last executing test programs: 7m24.688057061s ago: executing program 0 (id=1613): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000013", @ANYRES32], 0x54}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400109"], 0x87) 7m24.407733858s ago: executing program 0 (id=1614): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, &(0x7f0000000000)) ioctl$X86_IOC_RDMSR_REGS(r3, 0xc02063a0, &(0x7f0000000480)=[0x6, 0x10000, 0x5, 0x9, 0xd6cd, 0x1, 0x4, 0x6]) 7m23.435655813s ago: executing program 0 (id=1617): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x8087, 0x6, 0xd}) socket$inet_mptcp(0x2, 0x1, 0x106) 7m17.589399968s ago: executing program 0 (id=1624): sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000004980), 0x0, 0x20008000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000340)="5351e31d94", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x403}, 0x50) syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) 7m14.535688594s ago: executing program 0 (id=1630): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x8087, 0x6, 0xd}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x49, 0x20008000) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002640)=""/4080, 0xff0}, {&(0x7f00000003c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/167, 0xa7}, {&(0x7f0000003780)=""/241, 0xf1}, {&(0x7f0000003880)=""/191, 0xbf}, {&(0x7f0000000bc0)=""/180, 0xb4}, {&(0x7f0000000040)=""/18, 0x12}], 0x7}, 0x1}], 0x4, 0x100, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000340)="5351e31d94", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x403}, 0x50) r5 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000040)=0x85) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r3, 0x1, 0x3}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r6, &(0x7f0000000600), &(0x7f0000000840)=""/8}, 0x20) 7m12.136216904s ago: executing program 0 (id=1633): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0x8000, &(0x7f0000000740)={[{@barrier}]}, 0x3, 0x542, &(0x7f0000000cc0)="$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") r0 = getpid() syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f00000005c0)={[{@data_err_abort}, {@sb={'sb', 0x3d, 0x1}}], [{@uid_gt}, {@subj_type={'subj_type', 0x3d, '#)&'}}]}, 0x4, 0x52c, &(0x7f0000001240)="$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") r1 = openat(0xffffffffffffff9c, 0x0, 0x88000, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x40086604, 0xfffffffffffffffe) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', &(0x7f0000000700)=""/183, 0xb7) 6m56.955368342s ago: executing program 32 (id=1633): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0x8000, &(0x7f0000000740)={[{@barrier}]}, 0x3, 0x542, &(0x7f0000000cc0)="$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") r0 = getpid() syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f00000005c0)={[{@data_err_abort}, {@sb={'sb', 0x3d, 0x1}}], [{@uid_gt}, {@subj_type={'subj_type', 0x3d, '#)&'}}]}, 0x4, 0x52c, &(0x7f0000001240)="$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") r1 = openat(0xffffffffffffff9c, 0x0, 0x88000, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x40086604, 0xfffffffffffffffe) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', &(0x7f0000000700)=""/183, 0xb7) 12.98238153s ago: executing program 3 (id=2239): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c00000000000000000000010400000020000000050000000100000404000000010000000100000000000000180000000200000408000000130000000200000000000000010000000100"], 0x0, 0x80}, 0x28) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x8087, 0x6, 0xd}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x49, 0x20008000) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002640)=""/4080, 0xff0}, {&(0x7f00000003c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/167, 0xa7}, {&(0x7f0000003780)=""/241, 0xf1}, {&(0x7f0000003880)=""/191, 0xbf}, {&(0x7f0000000bc0)=""/180, 0xb4}, {&(0x7f0000000040)=""/18, 0x12}], 0x7}, 0x1}], 0x4, 0x100, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000340)="5351e31d94", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x403}, 0x50) r6 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000040)=0x85) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r7, &(0x7f0000000600), &(0x7f0000000840)=""/8}, 0x20) 11.639451313s ago: executing program 3 (id=2240): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000780)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$revoke(0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000180)=[{0x6, 0x9, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x40081, 0x0) clock_settime(0xfffffffb, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$P9_RREAD(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000280)={'nicvf0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) syz_clone3(0x0, 0x0) 10.92561065s ago: executing program 4 (id=2245): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) capset(&(0x7f0000000040)={0x19980330}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r4, 0x0, 0x0, 0x20008000) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002640)=""/4080, 0xff0}, {&(0x7f00000003c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/167, 0xa7}, {&(0x7f0000003780)=""/241, 0xf1}, {&(0x7f0000003880)=""/191, 0xbf}, {&(0x7f0000000bc0)=""/180, 0xb4}, {&(0x7f0000000040)=""/18, 0x12}], 0x7}, 0x1}], 0x4, 0x100, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000340)="5351e31d94", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x403}, 0x50) r5 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000040)=0x85) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r6, &(0x7f0000000600), &(0x7f0000000840)=""/8}, 0x20) 9.73289807s ago: executing program 2 (id=2246): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000013", @ANYRES32], 0x54}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="4001"], 0x87) 9.711209241s ago: executing program 1 (id=2247): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000180), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000001c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000180), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000700)={0x0, [[0xffffffff, 0xffffffdf, 0xffffffff, 0xffffffff, 0xffffffff, 0x719e, 0xffffffff, 0x3], [0xfffffbfc, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x2, 0xffffffff], [0xffdfffff, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0xfffffffb}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x10000, 0xffffffff}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r1, 0x40184150, &(0x7f0000000980)={0x0, &(0x7f00000009c0)='\x00', 0x10040}) ioctl$SNDRV_PCM_IOCTL_XRUN(r1, 0x4148, 0x0) 9.607148503s ago: executing program 4 (id=2248): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c00000000000000000000010400000020000000050000000100000404000000010000000100000000000000180000000200000408000000130000000200000000000000010000000100"], 0x0, 0x80}, 0x28) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x8087, 0x6, 0xd}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x49, 0x20008000) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002640)=""/4080, 0xff0}, {&(0x7f00000003c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/167, 0xa7}, {&(0x7f0000003780)=""/241, 0xf1}, {&(0x7f0000003880)=""/191, 0xbf}, {&(0x7f0000000bc0)=""/180, 0xb4}, {&(0x7f0000000040)=""/18, 0x12}], 0x7}, 0x1}], 0x4, 0x100, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000340)="5351e31d94", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x403}, 0x50) r6 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000040)=0x85) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r7, &(0x7f0000000600), &(0x7f0000000840)=""/8}, 0x20) 9.140604994s ago: executing program 1 (id=2249): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000300), 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) clock_gettime(0x9f958be980f4f906, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/mtdblock0\x00', 0x0, 0x22) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mtdblock0\x00', 0x101042, 0x1ff) sendfile(r2, r1, 0x0, 0x20000) 8.356474934s ago: executing program 1 (id=2250): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f00000004c0)={0xc, @multicast1, 0x4e21, 0x1, 'sed\x00', 0xb, 0x5, 0x38}, 0x2c) prlimit64(0x0, 0xe, &(0x7f0000000500)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000600)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000680), 0x651, 0x0) recvmmsg(r2, &(0x7f00000006c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000680)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/uac2.0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./config/usb_gadget/g1/functions/uac2.0/c_chmask\x00', 0x2, 0x0) write(r4, &(0x7f0000000a80)="aa", 0x1) 8.339961634s ago: executing program 3 (id=2251): getpid() openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, &(0x7f0000000040)='./my_debugfs/usb/devices\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setns(0xc9, 0x0) r2 = socket(0x1f, 0x3, 0x1) bind(r2, &(0x7f0000000300)=@hci={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000400)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) syz_emit_vhci(&(0x7f0000000500)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_le_read_local_features={{0x1}, {0x0, "ffffffffffffffff"}}}}, 0xf) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) setns(0xc9, 0x0) nanosleep(&(0x7f0000000b00)={0x1}, 0x0) r3 = socket(0x1f, 0x5, 0x8) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000700)={0x0, 0x3e8}, 0x10) connect(r3, &(0x7f0000000900)=@generic={0x1f, "0102030405060100"}, 0xa) 6.688684695s ago: executing program 4 (id=2252): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0x4}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 6.557212288s ago: executing program 2 (id=2253): write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @remote}, @ib={0x1b, 0x4, 0x6, {"c40b4e6c48883f1c450b45d3c094b6ad"}, 0x8, 0x8000000000000001}}}, 0x118) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, 0xffffffffffffffff, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 6.349352093s ago: executing program 2 (id=2254): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000780)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = signalfd4(r1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$revoke(0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000180)=[{0x6, 0x9, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x40081, 0x0) clock_settime(0xfffffffb, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$P9_RREAD(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000280)={'nicvf0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) syz_clone3(0x0, 0x0) 6.128725649s ago: executing program 3 (id=2255): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x200000) pwrite64(r0, &(0x7f0000000040)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000180)='U', 0x1, 0x1fe) pwrite64(r0, &(0x7f00000001c0)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000200)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f0000000240)='12345678-1234-1234-1234-123456789612', 0x24, 0xc30) pwrite64(r0, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) pwrite64(r0, &(0x7f0000000300)='PRIVHEAD', 0x8, 0x1e8000) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 6.002572662s ago: executing program 2 (id=2256): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) capset(&(0x7f0000000040)={0x19980330}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r4, 0x0, 0x0, 0x20008000) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002640)=""/4080, 0xff0}, {&(0x7f00000003c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/167, 0xa7}, {&(0x7f0000003780)=""/241, 0xf1}, {&(0x7f0000003880)=""/191, 0xbf}, {&(0x7f0000000bc0)=""/180, 0xb4}, {&(0x7f0000000040)=""/18, 0x12}], 0x7}, 0x1}], 0x4, 0x100, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000340)="5351e31d94", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x403}, 0x50) r5 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000040)=0x85) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r6, &(0x7f0000000600), &(0x7f0000000840)=""/8}, 0x20) 4.721046124s ago: executing program 2 (id=2257): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000008c0)=""/195, 0xc3}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000f00)={0x0, 0x0, 0x0}, 0x24005800) 4.698341964s ago: executing program 1 (id=2258): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000180), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000700)={0x0, [[0xffffffff, 0xffffffdf, 0xffffffff, 0xffffffff, 0xffffffff, 0x719e, 0xffffffff, 0x3], [0xfffffbfc, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x2, 0xffffffff], [0xffdfffff, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0xfffffffb}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x10000, 0xffffffff}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r3, 0x40184150, &(0x7f0000000980)={0x0, &(0x7f00000009c0)='\x00', 0x10040}) ioctl$SNDRV_PCM_IOCTL_XRUN(r3, 0x4148, 0x0) 4.578458167s ago: executing program 3 (id=2259): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000300), 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) clock_gettime(0x9f958be980f4f906, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/mtdblock0\x00', 0x0, 0x22) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mtdblock0\x00', 0x101042, 0x1ff) sendfile(r2, r1, 0x0, 0x20000) 3.685698489s ago: executing program 1 (id=2260): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c00000000000000000000010400000020000000050000000100000404000000010000000100000000000000180000000200000408000000130000000200000000000000010000000100"], 0x0, 0x80}, 0x28) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x8087, 0x6, 0xd}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x49, 0x20008000) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002640)=""/4080, 0xff0}, {&(0x7f00000003c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/167, 0xa7}, {&(0x7f0000003780)=""/241, 0xf1}, {&(0x7f0000003880)=""/191, 0xbf}, {&(0x7f0000000bc0)=""/180, 0xb4}, {&(0x7f0000000040)=""/18, 0x12}], 0x7}, 0x1}], 0x4, 0x100, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000340)="5351e31d94", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x403}, 0x50) r6 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000040)=0x85) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r7, &(0x7f0000000600), &(0x7f0000000840)=""/8}, 0x20) 3.668461759s ago: executing program 3 (id=2261): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000013", @ANYRES32], 0x54}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="4001"], 0x87) 3.65927953s ago: executing program 4 (id=2262): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000180), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000001c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000180), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000700)={0x0, [[0xffffffff, 0xffffffdf, 0xffffffff, 0xffffffff, 0xffffffff, 0x719e, 0xffffffff, 0x3], [0xfffffbfc, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x2, 0xffffffff], [0xffdfffff, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0xfffffffb}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x10000, 0xffffffff}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r1, 0x40184150, &(0x7f0000000980)={0x0, &(0x7f00000009c0)='\x00', 0x10040}) ioctl$SNDRV_PCM_IOCTL_XRUN(r1, 0x4148, 0x0) 2.385261391s ago: executing program 1 (id=2263): getpid() openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, &(0x7f0000000040)='./my_debugfs/usb/devices\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setns(0xc9, 0x0) r2 = socket(0x1f, 0x3, 0x1) bind(r2, &(0x7f0000000300)=@hci={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000400)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) syz_emit_vhci(&(0x7f0000000500)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_le_read_local_features={{0x1}, {0x0, "ffffffffffffffff"}}}}, 0xf) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) setns(0xc9, 0x0) nanosleep(&(0x7f0000000b00)={0x1}, 0x0) r3 = socket(0x1f, 0x5, 0x8) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000700)={0x0, 0x3e8}, 0x10) connect(r3, &(0x7f0000000900)=@generic={0x1f, "0102030405060100"}, 0xa) 2.02689922s ago: executing program 4 (id=2265): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) capset(&(0x7f0000000040)={0x19980330}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000004980), 0x0, 0x20008000) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002640)=""/4080, 0xff0}, {&(0x7f00000003c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/167, 0xa7}, {&(0x7f0000003780)=""/241, 0xf1}, {&(0x7f0000003880)=""/191, 0xbf}, {&(0x7f0000000bc0)=""/180, 0xb4}, {&(0x7f0000000040)=""/18, 0x12}], 0x7}, 0x1}], 0x4, 0x100, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000340)="5351e31d94", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x403}, 0x50) r5 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000040)=0x85) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r6, &(0x7f0000000600), &(0x7f0000000840)=""/8}, 0x20) 657.671354ms ago: executing program 4 (id=2266): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f00000004c0)={0xc, @multicast1, 0x4e21, 0x1, 'sed\x00', 0xb, 0x5, 0x38}, 0x2c) prlimit64(0x0, 0xe, &(0x7f0000000500)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000600)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000680), 0x651, 0x0) recvmmsg(r2, &(0x7f00000006c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000680)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/uac2.0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./config/usb_gadget/g1/functions/uac2.0/c_chmask\x00', 0x2, 0x0) write(r4, &(0x7f0000000a80)="aa", 0x1) 0s ago: executing program 2 (id=2267): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x200000) pwrite64(r0, &(0x7f0000000040)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000180)='U', 