last executing test programs: 8.365506211s ago: executing program 2 (id=832): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x121342, 0x130) (async) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x31) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) (async) unlink$auto(&(0x7f0000000000)='./file0\x00') (async) mmap$auto(0x0, 0x1, 0xfd5, 0x12, r1, 0x40000000) (async) ptrace$auto(0x10, r0, 0x1, 0x7ff) (async) mmap$auto(0x7, 0x5, 0x10000000000df, 0xeb2, r1, 0x8000) (async) openat$auto_hwsim_fops_rx_rssi_(0xffffffffffffff9c, 0x0, 0x200, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async) rt_sigprocmask$auto_SIG_UNBLOCK(0x1, &(0x7f0000000000)={0x2}, 0x0, 0x8) (async) socket(0x22, 0x3, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) read$auto_ep0_operations_inode(r2, &(0x7f0000000280)=""/96, 0x60) (async) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x2, 0x80002, 0x73) socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(r3, r3, 0x7) (async) socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) (async) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x82401, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000100), 0x602000, 0x0) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) clone$auto(0x1, 0x0, 0x0, 0x0, 0x42) 7.931272701s ago: executing program 2 (id=834): r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x80000000000000, 0x5, 0xdf, 0x9b72, r0, 0x7f) r1 = semctl$auto(0x1ff, 0x2, 0x13, 0x1) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dynamic_debug/control\x00', 0x8101, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/irq/2/smp_affinity\x00', 0x8f3b7a51b80eb581, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), r3) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="07031abd70250c00587b22"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40800) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) r6 = getpid() process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0x8}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x10}, 0xa, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000240), r8) sendmsg$auto_NFSD_CMD_LISTENER_SET(r8, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRESDEC=r8, @ANYRESHEX=r1], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$auto_NFSD_CMD_LISTENER_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r9, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000804}, 0x50) rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100)='./file1\x00') openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r10, 0x1, 0x94d1) ptrace$auto_PTRACE_GET_SYSCALL_USER_DISPATCH_CONFIG(0x4211, r10, 0x100, 0x100000001) lstat$auto(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team_slave_0\x00'}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x8000) r11 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/slabinfo\x00', 0x0, 0x0) read$auto_proc_pid_maps_operations_internal(r11, &(0x7f00000020c0)=""/4093, 0xffd) write$auto_proc_reg_file_ops_compat_inode(r2, 0x0, 0x0) socket(0xa, 0x3, 0x3b) 7.38660773s ago: executing program 2 (id=837): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x1cb602, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x2, 0x0) socket(0x28, 0x1, 0x0) socket(0x2, 0x5, 0x0) sysfs$auto(0x2, 0x0, 0x0) r1 = epoll_create$auto(0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) epoll_ctl$auto(0x5, 0x3, r2, 0x0) epoll_wait$auto(r1, 0x0, 0xe007, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x3, 0x5) lseek$auto(0x3, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0xd7, 0x400, 0x0) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) r3 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r3, 0x107, 0x2, 0x0, 0x28) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) sendmsg$auto_NL80211_CMD_STOP_AP(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x400c040}, 0x4008080) munmap$auto(0x8000, 0xffffffff) 6.658062168s ago: executing program 1 (id=838): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x204000, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400004, 0xdb, 0x9b72, 0x7, 0x800008000) r1 = socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x401, 0x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) getsockopt$auto(r1, 0x84, 0x2, 0x0, 0x0) madvise$auto(0x0, 0xfffffbffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x0, 0x0) ioctl$auto(r2, 0x64c7, 0xffffffffffffffff) pselect6$auto(0x8eb, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/acpi/wakeup\x00', 0x48041, 0x0) r3 = getpid() mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) r4 = gettid() r5 = open(&(0x7f0000000000)='./file0\x00', 0x64242, 0xe1d2b27bdc14aad4) flock$auto(r5, 0x1) r6 = open(&(0x7f0000000040)='./file0\x00', 0x4242, 0x40) flock$auto(r6, 0x2) rt_tgsigqueueinfo$auto(r3, r4, 0x21, &(0x7f0000000400)={@siginfo_0_0={0x3, 0x1c51, 0xfffffffe, @_sigsys={0x0, 0x3000, 0xfffffffe}}}) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) iopl$auto(0x3) 6.290839923s ago: executing program 2 (id=840): mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x20040890) unshare$auto(0x40000080) mmap$auto(0x0, 0x402000d, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x40e00, 0x0) socket(0x1d, 0x3, 0x1) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000300), 0x60081, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$auto_PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000040)=0x12fa) io_uring_setup$auto(0x386, &(0x7f0000000000)={0x5, 0x1, 0x4c, 0x0, 0x1, 0x8, 0xffffffffffffffff, [0xfffffffa, 0x8, 0xa], {0x8, 0x8, 0x3fc000, 0x4, 0x751, 0x3, 0x3b, 0xec5, 0xffff}, {0xd5, 0x80000000, 0x1bee, 0x5d, 0x400, 0x9, 0x7, 0x8000, 0x7f}}) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x0, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x6, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0x1010001, 