last executing test programs: 21.029446163s ago: executing program 0 (id=1084): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x382, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x82001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) madvise$auto(0x0, 0x8, 0x200) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mprotect$auto(0x200000000000, 0x806121, 0x8) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x13, &(0x7f00000001c0), 0x2) ioctl$auto_TUNGETVNETHDRSZ2(0xffffffffffffffff, 0x800454d7, 0x0) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000003e40), 0x400, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000003e80)={{0x0, 0x7f, 0x938, 0x4, 0xf9a}, 0x0, 0x20400000000000, "81eaaeb421c1ea18e8758bd4845baf6f22d2878af1a124891ecb3fdcff09c3ef"}) madvise$auto(0x0, 0xffffffffffff0005, 0x19) pipe2$auto(0x0, 0x80) 17.791954868s ago: executing program 0 (id=1095): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = eventfd$auto(0x4) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5) ioctl$auto(r1, 0x4008af20, r0) r2 = prctl$auto_PR_SCHED_CORE_SHARE_TO(0x7, 0x2, 0xffffffffffffffff, 0x8000000000000000, 0x200) read$auto_proc_pid_set_comm_operations_base(r2, 0x0, 0x0) 16.616533111s ago: executing program 0 (id=1099): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0xfffffffd, 0x1f, 0x940, 0x1ffde, 0x3, 0x6, 0x8000004, 0x9, 0x5, 0x0, 0x4, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x7069, 0x0, 0x0, 0x0, 0xc5f, 0x0, 0x3, [0x0, 0x0, 0x0, 0x8, 0x5, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x101, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x100000000, 0x0, 0x8000000000000001, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000000]}, 0x4b9, 0x7d) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x60000000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/conf/veth0_to_bond/drop_unicast_in_l2_multicast\x00', 0x101202, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r1 = open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0x538, 0x7f, 0x10000, 0x0, r1, 0x1000, "72254621e6dce5c668109becb368422a", 0x0, r1, 0x4, 0x6, 0x101, 0x1, r1}, 0x6f3) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0)) r2 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dvmrp0\x00'}) sendmsg$auto_ETHTOOL_MSG_COALESCE_GET(r2, 0x0, 0x2000c814) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r0) sendmsg$auto_NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, r3, 0x300, 0x70bd29, 0x25dbdbfe, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) close_range$auto(0x2, 0x8, 0x0) 15.830568781s ago: executing program 0 (id=1100): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/compaction_proactiveness\x00', 0xc0781, 0x0) mprotect$auto(0x200000000000, 0x806121, 0x4) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) pselect6$auto(0x8eb, 0x0, 0x0, 0x0, 0x0, 0x0) getdents$auto(r1, 0x0, 0x18) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_VLAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x4008090) 10.332469692s ago: executing program 0 (id=1112): statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000200) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, 0x0, 0x6a) connect$auto(0x3, 0x0, 0x54) write$auto(0xffffffffffffffff, 0x0, 0xa) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x9, 0x800, 0x0) io_uring_register$auto_IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, 0x0, 0x4c6) 9.167099712s ago: executing program 0 (id=1115): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20040884) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) r0 = socket(0x1e, 0x4, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x17ffffffffffffc, 0x400000004) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb2, 0x401, 0x8000) mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1) unshare$auto(0x40000080) mmap$auto(0xfffffffffffffffe, 0x400007, 0x10000, 0x100009b72, 0xffffffffffffffff, 0x8) sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x10) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_bond\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'dummy0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xfffffffffffffd45, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fedbdf250d0000007d6b5ea1", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="04000280"], 0x28}, 0x1, 0x0, 0x0, 0x4040050}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'}) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xffffffffffdffe00, &(0x7f0000000140)='+') socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r5, 0x10f, 0x87, 0x0, 0x14) 9.145372872s ago: executing program 2 (id=1116): mmap$auto(0x0, 0x5, 0x3, 0xeb9, 0xfffffffffffffffa, 0x0) mmap$auto(0x6, 0x80000000008, 0x7dfffffffffffffc, 0xacda, 0x5, 0x7) r0 = socket(0xa, 0x2, 0x106) r1 = socket(0x2, 0x3, 0x2) setsockopt$auto(0x3, 0x0, 0xc8, 0xfffffffffffffffc, 0x4) setsockopt$auto(0x3, 0x0, 0xc9, 0xfffffffffffffffc, 0xfd72) mmap$auto(0x0, 0xcf, 0x4, 0x110, r0, 0x80c0) prctl$auto(0x1000000003b, 0x403, 0x0, 0x100, 0x1) r2 = socket(0x11, 0x80003, 0x300) sysfs$auto(0x2, 0x2, 0x0) recvmmsg$auto(r2, 0x0, 0x8, 0x5, 0x0) mmap$auto(0x9, 0xffff, 0xdf, 0xf799, r1, 0x8000) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab83, 0x0) ioctl$auto_KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f0000000340)={0x4}) remap_file_pages$auto(0x6a24, 0x100000000, 0x0, 0xb73, 0x66a) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0xbfd, 0x3, 0xfffffffffffffffe, 0xfffffffffffffffa, 0x7ffe) socket(0x2, 0x1, 0xff) setitimer$auto(0x1, &(0x7f0000000000)={{0x4, 0x4}, {0x5, 0x6}}, 0x0) r4 = socket(0xa, 0x2, 0x0) socket(0x18, 0x5, 0x1) sendmsg$auto_TIPC_NL_MEDIA_SET(r4, &(0x7f0000004680)={&(0x7f0000000080), 0xc, &(0x7f0000004640)={&(0x7f00000046c0)=ANY=[], 0x3f1c}, 0x1, 0x0, 0x0, 0x240408c5}, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/platform/vhci_hcd.13/usb36/36-0:1.0/usb36-port5/power/control\x00', 0xa0100, 0x0) setsockopt$auto_SO_MARK(r5, 0x57b7, 0x24, &(0x7f0000000140)='&[*:^&\x9eC\x97\b`\xd1v+ie2\xddn\xfe\x03\xbb\'$+.\x00z\x1e\x01E\xbf\x88\xb8\xe1\xf9\xb82\x8aG\x01\xdd\xbe\x01V\x85%\xc3Z\xd1C\xaf\x1b\xc7;\xf2\xb3(\xc2\xfe\x97QtKn\x92v\xf3\x99\xe5#\\\xd3\xa2 \xd6A\xc8\xc9\xbf\x7f\xbb\xec\x1cAt\xed\xe9\xfc\x84\x0ec\xa4/\x9d\x85\xd3\x18z\xa4)\xea\xe4\xedH ', 0x3) r6 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2401, 0x0) ioctl$auto_SNAPSHOT_SET_SWAP_AREA(r6, 0x400c330d, &(0x7f0000000100)={0x8000000000000000, 0x80000001}) ioctl$auto_SNAPSHOT_FREE(r6, 0x3305, 0x0) 8.563710749s ago: executing program 1 (id=1117): mmap$auto(0x0, 0xe983, 0xdf, 0x13, 0xffffffffffffffff, 0x0) r0 = socketpair$auto(0x1, 0x3, 0x8000000000000000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r1) mmap$auto(0x0, 0x202000a, 0x2000000080000003, 0xeb1, 0xffffffffffffffff, 0x8000) fchdir$auto(0xffffffffffffffff) socket(0x10, 0x800, 0x0) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xdd483e501a3606c8, 0x0, 0x1, 0x0, 0x0, 0x400c5}, 0x8000) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x29, 0xa, 0xb) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = prctl$auto(0x38, 0x1, 0x4, 0xd73, 0x7) madvise$auto(0x9, 0x2003f2, 0x6e34a3e4) syz_genetlink_get_family_id$auto_ethtool(0x0, r3) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$auto_RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000280)={0xffffffff, 0x4, 0x3, 0xfffff66e, 0x8, 0x80, 0xcf, 0x6c38, 0xe}) mprotect$auto(0x0, 0x8000000000000001, 0x8) connect$auto(0x3, 0x0, 0x54) socket(0xa, 0x3, 0x3a) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, 0x0, 0x10) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendmsg$auto_MAC802154_HWSIM_CMD_SET_EDGE(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x86}, 0x240008c5) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x10001}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x8, 0xde, 0xfffffffffffffffb, 0x2, 0x8000) 8.042062388s ago: executing program 2 (id=1118): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x300c00, 0x0) ioctl$auto_TIOCGDEV2(r0, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xf, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) socket(0x2a, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x4) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x109802, 0x0) ioctl$auto(0xffffffffffffffff, 0x64c8, 0xffffffffffffffff) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x40815) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0x7) mmap$auto(0x2, 0x3, 0x800008002, 0x40eb1, 0x602, 0x5) remap_file_pages$auto(0x6a27, 0x6, 0xfffffffffffffffc, 0xb74, 0xfb) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xfffd, 0x0, 0x2, 0x800005bd, r2, 0x8000) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) r3 = epoll_create$auto(0x1) capset$auto(0x0, 0x0) epoll_ctl$auto(r3, 0x1, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0x42082, 0x0) 6.509841668s ago: executing program 3 (id=1120): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00'}) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0xfffffffffffffffc, 0x4, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto(0x4, 0x6, 0x1b, 0xfffffffffffffffc, 0x0) (async) getsockopt$auto(0x4, 0x6, 0x1b, 0xfffffffffffffffc, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000f40)={'batadv0\x00'}) close$auto(0xffffffffffffffff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x2) (async) write$auto(0xffffffffffffffff, 0x0, 0x2) syz_clone(0x80000980, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x80000980, 0x0, 0x0, 0x0, 0x0, 0x0) msync$auto(0x4001ffff000, 0x180000000000000, 0x400000004) open(0x0, 0x0, 0x408) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) write$auto(r2, 0x0, 0x2) (async) write$auto(r2, 0x0, 0x2) shmctl$auto_IPC_SET(0x3517, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x8500, 0x0) (async) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x8500, 0x0) write$auto(r3, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x8880) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) select$auto(0xd, 0x0, 0x0, 0x0, 0x0) (async) select$auto(0xd, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tcp_metrics(0x0, r4) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x4000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/netstat\x00', 0x60182, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/netstat\x00', 0x60182, 0x0) 5.674863721s ago: executing program 1 (id=1121): sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x400c000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0xfffffffd, 0x1f, 0x940, 0x1ffde, 0x3, 0x6, 0x8000004, 0x9, 0x5, 0x0, 0x4, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x7069, 0x0, 0x0, 0x0, 0xc5f, 0x0, 0x3, [0x0, 0x0, 0x0, 0x8, 0x5, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x101, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x100000000, 0x0, 0x8000000000000001, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000000]}, 0x4b9, 0x7d) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x60000000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/conf/veth0_to_bond/drop_unicast_in_l2_multicast\x00', 0x101202, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r1 = open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0x538, 0x7f, 0x10000, 0x0, r1, 0x1000, "72254621e6dce5c668109becb368422a", 0x0, r1, 0x4, 0x6, 0x101, 0x1, r1}, 0x6f3) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0)) r2 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dvmrp0\x00'}) sendmsg$auto_ETHTOOL_MSG_COALESCE_GET(r2, 0x0, 0x2000c814) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r0) sendmsg$auto_NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, r3, 0x300, 0x70bd29, 0x25dbdbfe, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) close_range$auto(0x2, 0x8, 0x0) 5.468230764s ago: executing program 3 (id=1122): mmap$auto(0x0, 0x2020008, 0x3, 0xeb1, 0x8000000000000000, 0x8000) getcpu$auto(0x0, 0x0, 0x0) mmap$auto(0x200000000, 0x5, 0x8, 0x40009b72, 0x2, 0x8000) inotify_init1$auto(0xc) write$auto(0x1, 0x0, 0x80000000) munmap$auto(0x8000, 0xffffffff) mmap$auto(0x0, 0x20009, 0x1000, 0xeb1, 0x401, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x167f02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x1c1080, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x80000eb1, 0xfffffffffffffffa, 0x0) mlockall$auto(0x7) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0x2003f0, 0x15) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x883, 0x0) futex$auto(&(0x7f0000000040)=0x80000001, 0xfffffff8, 0xfded, &(0x7f0000000080)={0x0, 0x9}, &(0x7f00000000c0)=0x10001, 0x4) 4.467844662s ago: executing program 3 (id=1123): r0 = openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/tracing/trace_marker_raw\x00', 0xc05, 0x0) writev$auto(r0, &(0x7f0000000140)={0x0, 0x6}, 0x4) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, &(0x7f0000000040)="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", 0x1d9) close_range$auto(0x2, 0x8, 0x7fff) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/input/event0\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) socket(0x23, 0x80a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'dummy0\x00'}) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e80)=ANY=[@ANYBLOB="1416", @ANYRES16=r2, @ANYBLOB="100028bd7000fddbdf252c"], 0x14}, 0x1, 0x1000060}, 0x0) shmctl$auto(0x8, 0xfffffffe, &(0x7f0000000140)={{0x3, 0xffffffffffffffff, 0xee00, 0x3ff, 0x6, 0x6, 0x400}, 0xffffffff, 0x4, 0x76d2, 0x3, @raw=0x6, @raw=0x9322, 0x40, 0x0, &(0x7f0000000040)="b5b8704c75117c52a0aee18e66292b885eec514213972b750b27c06199c226a6a333a6c0ba308d759a13b442eb3f708cebc821abf4185252d4f6a4e0bdf1fdfa25db53274435f55190c472b9069f8039ab068b32f9a52407216888532182847abca053bfb896b4d1e0a54d50809c29c8bea054", 0x0}) socket(0x1d, 0x6, 0x4) mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x401, 0x8000) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, 0x0, 0xa, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mtrr\x00', 0x0, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}}, 0xf7374674b920089e) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r4, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10000, 0x0) ioctl$auto(r3, 0x400c4d02, r3) socket(0x10, 0x80000, 0x75) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/driver/nvram\x00', 0x10b402, 0x0) pread64$auto(r5, 0x0, 0x0, 0x270) socket(0x2b, 0x1, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D3\x00', 0x1, 0x0) 3.580145209s ago: executing program 3 (id=1124): statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000200) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, 0x0, 0x6a) connect$auto(0x3, 0x0, 0x54) write$auto(0xffffffffffffffff, 0x0, 0xa) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x9, 0x800, 0x0) io_uring_register$auto_IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, 0x0, 0x4c6) 3.551888271s ago: executing program 1 (id=1125): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram10\x00', 0x14fe02, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x40001, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/ip6_mr_cache\x00', 0x1900, 0x0) pread64$auto(r0, 0x0, 0xe, 0x100000000007) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b7e, 0xffffffffffffffff, 0x8000) r1 = io_uring_setup$auto(0x406, 0x0) io_uring_register$auto_IORING_REGISTER_PBUF_RING(r1, 0x16, 0x0, 0x7) clock_adjtime$auto(0x10, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0x7, 0x0, 0x5, 0x3cbb}, 0xfff}, 0x8, 0x311) r2 = pidfd_open$auto(0x1, 0x0) setns(r2, 0x60020000) umount2$auto(&(0x7f0000000000)='.\x00', 0x3) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x1, 0x2) socket(0x1d, 0x2, 0x2) connect$auto(0x3, 0x0, 0x53) socket(0x10, 0x3, 0x6) socketpair$auto(0x1e, 0xb, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x38}, 0x6, 0x0, 0x4, 0x9}, 0x9}, 0x6, 0x1f00) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/net/can/rcvlist_sff\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f00000000c0)=""/52, 0x34) socket(0xb, 0x800, 0x84) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/enable\x00', 0xa8100, 0x0) r4 = io_uring_setup$auto(0x3, 0x0) close_range$auto(0x2, r4, 0x0) 3.238598909s ago: executing program 3 (id=1126): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r0 = socketcall$auto(0x9, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x0, 0x0) openat$auto_vrr_range_fops_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/dri/vkms/Writeback-1/vrr_range\x00', 0x80580, 0x0) lseek$auto(0x3, 0x8, 0x1) mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4004810}, 0x4008815) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'ip6erspan0\x00', 0x0}) r3 = bpf$auto(0x6, &(0x7f00000001c0)=@query={@target_ifindex=r2, 0x51, 0x3, 0x3, 0xc7, @count, 0x0, 0x401, 0x4, 0x5, 0x5}, 0x1) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d40000", @ANYRES16=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab13cf706e562811c62b28a702b72e00a3693cec6718627f832235612a871267002"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), r3) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20004895}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc6}, 0x1, 0x0, 0x2, 0x9}, 0x7}, 0x3, 0xa6) prctl$auto(0x1000000003b, 0xfffffffffffffffd, 0x4, 0xde1, 0x1ff) unshare$auto(0x8000000) sendmsg$auto_MACSEC_CMD_DEL_RXSA(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x80) semget$auto(0x0, 0x2e4a, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000ffdbdf250200000008000100fcffffff08000100ffff000003ab1d5484b56da2177a5fc679845ff425d58d7117c45ad332274e2d087a75cf2a29f129f05c2cbf1693a4616c6b42c5d016c21ba0e2e843cae5fe50f0f752a44de8520a96a2087f6ac147238ab91b9bb335"], 0x24}}, 0x40010) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x9, 0x36ec}, 0x2, 0x0) mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x7d4, 0x1, 0x401c1, 0x2081, 0x8, 0x7ffc, 0x1ffde, 0x8001, 0x2, 0x4, 0x9, 0x3, 0x5, 0x8, 0x200000003004, 0xd, 0x6, 0x10002, 0x80, 0x400, 0xa9, 0x1000, 0x401ffc, 0x8203, 0x400, 0x2, 0x1, 0x0, 0x40, 0x4, 0x2, [0x7249, 0xa9d, 0x0, 0x1000000000000000, 0x0, 0xfffffffffffffff7, 0x800002, 0x5, 0x0, 0x200000000000000, 0xfc6a, 0x1000000, 0x10000, 0x40000000000, 0x0, 0x500000000000, 0x80000000000000, 0x0, 0xffffffffff7ffffc, 0x5, 0x0, 0x2, 0xfff, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xb, 0xfffffffffffffffc, 0x400000000000002, 0xfffffffffffffffc, 0x3, 0x1, 0x5, 0xfffffffffffffffc, 0x4]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000019}, 0x40001) socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x1e, &(0x7f0000000100)={0x0}, 0x2, 0x0, 0x8, 0xa505}, 0x2}, 0x7, 0x4008) 2.963146704s ago: executing program 1 (id=1127): mmap$auto(0x0, 0x5, 0x3, 0xeb9, 0xfffffffffffffffa, 0x0) mmap$auto(0x6, 0x80000000008, 0x7dfffffffffffffc, 0xacda, 0x5, 0x7) r0 = socket(0xa, 0x2, 0x106) r1 = socket(0x2, 0x3, 0x2) setsockopt$auto(0x3, 0x0, 0xc8, 0xfffffffffffffffc, 0x4) setsockopt$auto(0x3, 0x0, 0xc9, 0xfffffffffffffffc, 0xfd72) mmap$auto(0x0, 0xcf, 0x4, 0x110, r0, 0x80c0) prctl$auto(0x1000000003b, 0x403, 0x0, 0x100, 0x1) r2 = socket(0x11, 0x80003, 0x300) sysfs$auto(0x2, 0x2, 0x0) recvmmsg$auto(r2, 0x0, 0x8, 0x5, 0x0) mmap$auto(0x9, 0xffff, 0xdf, 0xf799, r1, 0x8000) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab83, 0x0) ioctl$auto_KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f0000000340)={0x4}) remap_file_pages$auto(0x6a24, 0x100000000, 0x0, 0xb73, 0x66a) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0xbfd, 0x3, 0xfffffffffffffffe, 0xfffffffffffffffa, 0x7ffe) socket(0x2, 0x1, 0xff) setitimer$auto(0x1, &(0x7f0000000000)={{0x4, 0x4}, {0x5, 0x6}}, 0x0) r4 = socket(0xa, 0x2, 0x0) socket(0x18, 0x5, 0x1) sendmsg$auto_TIPC_NL_MEDIA_SET(r4, &(0x7f0000004680)={&(0x7f0000000080), 0xc, &(0x7f0000004640)={&(0x7f00000046c0)=ANY=[], 0x3f1c}, 0x1, 0x0, 0x0, 0x240408c5}, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/platform/vhci_hcd.13/usb36/36-0:1.0/usb36-port5/power/control\x00', 0xa0100, 0x0) setsockopt$auto_SO_MARK(r5, 0x57b7, 0x24, &(0x7f0000000140)='&[*:^&\x9eC\x97\b`\xd1v+ie2\xddn\xfe\x03\xbb\'$+.