last executing test programs: 8.754231331s ago: executing program 0 (id=1310): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sysfs$auto(0x2, 0x27, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/hugetlb.1GB.limit_in_bytes\x00', 0xa001, 0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x100) socket(0x18, 0x2, 0x0) socket(0xa, 0x2, 0x3a) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/user\x00') socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x11, 0x3, 0xb) close_range$auto(0x2, r0, 0x0) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x14, 0x0, 0x4) sendmmsg$auto(r0, &(0x7f0000000400)={{&(0x7f0000000000), 0x205aa, &(0x7f0000000100)={0x0, 0x4b}, 0x1, 0x0, 0x5, 0x1060}, 0x5}, 0x2, 0x100) 8.298406304s ago: executing program 0 (id=1313): r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x1, 0x7fffffffffffffff, 0x2000000000000df, 0x97, r0, 0x8000) socket(0x11, 0x80003, 0x300) socket(0x11, 0x80003, 0x200300) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0xffffffffffffffff, 0x40104d01, 0xffffffffffffffff) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) capget$auto(&(0x7f0000000280)={0x3, 0x0}, 0x0) capget$auto(&(0x7f0000000300)={0x589, r2}, &(0x7f0000000380)={0x1, 0x1, 0x800}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000002dc0)='/dev/adsp1\x00', 0x2401, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) write$auto(r3, &(0x7f0000000100)='/dev/audio1\x00\xf6\x89\t\xb6t\xae\x12Q\x15E O\xd8\x8d/\xd9\x13\v_\xbcTd\xe0DS\xef?f\xf1ou\xa4W&^\x80\xb2}\x96K\x16*\xa0\x10[8\xa3\x86\x9a3\xc1\xf7\x89x; 4\x8d,U\xa2\xd8\xd5\xfd\xf8\xd8\xb0\xe0W\xad\xe7\x05l*\xc5Z\x8d\xc88}n\x81\tK\x00\x12\xae\xff\xe5\xf1\xb5w\x81$\xd4\xca\xbe&\x195\xc1\xda>\x8c\x89P\xa1\xdb\xb4g9E\xc8\x92\xf6m\x1c\x9b\xebAzeI\xcb\x16f\xc0@\x978x\xbe\x15\'\xc6d}\xc2\xd3\x9f\xc5F8\x15f\x90\xa2\x84', 0x6051) readv$auto(0x3, 0x0, 0x1) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x42, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000000c0), r1) sendmsg$auto_IPVS_CMD_SET_DEST(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4048000}, 0x80) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) msync$auto(0x0, 0xe0, 0x6) 7.147726576s ago: executing program 0 (id=1316): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)='h8\xb6\xaak\xcc\"\xecn\a\x00Snfsd\x00`\xe9\\\xa4\xf9\xf1\x14\xd7\x9bRc\x94&\bY!\xa9\xf6\x9a\x93\xce\xbe\xf13\x02=)\x97y\xc2\xc6\xa0\xec\x12\x8e\x9e\xb5\xe9QE\x15z^8\x957\xb8J\x06\xd9\x9a\x1a\x86\xe0B\xec\x98\x9f\f\xbc\xfb\xe4\xa3\xa9\xbf', 0xf, 0x0) open(&(0x7f0000000100)='.\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x28200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000001c0)=""/234, 0xea) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r2 = socket(0xa, 0x3, 0x3b) getsockopt$auto(r2, 0x29, 0x3d, 0x0, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/time\x00') socket(0x2, 0x3, 0xa) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x501, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x40000, 0x0) msgctl$auto_IPC_INFO(0x8, 0x3, 0x0) ioctl$auto(r4, 0x560a, r4) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) mremap$auto(0x40, 0xffffffffffffffff, 0x4d0, 0x3, 0x4) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f00000002c0)=""/182, 0xb6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) 6.819551716s ago: executing program 1 (id=1325): openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim2/psample/enable\x00', 0x2000, 0x0) socket(0x10, 0x2, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) r0 = io_uring_setup$auto(0x59, 0x0) r1 = getpid() prctl$auto(0x0, 0xfffffffffffffffd, r1, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, r2) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), r0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) madvise$auto(0x1000, 0x200007, 0x19) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000380)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r3, 0x0, 0x100000002, 0x100000001) 6.429831528s ago: executing program 1 (id=1318): socket(0xa, 0x5, 0x0) mmap$auto(0x6, 0x7, 0x8, 0x19, 0x2, 0x40008000) shutdown$auto(0x200000003, 0x2) io_uring_setup$auto(0x6, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop13\x00', 0x8202, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r0, 0x4c00, 0x0) setsockopt$auto(r0, 0x1, 0xff, 0x0, 0x3) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, 0x0, 0x54) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/oom_adj\x00', 0x49402, 0x0) read$auto(r2, 0x0, 0x9a28) preadv$auto(r1, 0x0, 0x5, 0x7, 0x10000405) madvise$auto(0x4000110c230000, 0x8031ca, 0x9) pwrite64$auto(r1, &(0x7f00000001c0)='\vX\xb5n\x91\vI\x1eR\x008\x99\x88\xca\xd9\xec\x1ep\xfa\xff\xff\xff\x1cJr\xde:\x00!\r>\x94\x1a\xd3\xd5\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18\x89\v\x00/\b\xd9\xee\xe69\x8d(<\xc7+\x83\xfcQ;CL\"\x01\x0e\xa4\xdf\t\x00\x1c\xa7\xc3\x97twz\xaeL 2c\xdc<\x18\x8c\x06\xc3\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9\xdb\xe5\x1b{\xa2\x05\x18\x17\xf7\xec\x82\x1akw\x05\x8b\x17\xca\x8c\xff\xd2\x9b/\x9b\xc6\x13\xde\xa5u\x9c\xc1\xa8\xce\xcd\r\xff\xb82\xd9p-a\xdb\xb5\x940uQ\xb2\xaa\xc5]\xee\xb1\xe7\xfe\xdd<\xb4\xa7`i\b\xc6\x98e\xd6\xf4\xb7h\xd9\xa0g7\xb7\r\x04:~\xfcH\x04\xf9\xfdb\x06\xc5\xbd\xda\x82\xfc\xc81\x05I\x9a\xcf\x12\xd0\xd5X\xa6\xe0\xde^\xf9\xd7\x1d\xc8\xd8\x99{\xbd5Y\x1d\x19\x8c\x1d\xeb\x10\x18`\x15\xb6\x03\x96m\xfc\f\xbe\a\x8em\xf6\xab\x10\t\xd1\xac\x12O:\xa9\x9d\xb6\xf9\x8c\xb6\x1fu\xd8', 0x2000000009, 0x2ffffffff) read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) pipe$auto(&(0x7f0000000500)=0xffffffffffffffff) ioctl$auto_RTC_UIE_ON(r3, 0x7003, 0x0) select$auto(0x5, &(0x7f0000000080)={[0x400020000008, 0x80000000007, 0x0, 0x3, 0x8, 0x1, 0x1000000000002, 0x1ffe001, 0x20000000000cad, 0x9, 0xbb4, 0xf, 0x400fffffffe, 0x207, 0x5, 0x1]}, 0x0, 0x0, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x7eb02, 0x0) 6.233151913s ago: executing program 1 (id=1319): unshare$auto(0x40000080) unshare$auto(0x40000080) r0 = gettid() kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@buf=0x0, 0x8ab0, 0x6c0000c000, 0xc000}, 0x4) kill$auto(r0, 0x11) r1 = io_uring_setup$auto(0x59, &(0x7f0000001100)={0x7, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x110001, 0x1, 0x1, 0x40, 0x76c5, 0x8, 0x100000005}}) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) setuid$auto(0x800000000008) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone3$auto(&(0x7f0000000000)={0x200, 0x5, 0x7, 0x2, 0x1, 0x87, 0x8, 0xb, 0x4, 0x2, 0xcb6}, 0xaa) socket$nl_generic(0x10, 0x3, 0x10) r2 = mq_open$auto(&(0x7f00000000c0)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0xa7e, 0x6, &(0x7f0000000100)={0x2, 0x200, 0x9, 0xd}) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) write$auto_mousedev_fops_mousedev(0xffffffffffffffff, 0x0, 0x0) write$auto_vcs_fops_vc_screen(r2, &(0x7f0000000140)="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", 0xfd) r3 = epoll_create$auto(0x1) r4 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x181080, 0x18) open_by_handle_at$auto(r4, &(0x7f0000000140)={0x8, 0x20002, "0100000000000000"}, 0xc) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/iscsi_transport/iser/handle\x00', 0x103400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000001c00)=""/4111, 0x100f) epoll_ctl$auto(r3, 0x1, 0x8000000000000000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000240)={@inferred=r0, 0x6, 0xd9d, 0x2, "49f2b537af57a5ffe342411b4d86df8b7175e5e3129fffd3605d1dfa67908f6032c0f5ee7e5bedfbc2c863e0", @raw=0x4}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff) 5.155721971s ago: executing program 2 (id=1320): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}}) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}, 0xffff}, 0x4000, 0x20000043) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) capset$auto(0x0, &(0x7f0000000000)={0x2, 0x10000002, 0x6}) write$auto(0xffffffffffffffff, 0x0, 0x8000007f) connect$auto(0x3, 0x0, 0x54) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram8\x00', 0x16fa02, 0x0) sendfile$auto(0x3, r1, 0x0, 0x400000000006) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/kernel/task_delayacct\x00', 0x80282, 0x0) select$auto(0x4, 0x0, 0x0, &(0x7f0000000080)={[0x1ff, 0x7, 0x3, 0x1, 0x7, 0x1000000000000004, 0x15f4da0a, 0x4000000400039, 0x3, 0x2bffffffffffffe, 0x80000002, 0x7a142c64, 0x6d3c, 0x5, 0x80, 0xfb]}, 0x0) shutdown$auto(0x200000003, 0x2) 5.154907124s ago: executing program 0 (id=1321): unshare$auto(0x40000080) unshare$auto(0x40000080) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/008/001\x00', 0x402, 0x0) mmap$auto(0x4, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) read$auto(0x3, 0x0, 0x8080) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000040)="8c9700089d1b208365d5b5d112dbab029ed13881d2f2c7ba2eb01c3db79f77fdc2bb50c64a925009dff4cd1aca925c57100112d88f73348a54396800ed598a0e5500d7c0cbb6b1e91d", 0x40000000001243}, 0x4, 0x0) ioctl$auto(r0, 0x400454ca, 0x38) ioctl$auto_TUNSETTXFILTER(r0, 0x400454d1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000000)=""/112, 0x70) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) mmap$auto(0x0, 0x2020006, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x408000, 0x110, 0x8}, 0x18) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x1ff, 0x1001, 0x1, 0x717e, 0x0, 0x7, 0xf6b, 0xd, 0x2, 0x4080001, 0x4, 0x1ffffffffffd, 0x224a, 0xfffffffffffffffe, 0x7, 0x6, 0x7f, 0x3ff, 0x1, 0xa, 0x4, 0x200, 0x6, 0x84, 0x3, 0x0, 0x0, 0x0, 0xfffffffc, [0x56, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xffffffff80000000, 0x0, 0x42, 0xfffffffffffffffe, 0x4, 0x0, 0x0, 0x8, 0x4, 0x400, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x14, 0x0, 0x1000000, 0x0, 0x0, 0xfffffffffffffffc, 0x83, 0x1, 0x6, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, 0x3]}, 0x1fe, 0xd) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffffffffffd03, &(0x7f00000001c0)) r3 = epoll_create$auto(0x1) capset$auto(0x0, 0x0) epoll_ctl$auto(r3, 0x1, 0x8000000000000000, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) 4.877578437s ago: executing program 3 (id=1322): mmap$auto(0x0, 0x3, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2b, 0x1, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x48, r1, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x18, 0x3, 0x0, 0x1, [@nested={0x14, 0x3, 0x0, 0x1, [@typed={0xf, 0xa, 0x0, 0x0, @str='ovs_packet\x00'}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/card1/pcm1p/sub3/status\x00', 0x84300, 0x0) pread64$auto(r2, &(0x7f0000000040)='veth1\x00', 0x200000000006, 0x5) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0xa, 0x300) r3 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x4ff, 0x0) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/thread-self/net/stat/rt_cache\x00', 0x0, 0x0) 3.799486461s ago: executing program 3 (id=1323): r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x1, 0x7fffffffffffffff, 0x2000000000000df, 0x97, r0, 0x8000) socket(0x11, 0x80003, 0x300) socket(0x11, 0x80003, 0x200300) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0xffffffffffffffff, 0x40104d01, 0xffffffffffffffff) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) capget$auto(&(0x7f0000000280)={0x3, 0x0}, 0x0) capget$auto(&(0x7f0000000300)={0x589, r2}, &(0x7f0000000380)={0x1, 0x1, 0x800}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000002dc0)='/dev/adsp1\x00', 0x2401, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) write$auto(r3, &(0x7f0000000100)='/dev/audio1\x00\xf6\x89\t\xb6t\xae\x12Q\x15E O\xd8\x8d/\xd9\x13\v_\xbcTd\xe0DS\xef?f\xf1ou\xa4W&^\x80\xb2}\x96K\x16*\xa0\x10[8\xa3\x86\x9a3\xc1\xf7\x89x; 4\x8d,U\xa2\xd8\xd5\xfd\xf8\xd8\xb0\xe0W\xad\xe7\x05l*\xc5Z\x8d\xc88}n\x81\tK\x00\x12\xae\xff\xe5\xf1\xb5w\x81$\xd4\xca\xbe&\x195\xc1\xda>\x8c\x89P\xa1\xdb\xb4g9E\xc8\x92\xf6m\x1c\x9b\xebAzeI\xcb\x16f\xc0@\x978x\xbe\x15\'\xc6d}\xc2\xd3\x9f\xc5F8\x15f\x90\xa2\x84', 0x6051) readv$auto(0x3, 0x0, 0x1) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x42, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000000c0), r1) sendmsg$auto_IPVS_CMD_SET_DEST(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4048000}, 0x80) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) msync$auto(0x0, 0xe0, 0x6) 3.696676128s ago: executing program 2 (id=1324): r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x582, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000001240), 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) pwrite64$auto(r0, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) setresuid$auto(0x8, 0x8, 0x0) setfsuid$auto(0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/eql/queues/rx-0/rps_flow_cnt\x00', 0x42062, 0x0) write$auto(r4, &(0x7f0000000000)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x7) ioctl$auto_KVM_CREATE_VM(r2, 0xae80, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000600)={{&(0x7f0000000400)="5cdd59f1a68d086a02a2cc1399c7b3f7410eb36cfbec7e7224eaf6de379d09771080b197b8057225ffa98bc9a7bd53a5aee9a2d48d74d149c199be3009d2d61af64942e106e9b586aabcd7ae4de8a0e87e02af7f6af674c2fc8d8a8a78916f9c23e6b8a8be7141ae87f2996f079bfcbadc2ef4a6a3e894ba7dd3d9f11bd4d055", 0x6, 0x0, 0x2, &(0x7f0000000580)="6ea0838008f497d022b78e5e7eb7c80c499b948523cfff8c50f12ebc124c316e0b644f39bb8b55a743fb004e0ed1aec82d0b82794ab3801ad7705749f562a3d87256f1ec7ebea9a0fd16decd422f095cc3abfc2c4e7fcc9916d6a7139c731bdeed", 0x4, 0xc7b}, 0xfffffffe}, 0x6, 0x2) 2.986248984s ago: executing program 1 (id=1326): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101000, 0x0) io_uring_register$auto_IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x8) fsconfig$auto_SHMEM_HUGE_DENY(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mremap$auto(0x0, 0xbfffffffffffffff, 0x7ffffffffffffffd, 0x0, 0x7fffffffb000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/ram6/queue/max_hw_sectors_kb\x00', 0x80080, 0x0) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x400007ffff000) ioctl$auto_EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, r1, 0x1df, 0x3, 0xbe99, 0x2}) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7073000000001400000008000300", @ANYRES32=r6], 0x24}, 0x1, 0x1400, 0x0, 0xaee2e45ddcc9e3a5}, 0x20040080) sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r4, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0xe204}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x9}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, "5bc0dc1cddf1cd9e8f687d9c5e39c44d22145655b310ac1da269"}]}, 0x50}, 0x1, 0x0, 0x0, 0x40c1}, 0x44041010) read$auto(r2, 0x0, 0x20) r7 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r7, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, 0x0, 0x28400, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r8) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r9, 0x805, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) socket(0x18, 0x2, 0x0) 2.863486921s ago: executing program 0 (id=1327): openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, 0x0, 0x169a02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20201, 0x0) getpid() unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x7ff, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, r0) socket(0x10, 0x2, 0xc) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) shutdown$auto(r1, 0xda6) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) r2 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x1, 0x9, 0x7, 0x3b, 0x3ff, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb2, 0x9, 0x3, 0x40fffc, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0x0, 0x81, 0x0, 0x7, 0x0, 0x0, 0x0, [0x1000000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7]}, 0x202, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) stat$auto(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000004c0)={0x10, 0x51, 0xe44e, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x8, 0x8, 0x8, 0x8000000000000000, 0x4, 0x3, 0x1, 0x6d, 0xb89}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) 2.734836323s ago: executing program 2 (id=1328): openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim2/psample/enable\x00', 0x2000, 0x0) socket(0x10, 0x2, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) r0 = io_uring_setup$auto(0x59, 0x0) r1 = getpid() prctl$auto(0x0, 0xfffffffffffffffd, r1, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, r2) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), r0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x2000000) madvise$auto(0x1000, 0x200007, 0x19) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000380)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r3, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x00\x00\xf4\x00\x00\x00\x00\xf4\x00\x00\x00\x00\x00\x00', 0x100000002, 0x100000001) 2.501908216s ago: executing program 2 (id=1329): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)='h8\xb6\xaak\xcc\"\xecn\a\x00Snfsd\x00`\xe9\\\xa4\xf9\xf1\x14\xd7\x9bRc\x94&\bY!\xa9\xf6\x9a\x93\xce\xbe\xf13\x02=)\x97y\xc2\xc6\xa0\xec\x12\x8e\x9e\xb5\xe9QE\x15z^8\x957\xb8J\x06\xd9\x9a\x1a\x86\xe0B\xec\x98\x9f\f\xbc\xfb\xe4\xa3\xa9\xbf', 0xf, 0x0) open(&(0x7f0000000100)='.