0x100000003) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000140)={&(0x7f0000000000), 0x55}, 0x6, 0x2, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/loop13/queue/max_sectors_kb\x00', 0x109206, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) 5.175218928s ago: executing program 0 (id=842): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffff004, 0x2) socket(0x23, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x9, 0x2, 0x9) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) socket(0x28, 0x5, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xf, 0x3, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x800, 0x3, 0xff, 0x10001, 0x400000000003, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x80000000, 0x9, 0xffffdfffffffff81, 0x4]}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r4 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r3, r1, 0x8, 0x1, 0xffffffffffffffff, @relative_fd, 0x4}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r4, 0x0, 0x1}, 0x4) 4.079391516s ago: executing program 0 (id=843): flock$auto(0x1, 0x8) mmap$auto(0xffffffffffffffff, 0x37, 0xdd, 0xeb1, 0x401, 0x8000) socket(0x10, 0x80000, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001480)='/proc/sys/net/ipv6/conf/geneve0/disable_ipv6\x00', 0x40001, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000000c0), 0x50042, 0x0) sendmsg$auto_IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000180)=ANY=[@ANYBLOB="640295004b6be606ffff8791106a5f88bf6bc28aa5af3be7277dcd14aa38a09e0ba9a2fa1cd925df124b72492686e22419acff850dd7a6f82cda4f80d63c0feaac5c9ec52d834b5daef81f", @ANYRES16=0x0, @ANYRESDEC=r1, @ANYRES32=r1, @ANYRESOCT], 0x264}}, 0x40040) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) close_range$auto(0x2, 0x8, 0x0) write$auto(0x3, 0x0, 0x7fffffff) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x1a, 0x0, 0x1) io_uring_setup$auto(0x2, 0x0) r2 = openat$auto_ht40allow_map_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/ht40allow_map\x00', 0x181000, 0x0) read$auto(r2, &(0x7f0000000080)='+%@\x00', 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) io_uring_setup$auto(0x1, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto_TIOCSTI2(r4, 0x5412, &(0x7f0000000200)="b206b4dc238a6682330beb44e37a7b390ab21171387828ffdafceadd142063c8b76230a5f8b1662b085d86527b6cd897a35782260a7b5f1b80826555") r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) pread64$auto(r5, 0x0, 0x8000, 0x800000000002) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f00000004c0), 0x2202, 0x0) ioctl$auto_TIOCVHANGUP2(r3, 0x5437, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) 3.922132401s ago: executing program 3 (id=844): r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x101, 0x4100000000df, 0xeb1, 0x200000401, 0x2008000) socket(0x23, 0x5, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) ioctl$auto(0x3, 0x89e0, 0x74) setsockopt$auto(r0, 0x104000000000010e, 0x4, 0x0, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bus/usb/019/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000100)={0x4, 0x80, 0x8ffff, 0x5, &(0x7f0000000040)="5a47c610e193ca96", 0xc694, 0x3, 0x81, @stream_id=0x2, 0x20047, 0xc, 0x0}) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x103800, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x20) chmod$auto(&(0x7f0000000240)='./file0\x00', 0xf4ba) chown$auto(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000680)='/dev/input/event2\x00', 0x100, 0x0) ioctl$auto_EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f00000000c0)={0x3, 0x9, 0x1, 0xc1e, "c92eee6d23cfaacb4b946edb9f435bcb5223b07f36dcc2e8b0d2e486bbf74a63"}) 3.080937963s ago: executing program 3 (id=845): socket(0x2, 0x1, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000440)="4e92ae05cab64345b45eb6c694e05bbedee99ccb118bf6891312191a90602e604a876894d9a68b75dfd97834111d223db1b0daceeac59769f98fc6201d978812ef6cd290c4ab974022cfbf5791a5f8d1f60e436b72ce3ebeac9e8d6eb60368525c9cc2ad9a4073e4f6c29e32f0dfaba04f3e235cccc225da09d123b367e9e83d1cfbcb732ab802aacc6bbf5269998aefe11ed2c9a197daddf899f68ca8ff8a9b8e4ca864f9c1eb7c4ccc4dab82b28cb142f7793e4324738a619a9a2e885ebdaeea4661ce927ee2250a4edf01348fafcb381cf6bb346c27ab0d2798ff5481d5d079218e174123") socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) unshare$auto(0x400) lstat$auto(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ppoll$auto(0x0, 0x2, &(0x7f0000000040)={0x2, 0xfffffffffffffff8}, 0x0, 0x8) mmap$auto(0x0, 0x0, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0xfffffffffffffffe, 0xffffffffbfff0005, 0x19) seccomp$auto(0x3, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nbd7\x00', 0x40100, 0x0) sendmsg$auto_NL80211_CMD_VENDOR(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000446c7c8b4c3c9f2dd83d4ec9e8486070f41635086c16de43cc34637dfa1e181519bb9ea538ab052c78f51c2190406cae6dc88e36a6a28bab8ea972763428d053ad983f88995f90d21b92170326f6c922c36bbe43d701bd17e61864c5cc4fc4dd988faffc80eba8bc5c85d9af7cc6149650aa9a31f8b788d2f613a9", @ANYRES16=0x0, @ANYBLOB="050723bd7000fbdbdf2567000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x80) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x362a6b08c685775, 0x0) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r0) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf250500000008000500ae090000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000881}, 0x20004000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = io_uring_setup$auto(0x6, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/midi2\x00', 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000140), 0x20, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/platform/vhci_hcd.4/usb17/17-0:1.0/usb17-port1/power/runtime_suspended_time\x00', 0xae942, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000200)="72f1cd40", 0x4) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) ioctl$auto_TIOCGPTPEER2(r3, 0x5441, 