0x1, 0x1fe) pwrite64(r0, &(0x7f00000001c0)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000200)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f0000000240)='12345678-1234-1234-1234-123456789612', 0x24, 0xc30) pwrite64(r0, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) pwrite64(r0, &(0x7f0000000300)='PRIVHEAD', 0x8, 0x1e8000) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) kernel console output (not intermixed with test programs): 1.597854][T12634] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 991.605841][T12634] RBP: 00007f20d9a35888 R08: 0000000000000000 R09: 0000000000000000 [ 991.613829][T12634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 991.621809][T12634] R13: 00007f20d9c26038 R14: 00007f20d9c25fa0 R15: 00007fffb85a5118 [ 991.629817][T12634] [ 992.090957][T12634] debugfs: out of free dentries, can not create file 'remote_tlb_flush' [ 992.115689][T12634] FAULT_INJECTION: forcing a failure. [ 992.115689][T12634] name failslab, interval 1, probability 5, space 0, times 9988 [ 992.159272][T12634] CPU: 0 PID: 12634 Comm: syz.1.1785 Not tainted syzkaller #0 [ 992.166780][T12634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 992.176857][T12634] Call Trace: [ 992.180151][T12634] [ 992.183100][T12634] dump_stack_lvl+0x18c/0x250 [ 992.187808][T12634] ? show_regs_print_info+0x20/0x20 [ 992.193028][T12634] ? load_image+0x420/0x420 [ 992.197560][T12634] ? __might_sleep+0xe0/0xe0 [ 992.202174][T12634] ? __lock_acquire+0x7eb0/0x7eb0 [ 992.207237][T12634] should_fail_ex+0x394/0x4c0 [ 992.211947][T12634] should_failslab+0x9/0x20 [ 992.216477][T12634] slab_pre_alloc_hook+0x59/0x300 [ 992.221525][T12634] kmem_cache_alloc+0x5a/0x2c0 [ 992.226311][T12634] ? security_inode_alloc+0x34/0x110 [ 992.231622][T12634] security_inode_alloc+0x34/0x110 [ 992.236761][T12634] inode_init_always+0x914/0xc90 [ 992.241726][T12634] new_inode_pseudo+0x95/0x1d0 [ 992.246512][T12634] new_inode+0x22/0x1d0 [ 992.250682][T12634] ? start_creating+0x1f5/0x310 [ 992.255560][T12634] __debugfs_create_file+0x147/0x500 [ 992.260874][T12634] kvm_create_vm_debugfs+0x480/0x980 [ 992.266191][T12634] ? hardware_enable_all+0x210/0x210 [ 992.271504][T12634] ? __raw_spin_lock_init+0x45/0x100 [ 992.276814][T12634] kvm_dev_ioctl+0x1426/0x1810 [ 992.281609][T12634] ? kvm_resume+0x1e0/0x1e0 [ 992.286141][T12634] ? bpf_lsm_file_ioctl+0x9/0x10 [ 992.291100][T12634] ? security_file_ioctl+0x80/0xa0 [ 992.296279][T12634] ? kvm_resume+0x1e0/0x1e0 [ 992.300811][T12634] __se_sys_ioctl+0xfd/0x170 [ 992.305430][T12634] do_syscall_64+0x55/0xb0 [ 992.309858][T12634] ? clear_bhb_loop+0x40/0x90 [ 992.314550][T12634] ? clear_bhb_loop+0x40/0x90 [ 992.319243][T12634] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 992.325157][T12634] RIP: 0033:0x7f20d999e1d9 [ 992.329585][T12634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 992.349216][T12634] RSP: 002b:00007f20da8d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 992.357654][T12634] RAX: ffffffffffffffda RBX: 00007f20d9c25fa0 RCX: 00007f20d999e1d9 [ 992.365646][T12634] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 992.373635][T12634] RBP: 00007f20d9a35888 R08: 0000000000000000 R09: 0000000000000000 [ 992.381624][T12634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 992.389609][T12634] R13: 00007f20d9c26038 R14: 00007f20d9c25fa0 R15: 00007fffb85a5118 [ 992.397610][T12634] [ 992.597314][T12634] debugfs: out of free dentries, can not create file 'mmu_pde_zapped' [ 992.605688][T12634] FAULT_INJECTION: forcing a failure. [ 992.605688][T12634] name failslab, interval 1, probability 5, space 0, times 9987 [ 992.618660][T12634] CPU: 1 PID: 12634 Comm: syz.1.1785 Not tainted syzkaller #0 [ 992.626142][T12634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 992.636218][T12634] Call Trace: [ 992.639502][T12634] [ 992.642436][T12634] dump_stack_lvl+0x18c/0x250 [ 992.647127][T12634] ? show_regs_print_info+0x20/0x20 [ 992.652369][T12634] ? load_image+0x420/0x420 [ 992.656873][T12634] ? __lock_acquire+0x7eb0/0x7eb0 [ 992.661904][T12634] should_fail_ex+0x394/0x4c0 [ 992.666590][T12634] should_failslab+0x9/0x20 [ 992.671097][T12634] slab_pre_alloc_hook+0x59/0x300 [ 992.676129][T12634] kmem_cache_alloc_lru+0x4d/0x2b0 [ 992.681247][T12634] ? new_inode_pseudo+0x82/0x1d0 [ 992.686195][T12634] ? lookup_one_common+0x450/0x450 [ 992.691308][T12634] new_inode_pseudo+0x82/0x1d0 [ 992.696073][T12634] new_inode+0x22/0x1d0 [ 992.700231][T12634] ? start_creating+0x1f5/0x310 [ 992.705090][T12634] __debugfs_create_file+0x147/0x500 [ 992.710382][T12634] kvm_create_vm_debugfs+0x480/0x980 [ 992.715678][T12634] ? hardware_enable_all+0x210/0x210 [ 992.720965][T12634] ? __raw_spin_lock_init+0x45/0x100 [ 992.726264][T12634] kvm_dev_ioctl+0x1426/0x1810 [ 992.731040][T12634] ? kvm_resume+0x1e0/0x1e0 [ 992.735548][T12634] ? bpf_lsm_file_ioctl+0x9/0x10 [ 992.740484][T12634] ? security_file_ioctl+0x80/0xa0 [ 992.745597][T12634] ? kvm_resume+0x1e0/0x1e0 [ 992.750103][T12634] __se_sys_ioctl+0xfd/0x170 [ 992.754702][T12634] do_syscall_64+0x55/0xb0 [ 992.759114][T12634] ? clear_bhb_loop+0x40/0x90 [ 992.763791][T12634] ? clear_bhb_loop+0x40/0x90 [ 992.768465][T12634] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 992.774363][T12634] RIP: 0033:0x7f20d999e1d9 [ 992.778780][T12634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 992.798383][T12634] RSP: 002b:00007f20da8d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 992.806798][T12634] RAX: ffffffffffffffda RBX: 00007f20d9c25fa0 RCX: 00007f20d999e1d9 [ 992.814771][T12634] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 992.822739][T12634] RBP: 00007f20d9a35888 R08: 0000000000000000 R09: 0000000000000000 [ 992.830705][T12634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 992.838669][T12634] R13: 00007f20d9c26038 R14: 00007f20d9c25fa0 R15: 00007fffb85a5118 [ 992.846652][T12634] [ 992.862414][T12634] debugfs: out of free dentries, can not create file 'mmu_flooded' [ 992.874906][T12634] FAULT_INJECTION: forcing a failure. [ 992.874906][T12634] name failslab, interval 1, probability 5, space 0, times 9986 [ 992.888352][T12634] CPU: 1 PID: 12634 Comm: syz.1.1785 Not tainted syzkaller #0 [ 992.895840][T12634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 992.905908][T12634] Call Trace: [ 992.909202][T12634] [ 992.912134][T12634] dump_stack_lvl+0x18c/0x250 [ 992.916803][T12634] ? show_regs_print_info+0x20/0x20 [ 992.921982][T12634] ? load_image+0x420/0x420 [ 992.926470][T12634] ? __lock_acquire+0x7eb0/0x7eb0 [ 992.931480][T12634] should_fail_ex+0x394/0x4c0 [ 992.936149][T12634] should_failslab+0x9/0x20 [ 992.940645][T12634] slab_pre_alloc_hook+0x59/0x300 [ 992.945670][T12634] kmem_cache_alloc_lru+0x4d/0x2b0 [ 992.950793][T12634] ? new_inode_pseudo+0x82/0x1d0 [ 992.955718][T12634] ? lookup_one_common+0x450/0x450 [ 992.960812][T12634] new_inode_pseudo+0x82/0x1d0 [ 992.965561][T12634] new_inode+0x22/0x1d0 [ 992.969715][T12634] ? start_creating+0x1f5/0x310 [ 992.974574][T12634] __debugfs_create_file+0x147/0x500 [ 992.979847][T12634] kvm_create_vm_debugfs+0x6de/0x980 [ 992.985133][T12634] ? hardware_enable_all+0x210/0x210 [ 992.990413][T12634] ? __raw_spin_lock_init+0x45/0x100 [ 992.995703][T12634] kvm_dev_ioctl+0x1426/0x1810 [ 993.000482][T12634] ? kvm_resume+0x1e0/0x1e0 [ 993.004990][T12634] ? bpf_lsm_file_ioctl+0x9/0x10 [ 993.009937][T12634] ? security_file_ioctl+0x80/0xa0 [ 993.015059][T12634] ? kvm_resume+0x1e0/0x1e0 [ 993.019563][T12634] __se_sys_ioctl+0xfd/0x170 [ 993.024158][T12634] do_syscall_64+0x55/0xb0 [ 993.028572][T12634] ? clear_bhb_loop+0x40/0x90 [ 993.033241][T12634] ? clear_bhb_loop+0x40/0x90 [ 993.037910][T12634] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 993.043806][T12634] RIP: 0033:0x7f20d999e1d9 [ 993.048220][T12634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 993.067819][T12634] RSP: 002b:00007f20da8d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 993.076232][T12634] RAX: ffffffffffffffda RBX: 00007f20d9c25fa0 RCX: 00007f20d999e1d9 [ 993.084213][T12634] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 993.092180][T12634] RBP: 00007f20d9a35888 R08: 0000000000000000 R09: 0000000000000000 [ 993.100152][T12634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 993.108125][T12634] R13: 00007f20d9c26038 R14: 00007f20d9c25fa0 R15: 00007fffb85a5118 [ 993.116123][T12634] [ 993.262110][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.268530][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.299859][T12634] debugfs: out of free dentries, can not create file 'halt_wakeup' [ 993.397549][T12634] FAULT_INJECTION: forcing a failure. [ 993.397549][T12634] name failslab, interval 1, probability 5, space 0, times 9985 [ 993.506053][T12634] CPU: 1 PID: 12634 Comm: syz.1.1785 Not tainted syzkaller #0 [ 993.513569][T12634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 993.523638][T12634] Call Trace: [ 993.526925][T12634] [ 993.529865][T12634] dump_stack_lvl+0x18c/0x250 [ 993.534561][T12634] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 993.540206][T12634] ? show_regs_print_info+0x20/0x20 [ 993.545412][T12634] ? load_image+0x420/0x420 [ 993.549940][T12634] ? kasan_check_range+0x19/0x290 [ 993.554989][T12634] should_fail_ex+0x394/0x4c0 [ 993.559688][T12634] should_failslab+0x9/0x20 [ 993.564226][T12634] slab_pre_alloc_hook+0x59/0x300 [ 993.569280][T12634] kmem_cache_alloc+0x5a/0x2c0 [ 993.574064][T12634] ? security_inode_alloc+0x34/0x110 [ 993.579377][T12634] security_inode_alloc+0x34/0x110 [ 993.584523][T12634] inode_init_always+0x914/0xc90 [ 993.589493][T12634] new_inode_pseudo+0x95/0x1d0 [ 993.594274][T12634] new_inode+0x22/0x1d0 [ 993.598449][T12634] ? start_creating+0x1f5/0x310 [ 993.603324][T12634] __debugfs_create_file+0x147/0x500 [ 993.608632][T12634] kvm_create_vm_debugfs+0x6de/0x980 [ 993.613946][T12634] ? hardware_enable_all+0x210/0x210 [ 993.619249][T12634] ? __raw_spin_lock_init+0x45/0x100 [ 993.624560][T12634] kvm_dev_ioctl+0x1426/0x1810 [ 993.629364][T12634] ? kvm_resume+0x1e0/0x1e0 [ 993.633893][T12634] ? bpf_lsm_file_ioctl+0x9/0x10 [ 993.638842][T12634] ? security_file_ioctl+0x80/0xa0 [ 993.644001][T12634] ? kvm_resume+0x1e0/0x1e0 [ 993.648520][T12634] __se_sys_ioctl+0xfd/0x170 [ 993.653137][T12634] do_syscall_64+0x55/0xb0 [ 993.657564][T12634] ? clear_bhb_loop+0x40/0x90 [ 993.662260][T12634] ? clear_bhb_loop+0x40/0x90 [ 993.666953][T12634] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 993.672866][T12634] RIP: 0033:0x7f20d999e1d9 [ 993.677295][T12634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 993.696915][T12634] RSP: 002b:00007f20da8d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 993.705345][T12634] RAX: ffffffffffffffda RBX: 00007f20d9c25fa0 RCX: 00007f20d999e1d9 [ 993.713337][T12634] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 993.721327][T12634] RBP: 00007f20d9a35888 R08: 0000000000000000 R09: 0000000000000000 [ 993.729315][T12634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 993.737292][T12634] R13: 00007f20d9c26038 R14: 00007f20d9c25fa0 R15: 00007fffb85a5118 [ 993.745262][T12634] [ 993.891810][T12634] debugfs: out of free dentries, can not create file 'halt_poll_success_hist' [ 993.904989][T12634] FAULT_INJECTION: forcing a failure. [ 993.904989][T12634] name failslab, interval 1, probability 5, space 0, times 9984 [ 993.920756][T12634] CPU: 0 PID: 12634 Comm: syz.1.1785 Not tainted syzkaller #0 [ 993.928250][T12634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 993.938326][T12634] Call Trace: [ 993.941621][T12634] [ 993.944565][T12634] dump_stack_lvl+0x18c/0x250 [ 993.949268][T12634] ? show_regs_print_info+0x20/0x20 [ 993.954493][T12634] ? load_image+0x420/0x420 [ 993.959029][T12634] ? __might_sleep+0xe0/0xe0 [ 993.963645][T12634] ? __lock_acquire+0x7eb0/0x7eb0 [ 993.968674][T12634] ? __debugfs_create_file+0x45d/0x500 [ 993.974141][T12634] should_fail_ex+0x394/0x4c0 [ 993.978823][T12634] should_failslab+0x9/0x20 [ 993.983329][T12634] slab_pre_alloc_hook+0x59/0x300 [ 993.988348][T12634] ? kvm_create_vm_debugfs+0x5af/0x980 [ 993.993806][T12634] __kmem_cache_alloc_node+0x53/0x250 [ 993.999181][T12634] ? kvm_create_vm_debugfs+0x5af/0x980 [ 994.004635][T12634] kmalloc_trace+0x2a/0xe0 [ 994.009061][T12634] kvm_create_vm_debugfs+0x5af/0x980 [ 994.014353][T12634] ? hardware_enable_all+0x210/0x210 [ 994.019638][T12634] ? __raw_spin_lock_init+0x45/0x100 [ 994.024926][T12634] kvm_dev_ioctl+0x1426/0x1810 [ 994.029693][T12634] ? kvm_resume+0x1e0/0x1e0 [ 994.034195][T12634] ? bpf_lsm_file_ioctl+0x9/0x10 [ 994.039124][T12634] ? security_file_ioctl+0x80/0xa0 [ 994.044235][T12634] ? kvm_resume+0x1e0/0x1e0 [ 994.048738][T12634] __se_sys_ioctl+0xfd/0x170 [ 994.053332][T12634] do_syscall_64+0x55/0xb0 [ 994.057742][T12634] ? clear_bhb_loop+0x40/0x90 [ 994.062411][T12634] ? clear_bhb_loop+0x40/0x90 [ 994.067084][T12634] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 994.072980][T12634] RIP: 0033:0x7f20d999e1d9 [ 994.077393][T12634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 994.096993][T12634] RSP: 002b:00007f20da8d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 994.105407][T12634] RAX: ffffffffffffffda RBX: 00007f20d9c25fa0 RCX: 00007f20d999e1d9 [ 994.113374][T12634] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 994.121338][T12634] RBP: 00007f20d9a35888 R08: 0000000000000000 R09: 0000000000000000 [ 994.129302][T12634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 994.137266][T12634] R13: 00007f20d9c26038 R14: 00007f20d9c25fa0 R15: 00007fffb85a5118 [ 994.145243][T12634] [ 994.285991][ T5139] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 994.408934][ T5139] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 994.506469][ T5139] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 994.589604][ T5139] loop0: [ 997.502229][ T51] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 997.678348][T12674] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 1000.346835][ T5139] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1000.379917][ T5139] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1000.409436][ T5139] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1000.447095][ T5139] loop0: [ 1000.545700][T12694] FAULT_INJECTION: forcing a failure. [ 1000.545700][T12694] name failslab, interval 1, probability 5, space 0, times 9983 [ 1000.564810][T12694] CPU: 0 PID: 12694 Comm: syz.3.1799 Not tainted syzkaller #0 [ 1000.572314][T12694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1000.582390][T12694] Call Trace: [ 1000.585687][T12694] [ 1000.588636][T12694] dump_stack_lvl+0x18c/0x250 [ 1000.593348][T12694] ? show_regs_print_info+0x20/0x20 [ 1000.598567][T12694] ? load_image+0x420/0x420 [ 1000.603106][T12694] ? __lock_acquire+0x7eb0/0x7eb0 [ 1000.608172][T12694] should_fail_ex+0x394/0x4c0 [ 1000.612885][T12694] should_failslab+0x9/0x20 [ 1000.617420][T12694] slab_pre_alloc_hook+0x59/0x300 [ 1000.622468][T12694] kmem_cache_alloc_node+0x5e/0x310 [ 1000.627699][T12694] ? alloc_vmap_area+0x6f7/0x1e50 [ 1000.632765][T12694] alloc_vmap_area+0x6f7/0x1e50 [ 1000.637645][T12694] ? vm_map_ram+0xcf0/0xcf0 [ 1000.642151][T12694] ? rcu_is_watching+0x15/0xb0 [ 1000.646923][T12694] __get_vm_area_node+0x162/0x370 [ 1000.651956][T12694] __vmalloc_node_range+0x36f/0x1320 [ 1000.657241][T12694] ? kvm_dev_ioctl+0x208/0x1810 [ 1000.662108][T12694] ? snprintf+0xe9/0x140 [ 1000.666359][T12694] ? free_vm_area+0x50/0x50 [ 1000.670863][T12694] ? vscnprintf+0x80/0x80 [ 1000.675193][T12694] ? alloc_fd+0x590/0x640 [ 1000.679522][T12694] ? kvm_dev_ioctl+0x208/0x1810 [ 1000.684373][T12694] __vmalloc+0x7a/0x90 [ 1000.688442][T12694] ? kvm_dev_ioctl+0x208/0x1810 [ 1000.693292][T12694] kvm_dev_ioctl+0x208/0x1810 [ 1000.697970][T12694] ? __fget_files+0x28/0x460 [ 1000.702566][T12694] ? kvm_resume+0x1e0/0x1e0 [ 1000.707070][T12694] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1000.712005][T12694] ? security_file_ioctl+0x80/0xa0 [ 1000.717116][T12694] ? kvm_resume+0x1e0/0x1e0 [ 1000.721615][T12694] __se_sys_ioctl+0xfd/0x170 [ 1000.726211][T12694] do_syscall_64+0x55/0xb0 [ 1000.730632][T12694] ? clear_bhb_loop+0x40/0x90 [ 1000.735305][T12694] ? clear_bhb_loop+0x40/0x90 [ 1000.739974][T12694] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1000.745872][T12694] RIP: 0033:0x7f7a0c19e1d9 [ 1000.750291][T12694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1000.769900][T12694] RSP: 002b:00007f7a0d053028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1000.778317][T12694] RAX: ffffffffffffffda RBX: 00007f7a0c425fa0 RCX: 00007f7a0c19e1d9 [ 1000.786286][T12694] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 1000.794254][T12694] RBP: 00007f7a0c235888 R08: 0000000000000000 R09: 0000000000000000 [ 1000.802223][T12694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1000.810190][T12694] R13: 00007f7a0c426038 R14: 00007f7a0c425fa0 R15: 00007fffd498aaf8 [ 1000.818171][T12694] [ 1000.834894][T12694] FAULT_INJECTION: forcing a failure. [ 1000.834894][T12694] name failslab, interval 1, probability 5, space 0, times 9982 [ 1000.850667][T12694] CPU: 1 PID: 12694 Comm: syz.3.1799 Not tainted syzkaller #0 [ 1000.858167][T12694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1000.868244][T12694] Call Trace: [ 1000.871536][T12694] [ 1000.874482][T12694] dump_stack_lvl+0x18c/0x250 [ 1000.879189][T12694] ? show_regs_print_info+0x20/0x20 [ 1000.884407][T12694] ? load_image+0x420/0x420 [ 1000.888946][T12694] ? __might_sleep+0xe0/0xe0 [ 1000.893561][T12694] ? __lock_acquire+0x7eb0/0x7eb0 [ 1000.898588][T12694] ? __debugfs_create_file+0x45d/0x500 [ 1000.904053][T12694] should_fail_ex+0x394/0x4c0 [ 1000.908736][T12694] should_failslab+0x9/0x20 [ 1000.913246][T12694] slab_pre_alloc_hook+0x59/0x300 [ 1000.918295][T12694] ? kvm_create_vm_debugfs+0x32e/0x980 [ 1000.923760][T12694] __kmem_cache_alloc_node+0x53/0x250 [ 1000.929138][T12694] ? kvm_create_vm_debugfs+0x32e/0x980 [ 1000.934604][T12694] kmalloc_trace+0x2a/0xe0 [ 1000.939020][T12694] kvm_create_vm_debugfs+0x32e/0x980 [ 1000.944312][T12694] ? hardware_enable_all+0x210/0x210 [ 1000.949860][T12694] ? __raw_spin_lock_init+0x45/0x100 [ 1000.955154][T12694] kvm_dev_ioctl+0x1426/0x1810 [ 1000.959926][T12694] ? kvm_resume+0x1e0/0x1e0 [ 1000.964432][T12694] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1000.969369][T12694] ? security_file_ioctl+0x80/0xa0 [ 1000.974486][T12694] ? kvm_resume+0x1e0/0x1e0 [ 1000.978987][T12694] __se_sys_ioctl+0xfd/0x170 [ 1000.983580][T12694] do_syscall_64+0x55/0xb0 [ 1000.987997][T12694] ? clear_bhb_loop+0x40/0x90 [ 1000.992676][T12694] ? clear_bhb_loop+0x40/0x90 [ 1000.997359][T12694] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1001.003256][T12694] RIP: 0033:0x7f7a0c19e1d9 [ 1001.007670][T12694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1001.027270][T12694] RSP: 002b:00007f7a0d053028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1001.035678][T12694] RAX: ffffffffffffffda RBX: 00007f7a0c425fa0 RCX: 00007f7a0c19e1d9 [ 1001.043646][T12694] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 1001.051612][T12694] RBP: 00007f7a0c235888 R08: 0000000000000000 R09: 0000000000000000 [ 1001.059580][T12694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1001.067544][T12694] R13: 00007f7a0c426038 R14: 00007f7a0c425fa0 R15: 00007fffd498aaf8 [ 1001.075529][T12694] [ 1003.718032][ T51] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 1005.443028][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 1005.771834][ T5139] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1005.786090][ T5139] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1005.796042][ T5139] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1005.802999][ T5139] loop0: [ 1007.202362][T12750] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 1008.066389][ T28] audit: type=1800 audit(1791864885.436:16): pid=12753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1804" name="c_chmask" dev="configfs" ino=29792 res=0 errno=0 [ 1010.080080][T12768] loop2: detected capacity change from 0 to 2048 [ 1010.268423][T12768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1010.351864][T12768] ext4 filesystem being mounted at /438/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1010.433766][ T5139] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1010.517306][ T5139] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1010.584459][ T5139] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1010.591178][ T5139] loop0: [ 1010.733120][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1011.113090][ T51] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 1012.218781][T12782] FAULT_INJECTION: forcing a failure. [ 1012.218781][T12782] name failslab, interval 1, probability 5, space 0, times 9981 [ 1012.238683][T12782] CPU: 1 PID: 12782 Comm: syz.1.1812 Not tainted syzkaller #0 [ 1012.246194][T12782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1012.256267][T12782] Call Trace: [ 1012.259560][T12782] [ 1012.262512][T12782] dump_stack_lvl+0x18c/0x250 [ 1012.267217][T12782] ? show_regs_print_info+0x20/0x20 [ 1012.272419][T12782] ? load_image+0x420/0x420 [ 1012.276927][T12782] ? __might_sleep+0xe0/0xe0 [ 1012.281525][T12782] ? __lock_acquire+0x7eb0/0x7eb0 [ 1012.286553][T12782] ? __debugfs_create_file+0x45d/0x500 [ 1012.292021][T12782] should_fail_ex+0x394/0x4c0 [ 1012.296705][T12782] should_failslab+0x9/0x20 [ 1012.301215][T12782] slab_pre_alloc_hook+0x59/0x300 [ 1012.306259][T12782] ? kvm_create_vm_debugfs+0x32e/0x980 [ 1012.311719][T12782] __kmem_cache_alloc_node+0x53/0x250 [ 1012.317094][T12782] ? kvm_create_vm_debugfs+0x32e/0x980 [ 1012.322550][T12782] kmalloc_trace+0x2a/0xe0 [ 1012.326980][T12782] kvm_create_vm_debugfs+0x32e/0x980 [ 1012.332271][T12782] ? hardware_enable_all+0x210/0x210 [ 1012.337556][T12782] ? __raw_spin_lock_init+0x45/0x100 [ 1012.342851][T12782] kvm_dev_ioctl+0x1426/0x1810 [ 1012.347622][T12782] ? kvm_resume+0x1e0/0x1e0 [ 1012.352186][T12782] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1012.357117][T12782] ? security_file_ioctl+0x80/0xa0 [ 1012.362234][T12782] ? kvm_resume+0x1e0/0x1e0 [ 1012.366741][T12782] __se_sys_ioctl+0xfd/0x170 [ 1012.371335][T12782] do_syscall_64+0x55/0xb0 [ 1012.375744][T12782] ? clear_bhb_loop+0x40/0x90 [ 1012.380416][T12782] ? clear_bhb_loop+0x40/0x90 [ 1012.385093][T12782] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1012.390987][T12782] RIP: 0033:0x7f20d999e1d9 [ 1012.395402][T12782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1012.415007][T12782] RSP: 002b:00007f20da8d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1012.423429][T12782] RAX: ffffffffffffffda RBX: 00007f20d9c25fa0 RCX: 00007f20d999e1d9 [ 1012.431398][T12782] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 1012.441290][T12782] RBP: 00007f20d9a35888 R08: 0000000000000000 R09: 0000000000000000 [ 1012.449269][T12782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1012.457239][T12782] R13: 00007f20d9c26038 R14: 00007f20d9c25fa0 R15: 00007fffb85a5118 [ 1012.465234][T12782] [ 1014.576979][T12782] FAULT_INJECTION: forcing a failure. [ 1014.576979][T12782] name failslab, interval 1, probability 5, space 0, times 9980 [ 1014.590471][T12782] CPU: 1 PID: 12782 Comm: syz.1.1812 Not tainted syzkaller #0 [ 1014.597937][T12782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1014.607984][T12782] Call Trace: [ 1014.611257][T12782] [ 1014.614185][T12782] dump_stack_lvl+0x18c/0x250 [ 1014.618887][T12782] ? show_regs_print_info+0x20/0x20 [ 1014.624097][T12782] ? load_image+0x420/0x420 [ 1014.628613][T12782] should_fail_ex+0x394/0x4c0 [ 1014.633298][T12782] ? __sigqueue_alloc+0x32/0x520 [ 1014.638232][T12782] should_failslab+0x9/0x20 [ 1014.642737][T12782] slab_pre_alloc_hook+0x59/0x300 [ 1014.647754][T12782] ? __lock_acquire+0x7eb0/0x7eb0 [ 1014.652776][T12782] ? __sigqueue_alloc+0x32/0x520 [ 1014.657711][T12782] kmem_cache_alloc+0x5a/0x2c0 [ 1014.662476][T12782] ? __sigqueue_alloc+0x40c/0x520 [ 1014.667497][T12782] ? __sigqueue_alloc+0x32/0x520 [ 1014.672428][T12782] __sigqueue_alloc+0x40c/0x520 [ 1014.677276][T12782] __send_signal_locked+0x22f/0xe00 [ 1014.682479][T12782] do_notify_parent+0xb26/0xd10 [ 1014.687329][T12782] ? trace_signal_generate+0x1c0/0x1c0 [ 1014.692789][T12782] ? __lock_acquire+0x7eb0/0x7eb0 [ 1014.697825][T12782] release_task+0x1227/0x1690 [ 1014.702508][T12782] ? do_exit+0x1888/0x2530 [ 1014.706921][T12782] ? delayed_put_task_struct+0x2a0/0x2a0 [ 1014.712552][T12782] ? _raw_write_lock_irq+0xbb/0xf0 [ 1014.717665][T12782] ? _raw_write_lock_irqsave+0x100/0x100 [ 1014.723302][T12782] ? _raw_write_unlock_irq+0x23/0x50 [ 1014.728586][T12782] ? lockdep_hardirqs_on+0x98/0x150 [ 1014.733783][T12782] do_exit+0x1888/0x2530 [ 1014.738035][T12782] ? put_task_struct+0xc0/0xc0 [ 1014.742802][T12782] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1014.748780][T12782] ? get_signal+0x100e/0x1390 [ 1014.753451][T12782] ? lock_chain_count+0x20/0x20 [ 1014.758297][T12782] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1014.763321][T12782] do_group_exit+0x22d/0x2f0 [ 1014.767903][T12782] ? lockdep_hardirqs_on+0x98/0x150 [ 1014.773101][T12782] get_signal+0x12a6/0x1390 [ 1014.777613][T12782] arch_do_signal_or_restart+0xc2/0x7b0 [ 1014.783204][T12782] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1014.789089][T12782] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 1014.795161][T12782] ? get_sigframe_size+0x20/0x20 [ 1014.800117][T12782] ? exit_to_user_mode_loop+0x3b/0x110 [ 1014.805578][T12782] exit_to_user_mode_loop+0x70/0x110 [ 1014.810864][T12782] exit_to_user_mode_prepare+0xee/0x180 [ 1014.816417][T12782] syscall_exit_to_user_mode+0x1a/0x50 [ 1014.821885][T12782] do_syscall_64+0x61/0xb0 [ 1014.826295][T12782] ? clear_bhb_loop+0x40/0x90 [ 1014.830970][T12782] ? clear_bhb_loop+0x40/0x90 [ 1014.835641][T12782] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1014.841541][T12782] RIP: 0033:0x7f20d999e1d9 [ 1014.845961][T12782] Code: Unable to access opcode bytes at 0x7f20d999e1af. [ 1014.852966][T12782] RSP: 002b:00007f20da8d70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1014.861392][T12782] RAX: fffffffffffffe00 RBX: 00007f20d9c25fa8 RCX: 00007f20d999e1d9 [ 1014.869375][T12782] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f20d9c25fa8 [ 1014.877354][T12782] RBP: 00007f20d9c25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1014.885334][T12782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1014.893311][T12782] R13: 00007f20d9c26038 R14: 00007fffb85a5030 R15: 00007fffb85a5118 [ 1014.901295][T12782] [ 1016.167720][ T5139] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1016.201707][ T5139] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1016.226098][ T5139] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1016.239915][ T5139] loop0: [ 1016.369427][T12812] loop3: detected capacity change from 0 to 2048 [ 1016.439813][T12812] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1016.493877][T12812] ext4 filesystem being mounted at /486/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1016.593070][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1018.022475][T12831] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 1018.253839][ T51] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 1018.969495][ T28] audit: type=1800 audit(1791864896.176:17): pid=12839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1825" name="c_chmask" dev="configfs" ino=29506 res=0 errno=0 [ 1019.176488][T12845] FAULT_INJECTION: forcing a failure. [ 1019.176488][T12845] name failslab, interval 1, probability 5, space 0, times 9979 [ 1019.851438][T12845] CPU: 1 PID: 12845 Comm: syz.4.1835 Not tainted syzkaller #0 [ 1019.858950][T12845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1019.869018][T12845] Call Trace: [ 1019.872324][T12845] [ 1019.875265][T12845] dump_stack_lvl+0x18c/0x250 [ 1019.879938][T12845] ? show_regs_print_info+0x20/0x20 [ 1019.885130][T12845] ? load_image+0x420/0x420 [ 1019.889624][T12845] ? __might_sleep+0xe0/0xe0 [ 1019.894230][T12845] ? __lock_acquire+0x7eb0/0x7eb0 [ 1019.899254][T12845] should_fail_ex+0x394/0x4c0 [ 1019.903950][T12845] should_failslab+0x9/0x20 [ 1019.908527][T12845] slab_pre_alloc_hook+0x59/0x300 [ 1019.913585][T12845] kmem_cache_alloc+0x5a/0x2c0 [ 1019.918392][T12845] ? ptlock_alloc+0x20/0x70 [ 1019.922913][T12845] ptlock_alloc+0x20/0x70 [ 1019.927236][T12845] pte_alloc_one+0xcc/0x540 [ 1019.931732][T12845] ? pfn_modify_allowed+0x560/0x560 [ 1019.936971][T12845] ? verify_lock_unused+0x140/0x140 [ 1019.942184][T12845] ? mark_lock+0x94/0x320 [ 1019.946527][T12845] ? khugepaged_enter_vma+0x106/0x120 [ 1019.951906][T12845] do_huge_pmd_anonymous_page+0x86f/0x18b0 [ 1019.957746][T12845] ? vma_thp_gfp_mask+0x160/0x160 [ 1019.962781][T12845] ? hugepage_vma_check+0x47d/0x560 [ 1019.967987][T12845] handle_mm_fault+0x1184/0x4a50 [ 1019.972928][T12845] ? handle_mm_fault+0xe6/0x4a50 [ 1019.977874][T12845] ? numa_migrate_prep+0x350/0x350 [ 1019.983000][T12845] __get_user_pages+0x604/0x1580 [ 1019.987968][T12845] ? populate_vma_page_range+0x380/0x380 [ 1019.993609][T12845] faultin_page_range+0x28c/0x8a0 [ 1019.998646][T12845] ? blk_start_plug+0x6e/0x1a0 [ 1020.003413][T12845] do_madvise+0xed9/0x3790 [ 1020.007849][T12845] ? madvise_set_anon_name+0x440/0x440 [ 1020.013309][T12845] ? schedule+0xc7/0x170 [ 1020.017554][T12845] ? futex_wait_queue+0x27/0x1b0 [ 1020.022491][T12845] ? futex_wait_queue+0x138/0x1b0 [ 1020.027514][T12845] ? futex_unqueue+0xcb/0xf0 [ 1020.032100][T12845] ? futex_wait+0x4a7/0x5c0 [ 1020.036610][T12845] ? futex_wait_setup+0x270/0x270 [ 1020.041669][T12845] ? file_end_write+0x159/0x250 [ 1020.046538][T12845] ? vfs_write+0x5de/0x9a0 [ 1020.050961][T12845] ? do_futex+0x2ff/0x3e0 [ 1020.055294][T12845] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1020.061202][T12845] ? lock_chain_count+0x20/0x20 [ 1020.066065][T12845] __x64_sys_madvise+0xa6/0xc0 [ 1020.070844][T12845] do_syscall_64+0x55/0xb0 [ 1020.075257][T12845] ? clear_bhb_loop+0x40/0x90 [ 1020.079930][T12845] ? clear_bhb_loop+0x40/0x90 [ 1020.084630][T12845] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1020.090527][T12845] RIP: 0033:0x7ff48419e1d9 [ 1020.094943][T12845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1020.114547][T12845] RSP: 002b:00007ff4850bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1020.122962][T12845] RAX: ffffffffffffffda RBX: 00007ff484425fa0 RCX: 00007ff48419e1d9 [ 1020.130933][T12845] RDX: 0000000000000016 RSI: 0000000000800000 RDI: 0000200000800000 [ 1020.138902][T12845] RBP: 00007ff484235888 R08: 0000000000000000 R09: 0000000000000000 [ 1020.146868][T12845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1020.154838][T12845] R13: 00007ff484426038 R14: 00007ff484425fa0 R15: 00007ffcc9d28b48 [ 1020.162820][T12845] [ 1020.227155][T12845] FAULT_INJECTION: forcing a failure. [ 1020.227155][T12845] name failslab, interval 1, probability 5, space 0, times 9978 [ 1020.245839][ T5139] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1020.265612][ T5139] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1020.314889][T12845] CPU: 1 PID: 12845 Comm: syz.4.1835 Not tainted syzkaller #0 [ 1020.319382][ T5139] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1020.322380][T12845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1020.322394][T12845] Call Trace: [ 1020.322403][T12845] [ 1020.322411][T12845] dump_stack_lvl+0x18c/0x250 [ 1020.322441][T12845] ? show_regs_print_info+0x20/0x20 [ 1020.322460][T12845] ? load_image+0x420/0x420 [ 1020.322487][T12845] ? __might_sleep+0xe0/0xe0 [ 1020.322512][T12845] ? __lock_acquire+0x7eb0/0x7eb0 [ 1020.322542][T12845] should_fail_ex+0x394/0x4c0 [ 1020.322574][T12845] should_failslab+0x9/0x20 [ 1020.322610][T12845] slab_pre_alloc_hook+0x59/0x300 [ 1020.322632][T12845] ? kvm_create_vm_debugfs+0x32e/0x980 [ 1020.332781][ T5139] loop0: [ 1020.339269][T12845] __kmem_cache_alloc_node+0x53/0x250 [ 1020.397300][T12845] ? kvm_create_vm_debugfs+0x32e/0x980 [ 1020.402768][T12845] kmalloc_trace+0x2a/0xe0 [ 1020.407187][T12845] kvm_create_vm_debugfs+0x32e/0x980 [ 1020.412481][T12845] ? hardware_enable_all+0x210/0x210 [ 1020.417773][T12845] ? __raw_spin_lock_init+0x45/0x100 [ 1020.423064][T12845] kvm_dev_ioctl+0x1426/0x1810 [ 1020.427834][T12845] ? kvm_resume+0x1e0/0x1e0 [ 1020.432341][T12845] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1020.437277][T12845] ? security_file_ioctl+0x80/0xa0 [ 1020.442406][T12845] ? kvm_resume+0x1e0/0x1e0 [ 1020.446918][T12845] __se_sys_ioctl+0xfd/0x170 [ 1020.451518][T12845] do_syscall_64+0x55/0xb0 [ 1020.455947][T12845] ? clear_bhb_loop+0x40/0x90 [ 1020.460628][T12845] ? clear_bhb_loop+0x40/0x90 [ 1020.465316][T12845] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1020.471222][T12845] RIP: 0033:0x7ff48419e1d9 [ 1020.475634][T12845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1020.495235][T12845] RSP: 002b:00007ff4850bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1020.503645][T12845] RAX: ffffffffffffffda RBX: 00007ff484425fa0 RCX: 00007ff48419e1d9 [ 1020.511617][T12845] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 1020.519584][T12845] RBP: 00007ff484235888 R08: 0000000000000000 R09: 0000000000000000 [ 1020.527553][T12845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1020.535520][T12845] R13: 00007ff484426038 R14: 00007ff484425fa0 R15: 00007ffcc9d28b48 [ 1020.543500][T12845] [ 1020.725386][T12852] loop3: detected capacity change from 0 to 2048 [ 1020.833695][T12852] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1021.026548][T12852] ext4 filesystem being mounted at /491/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1021.269133][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1023.886312][T12886] FAULT_INJECTION: forcing a failure. [ 1023.886312][T12886] name failslab, interval 1, probability 5, space 0, times 9977 [ 1023.921014][T12886] CPU: 1 PID: 12886 Comm: syz.3.1846 Not tainted syzkaller #0 [ 1023.928537][T12886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1023.938616][T12886] Call Trace: [ 1023.941911][T12886] [ 1023.944857][T12886] dump_stack_lvl+0x18c/0x250 [ 1023.949567][T12886] ? show_regs_print_info+0x20/0x20 [ 1023.954787][T12886] ? load_image+0x420/0x420 [ 1023.959322][T12886] ? __might_sleep+0xe0/0xe0 [ 1023.963943][T12886] ? __lock_acquire+0x7eb0/0x7eb0 [ 1023.969001][T12886] should_fail_ex+0x394/0x4c0 [ 1023.973719][T12886] should_failslab+0x9/0x20 [ 1023.978249][T12886] slab_pre_alloc_hook+0x59/0x300 [ 1023.983298][T12886] ? find_vma_prev+0x119/0x190 [ 1023.988098][T12886] kmem_cache_alloc+0x5a/0x2c0 [ 1023.992892][T12886] ? __khugepaged_enter+0xae/0x2d0 [ 1023.998037][T12886] __khugepaged_enter+0xae/0x2d0 [ 1024.003043][T12886] hugepage_madvise+0x17b/0x1b0 [ 1024.007928][T12886] do_madvise+0xd36/0x3790 [ 1024.012397][T12886] ? madvise_set_anon_name+0x440/0x440 [ 1024.017890][T12886] ? schedule+0xc7/0x170 [ 1024.022152][T12886] ? futex_wait_queue+0x27/0x1b0 [ 1024.027092][T12886] ? futex_wait_queue+0x138/0x1b0 [ 1024.032113][T12886] ? futex_unqueue+0xcb/0xf0 [ 1024.036704][T12886] ? futex_wait+0x4a7/0x5c0 [ 1024.041215][T12886] ? futex_wait_setup+0x270/0x270 [ 1024.046291][T12886] ? file_end_write+0x159/0x250 [ 1024.051153][T12886] ? vfs_write+0x5de/0x9a0 [ 1024.055588][T12886] ? do_futex+0x2ff/0x3e0 [ 1024.059922][T12886] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1024.065831][T12886] ? lock_chain_count+0x20/0x20 [ 1024.070686][T12886] __x64_sys_madvise+0xa6/0xc0 [ 1024.075459][T12886] do_syscall_64+0x55/0xb0 [ 1024.079872][T12886] ? clear_bhb_loop+0x40/0x90 [ 1024.084546][T12886] ? clear_bhb_loop+0x40/0x90 [ 1024.089220][T12886] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1024.095117][T12886] RIP: 0033:0x7f7a0c19e1d9 [ 1024.099530][T12886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1024.119137][T12886] RSP: 002b:00007f7a0d053028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1024.127553][T12886] RAX: ffffffffffffffda RBX: 00007f7a0c425fa0 RCX: 00007f7a0c19e1d9 [ 1024.135524][T12886] RDX: 000000000000000e RSI: 0000000000400000 RDI: 0000200000c00000 [ 1024.143547][T12886] RBP: 