\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x28200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000001c0)=""/234, 0xea) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r2 = socket(0xa, 0x3, 0x3b) getsockopt$auto(r2, 0x29, 0x3d, 0x0, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/time\x00') socket(0x2, 0x3, 0xa) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x501, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x40000, 0x0) msgctl$auto_IPC_INFO(0x8, 0x3, 0x0) ioctl$auto(r4, 0x560a, r4) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) mremap$auto(0x40, 0xffffffffffffffff, 0x4d0, 0x3, 0x4) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f00000002c0)=""/182, 0xb6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) 2.501620821s ago: executing program 3 (id=1330): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x23, 0x0) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r0, 0x0, 0x4) r1 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, 0x0, 0x2482, 0x0) mmap$auto(0x0, 0x3, 0xb, 0x3132, 0x4008df3, 0x0) fsconfig$auto_SHMEM_HUGE_NEVER(0xffffffffffffffff, 0x0, &(0x7f0000000180)='+\x00_\xe8\xdb\xff\x0f\\X\xc9#\xa0\xdc\x04\x0f\x99v\xbc\xc3\xf2\x03\xe2T\b\x9c\xe7J\xcd\x00\x00\x00\x00\x00\x00\x00\x00c\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0) bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, 0x2, 0x4, 0x0, 0x85, 0x7, 0x9, 0x6, 0x8001}, 0x101) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20080, 0x0) getsockopt$auto_SO_NETNS_COOKIE(0xffffffffffffffff, 0x7, 0x47, &(0x7f0000000380)='-\xc8\xa5\x83\x1c\xe0\x8a\xeb\xcc\xfb\xa8\xe3k\b/*\xa7dev/audio1\x00q>l. <\xb0', &(0x7f00000001c0)=0x9) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20040011) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000280)=""/175, 0xaf) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01032cb57000fbdbdf250a00000f0600010018"], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) syz_genetlink_get_family_id$auto_ncsi(0x0, r3) sendmsg$auto_VDPA_CMD_DEV_GET(r3, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@VDPA_ATTR_MGMTDEV_BUS_NAME={0x6, 0x1, '-\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x20004004) pselect6$auto(0x0, &(0x7f0000000400)={[0x0, 0x6, 0x1, 0x10001, 0x63, 0x2, 0x9, 0x4, 0x8, 0x8, 0x9, 0x9, 0x48000000000, 0x59ac0000000000, 0x6]}, &(0x7f0000000480)={[0x3ff, 0x8, 0x2, 0x0, 0x31ba, 0x6, 0x1ff, 0x1, 0x7, 0xd, 0x400, 0xd9, 0xfffffffffffffffb, 0x2, 0x0, 0x101]}, &(0x7f0000000500)={[0xb, 0xffff, 0x8000000000000000, 0x100, 0xf3, 0x8, 0xfffffffffffffffc, 0x1d, 0xfffffffffffffffb, 0x931, 0x4, 0x401, 0x2, 0x80000001, 0x10001, 0x5]}, &(0x7f00000005c0)={0x9, 0x80}, &(0x7f0000000600)="4a7edeaba4ea09e5cd424a8cd9c1eff57f6160497348d7d7bf4e6a2da9c2da15b14d6d729b9d248d4b88ef7c9ee50ecc167f44c75442532b7127d51cb68fc3b5ac958dfed39ba251d4bc6a564a757a4d65a694d3d3dc04bbe5004e4cfb35493bbd108785cb0d05f64af9ba07073543fcb36f027c4f5269f357115093ae85cf0043dee82b2add220bd9323e36a0bf4e5397e936c401a4d3") fsmount$auto(r1, 0x880, 0x4) 2.002336349s ago: executing program 3 (id=1331): mmap$auto(0x0, 0x8, 0x1000e2, 0xeb1, 0x405, 0x100008000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x20082, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) msync$auto(0x110c230000, 0xc4, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/tty/ttyx0/power/autosuspend_delay_ms\x00', 0x412d00, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r1 = clone$auto(0x21, 0x80000007, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) wait4$auto(r1, 0x0, 0x80000000, &(0x7f0000000140)={{0x10000, 0x100080}, {0x1, 0x9}, 0x8000000000000000, 0x2, 0x9, 0x10, 0x2, 0x1, 0x5, 0x6, 0x3, 0x800000000000008, 0x7, 0x7, 0x6, 0xb4b9}) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_SURVEY(r2, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000000000)={0x14, 0x0, 0xf01, 0x70bd2d, 0x25dfdbfd, {0x32, 0x0, 0xec0}}, 0x14}, 0x1, 0x0, 0x0, 0x24008004}, 0x20048840) prctl$auto(0x1000000003b, 0x1, r1, 0x6, 0x7fb) madvise$auto(0x0, 0xffffffffffff0001, 0x15) getcpu$auto(&(0x7f0000000000)=0x8, &(0x7f0000000040)=0x7, &(0x7f0000000080)={[0x9a, 0x7ff, 0x0, 0x5, 0x1, 0xbef, 0x0, 0x74d, 0x40, 0x9, 0x80000dc6, 0x0, 0x3, 0x67, 0x5, 0x10]}) 1.999345029s ago: executing program 0 (id=1332): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r1, 0x8000) mprotect$auto(0x1000, 0x401000, 0x4) mmap$auto(0xfffffffffffffff7, 0x0, 0x5, 0x10, r1, 0x2) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x15, 0x5, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/bond0/bonding/slaves\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000000000)="2dc2f4045de01fe67fa93d2c44e76f", 0xf) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x29, 0x2, 0xfffffdb2) socket(0xa, 0x801, 0x84) prctl$auto(0x23, 0x4, 0x2008, 0x0, 0x0) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000040), r3) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) setsockopt$auto(r0, 0x3, 0x1000, 0x0, 0x1) mremap$auto(0x1ff000, 0xff, 0x843, 0x3, 0xfffff000) 1.729849635s ago: executing program 2 (id=1333): mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x42200, 0x0) capset$auto(0x0, 0x0) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xff, @raw=0xfffff00c}}) r1 = openat$auto(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10001, 0x10) write$auto(r1, &(0x7f0000000100)='/dev/mixer\x00', 0xfffffffffffffffe) mmap$auto(0x0, 0x4005, 0xb, 0x40eb2, 0x401, 0x300000000000) r2 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) ioctl$auto(r2, 0x80004508, 0xffffffffffffffff) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/11/smp_affinity\x00', 0xe0182, 0x0) readv$auto(0x3, &(0x7f0000000000)={0x0, 0x10000ffff}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lsm_get_self_attr$auto(0x68, 0x0, &(0x7f0000002440)=0x8, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r3 = fanotify_init$auto(0x5, 0x2000000000002) fanotify_mark$auto(r3, 0x1, 0x803a, r3, 0x0) madvise$auto(0x110c230000, 0x1, 0x9) futex$auto(0x0, 0xc, 0xffffffff, 0x0, 0x0, 0x4) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000180)=""/178, 0xb2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 1.725363782s ago: executing program 1 (id=1341): unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa142, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) mmap$auto(0x4000000000, 0x40000c, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/kernel/perf_event_max_stack\x00', 0x143402, 0x0) write$auto(r0, &(0x7f0000000000)='[-%\x00', 0x4) socket(0x2, 0x80002, 0x73) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000100)={0x0, 0x3c, "3c472d82985a6d8a7758f94e538f5e778acad8a5ed692781c02d5ac4a9828854d97ff00487cce6da6ccfd50b68fc2cfe005c66bcefe3b415e6fa3540acc68328", "8a426eb5b7e0ea2e2f7039affc57c4e415250f4c31da3226515bf5a54075ef883c5fce5e5e4e312f8f2fbe4f48f89499040ac4691d6e930b6fe46ddcb257e72cfecbaa8ab21f9da75eb1c4a40bd74332", 0x7, 0x6, "e871062511110b20c6d147cea85d544bd0924f21a95f277ca86339e4fbe8f2b0dc5ebadf39b5f87d99d26106811b6645a80701e9dce265626d863317b7bc0e10"}) r2 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x2641, 0x0) msync$auto(0x7, 0xfffffffffffffffb, 0xf53) write$auto(r2, 0x0, 0x1) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x0, 0x0) ioctl$auto(r3, 0x4b45, 0xffffffffffffffff) 339.807612ms ago: executing program 2 (id=1334): open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) msgrcv$auto(0x0, 0x0, 0xff9, 0x1, 0x3) msgsnd$auto(0x0, 0x0, 0xf, 0xc45) msgctl$auto_MSG_STAT(0x0, 0xb, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x80000000, 0x9fffffffd) r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r0, 0xfffffffffffffd02, &(0x7f00000001c0)) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci7/power\x00', 0x0, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x181d40, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x17ffffffffffffc, 0x400000004) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb2, 0x401, 0x8000) mkdir$auto(0x0, 0x1) unshare$auto(0x40000080) mmap$auto(0xfffffffffffffffe, 0x400007, 0x10000, 0x100009b72, 0xffffffffffffffff, 0x8) sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x10) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) 316.881788ms ago: executing program 3 (id=1335): socket(0xa, 0x5, 0x0) mmap$auto(0x6, 0x7, 0x8, 0x19, 0x2, 0x40008000) shutdown$auto(0x200000003, 0x2) io_uring_setup$auto(0x6, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop13\x00', 0x8202, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r0, 0x4c00, 0x0) setsockopt$auto(r0, 0x1, 0xff, 0x0, 0x3) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, 0x0, 0x54) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/oom_adj\x00', 0x49402, 0x0) read$auto(r2, 0x0, 0x9a28) preadv$auto(r1, 0x0, 0x5, 0x7, 0x10000405) madvise$auto(0x4000110c230000, 0x8031ca, 0x9) madvise$auto(0x80000000, 0xda, 0x8) read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) pipe$auto(&(0x7f0000000500)=0xffffffffffffffff) ioctl$auto_RTC_UIE_ON(r3, 0x7003, 0x0) select$auto(0x5, &(0x7f0000000080)={[0x400020000008, 0x80000000007, 0x0, 0x3, 0x8, 0x1, 0x1000000000002, 0x1ffe001, 0x20000000000cad, 0x9, 0xbb4, 0xf, 0x400fffffffe, 0x207, 0x5, 0x1]}, 0x0, 0x0, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x7eb02, 0x0) 86.948616ms ago: executing program 3 (id=1336): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/snd_hda_intel/parameters/power_save\x00', 0x80002, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r1 = socket(0xa, 0x5, 0x0) r2 = getsockopt$auto(r1, 0x84, 0x7a, 0x0, 0x0) close_range$auto(r2, r2, 0x8) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/sequencer2\x00', 0x1, 0x0) ioctl$auto_SNDCTL_MIDI_PRETIME(r5, 0xc0046d00, 0x0) ioctl$auto_BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d, 0x0}) r7 = wait4$auto(r6, &(0x7f00000001c0)=0x102, 0xcda, &(0x7f0000000380)={{0x1, 0x1}, {0xfffffffffffffffc, 0x4}, 0xc63e, 0x3, 0x4189, 0x8, 0x7fffffffffffffff, 0x40000000, 0x7ff, 0x2, 0x1, 0x80ac, 0x2, 0x6, 0x2, 0x9}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000829bd7000fcdbdf250100000008000200", @ANYRES32=r7, @ANYBLOB="39573480f074dc6d287348e3adaeea0944d94cec82e3af2b626e99adbdba91c728baacf839bbfe45fc2568f4db33ca5442b67c6f144e7c7a6c6ecb5850998e3a4fbb5e9a406395317106a0af4e5051d062022f2dc05eed9b0d1ec44c2ae5f0bb2db801fd3ad4651a000000000000ee236483ed84b8daaaa0d21570582f678823b7390a3a0ae893c09ebbe2dec1e4e4c5580c16df69e486404c45d707429d457ffe68b8d432bb6af15676104e632d23c03d6ee7ef07b7f8a3c19857f2aeaf523b63f631e5e55a3c59c732fa51570d843d384e3cd96f070da15feeb7e7fc5a537b91200d9191f293c5a67e14965b1cf7"], 0x1c}}, 0x8040) capget$auto(&(0x7f0000000440)={0x9, r7}, &(0x7f0000000480)={0x6, 0xffffffc0, 0xfffffffd}) prctl$auto_PR_SCHED_CORE_SHARE_TO(0x0, 0x2, r7, 0xc, 0x6) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x89\xe8^\x98#\x86\x92\x86w\xa9>\x0e\x8f}yX\xc5\x9c\xb88\xc0\x1c\xd1\xd9\x9e\x91\b\xfc=\x18\xf9\x92\b\xa3Rgu\xf5L\x1d', 0x3ff) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x2) ioctl$auto(r0, 0x921064a2, 0x20000000020000a) r8 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000000)={{0x3, 0xffffffff, 0x1, 0x4005, 0x6}, "654c18440000738236000000fdc4fc151014d9ac0200000000001000"}) readv$auto(r8, &(0x7f0000000180)={0x0, 0x4}, 0x4) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80003, 0x0) socket(0x2, 0x80002, 0x73) 0s ago: executing program 1 (id=1337): r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x1, 0x7fffffffffffffff, 0x2000000000000df, 0x97, r0, 0x8000) socket(0x11, 0x80003, 0x300) socket(0x11, 0x80003, 0x200300) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0xffffffffffffffff, 0x40104d01, 0xffffffffffffffff) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) capget$auto(&(0x7f0000000280)={0x3, 0x0}, 0x0) capget$auto(&(0x7f0000000300)={0x589, r2}, &(0x7f0000000380)={0x1, 0x1, 0x800}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000002dc0)='/dev/adsp1\x00', 0x2401, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) write$auto(r3, &(0x7f0000000100)='/dev/audio1\x00\xf6\x89\t\xb6t\xae\x12Q\x15E O\xd8\x8d/\xd9\x13\v_\xbcTd\xe0DS\xef?f\xf1ou\xa4W&^\x80\xb2}\x96K\x16*\xa0\x10[8\xa3\x86\x9a3\xc1\xf7\x89x; 4\x8d,U\xa2\xd8\xd5\xfd\xf8\xd8\xb0\xe0W\xad\xe7\x05l*\xc5Z\x8d\xc88}n\x81\tK\x00\x12\xae\xff\xe5\xf1\xb5w\x81$\xd4\xca\xbe&\x195\xc1\xda>\x8c\x89P\xa1\xdb\xb4g9E\xc8\x92\xf6m\x1c\x9b\xebAzeI\xcb\x16f\xc0@\x978x\xbe\x15\'\xc6d}\xc2\xd3\x9f\xc5F8\x15f\x90\xa2\x84', 0x6051) readv$auto(0x3, 0x0, 0x1) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x42, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000000c0), r1) sendmsg$auto_IPVS_CMD_SET_DEST(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4048000}, 0x80) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) msync$auto(0x0, 0xe0, 0x6) kernel console output (not intermixed with test programs): 00080 [ 133.939980][ T6457] RBP: 00007f9c1c032e6f R08: 0000000000000000 R09: 0000000000000000 [ 133.939997][ T6457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.940014][ T6457] R13: 00007f9c1c216038 R14: 00007f9c1c215fa0 R15: 00007fff61508528 [ 133.940051][ T6457] [ 134.230254][ T6464] netlink: zone id is out of range [ 134.237671][ T6464] netlink: zone id is out of range [ 134.257767][ T6464] netlink: zone id is out of range [ 134.277625][ T6464] netlink: zone id is out of range [ 134.873271][ T6440] kexec: Could not allocate control_code_buffer [ 135.167829][ T6470] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.730074][ T6470] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.145418][ T6470] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.321193][ T6470] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.639319][ T30] audit: type=1800 audit(2147502005.438:4): pid=6489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.133" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 137.030032][ T6496] EXT4-fs error (device sda1): trigger_test_error:130: comm syz.3.134: 7 [ 137.305355][ T6498] zswap: compressor 000 not available [ 137.985634][ T6506] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 138.647024][ T6519] zswap: compressor 000 not available [ 139.046604][ T6518] zswap: compressor 000 not available [ 139.716546][ T6536] kafs: addr_prefs: Invalid Command [ 140.809358][ T6558] FAULT_INJECTION: forcing a failure. [ 140.809358][ T6558] name failslab, interval 1, probability 0, space 0, times 0 [ 140.918631][ T6558] CPU: 1 UID: 0 PID: 6558 Comm: syz.3.146 Not tainted syzkaller #0 PREEMPT(full) [ 140.918655][ T6558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 140.918664][ T6558] Call Trace: [ 140.918670][ T6558] [ 140.918676][ T6558] dump_stack_lvl+0x100/0x190 [ 140.918701][ T6558] should_fail_ex.cold+0x5/0xa [ 140.918722][ T6558] should_failslab+0xc2/0x120 [ 140.918743][ T6558] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 140.918764][ T6558] ? __d_alloc+0x35/0xa50 [ 140.918783][ T6558] __d_alloc+0x35/0xa50 [ 140.918802][ T6558] d_alloc+0x4a/0x1e0 [ 140.918822][ T6558] lookup_one_qstr_excl+0x171/0x250 [ 140.918843][ T6558] start_dirop+0x59/0xb0 [ 140.918866][ T6558] simple_start_creating+0xf9/0x110 [ 140.918890][ T6558] ? __pfx_simple_start_creating+0x10/0x10 [ 140.918913][ T6558] ? mntput+0x70/0xa0 [ 140.918935][ T6558] ? simple_pin_fs+0xa3/0x190 [ 140.918957][ T6558] debugfs_start_creating.part.0+0x82/0x170 [ 140.918978][ T6558] __debugfs_create_file+0xb3/0x4f0 [ 140.919000][ T6558] debugfs_create_file_full+0x41/0x60 [ 140.919022][ T6558] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 140.919043][ T6558] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 140.919061][ T6558] ? ida_alloc_range+0x70d/0x830 [ 140.919096][ T6558] ? kasan_save_track+0x14/0x30 [ 140.919114][ T6558] ? __kasan_kmalloc+0xaa/0xb0 [ 140.919132][ T6558] ? lockdep_init_map_type+0x5c/0x250 [ 140.919150][ T6558] preinit_net.part.0+0x252/0x920 [ 140.919168][ T6558] copy_net_ns+0x339/0x7c0 [ 140.919188][ T6558] create_new_namespaces+0x3ea/0xac0 [ 140.919209][ T6558] unshare_nsproxy_namespaces+0xf2/0x220 [ 140.919227][ T6558] ksys_unshare+0x438/0xab0 [ 140.919254][ T6558] ? __pfx_ksys_unshare+0x10/0x10 [ 140.919301][ T6558] __x64_sys_unshare+0x31/0x40 [ 140.919334][ T6558] do_syscall_64+0x115/0x840 [ 140.919354][ T6558] ? clear_bhb_loop+0x40/0x90 [ 140.919372][ T6558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.919387][ T6558] RIP: 0033:0x7fb33679ce59 [ 140.919400][ T6558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.919414][ T6558] RSP: 002b:00007fb3376e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 140.919429][ T6558] RAX: ffffffffffffffda RBX: 00007fb336a16180 RCX: 00007fb33679ce59 [ 140.919439][ T6558] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 140.919448][ T6558] RBP: 00007fb336832e6f R08: 0000000000000000 R09: 0000000000000000 [ 140.919457][ T6558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.919466][ T6558] R13: 00007fb336a16218 R14: 00007fb336a16180 R15: 00007ffe68d9a3b8 [ 140.919486][ T6558] [ 142.875749][ T6581] FAULT_INJECTION: forcing a failure. [ 142.875749][ T6581] name failslab, interval 1, probability 0, space 0, times 0 [ 142.905309][ T6581] CPU: 1 UID: 0 PID: 6581 Comm: syz.2.152 Not tainted syzkaller #0 PREEMPT(full) [ 142.905348][ T6581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 142.905365][ T6581] Call Trace: [ 142.905374][ T6581] [ 142.905384][ T6581] dump_stack_lvl+0x100/0x190 [ 142.905427][ T6581] should_fail_ex.cold+0x5/0xa [ 142.905466][ T6581] should_failslab+0xc2/0x120 [ 142.905508][ T6581] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 142.905546][ T6581] ? __d_alloc+0x35/0xa50 [ 142.905583][ T6581] __d_alloc+0x35/0xa50 [ 142.905618][ T6581] d_alloc+0x4a/0x1e0 [ 142.905651][ T6581] lookup_one_qstr_excl+0x171/0x250 [ 142.905693][ T6581] start_dirop+0x59/0xb0 [ 142.905738][ T6581] simple_start_creating+0xf9/0x110 [ 142.905784][ T6581] ? __pfx_simple_start_creating+0x10/0x10 [ 142.905831][ T6581] ? mntput+0x70/0xa0 [ 142.905874][ T6581] ? simple_pin_fs+0xa3/0x190 [ 142.905918][ T6581] debugfs_start_creating.part.0+0x82/0x170 [ 142.905960][ T6581] __debugfs_create_file+0xb3/0x4f0 [ 142.906004][ T6581] debugfs_create_file_full+0x41/0x60 [ 142.906047][ T6581] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 142.906082][ T6581] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 142.906124][ T6581] ? ida_alloc_range+0x70d/0x830 [ 142.906190][ T6581] ? kasan_save_track+0x14/0x30 [ 142.906226][ T6581] ? __kasan_kmalloc+0xaa/0xb0 [ 142.906262][ T6581] ? lockdep_init_map_type+0x5c/0x250 [ 142.906297][ T6581] preinit_net.part.0+0x252/0x920 [ 142.906331][ T6581] copy_net_ns+0x339/0x7c0 [ 142.906368][ T6581] create_new_namespaces+0x3ea/0xac0 [ 142.906410][ T6581] unshare_nsproxy_namespaces+0xf2/0x220 [ 142.906445][ T6581] ksys_unshare+0x438/0xab0 [ 142.906488][ T6581] ? __pfx_ksys_unshare+0x10/0x10 [ 142.906539][ T6581] __x64_sys_unshare+0x31/0x40 [ 142.906576][ T6581] do_syscall_64+0x115/0x840 [ 142.906613][ T6581] ? clear_bhb_loop+0x40/0x90 [ 142.906648][ T6581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.906678][ T6581] RIP: 0033:0x7fa65bb9ce59 [ 142.906703][ T6581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.906729][ T6581] RSP: 002b:00007fa65cacf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 142.906757][ T6581] RAX: ffffffffffffffda RBX: 00007fa65be16090 RCX: 00007fa65bb9ce59 [ 142.906776][ T6581] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 142.906794][ T6581] RBP: 00007fa65bc32e6f R08: 0000000000000000 R09: 0000000000000000 [ 142.906810][ T6581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.906827][ T6581] R13: 00007fa65be16128 R14: 00007fa65be16090 R15: 00007ffed1fce078 [ 142.906865][ T6581] [ 143.813754][ T6582] zswap: compressor 000 not available [ 147.331168][ T6624] zswap: compressor 000 not available [ 148.154539][ T6637] FAULT_INJECTION: forcing a failure. [ 148.154539][ T6637] name failslab, interval 1, probability 0, space 0, times 0 [ 148.229939][ T6637] CPU: 1 UID: 0 PID: 6637 Comm: syz.2.170 Not tainted syzkaller #0 PREEMPT(full) [ 148.229979][ T6637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 148.229995][ T6637] Call Trace: [ 148.230003][ T6637] [ 148.230013][ T6637] dump_stack_lvl+0x100/0x190 [ 148.230054][ T6637] should_fail_ex.cold+0x5/0xa [ 148.230091][ T6637] should_failslab+0xc2/0x120 [ 148.230130][ T6637] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 148.230164][ T6637] ? start_dirop+0x79/0xb0 [ 148.230206][ T6637] ? alloc_inode+0x68/0x250 [ 148.230244][ T6637] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 148.230284][ T6637] alloc_inode+0x68/0x250 [ 148.230321][ T6637] new_inode+0x22/0x1c0 [ 148.230371][ T6637] __debugfs_create_file+0x105/0x4f0 [ 148.230417][ T6637] debugfs_create_file_full+0x41/0x60 [ 148.230462][ T6637] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 148.230501][ T6637] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 148.230566][ T6637] ? kasan_save_track+0x14/0x30 [ 148.230601][ T6637] ? __kasan_kmalloc+0xaa/0xb0 [ 148.230637][ T6637] ? lockdep_init_map_type+0x5c/0x250 [ 148.230672][ T6637] preinit_net.part.0+0x43b/0x920 [ 148.230706][ T6637] copy_net_ns+0x339/0x7c0 [ 148.230745][ T6637] create_new_namespaces+0x3ea/0xac0 [ 148.230786][ T6637] unshare_nsproxy_namespaces+0xf2/0x220 [ 148.230821][ T6637] ksys_unshare+0x438/0xab0 [ 148.230859][ T6637] ? __pfx_ksys_unshare+0x10/0x10 [ 148.230910][ T6637] __x64_sys_unshare+0x31/0x40 [ 148.230947][ T6637] do_syscall_64+0x115/0x840 [ 148.230986][ T6637] ? clear_bhb_loop+0x40/0x90 [ 148.231022][ T6637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.231053][ T6637] RIP: 0033:0x7fa65bb9ce59 [ 148.231077][ T6637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.231104][ T6637] RSP: 002b:00007fa65cacf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 148.231132][ T6637] RAX: ffffffffffffffda RBX: 00007fa65be16090 RCX: 00007fa65bb9ce59 [ 148.231151][ T6637] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 148.231168][ T6637] RBP: 00007fa65bc32e6f R08: 0000000000000000 R09: 0000000000000000 [ 148.231185][ T6637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.231201][ T6637] R13: 00007fa65be16128 R14: 00007fa65be16090 R15: 00007ffed1fce078 [ 148.231239][ T6637] [ 148.231251][ T6637] debugfs: out of free dentries, can not create file 'net_notrefcnt@ffff888012e602f8' [ 149.701346][ T6638] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 150.096440][ T6664] netlink: 28 bytes leftover after parsing attributes in process `syz.1.174'. [ 150.388538][ T6664] bond0: (slave bond_slave_1): Releasing backup interface [ 151.071112][ T6671] zswap: compressor 000 not available [ 151.349529][ T6641] Process accounting paused [ 152.101770][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 157.068432][ T6730] FAULT_INJECTION: forcing a failure. [ 157.068432][ T6730] name failslab, interval 1, probability 0, space 0, times 0 [ 157.094791][ T6730] CPU: 1 UID: 0 PID: 6730 Comm: syz.0.177 Not tainted syzkaller #0 PREEMPT(full) [ 157.094830][ T6730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 157.094848][ T6730] Call Trace: [ 157.094858][ T6730] [ 157.094869][ T6730] dump_stack_lvl+0x100/0x190 [ 157.094910][ T6730] should_fail_ex.cold+0x5/0xa [ 157.094947][ T6730] should_failslab+0xc2/0x120 [ 157.094989][ T6730] __kmalloc_cache_noprof+0x91/0x6c0 [ 157.095020][ T6730] ? vidtv_psi_network_name_desc_init+0x183/0x310 [ 157.095065][ T6730] ? vidtv_psi_service_list_desc_init+0x52/0x550 [ 157.095116][ T6730] vidtv_psi_service_list_desc_init+0x52/0x550 [ 157.095170][ T6730] vidtv_psi_nit_table_init+0x39a/0x5f0 [ 157.095204][ T6730] vidtv_channel_si_init+0xccf/0x18f0 [ 157.095246][ T6730] vidtv_mux_init+0x522/0xbf0 [ 157.095280][ T6730] vidtv_start_feed+0x34e/0x500 [ 157.095322][ T6730] ? __pfx_vidtv_start_feed+0x10/0x10 [ 157.095362][ T6730] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 157.095423][ T6730] dmx_section_feed_start_filtering+0x3a8/0x660 [ 157.095477][ T6730] dvb_dmxdev_filter_start+0x767/0xdd0 [ 157.095526][ T6730] dvb_demux_do_ioctl+0xe64/0x1200 [ 157.095577][ T6730] dvb_usercopy+0x167/0x340 [ 157.095610][ T6730] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 157.095648][ T6730] ? __pfx_dvb_usercopy+0x10/0x10 [ 157.095692][ T6730] ? __fget_files+0x21f/0x3d0 [ 157.095734][ T6730] dvb_demux_ioctl+0x29/0x40 [ 157.095768][ T6730] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 157.095804][ T6730] __x64_sys_ioctl+0x18e/0x210 [ 157.095847][ T6730] do_syscall_64+0x115/0x840 [ 157.095886][ T6730] ? clear_bhb_loop+0x40/0x90 [ 157.095922][ T6730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.095951][ T6730] RIP: 0033:0x7f9c1bf9ce59 [ 157.095977][ T6730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.096004][ T6730] RSP: 002b:00007f9c1cd88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 157.096033][ T6730] RAX: ffffffffffffffda RBX: 00007f9c1c216090 RCX: 00007f9c1bf9ce59 [ 157.096052][ T6730] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000006 [ 157.096068][ T6730] RBP: 00007f9c1c032e6f R08: 0000000000000000 R09: 0000000000000000 [ 157.096085][ T6730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.096101][ T6730] R13: 00007f9c1c216128 R14: 00007f9c1c216090 R15: 00007fff61508528 [ 157.096140][ T6730] [ 158.551189][ T6749] FAULT_INJECTION: forcing a failure. [ 158.551189][ T6749] name failslab, interval 1, probability 0, space 0, times 0 [ 158.590669][ T6749] CPU: 0 UID: 0 PID: 6749 Comm: syz.3.179 Not tainted syzkaller #0 PREEMPT(full) [ 158.590708][ T6749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 158.590725][ T6749] Call Trace: [ 158.590733][ T6749] [ 158.590744][ T6749] dump_stack_lvl+0x100/0x190 [ 158.590785][ T6749] should_fail_ex.cold+0x5/0xa [ 158.590823][ T6749] should_failslab+0xc2/0x120 [ 158.590862][ T6749] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 158.590900][ T6749] ? __d_alloc+0x35/0xa50 [ 158.590936][ T6749] __d_alloc+0x35/0xa50 [ 158.590971][ T6749] d_alloc+0x4a/0x1e0 [ 158.591003][ T6749] lookup_one_qstr_excl+0x171/0x250 [ 158.591044][ T6749] start_dirop+0x59/0xb0 [ 158.591088][ T6749] simple_start_creating+0xf9/0x110 [ 158.591142][ T6749] ? __pfx_simple_start_creating+0x10/0x10 [ 158.591190][ T6749] ? mntput+0x70/0xa0 [ 158.591233][ T6749] ? simple_pin_fs+0xa3/0x190 [ 158.591276][ T6749] debugfs_start_creating.part.0+0x82/0x170 [ 158.591317][ T6749] __debugfs_create_file+0xb3/0x4f0 [ 158.591360][ T6749] debugfs_create_file_full+0x41/0x60 [ 158.591402][ T6749] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 158.591441][ T6749] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 158.591478][ T6749] ? ida_alloc_range+0x70d/0x830 [ 158.591543][ T6749] ? kasan_save_track+0x14/0x30 [ 158.591578][ T6749] ? __kasan_kmalloc+0xaa/0xb0 [ 158.591613][ T6749] ? lockdep_init_map_type+0x5c/0x250 [ 158.591662][ T6749] preinit_net.part.0+0x252/0x920 [ 158.591696][ T6749] copy_net_ns+0x339/0x7c0 [ 158.591733][ T6749] create_new_namespaces+0x3ea/0xac0 [ 158.591772][ T6749] unshare_nsproxy_namespaces+0xf2/0x220 [ 158.591808][ T6749] ksys_unshare+0x438/0xab0 [ 158.591847][ T6749] ? __pfx_ksys_unshare+0x10/0x10 [ 158.591897][ T6749] __x64_sys_unshare+0x31/0x40 [ 158.591933][ T6749] do_syscall_64+0x115/0x840 [ 158.591971][ T6749] ? clear_bhb_loop+0x40/0x90 [ 158.592005][ T6749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.592034][ T6749] RIP: 0033:0x7fb33679ce59 [ 158.592059][ T6749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.592085][ T6749] RSP: 002b:00007fb33770a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 158.592121][ T6749] RAX: ffffffffffffffda RBX: 00007fb336a16090 RCX: 00007fb33679ce59 [ 158.592139][ T6749] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 158.592154][ T6749] RBP: 00007fb336832e6f R08: 0000000000000000 R09: 0000000000000000 [ 158.592166][ T6749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.592181][ T6749] R13: 00007fb336a16128 R14: 00007fb336a16090 R15: 00007ffe68d9a3b8 [ 158.592213][ T6749] [ 161.663999][ T6750] Process accounting paused [ 163.336086][ T6796] MTRR 1 not used [ 163.985836][ T6806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.189'. [ 164.014154][ T6806] netlink: 'syz.1.189': attribute type 1 has an invalid length. [ 164.046641][ T6806] netlink: 342 bytes leftover after parsing attributes in process `syz.1.189'. [ 167.183440][ T6855] syz.0.199 uses obsolete (PF_INET,SOCK_PACKET) [ 167.468987][ T6853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.200'. [ 169.714709][ T6882] netlink: 342 bytes leftover after parsing attributes in process `syz.0.208'. [ 172.702899][ T6915] FAULT_INJECTION: forcing a failure. [ 172.702899][ T6915] name failslab, interval 1, probability 0, space 0, times 0 [ 172.750744][ T6915] CPU: 0 UID: 0 PID: 6915 Comm: syz.1.213 Not tainted syzkaller #0 PREEMPT(full) [ 172.750786][ T6915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 172.750804][ T6915] Call Trace: [ 172.750814][ T6915] [ 172.750824][ T6915] dump_stack_lvl+0x100/0x190 [ 172.750867][ T6915] should_fail_ex.cold+0x5/0xa [ 172.750904][ T6915] should_failslab+0xc2/0x120 [ 172.750946][ T6915] kmem_cache_alloc_noprof+0x91/0x6a0 [ 172.750980][ T6915] ? stack_trace_save+0x8e/0xc0 [ 172.751021][ T6915] ? alloc_empty_file+0x5b/0x1c0 [ 172.751064][ T6915] alloc_empty_file+0x5b/0x1c0 [ 172.751102][ T6915] path_openat+0xe7/0x4280 [ 172.751136][ T6915] ? __kasan_slab_alloc+0x89/0x90 [ 172.751173][ T6915] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 172.751207][ T6915] ? do_getname+0x35/0x390 [ 172.751241][ T6915] ? do_sys_openat2+0xc7/0x1e0 [ 172.751276][ T6915] ? __x64_sys_openat+0x12d/0x210 [ 172.751310][ T6915] ? do_syscall_64+0x115/0x840 [ 172.751345][ T6915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.751386][ T6915] ? __pfx_path_openat+0x10/0x10 [ 172.751431][ T6915] do_file_open+0x20e/0x430 [ 172.751464][ T6915] ? __pfx_do_file_open+0x10/0x10 [ 172.751511][ T6915] ? alloc_fd+0x471/0x7a0 [ 172.751538][ T6915] ? do_getname+0x191/0x390 [ 172.751572][ T6915] do_sys_openat2+0x10f/0x1e0 [ 172.751605][ T6915] ? __pfx_do_sys_openat2+0x10/0x10 [ 172.751649][ T6915] __x64_sys_openat+0x12d/0x210 [ 172.751687][ T6915] ? __pfx___x64_sys_openat+0x10/0x10 [ 172.751734][ T6915] do_syscall_64+0x115/0x840 [ 172.751770][ T6915] ? clear_bhb_loop+0x40/0x90 [ 172.751800][ T6915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.751826][ T6915] RIP: 0033:0x7fccb879ce59 [ 172.751849][ T6915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.751874][ T6915] RSP: 002b:00007fccb95fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 172.751900][ T6915] RAX: ffffffffffffffda RBX: 00007fccb8a16180 RCX: 00007fccb879ce59 [ 172.751918][ T6915] RDX: 0000000000000080 RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 172.751936][ T6915] RBP: 00007fccb8832e6f R08: 0000000000000000 R09: 0000000000000000 [ 172.751953][ T6915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.751970][ T6915] R13: 00007fccb8a16218 R14: 00007fccb8a16180 R15: 00007ffd436288c8 [ 172.752007][ T6915] [ 176.823160][ T6963] netlink: 342 bytes leftover after parsing attributes in process `syz.3.222'. [ 177.974102][ T6977] zswap: compressor 000 not available [ 180.019617][ T6995] FAULT_INJECTION: forcing a failure. [ 180.019617][ T6995] name fail_futex, interval 1, probability 0, space 0, times 1 [ 180.052561][ T6995] CPU: 0 UID: 0 PID: 6995 Comm: syz.1.236 Not tainted syzkaller #0 PREEMPT(full) [ 180.052584][ T6995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 180.052593][ T6995] Call Trace: [ 180.052598][ T6995] [ 180.052604][ T6995] dump_stack_lvl+0x100/0x190 [ 180.052632][ T6995] should_fail_ex.cold+0x5/0xa [ 180.052652][ T6995] get_futex_key+0x1d2/0x14f0 [ 180.052670][ T6995] ? __pfx_get_futex_key+0x10/0x10 [ 180.052684][ T6995] ? __pfx___resched_curr+0x10/0x10 [ 180.052700][ T6995] ? wakeup_preempt_fair+0x640/0x1060 [ 180.052718][ T6995] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 180.052753][ T6995] futex_wait_setup+0x91/0x540 [ 180.052778][ T6995] __futex_wait+0x19f/0x300 [ 180.052800][ T6995] ? __pfx___futex_wait+0x10/0x10 [ 180.052818][ T6995] ? __pfx_try_to_wake_up+0x10/0x10 [ 180.052833][ T6995] ? futex_hash+0x311/0x400 [ 180.052849][ T6995] ? __pfx_futex_wake_mark+0x10/0x10 [ 180.052870][ T6995] ? find_held_lock+0x2b/0x80 [ 180.052888][ T6995] ? futex_wake+0x4ea/0x5e0 [ 180.052911][ T6995] futex_wait+0xe6/0x370 [ 180.052930][ T6995] ? __pfx_futex_wait+0x10/0x10 [ 180.052959][ T6995] do_futex+0x265/0x440 [ 180.052976][ T6995] ? __pfx_do_futex+0x10/0x10 [ 180.052994][ T6995] ? __fget_files+0x21f/0x3d0 [ 180.053010][ T6995] __x64_sys_futex+0x34f/0x4d0 [ 180.053031][ T6995] ? __pfx___x64_sys_futex+0x10/0x10 [ 180.053048][ T6995] ? __pfx_do_writev+0x10/0x10 [ 180.053069][ T6995] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 180.053093][ T6995] ? syscall_user_dispatch+0x76/0x130 [ 180.053120][ T6995] do_syscall_64+0x115/0x840 [ 180.053142][ T6995] ? clear_bhb_loop+0x40/0x90 [ 180.053161][ T6995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.053176][ T6995] RIP: 0033:0x7fccb879ce59 [ 180.053190][ T6995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.053204][ T6995] RSP: 002b:00007fccb961f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 180.053218][ T6995] RAX: ffffffffffffffda RBX: 00007fccb8a16098 RCX: 00007fccb879ce59 [ 180.053228][ T6995] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fccb8a16098 [ 180.053237][ T6995] RBP: 00007fccb8a16090 R08: 0000000000000000 R09: 0000000000000000 [ 180.053246][ T6995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.053255][ T6995] R13: 00007fccb8a16128 R14: 00007ffd436287e0 R15: 00007ffd436288c8 [ 180.053275][ T6995] [ 180.071321][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 181.876269][ T7015] Process accounting resumed [ 183.117571][ T7039] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 184.401444][ T7056] FAULT_INJECTION: forcing a failure. [ 184.401444][ T7056] name failslab, interval 1, probability 0, space 0, times 0 [ 184.476705][ T7056] CPU: 1 UID: 0 PID: 7056 Comm: syz.2.241 Not tainted syzkaller #0 PREEMPT(full) [ 184.476746][ T7056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 184.476762][ T7056] Call Trace: [ 184.476770][ T7056] [ 184.476778][ T7056] dump_stack_lvl+0x100/0x190 [ 184.476803][ T7056] should_fail_ex.cold+0x5/0xa [ 184.476823][ T7056] should_failslab+0xc2/0x120 [ 184.476843][ T7056] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 184.476863][ T7056] ? __d_alloc+0x35/0xa50 [ 184.476883][ T7056] __d_alloc+0x35/0xa50 [ 184.476901][ T7056] d_alloc+0x4a/0x1e0 [ 184.476918][ T7056] lookup_one_qstr_excl+0x171/0x250 [ 184.476939][ T7056] start_dirop+0x59/0xb0 [ 184.476962][ T7056] simple_start_creating+0xf9/0x110 [ 184.476986][ T7056] ? __pfx_simple_start_creating+0x10/0x10 [ 184.477009][ T7056] ? mntput+0x70/0xa0 [ 184.477031][ T7056] ? simple_pin_fs+0xa3/0x190 [ 184.477053][ T7056] debugfs_start_creating.part.0+0x82/0x170 [ 184.477074][ T7056] __debugfs_create_file+0xb3/0x4f0 [ 184.477097][ T7056] debugfs_create_file_full+0x41/0x60 [ 184.477119][ T7056] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 184.477140][ T7056] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 184.477175][ T7056] ? ip_tunnel_init_net+0x21e/0x780 [ 184.477205][ T7056] ? lockdep_init_map_type+0x5c/0x250 [ 184.477223][ T7056] ? __pfx_ipip_tunnel_setup+0x10/0x10 [ 184.477246][ T7056] alloc_netdev_mqs+0x314/0x15c0 [ 184.477266][ T7056] __ip_tunnel_create+0x398/0x670 [ 184.477287][ T7056] ? __pfx___ip_tunnel_create+0x10/0x10 [ 184.477305][ T7056] ? net_generic+0xea/0x2a0 [ 184.477329][ T7056] ip_tunnel_init_net+0x230/0x780 [ 184.477351][ T7056] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 184.477380][ T7056] ? __pfx_ipip_init_net+0x10/0x10 [ 184.477401][ T7056] ops_init+0x1e2/0x5f0 [ 184.477419][ T7056] setup_net+0x118/0x3a0 [ 184.477435][ T7056] ? __pfx_setup_net+0x10/0x10 [ 184.477451][ T7056] ? mutex_init_lockdep+0xf1/0x120 [ 184.477469][ T7056] copy_net_ns+0x46f/0x7c0 [ 184.477488][ T7056] create_new_namespaces+0x3ea/0xac0 [ 184.477509][ T7056] unshare_nsproxy_namespaces+0xf2/0x220 [ 184.477528][ T7056] ksys_unshare+0x438/0xab0 [ 184.477552][ T7056] ? __pfx_ksys_unshare+0x10/0x10 [ 184.477598][ T7056] __x64_sys_unshare+0x31/0x40 [ 184.477631][ T7056] do_syscall_64+0x115/0x840 [ 184.477651][ T7056] ? clear_bhb_loop+0x40/0x90 [ 184.477670][ T7056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.477688][ T7056] RIP: 0033:0x7fa65bb9ce59 [ 184.477703][ T7056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.477716][ T7056] RSP: 002b:00007fa65caf0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 184.477732][ T7056] RAX: ffffffffffffffda RBX: 00007fa65be15fa0 RCX: 00007fa65bb9ce59 [ 184.477742][ T7056] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 184.477751][ T7056] RBP: 00007fa65bc32e6f R08: 0000000000000000 R09: 0000000000000000 [ 184.477760][ T7056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.477769][ T7056] R13: 00007fa65be16038 R14: 00007fa65be15fa0 R15: 00007ffed1fce078 [ 184.477790][ T7056] [ 187.040491][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.255'. [ 187.568047][ T50] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 188.911471][ T7127] input: f as /devices/virtual/input/input12 [ 188.957814][ T7130] netlink: 208 bytes leftover after parsing attributes in process `syz.1.253'. [ 189.014018][ T7127] FAULT_INJECTION: forcing a failure. [ 189.014018][ T7127] name fail_futex, interval 1, probability 0, space 0, times 0 [ 189.072685][ T7127] CPU: 1 UID: 0 PID: 7127 Comm: syz.1.253 Not tainted syzkaller #0 PREEMPT(full) [ 189.072721][ T7127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 189.072737][ T7127] Call Trace: [ 189.072746][ T7127] [ 189.072757][ T7127] dump_stack_lvl+0x100/0x190 [ 189.072798][ T7127] should_fail_ex.cold+0x5/0xa [ 189.072829][ T7127] ? rcu_is_watching+0x12/0xc0 [ 189.072868][ T7127] get_futex_key+0x1d2/0x14f0 [ 189.072901][ T7127] ? __pfx_get_futex_key+0x10/0x10 [ 189.072930][ T7127] ? unwind_get_return_address+0x59/0xa0 [ 189.072974][ T7127] ? arch_stack_walk+0xa6/0xf0 [ 189.073037][ T7127] futex_wait_setup+0x91/0x540 [ 189.073083][ T7127] __futex_wait+0x19f/0x300 [ 189.073122][ T7127] ? __pfx___futex_wait+0x10/0x10 [ 189.073159][ T7127] ? futex_hash+0x311/0x400 [ 189.073190][ T7127] ? __pfx_futex_wake_mark+0x10/0x10 [ 189.073233][ T7127] ? __pfx_futex_hash+0x10/0x10 [ 189.073260][ T7127] ? uinput_ioctl_handler.isra.0+0x3b9/0x1d20 [ 189.073312][ T7127] futex_wait+0xe6/0x370 [ 189.073350][ T7127] ? __pfx_futex_wait+0x10/0x10 [ 189.073385][ T7127] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 189.073448][ T7127] do_futex+0x265/0x440 [ 189.073477][ T7127] ? __pfx_do_futex+0x10/0x10 [ 189.073516][ T7127] __x64_sys_futex+0x34f/0x4d0 [ 189.073553][ T7127] ? __pfx___x64_sys_futex+0x10/0x10 [ 189.073599][ T7127] do_syscall_64+0x115/0x840 [ 189.073637][ T7127] ? clear_bhb_loop+0x40/0x90 [ 189.073672][ T7127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.073699][ T7127] RIP: 0033:0x7fccb879ce59 [ 189.073721][ T7127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.073747][ T7127] RSP: 002b:00007fccb96400e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 189.073773][ T7127] RAX: ffffffffffffffda RBX: 00007fccb8a15fa8 RCX: 00007fccb879ce59 [ 189.073790][ T7127] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fccb8a15fa8 [ 189.073807][ T7127] RBP: 00007fccb8a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 189.073824][ T7127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.073840][ T7127] R13: 00007fccb8a16038 R14: 00007ffd436287e0 R15: 00007ffd436288c8 [ 189.073875][ T7127] [ 191.353958][ T7154] random: crng reseeded on system resumption [ 191.379981][ T7146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.259'. [ 193.423806][ T7164] Process accounting resumed [ 193.629177][ T7184] random: crng reseeded on system resumption [ 194.376043][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.385887][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.814066][ T7200] netlink: 342 bytes leftover after parsing attributes in process `syz.2.270'. [ 196.122645][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 196.343834][ T7217] netlink: 342 bytes leftover after parsing attributes in process `syz.0.272'. [ 197.145161][ T7224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.274'. [ 197.432960][ T7229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.283'. [ 199.696359][ T7260] MTRR 1 not used [ 200.179165][ T7256] FAULT_INJECTION: forcing a failure. [ 