0x0) 2.838102933s ago: executing program 0 (id=846): r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x1, 0x6) r3 = bpf$auto_BPF_TOKEN_CREATE(0x24, &(0x7f00000032c0)=@link_create={@map_fd=r1, @target_fd=r2, 0x0, 0xfffffffa, @kprobe_multi={0x7ff, 0x80000000, 0x6, 0xffffffff, 0x2}}, 0x80000000) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r3, @ANYRES16=r4, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) madvise$auto(0x0, 0xff7fffffffff0001, 0x15) close_range$auto(r0, 0x8, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f00000000c0), r5) sendmsg$auto_SMC_NETLINK_GET_FBACK_STATS(r5, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="200029bd7000c0dbdf2500000000c7075162c4ba4756397dc5e1e72d9a399b903cff8bf08b4da4fa3c928d45e600a6baa02721d66f1a463b8489f2f422e055ad49e07bcc6232eadaaaab4f0be1c42e317e7535d20000"], 0x5c}, 0x1, 0x0, 0x0, 0x400c000}, 0x60011) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) socket(0xa, 0x1, 0x3ad2dd5) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, 0x0, 0x22001, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) select$auto(0x10, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x4, 0x5, 0x4, 0x15f4da0e, 0x100000001, 0x9, 0x100000000000000c, 0x8, 0x5, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r1, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r8, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x200008) syz_genetlink_get_family_id$auto_l2tp(0x0, r7) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/workqueue/ib-comp-unb-wq/nice\x00', 0xcaa02, 0x0) r10 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) sendfile$auto(r9, r10, 0x0, 0x98) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/profiling\x00', 0x82002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 2.395881213s ago: executing program 2 (id=847): ioctl$auto_XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000100)="da6104ded9", 0x95, 0x0, 0xdc, 0x0, 0x0}) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) getgid() close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x204880, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101200, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae90, &(0x7f00000000c0)={0x2, 0x0, [{0x1, 0x7ff, 0x8}, {0x10002, 0x2c, 0x800000000000010d}, {0x0, 0x7, 0x7}]}) 2.359126372s ago: executing program 1 (id=848): openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2401, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) sysfs$auto(0x2, 0x4d, 0x0) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000b00)={'veth0_to_bridge\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fddbdf25020000000c00018008000100", @ANYRES32=r1, @ANYBLOB="21a54fe7dce71c7f2d73ca4d69375f43ac8555a393fdccf9f15cae28388ba79545c7b0532b26798456452587531576bdb91676625e721e11913cb9bb9dd37917d073851f38d6f710"], 0x20}, 0x1, 0x0, 0x0, 0x4880}, 0x2002c810) (async) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto(r3, 0x540a, 0x0) (async) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket(0x10, 0x2, 0x14) (async) r4 = socket(0x11, 0x80003, 0x300) (async) r5 = socket(0x1d, 0x2, 0x7) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000040)=ANY=[@ANYBLOB="010027bd7000ffdb"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r5], 0x1ac}}, 0x20008041) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x2}, 0x3, 0x0) timer_create$auto(0x0, 0x0, 0x0) (async) mmap$auto(0x7, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) io_uring_register$auto(0x2, 0x11, &(0x7f0000000180), 0x83) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000fb, 0x3, 0x1) (async) set_mempolicy_home_node$auto(0x0, 0x2010001, 0x0, 0x0) 1.918329859s ago: executing program 1 (id=849): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x2, 0x0) write$auto(r0, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\xf5\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\t\x00\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85\x00 /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00\r\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x0, 0x0, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe8181, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) select$auto(0x5, 0x0, 0x0, 0x0, 0x0) r1 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) epoll_create$auto(0x200006) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vbi22\x00', 0x1, 0x0) ioctl$auto(0x3, 0xc0585609, r1) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x2000040080000004, 0xe) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec8\x00', 0x0, 0x0) ioctl$auto_CEC_DQEVENT(r2, 0xc0506107, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0xd, 0x0, 0x6, 0x0, 0x0, 0x1002}, 0x5}, 0x5, 0x100) bpf$auto(0xf7fff011, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x4, 0xfaae, 0x468, 0x3000400000000009, 0x2, 0x4, 0x3, 0x4, 0x1ff, 0x5, 0xb5, 0x4, 0x806, 0xd9f1}, 0x800000a3) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video54\x00', 0x42942, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000040), 0x7111}, 0x8) 1.549152748s ago: executing program 3 (id=850): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x23, 0x2, 0x0) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x4, 0xffffffffffffffff, 0x8, 0x5, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x204880, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101200, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae90, 0x0) 1.14210159s ago: executing program 0 (id=851): syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 1.080129123s ago: executing program 0 (id=852): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x10000, 0x1, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0xfb, 0x1001, 0x10001, 0x7, 0x1, 0x40, 0x176c5, 0x400005, 0x100000005}}) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x80000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_STATUS642(0xffffffffffffffff, 