last executing test programs: 5.64374472s ago: executing program 4 (id=357): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000540)={0x1, {{0x2, 0x4e24, @multicast2}}, 0x1, 0x3}, 0x23c) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x2, 0xfffffffffd110f4f, 0xd, 0x285, 0xf7b, 0x2, 0x0, 0x0, 0x1, 0xfffb}}, 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0xc031, 0xffffffffffffffff, 0xc51dd000) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="394318cd460841f160a6209c50cb4ab9", 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x37db, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f00000047c0)="c1b0a1849b36d2c59b3a120dab082699", 0x10) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.984799492s ago: executing program 1 (id=368): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 3.771769357s ago: executing program 1 (id=370): r0 = socket$inet6(0xa, 0x5, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, 0x900}, 0x38) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x7}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r2, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffffe5}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x4000001, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x9f69a7a086f70ae8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.667273515s ago: executing program 1 (id=372): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x3, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.498000949s ago: executing program 0 (id=373): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @desc1}, &(0x7f0000000740)={0x0, "df22554d4bd697d3b71dc97e79138e96dbcbc52c409800c99f3a9f47290000bbfd12bd472aba817ec68a73a0fe9244ecffb25b4e7fef00", 0x2080034}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000680), &(0x7f0000000200)={'fscrypt:', @auto=[0x64, 0x30, 0x30, 0x61, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x66, 0x30, 0x30, 0x63, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x35, 0x39, 0x62, 0x66, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x36]}, &(0x7f0000000100)={0x0, "0011228dc41c601f2399aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff000000000000000000003500", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x38, 0x35, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x36, 0x31, 0x30, 0x37, 0x63, 0x66, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x62, 0x30, 0x36, 0x31, 0x30, 0x0, 0x30, 0x33, 0x30, 0x30, 0x30, 0x31, 0x38, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778819aabbccddeeff00112233445566778899aabbccd9eeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x66, 0x33, 0x62, 0x31, 0x6e, 0x35, 0x30, 0x30, 0x38, 0x30, 0x35, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aa8fccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbffffffff00000000445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000006c0)={'fscrypt:', @auto=[0x64, 0x62, 0x30, 0x38, 0x30, 0x551ff9832d60eb03, 0x63, 0xc5, 0x30, 0x34, 0x0, 0x66, 0x30, 0x67, 0x38, 0xf]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbecddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233449e32778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x34, 0x64, 0x36, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000007c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000004c0), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x37, 0x36, 0x39, 0x35, 0x30, 0x32, 0x35, 0x30, 0x37, 0x65, 0x62, 0x32, 0x63, 0x65, 0x39]}, &(0x7f0000000100)={0x0, "001122f649b657778899aabbcc5deeff001122334455667788b9aabbccddeeff001157a1000066778899aa000000000000000000000866578899aabbccddeeff"}, 0x48, r0) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x36, 0x64, 0x31, 0x3, 0x34, 0x34, 0x62, 0x36, 0x30, 0x63, 0x9c0ab4d12417f6d4, 0x30, 0x63, 0x61, 0x39]}, &(0x7f00000001c0)={0x0, "e9fc07c1d50135a0b736d87533c5799e064527252c7b54810a1501a7600733ea10dba9e42740c4f4d1d7ca77336ab2098626b979a876efcd4b87419c301bf79f", 0x3b}, 0x48, r0) 3.275208977s ago: executing program 0 (id=374): syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x200c8084, 0x0, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, 0x0) msgsnd(0x0, &(0x7f00000003c0)={0x1}, 0x8, 0x800) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x6c}}, 0x0) 3.123000476s ago: executing program 1 (id=375): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000540)={0x1, {{0x2, 0x4e24, @multicast2}}, 0x1, 0x3}, 0x23c) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x2, 0xfffffffffd110f4f, 0xd, 0x285, 0xf7b, 0x2, 0x0, 0x0, 0x1, 0xfffb}}, 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0xc031, 0xffffffffffffffff, 0xc51dd000) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x3f, 0x0, 0x0) 2.966334057s ago: executing program 0 (id=378): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, 0x0, &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x64010102}}, 0x8d, 0x228}, &(0x7f00000003c0)=0x90) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001040)={0x2, 0x0, {0x9, @usage=0x80000001, 0x0, 0x5, 0xfffffffffffffff9, 0x4, 0xe397, 0x8, 0x9, @struct={0x3, 0x401}, 0x80000001, 0x844, [0x4, 0xf, 0x5, 0xb, 0x4, 0x1]}, {0x4a, @usage=0x4, 0x0, 0xb8b2, 0x8, 0xc7, 0x0, 0xc, 0x95, @struct={0x8, 0xa}, 0x4, 0x7, [0x3, 0x8000000000000001, 0x4, 0x0, 0x3, 0x9]}, {0x2, @struct={0x1, 0xce}, 0x0, 0x2, 0xfffffffffffffffb, 0x100000000, 0x5, 0x6, 0x1, @struct={0x4, 0x80}, 0x8f1, 0x0, [0x9, 0x7, 0xffffffffffffff85, 0x7b695b55, 0xa0, 0x1]}, {0x0, 0x8, 0x5ed}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001840)={0xe, 0x6, {0xb09b, @usage=0x5, 0x0, 0xe1a8, 0x4, 0x7, 0x9, 0x70b8, 0x401, @struct={0x3ff, 0x8}, 0x7, 0x5, [0x6, 0x9, 0x7, 0x7, 0x8, 0x5]}, {0x8000000000000001, @usage=0xfffffffff8000000, 0x0, 0x7, 0x80000000, 0x1, 0x9, 0x3800, 0x4, @struct={0xfffffffa, 0x7}, 0x0, 0x2, [0xdf, 0x4, 0x2, 0x80, 0x1, 0xffffffffffffffff]}, {0x9, @usage=0x5, r2, 0x8, 0xf21800000000000, 0x6, 0x69, 0x3, 0x1, @usage=0x6060, 0x6, 0x9, [0xb, 0x2, 0x5fb, 0x3, 0x0, 0x3648]}, {0x7, 0x0, 0x8}}) syz_open_dev$evdev(0x0, 0x0, 0x180) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) writev(r3, &(0x7f0000000a00)=[{&(0x7f0000000980)="bba031ff53933a0c4ff000f1b3fc27dc5ec8fb61713fee40b61b9ac1956613e83876d8dafea991d0433867d23836edd6737b2cce8d2ace7b65fc26354f800d93888858132a80dc5fbdff8236d346f3edc4307b4464d715d09712558efe278ddfdbc574c609f1a5026ae61bdcc8858d", 0x6f}], 0x1) 2.564598522s ago: executing program 0 (id=379): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x4f}, 0xfffffdef) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r1, &(0x7f0000000c00)=[{&(0x7f0000000740)=""/206, 0xce}], 0x1) 2.45582048s ago: executing program 4 (id=380): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x4004662b, 0x0) 2.261176301s ago: executing program 4 (id=382): r0 = semget(0x1, 0x4, 0x39c) newfstatat(0xffffffffffffff9c, &(0x7f0000001580)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000140)={{0x2, 0x0, 0x0, r1, 0xee01, 0x81, 0x1e}, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}) 2.047723946s ago: executing program 4 (id=384): mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x80000001) socket$inet(0xa, 0x801, 0x84) mkdirat(0xffffffffffffff9c, 0x0, 0x158) mount$overlay(0x0, 0x0, &(0x7f0000000440), 0x8, &(0x7f0000000500)) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0x40) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x121080, 0x110) readv(0xffffffffffffffff, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x400) r1 = syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040)=r1, 0x12) 1.941770104s ago: executing program 3 (id=385): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @desc1}, &(0x7f0000000740)={0x0, "df22554d4bd697d3b71dc97e79138e96dbcbc52c409800c99f3a9f47290000bbfd12bd472aba817ec68a73a0fe9244ecffb25b4e7fef00", 0x2080034}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000680), &(0x7f0000000200)={'fscrypt:', @auto=[0x64, 0x30, 0x30, 0x61, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x66, 0x30, 0x30, 0x63, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x35, 0x39, 0x62, 0x66, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x36]}, &(0x7f0000000100)={0x0, "0011228dc41c601f2399aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff000000000000000000003500", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x63, 0x30, 0x30, 0x39]}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x38, 0x35, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x36, 0x31, 0x30, 0x37, 0x63, 0x66, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x62, 0x30, 0x36, 0x31, 0x30, 0x0, 0x30, 0x33, 0x30, 0x30, 0x30, 0x31, 0x38, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778819aabbccddeeff00112233445566778899aabbccd9eeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x66, 0x33, 0x62, 0x31, 0x6e, 0x35, 0x30, 0x30, 0x38, 0x30, 0x35, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aa8fccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbffffffff00000000445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000006c0)={'fscrypt:', @auto=[0x64, 0x62, 0x30, 0x38, 0x30, 0x551ff9832d60eb03, 0x63, 0xc5, 0x30, 0x34, 0x0, 0x66, 0x30, 0x67, 0x38, 0xf]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbecddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233449e32778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x34, 0x64, 0x36, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000007c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000004c0), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x37, 0x36, 0x39, 0x35, 0x30, 0x32, 0x35, 0x30, 0x37, 0x65, 0x62, 0x32, 0x63, 0x65, 0x39]}, &(0x7f0000000100)={0x0, "001122f649b657778899aabbcc5deeff001122334455667788b9aabbccddeeff001157a1000066778899aa000000000000000000000866578899aabbccddeeff"}, 0x48, r0) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x36, 0x64, 0x31, 0x3, 0x34, 0x34, 0x62, 0x36, 0x30, 0x63, 0x9c0ab4d12417f6d4, 0x30, 0x63, 0x61, 0x39]}, &(0x7f00000001c0)={0x0, "e9fc07c1d50135a0b736d87533c5799e064527252c7b54810a1501a7600733ea10dba9e42740c4f4d1d7ca77336ab2098626b979a876efcd4b87419c301bf79f", 0x3b}, 0x48, r0) 1.795132092s ago: executing program 2 (id=386): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf0}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x2000008, 0x8, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="20002cbd7000fcdbdf257673696d0000000f0002006e657464657673696d30000008000b0009000000"], 0x3c}, 0x1, 0x0, 0x0, 0x480c0}, 0x48044) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.76724573s ago: executing program 4 (id=387): openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/64, 0x40}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000032c0)=""/71, 0x47}, 0x7f}], 0x2, 0x40000002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00') socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r4], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.644563311s ago: executing program 3 (id=388): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f00000002c0)=r1}, 0x20) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x4}, 0x1c) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 1.26781364s ago: executing program 2 (id=389): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@newqdisc={0x178, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0x5, 0x64, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104, 0x2, '\x00\x00 \x00'}, @TCA_GRED_MAX_P={0xe, 0x4, 0x5a}]}}]}, 0x178}}, 0x0) 1.26763346s ago: executing program 1 (id=390): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000540)={0x1, {{0x2, 0x4e24, @multicast2}}, 0x1, 0x3}, 0x23c) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x2, 0xfffffffffd110f4f, 0xd, 0x285, 0xf7b, 0x2, 0x0, 0x0, 0x1, 0xfffb}}, 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0xc031, 0xffffffffffffffff, 0xc51dd000) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="394318cd460841f160a6209c50cb4ab9", 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x37db, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f00000047c0)="c1b0a1849b36d2c59b3a120dab082699", 0x10) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.26743087s ago: executing program 3 (id=391): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, 0x0, &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x64010102}}, 0x8d, 0x228}, &(0x7f00000003c0)=0x90) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001040)={0x2, 0x0, {0x9, @usage=0x80000001, 0x0, 0x5, 0xfffffffffffffff9, 0x4, 0xe397, 0x8, 0x9, @struct={0x3, 0x401}, 0x80000001, 0x844, [0x4, 0xf, 0x5, 0xb, 0x4, 0x1]}, {0x4a, @usage=0x4, 0x0, 0xb8b2, 0x8, 0xc7, 0x0, 0xc, 0x95, @struct={0x8, 0xa}, 0x4, 0x7, [0x3, 0x8000000000000001, 0x4, 0x0, 0x3, 0x9]}, {0x2, @struct={0x1, 0xce}, 0x0, 0x2, 0xfffffffffffffffb, 0x100000000, 0x5, 0x6, 0x1, @struct={0x4, 0x80}, 0x8f1, 0x0, [0x9, 0x7, 0xffffffffffffff85, 0x7b695b55, 0xa0, 0x1]}, {0x0, 0x8, 0x5ed}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001840)={0xe, 0x6, {0xb09b, @usage=0x5, 0x0, 0xe1a8, 0x4, 0x7, 0x9, 0x70b8, 0x401, @struct={0x3ff, 0x8}, 0x7, 0x5, [0x6, 0x9, 0x7, 0x7, 0x8, 0x5]}, {0x8000000000000001, @usage=0xfffffffff8000000, 0x0, 0x7, 0x80000000, 0x1, 0x9, 0x3800, 0x4, @struct={0xfffffffa, 0x7}, 0x0, 0x2, [0xdf, 0x4, 0x2, 0x80, 0x1, 0xffffffffffffffff]}, {0x9, @usage=0x5, r2, 0x8, 0xf21800000000000, 0x6, 0x69, 0x3, 0x1, @usage=0x6060, 0x6, 0x9, [0xb, 0x2, 0x5fb, 0x3, 0x0, 0x3648]}, {0x7, 0x0, 0x8}}) syz_open_dev$evdev(0x0, 0x0, 0x180) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x1004000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) writev(r3, &(0x7f0000000a00)=[{&(0x7f0000000980)="bba031ff53933a0c4ff000f1b3fc27dc5ec8fb61713fee40b61b9ac1956613e83876d8dafea991d0433867d23836edd6737b2cce8d2ace7b65fc26354f800d93888858132a80dc5fbdff8236d346f3edc4307b4464d715d09712558efe278ddfdbc574c609f1a5026ae61bdcc8858d", 0x6f}], 0x1) 1.198918607s ago: executing program 4 (id=392): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, 0x0, &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x64010102}}, 0x8d, 0x228}, &(0x7f00000003c0)=0x90) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001040)={0x2, 0x0, {0x9, @usage=0x80000001, 0x0, 0x5, 0xfffffffffffffff9, 0x4, 0xe397, 0x8, 0x9, @struct={0x3, 0x401}, 0x80000001, 0x844, [0x4, 0xf, 0x5, 0xb, 0x4, 0x1]}, {0x4a, @usage=0x4, 0x0, 0xb8b2, 0x8, 0xc7, 0x0, 0xc, 0x95, @struct={0x8, 0xa}, 0x4, 0x7, [0x3, 0x8000000000000001, 0x4, 0x0, 0x3, 0x9]}, {0x2, @struct={0x1, 0xce}, 0x0, 0x2, 0xfffffffffffffffb, 0x100000000, 0x5, 0x6, 0x1, @struct={0x4, 0x80}, 0x8f1, 0x0, [0x9, 0x7, 0xffffffffffffff85, 0x7b695b55, 0xa0, 0x1]}, {0x0, 0x8, 0x5ed}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001840)={0xe, 0x6, {0xb09b, @usage=0x5, 0x0, 0xe1a8, 0x4, 0x7, 0x9, 0x70b8, 0x401, @struct={0x3ff, 0x8}, 0x7, 0x5, [0x6, 0x9, 0x7, 0x7, 0x8, 0x5]}, {0x8000000000000001, @usage=0xfffffffff8000000, 0x0, 0x7, 0x80000000, 0x1, 0x9, 0x3800, 0x4, @struct={0xfffffffa, 0x7}, 0x0, 0x2, [0xdf, 0x4, 0x2, 0x80, 0x1, 0xffffffffffffffff]}, {0x9, @usage=0x5, r2, 0x8, 0xf21800000000000, 0x6, 0x69, 0x3, 0x1, @usage=0x6060, 0x6, 0x9, [0xb, 0x2, 0x5fb, 0x3, 0x0, 0x3648]}, {0x7, 0x0, 0x8}}) syz_open_dev$evdev(0x0, 0x0, 0x180) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x1004000, 0x0) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000940)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x7a}}}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x7ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x24044810}, 0x90) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) writev(r3, &(0x7f0000000a00)=[{&(0x7f0000000980)="bba031ff53933a0c4ff000f1b3fc27dc5ec8fb61713fee40b61b9ac1956613e83876d8dafea991d0433867d23836edd6737b2cce8d2ace7b65fc26354f800d93888858132a80dc5fbdff8236d346f3edc4307b4464d715d09712558efe278ddfdbc574c609f1a5026ae61bdcc8858d", 0x6f}], 0x1) r4 = dup(0xffffffffffffffff) write$binfmt_elf64(r4, &(0x7f0000000c00)=ANY=[@ANYBLOB="7f454c4606ff78a33e020000000000"], 0x78) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 722.491422ms ago: executing program 2 (id=393): syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x200c8084, 0x0, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, 0x0) msgsnd(0x0, &(0x7f00000003c0)={0x1}, 0x8, 0x800) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x6c}}, 0x0) 559.851784ms ago: executing program 3 (id=394): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r0, 0x0, 0x0, 0xc002a0, 0x0) 558.448754ms ago: executing program 2 (id=395): r0 = semget(0x1, 0x4, 0x39c) newfstatat(0xffffffffffffff9c, &(0x7f0000001580)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000140)={{0x2, 0x0, 0x0, r1, 0xee01, 0x81, 0x1e}, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}) 411.844393ms ago: executing program 3 (id=396): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001c80)=[{0x0}, {&(0x7f0000000ac0)="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", 0x75d}], 0x2) 411.463413ms ago: executing program 2 (id=397): mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x80000001) socket$inet(0xa, 0x801, 0x84) mkdirat(0xffffffffffffff9c, 0x0, 0x158) mount$overlay(0x0, 0x0, &(0x7f0000000440), 0x8, &(0x7f0000000500)) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0x40) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x121080, 0x110) readv(0xffffffffffffffff, 0x0, 0x0) r1 = syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040)=r1, 0x12) 291.119574ms ago: executing program 0 (id=398): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @desc1}, &(0x7f0000000740)={0x0, "df22554d4bd697d3b71dc97e79138e96dbcbc52c409800c99f3a9f47290000bbfd12bd472aba817ec68a73a0fe9244ecffb25b4e7fef00", 