00007f7a0c235888 R08: 0000000000000000 R09: 0000000000000000 [ 1024.151513][T12886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1024.159485][T12886] R13: 00007f7a0c426038 R14: 00007f7a0c425fa0 R15: 00007fffd498aaf8 [ 1024.167465][T12886] [ 1024.240155][T12886] FAULT_INJECTION: forcing a failure. [ 1024.240155][T12886] name failslab, interval 1, probability 5, space 0, times 9976 [ 1024.255493][T12886] CPU: 0 PID: 12886 Comm: syz.3.1846 Not tainted syzkaller #0 [ 1024.262989][T12886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1024.273063][T12886] Call Trace: [ 1024.276355][T12886] [ 1024.279291][T12886] dump_stack_lvl+0x18c/0x250 [ 1024.284002][T12886] ? show_regs_print_info+0x20/0x20 [ 1024.289219][T12886] ? load_image+0x420/0x420 [ 1024.293749][T12886] ? __might_sleep+0xe0/0xe0 [ 1024.298361][T12886] ? __lock_acquire+0x7eb0/0x7eb0 [ 1024.303412][T12886] should_fail_ex+0x394/0x4c0 [ 1024.308120][T12886] should_failslab+0x9/0x20 [ 1024.312658][T12886] slab_pre_alloc_hook+0x59/0x300 [ 1024.317708][T12886] ? kvm_dev_ioctl+0xaa4/0x1810 [ 1024.322586][T12886] __kmem_cache_alloc_node+0x53/0x250 [ 1024.327988][T12886] ? kvm_dev_ioctl+0xaa4/0x1810 [ 1024.332858][T12886] kmalloc_trace+0x2a/0xe0 [ 1024.337299][T12886] kvm_dev_ioctl+0xaa4/0x1810 [ 1024.342005][T12886] ? kvm_resume+0x1e0/0x1e0 [ 1024.346530][T12886] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1024.351497][T12886] ? security_file_ioctl+0x80/0xa0 [ 1024.356632][T12886] ? kvm_resume+0x1e0/0x1e0 [ 1024.361154][T12886] __se_sys_ioctl+0xfd/0x170 [ 1024.365772][T12886] do_syscall_64+0x55/0xb0 [ 1024.370207][T12886] ? clear_bhb_loop+0x40/0x90 [ 1024.374900][T12886] ? clear_bhb_loop+0x40/0x90 [ 1024.379601][T12886] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1024.385523][T12886] RIP: 0033:0x7f7a0c19e1d9 [ 1024.389952][T12886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1024.409580][T12886] RSP: 002b:00007f7a0d053028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1024.418017][T12886] RAX: ffffffffffffffda RBX: 00007f7a0c425fa0 RCX: 00007f7a0c19e1d9 [ 1024.426010][T12886] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 1024.434000][T12886] RBP: 00007f7a0c235888 R08: 0000000000000000 R09: 0000000000000000 [ 1024.441990][T12886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1024.449981][T12886] R13: 00007f7a0c426038 R14: 00007f7a0c425fa0 R15: 00007fffd498aaf8 [ 1024.457991][T12886] [ 1024.621701][ T5139] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1024.685059][ T5139] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1024.721611][ T5139] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1024.728915][ T5139] loop0: [ 1024.760774][ T51] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 1026.920967][T12905] loop3: detected capacity change from 0 to 2048 [ 1027.028866][T12905] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1027.073278][T12905] ext4 filesystem being mounted at /495/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1028.961191][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1029.012841][ T5139] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1029.065413][ T5139] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1029.082549][ T5139] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1029.096157][ T5139] loop0: [ 1030.048908][ T6157] logitech-hidpp-device 0005:046D:B012.0002: item fetching failed at offset 3/4 [ 1030.121011][ T6157] logitech-hidpp-device 0005:046D:B012.0002: hidpp_probe:parse failed [ 1031.511440][ T6157] logitech-hidpp-device: probe of 0005:046D:B012.0002 failed with error -22 [ 1033.897520][T12956] FAULT_INJECTION: forcing a failure. [ 1033.897520][T12956] name failslab, interval 1, probability 5, space 0, times 9975 [ 1033.970343][T12956] CPU: 1 PID: 12956 Comm: syz.1.1855 Not tainted syzkaller #0 [ 1033.977870][T12956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1033.987930][T12956] Call Trace: [ 1033.991205][T12956] [ 1033.994136][T12956] dump_stack_lvl+0x18c/0x250 [ 1033.998822][T12956] ? show_regs_print_info+0x20/0x20 [ 1034.004020][T12956] ? load_image+0x420/0x420 [ 1034.008535][T12956] ? __lock_acquire+0x7eb0/0x7eb0 [ 1034.013562][T12956] ? __lock_acquire+0x135d/0x7eb0 [ 1034.018587][T12956] should_fail_ex+0x394/0x4c0 [ 1034.023270][T12956] should_failslab+0x9/0x20 [ 1034.027774][T12956] slab_pre_alloc_hook+0x59/0x300 [ 1034.032854][T12956] kmem_cache_alloc_lru+0x4d/0x2b0 [ 1034.037979][T12956] ? __d_alloc+0x31/0x710 [ 1034.042308][T12956] __d_alloc+0x31/0x710 [ 1034.046466][T12956] d_alloc_parallel+0xe0/0x1590 [ 1034.051320][T12956] ? stack_trace_save+0x100/0x100 [ 1034.056346][T12956] ? lockdep_softirqs_off+0x440/0x440 [ 1034.061725][T12956] ? lockdep_softirqs_off+0x440/0x440 [ 1034.067110][T12956] ? d_hash_and_lookup+0x1b0/0x1b0 [ 1034.072243][T12956] ? __init_waitqueue_head+0xa8/0x140 [ 1034.077647][T12956] __lookup_slow+0x138/0x400 [ 1034.082249][T12956] ? lookup_one_len+0x2e0/0x2e0 [ 1034.087115][T12956] lookup_one_len+0x1a1/0x2e0 [ 1034.091816][T12956] ? lookup_one_common+0x450/0x450 [ 1034.096923][T12956] ? do_raw_spin_unlock+0x121/0x230 [ 1034.102120][T12956] ? mntput+0x65/0xc0 [ 1034.106103][T12956] start_creating+0x184/0x310 [ 1034.110801][T12956] __debugfs_create_file+0x6f/0x500 [ 1034.116005][T12956] kvm_create_vm_debugfs+0x480/0x980 [ 1034.121334][T12956] ? hardware_enable_all+0x210/0x210 [ 1034.126625][T12956] ? __raw_spin_lock_init+0x45/0x100 [ 1034.131918][T12956] kvm_dev_ioctl+0x1426/0x1810 [ 1034.136688][T12956] ? kvm_resume+0x1e0/0x1e0 [ 1034.141192][T12956] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1034.146127][T12956] ? security_file_ioctl+0x80/0xa0 [ 1034.151245][T12956] ? kvm_resume+0x1e0/0x1e0 [ 1034.155746][T12956] __se_sys_ioctl+0xfd/0x170 [ 1034.160341][T12956] do_syscall_64+0x55/0xb0 [ 1034.164756][T12956] ? clear_bhb_loop+0x40/0x90 [ 1034.169428][T12956] ? clear_bhb_loop+0x40/0x90 [ 1034.174104][T12956] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1034.180003][T12956] RIP: 0033:0x7f20d999e1d9 [ 1034.184419][T12956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1034.204026][T12956] RSP: 002b:00007f20da8d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1034.212440][T12956] RAX: ffffffffffffffda RBX: 00007f20d9c25fa0 RCX: 00007f20d999e1d9 [ 1034.220408][T12956] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 1034.228372][T12956] RBP: 00007f20d9a35888 R08: 0000000000000000 R09: 0000000000000000 [ 1034.236337][T12956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1034.244302][T12956] R13: 00007f20d9c26038 R14: 00007f20d9c25fa0 R15: 00007fffb85a5118 [ 1034.252286][T12956] [ 1034.282380][T12956] FAULT_INJECTION: forcing a failure. [ 1034.282380][T12956] name failslab, interval 1, probability 5, space 0, times 9974 [ 1034.312306][ T51] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 1034.332482][T12956] CPU: 1 PID: 12956 Comm: syz.1.1855 Not tainted syzkaller #0 [ 1034.339988][T12956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1034.350063][T12956] Call Trace: [ 1034.353359][T12956] [ 1034.356298][T12956] dump_stack_lvl+0x18c/0x250 [ 1034.360970][T12956] ? show_regs_print_info+0x20/0x20 [ 1034.366156][T12956] ? load_image+0x420/0x420 [ 1034.370648][T12956] ? __lock_acquire+0x7eb0/0x7eb0 [ 1034.375678][T12956] should_fail_ex+0x394/0x4c0 [ 1034.380370][T12956] should_failslab+0x9/0x20 [ 1034.384866][T12956] slab_pre_alloc_hook+0x59/0x300 [ 1034.389881][T12956] kmem_cache_alloc_lru+0x4d/0x2b0 [ 1034.394983][T12956] ? new_inode_pseudo+0x82/0x1d0 [ 1034.399903][T12956] ? lookup_one_common+0x450/0x450 [ 1034.405016][T12956] new_inode_pseudo+0x82/0x1d0 [ 1034.409812][T12956] new_inode+0x22/0x1d0 [ 1034.413992][T12956] ? start_creating+0x1f5/0x310 [ 1034.418874][T12956] __debugfs_create_file+0x147/0x500 [ 1034.424194][T12956] kvm_create_vm_debugfs+0x6de/0x980 [ 1034.429525][T12956] ? hardware_enable_all+0x210/0x210 [ 1034.434843][T12956] ? __raw_spin_lock_init+0x45/0x100 [ 1034.440162][T12956] kvm_dev_ioctl+0x1426/0x1810 [ 1034.444960][T12956] ? kvm_resume+0x1e0/0x1e0 [ 1034.449496][T12956] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1034.454460][T12956] ? security_file_ioctl+0x80/0xa0 [ 1034.459606][T12956] ? kvm_resume+0x1e0/0x1e0 [ 1034.464133][T12956] __se_sys_ioctl+0xfd/0x170 [ 1034.468755][T12956] do_syscall_64+0x55/0xb0 [ 1034.473192][T12956] ? clear_bhb_loop+0x40/0x90 [ 1034.477888][T12956] ? clear_bhb_loop+0x40/0x90 [ 1034.482589][T12956] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1034.488515][T12956] RIP: 0033:0x7f20d999e1d9 [ 1034.492953][T12956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1034.512586][T12956] RSP: 002b:00007f20da8d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1034.521023][T12956] RAX: ffffffffffffffda RBX: 00007f20d9c25fa0 RCX: 00007f20d999e1d9 [ 1034.529013][T12956] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 1034.537001][T12956] RBP: 00007f20d9a35888 R08: 0000000000000000 R09: 0000000000000000 [ 1034.544989][T12956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1034.552976][T12956] R13: 00007f20d9c26038 R14: 00007f20d9c25fa0 R15: 00007fffb85a5118 [ 1034.560982][T12956] [ 1035.258949][T12956] debugfs: out of free dentries, can not create file 'halt_poll_fail_hist' [ 1035.280706][T12956] FAULT_INJECTION: forcing a failure. [ 1035.280706][T12956] name failslab, interval 1, probability 5, space 0, times 9973 [ 1035.308316][T12956] CPU: 0 PID: 12956 Comm: syz.1.1855 Not tainted syzkaller #0 [ 1035.315833][T12956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1035.325904][T12956] Call Trace: [ 1035.329199][T12956] [ 1035.332142][T12956] dump_stack_lvl+0x18c/0x250 [ 1035.336849][T12956] ? show_regs_print_info+0x20/0x20 [ 1035.342071][T12956] ? load_image+0x420/0x420 [ 1035.346605][T12956] ? __lock_acquire+0x7eb0/0x7eb0 [ 1035.351653][T12956] ? __lock_acquire+0x135d/0x7eb0 [ 1035.356754][T12956] should_fail_ex+0x394/0x4c0 [ 1035.361466][T12956] should_failslab+0x9/0x20 [ 1035.366008][T12956] slab_pre_alloc_hook+0x59/0x300 [ 1035.371060][T12956] kmem_cache_alloc_lru+0x4d/0x2b0 [ 1035.376202][T12956] ? __d_alloc+0x31/0x710 [ 1035.380564][T12956] __d_alloc+0x31/0x710 [ 1035.384748][T12956] d_alloc_parallel+0xe0/0x1590 [ 1035.389632][T12956] ? stack_trace_save+0x100/0x100 [ 1035.394707][T12956] ? lockdep_softirqs_off+0x440/0x440 [ 1035.400114][T12956] ? lockdep_softirqs_off+0x440/0x440 [ 1035.405510][T12956] ? d_hash_and_lookup+0x1b0/0x1b0 [ 1035.410651][T12956] ? __init_waitqueue_head+0xa8/0x140 [ 1035.416052][T12956] __lookup_slow+0x138/0x400 [ 1035.420666][T12956] ? lookup_one_len+0x2e0/0x2e0 [ 1035.425560][T12956] lookup_one_len+0x1a1/0x2e0 [ 1035.430255][T12956] ? lookup_one_common+0x450/0x450 [ 1035.435389][T12956] ? do_raw_spin_unlock+0x121/0x230 [ 1035.440619][T12956] ? mntput+0x65/0xc0 [ 1035.444621][T12956] start_creating+0x184/0x310 [ 1035.449320][T12956] __debugfs_create_file+0x6f/0x500 [ 1035.454555][T12956] kvm_create_vm_debugfs+0x6de/0x980 [ 1035.459871][T12956] ? hardware_enable_all+0x210/0x210 [ 1035.465182][T12956] ? __raw_spin_lock_init+0x45/0x100 [ 1035.470500][T12956] kvm_dev_ioctl+0x1426/0x1810 [ 1035.475297][T12956] ? kvm_resume+0x1e0/0x1e0 [ 1035.479835][T12956] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1035.484798][T12956] ? security_file_ioctl+0x80/0xa0 [ 1035.489937][T12956] ? kvm_resume+0x1e0/0x1e0 [ 1035.494463][T12956] __se_sys_ioctl+0xfd/0x170 [ 1035.499077][T12956] do_syscall_64+0x55/0xb0 [ 1035.503509][T12956] ? clear_bhb_loop+0x40/0x90 [ 1035.508206][T12956] ? clear_bhb_loop+0x40/0x90 [ 1035.512903][T12956] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1035.518825][T12956] RIP: 0033:0x7f20d999e1d9 [ 1035.523258][T12956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1035.542889][T12956] RSP: 002b:00007f20da8d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1035.551326][T12956] RAX: ffffffffffffffda RBX: 00007f20d9c25fa0 RCX: 00007f20d999e1d9 [ 1035.559320][T12956] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 1035.567314][T12956] RBP: 00007f20d9a35888 R08: 0000000000000000 R09: 0000000000000000 [ 1035.575310][T12956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1035.583304][T12956] R13: 00007f20d9c26038 R14: 00007f20d9c25fa0 R15: 00007fffb85a5118 [ 1035.591313][T12956] [ 1035.609934][T12956] FAULT_INJECTION: forcing a failure. [ 1035.609934][T12956] name failslab, interval 1, probability 5, space 0, times 9972 [ 1035.623113][T12956] CPU: 0 PID: 12956 Comm: syz.1.1855 Not tainted syzkaller #0 [ 1035.630594][T12956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1035.640666][T12956] Call Trace: [ 1035.643961][T12956] [ 1035.646909][T12956] dump_stack_lvl+0x18c/0x250 [ 1035.651613][T12956] ? show_regs_print_info+0x20/0x20 [ 1035.656829][T12956] ? load_image+0x420/0x420 [ 1035.661365][T12956] ? __might_sleep+0xe0/0xe0 [ 1035.665976][T12956] ? __lock_acquire+0x7eb0/0x7eb0 [ 1035.671026][T12956] should_fail_ex+0x394/0x4c0 [ 1035.675739][T12956] should_failslab+0x9/0x20 [ 1035.680272][T12956] slab_pre_alloc_hook+0x59/0x300 [ 1035.685364][T12956] kmem_cache_alloc+0x5a/0x2c0 [ 1035.690163][T12956] ? security_inode_alloc+0x34/0x110 [ 1035.695468][T12956] security_inode_alloc+0x34/0x110 [ 1035.700573][T12956] inode_init_always+0x914/0xc90 [ 1035.705502][T12956] new_inode_pseudo+0x95/0x1d0 [ 1035.710281][T12956] new_inode+0x22/0x1d0 [ 1035.714425][T12956] ? start_creating+0x1f5/0x310 [ 1035.719263][T12956] __debugfs_create_file+0x147/0x500 [ 1035.724540][T12956] kvm_create_vm_debugfs+0x6de/0x980 [ 1035.729834][T12956] ? hardware_enable_all+0x210/0x210 [ 1035.735131][T12956] ? __raw_spin_lock_init+0x45/0x100 [ 1035.740420][T12956] kvm_dev_ioctl+0x1426/0x1810 [ 1035.745200][T12956] ? kvm_resume+0x1e0/0x1e0 [ 1035.749691][T12956] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1035.754615][T12956] ? security_file_ioctl+0x80/0xa0 [ 1035.759743][T12956] ? kvm_resume+0x1e0/0x1e0 [ 1035.764235][T12956] __se_sys_ioctl+0xfd/0x170 [ 1035.768819][T12956] do_syscall_64+0x55/0xb0 [ 1035.773235][T12956] ? clear_bhb_loop+0x40/0x90 [ 1035.777900][T12956] ? clear_bhb_loop+0x40/0x90 [ 1035.782586][T12956] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1035.788490][T12956] RIP: 0033:0x7f20d999e1d9 [ 1035.792895][T12956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1035.812501][T12956] RSP: 002b:00007f20da8d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1035.820904][T12956] RAX: ffffffffffffffda RBX: 00007f20d9c25fa0 RCX: 00007f20d999e1d9 [ 1035.828863][T12956] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 1035.837699][T12956] RBP: 00007f20d9a35888 R08: 0000000000000000 R09: 0000000000000000 [ 1035.845657][T12956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1035.853644][T12956] R13: 00007f20d9c26038 R14: 00007f20d9c25fa0 R15: 00007fffb85a5118 [ 1035.861613][T12956] [ 1035.919953][T12956] debugfs: out of free dentries, can not create file 'pf_taken' [ 1035.929571][T12956] FAULT_INJECTION: forcing a failure. [ 1035.929571][T12956] name failslab, interval 1, probability 5, space 0, times 9971 [ 1035.943919][T12956] CPU: 0 PID: 12956 Comm: syz.1.1855 Not tainted syzkaller #0 [ 1035.951428][T12956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1035.961500][T12956] Call Trace: [ 1035.964793][T12956] [ 1035.967728][T12956] dump_stack_lvl+0x18c/0x250 [ 1035.972406][T12956] ? show_regs_print_info+0x20/0x20 [ 1035.977618][T12956] ? load_image+0x420/0x420 [ 1035.982136][T12956] ? __lock_acquire+0x7eb0/0x7eb0 [ 1035.987146][T12956] ? __lock_acquire+0x135d/0x7eb0 [ 1035.992171][T12956] should_fail_ex+0x394/0x4c0 [ 1035.996850][T12956] should_failslab+0x9/0x20 [ 1036.001371][T12956] slab_pre_alloc_hook+0x59/0x300 [ 1036.006394][T12956] kmem_cache_alloc_lru+0x4d/0x2b0 [ 1036.011499][T12956] ? __d_alloc+0x31/0x710 [ 1036.015836][T12956] __d_alloc+0x31/0x710 [ 1036.020007][T12956] d_alloc_parallel+0xe0/0x1590 [ 1036.024850][T12956] ? stack_trace_save+0x100/0x100 [ 1036.029885][T12956] ? lockdep_softirqs_off+0x440/0x440 [ 1036.035245][T12956] ? lockdep_softirqs_off+0x440/0x440 [ 1036.040600][T12956] ? d_hash_and_lookup+0x1b0/0x1b0 [ 1036.045701][T12956] ? __init_waitqueue_head+0xa8/0x140 [ 1036.051084][T12956] __lookup_slow+0x138/0x400 [ 1036.055674][T12956] ? lookup_one_len+0x2e0/0x2e0 [ 1036.060526][T12956] lookup_one_len+0x1a1/0x2e0 [ 1036.065208][T12956] ? lookup_one_common+0x450/0x450 [ 1036.070303][T12956] ? do_raw_spin_unlock+0x121/0x230 [ 1036.075487][T12956] ? mntput+0x65/0xc0 [ 1036.079456][T12956] start_creating+0x184/0x310 [ 1036.084125][T12956] __debugfs_create_file+0x6f/0x500 [ 1036.089314][T12956] kvm_create_vm_debugfs+0x6de/0x980 [ 1036.094596][T12956] ? hardware_enable_all+0x210/0x210 [ 1036.099891][T12956] ? __raw_spin_lock_init+0x45/0x100 [ 1036.105171][T12956] kvm_dev_ioctl+0x1426/0x1810 [ 1036.109927][T12956] ? kvm_resume+0x1e0/0x1e0 [ 1036.114420][T12956] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1036.119341][T12956] ? security_file_ioctl+0x80/0xa0 [ 1036.124443][T12956] ? kvm_resume+0x1e0/0x1e0 [ 1036.128931][T12956] __se_sys_ioctl+0xfd/0x170 [ 1036.133512][T12956] do_syscall_64+0x55/0xb0 [ 1036.137937][T12956] ? clear_bhb_loop+0x40/0x90 [ 1036.142598][T12956] ? clear_bhb_loop+0x40/0x90 [ 1036.147258][T12956] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1036.153144][T12956] RIP: 0033:0x7f20d999e1d9 [ 1036.157545][T12956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1036.177137][T12956] RSP: 002b:00007f20da8d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1036.185534][T12956] RAX: ffffffffffffffda RBX: 00007f20d9c25fa0 RCX: 00007f20d999e1d9 [ 1036.193489][T12956] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 1036.201445][T12956] RBP: 00007f20d9a35888 R08: 0000000000000000 R09: 0000000000000000 [ 1036.209403][T12956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1036.217361][T12956] R13: 00007f20d9c26038 R14: 00007f20d9c25fa0 R15: 00007fffb85a5118 [ 1036.225329][T12956] [ 1036.275557][T12956] FAULT_INJECTION: forcing a failure. [ 1036.275557][T12956] name failslab, interval 1, probability 