0x80984120, &(0x7f0000000180)={0x8, "744fc3c9", 0x3, 0x401, 0xfffffffffffffff9, 0x8000, 0x10fac199, 0x3d02, 0x17fc, 0x2, 0xfffffffffffffffc, 0xfffffffffffffff7, 0x401, 0x9, 0x1, 0x200, 0x3, 0x3, 0x0, "dc6cdb104b5e79ab12df9bade8f4a1310a94b996"}) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x13, 0x414f, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}, 0x1fe, 0x81) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/event1\x00', 0x40000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0xffffffffffffffff, 0x1, 0x5, 0x4, 0x15f4da0e, 0xffffffff, 0x9, 0x100000000000000c, 0x8, 0xfffffffffffffffe, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r0, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/stable_node_dups\x00', 0x20000, 0x0) openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x501402, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, 0x0, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_register$auto(0x2, 0x23, 0x0, 0x0) 939.909612ms ago: executing program 3 (id=853): setitimer$auto_ITIMER_PROF(0x2, &(0x7f0000000000)={{0x1, 0x40}, {0x7fffffff, 0x346acb91}}, &(0x7f0000000040)={{0x112, 0x400}, {0x4, 0x858c87e}}) getitimer$auto_ITIMER_VIRTUAL(0x1, &(0x7f0000000080)={{0x9f, 0x4}, {0xb3, 0x5}}) setitimer$auto_ITIMER_PROF(0x2, &(0x7f00000000c0)={{0x6, 0x7}, {0x1, 0x1}}, &(0x7f0000000100)={{0x1000}, {0x5, 0x81}}) setitimer$auto_ITIMER_REAL(0x0, &(0x7f0000000140)={{0x1ff, 0x5}, {0xfffffffffffffffd, 0x2}}, &(0x7f0000000180)={{0xffffffff00000000, 0x2}, {0xfad, 0x7a1}}) getitimer$auto(0x6, &(0x7f00000001c0)={{0x0, 0x4}, {0x6d07, 0x8000000000000000}}) getitimer$auto_ITIMER_VIRTUAL(0x1, &(0x7f0000000200)={{0x8, 0x101}, {0x0, 0x4a4}}) r0 = bpf$auto_BPF_LINK_CREATE(0x1c, &(0x7f0000000240)=@bpf_attr_1={0xffffffffffffffff, 0x2, @value=0x10001}, 0x3) preadv$auto(r1, &(0x7f0000000400)={&(0x7f0000000300)="165f4209f31783f7a99ca03285d8cb5fd82061455d76b928ddaf1abf6439b888b1b6c74de00ee42cfd667c41869819ee788d930445fbf44c82c097e60b01a7c28380369ffe8210253ce9664d01099fc7be4abfaf6f662d1dbc5276e9e33d6d9a9625ad803b1a93245ac5dfd8309f35d068ef9834ddbaffcd945929eef3b57613f4538c76916a1bb78873df0f03116a4c891a0c9fbaa896f2ac227a6591449b597fe3d029f484f26f0a914688724ef0df573824ce73dc5451f12351328eded21bbc7ce424a9077ba7ebf78c7f59893771589e5e67c8d86fe793198c14fe2781507b8da96c73a191b5b9e470", 0xc}, 0x3, 0x4, 0x8) ioctl$auto_BLKTRACESETUP2(r1, 0xc0481273, &(0x7f0000000440)={"5aa50d754fc010e09c385316b05c6016f119401041f4ba075e0b26319fcb5287", 0x2, 0x1ff, 0x33, 0x7, 0x767, 0x0}) r3 = prctl$auto(0x10, 0x5, r2, 0x0, 0x4) setitimer$auto_ITIMER_PROF(0x2, &(0x7f00000004c0)={{0x0, 0x6a}, {0x0, 0xfffffffffffffffb}}, &(0x7f0000000500)={{0x7f1f, 0xfffffffffffffffa}, {0x9ec4, 0x3}}) getitimer$auto_ITIMER_VIRTUAL(0x1, &(0x7f0000000540)={{0x10, 0x7ff}, {0xbffa, 0xffffffff}}) ioctl$auto_BLKALIGNOFF(r0, 0x127a, 0x0) getitimer$auto_ITIMER_PROF(0x2, &(0x7f0000000580)={{0x7ff, 0x5}, {0x4, 0x6}}) getitimer$auto_ITIMER_PROF(0x2, &(0x7f00000005c0)={{0x6, 0x7}, {0xfffffffffffffffe, 0xc9}}) close_range$auto(r1, r3, 0x8) r4 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000640), r1) sendmsg$auto_OVS_FLOW_CMD_NEW(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x18, r4, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@OVS_FLOW_ATTR_PROBE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x20000880) mmap$auto(0x8000000000000, 0x6, 0x400000000, 0x11, r3, 0x6) sysfs$auto(0xb, 0x3, 0xc) getitimer$auto_ITIMER_REAL(0x0, &(0x7f0000000740)={{0x7, 0xba}, {0xfffffffffffffff8, 0xc0000000000}}) r5 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000780), 0x141800, 0x0) getitimer$auto_ITIMER_REAL(0x0, &(0x7f00000007c0)={{0x5, 0x6}, {0x800, 0x7fffffff}}) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x80, 0x3, r2, 0x8ae, 0xffff) ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000ac0)={{r5, &(0x7f0000000800)="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", 0x0, &(0x7f0000000900)="003f73c17dde6b4e9da2e8837cc398ae7e9d659fb4570e8e45166a7b4b095cfc276aedc8df462cae812164b3299aed5ff7e567254b485b03a1f6d05ced3cb673fad82988975dfb4181138e", 0x4, &(0x7f0000000980)="952758839c2e7f8eff5dc79096f7a21f2c73e8527280afac7560dfd1234a1d4f89bb0abb10b89220ad429a4332161e74fda21deec5b8e4e18cdf828de5975c4310fd65cd90d58f24e827f4fd127b87028f91507ffea388e9ab09740278af445181eebd97db724fdc5da222342af4c8811b1902fea75224a464468b33bc644d438493b3f23d", &(0x7f0000000a40)=0x40}, {[0x9, 0x9, 0x0, 0x8]}, 0x80, 0x7, &(0x7f0000000a80)="db7e7b03e4c200274a695af6ec1285d50570f16613a4064bd8fdc0129bccf114997e36"}) getitimer$auto_ITIMER_VIRTUAL(0x1, &(0x7f0000000b40)={{0x8}, {0x2}}) ioctl$auto_TIOCSETD2(r0, 0x5423, &(0x7f0000000b80)="2b5c99b17b14e1e2a556b0b3a76674de2a04f059e6e57fd851a6b1115f5008501c83c2b4f9184bb9c98193b3f98ff51b2413465580a35e1f8c8d66758fbdc362") getitimer$auto_ITIMER_VIRTUAL(0x1, &(0x7f0000000bc0)={{0x7, 0x3}, {0x9, 0x9}}) setitimer$auto_ITIMER_REAL(0x0, &(0x7f0000000c00)={{0x1b, 0xd}, {0xffffffffffffff39, 0x5}}, &(0x7f0000000c40)={{0x1e}, {0x3, 0x6}}) setitimer$auto_ITIMER_VIRTUAL(0x1, &(0x7f0000000c80)={{0x2, 0x7}, {0xbe, 0x6}}, &(0x7f0000000cc0)={{0x8, 0x5}, {0x200}}) 920.969709ms ago: executing program 1 (id=854): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETFAMILY2(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001000)={0x14, r1, 0xa4f962d6ad91937d, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x24048004) (async) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vhci_hcd.6/usb22/22-0:1.0/usb22-port5/power/runtime_suspended_time\x00', 0x1018c1, 0x0) write$auto(r2, &(0x7f0000000300)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xabxo\xd9\x90\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xa5\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x85R\x96\xe4\x86\\\x13\xa9\x1a&\x19\x8a9\x82\xf0\x83\f\xf7\xeb', 0x391) 690.792284ms ago: executing