: 504 bytes leftover after parsing attributes in process `syz.0.1090'. [ 330.076099][T10651] ptrace attach of "./syz-executor exec"[5832] was attempted by ""[10651] [ 330.176058][T10652] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1099'. [ 330.185335][ T5841] Bluetooth: hci3: unexpected event 0x35 length: 13 > 6 [ 331.962507][ T5841] Bluetooth: hci1: unexpected event 0x35 length: 13 > 6 [ 331.968659][T10685] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1109'. [ 332.639868][T10694] size and base must be multiples of 4 kiB [ 332.648122][T10694] CPU: 0 UID: 0 PID: 10694 Comm: syz.1.1111 Not tainted syzkaller #0 PREEMPT(full) [ 332.648157][T10694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 332.648174][T10694] Call Trace: [ 332.648182][T10694] [ 332.648192][T10694] dump_stack_lvl+0x16c/0x1f0 [ 332.648228][T10694] mtrr_del+0xd1/0x110 [ 332.648264][T10694] mtrr_ioctl+0x922/0xcf0 [ 332.648296][T10694] ? __pfx_mtrr_ioctl+0x10/0x10 [ 332.648336][T10694] ? find_held_lock+0x2b/0x80 [ 332.648373][T10694] ? __fget_files+0x20e/0x3c0 [ 332.648399][T10694] ? __pfx_mtrr_ioctl+0x10/0x10 [ 332.648433][T10694] proc_reg_unlocked_ioctl+0x229/0x320 [ 332.648469][T10694] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 332.648508][T10694] __x64_sys_ioctl+0x18e/0x210 [ 332.648547][T10694] do_syscall_64+0xcd/0xfa0 [ 332.648579][T10694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.648607][T10694] RIP: 0033:0x7fcfbd98f6c9 [ 332.648629][T10694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.648655][T10694] RSP: 002b:00007fcfbe834038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 332.648681][T10694] RAX: ffffffffffffffda RBX: 00007fcfbdbe6180 RCX: 00007fcfbd98f6c9 [ 332.648700][T10694] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000003 [ 332.648717][T10694] RBP: 00007fcfbda11f91 R08: 0000000000000000 R09: 0000000000000000 [ 332.648735][T10694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.648751][T10694] R13: 00007fcfbdbe6218 R14: 00007fcfbdbe6180 R15: 00007ffc0fd930f8 [ 332.648797][T10694] [ 334.067383][T10705] zswap: compressor 000 not available [ 334.424622][T10716] size and base must be multiples of 4 kiB [ 334.439339][T10716] CPU: 0 UID: 0 PID: 10716 Comm: syz.2.1116 Not tainted syzkaller #0 PREEMPT(full) [ 334.439375][T10716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 334.439390][T10716] Call Trace: [ 334.439399][T10716] [ 334.439409][T10716] dump_stack_lvl+0x16c/0x1f0 [ 334.439444][T10716] mtrr_del+0xd1/0x110 [ 334.439530][T10716] mtrr_ioctl+0x922/0xcf0 [ 334.439562][T10716] ? __pfx_mtrr_ioctl+0x10/0x10 [ 334.439587][T10716] ? find_held_lock+0x2b/0x80 [ 334.439609][T10716] ? __fget_files+0x20e/0x3c0 [ 334.439624][T10716] ? __pfx_mtrr_ioctl+0x10/0x10 [ 334.439643][T10716] proc_reg_unlocked_ioctl+0x229/0x320 [ 334.439661][T10716] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 334.439681][T10716] __x64_sys_ioctl+0x18e/0x210 [ 334.439703][T10716] do_syscall_64+0xcd/0xfa0 [ 334.439720][T10716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.439734][T10716] RIP: 0033:0x7fcb8118f6c9 [ 334.439746][T10716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.439759][T10716] RSP: 002b:00007fcb8208a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 334.439773][T10716] RAX: ffffffffffffffda RBX: 00007fcb813e6090 RCX: 00007fcb8118f6c9 [ 334.439783][T10716] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000003 [ 334.439791][T10716] RBP: 00007fcb81211f91 R08: 0000000000000000 R09: 0000000000000000 [ 334.439800][T10716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.439809][T10716] R13: 00007fcb813e6128 R14: 00007fcb813e6090 R15: 00007ffc323b8da8 [ 334.439828][T10716] [ 334.651128][ T5841] Bluetooth: hci1: unexpected event 0x35 length: 13 > 6 [ 335.137863][T10721] netlink: 504 bytes leftover after parsing attributes in process `syz.0.1118'. [ 335.238170][T10734] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1121'. [ 336.290990][T10743] size and base must be multiples of 4 kiB [ 336.304588][T10743] CPU: 1 UID: 0 PID: 10743 Comm: syz.1.1123 Not tainted syzkaller #0 PREEMPT(full) [ 336.304612][T10743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 336.304621][T10743] Call Trace: [ 336.304626][T10743] [ 336.304633][T10743] dump_stack_lvl+0x16c/0x1f0 [ 336.304654][T10743] mtrr_del+0xd1/0x110 [ 336.304674][T10743] mtrr_ioctl+0x922/0xcf0 [ 336.304694][T10743] ? __pfx_mtrr_ioctl+0x10/0x10 [ 336.304716][T10743] ? find_held_lock+0x2b/0x80 [ 336.304736][T10743] ? __fget_files+0x20e/0x3c0 [ 336.304751][T10743] ? __pfx_mtrr_ioctl+0x10/0x10 [ 336.304769][T10743] proc_reg_unlocked_ioctl+0x229/0x320 [ 336.304787][T10743] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 336.304807][T10743] __x64_sys_ioctl+0x18e/0x210 [ 336.304828][T10743] do_syscall_64+0xcd/0xfa0 [ 336.304845][T10743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.304859][T10743] RIP: 0033:0x7fcfbd98f6c9 [ 336.304871][T10743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.304884][T10743] RSP: 002b:00007fcfbe876038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 336.304898][T10743] RAX: ffffffffffffffda RBX: 00007fcfbdbe5fa0 RCX: 00007fcfbd98f6c9 [ 336.304926][T10743] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000003 [ 336.304935][T10743] RBP: 00007fcfbda11f91 R08: 0000000000000000 R09: 0000000000000000 [ 336.304944][T10743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.304952][T10743] R13: 00007fcfbdbe6038 R14: 00007fcfbdbe5fa0 R15: 00007ffc0fd930f8 [ 336.304972][T10743] [ 336.392909][T10745] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 336.532173][T10748] FAULT_INJECTION: forcing a failure. [ 336.532173][T10748] name failslab, interval 1, probability 0, space 0, times 0 [ 336.545014][T10745] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 336.623538][T10745] blktrace: Concurrent blktraces are not allowed on loop2 [ 336.644694][T10748] CPU: 0 UID: 0 PID: 10748 Comm: syz.2.1125 Not tainted syzkaller #0 PREEMPT(full) [ 336.644734][T10748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 336.644749][T10748] Call Trace: [ 336.644759][T10748] [ 336.644769][T10748] dump_stack_lvl+0x16c/0x1f0 [ 336.644806][T10748] should_fail_ex+0x512/0x640 [ 336.644850][T10748] should_failslab+0xc2/0x120 [ 336.644909][T10748] kmem_cache_alloc_node_noprof+0x78/0x770 [ 336.644939][T10748] ? __alloc_skb+0x2b2/0x380 [ 336.644988][T10748] ? __alloc_skb+0x2b2/0x380 [ 336.645026][T10748] __alloc_skb+0x2b2/0x380 [ 336.645064][T10748] ? __pfx___alloc_skb+0x10/0x10 [ 336.645102][T10748] ? sctp_v4_xmit+0x768/0x1030 [ 336.645134][T10748] ? sctp_chunk_put+0x1a2/0x2c0 [ 336.645170][T10748] _sctp_make_chunk+0x51/0x270 [ 336.645199][T10748] sctp_make_shutdown_ack+0x2e/0x340 [ 336.645228][T10748] sctp_sf_do_9_2_shutdown_ack+0x321/0x7c0 [ 336.645271][T10748] ? __pfx_sctp_cname+0x10/0x10 [ 336.645305][T10748] sctp_do_sm+0x181/0x5c80 [ 336.645346][T10748] ? sctp_outq_flush+0xba2/0x3350 [ 336.645389][T10748] ? mark_held_locks+0x49/0x80 [ 336.645424][T10748] ? __pfx_sctp_do_sm+0x10/0x10 [ 336.645463][T10748] ? __pfx_sctp_outq_flush+0x10/0x10 [ 336.645545][T10748] ? ktime_get+0x200/0x310 [ 336.645576][T10748] ? lockdep_hardirqs_on+0x7c/0x110 [ 336.645613][T10748] sctp_assoc_bh_rcv+0x392/0x6f0 [ 336.645660][T10748] sctp_inq_push+0x1db/0x270 [ 336.645699][T10748] sctp_backlog_rcv+0x169/0x590 [ 336.645728][T10748] ? __pfx_sctp_backlog_rcv+0x10/0x10 [ 336.645768][T10748] __release_sock+0x3a9/0x450 [ 336.645796][T10748] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 336.645833][T10748] release_sock+0x5a/0x220 [ 336.645859][T10748] sctp_close+0x464/0x940 [ 336.645898][T10748] ? __pfx_sctp_close+0x10/0x10 [ 336.645926][T10748] ? __pfx___might_resched+0x10/0x10 [ 336.645960][T10748] ? ip_mc_drop_socket+0x1f/0x280 [ 336.645989][T10748] ? down_write+0x14d/0x200 [ 336.646025][T10748] inet_release+0xed/0x200 [ 336.646063][T10748] inet6_release+0x4f/0x70 [ 336.646094][T10748] __sock_release+0xb3/0x270 [ 336.646125][T10748] ? __pfx_sock_close+0x10/0x10 [ 336.646149][T10748] sock_close+0x1c/0x30 [ 336.646175][T10748] __fput+0x402/0xb70 [ 336.646212][T10748] ? _raw_spin_unlock_irq+0x23/0x50 [ 336.646242][T10748] task_work_run+0x150/0x240 [ 336.646283][T10748] ? __pfx_task_work_run+0x10/0x10 [ 336.646333][T10748] ? __pfx___do_sys_close_range+0x10/0x10 [ 336.646373][T10748] exit_to_user_mode_loop+0xec/0x130 [ 336.646414][T10748] do_syscall_64+0x426/0xfa0 [ 336.646446][T10748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.646473][T10748] RIP: 0033:0x7fcb8118f6c9 [ 336.646495][T10748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.646521][T10748] RSP: 002b:00007fcb820ab038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 