\x00z\x1e\x01E\xbf\x88\xb8\xe1\xf9\xb82\x8aG\x01\xdd\xbe\x01V\x85%\xc3Z\xd1C\xaf\x1b\xc7;\xf2\xb3(\xc2\xfe\x97QtKn\x92v\xf3\x99\xe5#\\\xd3\xa2 \xd6A\xc8\xc9\xbf\x7f\xbb\xec\x1cAt\xed\xe9\xfc\x84\x0ec\xa4/\x9d\x85\xd3\x18z\xa4)\xea\xe4\xedH ', 0x3) r6 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2401, 0x0) ioctl$auto_SNAPSHOT_SET_SWAP_AREA(r6, 0x400c330d, &(0x7f0000000100)={0x8000000000000000, 0x80000001}) ioctl$auto_SNAPSHOT_FREE(r6, 0x3305, 0x0) 2.909511643s ago: executing program 2 (id=1128): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r0 = socket(0x2b, 0x1, 0x0) io_uring_register$auto_IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, &(0x7f0000000080)="7a0a82b4a658635d206745778de6a48c53844f8b8e3dcbba610e2af6c72589cc5a431ab3a6fa381497bd7d0a4b5ea0612087e1d75aa1a77850579b5ce86b9e10679d9396e155a90f", 0x7) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/0000:00:02.0/internal_clients\x00', 0x2, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) statx$auto(r1, 0x0, 0x401006, 0x4015, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) write$auto(0x3, 0x0, 0x1) fsopen$auto(0x0, 0x1) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x0, 0x5, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nullb0/removable\x00', 0x0, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f00000001c0), 0x123360, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:09/sun\x00', 0xa0200, 0x0) pread64$auto(r2, 0x0, 0x6, 0x40008) close_range$auto(r0, 0x8, 0x4) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0xffffffffffffffff, 0x8204, 0x6, 0x0, 0xc, 0xe3, 0x4e, 0x3}, 0x6f0) prctl$auto(0x4e, 0x1, r3, 0x0, 0xffffffffffffffff) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x0) close_range$auto(0x2, 0x8, 0x0) 2.245073721s ago: executing program 1 (id=1129): mmap$auto(0x0, 0x2020008, 0x3, 0xeb1, 0x8000000000000000, 0x8000) getcpu$auto(0x0, 0x0, 0x0) mmap$auto(0x200000000, 0x5, 0x8, 0x40009b72, 0x2, 0x8000) inotify_init1$auto(0xc) write$auto(0x1, 0x0, 0x80000000) munmap$auto(0x8000, 0xffffffff) mmap$auto(0x0, 0x20009, 0x1000, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x167f02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x1c1080, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x80000eb1, 0xfffffffffffffffa, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) mlockall$auto(0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0x2003f0, 0x15) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000002980), r0) sendmsg$auto_NBD_CMD_STATUS(r0, &(0x7f0000002a40)={0x0, 0xfc, &(0x7f0000002a00)={&(0x7f00000029c0)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x400c0c4) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_SNDCTL_TMR_CONTINUE(r2, 0x5419, 0x0) openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x883, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x49, 0x4000001, 0x6, 0x7, 0x1, 0x7181, 0x3ffde, 0xbb41, 0x10, 0x9, 0x80006, 0x80803, 0x4, 0x11ffffffffffd, 0x86, 0xfffffffffffffffe, 0xffffffffffffffcb, 0x50007, 0x0, 0x0, 0x0, 0x80000001, 0x10000, 0x3db8, 0x9, 0x7ffc, 0x0, 0x5, 0x7fffffff, 0x3, 0xfffffffc, [0x1, 0x0, 0x0, 0x0, 0xd, 0x1001, 0x3, 0x2, 0x800005, 0x8, 0xb7, 0x0, 0x0, 0xfffffffffffffffe, 0x3, 0x5a, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0x2, 0xfffffffffffffffe, 0x3, 0x8, 0x6, 0x4, 0x0, 0x20000000, 0x2, 0x1, 0x0, 0x0, 0x800000009, 0xfffffffffffffffe, 0x4, 0x98, 0x6, 0x0, 0x1000000000000001, 0x801, 0x2dcc, 0xfffffffffffffffc, 0x6]}, 0x8, 0x10) r3 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) futex$auto(&(0x7f0000000040)=0x80000001, 0xfffffff8, 0xfded, &(0x7f0000000080)={0x0, 0x9}, &(0x7f00000000c0)=0x10001, 0x4) ioctl$auto__ctl_fops_dm_ioctl(r3, 0xfffffffffffffd02, &(0x7f00000001c0)) 1.4307443s ago: executing program 1 (id=1130): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x100003, 0x22b9, 0xfffffffffffffffa, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mincore$auto(0x0, 0x3, 0x0) sendmsg$auto_NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x80) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x8000000) semget$auto(0x0, 0x2e4a, 0x8000) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x9, 0x36ec}, 0x1f4, 0x0) mmap$auto(0x0, 0x20009, 0x10000, 0xebf, 0xffffffffffffffff, 0x8000) semctl$auto_SETALL(0x0, 0xc, 0x11, 0x81) read$auto(0xffffffffffffffff, 0x0, 0x7) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) connect$auto(0x3, 0x0, 0x54) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x1a, &(0x7f0000000000), 0x1) io_uring_setup$auto(0x59, &(0x7f0000000140)={0x7fffffff, 0xd, 0x6eb, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0x1, 0x1ff, 0x108, 0x83, 0x101, 0x6, 0x4}, {0x6, 0x1, 0x52, 0x5, 0x1, 0x3d, 0x876c7, 0x8, 0x100000000}}) rt_sigtimedwait$auto(&(0x7f0000000100)={0xfffffffffffffbff}, 0x0, 0x0, 0x8) r0 = gettid() kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@buf=0x0, 0x8ab0, 0x6c0000c000, 0xc000}, 0x4) kill$auto(r0, 0x11) close_range$auto(0x2, 0x8, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) semctl$auto(0x1ff, 0x2, 0x13, 0x1) ioctl$auto(r1, 0xc0205649, r1) 1.203145524s ago: executing program 3 (id=1131): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r0 = socketcall$auto(0x9, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x0, 0x0) openat$auto_vrr_range_fops_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/dri/vkms/Writeback-1/vrr_range\x00', 0x80580, 0x0) lseek$auto(0x3, 0x8, 0x1) mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4004810}, 0x4008815) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'ip6erspan0\x00', 0x0}) r3 = bpf$auto(0x6, &(0x7f00000001c0)=@query={@target_ifindex=r2, 0x51, 0x3, 0x3, 0xc7, @count, 0x0, 0x401, 0x4, 0x5, 0x5}, 0x1) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d400", @ANYRES16=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab13cf706e562811c62b28a702b72e00a3693cec6718627f832235612a871267002"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), r3) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20004895}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc6}, 0x1, 0x0, 0x2, 0x9}, 0x7}, 0x3, 0xa6) prctl$auto(0x1000000003b, 0xfffffffffffffffd, 0x4, 0xde1, 0x1ff) unshare$auto(0x8000000) sendmsg$auto_MACSEC_CMD_DEL_RXSA(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x80) semget$auto(0x0, 0x2e4a, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000ffdbdf250200000008000100fcffffff08000100ffff000003ab1d5484b56da2177a5fc679845ff425d58d7117c45ad332274e2d087a75cf2a29f129f05c2cbf1693a4616c6b42c5d016c21ba0e2e843cae5fe50f0f752a44de8520a96a2087f6ac147238ab91b9bb335"], 0x24}}, 0x40010) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x9, 0x36ec}, 0x2, 0x0) mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x7d4, 0x1, 0x401c1, 0x2081, 0x8, 0x7ffc, 0x1ffde, 0x8001, 0x2, 0x4, 0x9, 0x3, 0x5, 0x8, 0x200000003004, 0xd, 0x6, 0x10002, 0x80, 0x400, 0xa9, 0x1000, 0x401ffc, 0x8203, 0x400, 0x2, 0x1, 0x0, 0x40, 0x4, 0x2, [0x7249, 0xa9d, 0x0, 0x1000000000000000, 0x0, 0xfffffffffffffff7, 0x800002, 0x5, 0x0, 0x200000000000000, 0xfc6a, 0x1000000, 0x10000, 0x40000000000, 0x0, 0x500000000000, 0x80000000000000, 0x0, 0xffffffffff7ffffc, 0x5, 0x0, 0x2, 0xfff, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xb, 0xfffffffffffffffc, 0x400000000000002, 0xfffffffffffffffc, 0x3, 0x1, 0x5, 0xfffffffffffffffc, 0x4]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000019}, 0x40001) socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x1e, &(0x7f0000000100)={0x0}, 0x2, 0x0, 0x8, 0xa505}, 0x2}, 0x7, 0x4008) 1.145866033s ago: executing program 2 (id=1132): socket(0x2, 0x2, 0x8) (async) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x20342, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) sched_rr_get_interval$auto(0x0, &(0x7f00000000c0)={0x5, 0x81}) (async) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x4, 0x210, 0x7fc, 0x400007fb, &(0x7f00000002c0)}) r1 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) setsockopt$auto(0x3, 0x10000000084, 0x71, 0x0, 0x8) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x2000, 0x0) (async) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0x7, 0x0, 0x5, 0x3cbb}, 0xfff}, 0x8, 0x311) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x22002, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) prctl$auto(0x8, 0x0, 0x0, 0x2, 0x100000000) (async) socket(0x2, 0x80002, 0x73) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0xa, 0x3, 0x5) syz_genetlink_get_family_id$auto_nl802154(0x0, r2) (async) sendmsg$auto_NL802154_CMD_ASSOCIATE(r2, 0x0, 0x4040004) (async) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, 0x0, 0x8000) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10b142, 0x0) write$auto(r3, 0x0, 0x3) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x317, r4, 0x4, 0x1) (async) ptrace$auto(0x10, r4, 0x1, 0x7ff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 493.558239ms ago: executing program 2 (id=1133): sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x400c000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0xfffffffd, 0x1f, 0x940, 0x1ffde, 0x3, 0x6, 0x8000004, 0x9, 0x5, 0x0, 0x4, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x7069, 0x0, 0x0, 0x0, 0xc5f, 0x0, 0x3, [0x0, 0x0, 0x0, 0x8, 0x5, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x101, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x100000000, 0x0, 0x8000000000000001, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000000]}, 0x4b9, 0x7d) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x60000000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/conf/veth0_to_bond/drop_unicast_in_l2_multicast\x00', 0x101202, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r1 = open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0x538, 0x7f, 0x10000, 0x0, r1, 0x1000, "72254621e6dce5c668109becb368422a", 0x0, r1, 0x4, 0x6, 0x101, 0x1, r1}, 0x6f3) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0)) r2 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dvmrp0\x00'}) sendmsg$auto_ETHTOOL_MSG_COALESCE_GET(r2, 0x0, 0x2000c814) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r0) sendmsg$auto_NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, r3, 0x300, 0x70bd29, 0x25dbdbfe, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) close_range$auto(0x2, 0x8, 0x0) 0s ago: executing program 2 (id=1134): statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000200) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, 0x0, 0x6a) connect$auto(0x3, 0x0, 0x54) write$auto(0xffffffffffffffff, 0x0, 0xa) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x9, 0x800, 0x0) io_uring_register$auto_IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, 0x0, 0x4c6) kernel console output (not intermixed with test programs): 157.197575][ T6897] __sock_create+0x339/0x860 [ 157.197624][ T6897] __sys_socket+0x14d/0x260 [ 157.197666][ T6897] ? __pfx___sys_socket+0x10/0x10 [ 157.197719][ T6897] __x64_sys_socket+0x72/0xb0 [ 157.197761][ T6897] ? lockdep_hardirqs_on+0x78/0x100 [ 157.197804][ T6897] do_syscall_64+0x115/0x840 [ 157.197864][ T6897] ? clear_bhb_loop+0x40/0x90 [ 157.197923][ T6897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.197958][ T6897] RIP: 0033:0x7ff7e299ce59 [ 157.197985][ T6897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.198017][ T6897] RSP: 002b:00007ff7e3770028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 157.198049][ T6897] RAX: ffffffffffffffda RBX: 00007ff7e2c15fa0 RCX: 00007ff7e299ce59 [ 157.198071][ T6897] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 157.198091][ T6897] RBP: 00007ff7e2a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 157.198111][ T6897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.198131][ T6897] R13: 00007ff7e2c16038 R14: 00007ff7e2c15fa0 R15: 00007ffeceb5ec28 [ 157.198174][ T6897] [ 157.752607][ T5647] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 157.852445][ T6897] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 159.621275][ T6922] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 161.715086][ T6977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.220'. [ 161.817730][ T6982] FAULT_INJECTION: forcing a failure. [ 161.817730][ T6982] name failslab, interval 1, probability 0, space 0, times 0 [ 161.832365][ T6982] CPU: 0 UID: 0 PID: 6982 Comm: syz.0.223 Not tainted syzkaller #0 PREEMPT(full) [ 161.832405][ T6982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 161.832423][ T6982] Call Trace: [ 161.832433][ T6982] [ 161.832448][ T6982] dump_stack_lvl+0x100/0x190 [ 161.832492][ T6982] should_fail_ex.cold+0x5/0xa [ 161.832530][ T6982] should_failslab+0xc2/0x120 [ 161.832572][ T6982] kmem_cache_alloc_noprof+0x91/0x6a0 [ 161.832608][ T6982] ? __pfx_map_id_range_down+0x10/0x10 [ 161.832651][ T6982] ? security_inode_alloc+0x3b/0x2c0 [ 161.832722][ T6982] security_inode_alloc+0x3b/0x2c0 [ 161.832777][ T6982] inode_init_always_gfp+0xc77/0xfb0 [ 161.832816][ T6982] alloc_inode+0x8e/0x250 [ 161.832859][ T6982] new_inode+0x22/0x1c0 [ 161.832905][ T6982] __debugfs_create_file+0x105/0x4f0 [ 161.832967][ T6982] debugfs_create_file_full+0x41/0x60 [ 161.833014][ T6982] kvm_dev_ioctl+0x16c8/0x1a50 [ 161.833074][ T6982] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 161.833136][ T6982] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 161.833189][ T6982] __x64_sys_ioctl+0x18e/0x210 [ 161.833238][ T6982] do_syscall_64+0x115/0x840 [ 161.833281][ T6982] ? clear_bhb_loop+0x40/0x90 [ 161.833319][ T6982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.833350][ T6982] RIP: 0033:0x7fa0aa19ce59 [ 161.833376][ T6982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.833404][ T6982] RSP: 002b:00007fa0ab081028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 161.833433][ T6982] RAX: ffffffffffffffda RBX: 00007fa0aa415fa0 RCX: 00007fa0aa19ce59 [ 161.833453][ T6982] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000005 [ 161.833471][ T6982] RBP: 00007fa0aa232e6f R08: 0000000000000000 R09: 0000000000000000 [ 161.833488][ T6982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.833506][ T6982] R13: 00007fa0aa416038 R14: 00007fa0aa415fa0 R15: 00007ffe29827908 [ 161.833565][ T6982] [ 162.064619][ T6982] debugfs: out of free dentries, can not create file 'halt_successful_poll' [ 162.282174][ T6977] HfR: entered promiscuous mode [ 163.191301][ T7003] synth uevent: /devices/virtual/net/gretap0: unknown uevent action string [ 163.201839][ T7003] net gretap0: uevent: failed to send synthetic uevent: -22 [ 163.895770][ T7013] random: crng reseeded on system resumption [ 164.717025][ T7018] block2mtd: illegal erase size [ 165.412008][ T7042] FAULT_INJECTION: forcing a failure. [ 165.412008][ T7042] name failslab, interval 1, probability 0, space 0, times 0 [ 165.435122][ T7042] CPU: 0 UID: 0 PID: 7042 Comm: syz.1.234 Not tainted syzkaller #0 PREEMPT(full) [ 165.435163][ T7042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 165.435181][ T7042] Call Trace: [ 165.435192][ T7042] [ 165.435204][ T7042] dump_stack_lvl+0x100/0x190 [ 165.435250][ T7042] should_fail_ex.cold+0x5/0xa [ 165.435297][ T7042] should_failslab+0xc2/0x120 [ 165.435352][ T7042] kmem_cache_alloc_noprof+0x91/0x6a0 [ 165.435395][ T7042] ? vm_area_dup+0x27/0x8e0 [ 165.435433][ T7042] vm_area_dup+0x27/0x8e0 [ 165.435468][ T7042] dup_mmap+0x6f6/0x21b0 [ 165.435534][ T7042] ? __pfx_dup_mmap+0x10/0x10 [ 165.435582][ T7042] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 165.435633][ T7042] ? __lock_acquire+0x49f/0x1a40 [ 165.435688][ T7042] ? find_held_lock+0x2b/0x80 [ 165.435728][ T7042] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 165.435800][ T7042] copy_process+0x4588/0x8030 [ 165.435869][ T7042] ? __pfx_copy_process+0x10/0x10 [ 165.435929][ T7042] kernel_clone+0x176/0x9d0 [ 165.435966][ T7042] ? trace_contention_end+0x126/0x160 [ 165.436002][ T7042] ? __pfx_kernel_clone+0x10/0x10 [ 165.436052][ T7042] ? ksys_write+0x190/0x250 [ 165.436094][ T7042] __do_sys_clone+0xd9/0x120 [ 165.436134][ T7042] ? __pfx___do_sys_clone+0x10/0x10 [ 165.436174][ T7042] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 165.436256][ T7042] do_syscall_64+0x115/0x840 [ 165.436300][ T7042] ? clear_bhb_loop+0x40/0x90 [ 165.436355][ T7042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.436389][ T7042] RIP: 0033:0x7f503df9ce59 [ 165.436416][ T7042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.436447][ T7042] RSP: 002b:00007f503ee03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 165.436477][ T7042] RAX: ffffffffffffffda RBX: 00007f503e215fa0 RCX: 00007f503df9ce59 [ 165.436498][ T7042] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 165.436517][ T7042] RBP: 00007f503e032e6f R08: 0000000000000042 R09: 0000000000000000 [ 165.436536][ T7042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.436555][ T7042] R13: 00007f503e216038 R14: 00007f503e215fa0 R15: 00007ffc4b1495d8 [ 165.436597][ T7042] [ 168.196988][ T7084] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.586914][ T7098] FAULT_INJECTION: forcing a failure. [ 168.586914][ T7098] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 168.637864][ T7098] CPU: 1 UID: 0 PID: 7098 Comm: syz.0.246 Not tainted syzkaller #0 PREEMPT(full) [ 168.637897][ T7098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 168.637911][ T7098] Call Trace: [ 168.637919][ T7098] [ 168.637927][ T7098] dump_stack_lvl+0x100/0x190 [ 168.637962][ T7098] should_fail_ex.cold+0x5/0xa [ 168.637988][ T7098] ? prepare_alloc_pages+0x16d/0x5f0 [ 168.638026][ T7098] should_fail_alloc_page+0xeb/0x140 [ 168.638066][ T7098] prepare_alloc_pages+0x1f0/0x5f0 [ 168.638102][ T7098] ? unwind_get_return_address+0x59/0xa0 [ 168.638143][ T7098] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 168.638209][ T7098] ? stack_trace_save+0x8e/0xc0 [ 168.638256][ T7098] ? __pfx_stack_trace_save+0x10/0x10 [ 168.638304][ T7098] ? stack_depot_save_flags+0x27/0x9d0 [ 168.638353][ T7098] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 168.638397][ T7098] ? kasan_save_stack+0x30/0x50 [ 168.638438][ T7098] ? kasan_save_track+0x14/0x30 [ 168.638480][ T7098] ? __kasan_slab_alloc+0x89/0x90 [ 168.638524][ T7098] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 168.638563][ T7098] ? __pmd_alloc+0xbf/0x950 [ 168.638610][ T7098] ? copy_page_range+0x41a8/0x5b20 [ 168.638639][ T7098] ? dup_mmap+0xd44/0x21b0 [ 168.638686][ T7098] ? copy_process+0x4588/0x8030 [ 168.638724][ T7098] ? kernel_clone+0x176/0x9d0 [ 