200.179165][ T7256] name failslab, interval 1, probability 0, space 0, times 0 [ 200.222556][ T7256] CPU: 1 UID: 0 PID: 7256 Comm: syz.0.287 Not tainted syzkaller #0 PREEMPT(full) [ 200.222595][ T7256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 200.222619][ T7256] Call Trace: [ 200.222628][ T7256] [ 200.222639][ T7256] dump_stack_lvl+0x100/0x190 [ 200.222681][ T7256] should_fail_ex.cold+0x5/0xa [ 200.222719][ T7256] should_failslab+0xc2/0x120 [ 200.222759][ T7256] kmem_cache_alloc_noprof+0x91/0x6a0 [ 200.222794][ T7256] ? __proc_create+0xc1/0x8f0 [ 200.222823][ T7256] ? __proc_create+0xc1/0x8f0 [ 200.222851][ T7256] ? __proc_create+0x247/0x8f0 [ 200.222886][ T7256] __proc_create+0x247/0x8f0 [ 200.222917][ T7256] ? __pfx___proc_create+0x10/0x10 [ 200.222952][ T7256] ? _raw_spin_unlock+0x28/0x50 [ 200.222990][ T7256] proc_create_reg+0x75/0x170 [ 200.223023][ T7256] proc_create_net_data+0x8e/0x1c0 [ 200.223055][ T7256] ? __pfx_proc_create_net_data+0x10/0x10 [ 200.223094][ T7256] ? __pfx_arp_net_init+0x10/0x10 [ 200.223137][ T7256] arp_net_init+0x53/0x80 [ 200.223179][ T7256] ops_init+0x1e2/0x5f0 [ 200.223214][ T7256] setup_net+0x118/0x3a0 [ 200.223245][ T7256] ? __pfx_setup_net+0x10/0x10 [ 200.223276][ T7256] ? mutex_init_lockdep+0xf1/0x120 [ 200.223312][ T7256] copy_net_ns+0x46f/0x7c0 [ 200.223349][ T7256] create_new_namespaces+0x3ea/0xac0 [ 200.223385][ T7256] unshare_nsproxy_namespaces+0xf2/0x220 [ 200.223418][ T7256] ksys_unshare+0x438/0xab0 [ 200.223455][ T7256] ? __pfx_ksys_unshare+0x10/0x10 [ 200.223505][ T7256] __x64_sys_unshare+0x31/0x40 [ 200.223542][ T7256] do_syscall_64+0x115/0x840 [ 200.223578][ T7256] ? clear_bhb_loop+0x40/0x90 [ 200.223621][ T7256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.223649][ T7256] RIP: 0033:0x7f9c1bf9ce59 [ 200.223672][ T7256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.223699][ T7256] RSP: 002b:00007f9c1cda9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 200.223723][ T7256] RAX: ffffffffffffffda RBX: 00007f9c1c215fa0 RCX: 00007f9c1bf9ce59 [ 200.223740][ T7256] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 200.223756][ T7256] RBP: 00007f9c1c032e6f R08: 0000000000000000 R09: 0000000000000000 [ 200.223772][ T7256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.223788][ T7256] R13: 00007f9c1c216038 R14: 00007f9c1c215fa0 R15: 00007fff61508528 [ 200.223818][ T7256] [ 201.562678][ T7252] Bluetooth: hci0: command 0x0406 tx timeout [ 201.575336][ T7252] Bluetooth: hci3: command 0x0406 tx timeout [ 201.582847][ T7252] Bluetooth: hci2: command 0x0406 tx timeout [ 201.583839][ T5635] Bluetooth: hci1: command 0x0406 tx timeout [ 204.129395][ T7319] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 204.161972][ T7319] FAULT_INJECTION: forcing a failure. [ 204.161972][ T7319] name failslab, interval 1, probability 0, space 0, times 0 [ 204.190361][ T7319] CPU: 1 UID: 0 PID: 7319 Comm: syz.0.288 Not tainted syzkaller #0 PREEMPT(full) [ 204.190398][ T7319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 204.190413][ T7319] Call Trace: [ 204.190428][ T7319] [ 204.190439][ T7319] dump_stack_lvl+0x100/0x190 [ 204.190480][ T7319] should_fail_ex.cold+0x5/0xa [ 204.190517][ T7319] should_failslab+0xc2/0x120 [ 204.190556][ T7319] __kmalloc_noprof+0xfc/0x820 [ 204.190588][ T7319] ? process_preds+0x4a2/0x1d90 [ 204.190635][ T7319] process_preds+0x4a2/0x1d90 [ 204.190690][ T7319] apply_subsystem_event_filter+0x4a0/0x17a0 [ 204.190745][ T7319] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 204.190806][ T7319] ? _copy_from_user+0x59/0xd0 [ 204.190847][ T7319] subsystem_filter_write+0x95/0x120 [ 204.190891][ T7319] vfs_write+0x2aa/0x1050 [ 204.190920][ T7319] ? __pfx_subsystem_filter_write+0x10/0x10 [ 204.190963][ T7319] ? __pfx_vfs_write+0x10/0x10 [ 204.190989][ T7319] ? __fget_files+0x215/0x3d0 [ 204.191023][ T7319] ? __fget_files+0x21f/0x3d0 [ 204.191060][ T7319] ksys_write+0x12a/0x250 [ 204.191087][ T7319] ? __pfx_ksys_write+0x10/0x10 [ 204.191123][ T7319] do_syscall_64+0x115/0x840 [ 204.191162][ T7319] ? clear_bhb_loop+0x40/0x90 [ 204.191198][ T7319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.191227][ T7319] RIP: 0033:0x7f9c1bf9ce59 [ 204.191251][ T7319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.191277][ T7319] RSP: 002b:00007f9c1cda9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 204.191305][ T7319] RAX: ffffffffffffffda RBX: 00007f9c1c215fa0 RCX: 00007f9c1bf9ce59 [ 204.191324][ T7319] RDX: 000000000000004a RSI: 0000200000000040 RDI: 0000000000000009 [ 204.191341][ T7319] RBP: 00007f9c1c032e6f R08: 0000000000000000 R09: 0000000000000000 [ 204.191358][ T7319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.191374][ T7319] R13: 00007f9c1c216038 R14: 00007f9c1c215fa0 R15: 00007fff61508528 [ 204.191414][ T7319] [ 204.436449][ T7321] net_ratelimit: 947 callbacks suppressed [ 204.436468][ T7321] openvswitch: netlink: Missing valid actions attribute. [ 204.813749][ T7330] capability: warning: `syz.0.291' uses 32-bit capabilities (legacy support in use) [ 206.602473][ T50] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 207.070609][ T7338] netlink: 342 bytes leftover after parsing attributes in process `syz.1.292'. [ 207.527331][ T7343] FAULT_INJECTION: forcing a failure. [ 207.527331][ T7343] name failslab, interval 1, probability 0, space 0, times 0 [ 207.604141][ T7343] CPU: 0 UID: 0 PID: 7343 Comm: syz.3.294 Not tainted syzkaller #0 PREEMPT(full) [ 207.604164][ T7343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 207.604174][ T7343] Call Trace: [ 207.604180][ T7343] [ 207.604186][ T7343] dump_stack_lvl+0x100/0x190 [ 207.604221][ T7343] should_fail_ex.cold+0x5/0xa [ 207.604268][ T7343] should_failslab+0xc2/0x120 [ 207.604297][ T7343] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 207.604333][ T7343] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 207.604377][ T7343] ? mpls_dev_sysctl_register+0xd3/0x2a0 [ 207.604407][ T7343] kmemdup_noprof+0x29/0x60 [ 207.604425][ T7343] mpls_dev_sysctl_register+0xd3/0x2a0 [ 207.604445][ T7343] ? pcpu_alloc_noprof+0xde1/0x1ca0 [ 207.604461][ T7343] ? __pfx_mpls_dev_sysctl_register+0x10/0x10 [ 207.604490][ T7343] mpls_dev_notify+0x365/0x920 [ 207.604512][ T7343] notifier_call_chain+0x99/0x3f0 [ 207.604537][ T7343] call_netdevice_notifiers_info+0xbe/0x110 [ 207.604557][ T7343] register_netdevice+0x1998/0x25a0 [ 207.604577][ T7343] ? __pfx_register_netdevice+0x10/0x10 [ 207.604599][ T7343] __ip_tunnel_create+0x52b/0x670 [ 207.604621][ T7343] ? __pfx___ip_tunnel_create+0x10/0x10 [ 207.604639][ T7343] ? net_generic+0xea/0x2a0 [ 207.604663][ T7343] ip_tunnel_init_net+0x230/0x780 [ 207.604685][ T7343] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 207.604714][ T7343] ? __pfx_ipip_init_net+0x10/0x10 [ 207.604738][ T7343] ops_init+0x1e2/0x5f0 [ 207.604756][ T7343] setup_net+0x118/0x3a0 [ 207.604771][ T7343] ? __pfx_setup_net+0x10/0x10 [ 207.604787][ T7343] ? mutex_init_lockdep+0xf1/0x120 [ 207.604806][ T7343] copy_net_ns+0x46f/0x7c0 [ 207.604825][ T7343] create_new_namespaces+0x3ea/0xac0 [ 207.604845][ T7343] unshare_nsproxy_namespaces+0xf2/0x220 [ 207.604863][ T7343] ksys_unshare+0x438/0xab0 [ 207.604884][ T7343] ? __pfx_ksys_unshare+0x10/0x10 [ 207.604910][ T7343] __x64_sys_unshare+0x31/0x40 [ 207.604929][ T7343] do_syscall_64+0x115/0x840 [ 207.604948][ T7343] ? clear_bhb_loop+0x40/0x90 [ 207.604966][ T7343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.604980][ T7343] RIP: 0033:0x7fb33679ce59 [ 207.604994][ T7343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.605008][ T7343] RSP: 002b:00007fb33772b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 207.605023][ T7343] RAX: ffffffffffffffda RBX: 00007fb336a15fa0 RCX: 00007fb33679ce59 [ 207.605034][ T7343] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 207.605043][ T7343] RBP: 00007fb336832e6f R08: 0000000000000000 R09: 0000000000000000 [ 207.605051][ T7343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.605060][ T7343] R13: 00007fb336a16038 R14: 00007fb336a15fa0 R15: 00007ffe68d9a3b8 [ 207.605080][ T7343] [ 209.406369][ T7373] can0: slcan on pty238. [ 209.528010][ T7372] can0 (unregistered): slcan off pty238. [ 209.825675][ T7390] netlink: 'syz.2.302': attribute type 10 has an invalid length. [ 209.855883][ T7390] netlink: 330 bytes leftover after parsing attributes in process `syz.2.302'. [ 210.567409][ T7397] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 210.744732][ T7376] kexec: Could not allocate control_code_buffer [ 212.890717][ T7425] FAULT_INJECTION: forcing a failure. [ 212.890717][ T7425] name failslab, interval 1, probability 0, space 0, times 0 [ 212.969184][ T7425] CPU: 0 UID: 0 PID: 7425 Comm: syz.0.310 Not tainted syzkaller #0 PREEMPT(full) [ 212.969207][ T7425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 212.969219][ T7425] Call Trace: [ 212.969225][ T7425] [ 212.969231][ T7425] dump_stack_lvl+0x100/0x190 [ 212.969256][ T7425] should_fail_ex.cold+0x5/0xa [ 212.969277][ T7425] should_failslab+0xc2/0x120 [ 212.969298][ T7425] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 212.969319][ T7425] ? __kasan_kmalloc+0x80/0xb0 [ 212.969337][ T7425] ? vidtv_psi_short_event_desc_init+0x429/0x5f0 [ 212.969365][ T7425] kstrdup+0x51/0xe0 [ 212.969384][ T7425] vidtv_psi_short_event_desc_init+0x429/0x5f0 [ 212.969411][ T7425] vidtv_channel_s302m_init+0x4fd/0x9b0 [ 212.969431][ T7425] ? __pfx_vidtv_channel_s302m_init+0x10/0x10 [ 212.969447][ T7425] ? __kasan_kmalloc+0x80/0xb0 [ 212.969468][ T7425] ? __asan_memcpy+0x3c/0x60 [ 212.969485][ T7425] vidtv_channels_init+0x4c/0xb0 [ 212.969501][ T7425] vidtv_mux_init+0x9d9/0xbf0 [ 212.969520][ T7425] vidtv_start_feed+0x34e/0x500 [ 212.969541][ T7425] ? __pfx_vidtv_start_feed+0x10/0x10 [ 212.969561][ T7425] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 212.969592][ T7425] dmx_section_feed_start_filtering+0x3a8/0x660 [ 212.969620][ T7425] dvb_dmxdev_filter_start+0x767/0xdd0 [ 212.969646][ T7425] dvb_demux_do_ioctl+0xe64/0x1200 [ 212.969672][ T7425] dvb_usercopy+0x167/0x340 [ 212.969688][ T7425] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 212.969719][ T7425] ? __pfx_dvb_usercopy+0x10/0x10 [ 212.969766][ T7425] ? __fget_files+0x21f/0x3d0 [ 212.969802][ T7425] dvb_demux_ioctl+0x29/0x40 [ 212.969824][ T7425] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 212.969842][ T7425] __x64_sys_ioctl+0x18e/0x210 [ 212.969864][ T7425] do_syscall_64+0x115/0x840 [ 212.969884][ T7425] ? clear_bhb_loop+0x40/0x90 [ 212.969902][ T7425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.969918][ T7425] RIP: 0033:0x7f9c1bf9ce59 [ 212.969932][ T7425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.969945][ T7425] RSP: 002b:00007f9c1cda9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 212.969960][ T7425] RAX: ffffffffffffffda RBX: 00007f9c1c215fa0 RCX: 00007f9c1bf9ce59 [ 212.969970][ T7425] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000004 [ 212.969979][ T7425] RBP: 00007f9c1c032e6f R08: 0000000000000000 R09: 0000000000000000 [ 212.969988][ T7425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.969997][ T7425] R13: 00007f9c1c216038 R14: 00007f9c1c215fa0 R15: 00007fff61508528 [ 212.970018][ T7425] [ 213.244903][ T7417] Process accounting paused [ 215.386437][ T7464] netlink: 28 bytes leftover after parsing attributes in process `syz.2.315'. [ 215.599647][ T7464] vlan1: entered allmulticast mode [ 215.697452][ T7464] veth0_vlan: entered allmulticast mode [ 216.197737][ T7474] MTRR 1 not used [ 216.432565][ T7479] FAULT_INJECTION: forcing a failure. [ 216.432565][ T7479] name failslab, interval 1, probability 0, space 0, times 0 [ 216.446040][ T7479] CPU: 0 UID: 0 PID: 7479 Comm: syz.1.318 Not tainted syzkaller #0 PREEMPT(full) [ 216.446090][ T7479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 216.446109][ T7479] Call Trace: [ 216.446118][ T7479] [ 216.446129][ T7479] dump_stack_lvl+0x100/0x190 [ 216.446177][ T7479] should_fail_ex.cold+0x5/0xa [ 216.446214][ T7479] should_failslab+0xc2/0x120 [ 216.446255][ T7479] kmem_cache_alloc_noprof+0x91/0x6a0 [ 216.446293][ T7479] ? sk_prot_alloc+0x60/0x2a0 [ 216.446335][ T7479] sk_prot_alloc+0x60/0x2a0 [ 216.446373][ T7479] sk_alloc+0x36/0xe80 [ 216.446419][ T7479] inet6_create+0x385/0x12b0 [ 216.446460][ T7479] ? inet6_create+0x7f/0x12b0 [ 216.446500][ T7479] __sock_create+0x339/0x860 [ 216.446545][ T7479] __sys_socket+0x14d/0x260 [ 216.446583][ T7479] ? __pfx___sys_socket+0x10/0x10 [ 216.446632][ T7479] __x64_sys_socket+0x72/0xb0 [ 216.446670][ T7479] ? lockdep_hardirqs_on+0x78/0x100 [ 216.446710][ T7479] do_syscall_64+0x115/0x840 [ 216.446748][ T7479] ? clear_bhb_loop+0x40/0x90 [ 216.446784][ T7479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.446812][ T7479] RIP: 0033:0x7fccb879ce59 [ 216.446836][ T7479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.446861][ T7479] RSP: 002b:00007fccb9640028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 216.446888][ T7479] RAX: ffffffffffffffda RBX: 00007fccb8a15fa0 RCX: 00007fccb879ce59 [ 216.446907][ T7479] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 216.446923][ T7479] RBP: 00007fccb8832e6f R08: 0000000000000000 R09: 0000000000000000 [ 216.446940][ T7479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.446956][ T7479] R13: 00007fccb8a16038 R14: 00007fccb8a15fa0 R15: 00007ffd436288c8 [ 216.446994][ T7479] [ 217.657697][ T7498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.321'. [ 217.703633][ T7498] netlink: 354 bytes leftover after parsing attributes in process `syz.3.321'. [ 218.034401][ T7505] netlink: 'syz.3.322': attribute type 10 has an invalid length. [ 218.042959][ T7505] netlink: 330 bytes leftover after parsing attributes in process `syz.3.322'. [ 218.092702][ T7506] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 220.380844][ T50] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 220.496723][ T7531] FAULT_INJECTION: forcing a failure. [ 220.496723][ T7531] name failslab, interval 1, probability 0, space 0, times 0 [ 220.519525][ T7531] CPU: 1 UID: 0 PID: 7531 Comm: syz.3.326 Not tainted syzkaller #0 PREEMPT(full) [ 220.519564][ T7531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 220.519580][ T7531] Call Trace: [ 220.519591][ T7531] [ 220.519602][ T7531] dump_stack_lvl+0x100/0x190 [ 220.519644][ T7531] should_fail_ex.cold+0x5/0xa [ 220.519683][ T7531] should_failslab+0xc2/0x120 [ 220.519726][ T7531] kmem_cache_alloc_noprof+0x91/0x6a0 [ 220.519762][ T7531] ? __pfx_vma_merge_new_range+0x10/0x10 [ 220.519802][ T7531] ? vm_area_dup+0x27/0x8e0 [ 220.519837][ T7531] vm_area_dup+0x27/0x8e0 [ 220.519869][ T7531] copy_vma+0x643/0xac0 [ 220.519907][ T7531] ? __pfx_copy_vma+0x10/0x10 [ 220.519981][ T7531] copy_vma_and_data+0x1cf/0x7c0 [ 220.520017][ T7531] ? __pfx_copy_vma_and_data+0x10/0x10 [ 220.520062][ T7531] ? __vma_start_write+0x17f/0x280 [ 220.520100][ T7531] ? __pfx___vma_start_write+0x10/0x10 [ 220.520148][ T7531] move_vma+0x574/0x1920 [ 220.520180][ T7531] ? __pfx_move_vma+0x10/0x10 [ 220.520213][ T7531] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 220.520251][ T7531] ? cap_mmap_addr+0x4b/0x120 [ 220.520292][ T7531] ? bpf_lsm_mmap_addr+0x9/0x30 [ 220.520320][ T7531] ? security_mmap_addr+0x71/0x1e0 [ 220.520353][ T7531] ? __get_unmapped_area+0x255/0x3e0 [ 220.520398][ T7531] ? vrm_set_new_addr+0x204/0x290 [ 220.520432][ T7531] mremap_to+0x234/0x4c0 [ 220.520461][ T7531] ? mas_walk+0x6ef/0x9b0 [ 220.520501][ T7531] ? __pfx_mremap_to+0x10/0x10 [ 220.520530][ T7531] ? check_prep_vma+0x912/0xe60 [ 220.520566][ T7531] __do_sys_mremap+0x88c/0x1850 [ 220.520610][ T7531] ? __pfx___do_sys_mremap+0x10/0x10 [ 220.520651][ T7531] ? __pfx_do_futex+0x10/0x10 [ 220.520694][ T7531] ? __x64_sys_futex+0x34f/0x4d0 [ 220.520748][ T7531] do_syscall_64+0x115/0x840 [ 220.520796][ T7531] ? clear_bhb_loop+0x40/0x90 [ 220.520833][ T7531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.520863][ T7531] RIP: 0033:0x7fb33679ce59 [ 220.520888][ T7531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.520915][ T7531] RSP: 002b:00007fb33772b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 220.520943][ T7531] RAX: ffffffffffffffda RBX: 00007fb336a15fa0 RCX: 00007fb33679ce59 [ 220.520963][ T7531] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200001000000 [ 220.520981][ T7531] RBP: 00007fb336832e6f R08: 0000000100000000 R09: 0000000000000000 [ 220.520999][ T7531] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 220.521015][ T7531] R13: 00007fb336a16038 R14: 00007fb336a15fa0 R15: 00007ffe68d9a3b8 [ 220.521053][ T7531] [ 224.577759][ T7560] Process accounting paused [ 225.056551][ T7571] can0: slcan on pty238. [ 225.321450][ T7570] can0 (unregistered): slcan off pty238. [ 225.647216][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.335'. [ 227.566228][ T7618] netlink: 342 bytes leftover after parsing attributes in process `syz.3.342'. [ 230.294386][ T50] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 230.560944][ T7646] kexec: Could not allocate control_code_buffer [ 234.968650][ T7723] netlink: 25 bytes leftover after parsing attributes in process `syz.1.360'. [ 236.319213][ T7742] random: crng reseeded on system resumption [ 237.254394][ T7770] netlink: 28 bytes leftover after parsing attributes in process `syz.2.371'. [ 237.292067][ T7770] veth1_vlan: entered allmulticast mode [ 237.514715][ T7777] netlink: 350 bytes leftover after parsing attributes in process `syz.3.373'. [ 237.996920][ T7789] FAULT_INJECTION: forcing a failure. [ 237.996920][ T7789] name failslab, interval 1, probability 0, space 0, times 0 [ 237.996963][ T7789] CPU: 1 UID: 0 PID: 7789 Comm: syz.0.375 Not tainted syzkaller #0 PREEMPT(full) [ 237.996998][ T7789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 237.997031][ T7789] Call Trace: [ 237.997040][ T7789] [ 237.997051][ T7789] dump_stack_lvl+0x100/0x190 [ 237.997092][ T7789] should_fail_ex.cold+0x5/0xa [ 237.997129][ T7789] should_failslab+0xc2/0x120 [ 237.997168][ T7789] kmem_cache_alloc_noprof+0x91/0x6a0 [ 237.997204][ T7789] ? fcntl_setlk+0xaa/0xe20 [ 237.997240][ T7789] fcntl_setlk+0xaa/0xe20 [ 237.997275][ T7789] ? __pfx_fcntl_setlk+0x10/0x10 [ 237.997310][ T7789] ? find_held_lock+0x2b/0x80 [ 237.997345][ T7789] ? __might_fault+0xc5/0x140 [ 237.997373][ T7789] ? __might_fault+0xc5/0x140 [ 237.997415][ T7789] do_fcntl+0xf39/0x1670 [ 237.997461][ T7789] ? __pfx_do_fcntl+0x10/0x10 [ 237.997495][ T7789] ? __fget_files+0x215/0x3d0 [ 237.997533][ T7789] ? tomoyo_file_fcntl+0x6c/0xc0 [ 237.997579][ T7789] __x64_sys_fcntl+0x163/0x200 [ 237.997620][ T7789] do_syscall_64+0x115/0x840 [ 237.997658][ T7789] ? clear_bhb_loop+0x40/0x90 [ 237.997692][ T7789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.997722][ T7789] RIP: 0033:0x7f9c1bf9ce59 [ 237.997747][ T7789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.997773][ T7789] RSP: 002b:00007f9c1cd88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 237.997801][ T7789] RAX: ffffffffffffffda RBX: 00007f9c1c216090 RCX: 00007f9c1bf9ce59 [ 237.997820][ T7789] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000003 [ 237.997836][ T7789] RBP: 00007f9c1c032e6f R08: 0000000000000000 R09: 0000000000000000 [ 237.997853][ T7789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.997870][ T7789] R13: 00007f9c1c216128 R14: 00007f9c1c216090 R15: 00007fff61508528 [ 237.997908][ T7789] [ 238.272728][ T7797] program syz.3.376 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.495782][ T7863] random: crng reseeded on system resumption [ 242.247847][ T7886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.388'. [ 242.280586][ T7886] netlink: 354 bytes leftover after parsing attributes in process `syz.2.388'. [ 242.676923][ T7895] netlink: 28 bytes leftover after parsing attributes in process `syz.3.389'. [ 243.548112][ T7919] program syz.1.393 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 243.661137][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 244.866117][ T7932] NFSD: Failed to start, no listeners configured. [ 246.685440][ T7992] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5639] was attempted by ""[7992] [ 248.189840][ T50] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 249.716560][ T8040] random: crng reseeded on system resumption [ 251.352751][ T8062] random: crng reseeded on system resumption [ 252.549191][ T50] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 254.907200][ T8106] kexec: Could not allocate control_code_buffer [ 254.985075][ T8106] Process accounting resumed [ 255.832229][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.838807][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.206450][ T8125] smpboot: CPU 1 is now offline [ 257.157129][ T8130] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 257.230602][ T8130] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 257.488357][ T8130] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 257.565348][ T8130] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 257.722825][ T8130] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 257.740799][ T8130] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 257.764631][ T8130] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 257.785949][ T8130] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 257.807763][ T8130] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 258.250532][ T8160] nbd: socks must be embedded in a SOCK_ITEM attr [ 258.354510][ T8160] block nbd0: shutting down sockets [ 259.108706][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 259.292459][ T8182] program syz.0.444 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 259.380660][ T8182] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 259.509717][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 259.749065][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 259.830252][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 261.189854][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 261.290115][ T8206] nbd: socks must be embedded in a SOCK_ITEM attr [ 261.367915][ T8206] block nbd0: shutting down sockets [ 261.593152][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 261.830157][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 261.855992][ T8216] EXT4-fs error (device sda1): ext4_lookup:1785: inode #448: comm syz.1.454: iget: checksum invalid [ 261.911244][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 261.922552][ T8216] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 261.961591][ T8216] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 261.994010][ T8216] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 262.392445][ T8211] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5631] was attempted by ""[8211] [ 263.911373][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 264.540945][ T8263] NFSD: Failed to start, no listeners configured. [ 265.244943][ T8270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.465'. [ 266.501531][ T8280] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 266.551254][ T8280] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 266.614029][ T8280] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 266.650874][ T8280] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 267.433317][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 268.519576][ T8320] netlink: 20 bytes leftover after parsing attributes in process `syz.2.473'. [ 268.635534][ T5633] Bluetooth: hci2: command 0x0406 tx timeout [ 268.641641][ T4944] Bluetooth: hci1: command 0x0406 tx timeout [ 268.721221][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 269.239741][ T8334] EXT4-fs error (device sda1): ext4_lookup:1785: inode #448: comm syz.1.475: iget: checksum invalid [ 269.311110][ T8334] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 269.360292][ T8334] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 269.393301][ T8336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.476'. [ 269.421682][ T8334] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 269.447537][ T8336] netlink: 13 bytes leftover after parsing attributes in process `syz.2.476'. [ 269.601320][ T8340] netlink: 28 bytes leftover after parsing attributes in process `syz.2.476'. [ 269.761111][ T8340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.833820][ T8340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.874013][ T8340] bond0 (unregistering): Released all slaves [ 272.560209][ T8386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.486'. [ 273.406349][ T8394] netlink: 'syz.1.497': attribute type 1 has an invalid length. [ 276.569556][ T30] audit: type=1804 audit(4294967368.594:5): pid=8439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.498" name="file0" dev="tmpfs" ino=700 res=1 errno=0 [ 277.005101][ T8438] vhci_hcd: not connected 4 [ 277.024817][ T8426] kexec: Could not allocate control_code_buffer [ 279.214057][ T8493] FAULT_INJECTION: forcing a failure. [ 279.214057][ T8493] name failslab, interval 1, probability 0, space 0, times 0 [ 279.425685][ T8493] CPU: 0 UID: 0 PID: 8493 Comm: syz.3.506 Not tainted syzkaller #0 PREEMPT(full) [ 279.425707][ T8493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 279.425718][ T8493] Call Trace: [ 279.425723][ T8493] [ 279.425729][ T8493] dump_stack_lvl+0x100/0x190 [ 279.425753][ T8493] should_fail_ex.cold+0x5/0xa [ 279.425774][ T8493] should_failslab+0xc2/0x120 [ 279.425796][ T8493] __kmalloc_noprof+0xfc/0x820 [ 279.425815][ T8493] ? get_callchain_buffers+0x123/0x380 [ 279.425838][ T8493] get_callchain_buffers+0x123/0x380 [ 279.425856][ T8493] ? bpf_lsm_capable+0x9/0x10 [ 279.425872][ T8493] ? security_capable+0x80/0x260 [ 279.425894][ T8493] stack_map_alloc+0x316/0x610 [ 279.425913][ T8493] map_create+0x874/0x3120 [ 279.425935][ T8493] ? __pfx_clockevents_program_event+0x10/0x10 [ 279.425954][ T8493] ? find_held_lock+0x2b/0x80 [ 279.425972][ T8493] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 279.425991][ T8493] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 279.426015][ T8493] ? __pfx_map_create+0x10/0x10 [ 279.426036][ T8493] ? irqentry_exit+0x24d/0xa00 [ 279.426055][ T8493] ? lockdep_hardirqs_on+0x78/0x100 [ 279.426075][ T8493] ? irqentry_exit+0x24d/0xa00 [ 279.426107][ T8493] __sys_bpf+0x2a6e/0x4e80 [ 279.426129][ T8493] ? __pfx___sys_bpf+0x10/0x10 [ 279.426147][ T8493] ? find_held_lock+0x2b/0x80 [ 279.426166][ T8493] ? futex_wake+0x4ea/0x5e0 [ 279.426190][ T8493] ? futex_wait+0x11e/0x370 [ 279.426209][ T8493] ? __pfx_futex_wait+0x10/0x10 [ 279.426232][ T8493] ? rcu_read_lock_any_held+0x6a/0xa0 [ 279.426266][ T8493] ? __x64_sys_futex+0x34f/0x4d0 [ 279.426281][ T8493] ? __x64_sys_futex+0x358/0x4d0 [ 279.426300][ T8493] ? xfd_validate_state+0x129/0x190 [ 279.426320][ T8493] ? __x64_sys_bpf+0xce/0x140 [ 279.426335][ T8493] __x64_sys_bpf+0xce/0x140 [ 279.426352][ T8493] ? do_syscall_64+0x90/0x840 [ 279.426373][ T8493] do_syscall_64+0x115/0x840 [ 279.426391][ T8493] ? clear_bhb_loop+0x40/0x90 [ 279.426410][ T8493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.426425][ T8493] RIP: 0033:0x7fb33679ce59 [ 279.426439][ T8493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.426452][ T8493] RSP: 002b:00007fb33770a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 279.426468][ T8493] RAX: ffffffffffffffda RBX: 00007fb336a16090 RCX: 00007fb33679ce59 [ 279.426478][ T8493] RDX: 00000000000006f4 RSI: 0000200000000580 RDI: 0000000000000000 [ 279.426487][ T8493] RBP: 00007fb336832e6f R08: 0000000000000000 R09: 0000000000000000 [ 279.426496][ T8493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.426504][ T8493] R13: 00007fb336a16128 R14: 00007fb336a16090 R15: 00007ffe68d9a3b8 [ 279.426525][ T8493] [ 281.070859][ T8463] Process accounting resumed [ 282.276985][ T8555] random: crng reseeded on system resumption [ 283.252718][ T8564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.513611][ T8588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.520'. [ 284.558193][ T8588] netlink: 13 bytes leftover after parsing attributes in process `syz.3.520'. [ 284.725884][ T8596] netlink: 28 bytes leftover after parsing attributes in process `syz.3.520'. [ 284.820580][ T8596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.896952][ T8596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.923551][ T8596] bond0 (unregistering): Released all slaves [ 286.149976][ T8617] netlink: 186 bytes leftover after parsing attributes in process `syz.1.526'. [ 286.796882][ T8626] netlink: 'syz.2.530': attribute type 22 has an invalid length. [ 286.835183][ T8626] netlink: 330 bytes leftover after parsing attributes in process `syz.2.530'. [ 288.004441][ T8642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.533'. [ 288.307858][ T8646] binder: 8640:8646 unknown command 0 [ 288.336164][ T8646] binder: 8640:8646 ioctl c0306201 0 returned -22 [ 289.366995][ T8652] netlink: 28 bytes leftover after parsing attributes in process `syz.1.535'. [ 289.477807][ T8652] veth0_macvtap: left promiscuous mode [ 289.518630][ T8652] macvtap0: entered promiscuous mode [ 289.555539][ T8652] macvtap0: entered allmulticast mode [ 290.909090][ T30] audit: type=1804 audit(4294967382.938:6): pid=8689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.541" name="file0" dev="tmpfs" ino=745 res=1 errno=0 [ 291.015046][ T30] audit: type=1804 audit(4294967382.968:7): pid=8690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.541" name="file0" dev="tmpfs" ino=745 res=1 errno=0 [ 291.478851][ T8698] netlink: 186 bytes leftover after parsing attributes in process `syz.3.544'. [ 291.806437][ T50] Bluetooth: hci2: unexpected event 0x12 length: 19 > 8 [ 292.599974][ T8712] vhci_hcd: not connected 4 [ 293.517748][ T8734] EXT4-fs error (device sda1): ext4_lookup:1785: inode #448: comm syz.2.552: iget: checksum invalid [ 293.569484][ T8734] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 293.611255][ T8734] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 293.703887][ T8734] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 295.535670][ T8768] netlink: 20 bytes leftover after parsing attributes in process `syz.3.559'. [ 298.648418][ T8815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.568'. [ 298.738264][ T8815] EXT4-fs error (device sda1): ext4_lookup:1785: inode #448: comm syz.0.568: iget: checksum invalid [ 298.806320][ T8815] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 298.865016][ T8815] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 298.912238][ T8815] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 300.166167][ T8839] vhci_hcd: not connected 4 [ 300.233609][ T8848] netlink: 28 bytes leftover after parsing attributes in process `syz.1.577'. [ 300.830853][ T8863] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 301.104397][ T8872] EXT4-fs error (device sda1): ext4_lookup:1785: inode #448: comm syz.0.587: iget: checksum invalid [ 301.207374][ T8872] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 301.329089][ T8872] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 301.413982][ T8872] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 302.458897][ T8895] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 303.340385][ T8911] futex_wake_op: syz.3.591 tries to shift op by -2048; fix this program [ 303.412131][ T8911] futex_wake_op: syz.3.591 tries to shift op by -2048; fix this program [ 303.474073][ T8917] 0x000000000001-0x000000020000 : "" [ 303.942839][ T8917] ftl_cs: FTL header corrupt! [ 305.238805][ T8943] EXT4-fs error (device sda1): ext4_lookup:1785: inode #448: comm syz.3.594: iget: checksum invalid [ 305.417066][ T8943] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 305.515786][ T8943] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 305.574011][ T8943] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 306.350696][ T8960] netlink: 25 bytes leftover after parsing attributes in process `syz.2.599'. [ 307.851408][ T8972] ubi0: attaching mtd0 [ 307.883435][ T8972] ubi0: scanning is finished [ 308.353365][ T8972] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 308.435931][ T8972] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 308.468651][ T30] audit: type=1804 audit(4294967400.497:8): pid=8986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.605" name="file0" dev="tmpfs" ino=856 res=1 errno=0 [ 308.545456][ T8972] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 308.589074][ T30] audit: type=1804 audit(4294967400.527:9): pid=8974 uid=2 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.605" name="file0" dev="tmpfs" ino=856 res=1 errno=0 [ 308.691054][ T8972] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 308.830642][ T8972] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 308.972620][ T8972] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 309.207392][ T8972] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2059621022 [ 309.447472][ T8972] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 309.705441][ T8988] ubi0: background thread "ubi_bgt0d" started, PID 8988 [ 309.737984][ T8970] ubi0: detaching mtd0 [ 309.797747][ T8970] ubi0: mtd0 is detached [ 310.991021][ T9021] EXT4-fs error (device sda1): ext4_lookup:1785: inode #448: comm syz.0.608: iget: checksum invalid [ 311.056708][ T9015] ======================================================= [ 311.056708][ T9015] WARNING: The mand mount option has been deprecated and [ 311.056708][ T9015] and is ignored by this kernel. Remove the mand [ 311.056708][ T9015] option from the mount to silence this warning. [ 311.056708][ T9015] ======================================================= [ 311.130731][ T9021] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 311.221982][ T9021] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 311.293519][ T9021] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 311.688136][ T9021] Process accounting paused [ 313.254518][ T9056] FAULT_INJECTION: forcing a failure. [ 313.254518][ T9056] name failslab, interval 1, probability 0, space 0, times 0 [ 313.296226][ T9056] CPU: 0 UID: 0 PID: 9056 Comm: syz.0.618 Not tainted syzkaller #0 PREEMPT(full) [ 313.296250][ T9056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 313.296262][ T9056] Call Trace: [ 313.296267][ T9056] [ 313.296273][ T9056] dump_stack_lvl+0x100/0x190 [ 313.296297][ T9056] should_fail_ex.cold+0x5/0xa [ 313.296318][ T9056] should_failslab+0xc2/0x120 [ 313.296346][ T9056] __kmalloc_noprof+0xfc/0x820 [ 313.296366][ T9056] ? xfrm_hash_alloc+0xcf/0x100 [ 313.296391][ T9056] xfrm_hash_alloc+0xcf/0x100 [ 313.296412][ T9056] xfrm_net_init+0x35f/0xcf0 [ 313.296441][ T9056] ? __pfx_xfrm_net_init+0x10/0x10 [ 313.296463][ T9056] ops_init+0x1e2/0x5f0 [ 313.296481][ T9056] setup_net+0x118/0x3a0 [ 313.296497][ T9056] ? __pfx_setup_net+0x10/0x10 [ 313.296512][ T9056] ? mutex_init_lockdep+0xf1/0x120 [ 313.296531][ T9056] copy_net_ns+0x46f/0x7c0 [ 313.296550][ T9056] create_new_namespaces+0x3ea/0xac0 [ 313.296570][ T9056] unshare_nsproxy_namespaces+0xf2/0x220 [ 313.296589][ T9056] ksys_unshare+0x438/0xab0 [ 313.296610][ T9056] ? __pfx_ksys_unshare+0x10/0x10 [ 313.296636][ T9056] __x64_sys_unshare+0x31/0x40 [ 313.296654][ T9056] do_syscall_64+0x115/0x840 [ 313.296674][ T9056] ? clear_bhb_loop+0x40/0x90 [ 313.296692][ T9056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.296707][ T9056] RIP: 0033:0x7f9c1bf9ce59 [ 313.296721][ T9056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.296735][ T9056] RSP: 002b:00007f9c1cda9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 313.296753][ T9056] RAX: ffffffffffffffda RBX: 00007f9c1c215fa0 RCX: 00007f9c1bf9ce59 [ 313.296763][ T9056] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 313.296772][ T9056] RBP: 00007f9c1c032e6f R08: 0000000000000000 R09: 0000000000000000 [ 313.296780][ T9056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.296788][ T9056] R13: 00007f9c1c216038 R14: 00007f9c1c215fa0 R15: 00007fff61508528 [ 313.296808][ T9056] [ 315.282686][ T9080] zswap: compressor not available [ 315.661868][ T9087] nbd: socks must be embedded in a SOCK_ITEM attr [ 315.700175][ T9087] block nbd0: shutting down sockets [ 315.774539][ T9087] netlink: 28 bytes leftover after parsing attributes in process `syz.1.623'. [ 315.945055][ T9087] team0 (unregistering): Port device team_slave_0 removed [ 315.971929][ T9087] team0 (unregistering): Port device team_slave_1 removed [ 316.792026][ T9097] vhci_hcd: not connected 4 [ 317.274378][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.280890][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.396776][ T9112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 319.719713][ T9136] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 320.009319][ T9138] EXT4-fs error (device sda1): ext4_lookup:1785: inode #448: comm syz.1.633: iget: checksum invalid [ 320.025443][ T9144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.634'. [ 320.213996][ T9138] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 320.349292][ T9138] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 320.451587][ T9138] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 322.194396][ T9176] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 323.513078][ T9195] netlink: 9 bytes leftover after parsing attributes in process `syz.1.645'. [ 323.822049][ T9198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.646'. [ 323.954148][ T9201] EXT4-fs error (device sda1): ext4_lookup:1785: inode #448: comm syz.1.646: iget: checksum invalid [ 324.025279][ T9201] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 324.076699][ T9201] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 324.117590][ T9201] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 324.832420][ T9207] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 324.986325][ T9207] File: /dev/nullb0 PID: 9207 Comm: syz.3.648 [ 330.221388][ T9299] zero sized request [ 330.435884][ T9301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.554030][ T9325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.673'. [ 331.607046][ T9325] netlink: 354 bytes leftover after parsing attributes in process `syz.2.673'. [ 332.499398][ T9342] netlink: 28 bytes leftover after parsing attributes in process `syz.1.677'. [ 333.046711][ T9348] FAULT_INJECTION: forcing a failure. [ 333.046711][ T9348] name failslab, interval 1, probability 0, space 0, times 0 [ 333.142509][ T9348] CPU: 0 UID: 0 PID: 9348 Comm: syz.3.679 Not tainted syzkaller #0 PREEMPT(full) [ 333.142532][ T9348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 333.142542][ T9348] Call Trace: [ 333.142547][ T9348] [ 333.142553][ T9348] dump_stack_lvl+0x100/0x190 [ 333.142577][ T9348] should_fail_ex.cold+0x5/0xa [ 333.142597][ T9348] should_failslab+0xc2/0x120 [ 333.142619][ T9348] kmem_cache_alloc_noprof+0x91/0x6a0 [ 333.142638][ T9348] ? fcntl_setlk+0xaa/0xe20 [ 333.142658][ T9348] fcntl_setlk+0xaa/0xe20 [ 333.142677][ T9348] ? __pfx_fcntl_setlk+0x10/0x10 [ 333.142695][ T9348] ? find_held_lock+0x2b/0x80 [ 333.142716][ T9348] ? __might_fault+0xc5/0x140 [ 333.142730][ T9348] ? __might_fault+0xc5/0x140 [ 333.142753][ T9348] do_fcntl+0xf39/0x1670 [ 333.142773][ T9348] ? __pfx_do_fcntl+0x10/0x10 [ 333.142790][ T9348] ? __fget_files+0x215/0x3d0 [ 333.142809][ T9348] ? tomoyo_file_fcntl+0x6c/0xc0 [ 333.142833][ T9348] __x64_sys_fcntl+0x163/0x200 [ 333.142854][ T9348] do_syscall_64+0x115/0x840 [ 333.142873][ T9348] ? clear_bhb_loop+0x40/0x90 [ 333.142897][ T9348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.142913][ T9348] RIP: 0033:0x7fb33679ce59 [ 333.142927][ T9348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.142942][ T9348] RSP: 002b:00007fb33770a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 333.142957][ T9348] RAX: ffffffffffffffda RBX: 00007fb336a16090 RCX: 00007fb33679ce59 [ 333.142967][ T9348] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000003 [ 333.142975][ T9348] RBP: 00007fb336832e6f R08: 0000000000000000 R09: 0000000000000000 [ 333.142984][ T9348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.142995][ T9348] R13: 00007fb336a16128 R14: 00007fb336a16090 R15: 00007ffe68d9a3b8 [ 333.143016][ T9348] [ 333.796231][ T9362] netlink: 286 bytes leftover after parsing attributes in process `syz.3.683'. [ 334.754687][ T9359] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 334.834117][ T9359] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 334.918214][ T9359] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 335.001147][ T9359] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 335.926666][ T9396] futex_wake_op: syz.1.690 tries to shift op by -2048; fix this program [ 336.380432][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 336.861749][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 336.939933][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 336.951820][ T9399] FAULT_INJECTION: forcing a failure. [ 336.951820][ T9399] name failslab, interval 1, probability 0, space 0, times 0 [ 337.020437][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 337.067689][ T9399] CPU: 0 UID: 0 PID: 9399 Comm: syz.0.695 Not tainted syzkaller #0 PREEMPT(full) [ 337.067713][ T9399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 337.067722][ T9399] Call Trace: [ 337.067727][ T9399] [ 337.067733][ T9399] dump_stack_lvl+0x100/0x190 [ 337.067757][ T9399] should_fail_ex.cold+0x5/0xa [ 337.067778][ T9399] should_failslab+0xc2/0x120 [ 337.067799][ T9399] kmem_cache_alloc_noprof+0x91/0x6a0 [ 337.067816][ T9399] ? __proc_create+0xc1/0x8f0 [ 337.067832][ T9399] ? __proc_create+0xc1/0x8f0 [ 337.067846][ T9399] ? __proc_create+0x247/0x8f0 [ 337.067864][ T9399] __proc_create+0x247/0x8f0 [ 337.067879][ T9399] ? __pfx___proc_create+0x10/0x10 [ 337.067902][ T9399] proc_mkdir+0x81/0x170 [ 337.067917][ T9399] ? __pfx_proc_mkdir+0x10/0x10 [ 337.067931][ T9399] ? cache_register_net+0x137/0x5e0 [ 337.067947][ T9399] ? cache_register_net+0x137/0x5e0 [ 337.067967][ T9399] cache_register_net+0x18f/0x5e0 [ 337.067985][ T9399] gss_svc_init_net+0x98/0x640 [ 337.068006][ T9399] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 337.068021][ T9399] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 337.068035][ T9399] ops_init+0x1e2/0x5f0 [ 337.068053][ T9399] setup_net+0x118/0x3a0 [ 337.068070][ T9399] ? __pfx_setup_net+0x10/0x10 [ 337.068085][ T9399] ? mutex_init_lockdep+0xf1/0x120 [ 337.068104][ T9399] copy_net_ns+0x46f/0x7c0 [ 337.068123][ T9399] create_new_namespaces+0x3ea/0xac0 [ 337.068144][ T9399] unshare_nsproxy_namespaces+0xf2/0x220 [ 337.068162][ T9399] ksys_unshare+0x438/0xab0 [ 337.068183][ T9399] ? __pfx_ksys_unshare+0x10/0x10 [ 337.068208][ T9399] __x64_sys_unshare+0x31/0x40 [ 337.068227][ T9399] do_syscall_64+0x115/0x840 [ 337.068246][ T9399] ? clear_bhb_loop+0x40/0x90 [ 337.068264][ T9399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.068285][ T9399] RIP: 0033:0x7f9c1bf9ce59 [ 337.068300][ T9399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.068314][ T9399] RSP: 002b:00007f9c1a1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 337.068330][ T9399] RAX: ffffffffffffffda RBX: 00007f9c1c216180 RCX: 00007f9c1bf9ce59 [ 337.068340][ T9399] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 337.068348][ T9399] RBP: 00007f9c1c032e6f R08: 0000000000000000 R09: 0000000000000000 [ 337.068357][ T9399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 337.068366][ T9399] R13: 00007f9c1c216218 R14: 00007f9c1c216180 R15: 00007fff61508528 [ 337.068386][ T9399] [ 339.112125][ T9424] EXT4-fs error (device sda1): ext4_lookup:1785: inode #448: comm syz.2.704: iget: checksum invalid [ 339.158618][ T9424] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 339.227119][ T9424] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 339.303639][ T9424] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 341.072383][ T9463] nbd: socks must be embedded in a SOCK_ITEM attr [ 341.145252][ T9463] block nbd0: shutting down sockets [ 341.237503][ T9461] netlink: 28 bytes leftover after parsing attributes in process `syz.0.703'. [ 341.360012][ T9461] team0 (unregistering): Port device team_slave_0 removed [ 341.428359][ T9461] team0 (unregistering): Port device team_slave_1 removed [ 342.161658][ T9472] random: crng reseeded on system resumption [ 343.395632][ T9469] Process accounting resumed [ 343.633996][ T9479] zswap: compressor not available [ 345.347029][ T9514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.713'. [ 345.408570][ T9514] netlink: 354 bytes leftover after parsing attributes in process `syz.0.713'. [ 346.089834][ T9524] [U] 0="/ [ 346.123213][ T9524] [U] [ 346.163960][ T9524] [U] EeQ@ [ 346.272519][ T9524] [U]  [ 347.211296][ T9531] EXT4-fs error (device sda1): ext4_lookup:1785: inode #448: comm syz.3.717: iget: checksum invalid [ 347.272990][ T9531] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 347.362119][ T9531] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 347.454761][ T9531] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 347.632777][ T9543] tipc: Started in network mode [ 347.655899][ T9543] tipc: Node identity ee00, cluster identity 4711 [ 347.705635][ T9543] tipc: Node number set to 60928 [ 347.821553][ T9533] zswap: compressor not available [ 348.481938][ T9560] NFSD: Failed to start, no listeners configured. [ 348.975456][ T9570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.724'. [ 349.023977][ T9570] netlink: 354 bytes leftover after parsing attributes in process `syz.3.724'. [ 352.587252][ T9619] EXT4-fs error (device sda1): ext4_lookup:1785: inode #448: comm syz.1.732: iget: checksum invalid [ 352.664293][ T9619] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 352.710147][ T9619] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 352.761089][ T9619] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 355.435908][ T9629] FAULT_INJECTION: forcing a failure. [ 355.435908][ T9629] name failslab, interval 1, probability 0, space 0, times 0 [ 355.599799][ T9629] CPU: 0 UID: 0 PID: 9629 Comm: syz.3.735 Not tainted syzkaller #0 PREEMPT(full) [ 355.599822][ T9629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 355.599832][ T9629] Call Trace: [ 355.599838][ T9629] [ 355.599844][ T9629] dump_stack_lvl+0x100/0x190 [ 355.599921][ T9629] should_fail_ex.cold+0x5/0xa [ 355.599957][ T9629] should_failslab+0xc2/0x120 [ 355.599997][ T9629] __kmalloc_noprof+0xfc/0x820 [ 355.600019][ T9629] ? cache_create_net+0x2b/0x1f0 [ 355.600121][ T9629] ? cache_create_net+0xa2/0x1f0 [ 355.600139][ T9629] cache_create_net+0xa2/0x1f0 [ 355.600155][ T9629] gss_svc_init_net+0x11f/0x640 [ 355.600220][ T9629] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 355.600268][ T9629] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 355.600283][ T9629] ops_init+0x1e2/0x5f0 [ 355.600362][ T9629] setup_net+0x118/0x3a0 [ 355.600379][ T9629] ? __pfx_setup_net+0x10/0x10 [ 355.600395][ T9629] ? mutex_init_lockdep+0xf1/0x120 [ 355.600428][ T9629] copy_net_ns+0x46f/0x7c0 [ 355.600447][ T9629] create_new_namespaces+0x3ea/0xac0 [ 355.600475][ T9629] unshare_nsproxy_namespaces+0xf2/0x220 [ 355.600497][ T9629] ksys_unshare+0x438/0xab0 [ 355.600525][ T9629] ? __pfx_ksys_unshare+0x10/0x10 [ 355.600551][ T9629] __x64_sys_unshare+0x31/0x40 [ 355.600569][ T9629] do_syscall_64+0x115/0x840 [ 355.600630][ T9629] ? clear_bhb_loop+0x40/0x90 [ 355.600654][ T9629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.600670][ T9629] RIP: 0033:0x7fb33679ce59 [ 355.600684][ T9629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.600699][ T9629] RSP: 002b:00007fb33772b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 355.600714][ T9629] RAX: ffffffffffffffda RBX: 00007fb336a15fa0 RCX: 00007fb33679ce59 [ 355.600724][ T9629] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 355.600733][ T9629] RBP: 00007fb336832e6f R08: 0000000000000000 R09: 0000000000000000 [ 355.600742][ T9629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.600751][ T9629] R13: 00007fb336a16038 R14: 00007fb336a15fa0 R15: 00007ffe68d9a3b8 [ 355.600771][ T9629] [ 355.904502][ T50] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 356.418320][ T9667] netlink: 25 bytes leftover after parsing attributes in process `syz.2.743'. [ 356.838512][ T9677] EXT4-fs error (device sda1): ext4_lookup:1785: inode #448: comm syz.1.746: iget: checksum invalid [ 356.925371][ T9677] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 356.974178][ T9677] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 357.017135][ T9677] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 358.030691][ T9670] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 358.069947][ T9670] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 358.096045][ T9670] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 358.121423][ T9670] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 358.148243][ T9670] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 358.768991][ T4944] Bluetooth: hci0: command 0x0406 tx timeout [ 360.128818][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 360.134997][ T5633] Bluetooth: hci1: command 0x0406 tx timeout [ 360.141132][ T4944] Bluetooth: hci3: command 0x0406 tx timeout [ 362.209653][ T4944] Bluetooth: hci3: command 0x0406 tx timeout [ 362.530241][ T9756] futex_wake_op: syz.0.770 tries to shift op by -2048; fix this program [ 362.600070][ T9760] 0x000000000001-0x000000020000 : "" [ 362.612301][ T9759] [U] 0="/ [ 362.624330][ T9759] [U] [ 362.641678][ T9759] [U] EeQ@ [ 362.676348][ T9760] ftl_cs: FTL header corrupt! [ 362.753891][ T9761] [U]  [ 363.170151][ T9746] kexec: Could not allocate control_code_buffer [ 364.693455][ T9792] FAULT_INJECTION: forcing a failure. [ 364.693455][ T9792] name failslab, interval 1, probability 0, space 0, times 0 [ 364.765697][ T9792] CPU: 0 UID: 0 PID: 9792 Comm: syz.3.769 Not tainted syzkaller #0 PREEMPT(full) [ 364.765722][ T9792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 364.765731][ T9792] Call Trace: [ 364.765737][ T9792] [ 364.765744][ T9792] dump_stack_lvl+0x100/0x190 [ 364.765769][ T9792] should_fail_ex.cold+0x5/0xa [ 364.765798][ T9792] should_failslab+0xc2/0x120 [ 364.765820][ T9792] __kmalloc_noprof+0xfc/0x820 [ 364.765840][ T9792] ? apply_wqattrs_prepare+0xfe/0xbb0 [ 364.765860][ T9792] apply_wqattrs_prepare+0xfe/0xbb0 [ 364.765875][ T9792] ? __alloc_workqueue+0xafd/0x1940 [ 364.765901][ T9792] apply_workqueue_attrs_locked+0x64/0xe0 [ 364.765918][ T9792] __alloc_workqueue+0xf55/0x1940 [ 364.765941][ T9792] alloc_workqueue_noprof+0xc7/0x130 [ 364.765961][ T9792] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 364.765983][ T9792] ? lockdep_init_map_type+0x5c/0x250 [ 364.766019][ T9792] ? lockdep_init_map_type+0x5c/0x250 [ 364.766037][ T9792] __rds_conn_create+0x1234/0x25a0 [ 364.766160][ T9792] ? __pfx___rds_conn_create+0x10/0x10 [ 364.766183][ T9792] ? __kasan_kmalloc+0xaa/0xb0 [ 364.766202][ T9792] ? lockdep_init_map_type+0x5c/0x250 [ 364.766220][ T9792] rds_conn_create_outgoing+0x44/0x60 [ 364.766245][ T9792] rds_sendmsg+0x10da/0x34a0 [ 364.766272][ T9792] ? __pfx_rds_sendmsg+0x10/0x10 [ 364.766289][ T9792] ? __pfx_aa_sk_perm+0x10/0x10 [ 364.766361][ T9792] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 364.766421][ T9792] ? ____sys_sendmsg+0xa4d/0xbe0 [ 364.766473][ T9792] ____sys_sendmsg+0xa4d/0xbe0 [ 364.766491][ T9792] ? __pfx_rds_sendmsg+0x10/0x10 [ 364.766510][ T9792] ? __pfx_____sys_sendmsg+0x10/0x10 [ 364.766538][ T9792] ___sys_sendmsg+0x190/0x1e0 [ 364.766560][ T9792] ? __pfx____sys_sendmsg+0x10/0x10 [ 364.766578][ T9792] ? __lock_acquire+0x49f/0x1a40 [ 364.766624][ T9792] __sys_sendmsg+0x160/0x210 [ 364.766661][ T9792] ? __pfx___sys_sendmsg+0x10/0x10 [ 364.766688][ T9792] do_syscall_64+0x115/0x840 [ 364.766709][ T9792] ? clear_bhb_loop+0x40/0x90 [ 364.766727][ T9792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.766742][ T9792] RIP: 0033:0x7fb33679ce59 [ 364.766757][ T9792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.766776][ T9792] RSP: 002b:00007fb33772b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 364.766803][ T9792] RAX: ffffffffffffffda RBX: 00007fb336a15fa0 RCX: 00007fb33679ce59 [ 364.766815][ T9792] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000007 [ 364.766829][ T9792] RBP: 00007fb336832e6f R08: 0000000000000000 R09: 0000000000000000 [ 364.766840][ T9792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 364.766853][ T9792] R13: 00007fb336a16038 R14: 00007fb336a15fa0 R15: 00007ffe68d9a3b8 [ 364.766878][ T9792] [ 366.778283][ T9825] netlink: 'syz.2.777': attribute type 1 has an invalid length. [ 366.813246][ T9825] netlink: 9 bytes leftover after parsing attributes in process `syz.2.777'. [ 372.645545][ T9909] netlink: 330 bytes leftover after parsing attributes in process `syz.1.795'. [ 372.680413][ T9912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.796'. [ 372.738757][ T9912] EXT4-fs error (device sda1): ext4_lookup:1785: inode #448: comm syz.0.796: iget: checksum invalid [ 372.828457][ T9912] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 372.885757][ T9912] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 372.950606][ T9912] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 373.570627][ T9912] Process accounting paused [ 377.872295][T10016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.810'. [ 378.030567][T10017] EXT4-fs error (device sda1): ext4_lookup:1785: inode #448: comm syz.1.810: iget: checksum invalid [ 378.097553][T10017] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 378.142626][T10017] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 378.210589][T10017] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 378.315576][T10022] netlink: 28 bytes leftover after parsing attributes in process `syz.0.812'. [ 378.510648][T10022] netlink: 28 bytes leftover after parsing attributes in process `syz.0.812'. [ 378.686188][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.695356][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.305690][T10080] EXT4-fs error (device sda1): ext4_lookup:1785: inode #448: comm syz.2.825: iget: checksum invalid [ 383.360079][T10080] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 383.401269][T10080] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 383.450344][T10080] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 384.980156][ T30] audit: type=1804 audit(4294967477.055:10): pid=10096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.828" name="file0" dev="tmpfs" ino=1200 res=1 errno=0 [ 389.975623][T10158] netlink: 330 bytes leftover after parsing attributes in process `syz.0.838'. [ 393.027443][T10201] nbd: must specify at least one socket [ 395.156551][T10224] Ignoring unsupported numa_zonelist_order value: [ 395.196668][T10226] random: crng reseeded on system resumption [ 398.276159][T10254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.855'. [ 398.821143][ T30] audit: type=1804 audit(4294967490.902:11): pid=10258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.857" name="/newroot/198/file0" dev="tmpfs" ino=1047 res=1 errno=0 [ 403.852848][T10318] Process accounting resumed [ 403.935017][T10325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.868'. [ 404.003374][T10326] EXT4-fs error (device sda1): ext4_lookup:1785: inode #448: comm syz.1.868: iget: checksum invalid [ 404.061940][T10326] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 404.119760][T10326] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 404.162617][T10326] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 405.979468][T10353] ubi0: attaching mtd0 [ 406.000029][T10353] ubi0: scanning is finished [ 406.265923][T10353] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 406.322735][T10353] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 406.403026][T10353] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 406.518533][T10353] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 406.659176][T10353] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 406.872671][T10353] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 407.044569][T10353] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2059621022 [ 407.251833][T10353] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 407.345490][ T30] audit: type=1804 audit(4294967499.426:12): pid=10375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.876" name="file0" dev="tmpfs" ino=1249 res=1 errno=0 [ 407.473728][T10357] ubi0: detaching mtd0 [ 407.478471][T10360] ubi0: background thread "ubi_bgt0d" started, PID 10360 [ 407.601459][T10357] ubi0: mtd0 is detached [ 407.936991][T10388] netlink: 'syz.1.879': attribute type 1 has an invalid length. [ 407.976713][T10388] netlink: 33 bytes leftover after parsing attributes in process `syz.1.879'. [ 408.136353][T10392] EXT4-fs error (device sda1): ext4_lookup:1785: inode #448: comm syz.0.880: iget: checksum invalid [ 408.300675][T10392] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 408.424651][T10392] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 408.550462][T10392] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 413.555111][T10453] EXT4-fs error (device sda1): ext4_lookup:1785: inode #448: comm syz.1.894: iget: checksum invalid [ 413.631116][T10453] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 413.702080][T10453] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 413.764340][T10453] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 413.788619][T10454] netlink: 25 bytes leftover after parsing attributes in process `syz.2.893'. [ 415.471211][T10463] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 415.496545][T10463] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 