5, space 0, times 9970 [ 1036.316885][T12956] CPU: 0 PID: 12956 Comm: syz.1.1855 Not tainted syzkaller #0 [ 1036.324397][T12956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1036.334466][T12956] Call Trace: [ 1036.337756][T12956] [ 1036.340705][T12956] dump_stack_lvl+0x18c/0x250 [ 1036.345406][T12956] ? show_regs_print_info+0x20/0x20 [ 1036.350624][T12956] ? load_image+0x420/0x420 [ 1036.355150][T12956] ? __might_sleep+0xe0/0xe0 [ 1036.359777][T12956] ? __lock_acquire+0x7eb0/0x7eb0 [ 1036.364825][T12956] should_fail_ex+0x394/0x4c0 [ 1036.369536][T12956] should_failslab+0x9/0x20 [ 1036.374066][T12956] slab_pre_alloc_hook+0x59/0x300 [ 1036.379123][T12956] kmem_cache_alloc+0x5a/0x2c0 [ 1036.383922][T12956] ? security_inode_alloc+0x34/0x110 [ 1036.389257][T12956] security_inode_alloc+0x34/0x110 [ 1036.394401][T12956] inode_init_always+0x914/0xc90 [ 1036.399378][T12956] new_inode_pseudo+0x95/0x1d0 [ 1036.404167][T12956] new_inode+0x22/0x1d0 [ 1036.408348][T12956] ? start_creating+0x1f5/0x310 [ 1036.413229][T12956] __debugfs_create_file+0x147/0x500 [ 1036.418552][T12956] kvm_create_vm_debugfs+0x6de/0x980 [ 1036.423884][T12956] ? hardware_enable_all+0x210/0x210 [ 1036.429212][T12956] ? __raw_spin_lock_init+0x45/0x100 [ 1036.434530][T12956] kvm_dev_ioctl+0x1426/0x1810 [ 1036.439329][T12956] ? kvm_resume+0x1e0/0x1e0 [ 1036.443858][T12956] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1036.448816][T12956] ? security_file_ioctl+0x80/0xa0 [ 1036.453960][T12956] ? kvm_resume+0x1e0/0x1e0 [ 1036.458501][T12956] __se_sys_ioctl+0xfd/0x170 [ 1036.463125][T12956] do_syscall_64+0x55/0xb0 [ 1036.467629][T12956] ? clear_bhb_loop+0x40/0x90 [ 1036.472336][T12956] ? clear_bhb_loop+0x40/0x90 [ 1036.477052][T12956] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1036.482975][T12956] RIP: 0033:0x7f20d999e1d9 [ 1036.487399][T12956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1036.507008][T12956] RSP: 002b:00007f20da8d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1036.515452][T12956] RAX: ffffffffffffffda RBX: 00007f20d9c25fa0 RCX: 00007f20d999e1d9 [ 1036.515907][T12980] loop4: detected capacity change from 0 to 2048 [ 1036.523421][T12956] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 1036.523495][T12956] RBP: 00007f20d9a35888 R08: 0000000000000000 R09: 0000000000000000 [ 1036.523511][T12956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1036.523524][T12956] R13: 00007f20d9c26038 R14: 00007f20d9c25fa0 R15: 00007fffb85a5118 [ 1036.523557][T12956] [ 1036.599439][T12956] debugfs: out of free dentries, can not create file 'nested_run' [ 1036.617517][T12956] FAULT_INJECTION: forcing a failure. [ 1036.617517][T12956] name failslab, interval 1, probability 5, space 0, times 9969 [ 1036.622513][ T5139] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1036.641734][T12956] CPU: 1 PID: 12956 Comm: syz.1.1855 Not tainted syzkaller #0 [ 1036.641759][T12956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1036.641771][T12956] Call Trace: [ 1036.641780][T12956] [ 1036.641790][T12956] dump_stack_lvl+0x18c/0x250 [ 1036.641818][T12956] ? show_regs_print_info+0x20/0x20 [ 1036.641840][T12956] ? load_image+0x420/0x420 [ 1036.641869][T12956] ? __might_sleep+0xe0/0xe0 [ 1036.641894][T12956] ? __lock_acquire+0x7eb0/0x7eb0 [ 1036.641917][T12956] ? __debugfs_create_file+0x45d/0x500 [ 1036.641949][T12956] should_fail_ex+0x394/0x4c0 [ 1036.641981][T12956] should_failslab+0x9/0x20 [ 1036.642007][T12956] slab_pre_alloc_hook+0x59/0x300 [ 1036.642030][T12956] ? kvm_create_vm_debugfs+0x5af/0x980 [ 1036.642058][T12956] __kmem_cache_alloc_node+0x53/0x250 [ 1036.642089][T12956] ? kvm_create_vm_debugfs+0x5af/0x980 [ 1036.642114][T12956] kmalloc_trace+0x2a/0xe0 [ 1036.642143][T12956] kvm_create_vm_debugfs+0x5af/0x980 [ 1036.642176][T12956] ? hardware_enable_all+0x210/0x210 [ 1036.740584][T12956] ? __raw_spin_lock_init+0x45/0x100 [ 1036.745892][T12956] kvm_dev_ioctl+0x1426/0x1810 [ 1036.750671][T12956] ? kvm_resume+0x1e0/0x1e0 [ 1036.755181][T12956] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1036.760135][T12956] ? security_file_ioctl+0x80/0xa0 [ 1036.765251][T12956] ? kvm_resume+0x1e0/0x1e0 [ 1036.769765][T12956] __se_sys_ioctl+0xfd/0x170 [ 1036.774368][T12956] do_syscall_64+0x55/0xb0 [ 1036.778785][T12956] ? clear_bhb_loop+0x40/0x90 [ 1036.783462][T12956] ? clear_bhb_loop+0x40/0x90 [ 1036.788150][T12956] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1036.794049][T12956] RIP: 0033:0x7f20d999e1d9 [ 1036.798462][T12956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1036.818070][T12956] RSP: 002b:00007f20da8d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1036.826486][T12956] RAX: ffffffffffffffda RBX: 00007f20d9c25fa0 RCX: 00007f20d999e1d9 [ 1036.834459][T12956] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 1036.842431][T12956] RBP: 00007f20d9a35888 R08: 0000000000000000 R09: 0000000000000000 [ 1036.850398][T12956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1036.858370][T12956] R13: 00007f20d9c26038 R14: 00007f20d9c25fa0 R15: 00007fffb85a5118 [ 1036.866377][T12956] [ 1036.869703][ T5139] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1036.877915][ T5139] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1036.885100][ T5139] loop0: [ 1038.272998][T12980] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1038.324864][T12980] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1039.267512][T10074] logitech-hidpp-device 0005:046D:B012.0003: item fetching failed at offset 3/4 [ 1039.277221][T10074] logitech-hidpp-device 0005:046D:B012.0003: hidpp_probe:parse failed [ 1039.287074][T10074] logitech-hidpp-device: probe of 0005:046D:B012.0003 failed with error -22 [ 1039.431435][T11801] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1044.893670][T13034] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1882'. [ 1045.015776][T13038] loop2: detected capacity change from 0 to 2048 [ 1045.173848][T13038] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1045.829893][T13038] ext4 filesystem being mounted at /457/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1046.007821][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1050.002534][T13072] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1892'. [ 1050.377059][T13076] loop4: detected capacity change from 0 to 2048 [ 1050.441130][T13076] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1050.483252][T13076] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1050.666539][T11801] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1054.571342][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.580744][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.809980][T13114] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1901'. [ 1055.116229][T13117] loop2: detected capacity change from 0 to 2048 [ 1055.214040][T13117] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1055.327915][T13117] ext4 filesystem being mounted at /461/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1057.086688][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1057.150231][ T5139] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1057.170581][T13137] FAULT_INJECTION: forcing a failure. [ 1057.170581][T13137] name failslab, interval 1, probability 5, space 0, times 9968 [ 1057.183669][T13137] CPU: 1 PID: 13137 Comm: syz.2.1908 Not tainted syzkaller #0 [ 1057.191143][T13137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1057.201193][T13137] Call Trace: [ 1057.204465][T13137] [ 1057.207383][T13137] dump_stack_lvl+0x18c/0x250 [ 1057.212055][T13137] ? show_regs_print_info+0x20/0x20 [ 1057.217242][T13137] ? load_image+0x420/0x420 [ 1057.221739][T13137] ? __might_sleep+0xe0/0xe0 [ 1057.226320][T13137] ? __lock_acquire+0x7eb0/0x7eb0 [ 1057.231333][T13137] should_fail_ex+0x394/0x4c0 [ 1057.236022][T13137] should_failslab+0x9/0x20 [ 1057.240517][T13137] slab_pre_alloc_hook+0x59/0x300 [ 1057.245533][T13137] kmem_cache_alloc+0x5a/0x2c0 [ 1057.250290][T13137] ? ptlock_alloc+0x20/0x70 [ 1057.254782][T13137] ptlock_alloc+0x20/0x70 [ 1057.259093][T13137] pte_alloc_one+0xcc/0x540 [ 1057.263585][T13137] ? pfn_modify_allowed+0x560/0x560 [ 1057.268772][T13137] ? count_memcg_event_mm+0x8e/0x3c0 [ 1057.274044][T13137] ? khugepaged_enter_vma+0x106/0x120 [ 1057.279402][T13137] do_huge_pmd_anonymous_page+0x86f/0x18b0 [ 1057.285201][T13137] ? count_memcg_event_mm+0x36f/0x3c0 [ 1057.290579][T13137] ? count_memcg_event_mm+0x8e/0x3c0 [ 1057.295860][T13137] ? vma_thp_gfp_mask+0x160/0x160 [ 1057.300881][T13137] ? hugepage_vma_check+0x47d/0x560 [ 1057.306081][T13137] handle_mm_fault+0x1184/0x4a50 [ 1057.311016][T13137] ? handle_mm_fault+0xe6/0x4a50 [ 1057.315951][T13137] ? numa_migrate_prep+0x350/0x350 [ 1057.321067][T13137] __get_user_pages+0x604/0x1580 [ 1057.326022][T13137] ? populate_vma_page_range+0x380/0x380 [ 1057.331689][T13137] faultin_page_range+0x28c/0x8a0 [ 1057.336741][T13137] ? blk_start_plug+0x6e/0x1a0 [ 1057.341493][T13137] do_madvise+0xed9/0x3790 [ 1057.345913][T13137] ? __lock_acquire+0x7eb0/0x7eb0 [ 1057.350944][T13137] ? madvise_set_anon_name+0x440/0x440 [ 1057.356402][T13137] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1057.362293][T13137] ? _raw_spin_unlock+0x40/0x40 [ 1057.367135][T13137] ? preempt_schedule_thunk+0x1a/0x30 [ 1057.372502][T13137] ? try_to_wake_up+0x6f5/0x10e0 [ 1057.377430][T13137] ? wake_up_q+0xca/0x100 [ 1057.381762][T13137] ? futex_wake+0x42a/0x4f0 [ 1057.386262][T13137] ? futex_wake_mark+0x150/0x150 [ 1057.391192][T13137] ? __lock_acquire+0x7eb0/0x7eb0 [ 1057.396211][T13137] ? file_end_write+0x159/0x250 [ 1057.401053][T13137] ? vfs_write+0x5de/0x9a0 [ 1057.405481][T13137] ? do_futex+0x35d/0x3e0 [ 1057.409798][T13137] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1057.415712][T13137] ? lock_chain_count+0x20/0x20 [ 1057.420577][T13137] __x64_sys_madvise+0xa6/0xc0 [ 1057.425361][T13137] do_syscall_64+0x55/0xb0 [ 1057.429762][T13137] ? clear_bhb_loop+0x40/0x90 [ 1057.434423][T13137] ? clear_bhb_loop+0x40/0x90 [ 1057.439108][T13137] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1057.444993][T13137] RIP: 0033:0x7f0690f9e1d9 [ 1057.449396][T13137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1057.468990][T13137] RSP: 002b:00007f0691e0d028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1057.477391][T13137] RAX: ffffffffffffffda RBX: 00007f0691225fa0 RCX: 00007f0690f9e1d9 [ 1057.485351][T13137] RDX: 0000000000000016 RSI: 0000000000800000 RDI: 0000200000800000 [ 1057.493328][T13137] RBP: 00007f0691035888 R08: 0000000000000000 R09: 0000000000000000 [ 1057.501296][T13137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1057.509280][T13137] R13: 00007f0691226038 R14: 00007f0691225fa0 R15: 00007ffd28ba7798 [ 1057.517269][T13137] [ 1057.577492][ T5139] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1057.594956][ T5139] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1057.602399][ T5139] loop0: [ 1057.657053][T13137] FAULT_INJECTION: forcing a failure. [ 1057.657053][T13137] name failslab, interval 1, probability 5, space 0, times 9967 [ 1057.729350][T13137] CPU: 1 PID: 13137 Comm: syz.2.1908 Not tainted syzkaller #0 [ 1057.736896][T13137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1057.746976][T13137] Call Trace: [ 1057.750275][T13137] [ 1057.753232][T13137] dump_stack_lvl+0x18c/0x250 [ 1057.757945][T13137] ? show_regs_print_info+0x20/0x20 [ 1057.763167][T13137] ? load_image+0x420/0x420 [ 1057.767683][T13137] ? __lock_acquire+0x7eb0/0x7eb0 [ 1057.772707][T13137] ? __lock_acquire+0x135d/0x7eb0 [ 1057.777739][T13137] should_fail_ex+0x394/0x4c0 [ 1057.782426][T13137] should_failslab+0x9/0x20 [ 1057.786935][T13137] slab_pre_alloc_hook+0x59/0x300 [ 1057.791964][T13137] kmem_cache_alloc_lru+0x4d/0x2b0 [ 1057.797083][T13137] ? __d_alloc+0x31/0x710 [ 1057.801414][T13137] __d_alloc+0x31/0x710 [ 1057.805577][T13137] d_alloc_parallel+0xe0/0x1590 [ 1057.810432][T13137] ? stack_trace_save+0x100/0x100 [ 1057.815461][T13137] ? lockdep_softirqs_off+0x440/0x440 [ 1057.820836][T13137] ? lockdep_softirqs_off+0x440/0x440 [ 1057.826211][T13137] ? d_hash_and_lookup+0x1b0/0x1b0 [ 1057.831327][T13137] ? __init_waitqueue_head+0xa8/0x140 [ 1057.836707][T13137] __lookup_slow+0x138/0x400 [ 1057.841299][T13137] ? lookup_one_len+0x2e0/0x2e0 [ 1057.846159][T13137] lookup_one_len+0x1a1/0x2e0 [ 1057.850837][T13137] ? lookup_one_common+0x450/0x450 [ 1057.855945][T13137] ? do_raw_spin_unlock+0x121/0x230 [ 1057.861149][T13137] ? mntput+0x65/0xc0 [ 1057.865136][T13137] start_creating+0x184/0x310 [ 1057.869817][T13137] __debugfs_create_file+0x6f/0x500 [ 1057.875019][T13137] kvm_create_vm_debugfs+0x480/0x980 [ 1057.880312][T13137] ? hardware_enable_all+0x210/0x210 [ 1057.885605][T13137] ? __raw_spin_lock_init+0x45/0x100 [ 1057.890897][T13137] kvm_dev_ioctl+0x1426/0x1810 [ 1057.895667][T13137] ? kvm_resume+0x1e0/0x1e0 [ 1057.900173][T13137] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1057.905110][T13137] ? security_file_ioctl+0x80/0xa0 [ 1057.910224][T13137] ? kvm_resume+0x1e0/0x1e0 [ 1057.914725][T13137] __se_sys_ioctl+0xfd/0x170 [ 1057.919320][T13137] do_syscall_64+0x55/0xb0 [ 1057.923736][T13137] ? clear_bhb_loop+0x40/0x90 [ 1057.928411][T13137] ? clear_bhb_loop+0x40/0x90 [ 1057.933089][T13137] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1057.938984][T13137] RIP: 0033:0x7f0690f9e1d9 [ 1057.943400][T13137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1057.963009][T13137] RSP: 002b:00007f0691e0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1057.971424][T13137] RAX: ffffffffffffffda RBX: 00007f0691225fa0 RCX: 00007f0690f9e1d9 [ 1057.979390][T13137] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 1057.987358][T13137] RBP: 00007f0691035888 R08: 0000000000000000 R09: 0000000000000000 [ 1057.995326][T13137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1058.003297][T13137] R13: 00007f0691226038 R14: 00007f0691225fa0 R15: 00007ffd28ba7798 [ 1058.011295][T13137] [ 1058.054403][T13137] FAULT_INJECTION: forcing a failure. [ 1058.054403][T13137] name failslab, interval 1, probability 5, space 0, times 9966 [ 1058.070914][T13137] CPU: 0 PID: 13137 Comm: syz.2.1908 Not tainted syzkaller #0 [ 1058.078413][T13137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1058.088488][T13137] Call Trace: [ 1058.091781][T13137] [ 1058.094738][T13137] dump_stack_lvl+0x18c/0x250 [ 1058.099457][T13137] ? show_regs_print_info+0x20/0x20 [ 1058.104679][T13137] ? load_image+0x420/0x420 [ 1058.109223][T13137] ? __might_sleep+0xe0/0xe0 [ 1058.113850][T13137] ? __lock_acquire+0x7eb0/0x7eb0 [ 1058.118897][T13137] should_fail_ex+0x394/0x4c0 [ 1058.123610][T13137] should_failslab+0x9/0x20 [ 1058.128148][T13137] slab_pre_alloc_hook+0x59/0x300 [ 1058.133200][T13137] kmem_cache_alloc+0x5a/0x2c0 [ 1058.137987][T13137] ? security_inode_alloc+0x34/0x110 [ 1058.143302][T13137] security_inode_alloc+0x34/0x110 [ 1058.148441][T13137] inode_init_always+0x914/0xc90 [ 1058.153413][T13137] new_inode_pseudo+0x95/0x1d0 [ 1058.158213][T13137] new_inode+0x22/0x1d0 [ 1058.162396][T13137] ? start_creating+0x1f5/0x310 [ 1058.167279][T13137] __debugfs_create_file+0x147/0x500 [ 1058.172608][T13137] kvm_create_vm_debugfs+0x480/0x980 [ 1058.177941][T13137] ? hardware_enable_all+0x210/0x210 [ 1058.183259][T13137] ? __raw_spin_lock_init+0x45/0x100 [ 1058.188579][T13137] kvm_dev_ioctl+0x1426/0x1810 [ 1058.193381][T13137] ? kvm_resume+0x1e0/0x1e0 [ 1058.197923][T13137] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1058.202884][T13137] ? security_file_ioctl+0x80/0xa0 [ 1058.208022][T13137] ? kvm_resume+0x1e0/0x1e0 [ 1058.212552][T13137] __se_sys_ioctl+0xfd/0x170 [ 1058.217174][T13137] do_syscall_64+0x55/0xb0 [ 1058.221606][T13137] ? clear_bhb_loop+0x40/0x90 [ 1058.226309][T13137] ? clear_bhb_loop+0x40/0x90 [ 1058.231014][T13137] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1058.236939][T13137] RIP: 0033:0x7f0690f9e1d9 [ 1058.241381][T13137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1058.252174][T13149] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1911'. [ 1058.260990][T13137] RSP: 002b:00007f0691e0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1058.278366][T13137] RAX: ffffffffffffffda RBX: 00007f0691225fa0 RCX: 00007f0690f9e1d9 [ 1058.286369][T13137] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 1058.294369][T13137] RBP: 00007f0691035888 R08: 0000000000000000 R09: 0000000000000000 [ 1058.302369][T13137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1058.310371][T13137] R13: 00007f0691226038 R14: 00007f0691225fa0 R15: 00007ffd28ba7798 [ 1058.318391][T13137] [ 1059.760883][T13153] program syz.1.1913 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1060.481730][T13137] debugfs: out of free dentries, can not create file 'mmu_flooded' [ 1060.544824][T13137] FAULT_INJECTION: forcing a failure. [ 1060.544824][T13137] name failslab, interval 1, probability 5, space 0, times 9965 [ 1060.581638][T13137] CPU: 1 PID: 13137 Comm: syz.2.1908 Not tainted syzkaller #0 [ 1060.589151][T13137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1060.599221][T13137] Call Trace: [ 1060.602506][T13137] [ 1060.605440][T13137] dump_stack_lvl+0x18c/0x250 [ 1060.610126][T13137] ? show_regs_print_info+0x20/0x20 [ 1060.615327][T13137] ? load_image+0x420/0x420 [ 1060.619838][T13137] ? __might_sleep+0xe0/0xe0 [ 1060.624430][T13137] ? __lock_acquire+0x7eb0/0x7eb0 [ 1060.629476][T13137] should_fail_ex+0x394/0x4c0 [ 1060.634176][T13137] should_failslab+0x9/0x20 [ 1060.638686][T13137] slab_pre_alloc_hook+0x59/0x300 [ 1060.643716][T13137] kmem_cache_alloc+0x5a/0x2c0 [ 1060.648490][T13137] ? security_inode_alloc+0x34/0x110 [ 1060.653784][T13137] security_inode_alloc+0x34/0x110 [ 1060.658905][T13137] inode_init_always+0x914/0xc90 [ 1060.663854][T13137] new_inode_pseudo+0x95/0x1d0 [ 1060.668622][T13137] new_inode+0x22/0x1d0 [ 1060.672782][T13137] ? start_creating+0x1f5/0x310 [ 1060.677639][T13137] __debugfs_create_file+0x147/0x500 [ 1060.682932][T13137] kvm_create_vm_debugfs+0x480/0x980 [ 1060.688224][T13137] ? hardware_enable_all+0x210/0x210 [ 