program 3 (id=855): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) mlockall$auto(0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0xb, 0x6, 0xeb1, 0x3ff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0xd, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f00000000c0), 0x141401, 0x0) clock_adjtime$auto(0xfffffffffffffffb, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x0) socket(0xa, 0x5, 0x0) io_uring_setup$auto(0x6, 0x0) mincore$auto(0x0, 0x1, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x19, 0x0, 0x8) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0x2003f0, 0x15) 533.987827ms ago: executing program 1 (id=856): socket(0x1e, 0x6, 0x80000001) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/rpc/use-gss-proxy\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mprotect$auto(0x0, 0x8000000000000001, 0x8) ioctl$auto(r0, 0x0, r0) sysfs$auto(0x2, 0x5, 0x0) mprotect$auto(0x8d1, 0xe, 0x4) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/vivid.0/cec1/power/control\x00', 0x42802, 0x0) write$auto(r1, 0x0, 0x81) close_range$auto(0x2, 0xa, 0x0) settimeofday$auto(&(0x7f0000000040)={0x9, 0x8}, &(0x7f00000001c0)={0x200, 0x3}) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x440, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/rpc/nfsd.fh/channel\x00', 0x8f3b7a51b8063981, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000280)="205c787482a9558ebf8599782d861859b3169abc49e4d8fcc1d8b2372988cb897d18c4187b7798c18f385a5225afcbfb9971fa97c04bfd9da3f8197a0ec166c89fa1b926ca0d9ef31a2ff0cb6b4f1817fb0e", 0x52) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/tunl0/disable_policy\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x1004, 0x6) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) sendfile$auto(r2, r3, 0x0, 0x800048) r4 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x4611, 0x0) getsockopt$auto_SO_MAX_PACING_RATE(r0, 0x4, 0x2f, &(0x7f00000000c0)='\x00', &(0x7f0000000140)=0x7) mprotect$auto(0x10001, 0x8, 0x8) 390.3789ms ago: executing program 0 (id=857): socket(0x11, 0x80003, 0x300) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) r0 = getpid() r1 = gettid() prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) write$auto(r2, &(0x7f0000000340)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x0e\xfa{\x15\x1d\x11\x85o\xf1g\xb7\xb3\xdd\\\xfdG\xa9\x16R\xa4\xe9\xd1\xf4S\x94\xe1\x9c\x88\x1b\xe6.\x11\xa3\xe1\xddi\xb66\xaa\xa3\xc7iB\xc84\x11\xac\xfd\x1a*\xd4a\xfe\x05\x96\x0ec\x12\xea\xd5K\xea\xda\xa3\xfa\xc3\xedr\x17\xa5\x1c\x88{v\xb8\bj\x84\xd8g\x05r\xe7n\x7f^\x9d\xc7V\x92\xb9Z.Uc*K', 0x81) (async) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, 0x0, 0x420800, 0x0) rt_tgsigqueueinfo$auto(r0, r1, 0x1f, &(0x7f0000000400)={@siginfo_0_0={0x7ff, 0x101, 0x3, @_sigfault={0x0, @_addr_bnd={"f38c6c13db093f74", 0x0, 0x0}}}}) (async) msgctl$auto_IPC_INFO(0x10000, 0x3, &(0x7f0000000100)={{0x2, 0xee01, 0xee01, 0xffe, 0x1, 0x3, 0xe}, &(0x7f0000000080)=0x80, &(0x7f00000000c0)=0x8, 0x3, 0x4, 0x6, 0x3, 0x6, 0x6, 0x4, 0x2, @inferred=r0, @inferred=r0}) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, r3, 0x8) (async) socket(0x18, 0x3, 0x2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async, rerun: 32) symlink$auto(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') (async, rerun: 32) r4 = socket(0x10, 0x2, 0x0) (async) r5 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_NET_SHAPER_CMD_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="09002fbd7000fb0791ec1b000000b79ed037056b0d798ea7f678bdd352c40c2d7e613fe179574206e0f4521c351c6c"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c850) (async, rerun: 64) open(&(0x7f0000000140)='./file0\x00', 0x100880, 0x1c5) (rerun: 64) io_uring_setup$auto(0x6, 0x0) (async, rerun: 64) io_uring_enter$auto(0xffffffffffffffff, 0x7, 0x2, 0x10, 0x0, 0xf2a7214) (rerun: 64) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0xa, 0x0) (async) socket(0x18, 0xa, 0x1) (async) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) 330.841068ms ago: executing program 2 (id=858): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bond0/bonding/arp_validate\x00', 0x2002, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto_proc_timers_operations_base(0xffffffffffffffff, &(0x7f0000000200)=""/8, 0x8) fanotify_init$auto(0x5, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/midiC2D0\x00', 0x123041, 0x0) prctl$auto(0x2, 0x1, 0x0, 0x1, 0x6) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000040), 0x68182, 0x0) bpf$auto(0x0, 0x0, 0xf) madvise$auto(0x1062, 0xd, 0x15) semctl$auto_GETPID(0x9, 0x5, 0xb, 0x4) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) mmap$auto(0x8000000000, 0x810004, 0x1, 0x8000000008011, 0x3, 0xe) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x382, 0x0) sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x8004) socketpair$auto(0x1e, 0x3, 0x8000000000000000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/admmidi2\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x5, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x6, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0xffffffffffffffff, 0x6d3c, 0x3, 0x2, 0x8000000000000002]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r2 = socket(0x15, 0x5, 0x0) setsockopt$auto(r2, 0x114, 0x8, 0x0, 0x4) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_pipe\x00', 0x20c01, 0x0) select$auto(0x10e, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x1, 0xbc3, 0x0, 0x3, 0x1, 0x10001, 0x400000000003, 0x5, 0xffffffffffffffff, 0xfffffffffffffffe, 0x6, 0x9, 0xffffffffffffff81]}, 0x0) 38.870185ms ago: executing program 3 (id=859): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) write$auto(0xffffffffffffffff, &(0x7f00000003c0)='\x8a0\xcdW\xeb\x1b<\xc7.