336.646547][T10748] RAX: 0000000000000000 RBX: 00007fcb813e5fa0 RCX: 00007fcb8118f6c9 [ 336.646565][T10748] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000002 [ 336.646581][T10748] RBP: 00007fcb81211f91 R08: 0000000000000000 R09: 0000000000000000 [ 336.646598][T10748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.646614][T10748] R13: 00007fcb813e6038 R14: 00007fcb813e5fa0 R15: 00007ffc323b8da8 [ 336.646652][T10748] [ 337.656328][ T5841] Bluetooth: hci2: unexpected event 0x35 length: 13 > 6 [ 337.770970][T10760] zswap: compressor 000 not available [ 338.722868][T10770] size and base must be multiples of 4 kiB [ 338.733345][T10770] CPU: 1 UID: 0 PID: 10770 Comm: syz.0.1128 Not tainted syzkaller #0 PREEMPT(full) [ 338.733380][T10770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 338.733396][T10770] Call Trace: [ 338.733404][T10770] [ 338.733415][T10770] dump_stack_lvl+0x16c/0x1f0 [ 338.733450][T10770] mtrr_del+0xd1/0x110 [ 338.733486][T10770] mtrr_ioctl+0x922/0xcf0 [ 338.733523][T10770] ? __pfx_mtrr_ioctl+0x10/0x10 [ 338.733566][T10770] ? find_held_lock+0x2b/0x80 [ 338.733603][T10770] ? __fget_files+0x20e/0x3c0 [ 338.733630][T10770] ? __pfx_mtrr_ioctl+0x10/0x10 [ 338.733666][T10770] proc_reg_unlocked_ioctl+0x229/0x320 [ 338.733701][T10770] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 338.733740][T10770] __x64_sys_ioctl+0x18e/0x210 [ 338.733789][T10770] do_syscall_64+0xcd/0xfa0 [ 338.733823][T10770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.733850][T10770] RIP: 0033:0x7f92d1f8f6c9 [ 338.733872][T10770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.733897][T10770] RSP: 002b:00007f92d2e0c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 338.733922][T10770] RAX: ffffffffffffffda RBX: 00007f92d21e6090 RCX: 00007f92d1f8f6c9 [ 338.733940][T10770] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000003 [ 338.733956][T10770] RBP: 00007f92d2011f91 R08: 0000000000000000 R09: 0000000000000000 [ 338.733972][T10770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.733988][T10770] R13: 00007f92d21e6128 R14: 00007f92d21e6090 R15: 00007fff2d39ef08 [ 338.734022][T10770] [ 339.110850][T10787] zswap: compressor 000 not available [ 339.124699][T10783] size and base must be multiples of 4 kiB [ 339.131335][T10783] CPU: 0 UID: 0 PID: 10783 Comm: syz.3.1134 Not tainted syzkaller #0 PREEMPT(full) [ 339.131356][T10783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 339.131364][T10783] Call Trace: [ 339.131370][T10783] [ 339.131375][T10783] dump_stack_lvl+0x16c/0x1f0 [ 339.131396][T10783] mtrr_del+0xd1/0x110 [ 339.131416][T10783] mtrr_ioctl+0x922/0xcf0 [ 339.131435][T10783] ? __pfx_mtrr_ioctl+0x10/0x10 [ 339.131457][T10783] ? find_held_lock+0x2b/0x80 [ 339.131477][T10783] ? __fget_files+0x20e/0x3c0 [ 339.131491][T10783] ? __pfx_mtrr_ioctl+0x10/0x10 [ 339.131509][T10783] proc_reg_unlocked_ioctl+0x229/0x320 [ 339.131527][T10783] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 339.131547][T10783] __x64_sys_ioctl+0x18e/0x210 [ 339.131568][T10783] do_syscall_64+0xcd/0xfa0 [ 339.131584][T10783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.131598][T10783] RIP: 0033:0x7f4b4258f6c9 [ 339.131609][T10783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.131623][T10783] RSP: 002b:00007f4b407f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 339.131637][T10783] RAX: ffffffffffffffda RBX: 00007f4b427e6090 RCX: 00007f4b4258f6c9 [ 339.131646][T10783] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000003 [ 339.131658][T10783] RBP: 00007f4b42611f91 R08: 0000000000000000 R09: 0000000000000000 [ 339.131666][T10783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.131674][T10783] R13: 00007f4b427e6128 R14: 00007f4b427e6090 R15: 00007ffe4033c3d8 [ 339.131693][T10783] [ 339.724561][T10800] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 339.765087][T10800] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 339.814446][T10802] size and base must be multiples of 4 kiB [ 339.820349][T10802] CPU: 1 UID: 0 PID: 10802 Comm: syz.2.1137 Not tainted syzkaller #0 PREEMPT(full) [ 339.820369][T10802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 339.820378][T10802] Call Trace: [ 339.820384][T10802] [ 339.820389][T10802] dump_stack_lvl+0x16c/0x1f0 [ 339.820410][T10802] mtrr_del+0xd1/0x110 [ 339.820429][T10802] mtrr_ioctl+0x922/0xcf0 [ 339.820448][T10802] ? __pfx_mtrr_ioctl+0x10/0x10 [ 339.820471][T10802] ? find_held_lock+0x2b/0x80 [ 339.820490][T10802] ? __fget_files+0x20e/0x3c0 [ 339.820505][T10802] ? __pfx_mtrr_ioctl+0x10/0x10 [ 339.820523][T10802] proc_reg_unlocked_ioctl+0x229/0x320 [ 339.820542][T10802] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 339.820562][T10802] __x64_sys_ioctl+0x18e/0x210 [ 339.820582][T10802] do_syscall_64+0xcd/0xfa0 [ 339.820599][T10802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.820613][T10802] RIP: 0033:0x7fcb8118f6c9 [ 339.820626][T10802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.820638][T10802] RSP: 002b:00007fcb820ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 339.820652][T10802] RAX: ffffffffffffffda RBX: 00007fcb813e5fa0 RCX: 00007fcb8118f6c9 [ 339.820661][T10802] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000003 [ 339.820676][T10802] RBP: 00007fcb81211f91 R08: 0000000000000000 R09: 0000000000000000 [ 339.820685][T10802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.820693][T10802] R13: 00007fcb813e6038 R14: 00007fcb813e5fa0 R15: 00007ffc323b8da8 [ 339.820711][T10802] [ 339.890086][T10800] blktrace: Concurrent blktraces are not allowed on loop2 [ 340.157469][ T5841] Bluetooth: hci2: unexpected event 0x35 length: 13 > 6 [ 340.393942][T10822] ptrace attach of "./syz-executor exec"[5833] was attempted by ""[10822] [ 341.179507][T10836] size and base must be multiples of 4 kiB [ 341.185607][T10836] CPU: 1 UID: 0 PID: 10836 Comm: syz.0.1148 Not tainted syzkaller #0 PREEMPT(full) [ 341.185635][T10836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 341.185643][T10836] Call Trace: [ 341.185649][T10836] [ 341.185655][T10836] dump_stack_lvl+0x16c/0x1f0 [ 341.185676][T10836] mtrr_del+0xd1/0x110 [ 341.185695][T10836] mtrr_ioctl+0x922/0xcf0 [ 341.185715][T10836] ? __pfx_mtrr_ioctl+0x10/0x10 [ 341.185737][T10836] ? find_held_lock+0x2b/0x80 [ 341.185756][T10836] ? __fget_files+0x20e/0x3c0 [ 341.185771][T10836] ? __pfx_mtrr_ioctl+0x10/0x10 [ 341.185789][T10836] proc_reg_unlocked_ioctl+0x229/0x320 [ 341.185807][T10836] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 341.185827][T10836] __x64_sys_ioctl+0x18e/0x210 [ 341.185848][T10836] do_syscall_64+0xcd/0xfa0 [ 341.185864][T10836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.185878][T10836] RIP: 0033:0x7f92d1f8f6c9 [ 341.185890][T10836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.185903][T10836] RSP: 002b:00007f92d2e2d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 341.185917][T10836] RAX: ffffffffffffffda RBX: 00007f92d21e5fa0 RCX: 00007f92d1f8f6c9 [ 341.185927][T10836] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000003 [ 341.185935][T10836] RBP: 00007f92d2011f91 R08: 0000000000000000 R09: 0000000000000000 [ 341.185944][T10836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 341.185952][T10836] R13: 00007f92d21e6038 R14: 00007f92d21e5fa0 R15: 00007fff2d39ef08 [ 341.185970][T10836] [ 341.734195][ T5841] Bluetooth: hci0: unexpected event 0x35 length: 13 > 6 [ 341.849539][T10849] vcan0: tx drop: invalid sa for name 0x00000000000000fd [ 342.090546][T10847] vcan0: tx drop: invalid sa for name 0x00000000000000fd [ 342.910158][T10865] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 342.919310][T10865] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 342.932762][T10865] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 342.959614][T10865] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 343.101233][T10874] FAULT_INJECTION: forcing a failure. [ 343.101233][T10874] name fail_futex, interval 1, probability 0, space 0, times 0 [ 343.170265][T10876] size and base must be multiples of 4 kiB [ 343.176120][T10876] CPU: 1 UID: 0 PID: 10876 Comm: syz.2.1159 Not tainted syzkaller #0 PREEMPT(full) [ 343.176140][T10876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 343.176149][T10876] Call Trace: [ 343.176155][T10876] [ 343.176161][T10876] dump_stack_lvl+0x16c/0x1f0 [ 343.176182][T10876] mtrr_del+0xd1/0x110 [ 343.176203][T10876] mtrr_ioctl+0x922/0xcf0 [ 343.176221][T10876] ? __pfx_mtrr_ioctl+0x10/0x10 [ 343.176244][T10876] ? find_held_lock+0x2b/0x80 [ 343.176263][T10876] ? __fget_files+0x20e/0x3c0 [ 343.176278][T10876] ? __pfx_mtrr_ioctl+0x10/0x10 [ 343.176296][T10876] proc_reg_unlocked_ioctl+0x229/0x320 [ 