415.547157][T10463] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 415.575329][T10463] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 416.975522][T10497] nbd: must specify at least one socket [ 417.539674][ T4944] Bluetooth: hci1: command 0x0406 tx timeout [ 417.545775][ T5633] Bluetooth: hci0: command 0x0406 tx timeout [ 417.619620][ T4944] Bluetooth: hci3: command 0x0406 tx timeout [ 417.625690][ T5633] Bluetooth: hci2: command 0x0406 tx timeout [ 421.434108][ T30] audit: type=1804 audit(4294967513.523:13): pid=10548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.910" name="/newroot/214/file0" dev="tmpfs" ino=1144 res=1 errno=0 [ 423.816151][T10582] nbd: must specify at least one socket [ 425.270769][ T4944] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 430.350563][T10656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.933'. [ 430.432327][T10656] netlink: 354 bytes leftover after parsing attributes in process `syz.3.933'. [ 433.858763][T10700] netlink: 504 bytes leftover after parsing attributes in process `syz.2.942'. [ 433.899193][T10700] netlink: 350 bytes leftover after parsing attributes in process `syz.2.942'. [ 434.182249][T10703] Process accounting paused [ 434.405469][T10697] zswap: compressor not available [ 434.945548][T10715] netlink: 25 bytes leftover after parsing attributes in process `syz.0.944'. [ 435.735249][T10736] netlink: 342 bytes leftover after parsing attributes in process `syz.2.950'. [ 438.477113][ T30] audit: type=1800 audit(4294967530.572:14): pid=10778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.958" name="dbroot" dev="configfs" ino=38734 res=0 errno=0 [ 439.259845][ T30] audit: type=1804 audit(4294967531.352:15): pid=10795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.958" name="/newroot/sys/kernel/debug/tracing/set_event" dev="tracefs" ino=1067 res=1 errno=0 [ 439.943905][T10806] NFSD: Failed to start, no listeners configured. [ 440.090727][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.097135][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.293915][T10808] NFSD: Failed to start, no listeners configured. [ 441.824428][T10716] Process accounting resumed [ 442.091282][T10841] netlink: 28 bytes leftover after parsing attributes in process `syz.1.980'. [ 442.161180][T10841] veth1_macvtap: left promiscuous mode [ 442.187876][T10841] macsec0: entered promiscuous mode [ 442.208315][T10841] macsec0: entered allmulticast mode [ 447.227075][T10909] netlink: 2468 bytes leftover after parsing attributes in process `syz.0.989'. [ 449.938231][T10923] Process accounting resumed [ 451.447012][T10978] Console: switching to colour VGA+ 80x25 [ 452.128191][T10997] EXT4-fs error (device sda1): ext4_lookup:1785: inode #448: comm syz.1.1007: iget: checksum invalid [ 452.231046][T10997] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 452.383251][T10997] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 452.507607][T10997] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 454.144896][T11007] Process accounting resumed [ 454.362222][T11033] netlink: 'syz.1.1015': attribute type 4 has an invalid length. [ 456.907043][T11081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1030'. [ 456.975474][T11082] netlink: 'syz.2.1029': attribute type 4 has an invalid length. [ 457.053638][T11085] EXT4-fs error (device sda1): ext4_lookup:1785: inode #448: comm syz.1.1030: iget: checksum invalid [ 457.092846][T11085] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 457.134756][T11085] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 457.166746][T11085] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 460.351466][T11119] netlink: 350 bytes leftover after parsing attributes in process `syz.3.1037'. [ 460.912011][T11142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1043'. [ 461.995420][T11164] netlink: 'syz.2.1048': attribute type 4 has an invalid length. [ 463.662253][T11193] netlink: 350 bytes leftover after parsing attributes in process `syz.3.1054'. [ 464.463442][T11204] netlink: 2468 bytes leftover after parsing attributes in process `syz.3.1057'. [ 466.902875][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ae56800: rx timeout, send abort [ 466.914086][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805ae56800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 467.361177][T11225] kexec: Could not allocate control_code_buffer [ 468.511279][T11255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1069'. [ 468.575217][T11255] EXT4-fs error (device sda1): ext4_lookup:1785: inode #448: comm syz.2.1069: iget: checksum invalid [ 468.648443][T11255] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 468.705445][T11255] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 468.761344][T11255] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 469.337120][T11266] zswap: compressor not available [ 473.602853][ T30] audit: type=1806 audit(4294967565.709:16): xattr="" res=-22 [ 473.713870][T11336] FAULT_INJECTION: forcing a failure. [ 473.713870][T11336] name failslab, interval 1, probability 0, space 0, times 0 [ 473.780102][T11336] CPU: 0 UID: 0 PID: 11336 Comm: syz.0.1089 Not tainted syzkaller #0 PREEMPT(full) [ 473.780126][T11336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 473.780136][T11336] Call Trace: [ 473.780141][T11336] [ 473.780147][T11336] dump_stack_lvl+0x100/0x190 [ 473.780175][T11336] should_fail_ex.cold+0x5/0xa [ 473.780198][T11336] should_failslab+0xc2/0x120 [ 473.780221][T11336] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 473.780242][T11336] ? brnf_init_net+0x42/0x450 [ 473.780353][T11336] ? __pfx_brnf_init_net+0x10/0x10 [ 473.780370][T11336] kmemdup_noprof+0x29/0x60 [ 473.780404][T11336] brnf_init_net+0x42/0x450 [ 473.780421][T11336] ? __pfx_brnf_init_net+0x10/0x10 [ 473.780437][T11336] ops_init+0x1e2/0x5f0 [ 473.780457][T11336] setup_net+0x118/0x3a0 [ 473.780473][T11336] ? __pfx_setup_net+0x10/0x10 [ 473.780489][T11336] ? mutex_init_lockdep+0xf1/0x120 [ 473.780508][T11336] copy_net_ns+0x46f/0x7c0 [ 473.780527][T11336] create_new_namespaces+0x3ea/0xac0 [ 473.780550][T11336] unshare_nsproxy_namespaces+0xf2/0x220 [ 473.780567][T11336] ksys_unshare+0x438/0xab0 [ 473.780588][T11336] ? __pfx_ksys_unshare+0x10/0x10 [ 473.780614][T11336] __x64_sys_unshare+0x31/0x40 [ 473.780633][T11336] do_syscall_64+0x115/0x840 [ 473.780655][T11336] ? clear_bhb_loop+0x40/0x90 [ 473.780673][T11336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.780688][T11336] RIP: 0033:0x7f9c1bf9ce59 [ 473.780702][T11336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.780717][T11336] RSP: 002b:00007f9c1cda9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 473.780732][T11336] RAX: ffffffffffffffda RBX: 00007f9c1c215fa0 RCX: 00007f9c1bf9ce59 [ 473.780743][T11336] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 473.780753][T11336] RBP: 00007f9c1c032e6f R08: 0000000000000000 R09: 0000000000000000 [ 473.780762][T11336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.780772][T11336] R13: 00007f9c1c216038 R14: 00007f9c1c215fa0 R15: 00007fff61508528 [ 473.780792][T11336] [ 476.037058][T11352] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 476.725246][T11354] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 477.016340][T11381] netlink: 350 bytes leftover after parsing attributes in process `syz.0.1099'. [ 477.804932][T11389] FAULT_INJECTION: forcing a failure. [ 477.804932][T11389] name failslab, interval 1, probability 0, space 0, times 0 [ 477.851405][T11389] CPU: 0 UID: 0 PID: 11389 Comm: syz.0.1109 Not tainted syzkaller #0 PREEMPT(full) [ 477.851433][T11389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 477.851443][T11389] Call Trace: [ 477.851449][T11389] [ 477.851455][T11389] dump_stack_lvl+0x100/0x190 [ 477.851481][T11389] should_fail_ex.cold+0x5/0xa [ 477.851501][T11389] should_failslab+0xc2/0x120 [ 477.851532][T11389] __kmalloc_noprof+0xfc/0x820 [ 477.851559][T11389] ? __register_sysctl_table+0xbc8/0x1650 [ 477.851616][T11389] ? __register_sysctl_table+0xbc8/0x1650 [ 477.851636][T11389] ? __register_sysctl_table+0xbe4/0x1650 [ 477.851655][T11389] __register_sysctl_table+0xbe4/0x1650 [ 477.851674][T11389] ? __pfx___register_sysctl_table+0x10/0x10 [ 477.851689][T11389] ? is_module_address+0x69/0xf0 [ 477.851715][T11389] ? register_net_sysctl_sz+0x222/0x430 [ 477.851825][T11389] ? __asan_memcpy+0x3c/0x60 [ 477.851844][T11389] sysctl_core_net_init+0xe6/0x290 [ 477.851871][T11389] ? __pfx_sysctl_core_net_init+0x10/0x10 [ 477.851892][T11389] ops_init+0x1e2/0x5f0 [ 477.851910][T11389] setup_net+0x118/0x3a0 [ 477.851927][T11389] ? __pfx_setup_net+0x10/0x10 [ 477.851944][T11389] ? mutex_init_lockdep+0xf1/0x120 [ 477.851962][T11389] copy_net_ns+0x46f/0x7c0 [ 477.851982][T11389] create_new_namespaces+0x3ea/0xac0 [ 477.852003][T11389] unshare_nsproxy_namespaces+0xf2/0x220 [ 477.852021][T11389] ksys_unshare+0x438/0xab0 [ 477.852041][T11389] ? __pfx_ksys_unshare+0x10/0x10 [ 477.852067][T11389] __x64_sys_unshare+0x31/0x40 [ 477.852086][T11389] do_syscall_64+0x115/0x840 [ 477.852106][T11389] ? clear_bhb_loop+0x40/0x90 [ 477.852131][T11389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.852148][T11389] RIP: 0033:0x7f9c1bf9ce59 [ 477.852163][T11389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.852177][T11389] RSP: 002b:00007f9c1cda9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 477.852193][T11389] RAX: ffffffffffffffda RBX: 00007f9c1c215fa0 RCX: 00007f9c1bf9ce59 [ 477.852203][T11389] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 477.852212][T11389] RBP: 00007f9c1c032e6f R08: 0000000000000000 R09: 0000000000000000 [ 477.852222][T11389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 477.852231][T11389] R13: 00007f9c1c216038 R14: 00007f9c1c215fa0 R15: 00007fff61508528 [ 477.852251][T11389] [ 477.852259][T11389] sysctl could not get directory: /net/core -12 [ 478.346743][T11394] rnbd_client L202: map_device: Unknown parameter or missing value '0="/' [ 479.308174][T11419] sctp: [Deprecated]: syz.3.1108 (pid 11419) Use of struct sctp_assoc_value in delayed_ack socket option. [ 479.308174][T11419] Use struct sctp_sack_info instead [ 480.034432][ T4944] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 480.145619][T11418] Process accounting paused [ 480.509868][ T4944] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 480.509908][ T4944] Bluetooth: hci2: unexpected subevent 0x0e length: 725 > 15 [ 480.525071][ T4944] Bluetooth: hci2: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 480.873102][T11441] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4:988d:a8ef:b61c:7dcb, load rds_tcp or rds_rdma? [ 481.174737][T11453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1117'. [ 481.256524][T11453] EXT4-fs error (device sda1): ext4_lookup:1785: inode #448: comm syz.0.1117: iget: checksum invalid [ 481.325865][T11453] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 481.396153][T11453] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 481.470002][T11453] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 481.629782][T11459] NFSD: Failed to start, no listeners configured. [ 481.924835][T11462] NFSD: Failed to start, no listeners configured. [ 482.275325][T11473] EXT4-fs error (device sda1): ext4_lookup:1785: inode #448: comm syz.2.1122: iget: checksum invalid [ 482.409841][T11473] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 482.517644][T11473] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 482.630474][T11473] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 485.143058][T11492] Process accounting paused [ 485.517643][T11524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1132'. [ 485.740655][T11526] EXT4-fs error (device sda1): ext4_lookup:1785: inode #448: comm syz.2.1132: iget: checksum invalid [ 485.855732][T11526] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 485.975539][T11526] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 486.050357][T11526] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 486.800024][T11547] netlink: 'syz.1.1139': attribute type 4 has an invalid length. [ 488.870590][T11580] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1143'. [ 490.559452][T11618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1151'. [ 490.627071][T11618] netlink: 354 bytes leftover after parsing attributes in process `syz.1.1151'. [ 490.681344][T11621] tipc: Started in network mode [ 490.705500][T11621] tipc: Node identity ee00, cluster identity 4711 [ 490.742400][T11621] tipc: Node number set to 60928 [ 492.859430][T11663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1163'. [ 492.905149][T11663] EXT4-fs error (device sda1): ext4_lookup:1785: inode #448: comm syz.0.1163: iget: checksum invalid [ 492.945311][T11663] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 492.983902][T11663] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 493.033999][T11663] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 494.689210][T11705] netlink: 'syz.0.1172': attribute type 4 has an invalid length. [ 498.616992][T11778] HfR: entered promiscuous mode [ 499.047872][T11778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1189'. [ 499.260667][T11795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1192'. [ 499.366336][T11795] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1192'. [ 499.408778][T11795] bridge_slave_1: left allmulticast mode [ 499.435866][T11795] bridge_slave_1: left promiscuous mode [ 499.467944][T11795] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.547575][T11795] bridge_slave_0: left allmulticast mode [ 499.575153][T11795] bridge_slave_0: left promiscuous mode [ 499.607496][T11795] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.025530][T11812] FAULT_INJECTION: forcing a failure. [ 500.025530][T11812] name failslab, interval 1, probability 0, space 0, times 0 [ 500.122198][T11812] CPU: 0 UID: 0 PID: 11812 Comm: syz.3.1193 Not tainted syzkaller #0 PREEMPT(full) [ 500.122221][T11812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 500.122231][T11812] Call Trace: [ 500.122236][T11812] [ 500.122242][T11812] dump_stack_lvl+0x100/0x190 [ 500.122267][T11812] should_fail_ex.cold+0x5/0xa [ 500.122287][T11812] should_failslab+0xc2/0x120 [ 500.122308][T11812] __kvmalloc_node_noprof+0x116/0x970 [ 500.122326][T11812] ? __x64_sys_futex+0x358/0x4d0 [ 500.122345][T11812] ? __do_sys_setgroups+0x126/0x4f0 [ 500.122370][T11812] __do_sys_setgroups+0x126/0x4f0 [ 500.122391][T11812] ? 0xffffffffff600000 [ 500.122405][T11812] do_syscall_64+0x115/0x840 [ 500.122434][T11812] ? clear_bhb_loop+0x40/0x90 [ 500.122452][T11812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.122468][T11812] RIP: 0033:0x7fb33679ce59 [ 500.122480][T11812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.122494][T11812] RSP: 002b:00007fb3376e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000074 [ 500.122510][T11812] RAX: ffffffffffffffda RBX: 00007fb336a16180 RCX: 00007fb33679ce59 [ 500.122519][T11812] RDX: 0000000000000000 RSI: ffffffffff600000 RDI: 0000000c00000000 [ 500.122528][T11812] RBP: 00007fb336832e6f R08: 0000000000000000 R09: 0000000000000000 [ 500.122537][T11812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 500.122546][T11812] R13: 00007fb336a16218 R14: 00007fb336a16180 R15: 00007ffe68d9a3b8 [ 500.122561][T11812] ? 0xffffffffff600000 [ 500.122575][T11812] [ 500.347762][T11805] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1195'. [ 500.584303][T11805] macsec0: entered promiscuous mode [ 500.620397][T11805] macsec0: entered allmulticast mode [ 500.649142][T11805] veth1_macvtap: entered allmulticast mode [ 501.280587][T11827] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1199'. [ 501.407800][ T30] audit: type=1804 audit(4294967593.533:17): pid=11832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1200" name="file0" dev="tmpfs" ino=1762 res=1 errno=0 [ 501.499555][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.510897][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.521523][T11848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1205'. [ 502.662656][T11849] EXT4-fs error (device sda1): ext4_lookup:1785: inode #448: comm syz.1.1205: iget: checksum invalid [ 502.777193][T11849] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 502.845344][T11849] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 502.900172][T11849] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 503.809206][ T30] audit: type=1107 audit(4294967595.935:18): pid=11854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 503.874496][ T30] audit: type=1107 audit(4294967595.975:19): pid=11854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 504.682974][T11878] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1211'. [ 506.014386][T11897] FAULT_INJECTION: forcing a failure. [ 506.014386][T11897] name failslab, interval 1, probability 0, space 0, times 0 [ 506.181983][T11897] CPU: 0 UID: 0 PID: 11897 Comm: syz.0.1214 Not tainted syzkaller #0 PREEMPT(full) [ 506.182007][T11897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 506.182017][T11897] Call Trace: [ 506.182023][T11897] [ 506.182029][T11897] dump_stack_lvl+0x100/0x190 [ 506.182055][T11897] should_fail_ex.cold+0x5/0xa [ 506.182077][T11897] should_failslab+0xc2/0x120 [ 506.182099][T11897] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 506.182119][T11897] ? __alloc_skb+0x140/0x710 [ 506.182232][T11897] __alloc_skb+0x140/0x710 [ 506.182254][T11897] ? __alloc_skb+0x5b7/0x710 [ 506.182277][T11897] ? __pfx___alloc_skb+0x10/0x10 [ 506.182303][T11897] ? __asan_memcpy+0x3c/0x60 [ 506.182321][T11897] alloc_uevent_skb+0x7d/0x210 [ 506.182378][T11897] kobject_uevent_env+0x122c/0x18b0 [ 506.182401][T11897] ? internal_create_groups+0x11a/0x150 [ 506.182426][T11897] netdev_queue_update_kobjects+0x1a7/0x6f0 [ 506.182502][T11897] netdev_register_kobject+0x2b3/0x3d0 [ 506.182525][T11897] register_netdevice+0x15b6/0x25a0 [ 506.182571][T11897] ? __pfx_register_netdevice+0x10/0x10 [ 506.182588][T11897] ? net_generic+0xea/0x2a0 [ 506.182688][T11897] ppp_dev_configure+0x986/0xcb0 [ 506.182715][T11897] ppp_ioctl+0x9d7/0x27c0 [ 506.182745][T11897] ? find_held_lock+0x2b/0x80 [ 506.182770][T11897] ? __pfx_ppp_ioctl+0x10/0x10 [ 506.182796][T11897] ? __fget_files+0x21f/0x3d0 [ 506.182822][T11897] ? __pfx_ppp_ioctl+0x10/0x10 [ 506.182846][T11897] __x64_sys_ioctl+0x18e/0x210 [ 506.182869][T11897] do_syscall_64+0x115/0x840 [ 506.182889][T11897] ? clear_bhb_loop+0x40/0x90 [ 506.182907][T11897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.182922][T11897] RIP: 0033:0x7f9c1bf9ce59 [ 506.182937][T11897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.182951][T11897] RSP: 002b:00007f9c1cd88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 506.182965][T11897] RAX: ffffffffffffffda RBX: 00007f9c1c216090 RCX: 00007f9c1bf9ce59 [ 506.182975][T11897] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000006 [ 506.182985][T11897] RBP: 00007f9c1c032e6f R08: 0000000000000000 R09: 0000000000000000 [ 506.182994][T11897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 506.183003][T11897] R13: 00007f9c1c216128 R14: 00007f9c1c216090 R15: 00007fff61508528 [ 506.183028][T11897] [ 506.806011][T11903] FAULT_INJECTION: forcing a failure. [ 