168.638763][ T7098] ? __do_sys_clone+0xd9/0x120 [ 168.638803][ T7098] ? do_syscall_64+0x115/0x840 [ 168.638849][ T7098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.638908][ T7098] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 168.638962][ T7098] ? policy_nodemask+0xed/0x4f0 [ 168.639024][ T7098] alloc_pages_mpol+0x1fb/0x540 [ 168.639074][ T7098] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 168.639133][ T7098] alloc_pages_noprof+0x1a/0x160 [ 168.639191][ T7098] pte_alloc_one+0x1c/0x3d0 [ 168.639229][ T7098] __pte_alloc+0x6d/0x3e0 [ 168.639260][ T7098] ? __pfx___pte_alloc+0x10/0x10 [ 168.639290][ T7098] ? _raw_spin_unlock+0x28/0x50 [ 168.639316][ T7098] ? __pmd_alloc+0x3fb/0x950 [ 168.639353][ T7098] copy_page_range+0x3dd8/0x5b20 [ 168.639405][ T7098] ? mas_wr_store_entry+0xa1/0x1e80 [ 168.639429][ T7098] ? __pfx_copy_page_range+0x10/0x10 [ 168.639456][ T7098] ? mas_store+0x666/0xac0 [ 168.639480][ T7098] ? __pfx_mas_store+0x10/0x10 [ 168.639507][ T7098] ? __pfx___vma_start_write+0x10/0x10 [ 168.639553][ T7098] dup_mmap+0xd44/0x21b0 [ 168.639598][ T7098] ? __pfx_dup_mmap+0x10/0x10 [ 168.639632][ T7098] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 168.639668][ T7098] ? __lock_acquire+0x49f/0x1a40 [ 168.639707][ T7098] ? find_held_lock+0x2b/0x80 [ 168.639736][ T7098] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 168.639784][ T7098] copy_process+0x4588/0x8030 [ 168.639889][ T7098] ? __pfx_copy_process+0x10/0x10 [ 168.639934][ T7098] kernel_clone+0x176/0x9d0 [ 168.639963][ T7098] ? trace_contention_end+0x126/0x160 [ 168.639989][ T7098] ? __pfx_kernel_clone+0x10/0x10 [ 168.640024][ T7098] ? ksys_write+0x190/0x250 [ 168.640054][ T7098] __do_sys_clone+0xd9/0x120 [ 168.640084][ T7098] ? __pfx___do_sys_clone+0x10/0x10 [ 168.640112][ T7098] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 168.640176][ T7098] do_syscall_64+0x115/0x840 [ 168.640209][ T7098] ? clear_bhb_loop+0x40/0x90 [ 168.640252][ T7098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.640276][ T7098] RIP: 0033:0x7fa0aa19ce59 [ 168.640313][ T7098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.640335][ T7098] RSP: 002b:00007fa0ab081028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 168.640358][ T7098] RAX: ffffffffffffffda RBX: 00007fa0aa415fa0 RCX: 00007fa0aa19ce59 [ 168.640374][ T7098] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 168.640388][ T7098] RBP: 00007fa0aa232e6f R08: 0000000000000042 R09: 0000000000000000 [ 168.640403][ T7098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.640416][ T7098] R13: 00007fa0aa416038 R14: 00007fa0aa415fa0 R15: 00007ffe29827908 [ 168.640447][ T7098] [ 169.502168][ T7103] netlink: zone id is out of range [ 169.535366][ T7103] netlink: zone id is out of range [ 169.555848][ T7103] netlink: zone id is out of range [ 169.643079][ T7103] netlink: zone id is out of range [ 169.654901][ T7103] netlink: zone id is out of range [ 169.703418][ T7103] netlink: zone id is out of range [ 169.761164][ T7103] netlink: zone id is out of range [ 169.810116][ T7103] netlink: zone id is out of range [ 169.838700][ T7103] netlink: zone id is out of range [ 169.874879][ T7103] netlink: zone id is out of range [ 171.973414][ T7144] FAULT_INJECTION: forcing a failure. [ 171.973414][ T7144] name failslab, interval 1, probability 0, space 0, times 0 [ 172.018490][ T7144] CPU: 0 UID: 0 PID: 7144 Comm: syz.0.256 Not tainted syzkaller #0 PREEMPT(full) [ 172.018536][ T7144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 172.018556][ T7144] Call Trace: [ 172.018568][ T7144] [ 172.018581][ T7144] dump_stack_lvl+0x100/0x190 [ 172.018635][ T7144] should_fail_ex.cold+0x5/0xa [ 172.018678][ T7144] should_failslab+0xc2/0x120 [ 172.018727][ T7144] kmem_cache_alloc_noprof+0x91/0x6a0 [ 172.018772][ T7144] ? sk_prot_alloc+0x60/0x2a0 [ 172.018821][ T7144] sk_prot_alloc+0x60/0x2a0 [ 172.018867][ T7144] sk_alloc+0x36/0xe80 [ 172.018922][ T7144] inet6_create+0x385/0x12b0 [ 172.018969][ T7144] ? inet6_create+0x7f/0x12b0 [ 172.019018][ T7144] __sock_create+0x339/0x860 [ 172.019081][ T7144] __sys_socket+0x14d/0x260 [ 172.019127][ T7144] ? __pfx___sys_socket+0x10/0x10 [ 172.019184][ T7144] __x64_sys_socket+0x72/0xb0 [ 172.019227][ T7144] ? lockdep_hardirqs_on+0x78/0x100 [ 172.019273][ T7144] do_syscall_64+0x115/0x840 [ 172.019318][ T7144] ? clear_bhb_loop+0x40/0x90 [ 172.019357][ T7144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.019398][ T7144] RIP: 0033:0x7fa0aa19ce59 [ 172.019427][ T7144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.019458][ T7144] RSP: 002b:00007fa0ab081028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 172.019491][ T7144] RAX: ffffffffffffffda RBX: 00007fa0aa415fa0 RCX: 00007fa0aa19ce59 [ 172.019513][ T7144] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 172.019532][ T7144] RBP: 00007fa0aa232e6f R08: 0000000000000000 R09: 0000000000000000 [ 172.019551][ T7144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.019583][ T7144] R13: 00007fa0aa416038 R14: 00007fa0aa415fa0 R15: 00007ffe29827908 [ 172.019621][ T7144] [ 172.882850][ T7148] FAULT_INJECTION: forcing a failure. [ 172.882850][ T7148] name failslab, interval 1, probability 0, space 0, times 0 [ 172.915478][ T7148] CPU: 0 UID: 0 PID: 7148 Comm: syz.3.257 Not tainted syzkaller #0 PREEMPT(full) [ 172.915511][ T7148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 172.915525][ T7148] Call Trace: [ 172.915533][ T7148] [ 172.915542][ T7148] dump_stack_lvl+0x100/0x190 [ 172.915576][ T7148] should_fail_ex.cold+0x5/0xa [ 172.915608][ T7148] should_failslab+0xc2/0x120 [ 172.915671][ T7148] kmem_cache_alloc_noprof+0x91/0x6a0 [ 172.915710][ T7148] ? anon_vma_fork+0x8d/0x6b0 [ 172.915738][ T7148] anon_vma_fork+0x8d/0x6b0 [ 172.915761][ T7148] ? vm_area_dup+0x59d/0x8e0 [ 172.915786][ T7148] dup_mmap+0x143e/0x21b0 [ 172.915840][ T7148] ? __pfx_dup_mmap+0x10/0x10 [ 172.915876][ T7148] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 172.915926][ T7148] ? __lock_acquire+0x49f/0x1a40 [ 172.915989][ T7148] ? find_held_lock+0x2b/0x80 [ 172.916019][ T7148] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 172.916070][ T7148] copy_process+0x4588/0x8030 [ 172.916098][ T7148] ? try_to_wake_up+0x70a/0x1c90 [ 172.916139][ T7148] ? __pfx_copy_process+0x10/0x10 [ 172.916169][ T7148] ? futex_wake+0x4ea/0x5e0 [ 172.916204][ T7148] ? futex_private_hash_put+0x115/0x1c0 [ 172.916233][ T7148] kernel_clone+0x176/0x9d0 [ 172.916262][ T7148] ? __pfx_futex_wake+0x10/0x10 [ 172.916293][ T7148] ? __pfx_kernel_clone+0x10/0x10 [ 172.916331][ T7148] ? ksys_write+0x190/0x250 [ 172.916361][ T7148] __do_sys_clone+0xd9/0x120 [ 172.916391][ T7148] ? __pfx___do_sys_clone+0x10/0x10 [ 172.916419][ T7148] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 172.916479][ T7148] do_syscall_64+0x115/0x840 [ 172.916511][ T7148] ? clear_bhb_loop+0x40/0x90 [ 172.916540][ T7148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.916564][ T7148] RIP: 0033:0x7ff7e299ce59 [ 172.916583][ T7148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.916606][ T7148] RSP: 002b:00007ff7e3770028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 172.916628][ T7148] RAX: ffffffffffffffda RBX: 00007ff7e2c15fa0 RCX: 00007ff7e299ce59 [ 172.916643][ T7148] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 172.916657][ T7148] RBP: 00007ff7e2a32e6f R08: 0000000000000042 R09: 0000000000000000 [ 172.916671][ T7148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.916684][ T7148] R13: 00007ff7e2c16038 R14: 00007ff7e2c15fa0 R15: 00007ffeceb5ec28 [ 172.916715][ T7148] [ 175.368139][ T7171] phram: not enough arguments [ 176.782167][ T7194] MTRR 1 not used [ 177.903718][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 182.455491][ T7284] NFSD: Failed to start, no listeners configured. [ 183.379160][ T7298] synth uevent: /devices/virtual/net/gretap0: unknown uevent action string [ 183.414280][ T7298] net gretap0: uevent: failed to send synthetic uevent: -22 [ 185.636585][ T7335] NFSD: Failed to start, no listeners configured. [ 186.105806][ T7349] FAULT_INJECTION: forcing a failure. [ 186.105806][ T7349] name failslab, interval 1, probability 0, space 0, times 0 [ 186.153290][ T7349] CPU: 1 UID: 0 PID: 7349 Comm: syz.3.296 Not tainted syzkaller #0 PREEMPT(full) [ 186.153335][ T7349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 186.153368][ T7349] Call Trace: [ 186.153379][ T7349] [ 186.153392][ T7349] dump_stack_lvl+0x100/0x190 [ 186.153447][ T7349] should_fail_ex.cold+0x5/0xa [ 186.153492][ T7349] should_failslab+0xc2/0x120 [ 186.153541][ T7349] kmem_cache_alloc_noprof+0x91/0x6a0 [ 186.153596][ T7349] ? vm_area_dup+0x27/0x8e0 [ 186.153632][ T7349] vm_area_dup+0x27/0x8e0 [ 186.153665][ T7349] dup_mmap+0x6f6/0x21b0 [ 186.153727][ T7349] ? __pfx_dup_mmap+0x10/0x10 [ 186.153773][ T7349] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 186.153823][ T7349] ? __lock_acquire+0x49f/0x1a40 [ 186.153876][ T7349] ? find_held_lock+0x2b/0x80 [ 186.153919][ T7349] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 186.153988][ T7349] copy_process+0x4588/0x8030 [ 186.154051][ T7349] ? __pfx_copy_process+0x10/0x10 [ 186.154110][ T7349] kernel_clone+0x176/0x9d0 [ 186.154147][ T7349] ? trace_contention_end+0x126/0x160 [ 186.154181][ T7349] ? __pfx_kernel_clone+0x10/0x10 [ 186.154228][ T7349] ? ksys_write+0x190/0x250 [ 186.154268][ T7349] __do_sys_clone+0xd9/0x120 [ 186.154307][ T7349] ? __pfx___do_sys_clone+0x10/0x10 [ 186.154344][ T7349] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 186.154423][ T7349] do_syscall_64+0x115/0x840 [ 186.154471][ T7349] ? clear_bhb_loop+0x40/0x90 [ 186.154511][ T7349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.154543][ T7349] RIP: 0033:0x7ff7e299ce59 [ 186.154568][ T7349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.154598][ T7349] RSP: 002b:00007ff7e3770028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 186.154626][ T7349] RAX: ffffffffffffffda RBX: 00007ff7e2c15fa0 RCX: 00007ff7e299ce59 [ 186.154646][ T7349] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 186.154675][ T7349] RBP: 00007ff7e2a32e6f R08: 0000000000000042 R09: 0000000000000000 [ 186.154692][ T7349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.154708][ T7349] R13: 00007ff7e2c16038 R14: 00007ff7e2c15fa0 R15: 00007ffeceb5ec28 [ 186.154746][ T7349] [ 186.532828][ T29] audit: type=1804 audit(2147483722.993:4): pid=7341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.293" name="/newroot/65/file0" dev="tmpfs" ino=350 res=1 errno=0 [ 186.583344][ T7341] overlayfs: missing 'lowerdir' [ 186.866492][ T7358] FAULT_INJECTION: forcing a failure. [ 186.866492][ T7358] name failslab, interval 1, probability 0, space 0, times 0 [ 186.905574][ T7358] CPU: 1 UID: 0 PID: 7358 Comm: syz.3.299 Not tainted syzkaller #0 PREEMPT(full) [ 186.905619][ T7358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 186.905640][ T7358] Call Trace: [ 186.905651][ T7358] [ 186.905664][ T7358] dump_stack_lvl+0x100/0x190 [ 186.905711][ T7358] should_fail_ex.cold+0x5/0xa [ 186.905766][ T7358] should_failslab+0xc2/0x120 [ 186.905814][ T7358] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 186.905859][ T7358] ? __d_alloc+0x35/0xa50 [ 186.905901][ T7358] __d_alloc+0x35/0xa50 [ 186.905940][ T7358] d_alloc+0x4a/0x1e0 [ 186.905978][ T7358] lookup_one_qstr_excl+0x171/0x250 [ 186.906025][ T7358] start_dirop+0x59/0xb0 [ 186.906078][ T7358] simple_start_creating+0xf9/0x110 [ 186.906132][ T7358] ? __pfx_simple_start_creating+0x10/0x10 [ 186.906191][ T7358] ? mntput+0x70/0xa0 [ 186.906242][ T7358] ? simple_pin_fs+0xa3/0x190 [ 186.906292][ T7358] debugfs_start_creating.part.0+0x82/0x170 [ 186.906348][ T7358] __debugfs_create_file+0xb3/0x4f0 [ 186.906399][ T7358] debugfs_create_file_full+0x41/0x60 [ 186.906447][ T7358] kvm_dev_ioctl+0x16c8/0x1a50 [ 186.906515][ T7358] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 186.906581][ T7358] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 186.906635][ T7358] __x64_sys_ioctl+0x18e/0x210 [ 186.906686][ T7358] do_syscall_64+0x115/0x840 [ 186.906731][ T7358] ? clear_bhb_loop+0x40/0x90 [ 186.906771][ T7358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.906804][ T7358] RIP: 0033:0x7ff7e299ce59 [ 186.906834][ T7358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.906866][ T7358] RSP: 002b:00007ff7e3770028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 186.906896][ T7358] RAX: ffffffffffffffda RBX: 00007ff7e2c15fa0 RCX: 00007ff7e299ce59 [ 186.906917][ T7358] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000006 [ 186.906936][ T7358] RBP: 00007ff7e2a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 186.906956][ T7358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.906975][ T7358] R13: 00007ff7e2c16038 R14: 00007ff7e2c15fa0 R15: 00007ffeceb5ec28 [ 186.907019][ T7358] [ 187.716117][ T7373] synth uevent: /bus/usb/drivers/igorplugusb: unknown uevent action string [ 187.757326][ T7373] nbd: must specify at least one socket [ 188.245419][ T7385] FAULT_INJECTION: forcing a failure. [ 188.245419][ T7385] name failslab, interval 1, probability 0, space 0, times 0 [ 188.291997][ T7385] CPU: 1 UID: 0 PID: 7385 Comm: syz.3.307 Not tainted syzkaller #0 PREEMPT(full) [ 188.292029][ T7385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 188.292042][ T7385] Call Trace: [ 188.292050][ T7385] [ 188.292059][ T7385] dump_stack_lvl+0x100/0x190 [ 188.292093][ T7385] should_fail_ex.cold+0x5/0xa [ 188.292123][ T7385] should_failslab+0xc2/0x120 [ 188.292156][ T7385] kmem_cache_alloc_noprof+0x91/0x6a0 [ 188.292189][ T7385] ? anon_vma_clone+0x2ba/0xcd0 [ 188.292236][ T7385] anon_vma_clone+0x2ba/0xcd0 [ 188.292270][ T7385] ? kmem_cache_alloc_noprof+0x231/0x6a0 [ 188.292308][ T7385] anon_vma_fork+0x1bb/0x6b0 [ 188.292335][ T7385] dup_mmap+0x143e/0x21b0 [ 188.292382][ T7385] ? __pfx_dup_mmap+0x10/0x10 [ 188.292415][ T7385] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 188.292452][ T7385] ? __lock_acquire+0x49f/0x1a40 [ 188.292491][ T7385] ? find_held_lock+0x2b/0x80 [ 188.292519][ T7385] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 188.292569][ T7385] copy_process+0x4588/0x8030 [ 188.292596][ T7385] ? try_to_wake_up+0x70a/0x1c90 [ 188.292636][ T7385] ? __pfx_copy_process+0x10/0x10 [ 188.292665][ T7385] ? futex_wake+0x4ea/0x5e0 [ 188.292701][ T7385] ? futex_private_hash_put+0x115/0x1c0 [ 188.292730][ T7385] kernel_clone+0x176/0x9d0 [ 188.292759][ T7385] ? __pfx_futex_wake+0x10/0x10 [ 188.292789][ T7385] ? __pfx_kernel_clone+0x10/0x10 [ 188.292823][ T7385] ? ksys_write+0x190/0x250 [ 188.292852][ T7385] __do_sys_clone+0xd9/0x120 [ 188.292880][ T7385] ? __pfx___do_sys_clone+0x10/0x10 [ 188.292907][ T7385] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 188.292964][ T7385] do_syscall_64+0x115/0x840 [ 188.292995][ T7385] ? clear_bhb_loop+0x40/0x90 [ 188.293023][ T7385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.293046][ T7385] RIP: 0033:0x7ff7e299ce59 [ 188.293065][ T7385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.293086][ T7385] RSP: 002b:00007ff7e3770028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 188.293108][ T7385] RAX: ffffffffffffffda RBX: 00007ff7e2c15fa0 RCX: 00007ff7e299ce59 [ 188.293123][ T7385] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 188.293136][ T7385] RBP: 00007ff7e2a32e6f R08: 0000000000000042 R09: 0000000000000000 [ 188.293149][ T7385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.293163][ T7385] R13: 00007ff7e2c16038 R14: 00007ff7e2c15fa0 R15: 00007ffeceb5ec28 [ 188.293192][ T7385] [ 190.439411][ T7427] FAULT_INJECTION: forcing a failure. [ 190.439411][ T7427] name failslab, interval 1, probability 0, space 0, times 0 [ 190.472627][ T7427] CPU: 1 UID: 0 PID: 7427 Comm: syz.0.319 Not tainted syzkaller #0 PREEMPT(full) [ 190.472670][ T7427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 190.472689][ T7427] Call Trace: [ 190.472700][ T7427] [ 190.472712][ T7427] dump_stack_lvl+0x100/0x190 [ 190.472756][ T7427] should_fail_ex.cold+0x5/0xa [ 190.472797][ T7427] should_failslab+0xc2/0x120 [ 190.472843][ T7427] __kmalloc_noprof+0xfc/0x820 [ 190.472882][ T7427] ? lockdep_init_map_type+0x5c/0x250 [ 190.472917][ T7427] ? udpv6_init_sock+0x24e/0x450 [ 190.472960][ T7427] udpv6_init_sock+0x24e/0x450 [ 190.472993][ T7427] ? __pfx_udpv6_init_sock+0x10/0x10 [ 190.473041][ T7427] inet6_create+0xb1a/0x12b0 [ 190.473087][ T7427] ? inet6_create+0x7f/0x12b0 [ 190.473134][ T7427] __sock_create+0x339/0x860 [ 190.473186][ T7427] __sys_socket+0x14d/0x260 [ 190.473232][ T7427] ? __pfx___sys_socket+0x10/0x10 [ 190.473289][ T7427] __x64_sys_socket+0x72/0xb0 [ 190.473334][ T7427] ? lockdep_hardirqs_on+0x78/0x100 [ 190.473381][ T7427] do_syscall_64+0x115/0x840 [ 190.473424][ T7427] ? clear_bhb_loop+0x40/0x90 [ 190.473464][ T7427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.473498][ T7427] RIP: 0033:0x7fa0aa19ce59 [ 190.473525][ T7427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.473557][ T7427] RSP: 002b:00007fa0ab081028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 190.473588][ T7427] RAX: ffffffffffffffda RBX: 00007fa0aa415fa0 RCX: 00007fa0aa19ce59 [ 190.473610][ T7427] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 190.473629][ T7427] RBP: 00007fa0aa232e6f R08: 0000000000000000 R09: 0000000000000000 [ 190.473648][ T7427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.473666][ T7427] R13: 00007fa0aa416038 R14: 00007fa0aa415fa0 R15: 00007ffe29827908 [ 190.473712][ T7427] [ 190.784076][ T7435] FAULT_INJECTION: forcing a failure. [ 190.784076][ T7435] name failslab, interval 1, probability 0, space 0, times 0 [ 190.817671][ T7435] CPU: 1 UID: 0 PID: 7435 Comm: syz.3.321 Not tainted syzkaller #0 PREEMPT(full) [ 190.817713][ T7435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 190.817731][ T7435] Call Trace: [ 190.817742][ T7435] [ 190.817754][ T7435] dump_stack_lvl+0x100/0x190 [ 190.817799][ T7435] should_fail_ex.cold+0x5/0xa [ 190.817848][ T7435] should_failslab+0xc2/0x120 [ 190.817912][ T7435] kmem_cache_alloc_noprof+0x91/0x6a0 [ 190.817956][ T7435] ? anon_vma_clone+0x2ba/0xcd0 [ 190.818013][ T7435] anon_vma_clone+0x2ba/0xcd0 [ 190.818060][ T7435] ? kmem_cache_alloc_noprof+0x231/0x6a0 [ 190.818114][ T7435] anon_vma_fork+0x1bb/0x6b0 [ 190.818158][ T7435] dup_mmap+0x143e/0x21b0 [ 190.818225][ T7435] ? __pfx_dup_mmap+0x10/0x10 [ 190.818273][ T7435] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 190.818319][ T7435] ? __lock_acquire+0x49f/0x1a40 [ 190.818370][ T7435] ? find_held_lock+0x2b/0x80 [ 190.818410][ T7435] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 190.818479][ T7435] copy_process+0x4588/0x8030 [ 190.818554][ T7435] ? __pfx_copy_process+0x10/0x10 [ 190.818595][ T7435] ? futex_wake+0x4ea/0x5e0 [ 190.818655][ T7435] kernel_clone+0x176/0x9d0 [ 190.818698][ T7435] ? __pfx_kernel_clone+0x10/0x10 [ 190.818747][ T7435] ? ksys_write+0x190/0x250 [ 190.818788][ T7435] __do_sys_clone+0xd9/0x120 [ 190.818825][ T7435] ? __pfx___do_sys_clone+0x10/0x10 [ 190.818861][ T7435] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 190.818932][ T7435] do_syscall_64+0x115/0x840 [ 190.818971][ T7435] ? clear_bhb_loop+0x40/0x90 [ 190.819006][ T7435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.819036][ T7435] RIP: 0033:0x7ff7e299ce59 [ 190.819061][ T7435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.819088][ T7435] RSP: 002b:00007ff7e3770028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 190.819128][ T7435] RAX: ffffffffffffffda RBX: 00007ff7e2c15fa0 RCX: 00007ff7e299ce59 [ 190.819146][ T7435] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 190.819162][ T7435] RBP: 00007ff7e2a32e6f R08: 0000000000000042 R09: 0000000000000000 [ 190.819179][ T7435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.819195][ T7435] R13: 00007ff7e2c16038 R14: 00007ff7e2c15fa0 R15: 00007ffeceb5ec28 [ 190.819230][ T7435] [ 191.392570][ T5644] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 191.459976][ T7428] mmap: syz.0.319 (7428) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 192.065618][ T7427] kexec: Could not allocate control_code_buffer [ 193.321012][ T7471] FAULT_INJECTION: forcing a failure. [ 193.321012][ T7471] name failslab, interval 1, probability 0, space 0, times 0 [ 193.386462][ T7471] CPU: 1 UID: 0 PID: 7471 Comm: syz.1.329 Not tainted syzkaller #0 PREEMPT(full) [ 193.386504][ T7471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 193.386522][ T7471] Call Trace: [ 193.386532][ T7471] [ 193.386543][ T7471] dump_stack_lvl+0x100/0x190 [ 193.386586][ T7471] should_fail_ex.cold+0x5/0xa [ 193.386628][ T7471] should_failslab+0xc2/0x120 [ 193.386672][ T7471] __kmalloc_cache_noprof+0x91/0x6c0 [ 193.386705][ T7471] ? ktime_get_coarse_real_ts64_mg+0x249/0x300 [ 193.386741][ T7471] ? resv_map_alloc+0x7e/0x400 [ 193.386788][ T7471] resv_map_alloc+0x7e/0x400 [ 193.386830][ T7471] hugetlb_reserve_pages+0x63c/0x1490 [ 193.386894][ T7471] ? __pfx___might_resched+0x10/0x10 [ 193.386945][ T7471] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 193.386997][ T7471] ? atime_needs_update+0x8b/0x6b0 [ 193.387044][ T7471] ? touch_atime+0xa5/0x760 [ 193.387085][ T7471] ? mas_preallocate+0x521/0x14a0 [ 193.387121][ T7471] hugetlbfs_file_mmap+0x51a/0x780 [ 193.387162][ T7471] ? __pfx_hugetlbfs_file_mmap+0x10/0x10 [ 193.387203][ T7471] ? lockdep_init_map_type+0x5c/0x250 [ 193.387239][ T7471] __mmap_region+0x13c7/0x2db0 [ 193.387278][ T7471] ? __pfx___mmap_region+0x10/0x10 [ 193.387308][ T7471] ? __pfx___might_resched+0x10/0x10 [ 193.387363][ T7471] ? __lock_acquire+0x49f/0x1a40 [ 193.387431][ T7471] ? __lock_acquire+0x49f/0x1a40 [ 193.387501][ T7471] ? is_bpf_text_address+0x8a/0x1a0 [ 193.387544][ T7471] ? is_bpf_text_address+0x8a/0x1a0 [ 193.387607][ T7471] ? unwind_get_return_address+0x59/0xa0 [ 193.387656][ T7471] ? arch_stack_walk+0xa6/0xf0 [ 193.387761][ T7471] mmap_region+0x35d/0x620 [ 193.387800][ T7471] ? __pfx_mmap_region+0x10/0x10 [ 193.387870][ T7471] ? cap_mmap_addr+0x4b/0x120 [ 193.387942][ T7471] ? bpf_lsm_mmap_addr+0x9/0x30 [ 193.387974][ T7471] ? security_mmap_addr+0x71/0x1e0 [ 193.388013][ T7471] ? __get_unmapped_area+0x255/0x3e0 [ 193.388068][ T7471] do_mmap+0xc63/0x12f0 [ 193.388122][ T7471] ? __pfx_do_mmap+0x10/0x10 [ 193.388171][ T7471] ? __pfx_down_write_killable+0x10/0x10 [ 193.388234][ T7471] vm_mmap_pgoff+0x29e/0x470 [ 193.388289][ T7471] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 193.388334][ T7471] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 193.388400][ T7471] ksys_mmap_pgoff+0x285/0x610 [ 193.388454][ T7471] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 193.388503][ T7471] ? xfd_validate_state+0x129/0x190 [ 193.388552][ T7471] __x64_sys_mmap+0x125/0x190 [ 193.388600][ T7471] do_syscall_64+0x115/0x840 [ 193.388646][ T7471] ? clear_bhb_loop+0x40/0x90 [ 193.388687][ T7471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.388723][ T7471] RIP: 0033:0x7f503df9ce59 [ 193.388749][ T7471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.388780][ T7471] RSP: 002b:00007f503ee03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 193.388812][ T7471] RAX: ffffffffffffffda RBX: 00007f503e215fa0 RCX: 00007f503df9ce59 [ 193.388834][ T7471] RDX: 00004000000000e3 RSI: 0000000000200004 RDI: 0000000000000000 [ 193.388854][ T7471] RBP: 00007f503e032e6f R08: 000000000000000d R09: 0000300000000000 [ 193.388882][ T7471] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 193.388903][ T7471] R13: 00007f503e216038 R14: 00007f503e215fa0 R15: 00007ffc4b1495d8 [ 193.388947][ T7471] [ 193.450046][ T5644] Bluetooth: hci2: command 0x2016 tx timeout [ 193.676855][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.752959][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.273174][ T7465] netlink: 16 bytes leftover after parsing attributes in process `syz.2.327'. [ 194.341645][ T7483] FAULT_INJECTION: forcing a failure. [ 194.341645][ T7483] name failslab, interval 1, probability 0, space 0, times 0 [ 194.385613][ T7483] CPU: 0 UID: 0 PID: 7483 Comm: syz.0.332 Not tainted syzkaller #0 PREEMPT(full) [ 194.385656][ T7483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 194.385676][ T7483] Call Trace: [ 194.385687][ T7483] [ 194.385700][ T7483] dump_stack_lvl+0x100/0x190 [ 194.385761][ T7483] should_fail_ex.cold+0x5/0xa [ 194.385805][ T7483] should_failslab+0xc2/0x120 [ 194.385853][ T7483] kmem_cache_alloc_noprof+0x91/0x6a0 [ 194.385901][ T7483] ? anon_vma_fork+0x19a/0x6b0 [ 194.385941][ T7483] anon_vma_fork+0x19a/0x6b0 [ 194.385981][ T7483] dup_mmap+0x143e/0x21b0 [ 194.386048][ T7483] ? __pfx_dup_mmap+0x10/0x10 [ 194.386098][ T7483] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 194.386151][ T7483] ? __lock_acquire+0x49f/0x1a40 [ 194.386206][ T7483] ? find_held_lock+0x2b/0x80 [ 194.386248][ T7483] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 194.386336][ T7483] copy_process+0x4588/0x8030 [ 194.386402][ T7483] ? __pfx_copy_process+0x10/0x10 [ 194.386466][ T7483] kernel_clone+0x176/0x9d0 [ 194.386506][ T7483] ? trace_contention_end+0x126/0x160 [ 194.386543][ T7483] ? __pfx_kernel_clone+0x10/0x10 [ 194.386594][ T7483] ? ksys_write+0x190/0x250 [ 194.386637][ T7483] __do_sys_clone+0xd9/0x120 [ 194.386679][ T7483] ? __pfx___do_sys_clone+0x10/0x10 [ 194.386718][ T7483] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 194.386802][ T7483] do_syscall_64+0x115/0x840 [ 194.386847][ T7483] ? clear_bhb_loop+0x40/0x90 [ 194.386890][ T7483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.386924][ T7483] RIP: 0033:0x7fa0aa19ce59 [ 194.386951][ T7483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.386982][ T7483] RSP: 002b:00007fa0ab081028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 194.387014][ T7483] RAX: ffffffffffffffda RBX: 00007fa0aa415fa0 RCX: 00007fa0aa19ce59 [ 194.387035][ T7483] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 194.387054][ T7483] RBP: 00007fa0aa232e6f R08: 0000000000000042 R09: 0000000000000000 [ 194.387074][ T7483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.387094][ T7483] R13: 00007fa0aa416038 R14: 00007fa0aa415fa0 R15: 00007ffe29827908 [ 194.387138][ T7483] [ 195.728272][ T5647] Bluetooth: hci2: command 0x2016 tx timeout [ 195.814306][ T7503] NFSD: Failed to start, no listeners configured. [ 196.649374][ C1] sd 0:0:1:0: [sda] tag#1335 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 196.659952][ C1] sd 0:0:1:0: [sda] tag#1335 CDB: Write(6) 0a 00 00 00 0b 00 00 00 00 00 00 00 [ 198.192004][ T7556] NFSD: Failed to start, no listeners configured. [ 198.372367][ T7565] FAULT_INJECTION: forcing a failure. [ 198.372367][ T7565] name failslab, interval 1, probability 0, space 0, times 0 [ 198.407260][ T7565] CPU: 0 UID: 0 PID: 7565 Comm: syz.3.348 Not tainted syzkaller #0 PREEMPT(full) [ 198.407303][ T7565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 198.407322][ T7565] Call Trace: [ 198.407332][ T7565] [ 198.407344][ T7565] dump_stack_lvl+0x100/0x190 [ 198.407392][ T7565] should_fail_ex.cold+0x5/0xa [ 198.407435][ T7565] should_failslab+0xc2/0x120 [ 198.407492][ T7565] kmem_cache_alloc_noprof+0x91/0x6a0 [ 198.407533][ T7565] ? __pfx_map_id_range_down+0x10/0x10 [ 198.407584][ T7565] ? security_inode_alloc+0x3b/0x2c0 [ 198.407644][ T7565] security_inode_alloc+0x3b/0x2c0 [ 198.407697][ T7565] inode_init_always_gfp+0xc77/0xfb0 [ 198.407737][ T7565] alloc_inode+0x8e/0x250 [ 198.407780][ T7565] new_inode+0x22/0x1c0 [ 198.407828][ T7565] __debugfs_create_file+0x105/0x4f0 [ 198.407900][ T7565] debugfs_create_file_full+0x41/0x60 [ 198.407951][ T7565] kvm_dev_ioctl+0x16c8/0x1a50 [ 198.408019][ T7565] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 198.408088][ T7565] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 198.408145][ T7565] __x64_sys_ioctl+0x18e/0x210 [ 198.408197][ T7565] do_syscall_64+0x115/0x840 [ 198.408244][ T7565] ? clear_bhb_loop+0x40/0x90 [ 198.408286][ T7565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.408322][ T7565] RIP: 0033:0x7ff7e299ce59 [ 198.408349][ T7565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.408383][ T7565] RSP: 002b:00007ff7e3770028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 198.408416][ T7565] RAX: ffffffffffffffda RBX: 00007ff7e2c15fa0 RCX: 00007ff7e299ce59 [ 198.408445][ T7565] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000006 [ 198.408466][ T7565] RBP: 00007ff7e2a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 198.408486][ T7565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.408505][ T7565] R13: 00007ff7e2c16038 R14: 00007ff7e2c15fa0 R15: 00007ffeceb5ec28 [ 198.408551][ T7565] [ 198.410160][ T7565] debugfs: out of free dentries, can not create file 'halt_successful_poll' [ 198.629361][ T7562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.347'. [ 199.089940][ T7567] block2mtd: illegal erase size [ 202.756768][ T7634] FAULT_INJECTION: forcing a failure. [ 202.756768][ T7634] name failslab, interval 1, probability 0, space 0, times 0 [ 202.790683][ T7634] CPU: 1 UID: 0 PID: 7634 Comm: syz.0.368 Not tainted syzkaller #0 PREEMPT(full) [ 202.790733][ T7634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 202.790752][ T7634] Call Trace: [ 202.790761][ T7634] [ 202.790773][ T7634] dump_stack_lvl+0x100/0x190 [ 202.790818][ T7634] should_fail_ex.cold+0x5/0xa [ 202.790862][ T7634] should_failslab+0xc2/0x120 [ 202.790909][ T7634] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 202.790951][ T7634] ? start_dirop+0x79/0xb0 [ 202.791002][ T7634] ? alloc_inode+0x68/0x250 [ 202.791046][ T7634] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 202.791104][ T7634] alloc_inode+0x68/0x250 [ 202.791144][ T7634] new_inode+0x22/0x1c0 [ 202.791186][ T7634] __debugfs_create_file+0x105/0x4f0 [ 202.791234][ T7634] debugfs_create_file_full+0x41/0x60 [ 202.791282][ T7634] kvm_dev_ioctl+0x1492/0x1a50 [ 202.791346][ T7634] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 202.791408][ T7634] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 202.791459][ T7634] __x64_sys_ioctl+0x18e/0x210 [ 202.791507][ T7634] do_syscall_64+0x115/0x840 [ 202.791549][ T7634] ? clear_bhb_loop+0x40/0x90 [ 202.791586][ T7634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.791616][ T7634] RIP: 0033:0x7fa0aa19ce59 [ 202.791640][ T7634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.791669][ T7634] RSP: 002b:00007fa0ab081028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 202.791698][ T7634] RAX: ffffffffffffffda RBX: 00007fa0aa415fa0 RCX: 00007fa0aa19ce59 [ 202.791726][ T7634] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000005 [ 202.791745][ T7634] RBP: 00007fa0aa232e6f R08: 0000000000000000 R09: 0000000000000000 [ 202.791762][ T7634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.791780][ T7634] R13: 00007fa0aa416038 R14: 00007fa0aa415fa0 R15: 00007ffe29827908 [ 202.791819][ T7634] [ 202.793974][ T7634] debugfs: out of free dentries, can not create file 'mmu_recycled' [ 203.074266][ T7640] binder: 7639:7640 ioctl 541b 0 returned -22 [ 204.021737][ T7655] NFSD: Failed to start, no listeners configured. [ 204.078818][ T7636] netlink: 12 bytes leftover after parsing attributes in process `syz.1.360'. [ 204.455212][ T7666] NFSD: Failed to start, no listeners configured. [ 204.908037][ T7675] NFSD: Failed to start, no listeners configured. [ 205.017567][ T7683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.366'. [ 205.322682][ T7677] NFSD: Failed to start, no listeners configured. [ 205.811334][ T7696] netlink: 146 bytes leftover after parsing attributes in process `syz.0.379'. [ 205.894779][ T7697] netlink: 146 bytes leftover after parsing attributes in process `syz.0.379'. [ 207.325985][ T7725] FAULT_INJECTION: forcing a failure. [ 207.325985][ T7725] name fail_futex, interval 1, probability 0, space 0, times 1 [ 207.353330][ T7725] CPU: 1 UID: 0 PID: 7725 Comm: syz.3.376 Not tainted syzkaller #0 PREEMPT(full) [ 207.353380][ T7725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 207.353400][ T7725] Call Trace: [ 207.353412][ T7725] [ 207.353425][ T7725] dump_stack_lvl+0x100/0x190 [ 207.353473][ T7725] should_fail_ex.cold+0x5/0xa [ 207.353511][ T7725] ? __fput_deferred+0x217/0x4a0 [ 207.353556][ T7725] get_futex_key+0x1d2/0x14f0 [ 207.353596][ T7725] ? __pfx_get_futex_key+0x10/0x10 [ 207.353633][ T7725] ? putname+0xb1/0x110 [ 207.353676][ T7725] futex_wait_setup+0x91/0x540 [ 207.353743][ T7725] __futex_wait+0x19f/0x300 [ 207.353789][ T7725] ? __pfx___futex_wait+0x10/0x10 [ 207.353838][ T7725] ? futex_hash+0x311/0x400 [ 207.353871][ T7725] ? __pfx_futex_wake_mark+0x10/0x10 [ 207.353920][ T7725] ? __pfx_futex_hash+0x10/0x10 [ 207.353962][ T7725] futex_wait+0xe6/0x370 [ 207.354004][ T7725] ? __pfx_futex_wait+0x10/0x10 [ 207.354054][ T7725] ? putname+0xb1/0x110 [ 207.354086][ T7725] ? kmem_cache_free+0x127/0x6b0 [ 207.354117][ T7725] ? do_sys_openat2+0x1b6/0x1e0 [ 207.354164][ T7725] do_futex+0x265/0x440 [ 207.354200][ T7725] ? __pfx_do_futex+0x10/0x10 [ 207.354232][ T7725] ? __pfx_do_sys_openat2+0x10/0x10 [ 207.354277][ T7725] ? fput+0x79/0x100 [ 207.354315][ T7725] __x64_sys_futex+0x34f/0x4d0 [ 207.354352][ T7725] ? __x64_sys_openat+0x12d/0x210 [ 207.354395][ T7725] ? __pfx___x64_sys_futex+0x10/0x10 [ 207.354444][ T7725] do_syscall_64+0x115/0x840 [ 207.354488][ T7725] ? clear_bhb_loop+0x40/0x90 [ 207.354525][ T7725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.354557][ T7725] RIP: 0033:0x7ff7e299ce59 [ 207.354583][ T7725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.354612][ T7725] RSP: 002b:00007ff7e37700e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 207.354641][ T7725] RAX: ffffffffffffffda RBX: 00007ff7e2c15fa8 RCX: 00007ff7e299ce59 [ 207.354661][ T7725] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff7e2c15fa8 [ 207.354680][ T7725] RBP: 00007ff7e2c15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 207.354698][ T7725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.354716][ T7725] R13: 00007ff7e2c16038 R14: 00007ffeceb5eb40 R15: 00007ffeceb5ec28 [ 207.354755][ T7725] [ 207.700308][ T7731] vivid-008: ================= START STATUS ================= [ 207.711799][ T7731] vivid-008: ================== END STATUS ================== [ 207.975532][ T7737] vhci_hcd vhci_hcd.2: invalid port number 16 [ 208.012428][ T7739] FAULT_INJECTION: forcing a failure. [ 208.012428][ T7739] name failslab, interval 1, probability 0, space 0, times 0 [ 208.034720][ T7737] vhci_hcd vhci_hcd.2: invalid port number 16 [ 208.053890][ T7739] CPU: 0 UID: 0 PID: 7739 Comm: syz.3.380 Not tainted syzkaller #0 PREEMPT(full) [ 208.053932][ T7739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 208.053951][ T7739] Call Trace: [ 208.053960][ T7739] [ 208.053972][ T7739] dump_stack_lvl+0x100/0x190 [ 208.054018][ T7739] should_fail_ex.cold+0x5/0xa [ 208.054058][ T7739] should_failslab+0xc2/0x120 [ 208.054102][ T7739] __kmalloc_cache_noprof+0x91/0x6c0 [ 208.054133][ T7739] ? refcount_dec_not_one+0x136/0x1c0 [ 208.054171][ T7739] ? alloc_ucounts+0x13d/0x5c0 [ 208.054237][ T7739] alloc_ucounts+0x13d/0x5c0 [ 208.054298][ T7739] ? __pfx_alloc_ucounts+0x10/0x10 [ 208.054348][ T7739] set_cred_ucounts+0xcd/0x200 [ 208.054400][ T7739] __sys_setuid+0x2a8/0x440 [ 208.054434][ T7739] do_syscall_64+0x115/0x840 [ 208.054495][ T7739] ? clear_bhb_loop+0x40/0x90 [ 208.054535][ T7739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.054570][ T7739] RIP: 0033:0x7ff7e299ce59 [ 208.054596][ T7739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.054626][ T7739] RSP: 002b:00007ff7e3770028 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 208.054674][ T7739] RAX: ffffffffffffffda RBX: 00007ff7e2c15fa0 RCX: 00007ff7e299ce59 [ 208.054696][ T7739] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 208.054716][ T7739] RBP: 00007ff7e2a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 208.054754][ T7739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.054775][ T7739] R13: 00007ff7e2c16038 R14: 00007ff7e2c15fa0 R15: 00007ffeceb5ec28 [ 208.054818][ T7739] [ 209.845680][ T7735] netlink: 12 bytes leftover after parsing attributes in process `syz.1.378'. [ 209.939126][ T7767] bonding: no command found in bonding_masters - use +ifname or -ifname [ 210.476283][ T7781] netlink: 62 bytes leftover after parsing attributes in process `syz.1.389'. [ 210.546645][ T7779] NFSD: Failed to start, no listeners configured. [ 210.736188][ T7778] could not allocate digest TFM handle [ 211.007192][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 211.015182][ T4945] Bluetooth: hci1: command 0x0406 tx timeout [ 211.023571][ T5631] Bluetooth: hci2: command 0x2016 tx timeout [ 211.023682][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 212.088932][ T7816] netlink: 16 bytes leftover after parsing attributes in process `syz.3.394'. [ 212.488638][ T7823] netlink: 28 bytes leftover after parsing attributes in process `syz.3.396'. [ 213.529144][ T7847] netlink: 28 bytes leftover after parsing attributes in process `syz.0.402'. [ 213.649153][ T7847] bond0: (slave bond_slave_0): Releasing backup interface [ 213.752797][ T7850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.402'. [ 215.421963][ T7899] binder: 7898:7899 ioctl 541b 0 returned -22 [ 216.217714][ T7914] FAULT_INJECTION: forcing a failure. [ 216.217714][ T7914] name failslab, interval 1, probability 0, space 0, times 0 [ 216.232497][ T7914] CPU: 1 UID: 0 PID: 7914 Comm: syz.2.415 Not tainted syzkaller #0 PREEMPT(full) [ 216.232540][ T7914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 216.232560][ T7914] Call Trace: [ 216.232570][ T7914] [ 216.232583][ T7914] dump_stack_lvl+0x100/0x190 [ 216.232631][ T7914] should_fail_ex.cold+0x5/0xa [ 216.232676][ T7914] should_failslab+0xc2/0x120 [ 216.232725][ T7914] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 216.232772][ T7914] ? __d_alloc+0x35/0xa50 [ 216.232817][ T7914] __d_alloc+0x35/0xa50 [ 216.232859][ T7914] d_alloc+0x4a/0x1e0 [ 216.232898][ T7914] lookup_one_qstr_excl+0x171/0x250 [ 216.232949][ T7914] start_dirop+0x59/0xb0 [ 216.233005][ T7914] simple_start_creating+0xf9/0x110 [ 216.233065][ T7914] ? __pfx_simple_start_creating+0x10/0x10 [ 216.233123][ T7914] ? mntput+0x70/0xa0 [ 216.233182][ T7914] ? simple_pin_fs+0xa3/0x190 [ 216.233235][ T7914] debugfs_start_creating.part.0+0x82/0x170 [ 216.233299][ T7914] __debugfs_create_file+0xb3/0x4f0 [ 216.233365][ T7914] debugfs_create_file_full+0x41/0x60 [ 216.233411][ T7914] kvm_dev_ioctl+0x1492/0x1a50 [ 216.233472][ T7914] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 216.233535][ T7914] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 216.233585][ T7914] __x64_sys_ioctl+0x18e/0x210 [ 216.233634][ T7914] do_syscall_64+0x115/0x840 [ 216.233678][ T7914] ? clear_bhb_loop+0x40/0x90 [ 216.233716][ T7914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.233748][ T7914] RIP: 0033:0x7f755439ce59 [ 216.233773][ T7914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.233802][ T7914] RSP: 002b:00007f75552de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 216.233833][ T7914] RAX: ffffffffffffffda RBX: 00007f7554615fa0 RCX: 00007f755439ce59 [ 216.233853][ T7914] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000005 [ 216.233870][ T7914] RBP: 00007f7554432e6f R08: 0000000000000000 R09: 0000000000000000 [ 216.233888][ T7914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.233905][ T7914] R13: 00007f7554616038 R14: 00007f7554615fa0 R15: 00007fff53a5c1c8 [ 216.233945][ T7914] [ 217.304527][ T7933] can: request_module (can-proto-4) failed. [ 218.387352][ T7954] ubi31: attaching mtd0 [ 218.499149][ T7954] ubi31: scanning is finished [ 218.499180][ T7954] ubi31: empty MTD device detected [ 219.338233][ T7954] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 219.338271][ T7954] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3518 bytes [ 219.338300][ T7954] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 219.338327][ T7954] ubi31: VID header offset: 514 (aligned 514), data offset: 578 [ 219.338354][ T7954] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 219.338380][ T7954] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 20 [ 219.338407][ T7954] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 265011952 [ 219.338439][ T7954] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 219.339379][ T7973] ubi31: background thread "ubi_bgt31d" started, PID 7973 [ 220.098455][ T7984] NFSD: Failed to start, no listeners configured. [ 221.095963][ T8018] FAULT_INJECTION: forcing a failure. [ 221.095963][ T8018] name failslab, interval 1, probability 0, space 0, times 0 [ 221.152532][ T8018] CPU: 0 UID: 0 PID: 8018 Comm: syz.0.439 Not tainted syzkaller #0 PREEMPT(full) [ 221.152576][ T8018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 221.152589][ T8018] Call Trace: [ 221.152595][ T8018] [ 221.152603][ T8018] dump_stack_lvl+0x100/0x190 [ 221.152634][ T8018] should_fail_ex.cold+0x5/0xa [ 221.152662][ T8018] should_failslab+0xc2/0x120 [ 221.152692][ T8018] __kmalloc_cache_noprof+0x91/0x6c0 [ 221.152742][ T8018] ? kvm_dev_ioctl+0x1549/0x1a50 [ 221.152804][ T8018] kvm_dev_ioctl+0x1549/0x1a50 [ 221.152856][ T8018] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 221.152900][ T8018] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 221.152936][ T8018] __x64_sys_ioctl+0x18e/0x210 [ 221.152970][ T8018] do_syscall_64+0x115/0x840 [ 221.153001][ T8018] ? clear_bhb_loop+0x40/0x90 [ 221.153027][ T8018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.153049][ T8018] RIP: 0033:0x7fa0aa19ce59 [ 221.153066][ T8018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.153087][ T8018] RSP: 002b:00007fa0ab081028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 221.153107][ T8018] RAX: ffffffffffffffda RBX: 00007fa0aa415fa0 RCX: 00007fa0aa19ce59 [ 221.153121][ T8018] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000005 [ 221.153134][ T8018] RBP: 00007fa0aa232e6f R08: 0000000000000000 R09: 0000000000000000 [ 221.153146][ T8018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.153158][ T8018] R13: 00007fa0aa416038 R14: 00007fa0aa415fa0 R15: 00007ffe29827908 [ 221.153185][ T8018] [ 221.527023][ T7997] netlink: 342 bytes leftover after parsing attributes in process `syz.1.432'. [ 222.202207][ T8036] NFSD: Failed to start, no listeners configured. [ 222.737874][ T8043] netlink: 12 bytes leftover after parsing attributes in process `syz.3.443'. [ 223.069139][ T8051] netlink: 16 bytes leftover after parsing attributes in process `syz.3.443'. [ 223.456192][ T8074] netlink: 28 bytes leftover after parsing attributes in process `syz.1.451'. [ 223.765284][ T8079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.451'. [ 223.934743][ T8074] bond0: (slave bond_slave_0): Releasing backup interface [ 224.157269][ T8082] FAULT_INJECTION: forcing a failure. [ 224.157269][ T8082] name failslab, interval 1, probability 0, space 0, times 0 [ 224.195199][ T8082] CPU: 0 UID: 0 PID: 8082 Comm: syz.3.453 Not tainted syzkaller #0 PREEMPT(full) [ 224.195240][ T8082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 224.195259][ T8082] Call Trace: [ 224.195269][ T8082] [ 224.195281][ T8082] dump_stack_lvl+0x100/0x190 [ 224.195325][ T8082] should_fail_ex.cold+0x5/0xa [ 224.195366][ T8082] should_failslab+0xc2/0x120 [ 224.195411][ T8082] __kmalloc_noprof+0xfc/0x820 [ 224.195453][ T8082] ? ext4_find_extent+0x21b/0xa30 [ 224.195510][ T8082] ext4_find_extent+0x21b/0xa30 [ 224.195566][ T8082] ext4_ext_map_blocks+0x215/0x59a0 [ 224.195627][ T8082] ? __pfx_stack_trace_save+0x10/0x10 [ 224.195678][ T8082] ? stack_depot_save_flags+0x27/0x9d0 [ 224.195722][ T8082] ? folios_put_refs+0x58a/0xaa0 [ 224.195758][ T8082] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 224.195813][ T8082] ? __lock_acquire+0x49f/0x1a40 [ 224.195863][ T8082] ? vfs_fsync_range+0x9b/0x190 [ 224.195895][ T8082] ? __do_sys_msync+0x3ca/0x590 [ 224.195927][ T8082] ? do_syscall_64+0x115/0x840 [ 224.195968][ T8082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.196034][ T8082] ext4_map_create_blocks+0xec/0x5e0 [ 224.196078][ T8082] ? ext4_fc_eligible.isra.0+0x41/0x110 [ 224.196160][ T8082] ext4_map_blocks+0x46b/0xd30 [ 224.196209][ T8082] ? __pfx_ext4_map_blocks+0x10/0x10 [ 224.196259][ T8082] ? ext4_ext_index_trans_blocks+0x167/0x1a0 [ 224.196316][ T8082] ? __ext4_journal_ensure_credits+0x265/0x2f0 [ 224.196373][ T8082] ext4_do_writepages+0x224c/0x3ed0 [ 224.196422][ T8082] ? rcu_is_watching+0x12/0xc0 [ 224.196509][ T8082] ? __pfx_ext4_do_writepages+0x10/0x10 [ 224.196583][ T8082] ? ext4_writepages+0x347/0x750 [ 224.196632][ T8082] ext4_writepages+0x347/0x750 [ 224.196683][ T8082] ? __pfx_ext4_writepages+0x10/0x10 [ 224.196748][ T8082] ? do_writepages+0x4b5/0x600 [ 224.196791][ T8082] ? do_writepages+0x4b5/0x600 [ 224.196837][ T8082] ? __pfx_ext4_writepages+0x10/0x10 [ 224.196890][ T8082] do_writepages+0x278/0x600 [ 224.196939][ T8082] ? __pfx_do_writepages+0x10/0x10 [ 224.196981][ T8082] ? do_raw_spin_unlock+0x145/0x1e0 [ 224.197021][ T8082] ? _raw_spin_unlock+0x28/0x50 [ 224.197066][ T8082] filemap_writeback+0x22d/0x2e0 [ 224.197115][ T8082] ? __pfx_filemap_writeback+0x10/0x10 [ 224.197170][ T8082] ? plist_check_list+0x1b8/0x280 [ 224.197256][ T8082] ? mt_find+0x45e/0x8e0 [ 224.197313][ T8082] ? __pfx_mt_find+0x10/0x10 [ 224.197372][ T8082] file_write_and_wait_range+0xcd/0x140 [ 224.197431][ T8082] ext4_sync_file+0x358/0xb60 [ 224.197480][ T8082] ? __pfx_ext4_sync_file+0x10/0x10 [ 224.197525][ T8082] ? __up_read+0x260/0x980 [ 224.197563][ T8082] ? __pfx___up_read+0x10/0x10 [ 224.197597][ T8082] ? __do_sys_msync+0x39b/0x590 [ 224.197638][ T8082] ? __pfx_ext4_sync_file+0x10/0x10 [ 224.197694][ T8082] vfs_fsync_range+0x9b/0x190 [ 224.197735][ T8082] __do_sys_msync+0x3ca/0x590 [ 224.197780][ T8082] do_syscall_64+0x115/0x840 [ 224.197824][ T8082] ? clear_bhb_loop+0x40/0x90 [ 224.197864][ T8082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.197914][ T8082] RIP: 0033:0x7ff7e299ce59 [ 224.197942][ T8082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.197973][ T8082] RSP: 002b:00007ff7e3770028 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 224.198005][ T8082] RAX: ffffffffffffffda RBX: 00007ff7e2c15fa0 RCX: 00007ff7e299ce59 [ 224.198027][ T8082] RDX: 0000000400000004 RSI: 01800000000000fe RDI: 000000001ffff000 [ 224.198047][ T8082] RBP: 00007ff7e2a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 224.198067][ T8082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.198086][ T8082] R13: 00007ff7e2c16038 R14: 00007ff7e2c15fa0 R15: 00007ffeceb5ec28 [ 224.198130][ T8082] [ 224.735449][ T8089] ksmbd: Unknown IPC event: 14, ignore. [ 225.179264][ T8106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.458'. [ 225.182958][ T8101] netlink: 342 bytes leftover after parsing attributes in process `syz.1.455'. [ 226.430032][ T8141] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ekl*[GCHFx^ĒPktkyve' [ 226.479647][ T8138] FAULT_INJECTION: forcing a failure. [ 226.479647][ T8138] name failslab, interval 1, probability 0, space 0, times 0 [ 226.530350][ T8138] CPU: 0 UID: 0 PID: 8138 Comm: syz.1.465 Not tainted syzkaller #0 PREEMPT(full) [ 226.530387][ T8138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 226.530404][ T8138] Call Trace: [ 226.530413][ T8138] [ 226.530424][ T8138] dump_stack_lvl+0x100/0x190 [ 226.530466][ T8138] should_fail_ex.cold+0x5/0xa [ 226.530505][ T8138] should_failslab+0xc2/0x120 [ 226.530546][ T8138] __kmalloc_cache_noprof+0x91/0x6c0 [ 226.530580][ T8138] ? percpu_ref_init+0xec/0x3f0 [ 226.530612][ T8138] ? __pfx_obj_cgroup_release+0x10/0x10 [ 226.530658][ T8138] percpu_ref_init+0xec/0x3f0 [ 226.530708][ T8138] mem_cgroup_css_online+0x177/0xbf0 [ 226.530768][ T8138] ? __pfx_mem_cgroup_css_online+0x10/0x10 [ 226.530809][ T8138] online_css+0xb2/0x350 [ 226.530848][ T8138] cgroup_apply_control_enable+0xa8d/0xdd0 [ 226.530917][ T8138] cgroup_mkdir+0x57f/0x1330 [ 226.530976][ T8138] ? __pfx_cgroup_mkdir+0x10/0x10 [ 226.531031][ T8138] kernfs_iop_mkdir+0x111/0x190 [ 226.531061][ T8138] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 226.531111][ T8138] vfs_mkdir+0x361/0x850 [ 226.531160][ T8138] filename_mkdirat+0x48b/0x5e0 [ 226.531200][ T8138] ? __pfx_filename_mkdirat+0x10/0x10 [ 226.531236][ T8138] ? strncpy_from_user+0x19d/0x2d0 [ 226.531277][ T8138] ? do_getname+0x191/0x390 [ 226.531319][ T8138] __x64_sys_mkdir+0x6b/0x90 [ 226.531355][ T8138] do_syscall_64+0x115/0x840 [ 226.531401][ T8138] ? clear_bhb_loop+0x40/0x90 [ 226.531440][ T8138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.531473][ T8138] RIP: 0033:0x7f503df9ce59 [ 226.531500][ T8138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.531530][ T8138] RSP: 002b:00007f503ee03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 226.531561][ T8138] RAX: ffffffffffffffda RBX: 00007f503e215fa0 RCX: 00007f503df9ce59 [ 226.531581][ T8138] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 226.531600][ T8138] RBP: 00007f503e032e6f R08: 0000000000000000 R09: 0000000000000000 [ 226.531619][ T8138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.531637][ T8138] R13: 00007f503e216038 R14: 00007f503e215fa0 R15: 00007ffc4b1495d8 [ 226.531679][ T8138] [ 228.764959][ T8148] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 228.781927][ T8148] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 228.882973][ T8148] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 228.906201][ T8148] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 228.962242][ T8148] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 229.036132][ T8148] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 229.049740][ T8148] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 229.104292][ T8148] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 229.114903][ T8148] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 230.584703][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 230.813514][ T8223] Bluetooth: hci0: command 0x0406 tx timeout [ 230.894200][ T8223] Bluetooth: hci3: command 0x0406 tx timeout [ 231.052541][ T8223] Bluetooth: hci1: command 0x0406 tx timeout [ 231.131946][ T8223] Bluetooth: hci2: command 0x2016 tx timeout [ 231.253767][ T8231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.479'. [ 232.250287][ T8246] zram: Added device: zram1 [ 232.882984][ T8223] Bluetooth: hci0: command 0x0406 tx timeout [ 232.961230][ T8223] Bluetooth: hci3: command 0x0406 tx timeout [ 233.128624][ T8223] Bluetooth: hci1: command 0x0406 tx timeout [ 233.202131][ T8223] Bluetooth: hci2: command 0x2016 tx timeout [ 234.289827][ T8286] netlink: 28 bytes leftover after parsing attributes in process `syz.3.492'. [ 234.546510][ T8292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.492'. [ 234.651292][ T8286] bond0: (slave bond_slave_0): Releasing backup interface [ 235.030259][ T8223] Bluetooth: hci3: command 0x0406 tx timeout [ 235.784013][ T29] audit: type=1804 audit(2147483772.563:5): pid=8303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.495" name="/newroot/109/file0" dev="tmpfs" ino=580 res=1 errno=0 [ 236.872753][ T8324] netlink: 186 bytes leftover after parsing attributes in process `syz.3.501'. [ 237.592462][ T8318] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 237.616110][ T8318] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 237.633958][ T8318] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 237.657037][ T8318] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 238.360194][ T8351] NFSD: Failed to start, no listeners configured. [ 238.928637][ T8223] Bluetooth: hci0: command 0x0406 tx timeout [ 239.326199][ T8368] NFSD: Failed to start, no listeners configured. [ 239.644233][ T8223] Bluetooth: hci1: command 0x0406 tx timeout [ 239.651521][ T8223] Bluetooth: hci3: command 0x0406 tx timeout [ 239.723039][ T8223] Bluetooth: hci2: command 0x2016 tx timeout [ 241.412755][ T8410] NFSD: Failed to start, no listeners configured. [ 242.094808][ T8426] NFSD: Failed to start, no listeners configured. [ 243.146715][ T8470] netlink: 334 bytes leftover after parsing attributes in process `syz.1.531'. [ 243.283810][ T8470] binder: 8468:8470 ioctl 541b 0 returned -22 [ 244.243470][ T8223] Bluetooth: hci2: unexpected event 0x3c length: 124 > 7 [ 248.005987][ T8569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.548'. [ 248.133561][ T8571] warning: `syz.0.548' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 248.153482][ T8566] NFSD: Failed to start, no listeners configured. [ 248.197671][ T8574] netlink: 28 bytes leftover after parsing attributes in process `syz.0.548'. syzkaller syzkaller login: [ 249.993192][ T8603] NFSD: Failed to start, no listeners configured. [ 251.040342][ T8621] netlink: 342 bytes leftover after parsing attributes in process `syz.2.561'. [ 251.077371][ T8612] futex_wake_op: syz.0.559 tries to shift op by -2048; fix this program [ 251.093792][ T8612] futex_wake_op: syz.0.559 tries to shift op by -2048; fix this program [ 252.555166][ T8645] netlink: 28 bytes leftover after parsing attributes in process `syz.1.567'. [ 252.697042][ T8649] ubi: mtd0 is already attached to ubi31 [ 252.773946][ T8645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.567'. [ 253.562372][ T8671] FAULT_INJECTION: forcing a failure. [ 253.562372][ T8671] name failslab, interval 1, probability 0, space 0, times 0 [ 253.621913][ T8671] CPU: 0 UID: 0 PID: 8671 Comm: syz.2.571 Not tainted syzkaller #0 PREEMPT(full) [ 253.621942][ T8671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 253.621955][ T8671] Call Trace: [ 253.621962][ T8671] [ 253.621970][ T8671] dump_stack_lvl+0x100/0x190 [ 253.622005][ T8671] should_fail_ex.cold+0x5/0xa [ 253.622034][ T8671] should_failslab+0xc2/0x120 [ 253.622065][ T8671] __kmalloc_noprof+0xfc/0x820 [ 253.622092][ T8671] ? constrain_params_by_rules+0x175/0xd20 [ 253.622127][ T8671] constrain_params_by_rules+0x175/0xd20 [ 253.622156][ T8671] ? kfree+0x22b/0x6c0 [ 253.622179][ T8671] ? constrain_params_by_rules+0xa88/0xd20 [ 253.622212][ T8671] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 253.622247][ T8671] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 253.622276][ T8671] ? __x64_sys_ioctl+0x18e/0x210 [ 253.622306][ T8671] ? do_syscall_64+0x115/0x840 [ 253.622335][ T8671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.622366][ T8671] ? snd_interval_refine+0x2d0/0x580 [ 253.622392][ T8671] snd_pcm_hw_refine+0x82a/0xb40 [ 253.622433][ T8671] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 253.622462][ T8671] ? snd_pcm_hw_refine+0x35c/0xb40 [ 253.622506][ T8671] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 253.622539][ T8671] ? __kasan_kmalloc+0xaa/0xb0 [ 253.622568][ T8671] snd_pcm_hw_param_first+0x2b0/0x680 [ 253.622601][ T8671] snd_pcm_hw_param_near.constprop.0+0x739/0x850 [ 253.622632][ T8671] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 253.622660][ T8671] ? __pfx_rate_dst_frames+0x10/0x10 [ 253.622692][ T8671] ? calc_dst_frames.constprop.0.isra.0+0xed/0x120 [ 253.622726][ T8671] snd_pcm_oss_change_params_locked+0x18d9/0x39f0 [ 253.622765][ T8671] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 253.622793][ T8671] ? __pfx___mutex_lock+0x10/0x10 [ 253.622821][ T8671] ? snd_pcm_oss_ioctl+0x1a0a/0x3790 [ 253.622847][ T8671] ? snd_pcm_oss_ioctl+0x1a0a/0x3790 [ 253.622884][ T8671] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 253.622918][ T8671] snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 253.622950][ T8671] snd_pcm_oss_ioctl+0x25aa/0x3790 [ 253.622979][ T8671] ? __fget_files+0x215/0x3d0 [ 253.622996][ T8671] ? hook_file_ioctl_common+0x140/0x440 [ 253.623035][ T8671] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 253.623067][ T8671] ? __fget_files+0x21f/0x3d0 [ 253.623091][ T8671] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 253.623122][ T8671] __x64_sys_ioctl+0x18e/0x210 [ 253.623154][ T8671] do_syscall_64+0x115/0x840 [ 253.623184][ T8671] ? clear_bhb_loop+0x40/0x90 [ 253.623252][ T8671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.623283][ T8671] RIP: 0033:0x7f755439ce59 [ 253.623301][ T8671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.623321][ T8671] RSP: 002b:00007f75552de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 253.623342][ T8671] RAX: ffffffffffffffda RBX: 00007f7554615fa0 RCX: 00007f755439ce59 [ 253.623356][ T8671] RDX: 0000000000000000 RSI: 00000000c0045005 RDI: 0000000000000004 [ 253.623369][ T8671] RBP: 00007f7554432e6f R08: 0000000000000000 R09: 0000000000000000 [ 253.623382][ T8671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.623394][ T8671] R13: 00007f7554616038 R14: 00007f7554615fa0 R15: 00007fff53a5c1c8 [ 253.623449][ T8671] [ 254.761274][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.769609][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.884233][ T8662] Process accounting resumed [ 258.601948][ T8744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.586'. [ 258.626938][ T8744] net_ratelimit: 195 callbacks suppressed [ 258.626965][ T8744] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 260.312389][ T8766] netlink: 28 bytes leftover after parsing attributes in process `syz.1.593'. [ 260.423649][ T8778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.593'. [ 260.696071][ T8783] netlink: 334 bytes leftover after parsing attributes in process `syz.2.595'. [ 260.840803][ T29] audit: type=1806 audit(2147483797.756:6): xattr="" res=-22 [ 263.048849][ T8818] FAULT_INJECTION: forcing a failure. [ 263.048849][ T8818] name failslab, interval 1, probability 0, space 0, times 0 [ 263.155858][ T8818] CPU: 0 UID: 0 PID: 8818 Comm: syz.2.601 Not tainted syzkaller #0 PREEMPT(full) [ 263.155889][ T8818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 263.155902][ T8818] Call Trace: [ 263.155910][ T8818] [ 263.155918][ T8818] dump_stack_lvl+0x100/0x190 [ 263.155951][ T8818] should_fail_ex.cold+0x5/0xa [ 263.155981][ T8818] should_failslab+0xc2/0x120 [ 263.156015][ T8818] __kmalloc_noprof+0xfc/0x820 [ 263.156042][ T8818] ? kasan_save_track+0x14/0x30 [ 263.156071][ T8818] ? __kasan_kmalloc+0xaa/0xb0 [ 263.156098][ T8818] ? realloc_user_queue+0xe9/0x300 [ 263.156136][ T8818] realloc_user_queue+0xe9/0x300 [ 263.156168][ T8818] ? __pfx_snd_timer_user_open+0x10/0x10 [ 263.156201][ T8818] snd_timer_user_open+0xfc/0x180 [ 263.156233][ T8818] snd_open+0x201/0x450 [ 263.156262][ T8818] ? __pfx_snd_open+0x10/0x10 [ 263.156305][ T8818] chrdev_open+0x234/0x6a0 [ 263.156351][ T8818] ? __pfx_apparmor_file_open+0x10/0x10 [ 263.156400][ T8818] ? __pfx_chrdev_open+0x10/0x10 [ 263.156437][ T8818] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 263.156481][ T8818] do_dentry_open+0x6ab/0x14d0 [ 263.156516][ T8818] ? __pfx_chrdev_open+0x10/0x10 [ 263.156555][ T8818] vfs_open+0x82/0x3f0 [ 263.156601][ T8818] path_openat+0x2873/0x4280 [ 263.156649][ T8818] ? __pfx_path_openat+0x10/0x10 [ 263.156695][ T8818] do_file_open+0x20e/0x430 [ 263.156730][ T8818] ? __pfx_do_file_open+0x10/0x10 [ 263.156808][ T8818] ? alloc_fd+0x471/0x7a0 [ 263.156855][ T8818] ? do_getname+0x191/0x390 [ 263.156902][ T8818] do_sys_openat2+0x10f/0x1e0 [ 263.156950][ T8818] ? __pfx_do_sys_openat2+0x10/0x10 [ 263.157002][ T8818] ? __fget_files+0x21f/0x3d0 [ 263.157041][ T8818] __x64_sys_openat+0x12d/0x210 [ 263.157091][ T8818] ? __pfx___x64_sys_openat+0x10/0x10 [ 263.157156][ T8818] do_syscall_64+0x115/0x840 [ 263.157202][ T8818] ? clear_bhb_loop+0x40/0x90 [ 263.157244][ T8818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.157278][ T8818] RIP: 0033:0x7f755439ce59 [ 263.157309][ T8818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.157340][ T8818] RSP: 002b:00007f75552bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 263.157379][ T8818] RAX: ffffffffffffffda RBX: 00007f7554616090 RCX: 00007f755439ce59 [ 263.157405][ T8818] RDX: 0000000000101000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 263.157426][ T8818] RBP: 00007f7554432e6f R08: 0000000000000000 R09: 0000000000000000 [ 263.157445][ T8818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.157470][ T8818] R13: 00007f7554616128 R14: 00007f7554616090 R15: 00007fff53a5c1c8 [ 263.157523][ T8818] [ 264.344811][ T8828] netlink: 28 bytes leftover after parsing attributes in process `syz.1.604'. [ 264.451836][ T8830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.604'. [ 266.503859][ T8862] hub 1-0:1.0: USB hub found [ 266.523813][ T8862] hub 1-0:1.0: 1 port detected [ 267.071092][ T8849] tipc: Started in network mode [ 267.104370][ T8849] tipc: Node identity ee00, cluster identity 4711 [ 267.148466][ T8849] tipc: Node number set to 60928 [ 268.113947][ T8874] netlink: 28 bytes leftover after parsing attributes in process `syz.1.614'. [ 268.588276][ T8882] NFSD: Failed to start, no listeners configured. [ 268.715746][ T8889] netlink: NAT attribute has 5 unknown bytes [ 270.331827][ T8900] netlink: 20 bytes leftover after parsing attributes in process `syz.2.620'. [ 271.055612][ T8223] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 273.319387][ T8933] netlink: 28 bytes leftover after parsing attributes in process `syz.3.626'. [ 273.412241][ T8933] veth1_macvtap: entered allmulticast mode [ 273.782883][ T8943] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 274.866173][ T8969] binder: 8968:8969 ioctl c0306201 0 returned -14 [ 276.480778][ T8999] NFSD: Failed to start, no listeners configured. [ 277.321444][ T9020] random: crng reseeded on system resumption [ 278.253234][ T9036] FAULT_INJECTION: forcing a failure. [ 278.253234][ T9036] name fail_futex, interval 1, probability 0, space 0, times 0 [ 278.317813][ T9036] CPU: 1 UID: 0 PID: 9036 Comm: syz.2.651 Not tainted syzkaller #0 PREEMPT(full) [ 278.317848][ T9036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 278.317862][ T9036] Call Trace: [ 278.317870][ T9036] [ 278.317879][ T9036] dump_stack_lvl+0x100/0x190 [ 278.317930][ T9036] should_fail_ex.cold+0x5/0xa [ 278.317961][ T9036] get_futex_key+0x1d2/0x14f0 [ 278.317988][ T9036] ? __pfx_get_futex_key+0x10/0x10 [ 278.318022][ T9036] futex_wait_setup+0x91/0x540 [ 278.318062][ T9036] __futex_wait+0x19f/0x300 [ 278.318097][ T9036] ? __pfx___futex_wait+0x10/0x10 [ 278.318129][ T9036] ? futex_hash+0x311/0x400 [ 278.318154][ T9036] ? __pfx_futex_wake_mark+0x10/0x10 [ 278.318197][ T9036] ? __pfx_futex_hash+0x10/0x10 [ 278.318229][ T9036] futex_wait+0xe6/0x370 [ 278.318261][ T9036] ? __pfx_futex_wait+0x10/0x10 [ 278.318301][ T9036] ? find_held_lock+0x2b/0x80 [ 278.318331][ T9036] ? __fget_files+0x215/0x3d0 [ 278.318352][ T9036] ? __fget_files+0x215/0x3d0 [ 278.318376][ T9036] do_futex+0x265/0x440 [ 278.318404][ T9036] ? __pfx_do_futex+0x10/0x10 [ 278.318432][ T9036] ? fdget+0x18b/0x210 [ 278.318456][ T9036] __x64_sys_futex+0x34f/0x4d0 [ 278.318486][ T9036] ? __pfx___x64_sys_futex+0x10/0x10 [ 278.318524][ T9036] do_syscall_64+0x115/0x840 [ 278.318558][ T9036] ? clear_bhb_loop+0x40/0x90 [ 278.318587][ T9036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.318611][ T9036] RIP: 0033:0x7f755439ce59 [ 278.318630][ T9036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.318653][ T9036] RSP: 002b:00007f75552bd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 278.318675][ T9036] RAX: ffffffffffffffda RBX: 00007f7554616098 RCX: 00007f755439ce59 [ 278.318691][ T9036] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7554616098 [ 278.318705][ T9036] RBP: 00007f7554616090 R08: 0000000000000000 R09: 0000000000000000 [ 278.318719][ T9036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.318733][ T9036] R13: 00007f7554616128 R14: 00007fff53a5c0e0 R15: 00007fff53a5c1c8 [ 278.318762][ T9036] [ 278.983839][ T9046] bond0: option ad_select: unable to set because the bond device is up [ 281.558582][ T9093] NFSD: Failed to start, no listeners configured. [ 281.727390][ T8374] Bluetooth: hci3: unexpected event 0x16 length: 124 > 6 [ 282.681709][ T9109] can0: slcan on ttyS2. [ 283.681802][ T9107] can0 (unregistered): slcan off ttyS2. [ 283.793218][ T9125] random: crng reseeded on system resumption [ 284.461449][ T9144] ubi: mtd0 is already attached to ubi31 [ 284.808995][ T9155] netlink: 28 bytes leftover after parsing attributes in process `syz.3.678'. [ 284.935620][ T9158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.678'. [ 285.395264][ T9156] Process accounting paused [ 285.527884][ T9127] bond0: option slaves: interface -]=,Do does not exist! [ 285.658316][ T9171] NFSD: Failed to start, no listeners configured. [ 285.993681][ T9179] netlink: 13 bytes leftover after parsing attributes in process `syz.3.683'. [ 286.684085][ T9193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.686'. [ 288.177381][ T9226] futex_wake_op: syz.3.693 tries to shift op by -2048; fix this program [ 288.244773][ T9226] futex_wake_op: syz.3.693 tries to shift op by -2048; fix this program [ 290.006031][ T8374] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 290.247413][ T9272] kAFS: unparsable volume name [ 291.193013][ T9288] futex_wake_op: syz.0.704 tries to shift op by -2048; fix this program [ 291.273924][ T9288] futex_wake_op: syz.0.704 tries to shift op by -2048; fix this program [ 292.064190][ T8223] Bluetooth: hci0: command 0x0406 tx timeout [ 292.639610][ T9313] FAULT_INJECTION: forcing a failure. [ 292.639610][ T9313] name failslab, interval 1, probability 0, space 0, times 0 [ 292.680649][ T9313] CPU: 0 UID: 0 PID: 9313 Comm: syz.0.709 Not tainted syzkaller #0 PREEMPT(full) [ 292.680688][ T9313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 292.680705][ T9313] Call Trace: [ 292.680714][ T9313] [ 292.680725][ T9313] dump_stack_lvl+0x100/0x190 [ 292.680767][ T9313] should_fail_ex.cold+0x5/0xa [ 292.680806][ T9313] should_failslab+0xc2/0x120 [ 292.680847][ T9313] __kmalloc_cache_noprof+0x91/0x6c0 [ 292.680875][ T9313] ? trace_kmalloc+0xeb/0x110 [ 292.680914][ T9313] ? __kasan_kmalloc+0xaa/0xb0 [ 292.680950][ T9313] ? vb2_vmalloc_alloc+0xf9/0x410 [ 292.681000][ T9313] vb2_vmalloc_alloc+0xf9/0x410 [ 292.681042][ T9313] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 292.681086][ T9313] __vb2_queue_alloc+0x8d5/0x1160 [ 292.681152][ T9313] vb2_core_reqbufs+0x899/0xf30 [ 292.681200][ T9313] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 292.681241][ T9313] ? kasan_save_track+0x14/0x30 [ 292.681281][ T9313] ? __kasan_kmalloc+0xaa/0xb0 [ 292.681322][ T9313] ? __vb2_init_fileio+0x18f/0x1000 [ 292.681369][ T9313] __vb2_init_fileio+0x32d/0x1000 [ 292.681410][ T9313] ? aa_file_perm+0x7f3/0x14d0 [ 292.681455][ T9313] __vb2_perform_fileio+0x9ba/0x1380 [ 292.681506][ T9313] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 292.681547][ T9313] ? __pfx___might_resched+0x10/0x10 [ 292.681603][ T9313] vb2_fop_read+0x211/0x520 [ 292.681644][ T9313] v4l2_read+0x229/0x2c0 [ 292.681676][ T9313] ? __pfx_v4l2_read+0x10/0x10 [ 292.681710][ T9313] vfs_read+0x1e4/0xb40 [ 292.681761][ T9313] ? __pfx_vfs_read+0x10/0x10 [ 292.681804][ T9313] ? find_held_lock+0x2b/0x80 [ 292.681841][ T9313] ? __fget_files+0x215/0x3d0 [ 292.681867][ T9313] ? __fget_files+0x215/0x3d0 [ 292.681899][ T9313] ? __fget_files+0x21f/0x3d0 [ 292.681935][ T9313] ksys_read+0x12a/0x250 [ 292.681962][ T9313] ? __pfx_ksys_read+0x10/0x10 [ 292.681999][ T9313] do_syscall_64+0x115/0x840 [ 292.682040][ T9313] ? clear_bhb_loop+0x40/0x90 [ 292.682076][ T9313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.682112][ T9313] RIP: 0033:0x7fa0aa19ce59 [ 292.682136][ T9313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.682164][ T9313] RSP: 002b:00007fa0ab081028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 292.682193][ T9313] RAX: ffffffffffffffda RBX: 00007fa0aa415fa0 RCX: 00007fa0aa19ce59 [ 292.682212][ T9313] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000004 [ 292.682230][ T9313] RBP: 00007fa0aa232e6f R08: 0000000000000000 R09: 0000000000000000 [ 292.682248][ T9313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.682265][ T9313] R13: 00007fa0aa416038 R14: 00007fa0aa415fa0 R15: 00007ffe29827908 [ 292.682303][ T9313] [ 293.112636][ T9313] FAULT_INJECTION: forcing a failure. [ 293.112636][ T9313] name failslab, interval 1, probability 0, space 0, times 0 [ 293.185986][ T9313] CPU: 0 UID: 0 PID: 9313 Comm: syz.0.709 Not tainted syzkaller #0 PREEMPT(full) [ 293.186022][ T9313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 293.186038][ T9313] Call Trace: [ 293.186047][ T9313] [ 293.186057][ T9313] dump_stack_lvl+0x100/0x190 [ 293.186100][ T9313] should_fail_ex.cold+0x5/0xa [ 293.186138][ T9313] should_failslab+0xc2/0x120 [ 293.186179][ T9313] kmem_cache_alloc_noprof+0x91/0x6a0 [ 293.186214][ T9313] ? d_instantiate+0x8a/0xb0 [ 293.186247][ T9313] ? d_instantiate+0x8a/0xb0 [ 293.186279][ T9313] ? alloc_empty_file+0x5b/0x1c0 [ 293.186322][ T9313] alloc_empty_file+0x5b/0x1c0 [ 293.186380][ T9313] alloc_file_pseudo+0x183/0x290 [ 293.186423][ T9313] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 293.186467][ T9313] ? _raw_spin_unlock+0x28/0x50 [ 293.186505][ T9313] ? alloc_fd+0x471/0x7a0 [ 293.186540][ T9313] __anon_inode_getfile+0xe8/0x280 [ 293.186594][ T9313] do_epoll_create+0x3ac/0x540 [ 293.186630][ T9313] __x64_sys_epoll_create+0x45/0x70 [ 293.186667][ T9313] do_syscall_64+0x115/0x840 [ 293.186707][ T9313] ? clear_bhb_loop+0x40/0x90 [ 293.186744][ T9313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.186775][ T9313] RIP: 0033:0x7fa0aa19ce59 [ 293.186801][ T9313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.186831][ T9313] RSP: 002b:00007fa0ab081028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d5 [ 293.186861][ T9313] RAX: ffffffffffffffda RBX: 00007fa0aa415fa0 RCX: 00007fa0aa19ce59 [ 293.186881][ T9313] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000003e [ 293.186900][ T9313] RBP: 00007fa0aa232e6f R08: 0000000000000000 R09: 0000000000000000 [ 293.186919][ T9313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.186938][ T9313] R13: 00007fa0aa416038 R14: 00007fa0aa415fa0 R15: 00007ffe29827908 [ 293.186977][ T9313] [ 294.133610][ T8374] Bluetooth: hci0: command 0x0406 tx timeout [ 295.398984][ T9344] bonding: no command found in bonding_masters - use +ifname or -ifname [ 295.414019][ T9343] NFSD: Failed to start, no listeners configured. [ 299.312769][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 299.463099][ T8223] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 300.354574][ T9399] batadv_slave_1: entered promiscuous mode [ 300.363100][ T9399] batadv_slave_1: left promiscuous mode [ 300.488071][ T9407] netlink: 28 bytes leftover after parsing attributes in process `syz.1.729'. [ 302.597569][ T9439] bond0: invalid ARP target specified [ 305.431348][ T9466] kexec: Could not allocate control_code_buffer [ 305.995073][ T9500] capability: warning: `syz.1.744' uses 32-bit capabilities (legacy support in use) [ 306.082019][ T9500] FAULT_INJECTION: forcing a failure. [ 306.082019][ T9500] name failslab, interval 1, probability 0, space 0, times 0 [ 306.157387][ T29] audit: type=1804 audit(2147485891.336:7): pid=9498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.744" name="/newroot/164/file0" dev="tmpfs" ino=872 res=1 errno=0 [ 306.192129][ T9500] CPU: 1 UID: 0 PID: 9500 Comm: syz.1.744 Not tainted syzkaller #0 PREEMPT(full) [ 306.192172][ T9500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 306.192194][ T9500] Call Trace: [ 306.192203][ T9500] [ 306.192214][ T9500] dump_stack_lvl+0x100/0x190 [ 306.192256][ T9500] should_fail_ex.cold+0x5/0xa [ 306.192294][ T9500] should_failslab+0xc2/0x120 [ 306.192337][ T9500] kmem_cache_alloc_noprof+0x91/0x6a0 [ 306.192372][ T9500] ? __pfx_map_id_range_down+0x10/0x10 [ 306.192416][ T9500] ? security_inode_alloc+0x3b/0x2c0 [ 306.192469][ T9500] security_inode_alloc+0x3b/0x2c0 [ 306.192516][ T9500] inode_init_always_gfp+0xc77/0xfb0 [ 306.192552][ T9500] alloc_inode+0x8e/0x250 [ 306.192591][ T9500] new_inode+0x22/0x1c0 [ 306.192631][ T9500] hugetlbfs_get_inode+0x39a/0x700 [ 306.192666][ T9500] ? do_raw_spin_lock+0x128/0x260 [ 306.192704][ T9500] hugetlb_file_setup+0x15b/0x5b0 [ 306.192743][ T9500] memfd_alloc_file+0xc2/0x610 [ 306.192783][ T9500] ? _raw_spin_unlock+0x28/0x50 [ 306.192817][ T9500] ? __pfx_memfd_alloc_file+0x10/0x10 [ 306.192868][ T9500] __do_sys_memfd_create+0x236/0x3d0 [ 306.192913][ T9500] do_syscall_64+0x115/0x840 [ 306.192954][ T9500] ? clear_bhb_loop+0x40/0x90 [ 306.192989][ T9500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.193019][ T9500] RIP: 0033:0x7f503df9ce59 [ 306.193042][ T9500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.193071][ T9500] RSP: 002b:00007f503eda0028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 306.193105][ T9500] RAX: ffffffffffffffda RBX: 00007f503e216270 RCX: 00007f503df9ce59 [ 306.193125][ T9500] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000000040 [ 306.193143][ T9500] RBP: 00007f503e032e6f R08: 0000000000000000 R09: 0000000000000000 [ 306.193171][ T9500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 306.193189][ T9500] R13: 00007f503e216308 R14: 00007f503e216270 R15: 00007ffc4b1495d8 [ 306.193226][ T9500] [ 306.771567][ T9523] NFSD: Failed to start, no listeners configured. [ 307.012548][ T29] audit: type=1804 audit(2147485892.191:8): pid=9492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.744" name="/newroot/164/file0" dev="tmpfs" ino=872 res=1 errno=0 [ 307.076383][ T9530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.749'. [ 307.321063][ T9524] NFSD: Failed to start, no listeners configured. [ 308.649824][ T9558] bond0: option slaves: interface -]=,Do does not exist! [ 309.902569][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 311.870941][ T9595] random: crng reseeded on system resumption [ 314.727726][ T8223] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 315.568027][ T11] Process accounting resumed [ 315.793893][ T9676] Process accounting resumed [ 315.858883][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.865403][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.803180][ T8374] Bluetooth: hci0: command 0x0406 tx timeout [ 318.871432][ T8223] Bluetooth: hci0: command 0x0406 tx timeout [ 319.272642][ T9733] NFSD: Failed to start, no listeners configured. [ 319.411649][ T29] audit: type=1804 audit(2147485904.661:9): pid=9741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.786" name="/newroot/212/file0" dev="tmpfs" ino=1121 res=1 errno=0 [ 320.005742][ T29] audit: type=1800 audit(2147485905.255:10): pid=9769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.791" name="features" dev="configfs" ino=32088 res=0 errno=0 [ 320.198886][ T9769] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input6 [ 321.341039][ T9775] kexec: Could not allocate control_code_buffer [ 321.645983][ T9763] netlink: 7184 bytes leftover after parsing attributes in process `syz.0.790'. [ 322.355366][ T9789] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 324.401163][ T9838] smpboot: CPU 1 is now offline [ 325.809641][ T29] audit: type=1800 audit(2147485911.098:11): pid=9879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.810" name="discovery_nqn" dev="configfs" ino=33416 res=0 errno=0 [ 325.843499][ T9879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.810'. [ 325.925954][ T9879] FAULT_INJECTION: forcing a failure. [ 325.925954][ T9879] name fail_futex, interval 1, probability 0, space 0, times 0 [ 326.016863][ T9879] CPU: 0 UID: 0 PID: 9879 Comm: syz.2.810 Not tainted syzkaller #0 PREEMPT(full) [ 326.016891][ T9879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 326.016904][ T9879] Call Trace: [ 326.016910][ T9879] [ 326.016918][ T9879] dump_stack_lvl+0x100/0x190 [ 326.016948][ T9879] should_fail_ex.cold+0x5/0xa [ 326.016975][ T9879] get_futex_key+0x1d2/0x14f0 [ 326.016999][ T9879] ? __pfx_get_futex_key+0x10/0x10 [ 326.017019][ T9879] ? rcu_is_watching+0x12/0xc0 [ 326.017044][ T9879] ? vfs_writev+0x1d5/0xdd0 [ 326.017074][ T9879] ? kfree+0x1e5/0x6c0 [ 326.017098][ T9879] futex_wake+0xf4/0x5e0 [ 326.017123][ T9879] ? rcu_is_watching+0x12/0xc0 [ 326.017148][ T9879] ? trace_contention_end+0x126/0x160 [ 326.017219][ T9879] ? __pfx_futex_wake+0x10/0x10 [ 326.017254][ T9879] ? find_held_lock+0x2b/0x80 [ 326.017280][ T9879] ? do_writev+0x214/0x340 [ 326.017310][ T9879] ? do_writev+0x214/0x340 [ 326.017344][ T9879] do_futex+0x2b2/0x440 [ 326.017368][ T9879] ? __pfx_do_futex+0x10/0x10 [ 326.017391][ T9879] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 326.017422][ T9879] ? __fget_files+0x21f/0x3d0 [ 326.017443][ T9879] __x64_sys_futex+0x34f/0x4d0 [ 326.017469][ T9879] ? __pfx___x64_sys_futex+0x10/0x10 [ 326.017501][ T9879] do_syscall_64+0x115/0x840 [ 326.017529][ T9879] ? clear_bhb_loop+0x40/0x90 [ 326.017553][ T9879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.017573][ T9879] RIP: 0033:0x7f755439ce59 [ 326.017590][ T9879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.017610][ T9879] RSP: 002b:00007f75552de0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 326.017629][ T9879] RAX: ffffffffffffffda RBX: 00007f7554615fa8 