343.176315][T10876] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 343.176334][T10876] __x64_sys_ioctl+0x18e/0x210 [ 343.176355][T10876] do_syscall_64+0xcd/0xfa0 [ 343.176372][T10876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.176386][T10876] RIP: 0033:0x7fcb8118f6c9 [ 343.176398][T10876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.176411][T10876] RSP: 002b:00007fcb820ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 343.176425][T10876] RAX: ffffffffffffffda RBX: 00007fcb813e5fa0 RCX: 00007fcb8118f6c9 [ 343.176434][T10876] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000003 [ 343.176443][T10876] RBP: 00007fcb81211f91 R08: 0000000000000000 R09: 0000000000000000 [ 343.176451][T10876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.176460][T10876] R13: 00007fcb813e6038 R14: 00007fcb813e5fa0 R15: 00007ffc323b8da8 [ 343.176479][T10876] [ 343.229551][T10874] CPU: 0 UID: 0 PID: 10874 Comm: syz.3.1158 Not tainted syzkaller #0 PREEMPT(full) [ 343.229585][T10874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 343.229599][T10874] Call Trace: [ 343.229608][T10874] [ 343.229617][T10874] dump_stack_lvl+0x16c/0x1f0 [ 343.229650][T10874] should_fail_ex+0x512/0x640 [ 343.229690][T10874] get_futex_key+0xff0/0x1560 [ 343.229726][T10874] ? __pfx_get_futex_key+0x10/0x10 [ 343.229756][T10874] ? __mutex_trylock_common+0xe9/0x250 [ 343.229799][T10874] futex_wake+0xea/0x530 [ 343.229838][T10874] ? __pfx_futex_wake+0x10/0x10 [ 343.229872][T10874] ? __lock_acquire+0xb8a/0x1c90 [ 343.229918][T10874] do_futex+0x1e3/0x350 [ 343.229951][T10874] ? __pfx_do_futex+0x10/0x10 [ 343.229980][T10874] ? __might_fault+0xe3/0x190 [ 343.230014][T10874] mm_release+0x24e/0x300 [ 343.230042][T10874] do_exit+0x68e/0x2bf0 [ 343.230081][T10874] ? __pfx_do_exit+0x10/0x10 [ 343.230112][T10874] ? do_raw_spin_lock+0x12c/0x2b0 [ 343.230147][T10874] ? find_held_lock+0x2b/0x80 [ 343.230177][T10874] do_group_exit+0xd3/0x2a0 [ 343.230212][T10874] get_signal+0x2671/0x26d0 [ 343.230253][T10874] ? __pfx_get_signal+0x10/0x10 [ 343.230287][T10874] ? do_futex+0x122/0x350 [ 343.230318][T10874] ? __pfx_do_futex+0x10/0x10 [ 343.230353][T10874] arch_do_signal_or_restart+0x8f/0x790 [ 343.230385][T10874] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 343.230424][T10874] ? xfd_validate_state+0x61/0x180 [ 343.230457][T10874] ? __pfx___do_sys_close_range+0x10/0x10 [ 343.230491][T10874] exit_to_user_mode_loop+0x85/0x130 [ 343.230528][T10874] do_syscall_64+0x426/0xfa0 [ 343.230558][T10874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.230583][T10874] RIP: 0033:0x7f4b4258f6c9 [ 343.230603][T10874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.230626][T10874] RSP: 002b:00007f4b407d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 343.230650][T10874] RAX: fffffffffffffe00 RBX: 00007f4b427e6188 RCX: 00007f4b4258f6c9 [ 343.230667][T10874] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4b427e6188 [ 343.230682][T10874] RBP: 00007f4b427e6180 R08: 0000000000000000 R09: 0000000000000000 [ 343.230697][T10874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.230712][T10874] R13: 00007f4b427e6218 R14: 00007ffe4033c2f0 R15: 00007ffe4033c3d8 [ 343.230746][T10874] [ 343.967024][ T5841] Bluetooth: hci2: unexpected event 0x35 length: 13 > 6 [ 344.414106][T10885] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 344.438498][T10885] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 344.448608][T10885] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 344.464535][T10885] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 345.415245][T10915] size and base must be multiples of 4 kiB [ 345.421192][T10915] CPU: 0 UID: 0 PID: 10915 Comm: syz.1.1171 Not tainted syzkaller #0 PREEMPT(full) [ 345.421213][T10915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 345.421222][T10915] Call Trace: [ 345.421228][T10915] [ 345.421233][T10915] dump_stack_lvl+0x16c/0x1f0 [ 345.421257][T10915] mtrr_del+0xd1/0x110 [ 345.421278][T10915] mtrr_ioctl+0x922/0xcf0 [ 345.421303][T10915] ? __pfx_mtrr_ioctl+0x10/0x10 [ 345.421340][T10915] ? find_held_lock+0x2b/0x80 [ 345.421370][T10915] ? __fget_files+0x20e/0x3c0 [ 345.421393][T10915] ? __pfx_mtrr_ioctl+0x10/0x10 [ 345.421425][T10915] proc_reg_unlocked_ioctl+0x229/0x320 [ 345.421446][T10915] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 345.421466][T10915] __x64_sys_ioctl+0x18e/0x210 [ 345.421486][T10915] do_syscall_64+0xcd/0xfa0 [ 345.421503][T10915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.421517][T10915] RIP: 0033:0x7fcfbd98f6c9 [ 345.421529][T10915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.421542][T10915] RSP: 002b:00007fcfbe876038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 345.421555][T10915] RAX: ffffffffffffffda RBX: 00007fcfbdbe5fa0 RCX: 00007fcfbd98f6c9 [ 345.421565][T10915] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000003 [ 345.421573][T10915] RBP: 00007fcfbda11f91 R08: 0000000000000000 R09: 0000000000000000 [ 345.421582][T10915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.421591][T10915] R13: 00007fcfbdbe6038 R14: 00007fcfbdbe5fa0 R15: 00007ffc0fd930f8 [ 345.421609][T10915] [ 346.260606][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 346.499393][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 346.505483][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 346.511607][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 346.543896][T10935] vcan0: tx drop: invalid sa for name 0x00000000000000fd [ 346.693201][T10935] vcan0: tx drop: invalid sa for name 0x00000000000000fd [ 347.715008][T10957] ptrace attach of "./syz-executor exec"[5833] was attempted by ""[10957] [ 348.009020][T10955] size and base must be multiples of 4 kiB [ 348.014932][T10955] CPU: 1 UID: 0 PID: 10955 Comm: syz.1.1182 Not tainted syzkaller #0 PREEMPT(full) [ 348.014953][T10955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 348.014962][T10955] Call Trace: [ 348.014967][T10955] [ 348.014973][T10955] dump_stack_lvl+0x16c/0x1f0 [ 348.015000][T10955] mtrr_del+0xd1/0x110 [ 348.015021][T10955] mtrr_ioctl+0x922/0xcf0 [ 348.015041][T10955] ? __pfx_mtrr_ioctl+0x10/0x10 [ 348.015064][T10955] ? find_held_lock+0x2b/0x80 [ 348.015084][T10955] ? __fget_files+0x20e/0x3c0 [ 348.015099][T10955] ? __pfx_mtrr_ioctl+0x10/0x10 [ 348.015117][T10955] proc_reg_unlocked_ioctl+0x229/0x320 [ 348.015135][T10955] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 348.015155][T10955] __x64_sys_ioctl+0x18e/0x210 [ 348.015176][T10955] do_syscall_64+0xcd/0xfa0 [ 348.015192][T10955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.015206][T10955] RIP: 0033:0x7fcfbd98f6c9 [ 348.015218][T10955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.015231][T10955] RSP: 002b:00007fcfbe876038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 348.015244][T10955] RAX: ffffffffffffffda RBX: 00007fcfbdbe5fa0 RCX: 00007fcfbd98f6c9 [ 348.015254][T10955] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000003 [ 348.015262][T10955] RBP: 00007fcfbda11f91 R08: 0000000000000000 R09: 0000000000000000 [ 348.015270][T10955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 348.015278][T10955] R13: 00007fcfbdbe6038 R14: 00007fcfbdbe5fa0 R15: 00007ffc0fd930f8 [ 348.015297][T10955] [ 348.796056][T10967] vcan0: tx drop: invalid sa for name 0x00000000000000fd [ 348.911212][T10964] vcan0: tx drop: invalid sa for name 0x00000000000000fd [ 349.414005][T10982] vcan0: tx drop: invalid sa for name 0x00000000000000fd [ 349.448420][T10982] vcan0: tx drop: invalid sa for name 0x00000000000000fd [ 350.262236][T10997] size and base must be multiples of 4 kiB [ 350.268116][T10997] CPU: 0 UID: 0 PID: 10997 Comm: syz.1.1194 Not tainted syzkaller #0 PREEMPT(full) [ 350.268136][T10997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 350.268146][T10997] Call Trace: [ 350.268153][T10997] [ 350.268160][T10997] dump_stack_lvl+0x16c/0x1f0 [ 350.268182][T10997] mtrr_del+0xd1/0x110 [ 350.268202][T10997] mtrr_ioctl+0x922/0xcf0 [ 350.268221][T10997] ? __pfx_mtrr_ioctl+0x10/0x10 [ 350.268244][T10997] ? find_held_lock+0x2b/0x80 [ 350.268264][T10997] ? __fget_files+0x20e/0x3c0 [ 350.268279][T10997] ? __pfx_mtrr_ioctl+0x10/0x10 [ 350.268297][T10997] proc_reg_unlocked_ioctl+0x229/0x320 [ 350.268315][T10997] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 350.268335][T10997] __x64_sys_ioctl+0x18e/0x210 [ 350.268357][T10997] do_syscall_64+0xcd/0xfa0 [ 350.268378][T10997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.268392][T10997] RIP: 0033:0x7fcfbd98f6c9 [ 350.268404][T10997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.268417][T10997] RSP: 002b:00007fcfbe855038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 350.268431][T10997] RAX: ffffffffffffffda RBX: 00007fcfbdbe6090 RCX: 00007fcfbd98f6c9 [ 350.268441][T10997] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000003 [ 350.268450][T10997] RBP: 00007fcfbda11f91 R08: 0000000000000000 R09: 0000000000000000 [ 350.268458][T10997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.268467][T10997] R13: 00007fcfbdbe6128 R14: 00007fcfbdbe6090 R15: 00007ffc0fd930f8 [ 350.268487][T10997] [ 351.907265][T11024] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 351.923556][T11024] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 352.352200][T11024] blktrace: Concurrent blktraces are not allowed on loop2 [ 352.424620][T11022] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 352.440364][T11022] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 352.446740][T11022] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 352.457467][T11022] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 352.832058][T11042] size and base must be multiples of 4 kiB [ 352.838279][T11042] CPU: 0 UID: 0 PID: 11042 Comm: syz.2.1205 Not tainted syzkaller #0 PREEMPT(full) [ 352.838299][T11042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 352.838309][T11042] Call Trace: [ 352.838314][T11042] [ 352.838319][T11042] dump_stack_lvl+0x16c/0x1f0 [ 352.838342][T11042] mtrr_del+0xd1/0x110 [ 352.838363][T11042] mtrr_ioctl+0x922/0xcf0 [ 352.838383][T11042] ? __pfx_mtrr_ioctl+0x10/0x10 [ 352.838405][T11042] ? find_held_lock+0x2b/0x80 [ 352.838425][T11042] ? __fget_files+0x20e/0x3c0 [ 352.838439][T11042] ? __pfx_mtrr_ioctl+0x10/0x10 [ 352.838457][T11042] proc_reg_unlocked_ioctl+0x229/0x320 [ 352.838475][T11042] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 352.838495][T11042] __x64_sys_ioctl+0x18e/0x210 [ 352.838516][T11042] do_syscall_64+0xcd/0xfa0 [ 352.838532][T11042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.838546][T11042] RIP: 0033:0x7fcb8118f6c9 [ 352.838557][T11042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.838570][T11042] RSP: 002b:00007fcb8208a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 352.838584][T11042] RAX: ffffffffffffffda RBX: 00007fcb813e6090 RCX: 00007fcb8118f6c9 [ 352.838593][T11042] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000003 [ 352.838601][T11042] RBP: 00007fcb81211f91 R08: 0000000000000000 R09: 0000000000000000 [ 352.838609][T11042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.838617][T11042] R13: 00007fcb813e6128 R14: 00007fcb813e6090 R15: 00007ffc323b8da8 [ 352.838636][T11042] [ 354.019439][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 354.509431][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 354.515637][ T5829] Bluetooth: hci2: command 0x0406 tx timeout [ 354.521727][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 355.003473][T11079] ptrace attach of "./syz-executor exec"[5834] was attempted by ""[11079] [ 355.706939][ T5841] Bluetooth: hci3: unexpected event 0x35 length: 13 > 6 [ 355.763745][T11095] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 355.779463][T11095] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 356.204442][T11095] blktrace: Concurrent blktraces are not allowed on loop2 [ 357.153188][T11112] FAULT_INJECTION: forcing a failure. [ 357.153188][T11112] name fail_futex, interval 1, probability 0, space 0, times 0 [ 357.178147][T11128] zswap: compressor 000 not available [ 357.185607][T11112] CPU: 1 UID: 0 PID: 11112 Comm: syz.3.1222 Not tainted syzkaller #0 PREEMPT(full) [ 357.185640][T11112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 357.185656][T11112] Call Trace: [ 357.185664][T11112] [ 357.185673][T11112] dump_stack_lvl+0x16c/0x1f0 [ 357.185707][T11112] should_fail_ex+0x512/0x640 [ 357.185745][T11112] get_futex_key+0x1d0/0x1560 [ 357.185776][T11112] ? __pfx_get_futex_key+0x10/0x10 [ 357.185801][T11112] ? __mutex_trylock_common+0xe9/0x250 [ 357.185835][T11112] futex_wake+0xea/0x530 [ 357.185881][T11112] ? __pfx_futex_wake+0x10/0x10 [ 357.185912][T11112] ? __lock_acquire+0xb8a/0x1c90 [ 357.185958][T11112] do_futex+0x1e3/0x350 [ 357.185990][T11112] ? __pfx_do_futex+0x10/0x10 [ 357.186020][T11112] ? __might_fault+0xe3/0x190 [ 357.186061][T11112] mm_release+0x24e/0x300 [ 357.186091][T11112] do_exit+0x68e/0x2bf0 [ 357.186128][T11112] ? __pfx_do_exit+0x10/0x10 [ 357.186160][T11112] ? do_raw_spin_lock+0x12c/0x2b0 [ 357.186195][T11112] ? find_held_lock+0x2b/0x80 [ 357.186224][T11112] do_group_exit+0xd3/0x2a0 [ 357.186260][T11112] get_signal+0x2671/0x26d0 [ 357.186302][T11112] ? __pfx_get_signal+0x10/0x10 [ 357.186331][T11112] ? do_futex+0x122/0x350 [ 357.186363][T11112] ? __pfx_do_futex+0x10/0x10 [ 357.186398][T11112] arch_do_signal_or_restart+0x8f/0x790 [ 357.186430][T11112] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 357.186473][T11112] ? __pfx___do_sys_close_range+0x10/0x10 [ 357.186510][T11112] exit_to_user_mode_loop+0x85/0x130 [ 357.186551][T11112] do_syscall_64+0x426/0xfa0 [ 357.186583][T11112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.186609][T11112] RIP: 0033:0x7f4b4258f6c9 [ 357.186630][T11112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.186656][T11112] RSP: 002b:00007f4b407d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 357.186681][T11112] RAX: fffffffffffffe00 RBX: 00007f4b427e6188 RCX: 00007f4b4258f6c9 [ 357.186699][T11112] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4b427e6188 [ 357.186714][T11112] RBP: 00007f4b427e6180 R08: 0000000000000000 R09: 0000000000000000 [ 357.186729][T11112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 357.186745][T11112] R13: 00007f4b427e6218 R14: 00007ffe4033c2f0 R15: 00007ffe4033c3d8 [ 357.186781][T11112] [ 357.976346][T11140] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 358.149591][T11140] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 358.657632][T11140] blktrace: Concurrent blktraces are not allowed on loop2 [ 358.825310][T11159] FAULT_INJECTION: forcing a failure. [ 358.825310][T11159] name fail_futex, interval 1, probability 0, space 0, times 0 [ 358.861908][T11149] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 358.874591][T11159] CPU: 0 UID: 0 PID: 11159 Comm: syz.1.1234 Not tainted syzkaller #0 PREEMPT(full) [ 358.874626][T11159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 358.874641][T11159] Call Trace: [ 358.874657][T11159] [ 358.874666][T11159] dump_stack_lvl+0x16c/0x1f0 [ 358.874700][T11159] should_fail_ex+0x512/0x640 [ 358.874743][T11159] get_futex_key+0x293/0x1560 [ 358.874781][T11159] ? __pfx_get_futex_key+0x10/0x10 [ 358.874814][T11159] ? __mutex_trylock_common+0xe9/0x250 [ 358.874859][T11159] futex_wake+0xea/0x530 [ 358.874901][T11159] ? __pfx_futex_wake+0x10/0x10 [ 358.874936][T11159] ? __lock_acquire+0xb8a/0x1c90 [ 358.874986][T11159] do_futex+0x1e3/0x350 [ 358.875020][T11159] ? __pfx_do_futex+0x10/0x10 [ 358.875051][T11159] ? __might_fault+0xe3/0x190 [ 358.875087][T11159] mm_release+0x24e/0x300 [ 358.875117][T11159] do_exit+0x68e/0x2bf0 [ 358.875158][T11159] ? __pfx_do_exit+0x10/0x10 [ 358.875191][T11159] ? do_raw_spin_lock+0x12c/0x2b0 [ 358.875228][T11159] ? find_held_lock+0x2b/0x80 [ 358.875260][T11159] do_group_exit+0xd3/0x2a0 [ 358.875296][T11159] get_signal+0x2671/0x26d0 [ 358.875339][T11159] ? __pfx_get_signal+0x10/0x10 [ 358.875367][T11159] ? do_futex+0x122/0x350 [ 358.875400][T11159] ? __pfx_do_futex+0x10/0x10 [ 358.875437][T11159] arch_do_signal_or_restart+0x8f/0x790 [ 358.875471][T11159] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 358.875513][T11159] ? xfd_validate_state+0x61/0x180 [ 358.875546][T11159] ? __pfx___do_sys_close_range+0x10/0x10 [ 358.875583][T11159] exit_to_user_mode_loop+0x85/0x130 [ 358.875622][T11159] do_syscall_64+0x426/0xfa0 [ 358.875659][T11159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.875686][T11159] RIP: 0033:0x7fcfbd98f6c9 [ 358.875706][T11159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.875730][T11159] RSP: 002b:00007fcfbe8550e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 358.875755][T11159] RAX: fffffffffffffe00 RBX: 00007fcfbdbe6098 RCX: 00007fcfbd98f6c9 [ 358.875773][T11159] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcfbdbe6098 [ 358.875789][T11159] RBP: 00007fcfbdbe6090 R08: 0000000000000000 R09: 0000000000000000 [ 358.875804][T11159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.875820][T11159] R13: 00007fcfbdbe6128 R14: 00007ffc0fd93010 R15: 00007ffc0fd930f8 [ 358.875857][T11159] [ 358.878944][T11149] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 359.148470][T11149] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 359.169024][T11149] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 359.638566][T11177] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 