1060.693516][T13137] ? __raw_spin_lock_init+0x45/0x100 [ 1060.698820][T13137] kvm_dev_ioctl+0x1426/0x1810 [ 1060.703593][T13137] ? kvm_resume+0x1e0/0x1e0 [ 1060.708103][T13137] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1060.713040][T13137] ? security_file_ioctl+0x80/0xa0 [ 1060.718155][T13137] ? kvm_resume+0x1e0/0x1e0 [ 1060.722658][T13137] __se_sys_ioctl+0xfd/0x170 [ 1060.727253][T13137] do_syscall_64+0x55/0xb0 [ 1060.731666][T13137] ? clear_bhb_loop+0x40/0x90 [ 1060.736341][T13137] ? clear_bhb_loop+0x40/0x90 [ 1060.741016][T13137] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1060.746913][T13137] RIP: 0033:0x7f0690f9e1d9 [ 1060.751324][T13137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1060.770931][T13137] RSP: 002b:00007f0691e0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1060.779348][T13137] RAX: ffffffffffffffda RBX: 00007f0691225fa0 RCX: 00007f0690f9e1d9 [ 1060.787316][T13137] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 1060.795285][T13137] RBP: 00007f0691035888 R08: 0000000000000000 R09: 0000000000000000 [ 1060.803254][T13137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1060.811224][T13137] R13: 00007f0691226038 R14: 00007f0691225fa0 R15: 00007ffd28ba7798 [ 1060.819207][T13137] [ 1060.852001][T13137] debugfs: out of free dentries, can not create file 'mmu_cache_miss' [ 1060.860528][T13137] FAULT_INJECTION: forcing a failure. [ 1060.860528][T13137] name failslab, interval 1, probability 5, space 0, times 9964 [ 1060.911647][T13137] CPU: 1 PID: 13137 Comm: syz.2.1908 Not tainted syzkaller #0 [ 1060.919158][T13137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1060.929232][T13137] Call Trace: [ 1060.932534][T13137] [ 1060.935480][T13137] dump_stack_lvl+0x18c/0x250 [ 1060.940193][T13137] ? show_regs_print_info+0x20/0x20 [ 1060.945407][T13137] ? load_image+0x420/0x420 [ 1060.949919][T13137] ? __lock_acquire+0x7eb0/0x7eb0 [ 1060.954953][T13137] should_fail_ex+0x394/0x4c0 [ 1060.959642][T13137] should_failslab+0x9/0x20 [ 1060.964151][T13137] slab_pre_alloc_hook+0x59/0x300 [ 1060.969175][T13137] kmem_cache_alloc_lru+0x4d/0x2b0 [ 1060.974292][T13137] ? new_inode_pseudo+0x82/0x1d0 [ 1060.979231][T13137] ? lookup_one_common+0x450/0x450 [ 1060.984346][T13137] new_inode_pseudo+0x82/0x1d0 [ 1060.989113][T13137] new_inode+0x22/0x1d0 [ 1060.993267][T13137] ? start_creating+0x1f5/0x310 [ 1060.998118][T13137] __debugfs_create_file+0x147/0x500 [ 1061.003414][T13137] kvm_create_vm_debugfs+0x480/0x980 [ 1061.008707][T13137] ? hardware_enable_all+0x210/0x210 [ 1061.013996][T13137] ? __raw_spin_lock_init+0x45/0x100 [ 1061.019290][T13137] kvm_dev_ioctl+0x1426/0x1810 [ 1061.024058][T13137] ? kvm_resume+0x1e0/0x1e0 [ 1061.028562][T13137] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1061.033498][T13137] ? security_file_ioctl+0x80/0xa0 [ 1061.038619][T13137] ? kvm_resume+0x1e0/0x1e0 [ 1061.043122][T13137] __se_sys_ioctl+0xfd/0x170 [ 1061.047715][T13137] do_syscall_64+0x55/0xb0 [ 1061.052129][T13137] ? clear_bhb_loop+0x40/0x90 [ 1061.056805][T13137] ? clear_bhb_loop+0x40/0x90 [ 1061.061483][T13137] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1061.067392][T13137] RIP: 0033:0x7f0690f9e1d9 [ 1061.071805][T13137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1061.091411][T13137] RSP: 002b:00007f0691e0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1061.099824][T13137] RAX: ffffffffffffffda RBX: 00007f0691225fa0 RCX: 00007f0690f9e1d9 [ 1061.107797][T13137] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 1061.115766][T13137] RBP: 00007f0691035888 R08: 0000000000000000 R09: 0000000000000000 [ 1061.123733][T13137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1061.131706][T13137] R13: 00007f0691226038 R14: 00007f0691225fa0 R15: 00007ffd28ba7798 [ 1061.139685][T13137] [ 1061.155301][T13137] debugfs: out of free dentries, can not create file 'pages_2m' [ 1061.164839][T13137] FAULT_INJECTION: forcing a failure. [ 1061.164839][T13137] name failslab, interval 1, probability 5, space 0, times 9963 [ 1061.182838][T13137] CPU: 0 PID: 13137 Comm: syz.2.1908 Not tainted syzkaller #0 [ 1061.190330][T13137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1061.200399][T13137] Call Trace: [ 1061.203734][T13137] [ 1061.206677][T13137] dump_stack_lvl+0x18c/0x250 [ 1061.211378][T13137] ? show_regs_print_info+0x20/0x20 [ 1061.216596][T13137] ? load_image+0x420/0x420 [ 1061.221127][T13137] ? __might_sleep+0xe0/0xe0 [ 1061.225742][T13137] ? __lock_acquire+0x7eb0/0x7eb0 [ 1061.230792][T13137] should_fail_ex+0x394/0x4c0 [ 1061.235498][T13137] should_failslab+0x9/0x20 [ 1061.240032][T13137] slab_pre_alloc_hook+0x59/0x300 [ 1061.245082][T13137] kmem_cache_alloc+0x5a/0x2c0 [ 1061.249872][T13137] ? security_inode_alloc+0x34/0x110 [ 1061.256236][T13137] security_inode_alloc+0x34/0x110 [ 1061.261376][T13137] inode_init_always+0x914/0xc90 [ 1061.266342][T13137] new_inode_pseudo+0x95/0x1d0 [ 1061.271127][T13137] new_inode+0x22/0x1d0 [ 1061.275301][T13137] ? start_creating+0x1f5/0x310 [ 1061.280175][T13137] __debugfs_create_file+0x147/0x500 [ 1061.285490][T13137] kvm_create_vm_debugfs+0x480/0x980 [ 1061.290812][T13137] ? hardware_enable_all+0x210/0x210 [ 1061.296124][T13137] ? __raw_spin_lock_init+0x45/0x100 [ 1061.301449][T13137] kvm_dev_ioctl+0x1426/0x1810 [ 1061.306292][T13137] ? kvm_resume+0x1e0/0x1e0 [ 1061.310820][T13137] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1061.315772][T13137] ? security_file_ioctl+0x80/0xa0 [ 1061.320905][T13137] ? kvm_resume+0x1e0/0x1e0 [ 1061.325427][T13137] __se_sys_ioctl+0xfd/0x170 [ 1061.330041][T13137] do_syscall_64+0x55/0xb0 [ 1061.334471][T13137] ? clear_bhb_loop+0x40/0x90 [ 1061.339165][T13137] ? clear_bhb_loop+0x40/0x90 [ 1061.343859][T13137] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1061.349782][T13137] RIP: 0033:0x7f0690f9e1d9 [ 1061.354210][T13137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1061.374004][T13137] RSP: 002b:00007f0691e0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1061.382441][T13137] RAX: ffffffffffffffda RBX: 00007f0691225fa0 RCX: 00007f0690f9e1d9 [ 1061.390431][T13137] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 1061.398419][T13137] RBP: 00007f0691035888 R08: 0000000000000000 R09: 0000000000000000 [ 1061.406407][T13137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1061.414393][T13137] R13: 00007f0691226038 R14: 00007f0691225fa0 R15: 00007ffd28ba7798 [ 1061.422399][T13137] [ 1061.495823][T13137] debugfs: out of free dentries, can not create file 'max_mmu_rmap_size' [ 1061.526370][T13137] FAULT_INJECTION: forcing a failure. [ 1061.526370][T13137] name failslab, interval 1, probability 5, space 0, times 9962 [ 1061.561215][T13137] CPU: 1 PID: 13137 Comm: syz.2.1908 Not tainted syzkaller #0 [ 1061.568727][T13137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1061.578802][T13137] Call Trace: [ 1061.582095][T13137] [ 1061.585036][T13137] dump_stack_lvl+0x18c/0x250 [ 1061.589738][T13137] ? show_regs_print_info+0x20/0x20 [ 1061.594954][T13137] ? load_image+0x420/0x420 [ 1061.599483][T13137] ? __might_sleep+0xe0/0xe0 [ 1061.604094][T13137] ? __lock_acquire+0x7eb0/0x7eb0 [ 1061.609140][T13137] ? __debugfs_create_file+0x45d/0x500 [ 1061.614629][T13137] should_fail_ex+0x394/0x4c0 [ 1061.619336][T13137] should_failslab+0x9/0x20 [ 1061.623860][T13137] slab_pre_alloc_hook+0x59/0x300 [ 1061.628902][T13137] ? kvm_create_vm_debugfs+0x5af/0x980 [ 1061.634383][T13137] __kmem_cache_alloc_node+0x53/0x250 [ 1061.639804][T13137] ? kvm_create_vm_debugfs+0x5af/0x980 [ 1061.645285][T13137] kmalloc_trace+0x2a/0xe0 [ 1061.649726][T13137] kvm_create_vm_debugfs+0x5af/0x980 [ 1061.655038][T13137] ? hardware_enable_all+0x210/0x210 [ 1061.660345][T13137] ? __raw_spin_lock_init+0x45/0x100 [ 1061.665659][T13137] kvm_dev_ioctl+0x1426/0x1810 [ 1061.670467][T13137] ? kvm_resume+0x1e0/0x1e0 [ 1061.675041][T13137] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1061.679993][T13137] ? security_file_ioctl+0x80/0xa0 [ 1061.685125][T13137] ? kvm_resume+0x1e0/0x1e0 [ 1061.689684][T13137] __se_sys_ioctl+0xfd/0x170 [ 1061.694311][T13137] do_syscall_64+0x55/0xb0 [ 1061.698763][T13137] ? clear_bhb_loop+0x40/0x90 [ 1061.703462][T13137] ? clear_bhb_loop+0x40/0x90 [ 1061.708158][T13137] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1061.714074][T13137] RIP: 0033:0x7f0690f9e1d9 [ 1061.718507][T13137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1061.738131][T13137] RSP: 002b:00007f0691e0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1061.746570][T13137] RAX: ffffffffffffffda RBX: 00007f0691225fa0 RCX: 00007f0690f9e1d9 [ 1061.754567][T13137] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 1061.762552][T13137] RBP: 00007f0691035888 R08: 0000000000000000 R09: 0000000000000000 [ 1061.770541][T13137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1061.778529][T13137] R13: 00007f0691226038 R14: 00007f0691225fa0 R15: 00007ffd28ba7798 [ 1061.786537][T13137] [ 1063.648748][T13166] loop2: detected capacity change from 0 to 2048 [ 1063.989836][T13166] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1064.283854][ T5139] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1064.308450][T13166] ext4 filesystem being mounted at /463/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1064.349108][ T5139] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1064.398646][ T5139] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1064.410515][ T5139] loop0: [ 1065.974667][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1067.101977][T13194] program syz.1.1922 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1068.112605][T13207] FAULT_INJECTION: forcing a failure. [ 1068.112605][T13207] name failslab, interval 1, probability 5, space 0, times 9961 [ 1068.181613][T13207] CPU: 0 PID: 13207 Comm: syz.2.1925 Not tainted syzkaller #0 [ 1068.189131][T13207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1068.199186][T13207] Call Trace: [ 1068.202468][T13207] [ 1068.205426][T13207] dump_stack_lvl+0x18c/0x250 [ 1068.210103][T13207] ? show_regs_print_info+0x20/0x20 [ 1068.215314][T13207] ? load_image+0x420/0x420 [ 1068.219812][T13207] ? __lock_acquire+0x7eb0/0x7eb0 [ 1068.224827][T13207] ? __lock_acquire+0x135d/0x7eb0 [ 1068.229849][T13207] should_fail_ex+0x394/0x4c0 [ 1068.234546][T13207] should_failslab+0x9/0x20 [ 1068.239085][T13207] slab_pre_alloc_hook+0x59/0x300 [ 1068.244129][T13207] kmem_cache_alloc_lru+0x4d/0x2b0 [ 1068.249243][T13207] ? __d_alloc+0x31/0x710 [ 1068.253571][T13207] __d_alloc+0x31/0x710 [ 1068.257745][T13207] d_alloc_parallel+0xe0/0x1590 [ 1068.262585][T13207] ? verify_lock_unused+0x140/0x140 [ 1068.267776][T13207] ? verify_lock_unused+0x140/0x140 [ 1068.272985][T13207] ? lockdep_softirqs_off+0x440/0x440 [ 1068.278349][T13207] ? lockdep_softirqs_off+0x440/0x440 [ 1068.283714][T13207] ? d_hash_and_lookup+0x1b0/0x1b0 [ 1068.288820][T13207] ? __init_waitqueue_head+0xa8/0x140 [ 1068.294183][T13207] __lookup_slow+0x138/0x400 [ 1068.298763][T13207] ? lookup_one_len+0x2e0/0x2e0 [ 1068.303630][T13207] ? down_read+0x1ac/0x2e0 [ 1068.308037][T13207] lookup_one_unlocked+0x188/0x2a0 [ 1068.313134][T13207] ? kvm_create_vm_debugfs+0x132/0x980 [ 1068.318578][T13207] ? lookup_one+0x2d0/0x2d0 [ 1068.323070][T13207] ? vscnprintf+0x80/0x80 [ 1068.327391][T13207] lookup_positive_unlocked+0x2b/0xb0 [ 1068.332777][T13207] debugfs_lookup+0x9c/0xb0 [ 1068.337270][T13207] kvm_create_vm_debugfs+0x141/0x980 [ 1068.342542][T13207] ? lockdep_softirqs_off+0x440/0x440 [ 1068.347904][T13207] ? zone_statistics+0x170/0x170 [ 1068.352830][T13207] ? hardware_enable_all+0x210/0x210 [ 1068.358101][T13207] ? __raw_spin_lock_init+0x45/0x100 [ 1068.363377][T13207] kvm_dev_ioctl+0x1426/0x1810 [ 1068.368154][T13207] ? kvm_resume+0x1e0/0x1e0 [ 1068.372652][T13207] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1068.377593][T13207] ? security_file_ioctl+0x80/0xa0 [ 1068.382703][T13207] ? kvm_resume+0x1e0/0x1e0 [ 1068.387195][T13207] __se_sys_ioctl+0xfd/0x170 [ 1068.391795][T13207] do_syscall_64+0x55/0xb0 [ 1068.396197][T13207] ? clear_bhb_loop+0x40/0x90 [ 1068.400856][T13207] ? clear_bhb_loop+0x40/0x90 [ 1068.405515][T13207] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1068.411400][T13207] RIP: 0033:0x7f0690f9e1d9 [ 1068.415802][T13207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1068.435400][T13207] RSP: 002b:00007f0691e0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1068.443801][T13207] RAX: ffffffffffffffda RBX: 00007f0691225fa0 RCX: 00007f0690f9e1d9 [ 1068.451761][T13207] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 1068.459715][T13207] RBP: 00007f0691035888 R08: 0000000000000000 R09: 0000000000000000 [ 1068.467692][T13207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1068.475650][T13207] R13: 00007f0691226038 R14: 00007f0691225fa0 R15: 00007ffd28ba7798 [ 1068.483617][T13207] [ 1068.541766][T13207] FAULT_INJECTION: forcing a failure. [ 1068.541766][T13207] name failslab, interval 1, probability 5, space 0, times 9960 [ 1068.592342][T13207] CPU: 1 PID: 13207 Comm: syz.2.1925 Not tainted syzkaller #0 [ 1068.599856][T13207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1068.609929][T13207] Call Trace: [ 1068.613229][T13207] [ 1068.616193][T13207] dump_stack_lvl+0x18c/0x250 [ 1068.620906][T13207] ? show_regs_print_info+0x20/0x20 [ 1068.626130][T13207] ? load_image+0x420/0x420 [ 1068.630676][T13207] ? __lock_acquire+0x7eb0/0x7eb0 [ 1068.635755][T13207] ? __lock_acquire+0x135d/0x7eb0 [ 1068.640787][T13207] should_fail_ex+0x394/0x4c0 [ 1068.645475][T13207] should_failslab+0x9/0x20 [ 1068.650012][T13207] slab_pre_alloc_hook+0x59/0x300 [ 1068.655041][T13207] kmem_cache_alloc_lru+0x4d/0x2b0 [ 1068.660181][T13207] ? __d_alloc+0x31/0x710 [ 1068.664524][T13207] __d_alloc+0x31/0x710 [ 1068.668689][T13207] d_alloc_parallel+0xe0/0x1590 [ 1068.673534][T13207] ? lockdep_softirqs_off+0x440/0x440 [ 1068.678910][T13207] ? lockdep_softirqs_off+0x440/0x440 [ 1068.684292][T13207] ? d_hash_and_lookup+0x1b0/0x1b0 [ 1068.689395][T13207] ? __init_waitqueue_head+0xa8/0x140 [ 1068.694755][T13207] __lookup_slow+0x138/0x400 [ 1068.699352][T13207] ? lookup_one_len+0x2e0/0x2e0 [ 1068.704234][T13207] lookup_one_len+0x1a1/0x2e0 [ 1068.708902][T13207] ? lookup_one_common+0x450/0x450 [ 1068.714006][T13207] start_creating+0x184/0x310 [ 1068.718671][T13207] debugfs_create_dir+0x25/0x4b0 [ 1068.723600][T13207] kvm_create_vm_debugfs+0x1fe/0x980 [ 1068.728874][T13207] ? lockdep_softirqs_off+0x440/0x440 [ 1068.734234][T13207] ? zone_statistics+0x170/0x170 [ 1068.739163][T13207] ? hardware_enable_all+0x210/0x210 [ 1068.744439][T13207] ? __raw_spin_lock_init+0x45/0x100 [ 1068.749718][T13207] kvm_dev_ioctl+0x1426/0x1810 [ 1068.754475][T13207] ? kvm_resume+0x1e0/0x1e0 [ 1068.758982][T13207] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1068.763916][T13207] ? security_file_ioctl+0x80/0xa0 [ 1068.769034][T13207] ? kvm_resume+0x1e0/0x1e0 [ 1068.773528][T13207] __se_sys_ioctl+0xfd/0x170 [ 1068.778115][T13207] do_syscall_64+0x55/0xb0 [ 1068.782556][T13207] ? clear_bhb_loop+0x40/0x90 [ 1068.787222][T13207] ? clear_bhb_loop+0x40/0x90 [ 1068.791902][T13207] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1068.797801][T13207] RIP: 0033:0x7f0690f9e1d9 [ 1068.802231][T13207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1068.821843][T13207] RSP: 002b:00007f0691e0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1068.830242][T13207] RAX: ffffffffffffffda RBX: 00007f0691225fa0 RCX: 00007f0690f9e1d9 [ 1068.838209][T13207] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 1068.846172][T13207] RBP: 00007f0691035888 R08: 0000000000000000 R09: 0000000000000000 [ 1068.854132][T13207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1068.862094][T13207] R13: 00007f0691226038 R14: 00007f0691225fa0 R15: 00007ffd28ba7798 [ 1068.870066][T13207] [ 1069.073550][ T5139] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1069.091599][ T5139] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1069.103219][ T5139] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1069.109903][ T5139] loop0: [ 1069.234536][ T51] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 1069.554991][T13226] loop4: detected capacity change from 0 to 2048 [ 1070.273398][ T5826] logitech-hidpp-device 0005:046D:B012.0004: item fetching failed at offset 3/4 [ 1070.312675][ T5826] logitech-hidpp-device 0005:046D:B012.0004: hidpp_probe:parse failed [ 1070.341684][ T5826] logitech-hidpp-device: probe of 0005:046D:B012.0004 failed with error -22 [ 1070.343755][T13226] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1071.714869][T13226] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1072.922718][T11801] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1076.795572][T13272] program syz.2.1934 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1078.741736][ T51] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 1084.773451][T13326] loop1: detected capacity change from 0 to 2048 [ 1084.902878][T13326] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1084.981694][T13326] ext4 filesystem being mounted at /487/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1085.231348][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1085.521884][ T51] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 1087.900282][ T5821] logitech-hidpp-device 0005:046D:B012.0005: item fetching failed at offset 3/4 [ 1087.955215][ T5821] logitech-hidpp-device 0005:046D:B012.0005: hidpp_probe:parse failed [ 1087.988011][ T5821] logitech-hidpp-device: probe of 0005:046D:B012.0005 failed with error -22 [ 1089.326492][T13356] program syz.2.1954 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1094.682276][ T51] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 1097.841675][T13406] program syz.1.1973 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1102.279394][ T9587] logitech-hidpp-device 0005:046D:B012.0006: item fetching failed at offset 3/4 [ 1102.320185][ T9587] logitech-hidpp-device 0005:046D:B012.0006: hidpp_probe:parse failed [ 1102.339645][ T9587] logitech-hidpp-device: probe of 0005:046D:B012.0006 failed with error -22 [ 1103.156517][T13439] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 1104.091880][ T28] audit: type=1800 audit(1791864981.246:18): pid=13445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1981" name="c_chmask" dev="configfs" ino=30672 res=0 errno=0 [ 1104.355562][ T51] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 1105.202446][T13449] program syz.2.1982 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1105.889547][T13460] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1985'. [ 1106.190932][ T23] logitech-hidpp-device 0005:046D:B012.0007: item fetching failed at offset 3/4 [ 1106.276179][ T23] logitech-hidpp-device 0005:046D:B012.0007: hidpp_probe:parse failed [ 1106.359701][ T23] logitech-hidpp-device: probe of 0005:046D:B012.0007 failed with error -22 [ 1111.186360][T13485] program syz.4.1992 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1112.881781][T13492] FAULT_INJECTION: forcing a failure. [ 1112.881781][T13492] name failslab, interval 1, probability 5, space 0, times 9959 [ 1112.958390][T13492] CPU: 0 PID: 13492 Comm: syz.1.1990 Not tainted syzkaller #0 [ 1112.965923][T13492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1112.975982][T13492] Call Trace: [ 1112.979260][T13492] [ 1112.982192][T13492] dump_stack_lvl+0x18c/0x250 [ 1112.986878][T13492] ? show_regs_print_info+0x20/0x20 [ 1112.992079][T13492] ? load_image+0x420/0x420 [ 1112.996590][T13492] ? __might_sleep+0xe0/0xe0 [ 1113.001189][T13492] ? __lock_acquire+0x7eb0/0x7eb0 [ 1113.006220][T13492] should_fail_ex+0x394/0x4c0 [ 1113.010905][T13492] should_failslab+0x9/0x20 [ 1113.015412][T13492] slab_pre_alloc_hook+0x59/0x300 [ 1113.020436][T13492] ? find_vma_prev+0x119/0x190 [ 1113.025205][T13492] kmem_cache_alloc+0x5a/0x2c0 [ 1113.029970][T13492] ? __khugepaged_enter+0xae/0x2d0 [ 1113.035102][T13492] __khugepaged_enter+0xae/0x2d0 [ 1113.040045][T13492] hugepage_madvise+0x17b/0x1b0 [ 1113.044900][T13492] do_madvise+0xd36/0x3790 [ 1113.049331][T13492] ? madvise_set_anon_name+0x440/0x440 [ 1113.054792][T13492] ? schedule+0xc7/0x170 [ 1113.059030][T13492] ? futex_wait_queue+0x27/0x1b0 [ 1113.063969][T13492] ? futex_wait_queue+0x138/0x1b0 [ 1113.068992][T13492] ? futex_unqueue+0xcb/0xf0 [ 1113.073580][T13492] ? futex_wait+0x4a7/0x5c0 [ 1113.078088][T13492] ? futex_wait_setup+0x270/0x270 [ 1113.083129][T13492] ? file_end_write+0x159/0x250 [ 1113.087989][T13492] ? vfs_write+0x5de/0x9a0 [ 1113.092408][T13492] ? do_futex+0x2ff/0x3e0 [ 1113.096746][T13492] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1113.102657][T13492] ? lock_chain_count+0x20/0x20 [ 1113.107513][T13492] __x64_sys_madvise+0xa6/0xc0 [ 1113.112300][T13492] do_syscall_64+0x55/0xb0 [ 1113.116717][T13492] ? clear_bhb_loop+0x40/0x90 [ 1113.121390][T13492] ? clear_bhb_loop+0x40/0x90 [ 1113.126064][T13492] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1113.131962][T13492] RIP: 0033:0x7f20d999e1d9 [ 1113.136380][T13492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1113.155984][T13492] RSP: 002b:00007f20da8d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1113.164397][T13492] RAX: ffffffffffffffda RBX: 00007f20d9c25fa0 RCX: 00007f20d999e1d9 [ 1113.172365][T13492] RDX: 000000000000000e RSI: 0000000000400000 RDI: 0000200000c00000 [ 1113.180334][T13492] RBP: 00007f20d9a35888 R08: 0000000000000000 R09: 0000000000000000 [ 1113.188300][T13492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1113.196265][T13492] R13: 00007f20d9c26038 R14: 00007f20d9c25fa0 R15: 00007fffb85a5118 [ 1113.204246][T13492] [ 1113.363499][ T51] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 1113.379956][T13492] FAULT_INJECTION: forcing a failure. [ 1113.379956][T13492] name failslab, interval 1, probability 5, space 0, times 9957 [ 1113.468242][T13492] CPU: 0 PID: 13492 Comm: syz.1.1990 Not tainted syzkaller #0 [ 1113.475769][T13492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1113.485828][T13492] Call Trace: [ 1113.489112][T13492] [ 1113.492053][T13492] dump_stack_lvl+0x18c/0x250 [ 1113.496767][T13492] ? show_regs_print_info+0x20/0x20 [ 1113.501991][T13492] ? load_image+0x420/0x420 [ 1113.506532][T13492] ? __might_sleep+0xe0/0xe0 [ 1113.511152][T13492] ? __lock_acquire+0x7eb0/0x7eb0 [ 1113.516209][T13492] should_fail_ex+0x394/0x4c0 [ 1113.520922][T13492] should_failslab+0x9/0x20 [ 1113.525452][T13492] slab_pre_alloc_hook+0x59/0x300 [ 1113.530500][T13492] ? kvm_create_vm_debugfs+0x32e/0x980 [ 1113.535989][T13492] __kmem_cache_alloc_node+0x53/0x250 [ 1113.541393][T13492] ? kvm_create_vm_debugfs+0x32e/0x980 [ 1113.546881][T13492] kmalloc_trace+0x2a/0xe0 [ 1113.551337][T13492] kvm_create_vm_debugfs+0x32e/0x980 [ 1113.556664][T13492] ? hardware_enable_all+0x210/0x210 [ 1113.561980][T13492] ? __raw_spin_lock_init+0x45/0x100 [ 1113.567299][T13492] kvm_dev_ioctl+0x1426/0x1810 [ 1113.572108][T13492] ? kvm_resume+0x1e0/0x1e0 [ 1113.576646][T13492] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1113.578267][T13503] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 1113.581589][T13492] ? security_file_ioctl+0x80/0xa0 [ 1113.581624][T13492] ? kvm_resume+0x1e0/0x1e0 [ 1113.581650][T13492] __se_sys_ioctl+0xfd/0x170 [ 1113.581679][T13492] do_syscall_64+0x55/0xb0 [ 1113.606966][T13492] ? clear_bhb_loop+0x40/0x90 [ 1113.611635][T13492] ? clear_bhb_loop+0x40/0x90 [ 1113.616311][T13492] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1113.622204][T13492] RIP: 0033:0x7f20d999e1d9 [ 1113.626614][T13492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1113.646207][T13492] RSP: 002b:00007f20da8d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1113.654611][T13492] RAX: ffffffffffffffda RBX: 00007f20d9c25fa0 RCX: 00007f20d999e1d9 [ 1113.662589][T13492] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 1113.670552][T13492] RBP: 00007f20d9a35888 R08: 0000000000000000 R09: 0000000000000000 [ 1113.678531][T13492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1113.686504][T13492] R13: 00007f20d9c26038 R14: 00007f20d9c25fa0 R15: 00007fffb85a5118 [ 1113.694476][T13492] [ 1113.939014][ T28] audit: type=1800 audit(1791864991.736:19): pid=13507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1993" name="c_chmask" dev="configfs" ino=31192 res=0 errno=0 [ 1114.588042][T13509] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1996'. [ 1116.001656][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.008117][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.060373][ T51] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 1116.989981][T13532] program syz.2.2002 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1121.919008][ T51] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 1123.803882][T13558] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 1124.418600][ T28] audit: type=1800 audit(1791865001.946:20): pid=13564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2004" name="c_chmask" dev="configfs" ino=31274 res=0 errno=0 [ 1124.779147][ T51] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 1126.738289][T13567] program syz.2.2012 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1128.740571][T10074] logitech-hidpp-device 0005:046D:B012.0008: item fetching failed at offset 3/4 [ 1128.817921][T10074] logitech-hidpp-device 0005:046D:B012.0008: hidpp_probe:parse failed [ 1128.905196][T10074] logitech-hidpp-device: probe of 0005:046D:B012.0008 failed with error -22 [ 1129.291585][T13597] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 1129.707771][ T28] audit: type=1800 audit(1791865007.496:21): pid=13603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2020" name="c_chmask" dev="configfs" ino=31858 res=0 errno=0 [ 1129.823211][ T51] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 1134.235439][T13618] program syz.2.2024 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1134.929632][ T51] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 1134.965373][T10074] logitech-hidpp-device 0005:046D:B012.0009: item fetching failed at offset 3/4 [ 1135.141047][T10074] logitech-hidpp-device 0005:046D:B012.0009: hidpp_probe:parse failed [ 1135.160956][T10074] logitech-hidpp-device: probe of 0005:046D:B012.0009 failed with error -22 [ 1137.245946][T13643] program syz.3.2030 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1137.658936][T10074] logitech-hidpp-device 0005:046D:B012.000A: item fetching failed at offset 3/4 [ 1137.897891][T10074] logitech-hidpp-device 0005:046D:B012.000A: hidpp_probe:parse failed [ 1137.998509][T10074] logitech-hidpp-device: probe of 0005:046D:B012.000A failed with error -22 [ 1139.556871][ T51] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 1141.395721][ T5821] logitech-hidpp-device 0005:046D:B012.000B: item fetching failed at offset 3/4 [ 1141.512206][ T5821] logitech-hidpp-device 0005:046D:B012.000B: hidpp_probe:parse failed [ 1141.520469][ T5821] logitech-hidpp-device: probe of 0005:046D:B012.000B failed with error -22 [ 1143.662356][T13677] program syz.4.2037 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1143.730916][ T51] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 1144.756384][ T5821] logitech-hidpp-device 0005:046D:B012.000C: item fetching failed at offset 3/4 [ 1144.842272][ T5821] logitech-hidpp-device 0005:046D:B012.000C: hidpp_probe:parse failed [ 1144.861489][ T5821] logitech-hidpp-device: probe of 0005:046D:B012.000C failed with error -22 [ 1146.773584][T13700] program syz.4.2041 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1147.660019][ T51] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 1149.289298][T13708] FAULT_INJECTION: forcing a failure. [ 1149.289298][T13708] name failslab, interval 1, probability 5, space 0, times 9955 [ 1149.451792][T13708] CPU: 1 PID: 13708 Comm: syz.1.2046 Not tainted syzkaller #0 [ 1149.459314][T13708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1149.469391][T13708] Call Trace: [ 1149.472686][T13708] [ 1149.475678][T13708] dump_stack_lvl+0x18c/0x250 [ 1149.480356][T13708] ? show_regs_print_info+0x20/0x20 [ 1149.485543][T13708] ? load_image+0x420/0x420 [ 1149.490038][T13708] ? __might_sleep+0xe0/0xe0 [ 1149.494625][T13708] ? __lock_acquire+0x7eb0/0x7eb0 [ 1149.499641][T13708] should_fail_ex+0x394/0x4c0 [ 1149.504313][T13708] should_failslab+0x9/0x20 [ 1149.508841][T13708] slab_pre_alloc_hook+0x59/0x300 [ 1149.513880][T13708] ? init_srcu_struct_fields+0x7c/0xa40 [ 1149.519451][T13708] __kmem_cache_alloc_node+0x53/0x250 [ 1149.524848][T13708] ? init_srcu_struct_fields+0x7c/0xa40 [ 1149.530405][T13708] kmalloc_trace+0x2a/0xe0 [ 1149.534833][T13708] init_srcu_struct_fields+0x7c/0xa40 [ 1149.540220][T13708] kvm_dev_ioctl+0x5c6/0x1810 [ 1149.544905][T13708] ? kvm_resume+0x1e0/0x1e0 [ 1149.549412][T13708] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1149.554354][T13708] ? security_file_ioctl+0x80/0xa0 [ 1149.559510][T13708] ? kvm_resume+0x1e0/0x1e0 [ 1149.564019][T13708] __se_sys_ioctl+0xfd/0x170 [ 1149.568638][T13708] do_syscall_64+0x55/0xb0 [ 1149.573055][T13708] ? clear_bhb_loop+0x40/0x90 [ 1149.577741][T13708] ? clear_bhb_loop+0x40/0x90 [ 1149.582422][T13708] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1149.588323][T13708] RIP: 0033:0x7f20d999e1d9 [ 1149.592739][T13708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1149.612346][T13708] RSP: 002b:00007f20da8d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1149.620760][T13708] RAX: ffffffffffffffda RBX: 00007f20d9c25fa0 RCX: 00007f20d999e1d9 [ 1149.628761][T13708] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 1149.636730][T13708] RBP: 00007f20d9a35888 R08: 0000000000000000 R09: 0000000000000000 [ 1149.644704][T13708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1149.652672][T13708] R13: 00007f20d9c26038 R14: 00007f20d9c25fa0 R15: 00007fffb85a5118 [ 1149.660659][T13708] [ 1152.857462][T13725] program syz.2.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1155.667103][T13740] program syz.3.2053 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1158.632143][ T5139] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1158.641412][ T5139] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1158.697153][ T5139] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1158.721753][ T5139] loop0: [ 1158.844309][ T51] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 1161.468113][T13771] program syz.2.2058 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1161.674232][ T51] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 1165.879637][T13792] program syz.4.2062 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1171.398193][ T51] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 1171.426991][T13816] program syz.1.2067 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1171.530194][ T51] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 1172.293931][ T5139] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1172.408352][ T5139] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1172.540311][ T5139] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1172.653973][ T5139] loop0: [ 1173.340894][ T9587] logitech-hidpp-device 0005:046D:B012.000D: item fetching failed at offset 3/4 [ 1173.536722][ T9587] logitech-hidpp-device 0005:046D:B012.000D: hidpp_probe:parse failed [ 1173.761733][ T9587] logitech-hidpp-device: probe of 0005:046D:B012.000D failed with error -22 [ 1174.242136][T13836] program syz.4.2073 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1178.065461][T13846] program syz.3.2078 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1178.076163][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.083063][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.690651][ T51] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 1178.871884][ T5139] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1178.931706][ T5139] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1178.967828][ T5139] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1179.021812][ T5139] loop0: [ 1180.226817][ T5820] logitech-hidpp-device 0005:046D:B012.000E: item fetching failed at offset 3/4 [ 1180.555434][ T5820] logitech-hidpp-device 0005:046D:B012.000E: hidpp_probe:parse failed [ 1180.569903][ T5820] logitech-hidpp-device: probe of 0005:046D:B012.000E failed with error -22 [ 1181.765802][ T5821] logitech-hidpp-device 0005:046D:B012.000F: item fetching failed at offset 3/4 [ 1181.878576][ T5821] logitech-hidpp-device 0005:046D:B012.000F: hidpp_probe:parse failed [ 1181.960900][ T5821] logitech-hidpp-device: probe of 0005:046D:B012.000F failed with error -22 [ 1182.697599][T13884] program syz.1.2084 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1183.427039][ T51] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 1186.866997][ T51] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 1187.995407][T13924] program syz.2.2095 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1188.502264][T13899] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1189.953059][ T51] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 1191.139932][T13932] program syz.1.2087 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1194.511373][T13961] program syz.4.2105 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1198.171852][T13967] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1199.301200][ T51] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 1200.716865][ T5139] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1200.787710][ T5139] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1200.808720][ T5139] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1200.821644][ T5139] loop0: [ 1201.673667][T14005] program syz.2.2115 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1204.317890][T14016] program syz.1.2109 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1207.206922][ T5139] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1207.232482][ T5139] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1207.239726][ T5139] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1207.266533][ T5139] loop0: [ 1209.840772][T14057] program syz.4.2125 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1210.416757][T14040] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1211.109416][ T5853] logitech-hidpp-device 0005:046D:B012.0010: item fetching failed at offset 3/4 [ 1211.124924][ T5853] logitech-hidpp-device 0005:046D:B012.0010: hidpp_probe:parse failed [ 1211.133948][ T5853] logitech-hidpp-device: probe of 0005:046D:B012.0010 failed with error -22 [ 1211.778926][ T51] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 1214.197111][T14082] program syz.4.2127 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1214.962661][ T5139] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1215.000588][ T5139] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1215.026768][ T5139] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1215.046691][ T5139] loop0: [ 1217.818239][ T5820] logitech-hidpp-device 0005:046D:B012.0011: item fetching failed at offset 3/4 [ 1217.978119][ T5820] logitech-hidpp-device 0005:046D:B012.0011: hidpp_probe:parse failed [ 1218.128507][ T5820] logitech-hidpp-device: probe of 0005:046D:B012.0011 failed with error -22 [ 1220.519397][ T5139] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1220.554936][ T5139] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1220.587306][ T5139] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1220.612885][ T5139] loop0: [ 1221.677876][T14123] program syz.4.2135 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1222.550999][ T51] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 1224.031018][T14133] program syz.4.2143 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1224.056160][T14112] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1225.045746][ T5820] logitech-hidpp-device 0005:046D:B012.0012: item fetching failed at offset 3/4 [ 1225.055733][ T5820] logitech-hidpp-device 0005:046D:B012.0012: hidpp_probe:parse failed [ 1225.064021][ T5820] logitech-hidpp-device: probe of 0005:046D:B012.0012 