RCX: 00007f755439ce59 [ 326.017644][ T9879] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7554615fac [ 326.017657][ T9879] RBP: 00007f7554615fa0 R08: 0000000000000001 R09: 0000000000000000 [ 326.017669][ T9879] R10: 000000000000001a R11: 0000000000000246 R12: 0000000000000000 [ 326.017682][ T9879] R13: 00007f7554616038 R14: 00007fff53a5c0e0 R15: 00007fff53a5c1c8 [ 326.017707][ T9879] [ 326.653292][ T9905] FAULT_INJECTION: forcing a failure. [ 326.653292][ T9905] name failslab, interval 1, probability 0, space 0, times 0 [ 326.692339][ T9905] CPU: 0 UID: 0 PID: 9905 Comm: syz.2.813 Not tainted syzkaller #0 PREEMPT(full) [ 326.692366][ T9905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 326.692382][ T9905] Call Trace: [ 326.692389][ T9905] [ 326.692396][ T9905] dump_stack_lvl+0x100/0x190 [ 326.692426][ T9905] should_fail_ex.cold+0x5/0xa [ 326.692454][ T9905] should_failslab+0xc2/0x120 [ 326.692483][ T9905] kmem_cache_alloc_noprof+0x91/0x6a0 [ 326.692510][ T9905] ? __kernfs_new_node+0xd2/0xa10 [ 326.692548][ T9905] __kernfs_new_node+0xd2/0xa10 [ 326.692586][ T9905] ? __pfx___kernfs_new_node+0x10/0x10 [ 326.692626][ T9905] ? find_held_lock+0x2b/0x80 [ 326.692660][ T9905] ? kernfs_root+0xee/0x2a0 [ 326.692690][ T9905] ? kernfs_root+0xee/0x2a0 [ 326.692727][ T9905] kernfs_new_node+0x117/0x150 [ 326.692751][ T9905] __kernfs_create_file+0x53/0x350 [ 326.692780][ T9905] sysfs_add_file_mode_ns+0x207/0x3c0 [ 326.692815][ T9905] internal_create_group+0x593/0xfb0 [ 326.692854][ T9905] ? __pfx_internal_create_group+0x10/0x10 [ 326.692890][ T9905] ? kernfs_create_link+0x1bd/0x240 [ 326.692919][ T9905] internal_create_groups+0x9d/0x150 [ 326.692953][ T9905] device_add+0xf60/0x1970 [ 326.692983][ T9905] ? __pfx_device_add+0x10/0x10 [ 326.693010][ T9905] ? lockdep_init_map_type+0x5c/0x250 [ 326.693031][ T9905] ? __init_waitqueue_head+0xca/0x150 [ 326.693059][ T9905] netdev_register_kobject+0x1a9/0x3d0 [ 326.693091][ T9905] register_netdevice+0x15b6/0x25a0 [ 326.693119][ T9905] ? __pfx_register_netdevice+0x10/0x10 [ 326.693147][ T9905] ? __pfx_loopback_net_init+0x10/0x10 [ 326.693175][ T9905] register_netdev+0x34/0x50 [ 326.693197][ T9905] loopback_net_init+0x7a/0x170 [ 326.693225][ T9905] ? __pfx_loopback_net_init+0x10/0x10 [ 326.693251][ T9905] ops_init+0x1e2/0x5f0 [ 326.693275][ T9905] setup_net+0x118/0x3a0 [ 326.693297][ T9905] ? __pfx_setup_net+0x10/0x10 [ 326.693319][ T9905] ? mutex_init_lockdep+0xf1/0x120 [ 326.693343][ T9905] copy_net_ns+0x46f/0x7c0 [ 326.693370][ T9905] create_new_namespaces+0x3ea/0xac0 [ 326.693398][ T9905] unshare_nsproxy_namespaces+0xf2/0x220 [ 326.693423][ T9905] ksys_unshare+0x438/0xab0 [ 326.693451][ T9905] ? __pfx_ksys_unshare+0x10/0x10 [ 326.693487][ T9905] __x64_sys_unshare+0x31/0x40 [ 326.693514][ T9905] do_syscall_64+0x115/0x840 [ 326.693543][ T9905] ? clear_bhb_loop+0x40/0x90 [ 326.693568][ T9905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.693589][ T9905] RIP: 0033:0x7f755439ce59 [ 326.693606][ T9905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.693627][ T9905] RSP: 002b:00007f75552de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 326.693652][ T9905] RAX: ffffffffffffffda RBX: 00007f7554615fa0 RCX: 00007f755439ce59 [ 326.693666][ T9905] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 326.693678][ T9905] RBP: 00007f7554432e6f R08: 0000000000000000 R09: 0000000000000000 [ 326.693691][ T9905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.693704][ T9905] R13: 00007f7554616038 R14: 00007f7554615fa0 R15: 00007fff53a5c1c8 [ 326.693730][ T9905] [ 328.925407][ T8198] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u10:0: bg 2: bad block bitmap checksum [ 329.003780][ T8198] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 2 with max blocks 2 with error 74 [ 329.081934][ T8198] EXT4-fs (sda1): This should not happen!! Data will be lost [ 329.081934][ T8198] [ 329.689759][ T8374] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 329.775975][ T9936] NFSD: Failed to start, no listeners configured. [ 330.190144][ T9942] netlink: 28 bytes leftover after parsing attributes in process `syz.1.822'. [ 330.422353][ T9942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.822'. [ 331.375627][ T29] audit: type=1800 audit(2147485916.700:12): pid=9967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.826" name=22050820 dev="tmpfs" ino=1001 res=0 errno=0 [ 332.047092][ T9974] : Can't lookup blockdev [ 332.087449][ T9974] [U] 0="/ [ 332.115592][ T9974] [U] [ 332.129077][ T9974] [U] EeQ@ [ 332.204828][ T9972] [U]  [ 332.231521][ T9961] FAULT_INJECTION: forcing a failure. [ 332.231521][ T9961] name fail_futex, interval 1, probability 0, space 0, times 0 [ 332.323796][ T9961] CPU: 0 UID: 0 PID: 9961 Comm: syz.0.820 Not tainted syzkaller #0 PREEMPT(full) [ 332.323826][ T9961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 332.323840][ T9961] Call Trace: [ 332.323848][ T9961] [ 332.323856][ T9961] dump_stack_lvl+0x100/0x190 [ 332.323889][ T9961] should_fail_ex.cold+0x5/0xa [ 332.323919][ T9961] get_futex_key+0x1d2/0x14f0 [ 332.323945][ T9961] ? __pfx_get_futex_key+0x10/0x10 [ 332.323969][ T9961] ? lock_acquire+0x1b9/0x370 [ 332.324014][ T9961] futex_wake+0xf4/0x5e0 [ 332.324048][ T9961] ? __pfx_futex_wake+0x10/0x10 [ 332.324079][ T9961] ? find_held_lock+0x2b/0x80 [ 332.324110][ T9961] ? exit_mm_release+0x19/0x30 [ 332.324145][ T9961] do_futex+0x2b2/0x440 [ 332.324171][ T9961] ? __pfx_do_futex+0x10/0x10 [ 332.324195][ T9961] ? __might_fault+0xc5/0x140 [ 332.324228][ T9961] mm_release+0x24a/0x2f0 [ 332.324253][ T9961] do_exit+0x707/0x2ae0 [ 332.324299][ T9961] ? __pfx_do_exit+0x10/0x10 [ 332.324326][ T9961] ? do_raw_spin_lock+0x128/0x260 [ 332.324347][ T9961] ? find_held_lock+0x2b/0x80 [ 332.324371][ T9961] ? get_signal+0x7e0/0x21e0 [ 332.324396][ T9961] do_group_exit+0xd5/0x2a0 [ 332.324426][ T9961] get_signal+0x1ec7/0x21e0 [ 332.324456][ T9961] ? __pfx_get_signal+0x10/0x10 [ 332.324480][ T9961] ? do_futex+0x190/0x440 [ 332.324503][ T9961] arch_do_signal_or_restart+0x91/0x7a0 [ 332.324525][ T9961] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 332.324554][ T9961] ? __x64_sys_open+0xfe/0x1d0 [ 332.324586][ T9961] exit_to_user_mode_loop+0x139/0x6f0 [ 332.324607][ T9961] ? rcu_is_watching+0x12/0xc0 [ 332.324633][ T9961] do_syscall_64+0x652/0x840 [ 332.324661][ T9961] ? clear_bhb_loop+0x40/0x90 [ 332.324685][ T9961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.324704][ T9961] RIP: 0033:0x7fa0aa19ce59 [ 332.324720][ T9961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.324740][ T9961] RSP: 002b:00007fa0ab0600e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 332.324762][ T9961] RAX: fffffffffffffe00 RBX: 00007fa0aa416098 RCX: 00007fa0aa19ce59 [ 332.324775][ T9961] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa0aa416098 [ 332.324788][ T9961] RBP: 00007fa0aa416090 R08: 0000000000000000 R09: 0000000000000000 [ 332.324799][ T9961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.324811][ T9961] R13: 00007fa0aa416128 R14: 00007ffe29827820 R15: 00007ffe29827908 [ 332.324836][ T9961] [ 333.615442][ T9982] netlink: 334 bytes leftover after parsing attributes in process `syz.2.830'. [ 334.228071][ T8209] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 5 with max blocks 3 with error 117 [ 334.287225][ T8209] EXT4-fs (sda1): This should not happen!! Data will be lost [ 334.287225][ T8209] [ 334.991319][T10009] futex_wake_op: syz.2.837 tries to shift op by -2048; fix this program [ 335.018627][T10009] futex_wake_op: syz.2.837 tries to shift op by -2048; fix this program [ 338.206910][T10050] vhci_hcd vhci_hcd.2: invalid port number 16 [ 338.263662][T10050] vhci_hcd vhci_hcd.2: invalid port number 16 [ 338.505058][T10055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.845'. [ 339.569947][T10053] Process accounting resumed [ 339.866856][T10063] NFSD: Failed to start, no listeners configured. [ 341.396521][T10079] netlink: 28 bytes leftover after parsing attributes in process `syz.3.849'. [ 341.590935][T10083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.849'. [ 342.589251][T10092] netlink: 40 bytes leftover after parsing attributes in process `syz.2.851'. [ 343.318411][T10116] vivid-007: ================= START STATUS ================= [ 343.358416][T10116] vivid-007: Enable Output Cropping: true [ 343.393873][T10116] vivid-007: Enable Output Composing: true [ 343.453132][T10116] vivid-007: Enable Output Scaler: true [ 343.512311][T10116] vivid-007: Tx RGB Quantization Range: Automatic [ 343.575986][T10116] vivid-007: Transmit Mode: HDMI [ 343.626118][T10116] vivid-007: Hotplug Present: 0x00000000 [ 343.702642][T10116] vivid-007: RxSense Present: 0x00000000 [ 343.759421][T10116] vivid-007: EDID Present: 0x00000000 [ 343.822386][T10116] vivid-007: ================== END STATUS ================== [ 344.902433][T10133] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 344.965749][T10138] futex_wake_op: syz.2.858 tries to shift op by -2048; fix this program [ 345.244632][T10138] futex_wake_op: syz.2.858 tries to shift op by -2048; fix this program [ 345.603975][T10142] FAULT_INJECTION: forcing a failure. [ 345.603975][T10142] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 345.656278][T10142] CPU: 0 UID: 0 PID: 10142 Comm: syz.3.861 Not tainted syzkaller #0 PREEMPT(full) [ 345.656306][T10142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 345.656319][T10142] Call Trace: [ 345.656326][T10142] [ 345.656333][T10142] dump_stack_lvl+0x100/0x190 [ 345.656364][T10142] should_fail_ex.cold+0x5/0xa [ 345.656393][T10142] _copy_to_user+0x32/0xd0 [ 345.656422][T10142] io_uring_setup.cold+0x1487/0x1c2e [ 345.656463][T10142] ? __pfx_io_uring_setup+0x10/0x10 [ 345.656499][T10142] ? __pfx_do_futex+0x10/0x10 [ 345.656523][T10142] ? __pfx_do_sys_openat2+0x10/0x10 [ 345.656584][T10142] ? xfd_validate_state+0x129/0x190 [ 345.656620][T10142] __x64_sys_io_uring_setup+0xc2/0x170 [ 345.656655][T10142] do_syscall_64+0x115/0x840 [ 345.656687][T10142] ? clear_bhb_loop+0x40/0x90 [ 345.656716][T10142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.656740][T10142] RIP: 0033:0x7ff7e299ce59 [ 345.656767][T10142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.656790][T10142] RSP: 002b:00007ff7e3770028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 345.656812][T10142] RAX: ffffffffffffffda RBX: 00007ff7e2c15fa0 RCX: 00007ff7e299ce59 [ 345.656828][T10142] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000a [ 345.656844][T10142] RBP: 00007ff7e2a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 345.656859][T10142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.656872][T10142] R13: 00007ff7e2c16038 R14: 00007ff7e2c15fa0 R15: 00007ffeceb5ec28 [ 345.656901][T10142] [ 347.157936][T10132] Process accounting paused [ 347.392916][T10172] netlink: 12 bytes leftover after parsing attributes in process `syz.1.866'. [ 349.408982][T10210] netlink: 28 bytes leftover after parsing attributes in process `syz.3.875'. [ 349.556152][T10211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.875'. [ 351.275252][T10166] Process accounting resumed [ 352.936534][T10247] KVM: debugfs: duplicate directory 10247-3 [ 354.263871][T10273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.885'. [ 354.320103][T10274] netlink: 28953 bytes leftover after parsing attributes in process `syz.2.885'. [ 358.930783][T10312] netlink: 28 bytes leftover after parsing attributes in process `syz.1.894'. [ 358.978104][T10307] NFSD: Failed to start, no listeners configured. [ 359.026020][T10312] veth1_macvtap: left promiscuous mode [ 359.051893][T10312] macsec0: entered promiscuous mode [ 359.074542][T10312] macsec0: entered allmulticast mode [ 359.483120][T10319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.897'. [ 359.622335][ T8198] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 2 with max blocks 1 with error 117 [ 359.700996][ T8198] EXT4-fs (sda1): This should not happen!! Data will be lost [ 359.700996][ T8198] [ 360.824939][ T29] audit: type=1800 audit(2147485946.317:13): pid=10356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.904" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 360.989961][T10359] netlink: 280 bytes leftover after parsing attributes in process `syz.3.906'. [ 361.529829][T10370] FAULT_INJECTION: forcing a failure. [ 361.529829][T10370] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 361.591159][T10370] CPU: 0 UID: 0 PID: 10370 Comm: syz.2.909 Not tainted syzkaller #0 PREEMPT(full) [ 361.591187][T10370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 361.591203][T10370] Call Trace: [ 361.591249][T10370] [ 361.591257][T10370] dump_stack_lvl+0x100/0x190 [ 361.591325][T10370] should_fail_ex.cold+0x5/0xa [ 361.591365][T10370] ? prepare_alloc_pages+0x16d/0x5f0 [ 361.591413][T10370] should_fail_alloc_page+0xeb/0x140 [ 361.591452][T10370] prepare_alloc_pages+0x1f0/0x5f0 [ 361.591515][T10370] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 361.591546][T10370] ? rcu_is_watching+0x12/0xc0 [ 361.591695][T10370] ? __lock_acquire+0x49f/0x1a40 [ 361.591733][T10370] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 361.591759][T10370] ? __css_rstat_updated+0x1ce/0x5a0 [ 361.591811][T10370] ? do_raw_spin_lock+0x128/0x260 [ 361.591835][T10370] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 361.591859][T10370] ? find_held_lock+0x2b/0x80 [ 361.591899][T10370] ? __lock_acquire+0x49f/0x1a40 [ 361.591934][T10370] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 361.591967][T10370] ? policy_nodemask+0xed/0x4f0 [ 361.592005][T10370] alloc_pages_mpol+0x1fb/0x540 [ 361.592038][T10370] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 361.592072][T10370] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 361.592109][T10370] folio_alloc_mpol_noprof+0x36/0x260 [ 361.592145][T10370] shmem_alloc_folio+0x135/0x160 [ 361.592181][T10370] shmem_alloc_and_add_folio+0x371/0xd40 [ 361.592210][T10370] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 361.592235][T10370] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 361.592264][T10370] shmem_get_folio_gfp+0x6ad/0x1910 [ 361.592292][T10370] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 361.592323][T10370] shmem_write_begin+0x1a4/0x420 [ 361.592349][T10370] ? __pfx_shmem_write_begin+0x10/0x10 [ 361.592373][T10370] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 361.592406][T10370] generic_perform_write+0x292/0xa40 [ 361.592446][T10370] ? __pfx_generic_perform_write+0x10/0x10 [ 361.592477][T10370] ? __mark_inode_dirty+0x55c/0x16e0 [ 361.592519][T10370] ? mnt_put_write_access_file+0x4e/0x100 [ 361.592542][T10370] ? file_update_time_flags+0x373/0x500 [ 361.592578][T10370] shmem_file_write_iter+0x10e/0x140 [ 361.592608][T10370] vfs_write+0x6ac/0x1050 [ 361.592632][T10370] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 361.592663][T10370] ? __pfx_vfs_write+0x10/0x10 [ 361.592698][T10370] ksys_write+0x12a/0x250 [ 361.592717][T10370] ? __pfx_ksys_write+0x10/0x10 [ 361.592735][T10370] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 361.592772][T10370] ? syscall_user_dispatch+0x76/0x130 [ 361.592815][T10370] do_syscall_64+0x115/0x840 [ 361.592881][T10370] ? clear_bhb_loop+0x40/0x90 [ 361.592912][T10370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.592932][T10370] RIP: 0033:0x7f755439ce59 [ 361.592949][T10370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.592968][T10370] RSP: 002b:00007f75552de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 361.592992][T10370] RAX: ffffffffffffffda RBX: 00007f7554615fa0 RCX: 00007f755439ce59 [ 361.593006][T10370] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 361.593018][T10370] RBP: 00007f7554432e6f R08: 0000000000000000 R09: 0000000000000000 [ 361.593030][T10370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 361.593041][T10370] R13: 00007f7554616038 R14: 00007f7554615fa0 R15: 00007fff53a5c1c8 [ 361.593070][T10370] [ 362.249931][T10373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.910'. [ 362.657943][T10380] netlink: 16 bytes leftover after parsing attributes in process `syz.2.913'. [ 363.755298][T10408] NFSD: Failed to start, no listeners configured. [ 364.310073][T10417] NFSD: Failed to start, no listeners configured. [ 364.751311][T10438] netlink: 'syz.3.923': attribute type 2 has an invalid length. [ 364.801901][ T8198] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u10:0: bg 4: bad block bitmap checksum [ 364.881561][ T8198] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 74 [ 364.971519][ T8198] EXT4-fs (sda1): This should not happen!! Data will be lost [ 364.971519][ T8198] [ 365.151020][T10443] random: crng reseeded on system resumption [ 365.205484][T10441] vivid-007: ================= START STATUS ================= [ 365.300158][T10441] vivid-007: Enable Output Cropping: true grabbed [ 365.373754][T10441] vivid-007: Enable Output Composing: true grabbed [ 365.456556][T10441] vivid-007: Enable Output Scaler: true grabbed [ 365.540482][T10441] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 365.622992][T10441] vivid-007: Transmit Mode: HDMI grabbed [ 365.716985][T10441] vivid-007: Hotplug Present: 0x00000000 [ 365.776810][T10455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.927'. [ 365.796148][T10441] vivid-007: RxSense Present: 0x00000000 [ 365.875546][T10441] vivid-007: EDID Present: 0x00000000 [ 365.955693][T10441] vivid-007: ================== END STATUS ================== [ 366.044022][T10426] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 366.145294][T10426] EXT4-fs (sda1): This should not happen!! Data will be lost [ 366.145294][T10426] [ 366.599521][T10464] EXT4-fs error (device sda1): ext4_discard_preallocations:5696: comm syz.0.922: Error -117 reading block bitmap for 4 [ 366.753261][T10460] NFSD: Failed to start, no listeners configured. [ 367.200243][T10484] netlink: 330 bytes leftover after parsing attributes in process `syz.1.932'. [ 367.249983][T10484] IPv6: NLM_F_CREATE should be specified when creating new route [ 367.549456][T10487] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 369.635314][T10477] Process accounting paused [ 371.263221][T10527] NFSD: Failed to start, no listeners configured. [ 372.179105][T10526] netlink: 346 bytes leftover after parsing attributes in process `syz.3.938'. [ 373.349638][T10550] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.3.947: bg 5: bad block bitmap checksum [ 373.416062][T10550] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 74 [ 373.491598][T10550] EXT4-fs (sda1): This should not happen!! Data will be lost [ 373.491598][T10550] [ 374.095846][T10568] NFSD: Failed to start, no listeners configured. [ 374.875808][T10588] bridge0: port 3(team0) entered blocking state [ 374.901284][T10588] bridge0: port 3(team0) entered disabled state [ 374.928509][T10588] team0: entered allmulticast mode [ 374.951233][T10588] team_slave_0: entered allmulticast mode [ 374.966332][T10588] team_slave_1: entered allmulticast mode [ 374.982614][T10588] team0: entered promiscuous mode [ 374.995226][T10588] team_slave_0: entered promiscuous mode [ 375.007120][T10588] team_slave_1: entered promiscuous mode [ 375.024018][T10588] bridge0: port 3(team0) entered blocking state [ 375.031379][T10588] bridge0: port 3(team0) entered forwarding state [ 376.569040][T10633] EXT4-fs error (device sda1): ext4_discard_preallocations:5696: comm syz.3.964: Error -117 reading block bitmap for 5 [ 376.673156][T10637] bridge0: port 4(netdevsim3) entered blocking state [ 376.716335][T10637] bridge0: port 4(netdevsim3) entered disabled state [ 376.809406][T10637] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 376.855769][T10651] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 376.897521][T10637] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 376.945164][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 376.955261][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 376.987795][T10637] bridge0: port 4(netdevsim3) entered blocking state [ 376.994599][T10637] bridge0: port 4(netdevsim3) entered forwarding state [ 377.765385][T10635] Process accounting resumed [ 378.683274][T10675] cgroup: fork rejected by pids controller in /syz3 [ 378.725299][T10674] hub 1-0:1.0: USB hub found [ 378.806887][T10674] hub 1-0:1.0: 1 port detected [ 380.333087][T10755] ovs_: entered promiscuous mode [ 381.244923][T10776] Process accounting paused [ 381.590720][T10785] netlink: 28 bytes leftover after parsing attributes in process `syz.3.987'. [ 381.670703][T10785] bridge_slave_1: left allmulticast mode [ 381.700274][T10785] bridge_slave_1: left promiscuous mode [ 381.728209][T10785] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.775386][T10785] bridge_slave_0: left allmulticast mode [ 381.801223][T10785] bridge_slave_0: left promiscuous mode [ 381.827541][T10785] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.252146][T10798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.990'. [ 382.716772][T10805] NFSD: Failed to start, no listeners configured. [ 383.243832][T10820] netlink: 334 bytes leftover after parsing attributes in process `syz.1.995'. [ 383.436237][T10823] MTRR 1 not used [ 383.890069][T10839] nbd: must specify at least one socket [ 384.073327][T10829] rnbd_client L202: map_device: Unknown parameter or missing value '0="/' [ 385.946925][T10884] NFSD: Failed to start, no listeners configured. [ 387.221487][T10900] NFSD: Failed to start, no listeners configured. [ 388.241256][T10918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1010'. [ 388.933750][T10931] blktrace: Concurrent blktraces are not allowed on nbd5 [ 389.486305][T10943] NFSD: Failed to start, no listeners configured. [ 390.193651][T10713] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 2 with max blocks 3 with error 117 [ 390.263227][T10713] EXT4-fs (sda1): This should not happen!! Data will be lost [ 390.263227][T10713] [ 391.686510][T10721] netdevsim netdevsim1335 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.360238][T10993] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1027'. [ 395.221891][T11037] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 5 with max blocks 1 with error 117 [ 395.404147][T11037] EXT4-fs (sda1): This should not happen!! Data will be lost [ 395.404147][T11037] [ 396.411993][T11058] NFSD: Failed to start, no listeners configured. [ 397.773377][ T8374] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 398.302721][T11099] NFSD: Failed to start, no listeners configured. [ 401.868823][T11051] Process accounting resumed [ 404.833667][T11198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1063'. [ 405.500279][T11211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1067'. [ 406.169184][T11222] NFSD: Failed to start, no listeners configured. [ 407.175596][T11248] random: crng reseeded on system resumption [ 409.306470][T11281] NFSD: Failed to start, no listeners configured. [ 409.654915][T11292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1076'. [ 409.824808][T11249] Process accounting paused [ 410.899749][T11307] random: crng reseeded on system resumption [ 410.906322][T11314] ubi: mtd0 is already attached to ubi31 [ 411.027482][T11304] Restarting kernel threads ... [ 411.091262][T11304] Done restarting kernel threads. [ 411.811426][T11318] Process accounting resumed [ 413.513852][T11353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1088'. [ 415.506790][T11377] NFSD: Failed to start, no listeners configured. [ 416.461181][T11393] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1099'. [ 416.653079][T11393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1099'. [ 419.011289][T11415] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 419.126711][T11415] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 419.226473][T11415] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 419.319689][T11415] page_type: f5(slab) [ 419.359703][T11415] raw: 00fff00000000040 ffff88813fe44140 dead000000000100 dead000000000122 [ 419.441271][T11415] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 419.530954][T11415] head: 00fff00000000040 ffff88813fe44140 dead000000000100 dead000000000122 [ 419.606652][T11415] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 419.726026][T11415] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 419.848420][T11415] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 419.979207][T11415] page dumped because: unmovable page [ 420.061287][T11415] page_owner tracks the page as allocated [ 420.180470][T11415] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5002, tgid 5002 (udevd), ts 36992151938, free_ts 27126142462 [ 420.278693][T11415] post_alloc_hook+0xfd/0x120 [ 420.296842][T11415] get_page_from_freelist+0xf48/0x3530 [ 420.329662][T11415] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 420.350464][T11415] new_slab+0xa2/0x650 [ 420.366919][T11415] refill_objects+0xe3/0x410 [ 420.388270][T11415] __pcs_replace_empty_main+0x376/0x680 [ 420.418294][T11415] __kmalloc_noprof+0x66d/0x820 [ 420.441754][T11415] tomoyo_realpath_from_path+0xb6/0x690 [ 420.466706][T11415] tomoyo_path_perm+0x276/0x460 [ 420.484899][T11415] security_inode_getattr+0x116/0x280 [ 420.510133][T11415] vfs_fstat+0x4b/0xe0 [ 420.528234][T11415] __do_sys_newfstat+0x8b/0x110 [ 420.550567][T11415] do_syscall_64+0x115/0x840 [ 420.581931][T11415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.615267][T11415] page last free pid 1 tgid 1 stack trace: [ 420.636015][T11415] free_pages_prepare+0x586/0xd80 [ 420.663523][T11415] __free_contig_range_common+0x14f/0x250 [ 420.683579][T11415] destroy_args+0xa8/0x7a0 [ 420.702705][T11415] debug_vm_pgtable+0x1d69/0x3490 [ 420.715920][T11415] do_one_initcall+0x11d/0x700 [ 420.731919][T11415] kernel_init_freeable+0x6ea/0x7b0 [ 420.748727][T11415] kernel_init+0x1f/0x1e0 [ 420.765937][T11415] ret_from_fork+0x72b/0xd50 [ 420.778116][T11415] ret_from_fork_asm+0x1a/0x30 [ 421.593120][T11451] NFSD: Failed to start, no listeners configured. [ 423.100412][T11467] NFSD: Failed to start, no listeners configured. [ 423.485732][T11446] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 425.101768][T11505] FAULT_INJECTION: forcing a failure. [ 425.101768][T11505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 425.177722][T11505] CPU: 0 UID: 0 PID: 11505 Comm: syz.3.1119 Not tainted syzkaller #0 PREEMPT(full) [ 425.177752][T11505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 425.177766][T11505] Call Trace: [ 425.177774][T11505] [ 425.177784][T11505] dump_stack_lvl+0x100/0x190 [ 425.177817][T11505] should_fail_ex.cold+0x5/0xa [ 425.177847][T11505] _copy_to_iter+0x1f3/0x1720 [ 425.177983][T11505] ? __pfx__copy_to_iter+0x10/0x10 [ 425.178018][T11505] ? find_held_lock+0x2b/0x80 [ 425.178047][T11505] ? eventfd_read+0x46b/0x620 [ 425.178092][T11505] ? rcu_is_watching+0x12/0xc0 [ 425.178124][T11505] eventfd_read+0x47d/0x620 [ 425.178157][T11505] ? __pfx___might_resched+0x10/0x10 [ 425.178196][T11505] ? __pfx_eventfd_read+0x10/0x10 [ 425.178234][T11505] ? apparmor_file_permission+0x13f/0x1c0 [ 425.178314][T11505] ? bpf_lsm_file_permission+0x9/0x10 [ 425.178341][T11505] ? security_file_permission+0x76/0x210 [ 425.178367][T11505] ? rw_verify_area+0xce/0x6d0 [ 425.178399][T11505] ? __pfx_eventfd_read+0x10/0x10 [ 425.178434][T11505] vfs_read+0x82e/0xb40 [ 425.178472][T11505] ? __pfx_vfs_read+0x10/0x10 [ 425.178509][T11505] ? __pfx_do_sys_openat2+0x10/0x10 [ 425.178551][T11505] ksys_read+0x12a/0x250 [ 425.178570][T11505] ? __pfx_ksys_read+0x10/0x10 [ 425.178598][T11505] do_syscall_64+0x115/0x840 [ 425.178629][T11505] ? clear_bhb_loop+0x40/0x90 [ 425.178656][T11505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.178678][T11505] RIP: 0033:0x7ff7e299ce59 [ 425.178696][T11505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.178718][T11505] RSP: 002b:00007ff7e3770028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 425.178740][T11505] RAX: ffffffffffffffda RBX: 00007ff7e2c15fa0 RCX: 00007ff7e299ce59 [ 425.178755][T11505] RDX: 00000000000000ce RSI: 00002000000011c0 RDI: 0000000000000000 [ 425.178769][T11505] RBP: 00007ff7e3770090 R08: 0000000000000000 R09: 0000000000000000 [ 425.178783][T11505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.178796][T11505] R13: 00007ff7e2c16038 R14: 00007ff7e2c15fa0 R15: 00007ffeceb5ec28 [ 425.178825][T11505] [ 427.301111][T11507] FAULT_INJECTION: forcing a failure. [ 427.301111][T11507] name failslab, interval 1, probability 0, space 0, times 0 [ 427.360493][T11522] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1121'. [ 427.446006][T11507] CPU: 0 UID: 0 PID: 11507 Comm: syz.2.1118 Not tainted syzkaller #0 PREEMPT(full) [ 427.446036][T11507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 427.446049][T11507] Call Trace: [ 427.446056][T11507] [ 427.446064][T11507] dump_stack_lvl+0x100/0x190 [ 427.446096][T11507] should_fail_ex.cold+0x5/0xa [ 427.446125][T11507] should_failslab+0xc2/0x120 [ 427.446157][T11507] __kvmalloc_node_noprof+0x116/0x970 [ 427.446188][T11507] ? bucket_table_alloc.isra.0+0x88/0x460 [ 427.446276][T11507] bucket_table_alloc.isra.0+0x88/0x460 [ 427.446302][T11507] __rhashtable_init_noprof+0x43a/0x890 [ 427.446331][T11507] fqdir_init+0xbb/0x1f0 [ 427.446395][T11507] ipv6_frags_init_net+0x2b/0x350 [ 427.446442][T11507] ? __pfx_ipv6_frags_init_net+0x10/0x10 [ 427.446469][T11507] ops_init+0x1e2/0x5f0 [ 427.446513][T11507] setup_net+0x118/0x3a0 [ 427.446537][T11507] ? __pfx_setup_net+0x10/0x10 [ 427.446560][T11507] ? mutex_init_lockdep+0xf1/0x120 [ 427.446587][T11507] copy_net_ns+0x46f/0x7c0 [ 427.446614][T11507] create_new_namespaces+0x3ea/0xac0 [ 427.446649][T11507] unshare_nsproxy_namespaces+0xf2/0x220 [ 427.446675][T11507] ksys_unshare+0x438/0xab0 [ 427.446727][T11507] ? __pfx_ksys_unshare+0x10/0x10 [ 427.446781][T11507] __x64_sys_unshare+0x31/0x40 [ 427.446817][T11507] do_syscall_64+0x115/0x840 [ 427.446851][T11507] ? clear_bhb_loop+0x40/0x90 [ 427.446879][T11507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.446915][T11507] RIP: 0033:0x7f755439ce59 [ 427.446933][T11507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.446954][T11507] RSP: 002b:00007f75552de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 427.446975][T11507] RAX: ffffffffffffffda RBX: 00007f7554615fa0 RCX: 00007f755439ce59 [ 427.446990][T11507] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 427.447003][T11507] RBP: 00007f7554432e6f R08: 0000000000000000 R09: 0000000000000000 [ 427.447017][T11507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.447030][T11507] R13: 00007f7554616038 R14: 00007f7554615fa0 R15: 00007fff53a5c1c8 [ 427.447058][T11507] [ 428.203119][T11529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1121'. [ 428.834556][T11540] MTRR 1 not used [ 428.905203][T11536] can: request_module (can-proto-4) failed. [ 429.995280][T11551] NFSD: Failed to start, no listeners configured. [ 431.224536][T11490] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x7f7554748 pfn:0x38d48 [ 431.293657][T11490] head: order:9 mapcount:1 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 431.349669][T11490] memcg:ffff888032157480 [ 431.377249][T11490] anon flags: 0xfff20000020868(uptodate|lru|owner_2|head|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 431.455381][T11490] raw: 00fff00000000000 ffffffffffff8001 ffffea0000e35208 dead000000000400 [ 431.585100][T11490] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 431.685197][T11490] head: 00fff20000020868 ffffea0001559088 ffff88801de9d3d0 ffff88805c738529 [ 431.789555][T11490] head: 00000007f7554600 0000000000000000 00000001ffffffff ffff888032157480 [ 431.907882][T11490] head: 00fff00000000209 ffffffffffff8001 0080000000000000 0000000000000000 [ 432.012925][T11490] head: ffffffff00000000 000000000000003b 00000000ffffffff 0000000000000200 [ 432.073446][T11584] NFSD: Failed to start, no listeners configured. [ 432.090407][T11490] page dumped because: VM_BUG_ON_PAGE(page->compound_info & 1) [ 432.133511][T11490] page_owner tracks the page as allocated [ 432.165491][T11490] page last allocated via order 9, migratetype Movable, gfp_mask 0x3d20ca(GFP_TRANSHUGE_LIGHT|__GFP_NORETRY|__GFP_THISNODE), pid 11570, tgid 11570 (syz.1.1130), ts 431703343007, free_ts 431646244014 [ 432.292957][T11490] post_alloc_hook+0xfd/0x120 [ 432.314332][T11490] get_page_from_freelist+0xf48/0x3530 [ 432.340919][T11490] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 432.365433][T11490] alloc_pages_mpol+0x1b6/0x540 [ 432.390325][T11490] folio_alloc_mpol_noprof+0x36/0x260 [ 432.410274][T11490] vma_alloc_folio_noprof+0xed/0x1d0 [ 432.439273][T11490] vma_alloc_anon_folio_pmd+0x37/0x3c0 [ 432.464387][T11591] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1133'. [ 432.473491][T11490] do_huge_pmd_anonymous_page+0x286/0x1530 [ 432.495713][T11490] __handle_mm_fault+0x239e/0x2a00 [ 432.513594][T11490] handle_mm_fault+0x37b/0xa30 [ 432.536660][T11490] do_user_addr_fault+0x5a3/0x12f0 [ 432.561910][T11490] exc_page_fault+0x6f/0xd0 [ 432.577668][T11593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1133'. [ 432.592444][T11490] asm_exc_page_fault+0x26/0x30 [ 432.614751][T11490] page last free pid 11566 tgid 11557 stack trace: [ 432.649524][T11490] free_unref_folios+0xa44/0x1710 [ 432.673319][T11490] folios_put_refs+0x585/0xaa0 [ 432.696204][T11490] free_pages_and_swap_cache+0x30b/0x3b0 [ 432.721742][T11490] __tlb_batch_free_encoded_pages+0xe9/0x280 [ 432.749778][T11490] tlb_finish_mmu+0x1b0/0x810 [ 432.770270][T11490] exit_mmap+0x454/0xa00 [ 432.788899][T11490] __mmput+0x12a/0x410 [ 432.807497][T11490] mmput+0x67/0x80 [ 432.827101][T11490] do_exit+0x8b1/0x2ae0 [ 432.845957][T11490] do_group_exit+0xd5/0x2a0 [ 432.870747][T11490] get_signal+0x1ec7/0x21e0 [ 432.896144][T11490] arch_do_signal_or_restart+0x91/0x7a0 [ 432.918747][T11490] exit_to_user_mode_loop+0x139/0x6f0 [ 432.942598][T11490] do_syscall_64+0x652/0x840 [ 432.961775][T11490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.990495][T11583] kexec: Could not allocate control_code_buffer [ 433.048581][T11490] ------------[ cut here ]------------ [ 433.054275][T11490] kernel BUG at ./include/linux/page-flags.h:345! [ 433.106686][T11490] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 433.112957][T11490] CPU: 0 UID: 0 PID: 11490 Comm: syz.0.1115 Not tainted syzkaller #0 PREEMPT(full) [ 433.122330][T11490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 433.132385][T11490] RIP: 0010:set_ps_flags+0x242/0x290 [ 433.137700][T11490] Code: 03 80 3c 02 00 0f 84 5f fe ff ff e8 18 60 24 00 e9 55 fe ff ff e8 0e e7 b4 ff 48 c7 c6 a0 c1 be 8b 48 89 df e8 5f 89 05 00 90 <0f> 0b e8 c7 5f 24 00 e9 ed fd ff ff e8 ed 5f 24 00 e9 57 fe ff ff [ 433.157303][T11490] RSP: 0018:ffffc90005b1f8f8 EFLAGS: 00010246 [ 433.163369][T11490] RAX: 0000000000080000 RBX: ffffea0000e35200 RCX: ffffc900077c9000 [ 433.171338][T11490] RDX: 0000000000080000 RSI: ffffffff82598ea8 RDI: ffff8880334223c4 [ 433.179310][T11490] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 433.187277][T11490] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc90005b1f9d0 [ 433.195268][T11490] R13: 0000000000000000 R14: ffffea0000e35234 R15: dffffc0000000000 [ 433.203241][T11490] FS: 00007fa0ab0606c0(0000) GS:ffff8881242ed000(0000) knlGS:0000000000000000 [ 433.212173][T11490] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 433.218760][T11490] CR2: 0000001b34919ff8 CR3: 0000000077522000 CR4: 00000000003526f0 [ 433.226735][T11490] Call Trace: [ 433.230038][T11490] [ 433.232971][T11490] snapshot_page+0x463/0x560 [ 433.237582][T11490] get_kpage_count+0x94/0x240 [ 433.242298][T11490] ? __pfx_get_kpage_count+0x10/0x10 [ 433.247610][T11490] ? __pfx___might_resched+0x10/0x10 [ 433.252916][T11490] ? __nr_to_section+0xaa/0x100 [ 433.257780][T11490] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 433.263689][T11490] kpage_read.isra.0+0x1b8/0x2b0 [ 433.268642][T11490] ? __pfx_kpagecount_read+0x10/0x10 [ 433.273949][T11490] proc_reg_read+0x120/0x330 [ 433.278547][T11490] ? __pfx_proc_reg_read+0x10/0x10 [ 433.283664][T11490] vfs_readv+0x5d8/0x8d0 [ 433.287937][T11490] ? __pfx_vfs_readv+0x10/0x10 [ 433.292763][T11490] ? __fget_files+0x21f/0x3d0 [ 433.297464][T11490] ? do_readv+0x13e/0x340 [ 433.301805][T11490] do_readv+0x13e/0x340 [ 433.305981][T11490] ? __pfx_do_readv+0x10/0x10 [ 433.310677][T11490] do_syscall_64+0x115/0x840 [ 433.315283][T11490] ? clear_bhb_loop+0x40/0x90 [ 433.319967][T11490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.325860][T11490] RIP: 0033:0x7fa0aa19ce59 [ 433.330276][T11490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.349892][T11490] RSP: 002b:00007fa0ab060028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 433.358310][T11490] RAX: ffffffffffffffda RBX: 00007fa0aa416090 RCX: 00007fa0aa19ce59 [ 433.366288][T11490] RDX: 0000000100000007 RSI: 00002000000001c0 RDI: 0000000000000003 [ 433.374265][T11490] RBP: 00007fa0aa232e6f R08: 0000000000000000 R09: 0000000000000000 [ 433.382234][T11490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.390210][T11490] R13: 00007fa0aa416128 R14: 00007fa0aa416090 R15: 00007ffe29827908 [ 433.398207][T11490] [ 433.401255][T11490] Modules linked in: [ 433.406382][T11490] ---[ end trace 0000000000000000 ]--- [ 433.731656][T11584] Process accounting paused [ 433.846550][T11490] RIP: 0010:set_ps_flags+0x242/0x290 [ 433.864553][T11490] Code: 03 80 3c 02 00 0f 84 5f fe ff ff e8 18 60 24 00 e9 55 fe ff ff e8 0e e7 b4 ff 48 c7 c6 a0 c1 be 8b 48 89 df e8 5f 89 05 00 90 <0f> 0b e8 c7 5f 24 00 e9 ed fd ff ff e8 ed 5f 24 00 e9 57 fe ff ff [ 433.906619][T11490] RSP: 0018:ffffc90005b1f8f8 EFLAGS: 00010246 [ 433.923327][T11490] RAX: 0000000000080000 RBX: ffffea0000e35200 RCX: ffffc900077c9000 [ 433.942559][T11490] RDX: 0000000000080000 RSI: ffffffff82598ea8 RDI: ffff8880334223c4 [ 433.964443][T11490] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 433.981316][T11490] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc90005b1f9d0 [ 433.999420][T11490] R13: 0000000000000000 R14: ffffea0000e35234 R15: dffffc0000000000 [ 434.015371][T11490] FS: 00007fa0ab0606c0(0000) GS:ffff8881242ed000(0000) knlGS:0000000000000000 [ 434.037375][T11490] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 434.052074][T11490] CR2: 00007ff7e2bea2f8 CR3: 0000000077522000 CR4: 00000000003526f0 [ 434.071849][T11490] Kernel panic - not syncing: Fatal exception [ 434.077989][T11490] Kernel Offset: disabled [ 434.082324][T11490] Rebooting in 86400 seconds..