359.647122][T11177] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 359.748777][T11180] zswap: compressor 000 not available [ 360.152761][T11177] blktrace: Concurrent blktraces are not allowed on loop2 [ 360.519639][T11194] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 360.536963][T11194] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 360.552613][T11197] FAULT_INJECTION: forcing a failure. [ 360.552613][T11197] name fail_futex, interval 1, probability 0, space 0, times 0 [ 360.596881][T11197] CPU: 1 UID: 0 PID: 11197 Comm: syz.2.1245 Not tainted syzkaller #0 PREEMPT(full) [ 360.596913][T11197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 360.596931][T11197] Call Trace: [ 360.596938][T11197] [ 360.596947][T11197] dump_stack_lvl+0x16c/0x1f0 [ 360.596980][T11197] should_fail_ex+0x512/0x640 [ 360.597023][T11197] get_futex_key+0x1d0/0x1560 [ 360.597060][T11197] ? __pfx_get_futex_key+0x10/0x10 [ 360.597092][T11197] ? __mutex_trylock_common+0xe9/0x250 [ 360.597137][T11197] futex_wake+0xea/0x530 [ 360.597179][T11197] ? __pfx_futex_wake+0x10/0x10 [ 360.597212][T11197] ? __lock_acquire+0xb8a/0x1c90 [ 360.597263][T11197] do_futex+0x1e3/0x350 [ 360.597297][T11197] ? __pfx_do_futex+0x10/0x10 [ 360.597327][T11197] ? __might_fault+0xe3/0x190 [ 360.597362][T11197] mm_release+0x24e/0x300 [ 360.597389][T11197] do_exit+0x68e/0x2bf0 [ 360.597430][T11197] ? __pfx_do_exit+0x10/0x10 [ 360.597470][T11197] ? do_raw_spin_lock+0x20e/0x2b0 [ 360.597506][T11197] ? find_held_lock+0x2b/0x80 [ 360.597539][T11197] do_group_exit+0xd3/0x2a0 [ 360.597576][T11197] get_signal+0x2671/0x26d0 [ 360.597619][T11197] ? __pfx_get_signal+0x10/0x10 [ 360.597645][T11197] ? do_futex+0x122/0x350 [ 360.597679][T11197] ? __pfx_do_futex+0x10/0x10 [ 360.597713][T11197] arch_do_signal_or_restart+0x8f/0x790 [ 360.597747][T11197] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 360.597790][T11197] ? __pfx___do_sys_close_range+0x10/0x10 [ 360.597827][T11197] exit_to_user_mode_loop+0x85/0x130 [ 360.597866][T11197] do_syscall_64+0x426/0xfa0 [ 360.597897][T11197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.597923][T11197] RIP: 0033:0x7fcb8118f6c9 [ 360.597945][T11197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.597970][T11197] RSP: 002b:00007fcb8208a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 360.597995][T11197] RAX: fffffffffffffe00 RBX: 00007fcb813e6098 RCX: 00007fcb8118f6c9 [ 360.598013][T11197] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcb813e6098 [ 360.598029][T11197] RBP: 00007fcb813e6090 R08: 0000000000000000 R09: 0000000000000000 [ 360.598045][T11197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.598060][T11197] R13: 00007fcb813e6128 R14: 00007ffc323b8cc0 R15: 00007ffc323b8da8 [ 360.598097][T11197] [ 360.850315][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 360.899366][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 361.219453][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 361.219489][ T5829] Bluetooth: hci2: command 0x0406 tx timeout [ 361.565391][T11208] vcan0: tx drop: invalid sa for name 0x00000000000000fd [ 361.639585][T11217] ptrace attach of "./syz-executor exec"[5827] was attempted by ""[11217] [ 362.783636][T11230] size and base must be multiples of 4 kiB [ 362.789838][T11230] CPU: 0 UID: 0 PID: 11230 Comm: syz.0.1254 Not tainted syzkaller #0 PREEMPT(full) [ 362.789872][T11230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 362.789888][T11230] Call Trace: [ 362.789896][T11230] [ 362.789907][T11230] dump_stack_lvl+0x16c/0x1f0 [ 362.789942][T11230] mtrr_del+0xd1/0x110 [ 362.789978][T11230] mtrr_ioctl+0x922/0xcf0 [ 362.790015][T11230] ? __pfx_mtrr_ioctl+0x10/0x10 [ 362.790057][T11230] ? find_held_lock+0x2b/0x80 [ 362.790094][T11230] ? __fget_files+0x20e/0x3c0 [ 362.790122][T11230] ? __pfx_mtrr_ioctl+0x10/0x10 [ 362.790157][T11230] proc_reg_unlocked_ioctl+0x229/0x320 [ 362.790201][T11230] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 362.790241][T11230] __x64_sys_ioctl+0x18e/0x210 [ 362.790293][T11230] do_syscall_64+0xcd/0xfa0 [ 362.790327][T11230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.790354][T11230] RIP: 0033:0x7f92d1f8f6c9 [ 362.790376][T11230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.790402][T11230] RSP: 002b:00007f92d2e0c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 362.790427][T11230] RAX: ffffffffffffffda RBX: 00007f92d21e6090 RCX: 00007f92d1f8f6c9 [ 362.790445][T11230] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000003 [ 362.790461][T11230] RBP: 00007f92d2011f91 R08: 0000000000000000 R09: 0000000000000000 [ 362.790477][T11230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.790493][T11230] R13: 00007f92d21e6128 R14: 00007f92d21e6090 R15: 00007fff2d39ef08 [ 362.790530][T11230] [ 362.790745][T11235] vcan0: tx drop: invalid sa for name 0x00000000000000fd [ 363.116118][T11238] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 363.126020][T11238] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 363.823053][T11250] netlink: 504 bytes leftover after parsing attributes in process `syz.0.1260'. [ 364.258425][T11255] netlink: 504 bytes leftover after parsing attributes in process `syz.2.1261'. [ 364.688288][T11253] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 364.709849][T11253] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 364.726122][T11253] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 364.774485][T11253] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 365.001912][T11279] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 365.498316][T11284] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 365.623561][T11284] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 366.100532][ T5829] Bluetooth: hci0: command 0x0406 tx timeout [ 366.241101][T11294] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1269'. [ 366.745059][ T5829] Bluetooth: hci2: command 0x0406 tx timeout [ 366.745095][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 366.819360][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 367.696586][T11309] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1272'. [ 367.806177][T11319] FAULT_INJECTION: forcing a failure. [ 367.806177][T11319] name failslab, interval 1, probability 0, space 0, times 0 [ 367.823997][T11319] CPU: 0 UID: 0 PID: 11319 Comm: syz.0.1273 Not tainted syzkaller #0 PREEMPT(full) [ 367.824033][T11319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 367.824045][T11319] Call Trace: [ 367.824051][T11319] [ 367.824056][T11319] dump_stack_lvl+0x16c/0x1f0 [ 367.824078][T11319] should_fail_ex+0x512/0x640 [ 367.824100][T11319] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 367.824117][T11319] should_failslab+0xc2/0x120 [ 367.824136][T11319] kmem_cache_alloc_noprof+0x75/0x6e0 [ 367.824149][T11319] ? taskstats_exit+0x654/0xbe0 [ 367.824166][T11319] ? taskstats_exit+0x654/0xbe0 [ 367.824177][T11319] ? acct_update_integrals+0x2ce/0x4a0 [ 367.824189][T11319] taskstats_exit+0x654/0xbe0 [ 367.824203][T11319] ? __pfx_taskstats_exit+0x10/0x10 [ 367.824232][T11319] ? exit_signals+0x38e/0xb40 [ 367.824250][T11319] do_exit+0x5dc/0x2bf0 [ 367.824273][T11319] ? __pfx_do_exit+0x10/0x10 [ 367.824291][T11319] ? do_raw_spin_lock+0x12c/0x2b0 [ 367.824312][T11319] ? find_held_lock+0x2b/0x80 [ 367.824329][T11319] do_group_exit+0xd3/0x2a0 [ 367.824356][T11319] get_signal+0x2671/0x26d0 [ 367.824382][T11319] ? __pfx_get_signal+0x10/0x10 [ 367.824397][T11319] ? do_futex+0x122/0x350 [ 367.824416][T11319] ? __pfx_do_futex+0x10/0x10 [ 367.824439][T11319] arch_do_signal_or_restart+0x8f/0x790 [ 367.824459][T11319] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 367.824482][T11319] ? xfd_validate_state+0x61/0x180 [ 367.824501][T11319] ? __pfx___do_sys_close_range+0x10/0x10 [ 367.824522][T11319] exit_to_user_mode_loop+0x85/0x130 [ 367.824549][T11319] do_syscall_64+0x426/0xfa0 [ 367.824567][T11319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.824581][T11319] RIP: 0033:0x7f92d1f8f6c9 [ 367.824596][T11319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.824609][T11319] RSP: 002b:00007f92d2e0c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 367.824624][T11319] RAX: fffffffffffffe00 RBX: 00007f92d21e6098 RCX: 00007f92d1f8f6c9 [ 367.824633][T11319] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f92d21e6098 [ 367.824641][T11319] RBP: 00007f92d21e6090 R08: 0000000000000000 R09: 0000000000000000 [ 367.824650][T11319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.824658][T11319] R13: 00007f92d21e6128 R14: 00007fff2d39ee20 R15: 00007fff2d39ef08 [ 367.824676][T11319] [ 368.065007][ C0] vkms_vblank_simulate: vblank timer overrun [ 369.309617][T11343] ptrace