0x2080034}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000680), &(0x7f0000000200)={'fscrypt:', @auto=[0x64, 0x30, 0x30, 0x61, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x66, 0x30, 0x30, 0x63, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x35, 0x39, 0x62, 0x66, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x36]}, &(0x7f0000000100)={0x0, "0011228dc41c601f2399aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff000000000000000000003500", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x63, 0x30, 0x30, 0x39]}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x38, 0x35, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x36, 0x31, 0x30, 0x37, 0x63, 0x66, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x62, 0x30, 0x36, 0x31, 0x30, 0x0, 0x30, 0x33, 0x30, 0x30, 0x30, 0x31, 0x38, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778819aabbccddeeff00112233445566778899aabbccd9eeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x66, 0x33, 0x62, 0x31, 0x6e, 0x35, 0x30, 0x30, 0x38, 0x30, 0x35, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aa8fccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbffffffff00000000445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000006c0)={'fscrypt:', @auto=[0x64, 0x62, 0x30, 0x38, 0x30, 0x551ff9832d60eb03, 0x63, 0xc5, 0x30, 0x34, 0x0, 0x66, 0x30, 0x67, 0x38, 0xf]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbecddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233449e32778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x34, 0x64, 0x36, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000007c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000004c0), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x37, 0x36, 0x39, 0x35, 0x30, 0x32, 0x35, 0x30, 0x37, 0x65, 0x62, 0x32, 0x63, 0x65, 0x39]}, &(0x7f0000000100)={0x0, "001122f649b657778899aabbcc5deeff001122334455667788b9aabbccddeeff001157a1000066778899aa000000000000000000000866578899aabbccddeeff"}, 0x48, r0) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x36, 0x64, 0x31, 0x3, 0x34, 0x34, 0x62, 0x36, 0x30, 0x63, 0x9c0ab4d12417f6d4, 0x30, 0x63, 0x61, 0x39]}, &(0x7f00000001c0)={0x0, "e9fc07c1d50135a0b736d87533c5799e064527252c7b54810a1501a7600733ea10dba9e42740c4f4d1d7ca77336ab2098626b979a876efcd4b87419c301bf79f", 0x3b}, 0x48, r0) 258.994483ms ago: executing program 3 (id=399): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000540)={0x1, {{0x2, 0x4e24, @multicast2}}, 0x1, 0x3}, 0x23c) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x2, 0xfffffffffd110f4f, 0xd, 0x285, 0xf7b, 0x2, 0x0, 0x0, 0x1, 0xfffb}}, 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0xc031, 0xffffffffffffffff, 0xc51dd000) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x3f, 0x0, 0x0) 108.376702ms ago: executing program 0 (id=400): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf0}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x2000008, 0x8, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="20002cbd7000fcdbdf257673696d0000000f0002006e657464657673696d30000008000b0009000000"], 0x3c}, 0x1, 0x0, 0x0, 0x480c0}, 0x48044) ioctl$KVM_RUN(r2, 0xae80, 0x0) 92.899086ms ago: executing program 2 (id=401): r0 = syz_clone(0x20804000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, 0x0, 0x0, 0xa1}}], 0x1, 0x2040000, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ptrace$getregs(0xc, r0, 0x3, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x3ff, 0x2, 0x3, 0x7fffffffffffffff, 0x58f24867, 0x0, 0x7f, 0x80000002, 0x9, 0x0, 0x6, 0x1, 0x2, 0x4, 0x8, 0x1], 0x54000, 0x100204}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0xc, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x439, 0x6, 0x9, 0x4, 0x8, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 1 (id=402): openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/64, 0x40}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000032c0)=""/71, 0x47}, 0x7f}], 0x2, 0x40000002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00') socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r4], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): 37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.845331][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.921042][ T4237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.945664][ T4237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.977234][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.987667][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.995545][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.013691][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.036075][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.043948][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.083726][ T784] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.101357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.112953][ T784] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.142832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.199050][ T4274] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.429963][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.436714][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.532434][ T4283] syz.1.2: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 71.548000][ T4283] CPU: 0 PID: 4283 Comm: syz.1.2 Not tainted syzkaller #0 [ 71.555129][ T4283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 71.565206][ T4283] Call Trace: [ 71.568518][ T4283] [ 71.571481][ T4283] dump_stack_lvl+0x188/0x250 [ 71.576181][ T4283] ? rcu_lock_release+0x5/0x20 [ 71.581068][ T4283] ? show_regs_print_info+0x20/0x20 [ 71.586282][ T4283] ? load_image+0x410/0x410 [ 71.590829][ T4283] warn_alloc+0x245/0x320 [ 71.595178][ T4283] ? rcu_lock_release+0x20/0x20 [ 71.600049][ T4283] ? zone_watermark_ok_safe+0x250/0x250 [ 71.605623][ T4283] ? kfree+0xef/0x2a0 [ 71.609627][ T4283] __vmalloc_node_range+0x2b1/0x8b0 [ 71.614846][ T4283] ? mutex_lock_io_nested+0x60/0x60 [ 71.620095][ T4283] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 71.625929][ T4283] vmalloc+0x75/0x80 [ 71.629859][ T4283] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 71.635703][ T4283] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 71.635955][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.641519][ T4283] dvb_demux_do_ioctl+0x450/0x530 [ 71.655608][ T4283] dvb_usercopy+0x191/0x2b0 [ 71.660241][ T4283] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 71.665957][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.666070][ T4283] ? dvb_generic_ioctl+0xb0/0xb0 [ 71.675947][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.680025][ T4283] ? dvb_demux_poll+0x210/0x210 [ 71.693784][ T4283] dvb_demux_ioctl+0x25/0x30 [ 71.695955][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.698492][ T4283] __se_sys_ioctl+0xfa/0x170 [ 71.712190][ T4283] do_syscall_64+0x4c/0xa0 [ 71.715975][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.716633][ T4283] ? clear_bhb_loop+0x30/0x80 [ 71.730289][ T4283] ? clear_bhb_loop+0x30/0x80 [ 71.734994][ T4283] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 71.735977][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.740924][ T4283] RIP: 0033:0x7f570add2159 [ 71.754406][ T4283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.755979][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.774025][ T4283] RSP: 002b:00007f570902a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 71.785922][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.791420][ T4283] RAX: ffffffffffffffda RBX: 00007f570b059fa0 RCX: 00007f570add2159 [ 71.805957][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.808377][ T4283] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000005 [ 71.825405][ T4283] RBP: 00007f570ae6906b R08: 0000000000000000 R09: 0000000000000000 [ 71.833393][ T4283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.835958][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.841394][ T4283] R13: 00007f570b05a038 R14: 00007f570b059fa0 R15: 00007ffdd3e1f988 [ 71.858329][ T4283] [ 71.863983][ T4283] Mem-Info: [ 71.867154][ T4283] active_anon:267 inactive_anon:8160 isolated_anon:0 [ 71.867154][ T4283] active_file:4195 inactive_file:36807 isolated_file:0 [ 71.867154][ T4283] unevictable:768 dirty:1713 writeback:0 [ 71.867154][ T4283] slab_reclaimable:20264 slab_unreclaimable:90748 [ 71.867154][ T4283] mapped:31886 shmem:4278 pagetables:542 bounce:0 [ 71.867154][ T4283] kernel_misc_reclaimable:0 [ 71.867154][ T4283] free:1404488 free_pcp:6431 free_cma:0 [ 71.909440][ T4283] Node 0 active_anon:1036kB inactive_anon:32128kB active_file:16580kB inactive_file:147228kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127544kB dirty:6836kB writeback:0kB shmem:15032kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10200kB pagetables:2168kB all_unreclaimable? no [ 71.941376][ T4283] Node 1 active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 71.970564][ T4283] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 71.997105][ T4283] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 72.002937][ T4283] Node 0 DMA32 free:1697904kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1036kB inactive_anon:32128kB active_file:16580kB inactive_file:147228kB unevictable:1536kB writepending:6836kB present:3129332kB managed:2606508kB mlocked:0kB bounce:0kB free_pcp:10644kB local_pcp:1964kB free_cma:0kB [ 72.033335][ T4283] lowmem_reserve[]: 0 0 0 0 0 [ 72.038082][ T4283] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 72.063702][ T4283] lowmem_reserve[]: 0 0 0 0 0 [ 72.068675][ T4283] Node 1 Normal free:3904688kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:16kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:15076kB local_pcp:4932kB free_cma:0kB [ 72.097582][ T4283] lowmem_reserve[]: 0 0 0 0 0 [ 72.102321][ T4283] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 72.115007][ T4283] Node 0 DMA32: 2*4kB (ME) 1*8kB (U) 2*16kB (UE) 2*32kB (UE) 2*64kB (UE) 3*128kB (UME) 2*256kB (UE) 2*512kB (M) 2*1024kB (M) 3*2048kB (UME) 412*4096kB (M) = 1697904kB [ 72.132107][ T4283] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 72.143629][ T4283] Node 1 Normal: 56*4kB (UME) 19*8kB (UME) 17*16kB (UME) 56*32kB (UME) 26*64kB (UME) 12*128kB (UME) 3*256kB (UE) 2*512kB (U) 0*1024kB 1*2048kB (M) 951*4096kB (UM) = 3904776kB [ 72.161986][ T4283] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 72.171589][ T4283] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 72.181088][ T4283] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 72.190741][ T4283] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 72.200089][ T4283] 45280 total pagecache pages [ 72.204787][ T4283] 0 pages in swap cache [ 72.208970][ T4283] Swap cache stats: add 0, delete 0, find 0/0 [ 72.215167][ T4283] Free swap = 124996kB [ 72.219366][ T4283] Total swap = 124996kB [ 72.223940][ T4283] 2097051 pages RAM [ 72.228388][ T4283] 0 pages HighMem/MovableOnly [ 72.233126][ T4283] 411501 pages reserved [ 72.237350][ T4283] 0 pages cma reserved [ 72.241701][ T1324] Bluetooth: hci0: command 0x0419 tx timeout [ 72.290569][ T1324] Bluetooth: hci1: command 0x0419 tx timeout [ 72.318852][ T4280] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 72.330732][ T1324] Bluetooth: hci2: command 0x0419 tx timeout [ 72.367376][ T4174] Bluetooth: hci4: command 0x0419 tx timeout [ 72.391975][ T4174] Bluetooth: hci3: command 0x0419 tx timeout [ 72.474645][ T4290] ipt_CLUSTERIP: Please specify destination IP [ 73.843808][ T4320] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 73.871390][ T4320] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 74.349819][ T4332] kvm: emulating exchange as write [ 75.008756][ T4340] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 76.158037][ T4373] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 76.204756][ T4373] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 76.326937][ T4378] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 76.367421][ T4378] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 77.103512][ T4404] ipt_CLUSTERIP: Please specify destination IP [ 77.379965][ T4415] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 77.441527][ T4415] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 77.478259][ T4423] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 77.495311][ T4423] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 77.576187][ T4426] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 77.610018][ T4426] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 78.471342][ T4450] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 78.504815][ T4450] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 78.790401][ T26] audit: type=1800 audit(1790346884.513:2): pid=4459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.59" name="(" dev="sda1" ino=2047 res=0 errno=0 [ 79.225681][ T4472] FAULT_INJECTION: forcing a failure. [ 79.225681][ T4472] name failslab, interval 1, probability 0, space 0, times 1 [ 79.248941][ T4472] CPU: 1 PID: 4472 Comm: syz.0.74 Not tainted syzkaller #0 [ 79.256223][ T4472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.266449][ T4472] Call Trace: [ 79.269770][ T4472] [ 79.272831][ T4472] dump_stack_lvl+0x188/0x250 [ 79.277541][ T4472] ? show_regs_print_info+0x20/0x20 [ 79.282765][ T4472] ? load_image+0x410/0x410 [ 79.287291][ T4472] ? __might_sleep+0xf0/0xf0 [ 79.291911][ T4472] ? __lock_acquire+0x7b50/0x7b50 [ 79.296974][ T4472] ? verify_lock_unused+0x140/0x140 [ 79.302209][ T4472] should_fail+0x383/0x4b0 [ 79.306657][ T4472] should_failslab+0x5/0x20 [ 79.311189][ T4472] slab_pre_alloc_hook+0x51/0xc0 [ 79.316150][ T4472] ? __kernfs_new_node+0xa8/0x6b0 [ 79.321287][ T4472] __kmalloc_track_caller+0x69/0x330 [ 79.326589][ T4472] ? __kernfs_new_node+0xa8/0x6b0 [ 79.331646][ T4472] kstrdup_const+0x51/0x90 [ 79.336089][ T4472] __kernfs_new_node+0xa8/0x6b0 [ 79.341005][ T4472] ? kernfs_new_node+0x250/0x250 [ 79.345988][ T4472] ? sysfs_do_create_link_sd+0x75/0x110 [ 79.351564][ T4472] kernfs_new_node+0x148/0x250 [ 79.356359][ T4472] kernfs_create_link+0xa3/0x200 [ 79.361350][ T4472] sysfs_do_create_link_sd+0x83/0x110 [ 79.366750][ T4472] device_add+0x83b/0x1050 [ 79.371226][ T4472] wakeup_source_sysfs_add+0x1cf/0x2b0 [ 79.376709][ T4472] wakeup_source_register+0x15f/0x230 [ 79.382137][ T4472] ep_insert+0xe66/0x1990 [ 79.386513][ T4472] ? ep_loop_check+0x180/0x180 [ 79.391300][ T4472] ? __lock_acquire+0x7b50/0x7b50 [ 79.396445][ T4472] ? bpf_lsm_capable+0x5/0x10 [ 79.401272][ T4472] do_epoll_ctl+0x88b/0xeb0 [ 79.405810][ T4472] __x64_sys_epoll_ctl+0x162/0x1b0 [ 79.410953][ T4472] ? ep_modify+0xa80/0xa80 [ 79.415489][ T4472] ? lockdep_hardirqs_on+0x94/0x140 [ 79.420714][ T4472] do_syscall_64+0x4c/0xa0 [ 79.425154][ T4472] ? clear_bhb_loop+0x30/0x80 [ 79.429852][ T4472] ? clear_bhb_loop+0x30/0x80 [ 79.434556][ T4472] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.440576][ T4472] RIP: 0033:0x7f5add297159 [ 79.445112][ T4472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.464751][ T4472] RSP: 002b:00007f5adb4ef028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 79.473222][ T4472] RAX: ffffffffffffffda RBX: 00007f5add51efa0 RCX: 00007f5add297159 [ 79.481318][ T4472] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 79.489406][ T4472] RBP: 00007f5add32e06b R08: 0000000000000000 R09: 0000000000000000 [ 79.497399][ T4472] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.505413][ T4472] R13: 00007f5add51f038 R14: 00007f5add51efa0 R15: 00007ffcb1aaa3f8 [ 79.513424][ T4472] [ 79.839905][ T4476] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 79.855998][ T4476] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 80.298675][ T4491] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 80.330812][ T4491] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 80.443401][ T26] audit: type=1800 audit(1790346886.163:3): pid=4501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.73" name="(" dev="sda1" ino=2047 res=0 errno=0 [ 81.036449][ T4518] FAULT_INJECTION: forcing a failure. [ 81.036449][ T4518] name failslab, interval 1, probability 0, space 0, times 0 [ 81.098892][ T4518] CPU: 0 PID: 4518 Comm: syz.3.81 Not tainted syzkaller #0 [ 81.106164][ T4518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.116262][ T4518] Call Trace: [ 81.119594][ T4518] [ 81.122558][ T4518] dump_stack_lvl+0x188/0x250 [ 81.127284][ T4518] ? show_regs_print_info+0x20/0x20 [ 81.132550][ T4518] ? load_image+0x410/0x410 [ 81.137189][ T4518] ? __might_sleep+0xf0/0xf0 [ 81.141827][ T4518] ? __lock_acquire+0x7b50/0x7b50 [ 81.146914][ T4518] should_fail+0x383/0x4b0 [ 81.151387][ T4518] should_failslab+0x5/0x20 [ 81.155928][ T4518] slab_pre_alloc_hook+0x51/0xc0 [ 81.160905][ T4518] ? __kernfs_new_node+0xe3/0x6b0 [ 81.165982][ T4518] kmem_cache_alloc+0x3d/0x280 [ 81.170784][ T4518] __kernfs_new_node+0xe3/0x6b0 [ 81.175678][ T4518] ? kernfs_new_node+0x250/0x250 [ 81.180663][ T4518] ? kernfs_create_dir_ns+0x10e/0x120 [ 81.186076][ T4518] ? sysfs_create_dir_ns+0x12c/0x290 [ 81.191408][ T4518] kernfs_new_node+0x148/0x250 [ 81.196241][ T4518] __kernfs_create_file+0x47/0x2e0 [ 81.201536][ T4518] sysfs_add_file_mode_ns+0x2d2/0x390 [ 81.206965][ T4518] sysfs_create_file_ns+0x12a/0x1b0 [ 81.212213][ T4518] ? sysfs_add_file_mode_ns+0x390/0x390 [ 81.217860][ T4518] device_add+0x554/0x1050 [ 81.222338][ T4518] wakeup_source_sysfs_add+0x1cf/0x2b0 [ 81.227837][ T4518] wakeup_source_register+0x15f/0x230 [ 81.233266][ T4518] ep_insert+0xe66/0x1990 [ 81.237687][ T4518] ? ep_loop_check+0x180/0x180 [ 81.242516][ T4518] ? __lock_acquire+0x7b50/0x7b50 [ 81.247603][ T4518] ? bpf_lsm_capable+0x5/0x10 [ 81.252337][ T4518] do_epoll_ctl+0x88b/0xeb0 [ 81.256895][ T4518] __x64_sys_epoll_ctl+0x162/0x1b0 [ 81.262056][ T4518] ? ep_modify+0xa80/0xa80 [ 81.266525][ T4518] ? lockdep_hardirqs_on+0x94/0x140 [ 81.271799][ T4518] do_syscall_64+0x4c/0xa0 [ 81.276255][ T4518] ? clear_bhb_loop+0x30/0x80 [ 81.280974][ T4518] ? clear_bhb_loop+0x30/0x80 [ 81.285705][ T4518] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.291653][ T4518] RIP: 0033:0x7f9b57bd8159 [ 81.296160][ T4518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.315950][ T4518] RSP: 002b:00007f9b55e30028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 81.324412][ T4518] RAX: ffffffffffffffda RBX: 00007f9b57e5ffa0 RCX: 00007f9b57bd8159 [ 81.332442][ T4518] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 81.340456][ T4518] RBP: 00007f9b57c6f06b R08: 0000000000000000 R09: 0000000000000000 [ 81.348472][ T4518] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.356518][ T4518] R13: 00007f9b57e60038 R14: 00007f9b57e5ffa0 R15: 00007ffe21819cc8 [ 81.364563][ T4518] [ 81.690530][ T4529] warn_alloc: 7 callbacks suppressed [ 81.690544][ T4529] syz.0.94: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 81.710379][ T4529] CPU: 1 PID: 4529 Comm: syz.0.94 Not tainted syzkaller #0 [ 81.717587][ T4529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.727752][ T4529] Call Trace: [ 81.731059][ T4529] [ 81.734025][ T4529] dump_stack_lvl+0x188/0x250 [ 81.739359][ T4529] ? rcu_lock_release+0x5/0x20 [ 81.744137][ T4529] ? show_regs_print_info+0x20/0x20 [ 81.749544][ T4529] ? load_image+0x410/0x410 [ 81.754082][ T4529] warn_alloc+0x245/0x320 [ 81.758435][ T4529] ? rcu_lock_release+0x20/0x20 [ 81.763318][ T4529] ? zone_watermark_ok_safe+0x250/0x250 [ 81.768896][ T4529] ? kfree+0xef/0x2a0 [ 81.772895][ T4529] __vmalloc_node_range+0x2b1/0x8b0 [ 81.778132][ T4529] ? mutex_lock_io_nested+0x60/0x60 [ 81.783361][ T4529] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 81.789177][ T4529] vmalloc+0x75/0x80 [ 81.793108][ T4529] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 81.798925][ T4529] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 81.804674][ T4529] dvb_demux_do_ioctl+0x450/0x530 [ 81.809746][ T4529] dvb_usercopy+0x191/0x2b0 [ 81.814261][ T4529] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 81.819845][ T4529] ? dvb_generic_ioctl+0xb0/0xb0 [ 81.824803][ T4529] ? dvb_demux_poll+0x210/0x210 [ 81.829687][ T4529] dvb_demux_ioctl+0x25/0x30 [ 81.834300][ T4529] __se_sys_ioctl+0xfa/0x170 [ 81.838944][ T4529] do_syscall_64+0x4c/0xa0 [ 81.843400][ T4529] ? clear_bhb_loop+0x30/0x80 [ 81.848127][ T4529] ? clear_bhb_loop+0x30/0x80 [ 81.852925][ T4529] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.859081][ T4529] RIP: 0033:0x7f5add297159 [ 81.863546][ T4529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.883547][ T4529] RSP: 002b:00007f5adb4ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 81.891995][ T4529] RAX: ffffffffffffffda RBX: 00007f5add51efa0 RCX: 00007f5add297159 [ 81.900012][ T4529] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000005 [ 81.908017][ T4529] RBP: 00007f5add32e06b R08: 0000000000000000 R09: 0000000000000000 [ 81.916011][ T4529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.924022][ T4529] R13: 00007f5add51f038 R14: 00007f5add51efa0 R15: 00007ffcb1aaa3f8 [ 81.932024][ T4529] [ 81.938066][ T4529] Mem-Info: [ 81.941447][ T4529] active_anon:3116 inactive_anon:8749 isolated_anon:0 [ 81.941447][ T4529] active_file:4598 inactive_file:36660 isolated_file:0 [ 81.941447][ T4529] unevictable:768 dirty:1866 writeback:0 [ 81.941447][ T4529] slab_reclaimable:20686 slab_unreclaimable:95652 [ 81.941447][ T4529] mapped:32670 shmem:7368 pagetables:646 bounce:0 [ 81.941447][ T4529] kernel_misc_reclaimable:0 [ 81.941447][ T4529] free:1389231 free_pcp:10861 free_cma:0 [ 81.984469][ T4529] Node 0 active_anon:12432kB inactive_anon:34484kB active_file:18192kB inactive_file:146640kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130680kB dirty:7464kB writeback:0kB shmem:27392kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10408kB pagetables:2584kB all_unreclaimable? no [ 82.016236][ T4529] Node 1 active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 82.045616][ T4529] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 82.072779][ T4529] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 82.078682][ T4529] Node 0 DMA32 free:1635528kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:12432kB inactive_anon:34484kB active_file:18192kB inactive_file:146640kB unevictable:1536kB writepending:7464kB present:3129332kB managed:2606508kB mlocked:0kB bounce:0kB free_pcp:29608kB local_pcp:9456kB free_cma:0kB [ 82.109007][ T4529] lowmem_reserve[]: 0 0 0 0 0 [ 82.113809][ T4529] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 82.139672][ T4529] lowmem_reserve[]: 0 0 0 0 0 [ 82.144469][ T4529] Node 1 Normal free:3906036kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:13836kB local_pcp:9644kB free_cma:0kB [ 82.174254][ T4529] lowmem_reserve[]: 0 0 0 0 0 [ 82.179099][ T4529] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 82.192281][ T4529] Node 0 DMA32: 740*4kB (UME) 277*8kB (UME) 73*16kB (UME) 12*32kB (UE) 14*64kB (UME) 2*128kB (UE) 2*256kB (UM) 4*512kB (UME) 1*1024kB (M) 1*2048kB (M) 396*4096kB (M) = 1635528kB [ 82.210397][ T4529] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 82.222580][ T4529] Node 1 Normal: 72*4kB (UME) 27*8kB (UME) 15*16kB (UME) 73*32kB (UME) 32*64kB (UME) 12*128kB (UME) 4*256kB (UE) 2*512kB (U) 0*1024kB 1*2048kB (M) 951*4096kB (UM) = 3906056kB [ 82.240582][ T4529] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 82.250534][ T4529] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 82.260570][ T4529] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 82.270416][ T4529] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 82.280002][ T4529] 48626 total pagecache pages [ 82.284799][ T4529] 0 pages in swap cache [ 82.289043][ T4529] Swap cache stats: add 0, delete 0, find 0/0 [ 82.295180][ T4529] Free swap = 124996kB [ 82.299461][ T4529] Total swap = 124996kB [ 82.303699][ T4529] 2097051 pages RAM [ 82.310481][ T4529] 0 pages HighMem/MovableOnly [ 82.315288][ T4529] 411501 pages reserved [ 82.319543][ T4529] 0 pages cma reserved [ 82.694060][ T26] audit: type=1800 audit(1790346888.413:4): pid=4545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.87" name="(" dev="sda1" ino=2047 res=0 errno=0 [ 83.217729][ T4565] FAULT_INJECTION: forcing a failure. [ 83.217729][ T4565] name failslab, interval 1, probability 0, space 0, times 0 [ 83.285971][ T4565] CPU: 0 PID: 4565 Comm: syz.2.97 Not tainted syzkaller #0 [ 83.293242][ T4565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 83.303339][ T4565] Call Trace: [ 83.306652][ T4565] [ 83.309627][ T4565] dump_stack_lvl+0x188/0x250 [ 83.314358][ T4565] ? show_regs_print_info+0x20/0x20 [ 83.319609][ T4565] ? load_image+0x410/0x410 [ 83.324200][ T4565] ? __might_sleep+0xf0/0xf0 [ 83.328954][ T4565] ? __lock_acquire+0x7b50/0x7b50 [ 83.334076][ T4565] should_fail+0x383/0x4b0 [ 83.338584][ T4565] should_failslab+0x5/0x20 [ 83.343135][ T4565] slab_pre_alloc_hook+0x51/0xc0 [ 83.348117][ T4565] ? __kernfs_new_node+0xe3/0x6b0 [ 83.353194][ T4565] kmem_cache_alloc+0x3d/0x280 [ 83.358098][ T4565] __kernfs_new_node+0xe3/0x6b0 [ 83.363443][ T4565] ? kernfs_new_node+0x250/0x250 [ 83.368450][ T4565] ? kernfs_create_dir_ns+0x10e/0x120 [ 83.374456][ T4565] ? sysfs_create_dir_ns+0x12c/0x290 [ 83.380133][ T4565] kernfs_new_node+0x148/0x250 [ 83.385049][ T4565] __kernfs_create_file+0x47/0x2e0 [ 83.390224][ T4565] sysfs_add_file_mode_ns+0x2d2/0x390 [ 83.395748][ T4565] sysfs_create_file_ns+0x12a/0x1b0 [ 83.401005][ T4565] ? sysfs_add_file_mode_ns+0x390/0x390 [ 83.406613][ T4565] device_add+0x554/0x1050 [ 83.411081][ T4565] wakeup_source_sysfs_add+0x1cf/0x2b0 [ 83.416586][ T4565] wakeup_source_register+0x15f/0x230 [ 83.422013][ T4565] ep_insert+0xe66/0x1990 [ 83.426628][ T4565] ? ep_loop_check+0x180/0x180 [ 83.431614][ T4565] ? __lock_acquire+0x7b50/0x7b50 [ 83.436910][ T4565] ? bpf_lsm_capable+0x5/0x10 [ 83.441644][ T4565] do_epoll_ctl+0x88b/0xeb0 [ 83.446206][ T4565] __x64_sys_epoll_ctl+0x162/0x1b0 [ 83.451391][ T4565] ? ep_modify+0xa80/0xa80 [ 83.455859][ T4565] ? lockdep_hardirqs_on+0x94/0x140 [ 83.461114][ T4565] do_syscall_64+0x4c/0xa0 [ 83.465576][ T4565] ? clear_bhb_loop+0x30/0x80 [ 83.470296][ T4565] ? clear_bhb_loop+0x30/0x80 [ 83.475022][ T4565] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.480965][ T4565] RIP: 0033:0x7f8d03ecc159 [ 83.485424][ T4565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.505213][ T4565] RSP: 002b:00007f8d02124028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 83.513678][ T4565] RAX: ffffffffffffffda RBX: 00007f8d04153fa0 RCX: 00007f8d03ecc159 [ 83.521777][ T4565] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 83.529789][ T4565] RBP: 00007f8d03f6306b R08: 0000000000000000 R09: 0000000000000000 [ 83.537803][ T4565] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.546014][ T4565] R13: 00007f8d04154038 R14: 00007f8d04153fa0 R15: 00007ffc0ae24468 [ 83.554065][ T4565] [ 84.006491][ T4579] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 84.072295][ T4576] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 84.087012][ T4579] overlayfs: overlapping lowerdir path [ 84.116908][ T4576] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 84.377105][ T4591] FAULT_INJECTION: forcing a failure. [ 84.377105][ T4591] name failslab, interval 1, probability 0, space 0, times 0 [ 84.397593][ T4587] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 84.425994][ T4587] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 84.431940][ T4591] CPU: 0 PID: 4591 Comm: syz.2.106 Not tainted syzkaller #0 [ 84.441889][ T4591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.451986][ T4591] Call Trace: [ 84.455306][ T4591] [ 84.458275][ T4591] dump_stack_lvl+0x188/0x250 [ 84.462995][ T4591] ? show_regs_print_info+0x20/0x20 [ 84.468243][ T4591] ? load_image+0x410/0x410 [ 84.472885][ T4591] ? __lock_acquire+0x7b50/0x7b50 [ 84.477968][ T4591] should_fail+0x383/0x4b0 [ 84.482596][ T4591] should_failslab+0x5/0x20 [ 84.487243][ T4591] slab_pre_alloc_hook+0x51/0xc0 [ 84.492239][ T4591] ? key_alloc+0x302/0x1030 [ 84.496953][ T4591] kmem_cache_alloc+0x3d/0x280 [ 84.501864][ T4591] key_alloc+0x302/0x1030 [ 84.506256][ T4591] request_key_and_link+0x784/0x13b0 [ 84.511608][ T4591] ? complete_request_key+0xa0/0xa0 [ 84.516863][ T4591] ? __might_sleep+0xf0/0xf0 [ 84.521542][ T4591] ? asymmetric_key_cmp+0x240/0x240 [ 84.526782][ T4591] ? keyring_search_rcu+0x280/0x280 [ 84.532058][ T4591] ? down_read+0x1aa/0x2e0 [ 84.537883][ T4591] __se_sys_request_key+0x293/0x350 [ 84.543142][ T4591] ? __x64_sys_request_key+0xa0/0xa0 [ 84.548906][ T4591] ? lockdep_hardirqs_on+0x94/0x140 [ 84.554163][ T4591] do_syscall_64+0x4c/0xa0 [ 84.558630][ T4591] ? clear_bhb_loop+0x30/0x80 [ 84.563357][ T4591] ? clear_bhb_loop+0x30/0x80 [ 84.568097][ T4591] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.574279][ T4591] RIP: 0033:0x7f8d03ecc159 [ 84.578741][ T4591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.598855][ T4591] RSP: 002b:00007f8d02124028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 84.607328][ T4591] RAX: ffffffffffffffda RBX: 00007f8d04153fa0 RCX: 00007f8d03ecc159 [ 84.615453][ T4591] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040 [ 84.623576][ T4591] RBP: 00007f8d03f6306b R08: 0000000000000000 R09: 0000000000000000 [ 84.631591][ T4591] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 84.639606][ T4591] R13: 00007f8d04154038 R14: 00007f8d04153fa0 R15: 00007ffc0ae24468 [ 84.648082][ T4591] [ 84.740987][ T4598] FAULT_INJECTION: forcing a failure. [ 84.740987][ T4598] name failslab, interval 1, probability 0, space 0, times 0 [ 84.773827][ T4598] CPU: 0 PID: 4598 Comm: syz.3.108 Not tainted syzkaller #0 [ 84.781201][ T4598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.791299][ T4598] Call Trace: [ 84.794616][ T4598] [ 84.797584][ T4598] dump_stack_lvl+0x188/0x250 [ 84.802308][ T4598] ? show_regs_print_info+0x20/0x20 [ 84.807590][ T4598] ? load_image+0x410/0x410 [ 84.812174][ T4598] ? __lock_acquire+0x7b50/0x7b50 [ 84.817241][ T4598] ? do_raw_spin_unlock+0x11d/0x230 [ 84.822493][ T4598] should_fail+0x383/0x4b0 [ 84.826957][ T4598] should_failslab+0x5/0x20 [ 84.831499][ T4598] slab_pre_alloc_hook+0x51/0xc0 [ 84.836479][ T4598] ? vm_area_alloc+0x20/0xe0 [ 84.841124][ T4598] kmem_cache_alloc+0x3d/0x280 [ 84.845942][ T4598] vm_area_alloc+0x20/0xe0 [ 84.850416][ T4598] mmap_region+0xbd2/0x1730 [ 84.854983][ T4598] ? get_unmapped_area+0x2f0/0x360 [ 84.860149][ T4598] do_mmap+0x801/0xe30 [ 84.864283][ T4598] ? vm_mmap_pgoff+0x16c/0x2d0 [ 84.869090][ T4598] vm_mmap_pgoff+0x1c1/0x2d0 [ 84.873740][ T4598] ? account_locked_vm+0xe0/0xe0 [ 84.878901][ T4598] ? __context_tracking_exit+0x4c/0x80 [ 84.884568][ T4598] ? __lock_acquire+0x7b50/0x7b50 [ 84.889809][ T4598] ksys_mmap_pgoff+0x140/0x790 [ 84.894771][ T4598] ? mmap_region+0x1730/0x1730 [ 84.899774][ T4598] ? lockdep_hardirqs_on+0x94/0x140 [ 84.905120][ T4598] do_syscall_64+0x4c/0xa0 [ 84.909938][ T4598] ? clear_bhb_loop+0x30/0x80 [ 84.914761][ T4598] ? clear_bhb_loop+0x30/0x80 [ 84.919582][ T4598] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.925798][ T4598] RIP: 0033:0x7f9b57bd8159 [ 84.930347][ T4598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.950398][ T4598] RSP: 002b:00007f9b55e30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 84.958867][ T4598] RAX: ffffffffffffffda RBX: 00007f9b57e5ffa0 RCX: 00007f9b57bd8159 [ 84.966905][ T4598] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000200000001000 [ 84.974917][ T4598] RBP: 00007f9b57c6f06b R08: ffffffffffffffff R09: 0000000000000000 [ 84.982934][ T4598] R10: 0000000000003032 R11: 0000000000000246 R12: 0000000000000000 [ 84.990950][ T4598] R13: 00007f9b57e60038 R14: 00007f9b57e5ffa0 R15: 00007ffe21819cc8 [ 84.998981][ T4598] [ 85.303910][ T4618] FAULT_INJECTION: forcing a failure. [ 85.303910][ T4618] name failslab, interval 1, probability 0, space 0, times 0 [ 85.326019][ T4618] CPU: 0 PID: 4618 Comm: syz.1.115 Not tainted syzkaller #0 [ 85.333644][ T4618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 85.343746][ T4618] Call Trace: [ 85.347045][ T4618] [ 85.350018][ T4618] dump_stack_lvl+0x188/0x250 [ 85.354731][ T4618] ? show_regs_print_info+0x20/0x20 [ 85.359934][ T4618] ? load_image+0x410/0x410 [ 85.364449][ T4618] ? __might_sleep+0xf0/0xf0 [ 85.369085][ T4618] ? __lock_acquire+0x7b50/0x7b50 [ 85.374182][ T4618] should_fail+0x383/0x4b0 [ 85.378743][ T4618] should_failslab+0x5/0x20 [ 85.383274][ T4618] slab_pre_alloc_hook+0x51/0xc0 [ 85.388218][ T4618] ? __kernfs_new_node+0xe3/0x6b0 [ 85.393257][ T4618] kmem_cache_alloc+0x3d/0x280 [ 85.398299][ T4618] __kernfs_new_node+0xe3/0x6b0 [ 85.403174][ T4618] ? __lock_acquire+0x7b50/0x7b50 [ 85.408214][ T4618] ? kernfs_new_node+0x250/0x250 [ 85.413171][ T4618] ? kernfs_activate+0x1eb/0x210 [ 85.418207][ T4618] kernfs_new_node+0x148/0x250 [ 85.422986][ T4618] __kernfs_create_file+0x47/0x2e0 [ 85.428117][ T4618] sysfs_add_file_mode_ns+0x2d2/0x390 [ 85.433538][ T4618] internal_create_group+0x492/0xd00 [ 85.438864][ T4618] ? sysfs_create_group+0x20/0x20 [ 85.443912][ T4618] ? kernfs_activate+0x1eb/0x210 [ 85.448867][ T4618] ? kernfs_add_one+0x564/0x6c0 [ 85.453731][ T4618] sysfs_create_groups+0x55/0x120 [ 85.458809][ T4618] device_add_attrs+0x12f/0x690 [ 85.463809][ T4618] device_add+0x677/0x1050 [ 85.468252][ T4618] wakeup_source_sysfs_add+0x1cf/0x2b0 [ 85.473723][ T4618] wakeup_source_register+0x15f/0x230 [ 85.479114][ T4618] ep_insert+0xe66/0x1990 [ 85.483461][ T4618] ? ep_loop_check+0x180/0x180 [ 85.488232][ T4618] ? __lock_acquire+0x7b50/0x7b50 [ 85.493277][ T4618] ? bpf_lsm_capable+0x5/0x10 [ 85.497990][ T4618] do_epoll_ctl+0x88b/0xeb0 [ 85.502512][ T4618] __x64_sys_epoll_ctl+0x162/0x1b0 [ 85.507647][ T4618] ? ep_modify+0xa80/0xa80 [ 85.512101][ T4618] ? lockdep_hardirqs_on+0x94/0x140 [ 85.517317][ T4618] do_syscall_64+0x4c/0xa0 [ 85.521742][ T4618] ? clear_bhb_loop+0x30/0x80 [ 85.526432][ T4618] ? clear_bhb_loop+0x30/0x80 [ 85.531120][ T4618] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.537209][ T4618] RIP: 0033:0x7f570add2159 [ 85.541723][ T4618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.562489][ T4618] RSP: 002b:00007f570902a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 85.571063][ T4618] RAX: ffffffffffffffda RBX: 00007f570b059fa0 RCX: 00007f570add2159 [ 85.579167][ T4618] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 85.587150][ T4618] RBP: 00007f570ae6906b R08: 0000000000000000 R09: 0000000000000000 [ 85.595128][ T4618] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.603110][ T4618] R13: 00007f570b05a038 R14: 00007f570b059fa0 R15: 00007ffdd3e1f988 [ 85.611119][ T4618] [ 85.836563][ T4620] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 85.861983][ T4620] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 86.284809][ T4640] FAULT_INJECTION: forcing a failure. [ 86.284809][ T4640] name failslab, interval 1, probability 0, space 0, times 0 [ 86.326872][ T4640] CPU: 0 PID: 4640 Comm: syz.0.122 Not tainted syzkaller #0 [ 86.334361][ T4640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.344457][ T4640] Call Trace: [ 86.347773][ T4640] [ 86.350744][ T4640] dump_stack_lvl+0x188/0x250 [ 86.355470][ T4640] ? show_regs_print_info+0x20/0x20 [ 86.360869][ T4640] ? load_image+0x410/0x410 [ 86.365684][ T4640] ? __lock_acquire+0x7b50/0x7b50 [ 86.370806][ T4640] should_fail+0x383/0x4b0 [ 86.375279][ T4640] should_failslab+0x5/0x20 [ 86.379827][ T4640] slab_pre_alloc_hook+0x51/0xc0 [ 86.384807][ T4640] ? key_alloc+0x302/0x1030 [ 86.389350][ T4640] kmem_cache_alloc+0x3d/0x280 [ 86.394165][ T4640] key_alloc+0x302/0x1030 [ 86.398558][ T4640] request_key_and_link+0x784/0x13b0 [ 86.403903][ T4640] ? complete_request_key+0xa0/0xa0 [ 86.409153][ T4640] ? __might_sleep+0xf0/0xf0 [ 86.413786][ T4640] ? asymmetric_key_cmp+0x240/0x240 [ 86.419031][ T4640] ? keyring_search_rcu+0x280/0x280 [ 86.424275][ T4640] ? down_read+0x1aa/0x2e0 [ 86.428772][ T4640] __se_sys_request_key+0x293/0x350 [ 86.434033][ T4640] ? __x64_sys_request_key+0xa0/0xa0 [ 86.439375][ T4640] ? lockdep_hardirqs_on+0x94/0x140 [ 86.444626][ T4640] do_syscall_64+0x4c/0xa0 [ 86.449081][ T4640] ? clear_bhb_loop+0x30/0x80 [ 86.453831][ T4640] ? clear_bhb_loop+0x30/0x80 [ 86.458552][ T4640] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.464484][ T4640] RIP: 0033:0x7f5add297159 [ 86.468935][ T4640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.488605][ T4640] RSP: 002b:00007f5adb4ef028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 86.497066][ T4640] RAX: ffffffffffffffda RBX: 00007f5add51efa0 RCX: 00007f5add297159 [ 86.505089][ T4640] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040 [ 86.513585][ T4640] RBP: 00007f5add32e06b R08: 0000000000000000 R09: 0000000000000000 [ 86.521700][ T4640] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 86.529808][ T4640] R13: 00007f5add51f038 R14: 00007f5add51efa0 R15: 00007ffcb1aaa3f8 [ 86.537850][ T4640] [ 86.788219][ T21] cfg80211: failed to load regulatory.db [ 87.422163][ T4663] FAULT_INJECTION: forcing a failure. [ 87.422163][ T4663] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 87.475139][ T4663] CPU: 0 PID: 4663 Comm: syz.0.130 Not tainted syzkaller #0 [ 87.482518][ T4663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 87.492610][ T4663] Call Trace: [ 87.495947][ T4663] [ 87.498936][ T4663] dump_stack_lvl+0x188/0x250 [ 87.503662][ T4663] ? show_regs_print_info+0x20/0x20 [ 87.508984][ T4663] ? load_image+0x410/0x410 [ 87.513572][ T4663] ? __lock_acquire+0x7b50/0x7b50 [ 87.518630][ T4663] ? __local_bh_enable_ip+0x136/0x1c0 [ 87.524126][ T4663] ? _local_bh_enable+0xa0/0xa0 [ 87.529016][ T4663] should_fail+0x383/0x4b0 [ 87.533475][ T4663] copy_fpstate_to_sigframe+0x874/0xba0 [ 87.539072][ T4663] ? fpregs_set+0x5d0/0x5d0 [ 87.543609][ T4663] ? _raw_spin_unlock_irq+0x2a/0x40 [ 87.549070][ T4663] ? get_signal+0x121c/0x12e0 [ 87.553816][ T4663] ? fpu__alloc_mathframe+0x77/0x140 [ 87.559166][ T4663] arch_do_signal_or_restart+0x640/0x12a0 [ 87.564947][ T4663] ? load_gs_index+0x130/0x130 [ 87.569760][ T4663] ? get_sigframe_size+0x10/0x10 [ 87.574766][ T4663] ? exit_to_user_mode_loop+0x3b/0x130 [ 87.580267][ T4663] exit_to_user_mode_loop+0x9e/0x130 [ 87.585596][ T4663] exit_to_user_mode_prepare+0xee/0x180 [ 87.591199][ T4663] syscall_exit_to_user_mode+0x16/0x40 [ 87.596701][ T4663] do_syscall_64+0x58/0xa0 [ 87.601148][ T4663] ? clear_bhb_loop+0x30/0x80 [ 87.605962][ T4663] ? clear_bhb_loop+0x30/0x80 [ 87.610685][ T4663] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.616741][ T4663] RIP: 0033:0x7f5add297159 [ 87.621192][ T4663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.640840][ T4663] RSP: 002b:00007f5adb4ef028 EFLAGS: 00000246 [ 87.646991][ T4663] RAX: 0000000000000000 RBX: 00007f5add51efa0 RCX: 00007f5add297159 [ 87.655096][ T4663] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000000 [ 87.663104][ T4663] RBP: 00007f5add32e06b R08: 0000000000000000 R09: 0000000000000000 [ 87.671125][ T4663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.679142][ T4663] R13: 00007f5add51f038 R14: 00007f5add51efa0 R15: 00007ffcb1aaa3f8 [ 87.687173][ T4663] [ 88.101414][ T4669] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 88.115997][ T4669] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 88.386436][ T4680] FAULT_INJECTION: forcing a failure. [ 88.386436][ T4680] name failslab, interval 1, probability 0, space 0, times 0 [ 88.434761][ T4680] CPU: 0 PID: 4680 Comm: syz.3.135 Not tainted syzkaller #0 [ 88.442230][ T4680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 88.452340][ T4680] Call Trace: [ 88.455663][ T4680] [ 88.458628][ T4680] dump_stack_lvl+0x188/0x250 [ 88.463363][ T4680] ? show_regs_print_info+0x20/0x20 [ 88.468645][ T4680] ? load_image+0x410/0x410 [ 88.473201][ T4680] ? __lock_acquire+0x7b50/0x7b50 [ 88.478276][ T4680] should_fail+0x383/0x4b0 [ 88.482754][ T4680] should_failslab+0x5/0x20 [ 88.487297][ T4680] slab_pre_alloc_hook+0x51/0xc0 [ 88.490138][ T4684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.137'. [ 88.492279][ T4680] __kmalloc+0x6b/0x340 [ 88.492316][ T4680] ? asymmetric_key_match_preparse+0x1e0/0x3f0 [ 88.511878][ T4680] ? asymmetric_key_cmp+0x240/0x240 [ 88.517136][ T4680] asymmetric_key_match_preparse+0x1e0/0x3f0 [ 88.523170][ T4680] ? asymmetric_key_free_preparse+0x190/0x190 [ 88.529524][ T4680] request_key_and_link+0x1df/0x13b0 [ 88.535570][ T4680] ? complete_request_key+0xa0/0xa0 [ 88.540831][ T4680] ? __might_sleep+0xf0/0xf0 [ 88.545483][ T4680] ? restrict_link_reject+0x10/0x10 [ 88.550737][ T4680] ? down_read+0x1aa/0x2e0 [ 88.555192][ T4680] __se_sys_request_key+0x293/0x350 [ 88.561840][ T4680] ? __x64_sys_request_key+0xa0/0xa0 [ 88.567184][ T4680] ? lockdep_hardirqs_on+0x94/0x140 [ 88.572432][ T4680] do_syscall_64+0x4c/0xa0 [ 88.576966][ T4680] ? clear_bhb_loop+0x30/0x80 [ 88.581702][ T4680] ? clear_bhb_loop+0x30/0x80 [ 88.586600][ T4680] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 88.592540][ T4680] RIP: 0033:0x7f9b57bd8159 [ 88.596988][ T4680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.616633][ T4680] RSP: 002b:00007f9b55e30028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 88.625548][ T4680] RAX: ffffffffffffffda RBX: 00007f9b57e5ffa0 RCX: 00007f9b57bd8159 [ 88.633569][ T4680] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040 [ 88.641578][ T4680] RBP: 00007f9b57c6f06b R08: 0000000000000000 R09: 0000000000000000 [ 88.649585][ T4680] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 88.657598][ T4680] R13: 00007f9b57e60038 R14: 00007f9b57e5ffa0 R15: 00007ffe21819cc8 [ 88.665720][ T4680] [ 89.443394][ T4706] process 'syz.3.146' launched './file0' with NULL argv: empty string added [ 90.048564][ T4706] kvm: vcpu 0: requested 2 ns lapic timer period limited to 200000 ns [ 90.241260][ T4729] FAULT_INJECTION: forcing a failure. [ 90.241260][ T4729] name failslab, interval 1, probability 0, space 0, times 0 [ 90.332073][ T4729] CPU: 1 PID: 4729 Comm: syz.1.150 Not tainted syzkaller #0 [ 90.339450][ T4729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 90.349786][ T4729] Call Trace: [ 90.353110][ T4729] [ 90.356075][ T4729] dump_stack_lvl+0x188/0x250 [ 90.360806][ T4729] ? show_regs_print_info+0x20/0x20 [ 90.366053][ T4729] ? load_image+0x410/0x410 [ 90.370626][ T4729] ? __lock_acquire+0x7b50/0x7b50 [ 90.375705][ T4729] should_fail+0x383/0x4b0 [ 90.380174][ T4729] should_failslab+0x5/0x20 [ 90.384719][ T4729] slab_pre_alloc_hook+0x51/0xc0 [ 90.389689][ T4729] ? key_alloc+0x302/0x1030 [ 90.394233][ T4729] kmem_cache_alloc+0x3d/0x280 [ 90.399046][ T4729] key_alloc+0x302/0x1030 [ 90.403440][ T4729] request_key_and_link+0x784/0x13b0 [ 90.408882][ T4729] ? complete_request_key+0xa0/0xa0 [ 90.414220][ T4729] ? __might_sleep+0xf0/0xf0 [ 90.418855][ T4729] ? asymmetric_key_cmp+0x240/0x240 [ 90.424085][ T4729] ? keyring_search_rcu+0x280/0x280 [ 90.429327][ T4729] ? down_read+0x1aa/0x2e0 [ 90.433799][ T4729] __se_sys_request_key+0x293/0x350 [ 90.439054][ T4729] ? __x64_sys_request_key+0xa0/0xa0 [ 90.444585][ T4729] ? lockdep_hardirqs_on+0x94/0x140 [ 90.449914][ T4729] do_syscall_64+0x4c/0xa0 [ 90.454551][ T4729] ? clear_bhb_loop+0x30/0x80 [ 90.459356][ T4729] ? clear_bhb_loop+0x30/0x80 [ 90.464160][ T4729] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.470087][ T4729] RIP: 0033:0x7f570add2159 [ 90.474549][ T4729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.494721][ T4729] RSP: 002b:00007f570902a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 90.503788][ T4729] RAX: ffffffffffffffda RBX: 00007f570b059fa0 RCX: 00007f570add2159 [ 90.511820][ T4729] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040 [ 90.519840][ T4729] RBP: 00007f570ae6906b R08: 0000000000000000 R09: 0000000000000000 [ 90.527853][ T4729] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 90.535866][ T4729] R13: 00007f570b05a038 R14: 00007f570b059fa0 R15: 00007ffdd3e1f988 [ 90.543893][ T4729] [ 90.611172][ T4726] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 90.636272][ T4726] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 91.072344][ T4747] loop0: detected capacity change from 0 to 128 [ 91.298700][ T4747] attempt to access beyond end of device [ 91.298700][ T4747] loop0: rw=2049, want=1041, limit=128 [ 91.408276][ T4745] attempt to access beyond end of device [ 91.408276][ T4745] loop0: rw=524288, want=369, limit=128 [ 91.893171][ T4768] loop1: detected capacity change from 0 to 512 [ 92.031342][ T4768] FAT-fs (loop1): Unrecognized mount option "" or missing value [ 92.531585][ T4783] warn_alloc: 6 callbacks suppressed [ 92.531605][ T4783] syz.4.168: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 92.552480][ T4783] CPU: 0 PID: 4783 Comm: syz.4.168 Not tainted syzkaller #0 [ 92.559788][ T4783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 92.569850][ T4783] Call Trace: [ 92.573149][ T4783] [ 92.576082][ T4783] dump_stack_lvl+0x188/0x250 [ 92.580769][ T4783] ? rcu_lock_release+0x5/0x20 [ 92.585555][ T4783] ? show_regs_print_info+0x20/0x20 [ 92.590779][ T4783] ? load_image+0x410/0x410 [ 92.595320][ T4783] warn_alloc+0x245/0x320 [ 92.599690][ T4783] ? rcu_lock_release+0x20/0x20 [ 92.604598][ T4783] ? zone_watermark_ok_safe+0x250/0x250 [ 92.610177][ T4783] ? kfree+0xef/0x2a0 [ 92.614195][ T4783] __vmalloc_node_range+0x2b1/0x8b0 [ 92.619546][ T4783] ? mutex_lock_io_nested+0x60/0x60 [ 92.624778][ T4783] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 92.630636][ T4783] vmalloc+0x75/0x80 [ 92.634554][ T4783] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 92.640392][ T4783] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 92.646046][ T4783] dvb_demux_do_ioctl+0x450/0x530 [ 92.651190][ T4783] dvb_usercopy+0x191/0x2b0 [ 92.655848][ T4783] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 92.661429][ T4783] ? dvb_generic_ioctl+0xb0/0xb0 [ 92.666415][ T4783] ? dvb_demux_poll+0x210/0x210 [ 92.671286][ T4783] dvb_demux_ioctl+0x25/0x30 [ 92.675901][ T4783] __se_sys_ioctl+0xfa/0x170 [ 92.680517][ T4783] do_syscall_64+0x4c/0xa0 [ 92.684955][ T4783] ? clear_bhb_loop+0x30/0x80 [ 92.689661][ T4783] ? clear_bhb_loop+0x30/0x80 [ 92.694386][ T4783] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 92.700326][ T4783] RIP: 0033:0x7fbd52a63159 [ 92.704772][ T4783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.724405][ T4783] RSP: 002b:00007fbd50cbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 92.732877][ T4783] RAX: ffffffffffffffda RBX: 00007fbd52ceafa0 RCX: 00007fbd52a63159 [ 92.740886][ T4783] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000005 [ 92.748868][ T4783] RBP: 00007fbd52afa06b R08: 0000000000000000 R09: 0000000000000000 [ 92.756943][ T4783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.764933][ T4783] R13: 00007fbd52ceb038 R14: 00007fbd52ceafa0 R15: 00007fff0a6492b8 [ 92.773295][ T4783] [ 92.778866][ T4783] Mem-Info: [ 92.782068][ T4783] active_anon:317 inactive_anon:8768 isolated_anon:0 [ 92.782068][ T4783] active_file:4704 inactive_file:36576 isolated_file:0 [ 92.782068][ T4783] unevictable:768 dirty:236 writeback:0 [ 92.782068][ T4783] slab_reclaimable:20866 slab_unreclaimable:95439 [ 92.782068][ T4783] mapped:32667 shmem:4564 pagetables:635 bounce:0 [ 92.782068][ T4783] kernel_misc_reclaimable:0 [ 92.782068][ T4783] free:1389280 free_pcp:10870 free_cma:0 [ 92.824758][ T4783] Node 0 active_anon:1236kB inactive_anon:34560kB active_file:18616kB inactive_file:146304kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130668kB dirty:944kB writeback:0kB shmem:16176kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10516kB pagetables:2540kB all_unreclaimable? no [ 92.856520][ T4783] Node 1 active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 92.886155][ T4783] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 92.912905][ T4783] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 92.918876][ T4783] Node 0 DMA32 free:1633940kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1236kB inactive_anon:34560kB active_file:18616kB inactive_file:146304kB unevictable:1536kB writepending:944kB present:3129332kB managed:2606508kB mlocked:0kB bounce:0kB free_pcp:31372kB local_pcp:22060kB free_cma:0kB [ 92.949479][ T4783] lowmem_reserve[]: 0 0 0 0 0 [ 92.954321][ T4783] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 92.980221][ T4783] lowmem_reserve[]: 0 0 0 0 0 [ 92.985102][ T4783] Node 1 Normal free:3907568kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:12356kB local_pcp:3436kB free_cma:0kB [ 93.014846][ T4783] lowmem_reserve[]: 0 0 0 0 0 [ 93.019691][ T4783] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 93.032745][ T4783] Node 0 DMA32: 635*4kB (UME) 241*8kB (UME) 124*16kB (UME) 65*32kB (UME) 43*64kB (UME) 27*128kB (UME) 7*256kB (UM) 5*512kB (UM) 1*1024kB (M) 2*2048kB (UM) 393*4096kB (M) = 1633940kB [ 93.051135][ T4783] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 93.062789][ T4783] Node 1 Normal: 78*4kB (UME) 29*8kB (UME) 21*16kB (UME) 92*32kB (UME) 38*64kB (UME) 15*128kB (UME) 4*256kB (UE) 2*512kB (U) 0*1024kB 1*2048kB (M) 951*4096kB (UM) = 3907568kB [ 93.080409][ T4783] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 93.091384][ T4783] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 93.101204][ T4783] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 93.111119][ T4783] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 93.121161][ T4783] 45841 total pagecache pages [ 93.125976][ T4783] 0 pages in swap cache [ 93.130806][ T4783] Swap cache stats: add 273, delete 271, find 2/3 [ 93.137329][ T4783] Free swap = 124728kB [ 93.141553][ T4783] Total swap = 124996kB [ 93.145790][ T4783] 2097051 pages RAM [ 93.149662][ T4783] 0 pages HighMem/MovableOnly [ 93.154392][ T4783] 411501 pages reserved [ 93.158623][ T4783] 0 pages cma reserved [ 93.713262][ T4802] loop4: detected capacity change from 0 to 128 [ 93.738419][ T4803] loop2: detected capacity change from 0 to 128 [ 93.804056][ T4803] FAT-fs (loop2): bogus logical sector size 65535 [ 93.842092][ T4803] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 93.875783][ T4798] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 93.894240][ T4803] FAT-fs (loop2): Can't find a valid FAT filesystem [ 93.904475][ T4798] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 93.925235][ T4802] attempt to access beyond end of device [ 93.925235][ T4802] loop4: rw=2049, want=473, limit=128 [ 95.242597][ T4843] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 95.263168][ T4843] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 95.546938][ T4858] FAULT_INJECTION: forcing a failure. [ 95.546938][ T4858] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 95.574842][ T4858] CPU: 0 PID: 4858 Comm: syz.3.192 Not tainted syzkaller #0 [ 95.582385][ T4858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.592523][ T4858] Call Trace: [ 95.595869][ T4858] [ 95.598830][ T4858] dump_stack_lvl+0x188/0x250 [ 95.603560][ T4858] ? show_regs_print_info+0x20/0x20 [ 95.608832][ T4858] ? load_image+0x410/0x410 [ 95.613379][ T4858] ? __lock_acquire+0x7b50/0x7b50 [ 95.618480][ T4858] should_fail+0x383/0x4b0 [ 95.622986][ T4858] prepare_alloc_pages+0x1e3/0x5b0 [ 95.628151][ T4858] __alloc_pages+0x11b/0x480 [ 95.632807][ T4858] ? zone_statistics+0x170/0x170 [ 95.637798][ T4858] ? alloc_pages+0x452/0x560 [ 95.642435][ T4858] __pmd_alloc+0xa6/0x750 [ 95.646833][ T4858] ? __lock_acquire+0x7b50/0x7b50 [ 95.651894][ T4858] ? do_raw_spin_lock+0x128/0x2f0 [ 95.656966][ T4858] ? __pud_alloc+0x140/0x140 [ 95.661594][ T4858] ? __rwlock_init+0x140/0x140 [ 95.666392][ T4858] ? count_memcg_event_mm+0x324/0x370 [ 95.671811][ T4858] ? do_raw_spin_unlock+0x11d/0x230 [ 95.677075][ T4858] ? _raw_spin_unlock+0x24/0x40 [ 95.681967][ T4858] ? __pud_alloc+0x122/0x140 [ 95.686596][ T4858] handle_mm_fault+0xbd3/0x4440 [ 95.691511][ T4858] ? get_page+0xe0/0xe0 [ 95.695713][ T4858] ? follow_page_mask+0x272/0x12b0 [ 95.700864][ T4858] ? vma_is_secretmem+0x9/0x40 [ 95.705663][ T4858] ? check_vma_flags+0x359/0x470 [ 95.710640][ T4858] __get_user_pages+0x952/0x11e0 [ 95.715641][ T4858] ? populate_vma_page_range+0x290/0x290 [ 95.721324][ T4858] ? __might_sleep+0xf0/0xf0 [ 95.726037][ T4858] ? read_lock_is_recursive+0x10/0x10 [ 95.731976][ T4858] __get_user_pages_remote+0x1c2/0x730 [ 95.737508][ T4858] ? get_user_pages_remote+0x55/0xa0 [ 95.742841][ T4858] get_arg_page+0x11b/0x350 [ 95.747703][ T4858] ? copy_string_kernel+0x280/0x280 [ 95.752962][ T4858] ? up_write+0x1b6/0x410 [ 95.757611][ T4858] copy_string_kernel+0x14d/0x280 [ 95.762924][ T4858] do_execveat_common+0x360/0x6b0 [ 95.768021][ T4858] __x64_sys_execveat+0xc0/0xe0 [ 95.773021][ T4858] do_syscall_64+0x4c/0xa0 [ 95.777487][ T4858] ? clear_bhb_loop+0x30/0x80 [ 95.782246][ T4858] ? clear_bhb_loop+0x30/0x80 [ 95.786976][ T4858] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 95.792931][ T4858] RIP: 0033:0x7f9b57bd8159 [ 95.797384][ T4858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.817021][ T4858] RSP: 002b:00007f9b55e30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 95.825479][ T4858] RAX: ffffffffffffffda RBX: 00007f9b57e5ffa0 RCX: 00007f9b57bd8159 [ 95.833593][ T4858] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 95.841616][ T4858] RBP: 00007f9b57c6f06b R08: 0000000000001000 R09: 0000000000000000 [ 95.850306][ T4858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.859037][ T4858] R13: 00007f9b57e60038 R14: 00007f9b57e5ffa0 R15: 00007ffe21819cc8 [ 95.867085][ T4858] [ 96.383209][ T4869] loop3: detected capacity change from 0 to 128 [ 96.396611][ T4860] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 96.404579][ T4860] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 96.594216][ T4871] attempt to access beyond end of device [ 96.594216][ T4871] loop3: rw=2049, want=497, limit=128 [ 96.888587][ T4882] loop4: detected capacity change from 0 to 512 [ 96.974873][ T26] audit: type=1326 audit(1790346902.663:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4885 comm="syz.2.203" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d03ecc159 code=0x7ffc0000 [ 97.072395][ T4886] loop2: detected capacity change from 0 to 256 [ 97.100338][ T26] audit: type=1326 audit(1790346902.693:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4885 comm="syz.2.203" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8d03ecc159 code=0x7ffc0000 [ 97.273670][ T26] audit: type=1326 audit(1790346902.693:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4885 comm="syz.2.203" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d03ecc159 code=0x7ffc0000 [ 97.377580][ T26] audit: type=1326 audit(1790346902.733:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4885 comm="syz.2.203" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8d03ecc159 code=0x7ffc0000 [ 97.474300][ T26] audit: type=1326 audit(1790346902.733:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4885 comm="syz.2.203" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d03ecc159 code=0x7ffc0000 [ 97.565592][ T26] audit: type=1326 audit(1790346902.733:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4885 comm="syz.2.203" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8d03ecc159 code=0x7ffc0000 [ 97.697102][ T26] audit: type=1326 audit(1790346902.733:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4885 comm="syz.2.203" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d03ecc159 code=0x7ffc0000 [ 97.829813][ T26] audit: type=1326 audit(1790346902.763:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4885 comm="syz.2.203" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f8d03ecc159 code=0x7ffc0000 [ 97.915296][ T26] audit: type=1326 audit(1790346902.763:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4885 comm="syz.2.203" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d03ecc159 code=0x7ffc0000 [ 97.988371][ T4905] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 98.013655][ T26] audit: type=1326 audit(1790346902.763:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4885 comm="syz.2.203" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f8d03ecc159 code=0x7ffc0000 [ 98.016249][ T4905] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 98.418062][ T4920] FAULT_INJECTION: forcing a failure. [ 98.418062][ T4920] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 98.473749][ T4920] CPU: 1 PID: 4920 Comm: syz.4.214 Not tainted syzkaller #0 [ 98.481123][ T4920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 98.491216][ T4920] Call Trace: [ 98.494534][ T4920] [ 98.497499][ T4920] dump_stack_lvl+0x188/0x250 [ 98.502224][ T4920] ? show_regs_print_info+0x20/0x20 [ 98.507470][ T4920] ? load_image+0x410/0x410 [ 98.512030][ T4920] ? __lock_acquire+0x7b50/0x7b50 [ 98.517115][ T4920] should_fail+0x383/0x4b0 [ 98.521583][ T4920] prepare_alloc_pages+0x1e3/0x5b0 [ 98.526846][ T4920] __alloc_pages+0x11b/0x480 [ 98.531517][ T4920] ? zone_statistics+0x170/0x170 [ 98.536518][ T4920] ? alloc_pages+0x452/0x560 [ 98.541167][ T4920] __pmd_alloc+0xa6/0x750 [ 98.545545][ T4920] ? __lock_acquire+0x7b50/0x7b50 [ 98.550628][ T4920] ? do_raw_spin_lock+0x128/0x2f0 [ 98.555698][ T4920] ? __pud_alloc+0x140/0x140 [ 98.560383][ T4920] ? __rwlock_init+0x140/0x140 [ 98.565188][ T4920] ? count_memcg_event_mm+0x324/0x370 [ 98.570604][ T4920] ? do_raw_spin_unlock+0x11d/0x230 [ 98.575851][ T4920] ? _raw_spin_unlock+0x24/0x40 [ 98.580741][ T4920] ? __pud_alloc+0x122/0x140 [ 98.585376][ T4920] handle_mm_fault+0xbd3/0x4440 [ 98.590284][ T4920] ? get_page+0xe0/0xe0 [ 98.594488][ T4920] ? follow_page_mask+0x272/0x12b0 [ 98.599652][ T4920] ? vma_is_secretmem+0x9/0x40 [ 98.604453][ T4920] ? check_vma_flags+0x359/0x470 [ 98.609434][ T4920] __get_user_pages+0x952/0x11e0 [ 98.614432][ T4920] ? populate_vma_page_range+0x290/0x290 [ 98.620113][ T4920] ? __might_sleep+0xf0/0xf0 [ 98.624742][ T4920] ? read_lock_is_recursive+0x10/0x10 [ 98.630163][ T4920] __get_user_pages_remote+0x1c2/0x730 [ 98.635676][ T4920] ? get_user_pages_remote+0x55/0xa0 [ 98.641019][ T4920] get_arg_page+0x11b/0x350 [ 98.645703][ T4920] ? copy_string_kernel+0x280/0x280 [ 98.650961][ T4920] ? up_write+0x1b6/0x410 [ 98.655347][ T4920] copy_string_kernel+0x14d/0x280 [ 98.660417][ T4920] do_execveat_common+0x360/0x6b0 [ 98.665587][ T4920] __x64_sys_execveat+0xc0/0xe0 [ 98.670490][ T4920] do_syscall_64+0x4c/0xa0 [ 98.674961][ T4920] ? clear_bhb_loop+0x30/0x80 [ 98.679695][ T4920] ? clear_bhb_loop+0x30/0x80 [ 98.684420][ T4920] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.690359][ T4920] RIP: 0033:0x7fbd52a63159 [ 98.694815][ T4920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.714589][ T4920] RSP: 002b:00007fbd50cbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 98.723059][ T4920] RAX: ffffffffffffffda RBX: 00007fbd52ceafa0 RCX: 00007fbd52a63159 [ 98.731072][ T4920] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 98.739645][ T4920] RBP: 00007fbd52afa06b R08: 0000000000001000 R09: 0000000000000000 [ 98.747663][ T4920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.755754][ T4920] R13: 00007fbd52ceb038 R14: 00007fbd52ceafa0 R15: 00007fff0a6492b8 [ 98.763953][ T4920] [ 99.078391][ T4932] loop2: detected capacity change from 0 to 128 [ 99.127432][ T4930] loop3: detected capacity change from 0 to 256 [ 99.326492][ T4933] attempt to access beyond end of device [ 99.326492][ T4933] loop2: rw=2049, want=689, limit=128 [ 99.446431][ T4936] loop3: detected capacity change from 0 to 512 [ 101.136241][ T4971] loop0: detected capacity change from 0 to 16 [ 101.240351][ T4958] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 101.258766][ T4958] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 101.276676][ T4971] erofs: (device loop0): erofs_read_inode: unsupported chunk format 7fff of nid 36 [ 101.307587][ T4973] loop1: detected capacity change from 0 to 256 [ 101.533870][ T4976] loop2: detected capacity change from 0 to 512 [ 101.614355][ T4980] loop1: detected capacity change from 0 to 128 [ 101.870731][ T4980] attempt to access beyond end of device [ 101.870731][ T4980] loop1: rw=2049, want=521, limit=128 [ 101.954943][ T4979] attempt to access beyond end of device [ 101.954943][ T4979] loop1: rw=524288, want=369, limit=128 [ 102.706909][ T5003] warn_alloc: 5 callbacks suppressed [ 102.706921][ T5003] syz.2.243: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 102.726907][ T5003] CPU: 1 PID: 5003 Comm: syz.2.243 Not tainted syzkaller #0 [ 102.734209][ T5003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.744278][ T5003] Call Trace: [ 102.747661][ T5003] [ 102.750597][ T5003] dump_stack_lvl+0x188/0x250 [ 102.755734][ T5003] ? rcu_lock_release+0x5/0x20 [ 102.760520][ T5003] ? show_regs_print_info+0x20/0x20 [ 102.765783][ T5003] ? load_image+0x410/0x410 [ 102.770336][ T5003] warn_alloc+0x245/0x320 [ 102.774698][ T5003] ? rcu_lock_release+0x20/0x20 [ 102.779599][ T5003] ? zone_watermark_ok_safe+0x250/0x250 [ 102.785309][ T5003] ? kfree+0xef/0x2a0 [ 102.789340][ T5003] __vmalloc_node_range+0x2b1/0x8b0 [ 102.794581][ T5003] ? mutex_lock_io_nested+0x60/0x60 [ 102.799865][ T5003] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 102.805704][ T5003] vmalloc+0x75/0x80 [ 102.809629][ T5003] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 102.815447][ T5003] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 102.821103][ T5003] dvb_demux_do_ioctl+0x450/0x530 [ 102.826176][ T5003] dvb_usercopy+0x191/0x2b0 [ 102.830720][ T5003] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 102.836282][ T5003] ? dvb_generic_ioctl+0xb0/0xb0 [ 102.841248][ T5003] ? dvb_demux_poll+0x210/0x210 [ 102.846109][ T5003] dvb_demux_ioctl+0x25/0x30 [ 102.850717][ T5003] __se_sys_ioctl+0xfa/0x170 [ 102.855317][ T5003] do_syscall_64+0x4c/0xa0 [ 102.859738][ T5003] ? clear_bhb_loop+0x30/0x80 [ 102.864435][ T5003] ? clear_bhb_loop+0x30/0x80 [ 102.869124][ T5003] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.875029][ T5003] RIP: 0033:0x7f8d03ecc159 [ 102.879450][ T5003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.899686][ T5003] RSP: 002b:00007f8d02124028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.908114][ T5003] RAX: ffffffffffffffda RBX: 00007f8d04153fa0 RCX: 00007f8d03ecc159 [ 102.916140][ T5003] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000005 [ 102.924163][ T5003] RBP: 00007f8d03f6306b R08: 0000000000000000 R09: 0000000000000000 [ 102.932431][ T5003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.940895][ T5003] R13: 00007f8d04154038 R14: 00007f8d04153fa0 R15: 00007ffc0ae24468 [ 102.948917][ T5003] [ 102.956009][ T5003] Mem-Info: [ 102.959207][ T5003] active_anon:3139 inactive_anon:11659 isolated_anon:0 [ 102.959207][ T5003] active_file:4805 inactive_file:36575 isolated_file:0 [ 102.959207][ T5003] unevictable:768 dirty:231 writeback:1 [ 102.959207][ T5003] slab_reclaimable:20772 slab_unreclaimable:95671 [ 102.959207][ T5003] mapped:35547 shmem:10229 pagetables:692 bounce:0 [ 102.959207][ T5003] kernel_misc_reclaimable:0 [ 102.959207][ T5003] free:1387216 free_pcp:6944 free_cma:0 [ 103.001550][ T5003] Node 0 active_anon:12524kB inactive_anon:46124kB active_file:19020kB inactive_file:146300kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:142188kB dirty:924kB writeback:4kB shmem:38836kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10440kB pagetables:2768kB all_unreclaimable? no [ 103.033220][ T5003] Node 1 active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 103.063439][ T5003] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 103.090092][ T5003] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 103.096070][ T5003] Node 0 DMA32 free:1624424kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:12524kB inactive_anon:46124kB active_file:19020kB inactive_file:146300kB unevictable:1536kB writepending:980kB present:3129332kB managed:2606508kB mlocked:0kB bounce:0kB free_pcp:16888kB local_pcp:3320kB free_cma:0kB [ 103.126563][ T5003] lowmem_reserve[]: 0 0 0 0 0 [ 103.131343][ T5003] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 103.158068][ T5003] lowmem_reserve[]: 0 0 0 0 0 [ 103.162886][ T5003] Node 1 Normal free:3909080kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:10880kB local_pcp:8200kB free_cma:0kB [ 103.191958][ T5003] lowmem_reserve[]: 0 0 0 0 0 [ 103.196789][ T5003] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 103.210099][ T5003] Node 0 DMA32: 2*4kB (ME) 2*8kB (UM) 45*16kB (UME) 2*32kB (UE) 23*64kB (UME) 23*128kB (UME) 9*256kB (UM) 8*512kB (UM) 1*1024kB (M) 1*2048kB (U) 393*4096kB (M) = 1624424kB [ 103.227576][ T5003] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 103.239185][ T5003] Node 1 Normal: 92*4kB (UME) 39*8kB (UME) 21*16kB (UME) 99*32kB (UME) 42*64kB (UME) 14*128kB (UME) 4*256kB (U) 4*512kB (UE) 0*1024kB 1*2048kB (M) 951*4096kB (UM) = 3909080kB [ 103.257456][ T5003] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 103.267219][ T5003] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 103.277052][ T5003] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 103.287019][ T5003] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 103.296870][ T5003] 51584 total pagecache pages [ 103.301622][ T5003] 0 pages in swap cache [ 103.305912][ T5003] Swap cache stats: add 273, delete 273, find 2/3 [ 103.312413][ T5003] Free swap = 124728kB [ 103.316700][ T5003] Total swap = 124996kB [ 103.320908][ T5003] 2097051 pages RAM [ 103.324761][ T5003] 0 pages HighMem/MovableOnly [ 103.329524][ T5003] 411501 pages reserved [ 103.333727][ T5003] 0 pages cma reserved [ 103.935098][ T5007] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 103.982382][ T5007] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 104.095653][ T5018] Zero length message leads to an empty skb [ 104.127244][ T5021] loop0: detected capacity change from 0 to 512 [ 104.428359][ T5025] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 104.896254][ T5043] netlink: 36 bytes leftover after parsing attributes in process `syz.0.258'. [ 105.343454][ T5053] FAULT_INJECTION: forcing a failure. [ 105.343454][ T5053] name failslab, interval 1, probability 0, space 0, times 0 [ 105.454647][ T5053] CPU: 0 PID: 5053 Comm: syz.0.263 Not tainted syzkaller #0 [ 105.462014][ T5053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.472112][ T5053] Call Trace: [ 105.475429][ T5053] [ 105.478397][ T5053] dump_stack_lvl+0x188/0x250 [ 105.483116][ T5053] ? show_regs_print_info+0x20/0x20 [ 105.488354][ T5053] ? load_image+0x410/0x410 [ 105.493046][ T5053] ? __might_sleep+0xf0/0xf0 [ 105.497686][ T5053] ? __lock_acquire+0x7b50/0x7b50 [ 105.502757][ T5053] ? mark_lock+0x94/0x320 [ 105.507139][ T5053] should_fail+0x383/0x4b0 [ 105.511697][ T5053] should_failslab+0x5/0x20 [ 105.516248][ T5053] slab_pre_alloc_hook+0x51/0xc0 [ 105.521245][ T5053] kmem_cache_alloc_trace+0x47/0x290 [ 105.526600][ T5053] ? newseg+0x240/0xbe0 [ 105.530820][ T5053] newseg+0x240/0xbe0 [ 105.534853][ T5053] ? rwsem_write_trylock+0x135/0x1c0 [ 105.540181][ T5053] ? ksys_shmget+0x140/0x140 [ 105.544858][ T5053] ? do_futex+0xdc2/0x12b0 [ 105.549331][ T5053] ipcget+0x18d/0xc50 [ 105.553373][ T5053] ? __context_tracking_exit+0x4c/0x80 [ 105.558879][ T5053] ? ipc_obtain_object_check+0x1a0/0x1a0 [ 105.564554][ T5053] ? __lock_acquire+0x7b50/0x7b50 [ 105.569632][ T5053] __x64_sys_shmget+0x13d/0x180 [ 105.574554][ T5053] ? lock_chain_count+0x20/0x20 [ 105.579454][ T5053] ? shm_more_checks+0x80/0x80 [ 105.584267][ T5053] ? lockdep_hardirqs_on+0x94/0x140 [ 105.589558][ T5053] do_syscall_64+0x4c/0xa0 [ 105.594014][ T5053] ? clear_bhb_loop+0x30/0x80 [ 105.598735][ T5053] ? clear_bhb_loop+0x30/0x80 [ 105.603460][ T5053] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 105.609511][ T5053] RIP: 0033:0x7f5add297159 [ 105.613972][ T5053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.633709][ T5053] RSP: 002b:00007f5adb4ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 105.642363][ T5053] RAX: ffffffffffffffda RBX: 00007f5add51efa0 RCX: 00007f5add297159 [ 105.650381][ T5053] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000000000000 [ 105.658400][ T5053] RBP: 00007f5add32e06b R08: 0000000000000000 R09: 0000000000000000 [ 105.666436][ T5053] R10: 0000200000ffd000 R11: 0000000000000246 R12: 0000000000000000 [ 105.674451][ T5053] R13: 00007f5add51f038 R14: 00007f5add51efa0 R15: 00007ffcb1aaa3f8 [ 105.682483][ T5053] [ 105.793449][ T5055] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 105.824910][ T5055] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 107.434478][ T5095] FAULT_INJECTION: forcing a failure. [ 107.434478][ T5095] name failslab, interval 1, probability 0, space 0, times 0 [ 107.486715][ T5095] CPU: 1 PID: 5095 Comm: syz.3.274 Not tainted syzkaller #0 [ 107.494123][ T5095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.504399][ T5095] Call Trace: [ 107.507815][ T5095] [ 107.510779][ T5095] dump_stack_lvl+0x188/0x250 [ 107.515498][ T5095] ? show_regs_print_info+0x20/0x20 [ 107.520819][ T5095] ? load_image+0x410/0x410 [ 107.525368][ T5095] ? __lock_acquire+0x7b50/0x7b50 [ 107.530443][ T5095] should_fail+0x383/0x4b0 [ 107.534907][ T5095] should_failslab+0x5/0x20 [ 107.539517][ T5095] slab_pre_alloc_hook+0x51/0xc0 [ 107.544524][ T5095] ? __anon_vma_prepare+0x66/0x430 [ 107.549672][ T5095] kmem_cache_alloc+0x3d/0x280 [ 107.554492][ T5095] ? do_raw_spin_unlock+0x11d/0x230 [ 107.559737][ T5095] __anon_vma_prepare+0x66/0x430 [ 107.564708][ T5095] ? __pte_alloc+0x10f/0x150 [ 107.569451][ T5095] handle_mm_fault+0x3c1b/0x4440 [ 107.574451][ T5095] ? get_page+0xe0/0xe0 [ 107.578649][ T5095] ? follow_page_mask+0x272/0x12b0 [ 107.583897][ T5095] ? vma_is_secretmem+0x9/0x40 [ 107.588698][ T5095] ? check_vma_flags+0x359/0x470 [ 107.593686][ T5095] __get_user_pages+0x952/0x11e0 [ 107.598678][ T5095] ? populate_vma_page_range+0x290/0x290 [ 107.604367][ T5095] ? __might_sleep+0xf0/0xf0 [ 107.609005][ T5095] ? read_lock_is_recursive+0x10/0x10 [ 107.614465][ T5095] __get_user_pages_remote+0x1c2/0x730 [ 107.619972][ T5095] ? get_user_pages_remote+0x55/0xa0 [ 107.625309][ T5095] get_arg_page+0x11b/0x350 [ 107.629861][ T5095] ? copy_string_kernel+0x280/0x280 [ 107.635181][ T5095] ? up_write+0x1b6/0x410 [ 107.639642][ T5095] copy_string_kernel+0x14d/0x280 [ 107.644705][ T5095] do_execveat_common+0x360/0x6b0 [ 107.649776][ T5095] __x64_sys_execveat+0xc0/0xe0 [ 107.654680][ T5095] do_syscall_64+0x4c/0xa0 [ 107.659141][ T5095] ? clear_bhb_loop+0x30/0x80 [ 107.663861][ T5095] ? clear_bhb_loop+0x30/0x80 [ 107.668581][ T5095] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.674537][ T5095] RIP: 0033:0x7f9b57bd8159 [ 107.679032][ T5095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.698683][ T5095] RSP: 002b:00007f9b55e30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 107.707158][ T5095] RAX: ffffffffffffffda RBX: 00007f9b57e5ffa0 RCX: 00007f9b57bd8159 [ 107.715296][ T5095] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 107.723321][ T5095] RBP: 00007f9b57c6f06b R08: 0000000000001000 R09: 0000000000000000 [ 107.731808][ T5095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.739824][ T5095] R13: 00007f9b57e60038 R14: 00007f9b57e5ffa0 R15: 00007ffe21819cc8 [ 107.747856][ T5095] [ 108.362079][ T5116] FAULT_INJECTION: forcing a failure. [ 108.362079][ T5116] name failslab, interval 1, probability 0, space 0, times 0 [ 108.375412][ T5116] CPU: 1 PID: 5116 Comm: syz.2.281 Not tainted syzkaller #0 [ 108.382749][ T5116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.392894][ T5116] Call Trace: [ 108.396212][ T5116] [ 108.399174][ T5116] dump_stack_lvl+0x188/0x250 [ 108.403933][ T5116] ? show_regs_print_info+0x20/0x20 [ 108.409179][ T5116] ? load_image+0x410/0x410 [ 108.413729][ T5116] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 108.419763][ T5116] ? lock_chain_count+0x20/0x20 [ 108.424748][ T5116] ? memset+0x1e/0x40 [ 108.428766][ T5116] should_fail+0x383/0x4b0 [ 108.433222][ T5116] should_failslab+0x5/0x20 [ 108.437754][ T5116] slab_pre_alloc_hook+0x51/0xc0 [ 108.442723][ T5116] kmem_cache_alloc_trace+0x47/0x290 [ 108.448029][ T5116] ? once_disable_jump+0x52/0x1a0 [ 108.453085][ T5116] once_disable_jump+0x52/0x1a0 [ 108.457963][ T5116] inet6_ehashfn+0x4c4/0x500 [ 108.462710][ T5116] ? __tcp_v6_send_check+0x340/0x340 [ 108.468072][ T5116] ? rcu_lock_acquire+0x30/0x30 [ 108.472983][ T5116] ? __lock_acquire+0x7b50/0x7b50 [ 108.478049][ T5116] inet_ehash_insert+0x1ab/0x10b0 [ 108.483130][ T5116] ? slab_post_alloc_hook+0x2aa/0x380 [ 108.488547][ T5116] ? prandom_u32+0x217/0x250 [ 108.493181][ T5116] inet_ehash_nolisten+0x2f/0x160 [ 108.498254][ T5116] __inet_hash_connect+0xb2d/0xde0 [ 108.503415][ T5116] ? inet_unhash+0x540/0x540 [ 108.508032][ T5116] ? rcu_is_watching+0x11/0xa0 [ 108.512824][ T5116] ? inet6_hash_connect+0x77/0xd0 [ 108.517875][ T5116] tcp_v6_connect+0xf4b/0x1a10 [ 108.522680][ T5116] ? tcp_v6_pre_connect+0xf0/0xf0 [ 108.527764][ T5116] ? mark_lock+0x94/0x320 [ 108.532119][ T5116] __inet_stream_connect+0x244/0xd80 [ 108.537424][ T5116] ? lock_chain_count+0x20/0x20 [ 108.542326][ T5116] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 108.548437][ T5116] ? __local_bh_enable_ip+0x136/0x1c0 [ 108.553834][ T5116] ? inet_dgram_connect+0x340/0x340 [ 108.559054][ T5116] ? __local_bh_enable_ip+0x136/0x1c0 [ 108.564460][ T5116] ? _local_bh_enable+0xa0/0xa0 [ 108.569347][ T5116] inet_stream_connect+0x62/0xa0 [ 108.574325][ T5116] ? __inet_stream_connect+0xd80/0xd80 [ 108.579815][ T5116] __sys_connect+0x3cb/0x450 [ 108.584439][ T5116] ? __sys_connect_file+0x170/0x170 [ 108.589706][ T5116] __x64_sys_connect+0x76/0x80 [ 108.594501][ T5116] do_syscall_64+0x4c/0xa0 [ 108.598951][ T5116] ? clear_bhb_loop+0x30/0x80 [ 108.603645][ T5116] ? clear_bhb_loop+0x30/0x80 [ 108.608372][ T5116] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 108.614294][ T5116] RIP: 0033:0x7f8d03ecc159 [ 108.618732][ T5116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.638392][ T5116] RSP: 002b:00007f8d02124028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 108.646864][ T5116] RAX: ffffffffffffffda RBX: 00007f8d04153fa0 RCX: 00007f8d03ecc159 [ 108.654863][ T5116] RDX: 000000000000001c RSI: 0000200000000180 RDI: 0000000000000004 [ 108.662850][ T5116] RBP: 00007f8d03f6306b R08: 0000000000000000 R09: 0000000000000000 [ 108.670942][ T5116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.678938][ T5116] R13: 00007f8d04154038 R14: 00007f8d04153fa0 R15: 00007ffc0ae24468 [ 108.687150][ T5116] [ 110.215437][ T5133] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 110.244053][ T5133] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 110.462852][ T5143] FAULT_INJECTION: forcing a failure. [ 110.462852][ T5143] name failslab, interval 1, probability 0, space 0, times 0 [ 110.524311][ T5143] CPU: 1 PID: 5143 Comm: syz.2.289 Not tainted syzkaller #0 [ 110.531673][ T5143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.541807][ T5143] Call Trace: [ 110.545123][ T5143] [ 110.548085][ T5143] dump_stack_lvl+0x188/0x250 [ 110.552825][ T5143] ? show_regs_print_info+0x20/0x20 [ 110.558061][ T5143] ? load_image+0x410/0x410 [ 110.562621][ T5143] ? __lock_acquire+0x7b50/0x7b50 [ 110.567699][ T5143] should_fail+0x383/0x4b0 [ 110.572175][ T5143] should_failslab+0x5/0x20 [ 110.576718][ T5143] slab_pre_alloc_hook+0x51/0xc0 [ 110.581889][ T5143] ? key_alloc+0x302/0x1030 [ 110.586521][ T5143] kmem_cache_alloc+0x3d/0x280 [ 110.591336][ T5143] key_alloc+0x302/0x1030 [ 110.595728][ T5143] key_create_or_update+0x89b/0xa40 [ 110.600977][ T5143] ? security_key_permission+0x7c/0xa0 [ 110.606503][ T5143] ? key_type_put+0x20/0x20 [ 110.611054][ T5143] ? lookup_user_key_possessed+0x40/0x40 [ 110.616745][ T5143] ? __might_fault+0xb3/0x110 [ 110.621474][ T5143] __se_sys_add_key+0x34b/0x410 [ 110.626372][ T5143] ? __x64_sys_add_key+0xc0/0xc0 [ 110.631363][ T5143] ? lockdep_hardirqs_on+0x94/0x140 [ 110.636834][ T5143] ? __x64_sys_add_key+0x1c/0xc0 [ 110.641829][ T5143] do_syscall_64+0x4c/0xa0 [ 110.646304][ T5143] ? clear_bhb_loop+0x30/0x80 [ 110.651041][ T5143] ? clear_bhb_loop+0x30/0x80 [ 110.655768][ T5143] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.661725][ T5143] RIP: 0033:0x7f8d03ecc159 [ 110.666184][ T5143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.685839][ T5143] RSP: 002b:00007f8d02124028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 110.694296][ T5143] RAX: ffffffffffffffda RBX: 00007f8d04153fa0 RCX: 00007f8d03ecc159 [ 110.702319][ T5143] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 110.710336][ T5143] RBP: 00007f8d03f6306b R08: ffffffffffffffff R09: 0000000000000000 [ 110.718355][ T5143] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 110.726457][ T5143] R13: 00007f8d04154038 R14: 00007f8d04153fa0 R15: 00007ffc0ae24468 [ 110.734494][ T5143] [ 111.056945][ T5154] FAULT_INJECTION: forcing a failure. [ 111.056945][ T5154] name failslab, interval 1, probability 0, space 0, times 0 [ 111.095433][ T5154] CPU: 1 PID: 5154 Comm: syz.0.293 Not tainted syzkaller #0 [ 111.102813][ T5154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.112927][ T5154] Call Trace: [ 111.116245][ T5154] [ 111.119217][ T5154] dump_stack_lvl+0x188/0x250 [ 111.123942][ T5154] ? show_regs_print_info+0x20/0x20 [ 111.129192][ T5154] ? load_image+0x410/0x410 [ 111.133742][ T5154] ? __lock_acquire+0x7b50/0x7b50 [ 111.138912][ T5154] should_fail+0x383/0x4b0 [ 111.143381][ T5154] should_failslab+0x5/0x20 [ 111.147936][ T5154] slab_pre_alloc_hook+0x51/0xc0 [ 111.152914][ T5154] ? __anon_vma_prepare+0x66/0x430 [ 111.158072][ T5154] kmem_cache_alloc+0x3d/0x280 [ 111.162879][ T5154] ? do_raw_spin_unlock+0x11d/0x230 [ 111.168218][ T5154] __anon_vma_prepare+0x66/0x430 [ 111.173201][ T5154] ? __pte_alloc+0x10f/0x150 [ 111.177833][ T5154] handle_mm_fault+0x3c1b/0x4440 [ 111.182828][ T5154] ? get_page+0xe0/0xe0 [ 111.187086][ T5154] ? follow_page_mask+0x272/0x12b0 [ 111.192238][ T5154] ? vma_is_secretmem+0x9/0x40 [ 111.197051][ T5154] ? check_vma_flags+0x359/0x470 [ 111.202077][ T5154] __get_user_pages+0x952/0x11e0 [ 111.207072][ T5154] ? populate_vma_page_range+0x290/0x290 [ 111.212755][ T5154] ? __might_sleep+0xf0/0xf0 [ 111.217402][ T5154] ? read_lock_is_recursive+0x10/0x10 [ 111.222835][ T5154] __get_user_pages_remote+0x1c2/0x730 [ 111.228352][ T5154] ? get_user_pages_remote+0x55/0xa0 [ 111.233724][ T5154] get_arg_page+0x11b/0x350 [ 111.238282][ T5154] ? copy_string_kernel+0x280/0x280 [ 111.243533][ T5154] ? up_write+0x1b6/0x410 [ 111.247932][ T5154] copy_string_kernel+0x14d/0x280 [ 111.253007][ T5154] do_execveat_common+0x360/0x6b0 [ 111.258084][ T5154] __x64_sys_execveat+0xc0/0xe0 [ 111.263004][ T5154] do_syscall_64+0x4c/0xa0 [ 111.267473][ T5154] ? clear_bhb_loop+0x30/0x80 [ 111.272199][ T5154] ? clear_bhb_loop+0x30/0x80 [ 111.276929][ T5154] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.282881][ T5154] RIP: 0033:0x7f5add297159 [ 111.287435][ T5154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.307191][ T5154] RSP: 002b:00007f5adb4ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 111.315665][ T5154] RAX: ffffffffffffffda RBX: 00007f5add51efa0 RCX: 00007f5add297159 [ 111.323691][ T5154] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 111.331711][ T5154] RBP: 00007f5add32e06b R08: 0000000000001000 R09: 0000000000000000 [ 111.337006][ T5157] loop4: detected capacity change from 0 to 1764 [ 111.339728][ T5154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.339808][ T5154] R13: 00007f5add51f038 R14: 00007f5add51efa0 R15: 00007ffcb1aaa3f8 [ 111.339839][ T5154] [ 112.794794][ T5173] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 112.822663][ T5173] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 113.218552][ T5186] FAULT_INJECTION: forcing a failure. [ 113.218552][ T5186] name fail_futex, interval 1, probability 0, space 0, times 1 [ 113.266157][ T5186] CPU: 1 PID: 5186 Comm: syz.0.303 Not tainted syzkaller #0 [ 113.273521][ T5186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.283628][ T5186] Call Trace: [ 113.286977][ T5186] [ 113.289943][ T5186] dump_stack_lvl+0x188/0x250 [ 113.294657][ T5186] ? futex_wait_queue_me+0x2d6/0x440 [ 113.299985][ T5186] ? show_regs_print_info+0x20/0x20 [ 113.305218][ T5186] ? load_image+0x410/0x410 [ 113.309760][ T5186] ? mark_lock+0x94/0x320 [ 113.314131][ T5186] ? __lock_acquire+0x13dc/0x7b50 [ 113.319201][ T5186] should_fail+0x383/0x4b0 [ 113.323666][ T5186] get_futex_key+0x1cf/0x12d0 [ 113.328391][ T5186] ? futex_wait_restart+0x250/0x250 [ 113.333638][ T5186] ? verify_lock_unused+0x140/0x140 [ 113.338986][ T5186] do_futex+0x236/0x12b0 [ 113.343304][ T5186] ? futex_exit_release+0x1c0/0x1c0 [ 113.348559][ T5186] ? __context_tracking_exit+0x4c/0x80 [ 113.354088][ T5186] __se_sys_futex+0x389/0x420 [ 113.358812][ T5186] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 113.364845][ T5186] ? __x64_sys_futex+0xf0/0xf0 [ 113.369787][ T5186] ? __x64_sys_futex+0x1d/0xf0 [ 113.374624][ T5186] do_syscall_64+0x4c/0xa0 [ 113.379089][ T5186] ? clear_bhb_loop+0x30/0x80 [ 113.383815][ T5186] ? clear_bhb_loop+0x30/0x80 [ 113.388533][ T5186] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 113.394470][ T5186] RIP: 0033:0x7f5add297159 [ 113.398927][ T5186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.418573][ T5186] RSP: 002b:00007f5adb4ef028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 113.427039][ T5186] RAX: ffffffffffffffda RBX: 00007f5add51efa0 RCX: 00007f5add297159 [ 113.435151][ T5186] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000000 [ 113.443166][ T5186] RBP: 00007f5add32e06b R08: 0000000000000000 R09: 00000000ba01fffe [ 113.451187][ T5186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.459211][ T5186] R13: 00007f5add51f038 R14: 00007f5add51efa0 R15: 00007ffcb1aaa3f8 [ 113.467245][ T5186] [ 114.113030][ T5199] FAULT_INJECTION: forcing a failure. [ 114.113030][ T5199] name failslab, interval 1, probability 0, space 0, times 0 [ 114.156030][ T5199] CPU: 1 PID: 5199 Comm: syz.4.307 Not tainted syzkaller #0 [ 114.163403][ T5199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 114.173501][ T5199] Call Trace: [ 114.176820][ T5199] [ 114.179783][ T5199] dump_stack_lvl+0x188/0x250 [ 114.184616][ T5199] ? show_regs_print_info+0x20/0x20 [ 114.189863][ T5199] ? load_image+0x410/0x410 [ 114.194413][ T5199] ? __might_sleep+0xf0/0xf0 [ 114.199042][ T5199] ? __lock_acquire+0x7b50/0x7b50 [ 114.204128][ T5199] should_fail+0x383/0x4b0 [ 114.208599][ T5199] should_failslab+0x5/0x20 [ 114.213140][ T5199] slab_pre_alloc_hook+0x51/0xc0 [ 114.218123][ T5199] __kmalloc+0x6b/0x340 [ 114.222315][ T5199] ? security_prepare_creds+0x47/0x130 [ 114.227813][ T5199] ? prepare_creds+0x3c/0x610 [ 114.232568][ T5199] security_prepare_creds+0x47/0x130 [ 114.237907][ T5199] prepare_creds+0x450/0x610 [ 114.242559][ T5199] prepare_exec_creds+0x14/0x220 [ 114.247567][ T5199] bprm_execve+0xf1/0x1740 [ 114.252042][ T5199] ? get_arg_page+0x2b6/0x350 [ 114.256767][ T5199] ? copy_string_kernel+0x280/0x280 [ 114.262009][ T5199] ? up_write+0x1b6/0x410 [ 114.266391][ T5199] ? copy_strings+0x411/0x4b0 [ 114.271116][ T5199] ? alloc_bprm+0x690/0x690 [ 114.275651][ T5199] ? put_arg_page+0xe1/0x200 [ 114.280283][ T5199] ? copy_string_kernel+0x26c/0x280 [ 114.285700][ T5199] do_execveat_common+0x504/0x6b0 [ 114.290795][ T5199] __x64_sys_execveat+0xc0/0xe0 [ 114.295695][ T5199] do_syscall_64+0x4c/0xa0 [ 114.300157][ T5199] ? clear_bhb_loop+0x30/0x80 [ 114.304879][ T5199] ? clear_bhb_loop+0x30/0x80 [ 114.309613][ T5199] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 114.315552][ T5199] RIP: 0033:0x7fbd52a63159 [ 114.320005][ T5199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.339685][ T5199] RSP: 002b:00007fbd50cbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 114.348328][ T5199] RAX: ffffffffffffffda RBX: 00007fbd52ceafa0 RCX: 00007fbd52a63159 [ 114.356363][ T5199] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 114.364376][ T5199] RBP: 00007fbd52afa06b R08: 0000000000001000 R09: 0000000000000000 [ 114.372387][ T5199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.380408][ T5199] R13: 00007fbd52ceb038 R14: 00007fbd52ceafa0 R15: 00007fff0a6492b8 [ 114.388447][ T5199] [ 115.361420][ T5224] FAULT_INJECTION: forcing a failure. [ 115.361420][ T5224] name failslab, interval 1, probability 0, space 0, times 0 [ 115.387469][ T5226] FAULT_INJECTION: forcing a failure. [ 115.387469][ T5226] name failslab, interval 1, probability 0, space 0, times 0 [ 115.450693][ T5226] CPU: 0 PID: 5226 Comm: syz.3.311 Not tainted syzkaller #0 [ 115.458058][ T5226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.468154][ T5226] Call Trace: [ 115.471470][ T5226] [ 115.474431][ T5226] dump_stack_lvl+0x188/0x250 [ 115.479154][ T5226] ? show_regs_print_info+0x20/0x20 [ 115.485094][ T5226] ? load_image+0x410/0x410 [ 115.489672][ T5226] ? __might_sleep+0xf0/0xf0 [ 115.494434][ T5226] ? __lock_acquire+0x7b50/0x7b50 [ 115.499525][ T5226] should_fail+0x383/0x4b0 [ 115.504002][ T5226] should_failslab+0x5/0x20 [ 115.508571][ T5226] slab_pre_alloc_hook+0x51/0xc0 [ 115.513568][ T5226] kmem_cache_alloc_trace+0x47/0x290 [ 115.518896][ T5226] ? x509_key_preparse+0x30d/0x5d0 [ 115.524067][ T5226] x509_key_preparse+0x30d/0x5d0 [ 115.529073][ T5226] asymmetric_key_preparse+0xa5/0x140 [ 115.534488][ T5226] key_create_or_update+0x432/0xa40 [ 115.539762][ T5226] ? security_key_permission+0x7c/0xa0 [ 115.545299][ T5226] ? key_type_put+0x20/0x20 [ 115.549854][ T5226] ? lookup_user_key_possessed+0x40/0x40 [ 115.555554][ T5226] ? __might_fault+0xb3/0x110 [ 115.560282][ T5226] __se_sys_add_key+0x34b/0x410 [ 115.565182][ T5226] ? __x64_sys_add_key+0xc0/0xc0 [ 115.570170][ T5226] ? lockdep_hardirqs_on+0x94/0x140 [ 115.575414][ T5226] ? __x64_sys_add_key+0x1c/0xc0 [ 115.580501][ T5226] do_syscall_64+0x4c/0xa0 [ 115.584963][ T5226] ? clear_bhb_loop+0x30/0x80 [ 115.589691][ T5226] ? clear_bhb_loop+0x30/0x80 [ 115.594417][ T5226] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 115.600453][ T5226] RIP: 0033:0x7f9b57bd8159 [ 115.604920][ T5226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.624794][ T5226] RSP: 002b:00007f9b55e30028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 115.633257][ T5226] RAX: ffffffffffffffda RBX: 00007f9b57e5ffa0 RCX: 00007f9b57bd8159 [ 115.641279][ T5226] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 115.649293][ T5226] RBP: 00007f9b57c6f06b R08: ffffffffffffffff R09: 0000000000000000 [ 115.657310][ T5226] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 115.665332][ T5226] R13: 00007f9b57e60038 R14: 00007f9b57e5ffa0 R15: 00007ffe21819cc8 [ 115.673369][ T5226] [ 115.706585][ T5224] CPU: 0 PID: 5224 Comm: syz.2.322 Not tainted syzkaller #0 [ 115.713952][ T5224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.724053][ T5224] Call Trace: [ 115.727393][ T5224] [ 115.730371][ T5224] dump_stack_lvl+0x188/0x250 [ 115.735105][ T5224] ? show_regs_print_info+0x20/0x20 [ 115.740445][ T5224] ? load_image+0x410/0x410 [ 115.744997][ T5224] ? __lock_acquire+0x7b50/0x7b50 [ 115.750076][ T5224] should_fail+0x383/0x4b0 [ 115.754541][ T5224] should_failslab+0x5/0x20 [ 115.759082][ T5224] slab_pre_alloc_hook+0x51/0xc0 [ 115.764067][ T5224] ? __anon_vma_prepare+0xb6/0x430 [ 115.769216][ T5224] kmem_cache_alloc+0x3d/0x280 [ 115.774022][ T5224] ? find_mergeable_anon_vma+0x388/0x590 [ 115.779708][ T5224] __anon_vma_prepare+0xb6/0x430 [ 115.784727][ T5224] ? __pte_alloc+0x10f/0x150 [ 115.789361][ T5224] handle_mm_fault+0x3c1b/0x4440 [ 115.794409][ T5224] ? get_page+0xe0/0xe0 [ 115.798627][ T5224] ? follow_page_mask+0x272/0x12b0 [ 115.803786][ T5224] ? vma_is_secretmem+0x9/0x40 [ 115.808589][ T5224] ? check_vma_flags+0x359/0x470 [ 115.813601][ T5224] __get_user_pages+0x952/0x11e0 [ 115.818591][ T5224] ? populate_vma_page_range+0x290/0x290 [ 115.824276][ T5224] ? __might_sleep+0xf0/0xf0 [ 115.828914][ T5224] ? read_lock_is_recursive+0x10/0x10 [ 115.834343][ T5224] __get_user_pages_remote+0x1c2/0x730 [ 115.839866][ T5224] ? get_user_pages_remote+0x55/0xa0 [ 115.845212][ T5224] get_arg_page+0x11b/0x350 [ 115.849773][ T5224] ? copy_string_kernel+0x280/0x280 [ 115.855026][ T5224] ? up_write+0x1b6/0x410 [ 115.859655][ T5224] copy_string_kernel+0x14d/0x280 [ 115.864842][ T5224] do_execveat_common+0x360/0x6b0 [ 115.869928][ T5224] __x64_sys_execveat+0xc0/0xe0 [ 115.874838][ T5224] do_syscall_64+0x4c/0xa0 [ 115.879303][ T5224] ? clear_bhb_loop+0x30/0x80 [ 115.884060][ T5224] ? clear_bhb_loop+0x30/0x80 [ 115.888781][ T5224] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 115.894718][ T5224] RIP: 0033:0x7f8d03ecc159 [ 115.899169][ T5224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.918816][ T5224] RSP: 002b:00007f8d02124028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 115.927283][ T5224] RAX: ffffffffffffffda RBX: 00007f8d04153fa0 RCX: 00007f8d03ecc159 [ 115.935304][ T5224] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffffff [ 115.943319][ T5224] RBP: 00007f8d03f6306b R08: 0000000000001000 R09: 0000000000000000 [ 115.951448][ T5224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.959462][ T5224] R13: 00007f8d04154038 R14: 00007f8d04153fa0 R15: 00007ffc0ae24468 [ 115.967495][ T5224] [ 116.800003][ T5255] FAULT_INJECTION: forcing a failure. [ 116.800003][ T5255] name fail_futex, interval 1, probability 0, space 0, times 0 [ 116.914456][ T5255] CPU: 0 PID: 5255 Comm: syz.2.323 Not tainted syzkaller #0 [ 116.921830][ T5255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 116.931935][ T5255] Call Trace: [ 116.935254][ T5255] [ 116.938324][ T5255] dump_stack_lvl+0x188/0x250 [ 116.943060][ T5255] ? futex_wait_queue_me+0x2d6/0x440 [ 116.948403][ T5255] ? show_regs_print_info+0x20/0x20 [ 116.953662][ T5255] ? load_image+0x410/0x410 [ 116.958203][ T5255] ? mark_lock+0x94/0x320 [ 116.962661][ T5255] ? __lock_acquire+0x13dc/0x7b50 [ 116.967728][ T5255] should_fail+0x383/0x4b0 [ 116.972190][ T5255] get_futex_key+0x1cf/0x12d0 [ 116.976995][ T5255] ? futex_wait_restart+0x250/0x250 [ 116.982241][ T5255] ? verify_lock_unused+0x140/0x140 [ 116.987593][ T5255] do_futex+0x236/0x12b0 [ 116.992021][ T5255] ? futex_exit_release+0x1c0/0x1c0 [ 116.997271][ T5255] ? __context_tracking_exit+0x4c/0x80 [ 117.002776][ T5255] __se_sys_futex+0x389/0x420 [ 117.007492][ T5255] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 117.013524][ T5255] ? __x64_sys_futex+0xf0/0xf0 [ 117.018332][ T5255] ? __x64_sys_futex+0x1d/0xf0 [ 117.023142][ T5255] do_syscall_64+0x4c/0xa0 [ 117.027595][ T5255] ? clear_bhb_loop+0x30/0x80 [ 117.032321][ T5255] ? clear_bhb_loop+0x30/0x80 [ 117.037038][ T5255] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 117.042968][ T5255] RIP: 0033:0x7f8d03ecc159 [ 117.047421][ T5255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.067063][ T5255] RSP: 002b:00007f8d02124028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 117.075524][ T5255] RAX: ffffffffffffffda RBX: 00007f8d04153fa0 RCX: 00007f8d03ecc159 [ 117.083540][ T5255] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000000 [ 117.091551][ T5255] RBP: 00007f8d03f6306b R08: 0000000000000000 R09: 00000000ba01fffe [ 117.100320][ T5255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.108434][ T5255] R13: 00007f8d04154038 R14: 00007f8d04153fa0 R15: 00007ffc0ae24468 [ 117.116466][ T5255] [ 117.734719][ T5263] FAULT_INJECTION: forcing a failure. [ 117.734719][ T5263] name failslab, interval 1, probability 0, space 0, times 0 [ 117.787400][ T5266] FAULT_INJECTION: forcing a failure. [ 117.787400][ T5266] name failslab, interval 1, probability 0, space 0, times 0 [ 117.802845][ T5263] CPU: 1 PID: 5263 Comm: syz.1.327 Not tainted syzkaller #0 [ 117.810199][ T5263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 117.820302][ T5263] Call Trace: [ 117.823616][ T5263] [ 117.826579][ T5263] dump_stack_lvl+0x188/0x250 [ 117.831380][ T5263] ? show_regs_print_info+0x20/0x20 [ 117.836616][ T5263] ? load_image+0x410/0x410 [ 117.841157][ T5263] ? __might_sleep+0xf0/0xf0 [ 117.845777][ T5263] ? __lock_acquire+0x7b50/0x7b50 [ 117.850847][ T5263] should_fail+0x383/0x4b0 [ 117.855311][ T5263] should_failslab+0x5/0x20 [ 117.859848][ T5263] slab_pre_alloc_hook+0x51/0xc0 [ 117.864831][ T5263] ? ptlock_alloc+0x1c/0x60 [ 117.869374][ T5263] kmem_cache_alloc+0x3d/0x280 [ 117.874183][ T5263] ptlock_alloc+0x1c/0x60 [ 117.878542][ T5263] pte_alloc_one+0xc0/0x310 [ 117.883078][ T5263] ? rcu_lock_release+0x20/0x20 [ 117.887957][ T5263] ? __rwlock_init+0x140/0x140 [ 117.892758][ T5263] ? count_memcg_event_mm+0x324/0x370 [ 117.898163][ T5263] ? do_raw_spin_unlock+0x11d/0x230 [ 117.903400][ T5263] __pte_alloc+0x21/0x150 [ 117.907763][ T5263] ? __pud_alloc+0x122/0x140 [ 117.912389][ T5263] handle_mm_fault+0x39d9/0x4440 [ 117.917463][ T5263] ? get_page+0xe0/0xe0 [ 117.921662][ T5263] ? follow_page_mask+0x272/0x12b0 [ 117.926985][ T5263] ? vma_is_secretmem+0x9/0x40 [ 117.931788][ T5263] ? check_vma_flags+0x359/0x470 [ 117.936784][ T5263] __get_user_pages+0x952/0x11e0 [ 117.941802][ T5263] ? populate_vma_page_range+0x290/0x290 [ 117.947482][ T5263] ? __might_sleep+0xf0/0xf0 [ 117.952113][ T5263] ? read_lock_is_recursive+0x10/0x10 [ 117.957524][ T5263] __get_user_pages_remote+0x1c2/0x730 [ 117.963041][ T5263] ? get_user_pages_remote+0x55/0xa0 [ 117.968352][ T5263] get_arg_page+0x11b/0x350 [ 117.973046][ T5263] ? copy_string_kernel+0x280/0x280 [ 117.978280][ T5263] ? up_write+0x1b6/0x410 [ 117.982674][ T5263] copy_string_kernel+0x14d/0x280 [ 117.987731][ T5263] do_execveat_common+0x360/0x6b0 [ 117.992874][ T5263] __x64_sys_execveat+0xc0/0xe0 [ 117.997781][ T5263] do_syscall_64+0x4c/0xa0 [ 118.002222][ T5263] ? clear_bhb_loop+0x30/0x80 [ 118.006925][ T5263] ? clear_bhb_loop+0x30/0x80 [ 118.011642][ T5263] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 118.017640][ T5263] RIP: 0033:0x7f570add2159 [ 118.022079][ T5263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.041705][ T5263] RSP: 002b:00007f570902a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 118.050149][ T5263] RAX: ffffffffffffffda RBX: 00007f570b059fa0 RCX: 00007f570add2159 [ 118.058149][ T5263] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffffff [ 118.066229][ T5263] RBP: 00007f570ae6906b R08: 0000000000001000 R09: 0000000000000000 [ 118.074216][ T5263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.082206][ T5263] R13: 00007f570b05a038 R14: 00007f570b059fa0 R15: 00007ffdd3e1f988 [ 118.090224][ T5263] [ 118.148327][ T5266] CPU: 0 PID: 5266 Comm: syz.3.325 Not tainted syzkaller #0 [ 118.155705][ T5266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.165798][ T5266] Call Trace: [ 118.169115][ T5266] [ 118.172083][ T5266] dump_stack_lvl+0x188/0x250 [ 118.176815][ T5266] ? show_regs_print_info+0x20/0x20 [ 118.182050][ T5266] ? load_image+0x410/0x410 [ 118.186598][ T5266] ? mark_lock+0x94/0x320 [ 118.190968][ T5266] should_fail+0x383/0x4b0 [ 118.195418][ T5266] ? skb_expand_head+0x1a9/0x480 [ 118.200392][ T5266] should_failslab+0x5/0x20 [ 118.205043][ T5266] slab_pre_alloc_hook+0x51/0xc0 [ 118.210067][ T5266] ? skb_expand_head+0x1a9/0x480 [ 118.215050][ T5266] __kmalloc_node_track_caller+0x68/0x3a0 [ 118.220814][ T5266] ? skb_expand_head+0x1a9/0x480 [ 118.225805][ T5266] ? skb_expand_head+0x1a9/0x480 [ 118.230784][ T5266] pskb_expand_head+0x128/0x1100 [ 118.235770][ T5266] ? read_lock_is_recursive+0x10/0x10 [ 118.241189][ T5266] ? rcu_lock_release+0x9/0x20 [ 118.245992][ T5266] skb_expand_head+0x1a9/0x480 [ 118.250790][ T5266] ip6_xmit+0x11e2/0x16e0 [ 118.255170][ T5266] ? ip6_autoflowlabel+0xd0/0xd0 [ 118.260144][ T5266] ? __sk_dst_check+0x14e/0x290 [ 118.265042][ T5266] ? read_lock_is_recursive+0x10/0x10 [ 118.270467][ T5266] ? inet6_csk_route_socket+0x613/0xed0 [ 118.276069][ T5266] inet6_csk_xmit+0x405/0x680 [ 118.280823][ T5266] ? inet6_csk_addr2sockaddr+0x1d0/0x1d0 [ 118.286496][ T5266] ? csum_ipv6_magic+0x1e/0x80 [ 118.291338][ T5266] __tcp_transmit_skb+0x1ca3/0x31e0 [ 118.296597][ T5266] ? __tcp_send_ack+0x5d0/0x5d0 [ 118.301485][ T5266] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 118.307960][ T5266] ? memset+0x1e/0x40 [ 118.312099][ T5266] ? tcp_rbtree_insert+0x114/0x170 [ 118.317270][ T5266] ? tcp_connect+0x1fca/0x4970 [ 118.322091][ T5266] tcp_connect+0x21bd/0x4970 [ 118.326787][ T5266] tcp_v6_connect+0x11cf/0x1a10 [ 118.331698][ T5266] ? tcp_v6_pre_connect+0xf0/0xf0 [ 118.336773][ T5266] ? mark_lock+0x94/0x320 [ 118.341150][ T5266] __inet_stream_connect+0x244/0xd80 [ 118.346773][ T5266] ? lock_chain_count+0x20/0x20 [ 118.351702][ T5266] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 118.357744][ T5266] ? __local_bh_enable_ip+0x136/0x1c0 [ 118.363152][ T5266] ? inet_dgram_connect+0x340/0x340 [ 118.368389][ T5266] ? __local_bh_enable_ip+0x136/0x1c0 [ 118.373807][ T5266] ? _local_bh_enable+0xa0/0xa0 [ 118.378715][ T5266] inet_stream_connect+0x62/0xa0 [ 118.383695][ T5266] ? __inet_stream_connect+0xd80/0xd80 [ 118.389196][ T5266] __sys_connect+0x3cb/0x450 [ 118.393828][ T5266] ? __sys_connect_file+0x170/0x170 [ 118.399086][ T5266] __x64_sys_connect+0x76/0x80 [ 118.403911][ T5266] do_syscall_64+0x4c/0xa0 [ 118.408380][ T5266] ? clear_bhb_loop+0x30/0x80 [ 118.413099][ T5266] ? clear_bhb_loop+0x30/0x80 [ 118.417820][ T5266] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 118.423758][ T5266] RIP: 0033:0x7f9b57bd8159 [ 118.428220][ T5266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.447870][ T5266] RSP: 002b:00007f9b55e30028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 118.456509][ T5266] RAX: ffffffffffffffda RBX: 00007f9b57e5ffa0 RCX: 00007f9b57bd8159 [ 118.464522][ T5266] RDX: 000000000000001c RSI: 0000200000000180 RDI: 0000000000000004 [ 118.472534][ T5266] RBP: 00007f9b57c6f06b R08: 0000000000000000 R09: 0000000000000000 [ 118.480551][ T5266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.488574][ T5266] R13: 00007f9b57e60038 R14: 00007f9b57e5ffa0 R15: 00007ffe21819cc8 [ 118.496633][ T5266] [ 118.935589][ T5272] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 118.974935][ T5272] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 119.285756][ T5278] FAULT_INJECTION: forcing a failure. [ 119.285756][ T5278] name failslab, interval 1, probability 0, space 0, times 0 [ 119.336059][ T5278] CPU: 0 PID: 5278 Comm: syz.1.328 Not tainted syzkaller #0 [ 119.343433][ T5278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.353643][ T5278] Call Trace: [ 119.356966][ T5278] [ 119.359929][ T5278] dump_stack_lvl+0x188/0x250 [ 119.364646][ T5278] ? show_regs_print_info+0x20/0x20 [ 119.370096][ T5278] ? load_image+0x410/0x410 [ 119.374654][ T5278] ? __might_sleep+0xf0/0xf0 [ 119.379294][ T5278] ? __lock_acquire+0x7b50/0x7b50 [ 119.384548][ T5278] should_fail+0x383/0x4b0 [ 119.389022][ T5278] should_failslab+0x5/0x20 [ 119.393569][ T5278] slab_pre_alloc_hook+0x51/0xc0 [ 119.398564][ T5278] kmem_cache_alloc_trace+0x47/0x290 [ 119.403900][ T5278] ? x509_key_preparse+0x30d/0x5d0 [ 119.409092][ T5278] x509_key_preparse+0x30d/0x5d0 [ 119.414080][ T5278] asymmetric_key_preparse+0xa5/0x140 [ 119.419505][ T5278] key_create_or_update+0x432/0xa40 [ 119.424747][ T5278] ? security_key_permission+0x7c/0xa0 [ 119.430270][ T5278] ? key_type_put+0x20/0x20 [ 119.434827][ T5278] ? lookup_user_key_possessed+0x40/0x40 [ 119.440523][ T5278] ? __might_fault+0xb3/0x110 [ 119.445260][ T5278] __se_sys_add_key+0x34b/0x410 [ 119.450156][ T5278] ? __x64_sys_add_key+0xc0/0xc0 [ 119.455143][ T5278] ? lockdep_hardirqs_on+0x94/0x140 [ 119.460401][ T5278] ? __x64_sys_add_key+0x1c/0xc0 [ 119.465386][ T5278] do_syscall_64+0x4c/0xa0 [ 119.469841][ T5278] ? clear_bhb_loop+0x30/0x80 [ 119.474563][ T5278] ? clear_bhb_loop+0x30/0x80 [ 119.479285][ T5278] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 119.485222][ T5278] RIP: 0033:0x7f570add2159 [ 119.489678][ T5278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.509415][ T5278] RSP: 002b:00007f570902a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 119.517881][ T5278] RAX: ffffffffffffffda RBX: 00007f570b059fa0 RCX: 00007f570add2159 [ 119.525901][ T5278] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 119.534008][ T5278] RBP: 00007f570ae6906b R08: ffffffffffffffff R09: 0000000000000000 [ 119.542032][ T5278] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 119.550068][ T5278] R13: 00007f570b05a038 R14: 00007f570b059fa0 R15: 00007ffdd3e1f988 [ 119.558104][ T5278] [ 120.686593][ T5305] FAULT_INJECTION: forcing a failure. [ 120.686593][ T5305] name failslab, interval 1, probability 0, space 0, times 0 [ 120.760754][ T5305] CPU: 0 PID: 5305 Comm: syz.1.341 Not tainted syzkaller #0 [ 120.768130][ T5305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 120.778230][ T5305] Call Trace: [ 120.781550][ T5305] [ 120.784518][ T5305] dump_stack_lvl+0x188/0x250 [ 120.789280][ T5305] ? show_regs_print_info+0x20/0x20 [ 120.794532][ T5305] ? load_image+0x410/0x410 [ 120.799125][ T5305] ? __lock_acquire+0x7b50/0x7b50 [ 120.804211][ T5305] should_fail+0x383/0x4b0 [ 120.808705][ T5305] should_failslab+0x5/0x20 [ 120.813260][ T5305] slab_pre_alloc_hook+0x51/0xc0 [ 120.818279][ T5305] ? __anon_vma_prepare+0x66/0x430 [ 120.823439][ T5305] kmem_cache_alloc+0x3d/0x280 [ 120.828262][ T5305] ? do_raw_spin_unlock+0x11d/0x230 [ 120.833516][ T5305] __anon_vma_prepare+0x66/0x430 [ 120.838502][ T5305] ? __pte_alloc+0x10f/0x150 [ 120.843142][ T5305] handle_mm_fault+0x3c1b/0x4440 [ 120.848144][ T5305] ? get_page+0xe0/0xe0 [ 120.852491][ T5305] ? follow_page_mask+0x272/0x12b0 [ 120.857662][ T5305] ? vma_is_secretmem+0x9/0x40 [ 120.862564][ T5305] ? check_vma_flags+0x359/0x470 [ 120.867583][ T5305] __get_user_pages+0x952/0x11e0 [ 120.872585][ T5305] ? populate_vma_page_range+0x290/0x290 [ 120.878273][ T5305] ? __might_sleep+0xf0/0xf0 [ 120.882904][ T5305] ? read_lock_is_recursive+0x10/0x10 [ 120.888446][ T5305] __get_user_pages_remote+0x1c2/0x730 [ 120.893966][ T5305] ? get_user_pages_remote+0x55/0xa0 [ 120.899390][ T5305] get_arg_page+0x11b/0x350 [ 120.903937][ T5305] ? copy_string_kernel+0x280/0x280 [ 120.909181][ T5305] ? up_write+0x1b6/0x410 [ 120.913572][ T5305] copy_string_kernel+0x14d/0x280 [ 120.918644][ T5305] do_execveat_common+0x360/0x6b0 [ 120.923802][ T5305] __x64_sys_execveat+0xc0/0xe0 [ 120.928695][ T5305] do_syscall_64+0x4c/0xa0 [ 120.933140][ T5305] ? clear_bhb_loop+0x30/0x80 [ 120.937842][ T5305] ? clear_bhb_loop+0x30/0x80 [ 120.942544][ T5305] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 120.948468][ T5305] RIP: 0033:0x7f570add2159 [ 120.952920][ T5305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.972546][ T5305] RSP: 002b:00007f570902a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 120.980995][ T5305] RAX: ffffffffffffffda RBX: 00007f570b059fa0 RCX: 00007f570add2159 [ 120.988993][ T5305] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffffff [ 120.996985][ T5305] RBP: 00007f570ae6906b R08: 0000000000001000 R09: 0000000000000000 [ 121.004973][ T5305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.012964][ T5305] R13: 00007f570b05a038 R14: 00007f570b059fa0 R15: 00007ffdd3e1f988 [ 121.020969][ T5305] [ 122.269818][ T5329] FAULT_INJECTION: forcing a failure. [ 122.269818][ T5329] name failslab, interval 1, probability 0, space 0, times 0 [ 122.347247][ T5329] CPU: 0 PID: 5329 Comm: syz.1.346 Not tainted syzkaller #0 [ 122.354618][ T5329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.364715][ T5329] Call Trace: [ 122.368030][ T5329] [ 122.371048][ T5329] dump_stack_lvl+0x188/0x250 [ 122.375772][ T5329] ? show_regs_print_info+0x20/0x20 [ 122.381019][ T5329] ? load_image+0x410/0x410 [ 122.385565][ T5329] ? mark_lock+0x94/0x320 [ 122.389963][ T5329] should_fail+0x383/0x4b0 [ 122.394506][ T5329] ? skb_expand_head+0x1a9/0x480 [ 122.399497][ T5329] should_failslab+0x5/0x20 [ 122.404040][ T5329] slab_pre_alloc_hook+0x51/0xc0 [ 122.409028][ T5329] ? skb_expand_head+0x1a9/0x480 [ 122.414013][ T5329] __kmalloc_node_track_caller+0x68/0x3a0 [ 122.419771][ T5329] ? skb_expand_head+0x1a9/0x480 [ 122.424846][ T5329] ? skb_expand_head+0x1a9/0x480 [ 122.430004][ T5329] pskb_expand_head+0x128/0x1100 [ 122.434987][ T5329] ? read_lock_is_recursive+0x10/0x10 [ 122.440415][ T5329] ? rcu_lock_release+0x9/0x20 [ 122.445234][ T5329] skb_expand_head+0x1a9/0x480 [ 122.450043][ T5329] ip6_xmit+0x11e2/0x16e0 [ 122.454435][ T5329] ? ip6_autoflowlabel+0xd0/0xd0 [ 122.459420][ T5329] ? __sk_dst_check+0x14e/0x290 [ 122.464328][ T5329] ? read_lock_is_recursive+0x10/0x10 [ 122.469746][ T5329] ? inet6_csk_route_socket+0x613/0xed0 [ 122.475389][ T5329] inet6_csk_xmit+0x405/0x680 [ 122.480395][ T5329] ? inet6_csk_addr2sockaddr+0x1d0/0x1d0 [ 122.486511][ T5329] ? csum_ipv6_magic+0x1e/0x80 [ 122.491335][ T5329] __tcp_transmit_skb+0x1ca3/0x31e0 [ 122.496617][ T5329] ? __tcp_send_ack+0x5d0/0x5d0 [ 122.501502][ T5329] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 122.507807][ T5329] ? memset+0x1e/0x40 [ 122.511827][ T5329] ? tcp_rbtree_insert+0x114/0x170 [ 122.516970][ T5329] ? tcp_connect+0x1fca/0x4970 [ 122.521812][ T5329] tcp_connect+0x21bd/0x4970 [ 122.526523][ T5329] tcp_v6_connect+0x11cf/0x1a10 [ 122.531452][ T5329] ? tcp_v6_pre_connect+0xf0/0xf0 [ 122.536551][ T5329] ? mark_lock+0x94/0x320 [ 122.540932][ T5329] __inet_stream_connect+0x244/0xd80 [ 122.546268][ T5329] ? lock_chain_count+0x20/0x20 [ 122.551165][ T5329] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 122.557191][ T5329] ? __local_bh_enable_ip+0x136/0x1c0 [ 122.562604][ T5329] ? inet_dgram_connect+0x340/0x340 [ 122.567861][ T5329] ? __local_bh_enable_ip+0x136/0x1c0 [ 122.573285][ T5329] ? _local_bh_enable+0xa0/0xa0 [ 122.578188][ T5329] inet_stream_connect+0x62/0xa0 [ 122.583175][ T5329] ? __inet_stream_connect+0xd80/0xd80 [ 122.588715][ T5329] __sys_connect+0x3cb/0x450 [ 122.593354][ T5329] ? __sys_connect_file+0x170/0x170 [ 122.598643][ T5329] __x64_sys_connect+0x76/0x80 [ 122.603451][ T5329] do_syscall_64+0x4c/0xa0 [ 122.607909][ T5329] ? clear_bhb_loop+0x30/0x80 [ 122.612630][ T5329] ? clear_bhb_loop+0x30/0x80 [ 122.617348][ T5329] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.623305][ T5329] RIP: 0033:0x7f570add2159 [ 122.627753][ T5329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.647397][ T5329] RSP: 002b:00007f570902a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 122.655859][ T5329] RAX: ffffffffffffffda RBX: 00007f570b059fa0 RCX: 00007f570add2159 [ 122.663873][ T5329] RDX: 000000000000001c RSI: 0000200000000180 RDI: 0000000000000004 [ 122.671884][ T5329] RBP: 00007f570ae6906b R08: 0000000000000000 R09: 0000000000000000 [ 122.679885][ T5329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.687887][ T5329] R13: 00007f570b05a038 R14: 00007f570b059fa0 R15: 00007ffdd3e1f988 [ 122.695914][ T5329] [ 124.317459][ T5365] FAULT_INJECTION: forcing a failure. [ 124.317459][ T5365] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 124.331994][ T5365] CPU: 0 PID: 5365 Comm: syz.3.362 Not tainted syzkaller #0 [ 124.339335][ T5365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.349518][ T5365] Call Trace: [ 124.352835][ T5365] [ 124.355800][ T5365] dump_stack_lvl+0x188/0x250 [ 124.360524][ T5365] ? show_regs_print_info+0x20/0x20 [ 124.365855][ T5365] ? load_image+0x410/0x410 [ 124.370508][ T5365] ? uncharge_page+0x490/0x490 [ 124.375360][ T5365] should_fail+0x383/0x4b0 [ 124.379832][ T5365] prepare_alloc_pages+0x1e3/0x5b0 [ 124.384990][ T5365] __alloc_pages+0x11b/0x480 [ 124.389622][ T5365] ? zone_statistics+0x170/0x170 [ 124.394610][ T5365] ? rcu_lock_acquire+0x30/0x30 [ 124.399506][ T5365] ? alloc_pages+0x452/0x560 [ 124.404144][ T5365] __get_free_pages+0x8/0x30 [ 124.408770][ T5365] __tlb_remove_page_size+0x1f2/0x3f0 [ 124.414220][ T5365] unmap_page_range+0xfcf/0x2410 [ 124.419493][ T5365] unmap_vmas+0x131/0x250 [ 124.424058][ T5365] ? unmap_page_range+0x2410/0x2410 [ 124.429392][ T5365] ? __mutex_lock_common+0x435/0x2400 [ 124.435003][ T5365] ? exit_mm_release+0x16/0x30 [ 124.439818][ T5365] exit_mmap+0x3b9/0x640 [ 124.444110][ T5365] ? vm_brk+0x20/0x20 [ 124.448145][ T5365] ? uprobe_clear_state+0x2f6/0x460 [ 124.453410][ T5365] __mmput+0x115/0x390 [ 124.457571][ T5365] exit_mm+0x632/0x7b0 [ 124.461679][ T5365] ? perf_pmu_migrate_context+0xb70/0xb70 [ 124.467453][ T5365] ? do_exit+0x2110/0x2110 [ 124.471911][ T5365] ? __ia32_sys_timer_delete+0x40/0x40 [ 124.477515][ T5365] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 124.483027][ T5365] ? tty_audit_exit+0x149/0x1f0 [ 124.487926][ T5365] do_exit+0x5b8/0x2110 [ 124.492131][ T5365] ? put_task_struct+0x80/0x80 [ 124.496937][ T5365] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 124.503038][ T5365] ? _raw_spin_lock_irq+0xb7/0xf0 [ 124.508101][ T5365] do_group_exit+0x12c/0x2f0 [ 124.512721][ T5365] ? lockdep_hardirqs_on+0x94/0x140 [ 124.517971][ T5365] get_signal+0x7eb/0x12e0 [ 124.522447][ T5365] arch_do_signal_or_restart+0xe6/0x12a0 [ 124.528141][ T5365] ? futex_exit_release+0x1c0/0x1c0 [ 124.533390][ T5365] ? get_sigframe_size+0x10/0x10 [ 124.538382][ T5365] ? __context_tracking_exit+0x4c/0x80 [ 124.543899][ T5365] ? exit_to_user_mode_loop+0x3b/0x130 [ 124.549627][ T5365] exit_to_user_mode_loop+0x9e/0x130 [ 124.555057][ T5365] exit_to_user_mode_prepare+0xee/0x180 [ 124.560655][ T5365] syscall_exit_to_user_mode+0x16/0x40 [ 124.566156][ T5365] do_syscall_64+0x58/0xa0 [ 124.570605][ T5365] ? clear_bhb_loop+0x30/0x80 [ 124.575333][ T5365] ? clear_bhb_loop+0x30/0x80 [ 124.580061][ T5365] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 124.586091][ T5365] RIP: 0033:0x7f9b57bd8159 [ 124.590636][ T5365] Code: Unable to access opcode bytes at RIP 0x7f9b57bd812f. [ 124.598037][ T5365] RSP: 002b:00007f9b55e300e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 124.606532][ T5365] RAX: 0000000000000001 RBX: 00007f9b57e5ffa8 RCX: 00007f9b57bd8159 [ 124.614540][ T5365] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9b57e5ffac [ 124.622739][ T5365] RBP: 00007f9b57e5ffa0 R08: 000f5447b90693d2 R09: 0000000000000000 [ 124.630936][ T5365] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 124.638939][ T5365] R13: 00007f9b57e60038 R14: 00007ffe21819be0 R15: 00007ffe21819cc8 [ 124.647003][ T5365] [ 126.165470][ T5400] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 126.192196][ T5399] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 126.210639][ T5400] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 126.228423][ T5399] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 126.589136][ T5415] FAULT_INJECTION: forcing a failure. [ 126.589136][ T5415] name fail_futex, interval 1, probability 0, space 0, times 0 [ 126.677060][ T5415] CPU: 1 PID: 5415 Comm: syz.2.377 Not tainted syzkaller #0 [ 126.684433][ T5415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.694541][ T5415] Call Trace: [ 126.697876][ T5415] [ 126.700850][ T5415] dump_stack_lvl+0x188/0x250 [ 126.705574][ T5415] ? show_regs_print_info+0x20/0x20 [ 126.710834][ T5415] ? load_image+0x410/0x410 [ 126.715396][ T5415] should_fail+0x383/0x4b0 [ 126.719948][ T5415] get_futex_key+0x1a1/0x12d0 [ 126.724685][ T5415] ? futex_wait_restart+0x250/0x250 [ 126.729925][ T5415] ? __lock_acquire+0x13dc/0x7b50 [ 126.735055][ T5415] futex_wake+0x101/0x540 [ 126.739444][ T5415] ? futex_wait+0x680/0x680 [ 126.743994][ T5415] ? verify_lock_unused+0x140/0x140 [ 126.749244][ T5415] ? verify_lock_unused+0x140/0x140 [ 126.754582][ T5415] do_futex+0xd83/0x12b0 [ 126.758870][ T5415] ? lock_chain_count+0x20/0x20 [ 126.763791][ T5415] ? futex_exit_release+0x1c0/0x1c0 [ 126.769038][ T5415] ? __context_tracking_exit+0x4c/0x80 [ 126.774564][ T5415] __se_sys_futex+0x389/0x420 [ 126.779308][ T5415] ? __x64_sys_futex+0xf0/0xf0 [ 126.784296][ T5415] ? __x64_sys_futex+0x1d/0xf0 [ 126.789132][ T5415] do_syscall_64+0x4c/0xa0 [ 126.793620][ T5415] ? clear_bhb_loop+0x30/0x80 [ 126.798354][ T5415] ? clear_bhb_loop+0x30/0x80 [ 126.803167][ T5415] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.809136][ T5415] RIP: 0033:0x7f8d03ecc159 [ 126.813595][ T5415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.833248][ T5415] RSP: 002b:00007f8d021240e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 126.841714][ T5415] RAX: ffffffffffffffda RBX: 00007f8d04153fa8 RCX: 00007f8d03ecc159 [ 126.849951][ T5415] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8d04153fac [ 126.857965][ T5415] RBP: 00007f8d04153fa0 R08: 002004bde33b702a R09: 0000000000000000 [ 126.865983][ T5415] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 126.873996][ T5415] R13: 00007f8d04154038 R14: 00007ffc0ae24380 R15: 00007ffc0ae24468 [ 126.882052][ T5415] [ 127.953659][ T5440] kvm: pic: single mode not supported [ 127.953805][ T5440] kvm: pic: level sensitive irq not supported [ 128.009811][ T5440] kvm: pic: single mode not supported [ 128.047605][ T5440] kvm: pic: level sensitive irq not supported [ 128.070570][ T5440] kvm: pic: level sensitive irq not supported [ 128.087210][ T5438] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 128.106442][ T5440] kvm: pic: single mode not supported [ 128.106465][ T5440] kvm: pic: level sensitive irq not supported [ 128.116926][ T5438] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 128.384646][ T5451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.389'. [ 128.460327][ T5454] FAULT_INJECTION: forcing a failure. [ 128.460327][ T5454] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 128.473817][ T5454] CPU: 0 PID: 5454 Comm: syz.4.392 Not tainted syzkaller #0 [ 128.481143][ T5454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 128.491246][ T5454] Call Trace: [ 128.494568][ T5454] [ 128.497527][ T5454] dump_stack_lvl+0x188/0x250 [ 128.502254][ T5454] ? show_regs_print_info+0x20/0x20 [ 128.507502][ T5454] ? load_image+0x410/0x410 [ 128.512058][ T5454] should_fail+0x383/0x4b0 [ 128.516529][ T5454] prepare_alloc_pages+0x1e3/0x5b0 [ 128.521786][ T5454] __alloc_pages+0x11b/0x480 [ 128.526439][ T5454] ? zone_statistics+0x170/0x170 [ 128.531421][ T5454] ? rcu_lock_acquire+0x30/0x30 [ 128.536325][ T5454] ? alloc_pages+0x452/0x560 [ 128.541045][ T5454] __get_free_pages+0x8/0x30 [ 128.545770][ T5454] __tlb_remove_page_size+0x1f2/0x3f0 [ 128.551192][ T5454] unmap_page_range+0xfcf/0x2410 [ 128.556200][ T5454] unmap_vmas+0x131/0x250 [ 128.560579][ T5454] ? unmap_page_range+0x2410/0x2410 [ 128.565815][ T5454] ? __mutex_lock_common+0x435/0x2400 [ 128.571227][ T5454] ? exit_mm_release+0x16/0x30 [ 128.576148][ T5454] exit_mmap+0x3b9/0x640 [ 128.580435][ T5454] ? vm_brk+0x20/0x20 [ 128.584483][ T5454] ? uprobe_clear_state+0x2f6/0x460 [ 128.589718][ T5454] __mmput+0x115/0x390 [ 128.593828][ T5454] exit_mm+0x632/0x7b0 [ 128.597931][ T5454] ? perf_pmu_migrate_context+0xb70/0xb70 [ 128.603698][ T5454] ? do_exit+0x2110/0x2110 [ 128.608156][ T5454] ? __ia32_sys_timer_delete+0x40/0x40 [ 128.613696][ T5454] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 128.619202][ T5454] ? tty_audit_exit+0x149/0x1f0 [ 128.624089][ T5454] do_exit+0x5b8/0x2110 [ 128.628290][ T5454] ? put_task_struct+0x80/0x80 [ 128.633138][ T5454] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 128.639214][ T5454] ? _raw_spin_lock_irq+0xb7/0xf0 [ 128.644305][ T5454] do_group_exit+0x12c/0x2f0 [ 128.648942][ T5454] ? lockdep_hardirqs_on+0x94/0x140 [ 128.654197][ T5454] get_signal+0x7eb/0x12e0 [ 128.658853][ T5454] arch_do_signal_or_restart+0xe6/0x12a0 [ 128.664554][ T5454] ? futex_exit_release+0x1c0/0x1c0 [ 128.669909][ T5454] ? get_sigframe_size+0x10/0x10 [ 128.674919][ T5454] ? __context_tracking_exit+0x4c/0x80 [ 128.680442][ T5454] ? exit_to_user_mode_loop+0x3b/0x130 [ 128.685963][ T5454] exit_to_user_mode_loop+0x9e/0x130 [ 128.691282][ T5454] exit_to_user_mode_prepare+0xee/0x180 [ 128.696866][ T5454] syscall_exit_to_user_mode+0x16/0x40 [ 128.702362][ T5454] do_syscall_64+0x58/0xa0 [ 128.706816][ T5454] ? clear_bhb_loop+0x30/0x80 [ 128.711537][ T5454] ? clear_bhb_loop+0x30/0x80 [ 128.716252][ T5454] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.722183][ T5454] RIP: 0033:0x7fbd52a63159 [ 128.726723][ T5454] Code: Unable to access opcode bytes at RIP 0x7fbd52a6312f. [ 128.734110][ T5454] RSP: 002b:00007fbd50cbb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 128.742563][ T5454] RAX: 0000000000000001 RBX: 00007fbd52ceafa8 RCX: 00007fbd52a63159 [ 128.751004][ T5454] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbd52ceafac [ 128.759043][ T5454] RBP: 00007fbd52ceafa0 R08: 0017ac8305a9ee06 R09: 0000000000000000 [ 128.767067][ T5454] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 128.775258][ T5454] R13: 00007fbd52ceb038 R14: 00007fff0a6491d0 R15: 00007fff0a6492b8 [ 128.783281][ T5454] [ 129.639664][ T5482] ------------[ cut here ]------------ [ 129.645241][ T5482] WARNING: CPU: 0 PID: 5482 at arch/x86/kvm/x86.c:10384 kvm_arch_vcpu_ioctl_run+0x1b14/0x1e40 [ 129.691114][ T5482] Modules linked in: [ 129.745997][ T5482] CPU: 1 PID: 5482 Comm: syz.2.401 Not tainted syzkaller #0 [ 129.780058][ T5482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 129.803179][ T5481] kvm: pic: single mode not supported [ 129.803202][ T5481] kvm: pic: level sensitive irq not supported [ 129.817761][ T5482] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1b14/0x1e40 [ 129.832671][ T5485] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 129.841002][ T5485] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 129.851376][ T5481] kvm: pic: single mode not supported [ 129.851460][ T5481] kvm: pic: level sensitive irq not supported [ 129.864273][ T5482] Code: e8 a1 11 af 00 e9 a9 e9 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c f1 f7 ff ff 4c 89 ff e8 86 11 af 00 e9 e4 f7 ff ff e8 ec dd 69 00 <0f> 0b e9 31 fd ff ff 44 89 f9 80 e1 07 38 c1 0f 8c ea f7 ff ff 4c [ 129.913665][ T5481] kvm: pic: level sensitive irq not supported [ 129.919788][ T5481] kvm: pic: single mode not supported [ 129.926134][ T5481] kvm: pic: level sensitive irq not supported [ 129.936057][ T5482] RSP: 0018:ffffc9000321fca0 EFLAGS: 00010287 [ 129.993218][ T5482] RAX: ffffffff810f36b4 RBX: 1ffff1100bbcc062 RCX: 0000000000080000 [ 130.047330][ T5482] RDX: ffffc9000f39d000 RSI: 0000000000000405 RDI: 0000000000000406 [ 130.057029][ T5482] RBP: 0000000000000000 R08: ffffffff8d8b1eef R09: 1ffffffff1b163dd [ 130.081433][ T5482] R10: dffffc0000000000 R11: fffffbfff1b163de R12: ffff88805b9c8001 [ 130.100980][ T5482] R13: ffff88805de600f0 R14: ffff88805de60000 R15: ffff88805b9c8000 [ 130.120835][ T5482] FS: 00007f8d021036c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 130.143913][ T5482] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.161065][ T5482] CR2: 0000000000000000 CR3: 000000005f401000 CR4: 00000000003526f0 [ 130.180691][ T5482] DR0: 0000000000000000 DR1: 0000000000006800 DR2: 0000000000009951 [ 130.207964][ T5482] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 130.235303][ T5482] Call Trace: [ 130.247963][ T5482] [ 130.259055][ T5482] kvm_vcpu_ioctl+0x8f2/0xc10 [ 130.274264][ T5482] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 130.296261][ T5482] ? bpf_lsm_file_ioctl+0x5/0x10 [ 130.317556][ T5482] ? security_file_ioctl+0x7c/0xa0 [ 130.337800][ T5482] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 130.361424][ T5482] __se_sys_ioctl+0xfa/0x170 [ 130.377496][ T5482] do_syscall_64+0x4c/0xa0 [ 130.399168][ T5482] ? clear_bhb_loop+0x30/0x80 [ 130.420963][ T5482] ? clear_bhb_loop+0x30/0x80 [ 130.444098][ T5482] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 130.455984][ T5482] RIP: 0033:0x7f8d03ecc159 [ 130.460482][ T5482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.520345][ T5482] RSP: 002b:00007f8d02103028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 130.535924][ T5482] RAX: ffffffffffffffda RBX: 00007f8d04154090 RCX: 00007f8d03ecc159 [ 130.543987][ T5482] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 130.598310][ T5482] RBP: 00007f8d03f6306b R08: 0000000000000000 R09: 0000000000000000 [ 130.615938][ T5482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.623989][ T5482] R13: 00007f8d04154128 R14: 00007f8d04154090 R15: 00007ffc0ae24468 [ 130.655928][ T5482] [ 130.659071][ T5482] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 130.666385][ T5482] CPU: 1 PID: 5482 Comm: syz.2.401 Not tainted syzkaller #0 [ 130.673710][ T5482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 130.683816][ T5482] Call Trace: [ 130.687140][ T5482] [ 130.690108][ T5482] dump_stack_lvl+0x188/0x250 [ 130.694832][ T5482] ? show_regs_print_info+0x20/0x20 [ 130.700085][ T5482] ? load_image+0x410/0x410 [ 130.704642][ T5482] panic+0x2f8/0x850 [ 130.708594][ T5482] ? bpf_jit_dump+0xd0/0xd0 [ 130.713188][ T5482] ? kvm_arch_vcpu_ioctl_run+0x1b14/0x1e40 [ 130.719040][ T5482] __warn+0x248/0x2b0 [ 130.723073][ T5482] ? kvm_arch_vcpu_ioctl_run+0x1b14/0x1e40 [ 130.728925][ T5482] report_bug+0x1b9/0x2e0 [ 130.733335][ T5482] handle_bug+0x3a/0x70 [ 130.737540][ T5482] exc_invalid_op+0x16/0x40 [ 130.742092][ T5482] asm_exc_invalid_op+0x16/0x20 [ 130.747017][ T5482] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1b14/0x1e40 [ 130.753475][ T5482] Code: e8 a1 11 af 00 e9 a9 e9 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c f1 f7 ff ff 4c 89 ff e8 86 11 af 00 e9 e4 f7 ff ff e8 ec dd 69 00 <0f> 0b e9 31 fd ff ff 44 89 f9 80 e1 07 38 c1 0f 8c ea f7 ff ff 4c [ 130.773123][ T5482] RSP: 0018:ffffc9000321fca0 EFLAGS: 00010287 [ 130.779250][ T5482] RAX: ffffffff810f36b4 RBX: 1ffff1100bbcc062 RCX: 0000000000080000 [ 130.787270][ T5482] RDX: ffffc9000f39d000 RSI: 0000000000000405 RDI: 0000000000000406 [ 130.795311][ T5482] RBP: 0000000000000000 R08: ffffffff8d8b1eef R09: 1ffffffff1b163dd [ 130.803422][ T5482] R10: dffffc0000000000 R11: fffffbfff1b163de R12: ffff88805b9c8001 [ 130.811438][ T5482] R13: ffff88805de600f0 R14: ffff88805de60000 R15: ffff88805b9c8000 [ 130.819559][ T5482] ? kvm_arch_vcpu_ioctl_run+0x1b14/0x1e40 [ 130.825451][ T5482] kvm_vcpu_ioctl+0x8f2/0xc10 [ 130.830179][ T5482] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 130.836083][ T5482] ? bpf_lsm_file_ioctl+0x5/0x10 [ 130.841079][ T5482] ? security_file_ioctl+0x7c/0xa0 [ 130.846241][ T5482] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 130.851926][ T5482] __se_sys_ioctl+0xfa/0x170 [ 130.856567][ T5482] do_syscall_64+0x4c/0xa0 [ 130.861038][ T5482] ? clear_bhb_loop+0x30/0x80 [ 130.865767][ T5482] ? clear_bhb_loop+0x30/0x80 [ 130.870500][ T5482] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 130.876465][ T5482] RIP: 0033:0x7f8d03ecc159 [ 130.880926][ T5482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.900759][ T5482] RSP: 002b:00007f8d02103028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 130.909237][ T5482] RAX: ffffffffffffffda RBX: 00007f8d04154090 RCX: 00007f8d03ecc159 [ 130.917258][ T5482] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 130.925300][ T5482] RBP: 00007f8d03f6306b R08: 0000000000000000 R09: 0000000000000000 [ 130.933332][ T5482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.941360][ T5482] R13: 00007f8d04154128 R14: 00007f8d04154090 R15: 00007ffc0ae24468 [ 130.949396][ T5482] [ 130.952837][ T5482] Kernel Offset: disabled [ 130.957502][ T5482] Rebooting in 86400 seconds..