failed with error -22 [ 1227.521839][T14161] program syz.3.2151 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1228.816713][T14168] program syz.1.2153 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1231.125233][ T5139] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1231.151579][ T5139] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1231.171661][ T5139] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1231.178338][ T5139] loop0: [ 1232.013594][ T51] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 1234.267256][ T5820] logitech-hidpp-device 0005:046D:B012.0013: item fetching failed at offset 3/4 [ 1234.280521][ T5820] logitech-hidpp-device 0005:046D:B012.0013: hidpp_probe:parse failed [ 1234.332706][ T5820] logitech-hidpp-device: probe of 0005:046D:B012.0013 failed with error -22 [ 1236.362522][T14212] program syz.3.2163 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1238.885116][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.891484][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.466880][T14227] program syz.4.2162 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1240.561061][T12047] logitech-hidpp-device 0005:046D:B012.0014: item fetching failed at offset 3/4 [ 1240.694531][T12047] logitech-hidpp-device 0005:046D:B012.0014: hidpp_probe:parse failed [ 1240.811176][T12047] logitech-hidpp-device: probe of 0005:046D:B012.0014 failed with error -22 [ 1241.299777][T14235] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 1241.520246][ T28] audit: type=1800 audit(1791865119.336:22): pid=14235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2169" name="c_chmask" dev="configfs" ino=32733 res=0 errno=0 [ 1241.739940][ T5139] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1241.807768][ T5139] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1241.871921][ T5139] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1241.909144][ T5139] loop0: [ 1242.344086][ T51] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 1244.238254][T14265] program syz.1.2173 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1244.943569][T14273] program syz.3.2176 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1247.236907][T12047] logitech-hidpp-device 0005:046D:B012.0015: item fetching failed at offset 3/4 [ 1247.364292][T12047] logitech-hidpp-device 0005:046D:B012.0015: hidpp_probe:parse failed [ 1247.459809][T12047] logitech-hidpp-device: probe of 0005:046D:B012.0015 failed with error -22 [ 1249.584820][ T5139] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1249.592628][T14301] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 1249.620386][ T5139] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1249.628078][ T5139] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1249.636247][ T5139] loop0: [ 1249.728489][ T28] audit: type=1800 audit(1791865127.536:23): pid=14308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2179" name="c_chmask" dev="configfs" ino=33305 res=0 errno=0 [ 1250.738627][T14315] program syz.2.2185 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1251.029573][ T51] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 1251.779396][T14323] program syz.3.2187 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1252.545114][T14300] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1252.895650][T12047] logitech-hidpp-device 0005:046D:B012.0016: item fetching failed at offset 3/4 [ 1253.124970][T12047] logitech-hidpp-device 0005:046D:B012.0016: hidpp_probe:parse failed [ 1253.161709][T12047] logitech-hidpp-device: probe of 0005:046D:B012.0016 failed with error -22 [ 1255.022523][T14348] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 1255.057561][T10074] logitech-hidpp-device 0005:046D:B012.0017: item fetching failed at offset 3/4 [ 1255.058998][ T5139] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1255.082795][T10074] logitech-hidpp-device 0005:046D:B012.0017: hidpp_probe:parse failed [ 1255.091042][T10074] logitech-hidpp-device: probe of 0005:046D:B012.0017 failed with error -22 [ 1255.139348][ T5139] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1255.162535][ T5139] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1255.190390][ T5139] loop0: [ 1255.391813][ T28] audit: type=1800 audit(1791865133.076:24): pid=14350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2195" name="c_chmask" dev="configfs" ino=33362 res=0 errno=0 [ 1256.656018][T14353] program syz.2.2196 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1257.975923][T14358] program syz.1.2197 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1261.152130][ T51] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 1261.859487][ T23] logitech-hidpp-device 0005:046D:B012.0018: item fetching failed at offset 3/4 [ 1262.187478][ T23] logitech-hidpp-device 0005:046D:B012.0018: hidpp_probe:parse failed [ 1262.196269][ T23] logitech-hidpp-device: probe of 0005:046D:B012.0018 failed with error -22 [ 1262.724451][ T5139] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1262.738188][ T5139] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1262.745788][ T5139] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1263.447757][ T5139] loop0: [ 1263.540780][T14397] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 1263.676479][ T28] audit: type=1800 audit(1791865141.496:25): pid=14402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2205" name="c_chmask" dev="configfs" ino=33415 res=0 errno=0 [ 1265.256328][T14407] program syz.3.2207 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1265.967673][T14382] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1268.469509][ T51] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 1269.510232][ T5139] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1269.565786][ T5139] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1269.573139][ T5139] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1269.579792][ T5139] loop0: [ 1269.863905][T14438] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 1270.281025][ T28] audit: type=1800 audit(1791865148.096:26): pid=14441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2216" name="c_chmask" dev="configfs" ino=33937 res=0 errno=0 [ 1270.876582][T14445] program syz.2.2217 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1271.737967][ T5821] logitech-hidpp-device 0005:046D:B012.0019: item fetching failed at offset 3/4 [ 1272.084992][ T5821] logitech-hidpp-device 0005:046D:B012.0019: hidpp_probe:parse failed [ 1272.116124][ T5821] logitech-hidpp-device: probe of 0005:046D:B012.0019 failed with error -22 [ 1272.342231][T14453] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2219'. [ 1275.986055][T14455] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1276.435472][ T5139] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1276.452040][ T5139] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1276.459274][ T5139] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1276.503002][ T5139] loop0: [ 1276.666048][ T51] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 1276.876779][ T1749] logitech-hidpp-device 0005:046D:B012.001A: item fetching failed at offset 3/4 [ 1276.903534][ T1749] logitech-hidpp-device 0005:046D:B012.001A: hidpp_probe:parse failed [ 1276.926775][ T1749] logitech-hidpp-device: probe of 0005:046D:B012.001A failed with error -22 [ 1277.520380][T14486] program syz.1.2226 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1278.520339][T14490] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2228'. [ 1279.463787][ T5821] logitech-hidpp-device 0005:046D:B012.001B: item fetching failed at offset 3/4 [ 1279.474614][ T5821] logitech-hidpp-device 0005:046D:B012.001B: hidpp_probe:parse failed [ 1279.489379][ T5821] logitech-hidpp-device: probe of 0005:046D:B012.001B failed with error -22 [ 1282.348630][T14519] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 1283.021338][ T28] audit: type=1800 audit(1791865160.836:27): pid=14522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2234" name="c_chmask" dev="configfs" ino=34049 res=0 errno=0 [ 1283.048743][ T5139] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1283.060354][ T5139] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1283.070052][ T5139] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1283.077519][ T5139] loop0: [ 1283.665838][T14529] program syz.1.2235 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1284.484895][T14510] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1284.672442][ T5821] logitech-hidpp-device 0005:046D:B012.001C: item fetching failed at offset 3/4 [ 1284.749935][ T5821] logitech-hidpp-device 0005:046D:B012.001C: hidpp_probe:parse failed [ 1284.817851][ T5821] logitech-hidpp-device: probe of 0005:046D:B012.001C failed with error -22 [ 1284.959396][ T51] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 1285.792698][T14541] program syz.3.2239 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1286.863287][T14548] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2237'. [ 1287.732805][T14558] program syz.4.2245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1288.373076][ T5139] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1288.392022][ T5139] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1288.474122][ T5139] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1288.480838][ T5139] loop0: [ 1289.795862][ T51] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 1289.809578][T14582] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 1290.060882][ T28] audit: type=1800 audit(1791865167.876:28): pid=14585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2250" name="c_chmask" dev="configfs" ino=33600 res=0 errno=0 [ 1290.728707][T14588] program syz.4.2248 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1291.458991][T14563] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1292.649676][T14600] program syz.2.2256 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1293.427059][ T5139] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1293.461894][ T5139] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1293.469144][ T5139] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1293.494718][ T5139] loop0: [ 1294.058991][T14613] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2252'. [ 1295.036263][T14618] program syz.1.2260 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1296.694515][T14631] program syz.4.2265 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1297.928912][T11116] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1297.938830][T11116] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1297.948053][T11116] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1297.964023][T11116] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1297.971799][T11116] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1297.979352][T11116] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1298.231058][T10074] ------------[ cut here ]------------ [ 1298.237384][T10074] sysfs group 'byte_queue_limits' not found for kobject 'tx-0' [ 1298.250901][ T5139] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1298.274045][ T5139] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1298.277392][ T51] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 1298.281456][T10074] WARNING: CPU: 0 PID: 10074 at fs/sysfs/group.c:284 sysfs_remove_group+0x17b/0x290 [ 1298.297630][T10074] Modules linked in: [ 1298.301512][T10074] CPU: 0 PID: 10074 Comm: kworker/0:1 Not tainted syzkaller #0 [ 1298.309085][T10074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1298.319179][T10074] Workqueue: events delete_netdev [ 1298.324438][T10074] RIP: 0010:sysfs_remove_group+0x17b/0x290 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1298.330238][T10074] Code: 8b 1b 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 f7 19 c9 ff 49 8b 17 48 c7 c7 c0 ce da 8a 48 89 de e8 55 f7 39 ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 9f 38 70 ff [ 1298.346650][ T5139] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1298.350099][T10074] RSP: 0018:ffffc9000ca47840 EFLAGS: 00010246 [ 1298.356576][ T5139] loop0: [ 1298.367039][T10074] [ 1298.369382][T10074] RAX: 58c72c1bc5982500 RBX: ffffffff8bc5d2a0 RCX: ffff8880251e5a00 [ 1298.377646][T10074] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 1298.385749][T10074] RBP: 00000000000000ab R08: ffffc9000ca47447 R09: 1ffff92001948e88 [ 1298.394922][T10074] R10: dffffc0000000000 R11: fffff52001948e89 R12: 1ffffffff178b950 [ 1298.402977][T10074] R13: dffffc0000000000 R14: ffff8880305603e0 R15: ffff88805d4ef420 [ 1298.411647][T10074] FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 1298.420606][T10074] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1298.427263][T10074] CR2: 00007f0691d5da08 CR3: 000000001aef1000 CR4: 00000000003506f0 [ 1298.436019][T10074] Call Trace: [ 1298.439320][T10074] [ 1298.442559][T10074] ? netdev_queue_update_kobjects+0x3a6/0x480 [ 1298.448780][T10074] netdev_queue_update_kobjects+0x3e1/0x480 [ 1298.454828][T10074] netdev_unregister_kobject+0x108/0x250 [ 1298.460500][T10074] unregister_netdevice_many_notify+0x1449/0x1910 [ 1298.467612][T10074] ? __rwlock_init+0x150/0x150 [ 1298.472530][T10074] ? unregister_netdevice_many+0x20/0x20 [ 1298.478183][T10074] ? do_raw_spin_unlock+0x121/0x230 [ 1298.483408][T10074] ? __mutex_lock+0x923/0xc80 [ 1298.488076][T10074] ? __mutex_lock+0x4d2/0xc80 [ 1298.492785][T10074] unregister_netdevice_queue+0x2e9/0x330 [ 1298.498542][T10074] ? list_netdevice+0x730/0x730 [ 1298.503473][T10074] ? read_lock_is_recursive+0x20/0x20 [ 1298.508865][T10074] lowpan_unregister_netdev+0x1c/0x30 [ 1298.514382][T10074] unregister_dev+0x70/0x1a0 [ 1298.518958][T10074] ? process_scheduled_works+0x975/0x1600 [ 1298.524696][T10074] process_scheduled_works+0xa60/0x1600 [ 1298.530263][T10074] ? worker_attach_to_pool+0x370/0x370 [ 1298.535775][T10074] ? assign_work+0x3cc/0x5d0 [ 1298.540362][T10074] worker_thread+0xa5e/0xfe0 [ 1298.545083][T10074] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 1298.550970][T10074] ? _raw_spin_unlock+0x40/0x40 [ 1298.555875][T10074] ? __kthread_parkme+0x71/0x1c0 [ 1298.560847][T10074] kthread+0x2fa/0x390 [ 1298.564953][T10074] ? pr_cont_work+0x550/0x550 [ 1298.570216][T10074] ? kthread_blkcg+0xd0/0xd0 [ 1298.574926][T10074] ret_from_fork+0x48/0x80 [ 1298.579336][T10074] ? kthread_blkcg+0xd0/0xd0 [ 1298.583990][T10074] ret_from_fork_asm+0x11/0x20 [ 1298.588800][T10074] [ 1298.591864][T10074] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1298.599139][T10074] CPU: 0 PID: 10074 Comm: kworker/0:1 Not tainted syzkaller #0 [ 1298.606673][T10074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1298.616710][T10074] Workqueue: events delete_netdev [ 1298.621724][T10074] Call Trace: [ 1298.624986][T10074] [ 1298.627901][T10074] dump_stack_lvl+0x18c/0x250 [ 1298.632567][T10074] ? show_regs_print_info+0x20/0x20 [ 1298.637751][T10074] ? load_image+0x420/0x420 [ 1298.642255][T10074] panic+0x2ca/0x720 [ 1298.646155][T10074] ? bpf_jit_dump+0xd0/0xd0 [ 1298.650676][T10074] ? ret_from_fork_asm+0x11/0x20 [ 1298.655611][T10074] __warn+0x2e0/0x470 [ 1298.659602][T10074] ? sysfs_remove_group+0x17b/0x290 [ 1298.664795][T10074] ? sysfs_remove_group+0x17b/0x290 [ 1298.669976][T10074] report_bug+0x2be/0x4f0 [ 1298.674305][T10074] ? sysfs_remove_group+0x17b/0x290 [ 1298.679488][T10074] ? sysfs_remove_group+0x17b/0x290 [ 1298.684668][T10074] ? sysfs_remove_group+0x17d/0x290 [ 1298.689860][T10074] handle_bug+0xcf/0x120 [ 1298.694095][T10074] exc_invalid_op+0x1a/0x50 [ 1298.698584][T10074] asm_exc_invalid_op+0x1a/0x20 [ 1298.703418][T10074] RIP: 0010:sysfs_remove_group+0x17b/0x290 [ 1298.709211][T10074] Code: 8b 1b 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 f7 19 c9 ff 49 8b 17 48 c7 c7 c0 ce da 8a 48 89 de e8 55 f7 39 ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 9f 38 70 ff [ 1298.728809][T10074] RSP: 0018:ffffc9000ca47840 EFLAGS: 00010246 [ 1298.734863][T10074] RAX: 58c72c1bc5982500 RBX: ffffffff8bc5d2a0 RCX: ffff8880251e5a00 [ 1298.742818][T10074] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 1298.750775][T10074] RBP: 00000000000000ab R08: ffffc9000ca47447 R09: 1ffff92001948e88 [ 1298.758731][T10074] R10: dffffc0000000000 R11: fffff52001948e89 R12: 1ffffffff178b950 [ 1298.766688][T10074] R13: dffffc0000000000 R14: ffff8880305603e0 R15: ffff88805d4ef420 [ 1298.774675][T10074] ? netdev_queue_update_kobjects+0x3a6/0x480 [ 1298.780734][T10074] netdev_queue_update_kobjects+0x3e1/0x480 [ 1298.786618][T10074] netdev_unregister_kobject+0x108/0x250 [ 1298.792265][T10074] unregister_netdevice_many_notify+0x1449/0x1910 [ 1298.798686][T10074] ? __rwlock_init+0x150/0x150 [ 1298.803438][T10074] ? unregister_netdevice_many+0x20/0x20 [ 1298.809057][T10074] ? do_raw_spin_unlock+0x121/0x230 [ 1298.814267][T10074] ? __mutex_lock+0x923/0xc80 [ 1298.818929][T10074] ? __mutex_lock+0x4d2/0xc80 [ 1298.823591][T10074] unregister_netdevice_queue+0x2e9/0x330 [ 1298.829296][T10074] ? list_netdevice+0x730/0x730 [ 1298.834131][T10074] ? read_lock_is_recursive+0x20/0x20 [ 1298.839515][T10074] lowpan_unregister_netdev+0x1c/0x30 [ 1298.844894][T10074] unregister_dev+0x70/0x1a0 [ 1298.849463][T10074] ? process_scheduled_works+0x975/0x1600 [ 1298.855171][T10074] process_scheduled_works+0xa60/0x1600 [ 1298.860717][T10074] ? worker_attach_to_pool+0x370/0x370 [ 1298.866166][T10074] ? assign_work+0x3cc/0x5d0 [ 1298.870744][T10074] worker_thread+0xa5e/0xfe0 [ 1298.875340][T10074] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 1298.881223][T10074] ? _raw_spin_unlock+0x40/0x40 [ 1298.886059][T10074] ? __kthread_parkme+0x71/0x1c0 [ 1298.890985][T10074] kthread+0x2fa/0x390 [ 1298.895036][T10074] ? pr_cont_work+0x550/0x550 [ 1298.899699][T10074] ? kthread_blkcg+0xd0/0xd0 [ 1298.904296][T10074] ret_from_fork+0x48/0x80 [ 1298.908696][T10074] ? kthread_blkcg+0xd0/0xd0 [ 1298.913268][T10074] ret_from_fork_asm+0x11/0x20 [ 1298.918026][T10074] [ 1298.921328][T10074] Kernel Offset: disabled [ 1298.925734][T10074] Rebooting in 86400 seconds..