attach of "./syz-executor exec"[5832] was attempted by ""[11343] [ 369.481730][T11344] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1281'. [ 369.522203][T11348] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1281'. [ 369.583688][T11340] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 370.083853][T11349] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 370.391870][T11359] size and base must be multiples of 4 kiB [ 370.397818][T11359] CPU: 0 UID: 0 PID: 11359 Comm: syz.0.1283 Not tainted syzkaller #0 PREEMPT(full) [ 370.397837][T11359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 370.397847][T11359] Call Trace: [ 370.397852][T11359] [ 370.397858][T11359] dump_stack_lvl+0x16c/0x1f0 [ 370.397879][T11359] mtrr_del+0xd1/0x110 [ 370.397900][T11359] mtrr_ioctl+0x922/0xcf0 [ 370.397920][T11359] ? __pfx_mtrr_ioctl+0x10/0x10 [ 370.397942][T11359] ? find_held_lock+0x2b/0x80 [ 370.397962][T11359] ? __fget_files+0x20e/0x3c0 [ 370.397977][T11359] ? __pfx_mtrr_ioctl+0x10/0x10 [ 370.397995][T11359] proc_reg_unlocked_ioctl+0x229/0x320 [ 370.398013][T11359] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 370.398033][T11359] __x64_sys_ioctl+0x18e/0x210 [ 370.398054][T11359] do_syscall_64+0xcd/0xfa0 [ 370.398071][T11359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.398085][T11359] RIP: 0033:0x7f92d1f8f6c9 [ 370.398096][T11359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.398110][T11359] RSP: 002b:00007f92d2e0c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 370.398124][T11359] RAX: ffffffffffffffda RBX: 00007f92d21e6090 RCX: 00007f92d1f8f6c9 [ 370.398135][T11359] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000003 [ 370.398144][T11359] RBP: 00007f92d2011f91 R08: 0000000000000000 R09: 0000000000000000 [ 370.398153][T11359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.398162][T11359] R13: 00007f92d21e6128 R14: 00007f92d21e6090 R15: 00007fff2d39ef08 [ 370.398181][T11359] [ 371.111278][T11368] ptrace attach of "./syz-executor exec"[5834] was attempted by ""[11368] [ 371.372041][T11376] FAULT_INJECTION: forcing a failure. [ 371.372041][T11376] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.449343][T11376] CPU: 1 UID: 0 PID: 11376 Comm: syz.0.1285 Not tainted syzkaller #0 PREEMPT(full) [ 371.449380][T11376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 371.449398][T11376] Call Trace: [ 371.449407][T11376] [ 371.449416][T11376] dump_stack_lvl+0x16c/0x1f0 [ 371.449450][T11376] should_fail_ex+0x512/0x640 [ 371.449493][T11376] _copy_from_user+0x2e/0xd0 [ 371.449533][T11376] snd_pcm_oss_write2+0x1c2/0x410 [ 371.449571][T11376] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 371.449615][T11376] snd_pcm_oss_write+0x710/0xa10 [ 371.449652][T11376] ? security_file_permission+0x71/0x210 [ 371.449686][T11376] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 371.449720][T11376] vfs_write+0x2a0/0x11d0 [ 371.449756][T11376] ? __pfx_vfs_write+0x10/0x10 [ 371.449780][T11376] ? find_held_lock+0x2b/0x80 [ 371.449808][T11376] ? __fget_files+0x204/0x3c0 [ 371.449839][T11376] ? __fget_files+0x20e/0x3c0 [ 371.449875][T11376] ksys_write+0x12a/0x250 [ 371.449900][T11376] ? __pfx_ksys_write+0x10/0x10 [ 371.449935][T11376] do_syscall_64+0xcd/0xfa0 [ 371.449965][T11376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.449992][T11376] RIP: 0033:0x7f92d1f8f6c9 [ 371.450012][T11376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.450037][T11376] RSP: 002b:00007f92d2deb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 371.450061][T11376] RAX: ffffffffffffffda RBX: 00007f92d21e6180 RCX: 00007f92d1f8f6c9 [ 371.450079][T11376] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 371.450094][T11376] RBP: 00007f92d2deb090 R08: 0000000000000000 R09: 0000000000000000 [ 371.450109][T11376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.450123][T11376] R13: 00007f92d21e6218 R14: 00007f92d21e6180 R15: 00007fff2d39ef08 [ 371.450168][T11376] [ 371.570330][T11364] FAULT_INJECTION: forcing a failure. [ 371.570330][T11364] name failslab, interval 1, probability 0, space 0, times 0 [ 371.965673][T11364] CPU: 0 UID: 0 PID: 11364 Comm: syz.1.1284 Not tainted syzkaller #0 PREEMPT(full) [ 371.965706][T11364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 371.965717][T11364] Call Trace: [ 371.965724][T11364] [ 371.965731][T11364] dump_stack_lvl+0x16c/0x1f0 [ 371.965757][T11364] should_fail_ex+0x512/0x640 [ 371.965784][T11364] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 371.965806][T11364] should_failslab+0xc2/0x120 [ 371.965840][T11364] kmem_cache_alloc_noprof+0x75/0x6e0 [ 371.965859][T11364] ? taskstats_exit+0x654/0xbe0 [ 371.965881][T11364] ? taskstats_exit+0x654/0xbe0 [ 371.965897][T11364] ? acct_update_integrals+0x2ce/0x4a0 [ 371.965918][T11364] taskstats_exit+0x654/0xbe0 [ 371.965939][T11364] ? __pfx_taskstats_exit+0x10/0x10 [ 371.965976][T11364] ? exit_signals+0x38e/0xb40 [ 371.966005][T11364] do_exit+0x5dc/0x2bf0 [ 371.966040][T11364] ? __pfx_do_exit+0x10/0x10 [ 371.966070][T11364] ? do_raw_spin_lock+0x12c/0x2b0 [ 371.966103][T11364] ? find_held_lock+0x2b/0x80 [ 371.966132][T11364] do_group_exit+0xd3/0x2a0 [ 371.966167][T11364] get_signal+0x2671/0x26d0 [ 371.966204][T11364] ? __pfx_get_signal+0x10/0x10 [ 371.966231][T11364] ? do_futex+0x122/0x350 [ 371.966261][T11364] ? __pfx_do_futex+0x10/0x10 [ 371.966294][T11364] arch_do_signal_or_restart+0x8f/0x790 [ 371.966324][T11364] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 371.966360][T11364] ? __pfx___do_sys_close_range+0x10/0x10 [ 371.966396][T11364] exit_to_user_mode_loop+0x85/0x130 [ 371.966434][T11364] do_syscall_64+0x426/0xfa0 [ 371.966466][T11364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.966492][T11364] RIP: 0033:0x7fcfbd98f6c9 [ 371.966511][T11364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.966537][T11364] RSP: 002b:00007fcfbe8550e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 371.966562][T11364] RAX: fffffffffffffe00 RBX: 00007fcfbdbe6098 RCX: 00007fcfbd98f6c9 [ 371.966581][T11364] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcfbdbe6098 [ 371.966596][T11364] RBP: 00007fcfbdbe6090 R08: 0000000000000000 R09: 0000000000000000 [ 371.966612][T11364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 371.966628][T11364] R13: 00007fcfbdbe6128 R14: 00007ffc0fd93010 R15: 00007ffc0fd930f8 [ 371.966664][T11364] [ 373.013009][T11399] ptrace attach of "./syz-executor exec"[5833] was attempted by ""[11399] [ 373.730757][T11408] ptrace attach of "./syz-executor exec"[5832] was attempted by ""[11408] [ 374.057842][T11425] FAULT_INJECTION: forcing a failure. [ 374.057842][T11425] name fail_futex, interval 1, probability 0, space 0, times 0 [ 374.073060][T11425] CPU: 1 UID: 0 PID: 11425 Comm: syz.1.1299 Not tainted syzkaller #0 PREEMPT(full) [ 374.073096][T11425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 374.073111][T11425] Call Trace: [ 374.073120][T11425] [ 374.073129][T11425] dump_stack_lvl+0x16c/0x1f0 [ 374.073162][T11425] should_fail_ex+0x512/0x640 [ 374.073205][T11425] get_futex_key+0x1d0/0x1560 [ 374.073242][T11425] ? __pfx_get_futex_key+0x10/0x10 [ 374.073274][T11425] ? __mutex_trylock_common+0xe9/0x250 [ 374.073319][T11425] futex_wake+0xea/0x530 [ 374.073361][T11425] ? __pfx_futex_wake+0x10/0x10 [ 374.073395][T11425] ? __lock_acquire+0xb8a/0x1c90 [ 374.073443][T11425] do_futex+0x1e3/0x350 [ 374.073477][T11425] ? __pfx_do_futex+0x10/0x10 [ 374.073508][T11425] ? __might_fault+0xe3/0x190 [ 374.073544][T11425] mm_release+0x24e/0x300 [ 374.073574][T11425] do_exit+0x68e/0x2bf0 [ 374.073615][T11425] ? __pfx_do_exit+0x10/0x10 [ 374.073649][T11425] ? do_raw_spin_lock+0x12c/0x2b0 [ 374.073686][T11425] ? find_held_lock+0x2b/0x80 [ 374.073718][T11425] do_group_exit+0xd3/0x2a0 [ 374.073755][T11425] get_signal+0x2671/0x26d0 [ 374.073784][T11425] ? trace_sched_exit_tp+0xd1/0x120 [ 374.073841][T11425] ? __pfx_get_signal+0x10/0x10 [ 374.073870][T11425] ? do_futex+0x122/0x350 [ 374.073910][T11425] arch_do_signal_or_restart+0x8f/0x790 [ 374.073944][T11425] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 374.073986][T11425] ? xfd_validate_state+0x61/0x180 [ 374.074033][T11425] exit_to_user_mode_loop+0x85/0x130 [ 374.074072][T11425] do_syscall_64+0x426/0xfa0 [ 374.074103][T11425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.074129][T11425] RIP: 0033:0x7fcfbd98f6c9 [ 374.074150][T11425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.074175][T11425] RSP: 002b:00007fcfbe8550e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 374.074200][T11425] RAX: fffffffffffffe00 RBX: 00007fcfbdbe6098 RCX: 00007fcfbd98f6c9 [ 374.074217][T11425] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcfbdbe6098 [ 374.074233][T11425] RBP: 00007fcfbdbe6090 R08: 0000000000000000 R09: 0000000000000000 [ 374.074249][T11425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.074264][T11425] R13: 00007fcfbdbe6128 R14: 00007ffc0fd93010 R15: 00007ffc0fd930f8 [ 374.074301][T11425] [ 374.764331][T11444] ptrace attach of "./syz-executor exec"[5834] was attempted by ""[11444] [ 375.391143][T11449] ptrace attach of "./syz-executor exec"[5833] was attempted by ""[11449] [ 376.674608][T11488] ptrace attach of "./syz-executor exec"[5833] was attempted by ""[11488] [ 377.204363][T11501] ptrace attach of "./syz-executor exec"[5827] was attempted by ""[11501] [ 377.237067][ T5841] Bluetooth: hci1: unexpected event 0x35 length: 13 > 6 [ 377.244933][ T5841] block nbd0: Receive control failed (result -107) [ 377.339453][T11491] nbd0: detected capacity change from 0 to 1073741824 [ 377.373391][ T5830] [ 377.375780][ T5830] ====================================================== [ 377.382795][ T5830] WARNING: possible circular locking dependency detected [ 377.389821][ T5830] syzkaller #0 Not tainted [ 377.394267][ T5830] ------------------------------------------------------ [ 377.401287][ T5830] udevd/5830 is trying to acquire lock: [ 377.406832][ T5830] ffff888078a04670 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x423/0x12d0 [ 377.416007][ T5830] [ 377.416007][ T5830] but task is already holding lock: [ 377.423375][ T5830] ffff8880260d0178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xbd/0x12d0 [ 377.431947][ T5830] [ 377.431947][ T5830] which lock already depends on the new lock. [ 377.431947][ T5830] [ 377.442459][ T5830] [ 377.442459][ T5830] the existing dependency chain (in reverse order) is: [ 377.451464][ T5830] [ 377.451464][ T5830] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 377.458674][ T5830] __mutex_lock+0x193/0x1060 [ 377.463787][ T5830] nbd_queue_rq+0xbd/0x12d0 [ 377.468816][ T5830] blk_mq_dispatch_rq_list+0x416/0x1e20 [ 377.474881][ T5830] __blk_mq_sched_dispatch_requests+0xcb7/0x15f0 [ 377.481728][ T5830] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 377.488222][ T5830] blk_mq_run_hw_queue+0x239/0x670 [ 377.493862][ T5830] blk_mq_dispatch_list+0x514/0x1310 [ 377.499664][ T5830] blk_mq_flush_plug_list+0x130/0x600 [ 377.505727][ T5830] __blk_flush_plug+0x2c4/0x4b0 [ 377.511100][ T5830] __submit_bio+0x545/0x690 [ 377.516149][ T5830] submit_bio_noacct_nocheck+0x53d/0xc10 [ 377.522390][ T5830] submit_bio_noacct+0x5bd/0x1f60 [ 377.527937][ T5830] block_read_full_folio+0x4db/0x850 [ 377.533745][ T5830] filemap_read_folio+0xc8/0x2a0 [ 377.539317][ T5830] do_read_cache_folio+0x263/0x5c0 [ 377.544964][ T5830] read_part_sector+0xd4/0x370 [ 377.550268][ T5830] adfspart_check_ICS+0x93/0x940 [ 377.555727][ T5830] bdev_disk_changed+0x723/0x1520 [ 377.561286][ T5830] blkdev_get_whole+0x187/0x290 [ 377.566670][ T5830] bdev_open+0x2c7/0xe40 [ 377.571428][ T5830] blkdev_open+0x34e/0x4f0 [ 377.576374][ T5830] do_dentry_open+0x982/0x1530 [ 377.581664][ T5830] vfs_open+0x82/0x3f0 [ 377.586431][ T5830] path_openat+0x1de4/0x2cb0 [ 377.591623][ T5830] do_filp_open+0x20b/0x470 [ 377.596652][ T5830] do_sys_openat2+0x11b/0x1d0 [ 377.601870][ T5830] __x64_sys_openat+0x174/0x210 [ 377.607261][ T5830] do_syscall_64+0xcd/0xfa0 [ 377.612289][ T5830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.618705][ T5830] [ 377.618705][ T5830] -> #5 (set->srcu){.+.+}-{0:0}: [ 377.625831][ T5830] __synchronize_srcu+0xa1/0x290 [ 377.631354][ T5830] blk_mq_quiesce_queue+0x149/0x1b0 [ 377.637090][ T5830] elevator_switch+0x17d/0x810 [ 377.642380][ T5830] elevator_change+0x391/0x5d0 [ 377.647672][ T5830] elevator_set_default+0x2e9/0x380 [ 377.653379][ T5830] blk_register_queue+0x384/0x4e0 [ 377.658942][ T5830] __add_disk+0x74a/0xf00 [ 377.663803][ T5830] add_disk_fwnode+0x13f/0x5d0 [ 377.669086][ T5830] nbd_dev_add+0x783/0xbb0 [ 377.674200][ T5830] nbd_init+0x1a2/0x3c0 [ 377.678880][ T5830] do_one_initcall+0x123/0x6e0 [ 377.684246][ T5830] kernel_init_freeable+0x5c8/0x920 [ 377.689991][ T5830] kernel_init+0x1c/0x2b0 [ 377.694952][ T5830] ret_from_fork+0x675/0x7d0 [ 377.700083][ T5830] ret_from_fork_asm+0x1a/0x30 [ 377.705394][ T5830] [ 377.705394][ T5830] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 377.713220][ T5830] __mutex_lock+0x193/0x1060 [ 377.718338][ T5830] queue_requests_store+0x3a7/0x670 [ 377.724063][ T5830] queue_attr_store+0x26b/0x310 [ 377.729441][ T5830] sysfs_kf_write+0xf2/0x150 [ 377.734566][ T5830] kernfs_fop_write_iter+0x3af/0x570 [ 377.740397][ T5830] vfs_write+0x7d3/0x11d0 [ 377.745255][ T5830] ksys_write+0x12a/0x250 [ 377.750114][ T5830] do_syscall_64+0xcd/0xfa0 [ 377.755141][ T5830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.761552][ T5830] [ 377.761552][ T5830] -> #3 (&q->q_usage_counter(io)#63){++++}-{0:0}: [ 377.770255][ T5830] blk_alloc_queue+0x619/0x760 [ 377.775618][ T5830] blk_mq_alloc_queue+0x172/0x280 [ 377.781162][ T5830] __blk_mq_alloc_disk+0x29/0x120 [ 377.786706][ T5830] nbd_dev_add+0x492/0xbb0 [ 377.791731][ T5830] nbd_init+0x1a2/0x3c0 [ 377.796409][ T5830] do_one_initcall+0x123/0x6e0 [ 377.801695][ T5830] kernel_init_freeable+0x5c8/0x920 [ 377.807424][ T5830] kernel_init+0x1c/0x2b0 [ 377.812274][ T5830] ret_from_fork+0x675/0x7d0 [ 377.817393][ T5830] ret_from_fork_asm+0x1a/0x30 [ 377.822680][ T5830] [ 377.822680][ T5830] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 377.829890][ T5830] fs_reclaim_acquire+0x102/0x150 [ 377.835448][ T5830] kmem_cache_alloc_node_noprof+0x5e/0x770 [ 377.841860][ T5830] __alloc_skb+0x2b2/0x380 [ 377.846804][ T5830] tcp_stream_alloc_skb+0x34/0x560 [ 377.852437][ T5830] tcp_sendmsg_locked+0x12d9/0x42e0 [ 377.858242][ T5830] tcp_sendmsg+0x2e/0x50 [ 377.863039][ T5830] inet_sendmsg+0xb9/0x140 [ 377.867978][ T5830] sock_write_iter+0x509/0x610 [ 377.873262][ T5830] vfs_write+0x7d3/0x11d0 [ 377.878195][ T5830] ksys_write+0x1f8/0x250 [ 377.883044][ T5830] do_syscall_64+0xcd/0xfa0 [ 377.888066][ T5830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.894478][ T5830] [ 377.894478][ T5830] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 377.902119][ T5830] lock_sock_nested+0x41/0xf0 [ 377.907311][ T5830] inet_shutdown+0x67/0x440 [ 377.912347][ T5830] nbd_mark_nsock_dead+0xae/0x5d0 [ 377.917899][ T5830] recv_work+0x671/0xa80 [ 377.922664][ T5830] process_one_work+0x9cf/0x1b70 [ 377.928132][ T5830] worker_thread+0x6c8/0xf10 [ 377.933254][ T5830] kthread+0x3c5/0x780 [ 377.937856][ T5830] ret_from_fork+0x675/0x7d0 [ 377.942971][ T5830] ret_from_fork_asm+0x1a/0x30 [ 377.948259][ T5830] [ 377.948259][ T5830] -> #0 (&nsock->tx_lock){+.+.}-{4:4}: [ 377.955902][ T5830] __lock_acquire+0x126f/0x1c90 [ 377.961369][ T5830] lock_acquire+0x179/0x350 [ 377.966398][ T5830] __mutex_lock+0x193/0x1060 [ 377.971508][ T5830] nbd_queue_rq+0x423/0x12d0 [ 377.976627][ T5830] blk_mq_dispatch_rq_list+0x416/0x1e20 [ 377.982691][ T5830] __blk_mq_sched_dispatch_requests+0xcb7/0x15f0 [ 377.989540][ T5830] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 377.996085][ T5830] blk_mq_run_hw_queue+0x239/0x670 [ 378.001731][ T5830] blk_mq_dispatch_list+0x514/0x1310 [ 378.007542][ T5830] blk_mq_flush_plug_list+0x130/0x600 [ 378.013435][ T5830] __blk_flush_plug+0x2c4/0x4b0 [ 378.018895][ T5830] __submit_bio+0x545/0x690 [ 378.023915][ T5830] submit_bio_noacct_nocheck+0x53d/0xc10 [ 378.030069][ T5830] submit_bio_noacct+0x5bd/0x1f60 [ 378.035615][ T5830] block_read_full_folio+0x4db/0x850 [ 378.041425][ T5830] filemap_read_folio+0xc8/0x2a0 [ 378.047052][ T5830] do_read_cache_folio+0x263/0x5c0 [ 378.052680][ T5830] read_part_sector+0xd4/0x370 [ 378.057968][ T5830] adfspart_check_ICS+0x93/0x940 [ 378.063418][ T5830] bdev_disk_changed+0x723/0x1520 [ 378.068967][ T5830] blkdev_get_whole+0x187/0x290 [ 378.074343][ T5830] bdev_open+0x2c7/0xe40 [ 378.079125][ T5830] blkdev_open+0x34e/0x4f0 [ 378.084059][ T5830] do_dentry_open+0x982/0x1530 [ 378.089351][ T5830] vfs_open+0x82/0x3f0 [ 378.093958][ T5830] path_openat+0x1de4/0x2cb0 [ 378.099079][ T5830] do_filp_open+0x20b/0x470 [ 378.104112][ T5830] do_sys_openat2+0x11b/0x1d0 [ 378.109318][ T5830] __x64_sys_openat+0x174/0x210 [ 378.114691][ T5830] do_syscall_64+0xcd/0xfa0 [ 378.119713][ T5830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.126123][ T5830] [ 378.126123][ T5830] other info that might help us debug this: [ 378.126123][ T5830] [ 378.136341][ T5830] Chain exists of: [ 378.136341][ T5830] &nsock->tx_lock --> set->srcu --> &cmd->lock [ 378.136341][ T5830] [ 378.148433][ T5830] Possible unsafe locking scenario: [ 378.148433][ T5830] [ 378.155884][ T5830] CPU0 CPU1 [ 378.161245][ T5830] ---- ---- [ 378.166638][ T5830] lock(&cmd->lock); [ 378.170618][ T5830] lock(set->srcu); [ 378.177115][ T5830] lock(&cmd->lock); [ 378.183610][ T5830] lock(&nsock->tx_lock); [ 378.188106][ T5830] [ 378.188106][ T5830] *** DEADLOCK *** [ 378.188106][ T5830] [ 378.196237][ T5830] 3 locks held by udevd/5830: [ 378.200901][ T5830] #0: ffff888026050358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 378.210220][ T5830] #1: ffff888142fced10 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x22b/0x670 [ 378.219721][ T5830] #2: ffff8880260d0178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xbd/0x12d0 [ 378.228696][ T5830] [ 378.228696][ T5830] stack backtrace: [ 378.234584][ T5830] CPU: 1 UID: 0 PID: 5830 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 378.234612][ T5830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 378.234625][ T5830] Call Trace: [ 378.234632][ T5830] [ 378.234641][ T5830] dump_stack_lvl+0x116/0x1f0 [ 378.234668][ T5830] print_circular_bug+0x275/0x350 [ 378.234697][ T5830] check_noncircular+0x14c/0x170 [ 378.234728][ T5830] __lock_acquire+0x126f/0x1c90 [ 378.234761][ T5830] lock_acquire+0x179/0x350 [ 378.234788][ T5830] ? nbd_queue_rq+0x423/0x12d0 [ 378.234819][ T5830] ? __pfx___might_resched+0x10/0x10 [ 378.234844][ T5830] ? nbd_queue_rq+0x423/0x12d0 [ 378.234872][ T5830] __mutex_lock+0x193/0x1060 [ 378.234898][ T5830] ? nbd_queue_rq+0x423/0x12d0 [ 378.234927][ T5830] ? rcu_is_watching+0x12/0xc0 [ 378.234950][ T5830] ? lock_release+0x201/0x2f0 [ 378.234977][ T5830] ? __pfx___mutex_lock+0x10/0x10 [ 378.235002][ T5830] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 378.235029][ T5830] ? kernel_text_address+0x8d/0x100 [ 378.235064][ T5830] ? arch_stack_walk+0xa6/0x100 [ 378.235094][ T5830] ? nbd_queue_rq+0x423/0x12d0 [ 378.235122][ T5830] nbd_queue_rq+0x423/0x12d0 [ 378.235154][ T5830] ? stack_trace_save+0x8e/0xc0 [ 378.235177][ T5830] ? __pfx_stack_trace_save+0x10/0x10 [ 378.235205][ T5830] ? __pfx_nbd_queue_rq+0x10/0x10 [ 378.235235][ T5830] ? add_lock_to_list+0x9d/0x130 [ 378.235259][ T5830] ? lockdep_unlock+0x64/0xe0 [ 378.235280][ T5830] ? __lock_acquire+0x1053/0x1c90 [ 378.235309][ T5830] blk_mq_dispatch_rq_list+0x416/0x1e20 [ 378.235334][ T5830] ? sbitmap_find_bit+0x460/0x6f0 [ 378.235365][ T5830] ? sbitmap_get+0x1e5/0x360 [ 378.235388][ T5830] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 378.235413][ T5830] ? __blk_mq_alloc_driver_tag+0x4f7/0x7a0 [ 378.235439][ T5830] __blk_mq_sched_dispatch_requests+0xcb7/0x15f0 [ 378.235466][ T5830] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 378.235497][ T5830] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 378.235520][ T5830] blk_mq_run_hw_queue+0x239/0x670 [ 378.235553][ T5830] ? blk_mq_run_hw_queue+0x22b/0x670 [ 378.235586][ T5830] blk_mq_dispatch_list+0x514/0x1310 [ 378.235612][ T5830] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 378.235636][ T5830] ? find_held_lock+0x2b/0x80 [ 378.235657][ T5830] ? blk_add_trace_plug+0xf5/0x290 [ 378.235685][ T5830] blk_mq_flush_plug_list+0x130/0x600 [ 378.235709][ T5830] ? trace_block_plug+0x17f/0x200 [ 378.235740][ T5830] ? blk_add_rq_to_plug+0x30a/0x540 [ 378.235763][ T5830] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 378.235788][ T5830] ? blk_mq_submit_bio+0x9e6/0x3380 [ 378.235814][ T5830] __blk_flush_plug+0x2c4/0x4b0 [ 378.235838][ T5830] ? __pfx___blk_flush_plug+0x10/0x10 [ 378.235859][ T5830] ? __lock_acquire+0x622/0x1c90 [ 378.235889][ T5830] __submit_bio+0x545/0x690 [ 378.235910][ T5830] ? __pfx___submit_bio+0x10/0x10 [ 378.235938][ T5830] ? submit_bio_noacct_nocheck+0x53d/0xc10 [ 378.235960][ T5830] submit_bio_noacct_nocheck+0x53d/0xc10 [ 378.235984][ T5830] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 378.236009][ T5830] ? __pfx___might_resched+0x10/0x10 [ 378.236033][ T5830] submit_bio_noacct+0x5bd/0x1f60 [ 378.236058][ T5830] block_read_full_folio+0x4db/0x850 [ 378.236093][ T5830] ? __pfx_blkdev_get_block+0x10/0x10 [ 378.236118][ T5830] ? __pfx_blkdev_read_folio+0x10/0x10 [ 378.236141][ T5830] filemap_read_folio+0xc8/0x2a0 [ 378.236161][ T5830] ? __pfx_filemap_read_folio+0x10/0x10 [ 378.236182][ T5830] ? __filemap_get_folio+0x32b/0xc30 [ 378.236208][ T5830] do_read_cache_folio+0x263/0x5c0 [ 378.236231][ T5830] ? __pfx_blkdev_read_folio+0x10/0x10 [ 378.236255][ T5830] read_part_sector+0xd4/0x370 [ 378.236289][ T5830] adfspart_check_ICS+0x93/0x940 [ 378.236309][ T5830] ? snprintf+0xc7/0x100 [ 378.236329][ T5830] ? __pfx_snprintf+0x10/0x10 [ 378.236350][ T5830] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 378.236374][ T5830] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 378.236395][ T5830] bdev_disk_changed+0x723/0x1520 [ 378.236431][ T5830] ? __pfx_bdev_disk_changed+0x10/0x10 [ 378.236467][ T5830] blkdev_get_whole+0x187/0x290 [ 378.236501][ T5830] bdev_open+0x2c7/0xe40 [ 378.236524][ T5830] blkdev_open+0x34e/0x4f0 [ 378.236548][ T5830] do_dentry_open+0x982/0x1530 [ 378.236573][ T5830] ? __pfx_blkdev_open+0x10/0x10 [ 378.236599][ T5830] vfs_open+0x82/0x3f0 [ 378.236629][ T5830] path_openat+0x1de4/0x2cb0 [ 378.236657][ T5830] ? __pfx_path_openat+0x10/0x10 [ 378.236681][ T5830] ? __lock_acquire+0xb8a/0x1c90 [ 378.236709][ T5830] do_filp_open+0x20b/0x470 [ 378.236732][ T5830] ? __pfx_do_filp_open+0x10/0x10 [ 378.236764][ T5830] ? alloc_fd+0x471/0x7d0 [ 378.236788][ T5830] do_sys_openat2+0x11b/0x1d0 [ 378.236818][ T5830] ? __pfx_do_sys_openat2+0x10/0x10 [ 378.236849][ T5830] ? __sys_recvmsg+0x189/0x220 [ 378.236871][ T5830] ? __pfx___sys_recvmsg+0x10/0x10 [ 378.236893][ T5830] __x64_sys_openat+0x174/0x210 [ 378.236925][ T5830] ? __pfx___x64_sys_openat+0x10/0x10 [ 378.236961][ T5830] do_syscall_64+0xcd/0xfa0 [ 378.236985][ T5830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.237009][ T5830] RIP: 0033:0x7fc9034a7407 [ 378.237026][ T5830] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 378.237047][ T5830] RSP: 002b:00007ffd91691210 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 378.237068][ T5830] RAX: ffffffffffffffda RBX: 00007fc903c0e880 RCX: 00007fc9034a7407 [ 378.237090][ T5830] RDX: 00000000000a0800 RSI: 000055be634278f0 RDI: ffffffffffffff9c [ 378.237105][ T5830] RBP: 000055be63413910 R08: 0000000000000000 R09: 0000000000000000 [ 378.237118][ T5830] R10: 0000000000000000 R11: 0000000000000202 R12: 000055be6343ba40 [ 378.237132][ T5830] R13: 000055be6342b410 R14: 0000000000000000 R15: 000055be6343ba40 [ 378.237153][ T5830] [ 378.816966][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.823395][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.839860][ T5830] block nbd0: Dead connection, failed to find a fallback [ 378.847990][ T5830] block nbd0: shutting down sockets [ 378.856261][ T5830] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 378.865436][ T5830] Buffer I/O error on dev nbd0, logical block 0, async page read [ 378.877461][ T5830] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 378.886588][ T5830] Buffer I/O error on dev nbd0, logical block 0, async page read [ 378.894829][ T5830] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 378.903962][ T5830] Buffer I/O error on dev nbd0, logical block 0, async page read [ 378.911891][ T5830] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 378.920983][ T5830] Buffer I/O error on dev nbd0, logical block 0, async page read [ 378.928858][ T5830] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 378.938002][ T5830] Buffer I/O error on dev nbd0, logical block 0, async page read [ 378.946738][ T5830] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 378.957935][ T5830] Buffer I/O error on dev nbd0, logical block 0, async page read [ 378.965879][ T5830] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 378.975047][ T5830] Buffer I/O error on dev nbd0, logical block 0, async page read [ 378.983267][ T5830] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 378.992373][ T5830] Buffer I/O error on dev nbd0, logical block 0, async page read [ 379.000460][ T5830] ldm_validate_partition_table(): Disk read failed. [ 379.007160][ T5830] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 379.016287][ T5830] Buffer I/O error on dev nbd0, logical block 0, async page read [ 379.024394][ T5830] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 379.033547][ T5830] Buffer I/O error on dev nbd0, logical block 0, async page read [ 379.041593][ T5830] Dev nbd0: unable to read RDB block 0 [ 379.047556][ T5830] nbd0: unable to read partition table [ 379.064315][ T5830] ldm_validate_partition_table(): Disk read failed. [ 379.071448][ T5830] Dev nbd0: unable to read RDB block 0 [ 379.077449][ T5830] nbd0: unable to read partition table [ 379.242510][T11493] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1318'.