506.806011][T11903] name failslab, interval 1, probability 0, space 0, times 0 [ 506.836797][T11903] CPU: 0 UID: 0 PID: 11903 Comm: syz.3.1216 Not tainted syzkaller #0 PREEMPT(full) [ 506.836821][T11903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 506.836831][T11903] Call Trace: [ 506.836836][T11903] [ 506.836843][T11903] dump_stack_lvl+0x100/0x190 [ 506.836869][T11903] should_fail_ex.cold+0x5/0xa [ 506.836891][T11903] should_failslab+0xc2/0x120 [ 506.836912][T11903] kmem_cache_alloc_noprof+0x91/0x6a0 [ 506.836931][T11903] ? trace_kmem_cache_alloc+0xdd/0x100 [ 506.836951][T11903] ? security_file_alloc+0x34/0x2c0 [ 506.837044][T11903] security_file_alloc+0x34/0x2c0 [ 506.837062][T11903] init_file+0x95/0x480 [ 506.837090][T11903] alloc_empty_file+0x79/0x1c0 [ 506.837116][T11903] path_openat+0xe7/0x4280 [ 506.837132][T11903] ? __kasan_slab_alloc+0x89/0x90 [ 506.837151][T11903] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 506.837169][T11903] ? do_getname+0x35/0x390 [ 506.837186][T11903] ? do_sys_openat2+0xc7/0x1e0 [ 506.837205][T11903] ? __x64_sys_openat+0x12d/0x210 [ 506.837223][T11903] ? do_syscall_64+0x115/0x840 [ 506.837243][T11903] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.837265][T11903] ? __pfx_path_openat+0x10/0x10 [ 506.837285][T11903] do_file_open+0x20e/0x430 [ 506.837302][T11903] ? __pfx_do_file_open+0x10/0x10 [ 506.837330][T11903] ? alloc_fd+0x471/0x7a0 [ 506.837346][T11903] ? do_getname+0x191/0x390 [ 506.837366][T11903] do_sys_openat2+0x10f/0x1e0 [ 506.837385][T11903] ? __pfx_do_sys_openat2+0x10/0x10 [ 506.837406][T11903] ? __fget_files+0x21f/0x3d0 [ 506.837424][T11903] __x64_sys_openat+0x12d/0x210 [ 506.837443][T11903] ? __pfx___x64_sys_openat+0x10/0x10 [ 506.837470][T11903] do_syscall_64+0x115/0x840 [ 506.837489][T11903] ? clear_bhb_loop+0x40/0x90 [ 506.837507][T11903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.837522][T11903] RIP: 0033:0x7fb33675d68e [ 506.837537][T11903] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 506.837551][T11903] RSP: 002b:00007fb33772aec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 506.837566][T11903] RAX: ffffffffffffffda RBX: 00007fb33772b6c0 RCX: 00007fb33675d68e [ 506.837576][T11903] RDX: 0000000000000002 RSI: 00007fb33772af90 RDI: ffffffffffffff9c [ 506.837586][T11903] RBP: 00007fb336832e6f R08: 0000000000000000 R09: 0000000000000000 [ 506.837598][T11903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 506.837607][T11903] R13: 00007fb336a16038 R14: 00007fb336a15fa0 R15: 00007ffe68d9a3b8 [ 506.837626][T11903] [ 507.097595][T11906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1217'. [ 507.365426][T11905] EXT4-fs error (device sda1): ext4_lookup:1785: inode #448: comm syz.1.1217: iget: checksum invalid [ 507.384866][T11905] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 507.405105][T11905] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 507.442094][T11905] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 507.681328][T11911] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1216'. [ 507.799160][T11915] netlink: 'syz.1.1219': attribute type 4 has an invalid length. [ 509.172156][T11940] futex_wake_op: syz.0.1224 tries to shift op by -2048; fix this program [ 509.208613][T11940] futex_wake_op: syz.0.1224 tries to shift op by -2048; fix this program [ 509.817272][T11949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1227'. [ 509.885127][T11949] EXT4-fs error (device sda1): ext4_lookup:1785: inode #448: comm syz.3.1227: iget: checksum invalid [ 509.948117][T11949] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 509.987217][T11949] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 510.029308][T11949] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 510.080986][T11952] device-mapper: ioctl: Invalid ioctl structure: name d, dev 3000000000 [ 511.133277][T11970] ubi0: attaching mtd0 [ 511.176355][T11970] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 511.277064][T11970] eraseblock attaching information dump: [ 511.357632][T11970] ec 1 [ 511.403424][T11970] pnum 0 [ 511.465221][T11970] lnum 0 [ 511.518643][T11970] scrub 0 [ 511.544526][T11976] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1234'. [ 511.570545][T11970] sqnum 1 [ 511.605850][T11970] Volume identifier header dump: [ 511.654920][T11970] magic 55424921 [ 511.701125][T11970] version 1 [ 511.732806][T11970] vol_type 1 [ 511.745667][T11970] copy_flag 0 [ 511.761893][T11970] compat 5 [ 511.780231][T11970] vol_id 2147479551 [ 511.803676][T11970] lnum 0 [ 511.823258][T11970] data_size 0 [ 511.843867][T11970] used_ebs 0 [ 511.888176][T11970] data_pad 0 [ 511.918597][T11970] sqnum 1 [ 511.951454][T11970] hdr_crc 65b3bd2d [ 512.012615][T11970] Volume identifier header hexdump: [ 512.264753][T11970] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 513.777921][ T30] audit: type=1800 audit(1843104524.372:20): pid=12013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1239" name="dbroot" dev="configfs" ino=45175 res=0 errno=0 [ 515.341979][T12039] Process accounting resumed [ 515.645064][T12054] random: crng reseeded on system resumption [ 518.423789][T12108] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1258'. [ 518.927097][T12114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1262'. [ 519.026414][T12114] EXT4-fs error (device sda1): ext4_lookup:1785: inode #448: comm syz.0.1262: iget: checksum invalid [ 519.150768][T12114] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 519.261846][T12114] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 519.383640][T12114] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 521.041430][T12154] futex_wake_op: syz.3.1270 tries to shift op by -2048; fix this program [ 521.106576][T12154] futex_wake_op: syz.3.1270 tries to shift op by -2048; fix this program getty: ttyS0: read error: Resource temporarily unavailable [ 521.327028][T12160] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1271'. [ 521.668859][T12160] ipvlan1: entered promiscuous mode [ 521.691224][T12160] ipvlan1: entered allmulticast mode [ 521.722833][T12160] veth0_vlan: entered allmulticast mode syzkaller syzkaller login: [ 523.265269][T12185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1277'. [ 523.316856][T12185] EXT4-fs error (device sda1): ext4_lookup:1785: inode #448: comm syz.3.1277: iget: checksum invalid [ 523.375936][T12185] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 523.423410][T12185] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 523.469175][T12185] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 524.228458][T12201] binder: 12200:12201 ioctl 541b 0 returned -22 [ 524.391063][T12204] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1281'. [ 525.844036][T12223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1285'. [ 525.914591][T12225] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1285'. [ 525.990116][T12225] mac80211_hwsim hwsim2 : renamed from wlan0 (while UP) [ 526.328512][ T30] audit: type=1804 audit(1843104536.928:21): pid=12233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1286" name="/newroot/287/file0" dev="tmpfs" ino=1538 res=1 errno=0 [ 526.454931][ T30] audit: type=1804 audit(1843104536.968:22): pid=12234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1286" name="/newroot/287/file0" dev="tmpfs" ino=1538 res=1 errno=0 [ 527.334231][T12256] netlink: 'syz.0.1291': attribute type 4 has an invalid length. [ 530.944218][T12303] netlink: 'syz.1.1302': attribute type 4 has an invalid length. [ 532.806350][T12324] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1305'. [ 534.297356][T12344] random: crng reseeded on system resumption [ 534.423558][T12344] EXT4-fs error (device sda1): ext4_lookup:1785: inode #448: comm syz.0.1309: iget: checksum invalid [ 534.493210][T12344] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 534.570618][T12344] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 534.601430][T12344] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 536.268872][T12364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1314'. [ 536.337920][T12364] EXT4-fs error (device sda1): ext4_lookup:1785: inode #448: comm syz.3.1314: iget: checksum invalid [ 536.401390][T12364] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 536.447955][T12364] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 536.499791][T12364] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 540.536993][T12391] kexec: Could not allocate control_code_buffer [ 541.017565][T12427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1326'. [ 541.077534][T12427] EXT4-fs error (device sda1): ext4_lookup:1785: inode #448: comm syz.1.1326: iget: checksum invalid [ 541.141869][T12427] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 541.195420][T12427] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 541.234957][T12427] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 541.385225][T12436] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1327'. [ 544.093888][T12474] FAULT_INJECTION: forcing a failure. [ 544.093888][T12474] name failslab, interval 1, probability 0, space 0, times 0 [ 544.183433][T12474] CPU: 0 UID: 0 PID: 12474 Comm: syz.3.1336 Tainted: G L syzkaller #0 PREEMPT(full) [ 544.183461][T12474] Tainted: [L]=SOFTLOCKUP [ 544.183466][T12474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 544.183476][T12474] Call Trace: [ 544.183481][T12474] [ 544.183495][T12474] dump_stack_lvl+0x100/0x190 [ 544.183519][T12474] should_fail_ex.cold+0x5/0xa [ 544.183540][T12474] should_failslab+0xc2/0x120 [ 544.183562][T12474] __kmalloc_noprof+0xfc/0x820 [ 544.183580][T12474] ? tracepoint_add_func+0x3a8/0x1150 [ 544.183634][T12474] ? __pfx_blk_add_trace_zone_unplug+0x10/0x10 [ 544.183665][T12474] tracepoint_add_func+0x3a8/0x1150 [ 544.183686][T12474] ? __pfx_blk_add_trace_zone_unplug+0x10/0x10 [ 544.183712][T12474] ? __pfx_blk_add_trace_zone_unplug+0x10/0x10 [ 544.183731][T12474] tracepoint_probe_register+0xc4/0x110 [ 544.183754][T12474] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 544.183777][T12474] ? __pfx_blk_add_trace_zone_unplug+0x10/0x10 [ 544.183797][T12474] ? relay_open+0x793/0xa00 [ 544.183818][T12474] blk_register_tracepoints+0x237/0x440 [ 544.183834][T12474] blk_trace_setup_finalize+0x320/0x3a0 [ 544.183853][T12474] blk_trace_setup+0x254/0x440 [ 544.183875][T12474] ? __pfx_blk_trace_setup+0x10/0x10 [ 544.183892][T12474] ? lockdep_hardirqs_on+0x16/0x100 [ 544.183976][T12474] ? __pfx_vsnprintf+0x10/0x10 [ 544.184033][T12474] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 544.184057][T12474] ? do_vfs_ioctl+0x226/0x13e0 [ 544.184081][T12474] blk_trace_ioctl+0x245/0x320 [ 544.184102][T12474] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 544.184124][T12474] ? find_held_lock+0x2b/0x80 [ 544.184142][T12474] ? __fget_files+0x215/0x3d0 [ 544.184155][T12474] ? hook_file_ioctl_common+0x140/0x440 [ 544.184205][T12474] blkdev_ioctl+0x17c/0x6f0 [ 544.184266][T12474] ? __pfx_blkdev_ioctl+0x10/0x10 [ 544.184289][T12474] ? __pfx_blkdev_ioctl+0x10/0x10 [ 544.184311][T12474] __x64_sys_ioctl+0x18e/0x210 [ 544.184336][T12474] do_syscall_64+0x115/0x840 [ 544.184355][T12474] ? clear_bhb_loop+0x40/0x90 [ 544.184373][T12474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.184389][T12474] RIP: 0033:0x7fb33679ce59 [ 544.184403][T12474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.184418][T12474] RSP: 002b:00007fb33770a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 544.184433][T12474] RAX: ffffffffffffffda RBX: 00007fb336a16090 RCX: 00007fb33679ce59 [ 544.184444][T12474] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000007 [ 544.184453][T12474] RBP: 00007fb336832e6f R08: 0000000000000000 R09: 0000000000000000 [ 544.184462][T12474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 544.184471][T12474] R13: 00007fb336a16128 R14: 00007fb336a16090 R15: 00007ffe68d9a3b8 [ 544.184499][T12474] [ 544.469277][T12474] ------------[ cut here ]------------ [ 544.476486][T12474] ret [ 544.476509][T12474] WARNING: kernel/trace/blktrace.c:1359 at blk_register_tracepoints+0x3e4/0x440, CPU#0: syz.3.1336/12474 [ 544.490339][T12474] Modules linked in: [ 544.495734][T12474] CPU: 0 UID: 0 PID: 12474 Comm: syz.3.1336 Tainted: G L syzkaller #0 PREEMPT(full) [ 544.506733][T12474] Tainted: [L]=SOFTLOCKUP [ 544.511377][T12474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 544.521634][T12474] RIP: 0010:blk_register_tracepoints+0x3e4/0x440 [ 544.528118][T12474] Code: 0f 0b 90 e9 01 fe ff ff e8 79 8e f7 ff 90 0f 0b 90 e9 20 fe ff ff e8 6b 8e f7 ff 90 0f 0b 90 e9 3f fe ff ff e8 5d 8e f7 ff 90 <0f> 0b 90 e9 5e fe ff ff e8 4f 8e f7 ff 90 0f 0b 90 e9 7d fe ff ff [ 544.547967][T12474] RSP: 0000:ffffc900036d7af8 EFLAGS: 00010283 [ 544.554050][T12474] RAX: 000000000004bf13 RBX: 00000000fffffff4 RCX: ffffc9000ed84000 [ 544.562079][T12474] RDX: 0000000000080000 RSI: ffffffff82115d63 RDI: ffff88802fccbe00 [ 544.570185][T12474] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 544.578219][T12474] R10: 00000000fffffff4 R11: 0000000000000001 R12: 200000000040000d [ 544.586290][T12474] R13: ffff8880271b2540 R14: ffffc900036d7d98 R15: 0000000000000001 [ 544.594290][T12474] FS: 00007fb33770a6c0(0000) GS:ffff8881242ed000(0000) knlGS:0000000000000000 [ 544.603411][T12474] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 544.610094][T12474] CR2: 00007fb3376c7ff8 CR3: 00000000367f8000 CR4: 00000000003526f0 [ 544.618391][T12474] Call Trace: [ 544.621680][T12474] [ 544.624640][T12474] blk_trace_setup_finalize+0x320/0x3a0 [ 544.630218][T12474] blk_trace_setup+0x254/0x440 [ 544.634979][T12474] ? __pfx_blk_trace_setup+0x10/0x10 [ 544.640278][T12474] ? lockdep_hardirqs_on+0x16/0x100 [ 544.645583][T12474] ? __pfx_vsnprintf+0x10/0x10 [ 544.650389][T12474] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 544.656302][T12474] ? do_vfs_ioctl+0x226/0x13e0 [ 544.661084][T12474] blk_trace_ioctl+0x245/0x320 [ 544.665843][T12474] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 544.671154][T12474] ? find_held_lock+0x2b/0x80 [ 544.675843][T12474] ? __fget_files+0x215/0x3d0 [ 544.680553][T12474] ? hook_file_ioctl_common+0x140/0x440 [ 544.686130][T12474] blkdev_ioctl+0x17c/0x6f0 [ 544.690655][T12474] ? __pfx_blkdev_ioctl+0x10/0x10 [ 544.695716][T12474] ? __pfx_blkdev_ioctl+0x10/0x10 [ 544.700768][T12474] __x64_sys_ioctl+0x18e/0x210 [ 544.705533][T12474] do_syscall_64+0x115/0x840 [ 544.710153][T12474] ? clear_bhb_loop+0x40/0x90 [ 544.715137][T12474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.721056][T12474] RIP: 0033:0x7fb33679ce59 [ 544.725616][T12474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.745327][T12474] RSP: 002b:00007fb33770a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 544.753786][T12474] RAX: ffffffffffffffda RBX: 00007fb336a16090 RCX: 00007fb33679ce59 [ 544.761811][T12474] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000007 [ 544.769845][T12474] RBP: 00007fb336832e6f R08: 0000000000000000 R09: 0000000000000000 [ 544.777858][T12474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 544.785870][T12474] R13: 00007fb336a16128 R14: 00007fb336a16090 R15: 00007ffe68d9a3b8 [ 544.793893][T12474] [ 544.796957][T12474] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 544.804226][T12474] CPU: 0 UID: 0 PID: 12474 Comm: syz.3.1336 Tainted: G L syzkaller #0 PREEMPT(full) [ 544.815152][T12474] Tainted: [L]=SOFTLOCKUP [ 544.819483][T12474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 544.829526][T12474] Call Trace: [ 544.832796][T12474] [ 544.835713][T12474] dump_stack_lvl+0x100/0x190 [ 544.840386][T12474] vpanic+0x552/0x970 [ 544.844360][T12474] ? __pfx_vpanic+0x10/0x10 [ 544.848854][T12474] panic+0xd1/0xe0 [ 544.852560][T12474] ? __pfx_panic+0x10/0x10 [ 544.856971][T12474] check_panic_on_warn.cold+0x19/0x34 [ 544.862332][T12474] ? blk_register_tracepoints+0x3e4/0x440 [ 544.868049][T12474] __warn.cold+0x191/0x318 [ 544.872460][T12474] __report_bug+0x30f/0x440 [ 544.877131][T12474] ? blk_register_tracepoints+0x3e4/0x440 [ 544.882871][T12474] ? __pfx___report_bug+0x10/0x10 [ 544.887920][T12474] ? tracepoint_probe_register+0xd2/0x110 [ 544.893642][T12474] ? __kasan_kmalloc+0x8a/0xb0 [ 544.898436][T12474] ? __mutex_unlock_slowpath+0x35d/0x930 [ 544.904161][T12474] ? blk_register_tracepoints+0x3e4/0x440 [ 544.909870][T12474] report_bug+0xb2/0x220 [ 544.914107][T12474] ? blk_register_tracepoints+0x3e4/0x440 [ 544.919812][T12474] handle_bug+0x16a/0x2a0 [ 544.924137][T12474] exc_invalid_op+0x17/0x50 [ 544.928644][T12474] asm_exc_invalid_op+0x1a/0x20 [ 544.933488][T12474] RIP: 0010:blk_register_tracepoints+0x3e4/0x440 [ 544.939819][T12474] Code: 0f 0b 90 e9 01 fe ff ff e8 79 8e f7 ff 90 0f 0b 90 e9 20 fe ff ff e8 6b 8e f7 ff 90 0f 0b 90 e9 3f fe ff ff e8 5d 8e f7 ff 90 <0f> 0b 90 e9 5e fe ff ff e8 4f 8e f7 ff 90 0f 0b 90 e9 7d fe ff ff [ 544.959471][T12474] RSP: 0000:ffffc900036d7af8 EFLAGS: 00010283 [ 544.965534][T12474] RAX: 000000000004bf13 RBX: 00000000fffffff4 RCX: ffffc9000ed84000 [ 544.973527][T12474] RDX: 0000000000080000 RSI: ffffffff82115d63 RDI: ffff88802fccbe00 [ 544.981503][T12474] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 544.989471][T12474] R10: 00000000fffffff4 R11: 0000000000000001 R12: 200000000040000d [ 544.997427][T12474] R13: ffff8880271b2540 R14: ffffc900036d7d98 R15: 0000000000000001 [ 545.005391][T12474] ? blk_register_tracepoints+0x3e3/0x440 [ 545.011131][T12474] ? blk_register_tracepoints+0x3e3/0x440 [ 545.016887][T12474] blk_trace_setup_finalize+0x320/0x3a0 [ 545.022437][T12474] blk_trace_setup+0x254/0x440 [ 545.027199][T12474] ? __pfx_blk_trace_setup+0x10/0x10 [ 545.032476][T12474] ? lockdep_hardirqs_on+0x16/0x100 [ 545.037677][T12474] ? __pfx_vsnprintf+0x10/0x10 [ 545.042445][T12474] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 545.048601][T12474] ? do_vfs_ioctl+0x226/0x13e0 [ 545.053387][T12474] blk_trace_ioctl+0x245/0x320 [ 545.058339][T12474] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 545.063652][T12474] ? find_held_lock+0x2b/0x80 [ 545.068354][T12474] ? __fget_files+0x215/0x3d0 [ 545.073028][T12474] ? hook_file_ioctl_common+0x140/0x440 [ 545.078566][T12474] blkdev_ioctl+0x17c/0x6f0 [ 545.083066][T12474] ? __pfx_blkdev_ioctl+0x10/0x10 [ 545.088087][T12474] ? __pfx_blkdev_ioctl+0x10/0x10 [ 545.093107][T12474] __x64_sys_ioctl+0x18e/0x210 [ 545.097866][T12474] do_syscall_64+0x115/0x840 [ 545.102448][T12474] ? clear_bhb_loop+0x40/0x90 [ 545.107118][T12474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.113002][T12474] RIP: 0033:0x7fb33679ce59 [ 545.117410][T12474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.137012][T12474] RSP: 002b:00007fb33770a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 545.145417][T12474] RAX: ffffffffffffffda RBX: 00007fb336a16090 RCX: 00007fb33679ce59 [ 545.153375][T12474] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000007 [ 545.161334][T12474] RBP: 00007fb336832e6f R08: 0000000000000000 R09: 0000000000000000 [ 545.169293][T12474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 545.177275][T12474] R13: 00007fb336a16128 R14: 00007fb336a16090 R15: 00007ffe68d9a3b8 [ 545.185247][T12474] [ 545.188319][T12474] Kernel Offset: disabled [ 545.192631][T12474] Rebooting in 86400 seconds..