\x97L\xcc\xfaz\x83\xf1y\xf3\\\x86T_\x0f\xa7\xf4\xc1\xa9\x19P\xc7\xe9\xc6\xb8\x10\xbe\xac\n\x9e]>\xb7\"\x12z\xbd\xda\xa3\xa8\xd5W\xd7$]\xd0\xd0\b\xb4\x98\xe5\xdf@\xd4I)z\x88\xea\x00Z\xe6\xbe\'\xd0si\x92\x9f\x03\x8d\xe1\x11\xc92\xaa38\xcf\x8c`j\xad\xbb\xbb~\xd7Ij(~\x9e\x14\xb5n\x87\xda\faw\x04\x80\xcc\b\xcd\xee\xd7\xcc\xf7\xc8\xa9\xf53\v\\\xd6\x86j\x81\x85\x0e.\xef\x92\x9eg\xc0\vF\x81&\xfb\xfc\x9f>/\xcd', 0x2fb) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x3, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x2, 0x73) getsockopt$auto_SO_TIMESTAMPNS_NEW(r0, 0x0, 0x40, 0x0, &(0x7f0000000240)=0x54) socketpair$auto(0x10401e, 0x5, 0xfffffffc, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) writev$auto(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)="71ceab468a51320cbfd3863843adf05a368cf542e3315cf77abfacfbe051c6924f0e97ed6b4f6bd02bbc2b2369f0380b6527ae5ea52bc3b341d5a9348b3468605c29ae915ecbe936f386f55c1b46b0970284e8282456b7c0f004dee0548e17c1032f515bc02d4d286d74a9836dfd6dba6b423dd698cbeb83e63a0a4ef506d6e5815084a2d707bfe8cacbcba3e9c398385a72cb47be4be3324b9bef51cce41dd566279f3a9666a90e85e19c81efe299ffda7677a448c4a3cf40eb6d5e1c3b97bebe163f665328728d4890d235f8f413598e93f052158d2f3821da591506f5", 0x8}, 0x6) write$auto(0x3, 0x0, 0x100085) 0s ago: executing program 1 (id=860): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) unshare$auto(0x8) shmctl$auto_IPC_RMID(0x7, 0x0, &(0x7f0000000400)={{0x8, 0x0, 0xee00, 0x5, 0x7, 0x2, 0x72d3}, 0x382f, 0x8c6, 0x80000001, 0x0, @raw=0xffff, @inferred, 0x9, 0x0, &(0x7f0000000200)="e6b4dcc2e15b09b86ae4151148c21fce0f0eea12b02a98b9c6d5fb5a92e8657dee9a17c13522b3329b9e994795f038b39bcee5aeb823e8b55732e1a041d7363f1b6e0c8631045934bc3e8921bbed7e099758a1cf05a6a37dbb5616429d6a7a506bad39cf6b44c0f2d9fe71b34f910b71f8fa6558974ab46c351aa63806cb696f747dc532fde7dd097531b7a4138e795033fc7bda44c9419fa58a002d746ddfd7b7dba04a6dd3a9d8aad38f16dd72e92e130641912cad1a347c2ac471e7a7eef347a3fca4c219045e118e7ec844fe1cac8ff86f71ac73330d1beed43ab9dfb70f015a8071a8d9acd29909d0cfcefd703f8319868180bbc20a4bf880", &(0x7f0000000300)="d1084d899c853cb505ac303a0fd436dda43058fa684f303b72c6c58eb7696d33bfba99ee39d97c603f31e9f34024ecbd6cebf60a7054887d9e7f0835c91da446cd98d64eb9c973408b306745d79b3991fa450bb82600c07497970cb12c77f91fc240de01ee7ec5dca9cd4f6aaaaf4446336fa398677a08b1103b9118bb4d2afb1b1ad37c5f1e0acc16a85027b20240adec6331b8194ccdbcda2d5451fe07494314503adafc5b86e516a3084179e3ee49858224e85fc3705dd8bd178b1094e21d445c"}) lstat$auto(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x7, 0x100000001, 0x3, 0x6b, 0xffffffffffffffff, 0x0, 0x0, 0xf6a, 0x6, 0x5, 0xc685, 0xffffffffffff0458, 0xc, 0x4, 0x3, 0xfffffffffffffff2, 0x400}) r1 = getpid() prctl$auto(0x3e, 0x1, r1, 0x1, 0x0) write$auto(r0, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x2, 0xffffffffffff0001, 0x15) r2 = prctl$auto(0x1000000003b, 0xffffffffffffffff, 0x4, 0x5, 0x4004) clone3$auto(&(0x7f0000000000)={0x5, 0xd3d, 0xf, 0x10200000, 0x7, 0x200, 0x50, 0x5, 0x401, 0xb, 0xd}, 0x5) mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x2a, 0x2, 0x1) connect$auto(r3, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x3, 0xfffffffe}, 0x52) r4 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(r4, 0x4048aec9, r5) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r7 = socket(0x18, 0x5, 0x1) connect$auto(r7, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) finit_module$auto(r2, 0x0, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x19) syz_clone(0x101000, &(0x7f0000000000)="3d2cc6c35684ebb31687b8b97b9471553a1714ea830570fac71d9cf30f89837d6b0753fedcb059e3c3e82e2a0183b5c9f8bd17de5fda38d5fef8b6d43c19fbf88fa9917a40df48abe1f205bb75863fbd20d8b9b776bfff1d8f19108d08ff829b5378906abcd54d85572176f77a1f2aca914e8f07503a7a4ef162da02918d82b970bc695d54022d7f0bfe37a79e9a1dfb8d91d20d7f907f6957f0b96dd5780b", 0x9f, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="b37c703970fe065360f75625240ca327abecef582e0395042947fccdcfe2a5f6d026e14eb948cc88c80b6623a5747e5e9cbb7ce79a75e598c748a4cf0889dd46764888d6929f01c1c189c85f0b0ad2d9c7a1d459ee1c11144411a7e7d0136aea6eb365c0530767e9f1399541c5b0ee884768605b823194345f462f0a958d619a0719ad6aed525b288f4d3e58d866a7308296ac") kernel console output (not intermixed with test programs): 89.900553][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.924325][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.931512][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.798475][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.955605][ T5629] veth0_vlan: entered promiscuous mode [ 90.998168][ T5629] veth1_vlan: entered promiscuous mode [ 91.022738][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.106141][ T5629] veth0_macvtap: entered promiscuous mode [ 91.132769][ T5629] veth1_macvtap: entered promiscuous mode [ 91.171971][ T5631] veth0_vlan: entered promiscuous mode [ 91.189577][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.212797][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.246132][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.261481][ T5631] veth1_vlan: entered promiscuous mode [ 91.290982][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.301736][ T142] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.310908][ T4947] Bluetooth: hci0: command tx timeout [ 91.310944][ T4947] Bluetooth: hci3: command tx timeout [ 91.317256][ T5645] Bluetooth: hci2: command tx timeout [ 91.327505][ T4947] Bluetooth: hci1: command tx timeout [ 91.334938][ T1104] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.354195][ T1104] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.363464][ T1104] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.471423][ T5631] veth0_macvtap: entered promiscuous mode [ 91.480576][ T5628] veth0_vlan: entered promiscuous mode [ 91.489940][ T5631] veth1_macvtap: entered promiscuous mode [ 91.550942][ T5628] veth1_vlan: entered promiscuous mode [ 91.569672][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.578682][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.617943][ T5630] veth0_vlan: entered promiscuous mode [ 91.632925][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.665263][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.689948][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.699126][ T5630] veth1_vlan: entered promiscuous mode [ 91.700165][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.716456][ T142] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.735486][ T142] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.744889][ T142] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.763496][ T142] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.792332][ T10] cfg80211: failed to load regulatory.db [ 91.814431][ T5628] veth0_macvtap: entered promiscuous mode [ 91.853440][ T5628] veth1_macvtap: entered promiscuous mode [ 91.879871][ T5629] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.017092][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.036817][ T5630] veth0_macvtap: entered promiscuous mode [ 92.077827][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.088684][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.090767][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.116967][ T5630] veth1_macvtap: entered promiscuous mode [ 92.157351][ T1128] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.187143][ T1128] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.211104][ T1128] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.231832][ T1128] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.266033][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.274811][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.294004][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.363925][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.435556][ T1128] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.455644][ T1128] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.535660][ T1128] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.550682][ T1128] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.630183][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.669391][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.825262][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.864440][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.953858][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.989982][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.246771][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.285504][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.384893][ T4947] Bluetooth: hci1: command tx timeout [ 93.384921][ T5645] Bluetooth: hci2: command tx timeout [ 93.390362][ T50] Bluetooth: hci3: command tx timeout [ 93.395839][ T5636] Bluetooth: hci0: command tx timeout [ 93.720453][ T5800] FAULT_INJECTION: forcing a failure. [ 93.720453][ T5800] name failslab, interval 1, probability 0, space 0, times 1 [ 93.771468][ T5800] CPU: 0 UID: 0 PID: 5800 Comm: syz.1.5 Not tainted syzkaller #0 PREEMPT(full) [ 93.771506][ T5800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 93.771531][ T5800] Call Trace: [ 93.771541][ T5800] [ 93.771552][ T5800] dump_stack_lvl+0x100/0x190 [ 93.771592][ T5800] should_fail_ex.cold+0x5/0xa [ 93.771631][ T5800] should_failslab+0xc2/0x120 [ 93.771674][ T5800] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 93.771722][ T5800] ? do_getname_kernel+0x5d/0x250 [ 93.771771][ T5800] do_getname_kernel+0x5d/0x250 [ 93.771827][ T5800] do_file_open_root+0x1a4/0x5a0 [ 93.771869][ T5800] ? __pfx_do_file_open_root+0x10/0x10 [ 93.771906][ T5800] ? __pfx_widen_string+0x10/0x10 [ 93.771966][ T5800] ? __lock_acquire+0x4a5/0x2630 [ 93.771995][ T5800] ? vsnprintf+0x4ee/0x1240 [ 93.772044][ T5800] file_open_root+0x19b/0x3b0 [ 93.772081][ T5800] ? __pfx_file_open_root+0x10/0x10 [ 93.772115][ T5800] ? find_held_lock+0x2b/0x80 [ 93.772153][ T5800] ? kernel_read_file_from_path_initns+0x17a/0x260 [ 93.772182][ T5800] ? kernel_read_file_from_path_initns+0x17a/0x260 [ 93.772214][ T5800] kernel_read_file_from_path_initns+0x189/0x260 [ 93.772249][ T5800] ? __pfx_kernel_read_file_from_path_initns+0x10/0x10 [ 93.772289][ T5800] _request_firmware+0x733/0x13c0 [ 93.772328][ T5800] ? kfree+0x223/0x6c0 [ 93.772368][ T5800] ? __pfx__request_firmware+0x10/0x10 [ 93.772401][ T5800] ? _request_firmware+0x274/0x13c0 [ 93.772433][ T5800] request_firmware+0x35/0x50 [ 93.772463][ T5800] valid_regdb+0x184/0x590 [ 93.772502][ T5800] ? __pfx_valid_regdb+0x10/0x10 [ 93.772547][ T5800] reg_reload_regdb+0x11a/0x460 [ 93.772592][ T5800] ? __pfx_reg_reload_regdb+0x10/0x10 [ 93.772635][ T5800] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 93.772672][ T5800] ? nl80211_pre_doit+0x19a/0xae0 [ 93.772707][ T5800] genl_family_rcv_msg_doit+0x214/0x300 [ 93.772742][ T5800] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 93.772773][ T5800] ? genl_get_cmd+0x3e7/0x760 [ 93.772851][ T5800] ? bpf_lsm_capable+0x9/0x10 [ 93.772886][ T5800] ? security_capable+0x80/0x260 [ 93.772942][ T5800] genl_rcv_msg+0x560/0x800 [ 93.772978][ T5800] ? __pfx_genl_rcv_msg+0x10/0x10 [ 93.773010][ T5800] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 93.773041][ T5800] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 93.773082][ T5800] ? __pfx_nl80211_post_doit+0x10/0x10 [ 93.773128][ T5800] netlink_rcv_skb+0x159/0x420 [ 93.773175][ T5800] ? __pfx_genl_rcv_msg+0x10/0x10 [ 93.773227][ T5800] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 93.773294][ T5800] ? netlink_deliver_tap+0x1ae/0xcc0 [ 93.773349][ T5800] genl_rcv+0x28/0x40 [ 93.773377][ T5800] netlink_unicast+0x585/0x850 [ 93.773433][ T5800] ? __pfx_netlink_unicast+0x10/0x10 [ 93.773495][ T5800] netlink_sendmsg+0x8b0/0xda0 [ 93.773553][ T5800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.773602][ T5800] ? __import_iovec+0x1d2/0x640 [ 93.773653][ T5800] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 93.773739][ T5800] ____sys_sendmsg+0x9e1/0xb70 [ 93.773790][ T5800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.773846][ T5800] ? __pfx_____sys_sendmsg+0x10/0x10 [ 93.773906][ T5800] ? __pfx_futex_wake_mark+0x10/0x10 [ 93.773961][ T5800] ___sys_sendmsg+0x190/0x1e0 [ 93.774017][ T5800] ? __pfx____sys_sendmsg+0x10/0x10 [ 93.774120][ T5800] __sys_sendmsg+0x170/0x220 [ 93.774164][ T5800] ? __pfx___sys_sendmsg+0x10/0x10 [ 93.774204][ T5800] ? __x64_sys_futex+0x34f/0x4d0 [ 93.774258][ T5800] ? rcu_is_watching+0x12/0xc0 [ 93.774304][ T5800] do_syscall_64+0x10b/0xf80 [ 93.774356][ T5800] ? clear_bhb_loop+0x40/0x90 [ 93.774409][ T5800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.774442][ T5800] RIP: 0033:0x7f561b59ce59 [ 93.774469][ T5800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.774500][ T5800] RSP: 002b:00007f561c396028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.774541][ T5800] RAX: ffffffffffffffda RBX: 00007f561b815fa0 RCX: 00007f561b59ce59 [ 93.774562][ T5800] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000006 [ 93.774581][ T5800] RBP: 00007f561b632d6f R08: 0000000000000000 R09: 0000000000000000 [ 93.774600][ T5800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.774618][ T5800] R13: 00007f561b816038 R14: 00007f561b815fa0 R15: 00007ffeb97e51d8 [ 93.774666][ T5800] [ 94.410722][ T5800] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db.p7s failed with error -12 [ 94.787545][ T5800] syz.1.5 (5800) used greatest stack depth: 18344 bytes left [ 95.089038][ T50] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 95.096869][ T50] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 95.673563][ T5819] Process accounting resumed [ 96.898907][ T5827] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.278883][ T12] netdevsim netdevsim13 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.292155][ T5844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11'. [ 98.427991][ T5844] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 98.428053][ T5844] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 99.351825][ T5855] NFSD: Failed to start, no listeners configured. [ 99.377919][ T5861] process 'syz.0.14' launched './file0' with NULL argv: empty string added [ 103.465275][ T5908] Zero length message leads to an empty skb [ 103.505712][ T5861] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 104.128885][ T5917] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 104.412666][ T5924] input: f¬ as /devices/virtual/input/input5 [ 104.667357][ T5897] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 106.781880][ T5962] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 109.473351][ T5983] capability: warning: `syz.3.36' uses 32-bit capabilities (legacy support in use) [ 109.620815][ T5989] FAULT_INJECTION: forcing a failure. [ 109.620815][ T5989] name failslab, interval 1, probability 0, space 0, times 0 [ 109.644376][ T5989] CPU: 0 UID: 0 PID: 5989 Comm: syz.2.38 Not tainted syzkaller #0 PREEMPT(full) [ 109.644419][ T5989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 109.644437][ T5989] Call Trace: [ 109.644448][ T5989] [ 109.644460][ T5989] dump_stack_lvl+0x100/0x190 [ 109.644499][ T5989] should_fail_ex.cold+0x5/0xa [ 109.644539][ T5989] should_failslab+0xc2/0x120 [ 109.644576][ T5989] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 109.644623][ T5989] ? __proc_create+0x2cb/0x8c0 [ 109.644670][ T5989] __proc_create+0x2cb/0x8c0 [ 109.644711][ T5989] ? __pfx___proc_create+0x10/0x10 [ 109.644752][ T5989] ? lockdep_hardirqs_on+0x78/0x100 [ 109.644804][ T5989] ? __mod_timer+0x40e/0xca0 [ 109.644838][ T5989] _proc_mkdir+0xb9/0x210 [ 109.644879][ T5989] ? __pfx__proc_mkdir+0x10/0x10 [ 109.644922][ T5989] ? round_jiffies+0x10a/0x160 [ 109.644974][ T5989] can_init_proc+0x5b/0x4b0 [ 109.645026][ T5989] can_pernet_init+0x1e4/0x370 [ 109.645073][ T5989] ? __pfx_can_pernet_init+0x10/0x10 [ 109.645124][ T5989] ops_init+0x1e2/0x5f0 [ 109.645169][ T5989] setup_net+0x118/0x3a0 [ 109.645209][ T5989] ? __pfx_setup_net+0x10/0x10 [ 109.645248][ T5989] ? mutex_init_lockdep+0xf1/0x120 [ 109.645288][ T5989] copy_net_ns+0x46f/0x7c0 [ 109.645334][ T5989] create_new_namespaces+0x3ea/0xac0 [ 109.645384][ T5989] unshare_nsproxy_namespaces+0xf2/0x220 [ 109.645430][ T5989] ksys_unshare+0x438/0xab0 [ 109.645500][ T5989] ? __pfx_ksys_unshare+0x10/0x10 [ 109.645549][ T5989] ? xfd_validate_state+0x129/0x190 [ 109.645600][ T5989] __x64_sys_unshare+0x31/0x40 [ 109.645651][ T5989] do_syscall_64+0x10b/0xf80 [ 109.645704][ T5989] ? clear_bhb_loop+0x40/0x90 [ 109.645746][ T5989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.645781][ T5989] RIP: 0033:0x7f974259ce59 [ 109.645807][ T5989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.645838][ T5989] RSP: 002b:00007f97407f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 109.645870][ T5989] RAX: ffffffffffffffda RBX: 00007f9742815fa0 RCX: 00007f974259ce59 [ 109.645892][ T5989] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 109.645911][ T5989] RBP: 00007f9742632d6f R08: 0000000000000000 R09: 0000000000000000 [ 109.645928][ T5989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.645944][ T5989] R13: 00007f9742816038 R14: 00007f9742815fa0 R15: 00007ffccf4d9548 [ 109.645980][ T5989] [ 109.650034][ T5989] can: failed to create /proc/net/can . CONFIG_PROC_FS missing? [ 109.932361][ T5996] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input6 [ 111.616069][ T6019] mmap: syz.3.39 (6019) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 111.982675][ T6023] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5628] was attempted by "¦ÅI=ßå£_‰âJÄËÜÂÌ\x1b?ˆÞk*$1àXØB®Â.ƒ>æ×€FHÌP›@Üî?X¡ê\x0b´.r+NÀ*ýcC…¸¬¦„Ž>pTn 1KÜ2F(´iÐÎÖúôL˜P)RT®¦Ãat£Å§lÿqèá Ì…ƒ¼Ò;V·\x1b™ÚpP¦P~!+½±ªó*÷kT@gçxÒ¼ËRÈÚpµ¼ÖŸ$ŽåR©ªØ·Ì\x0aG·]Éè®”ƒ„’‰\x1buo‰Þ6D½MÔñ§œöhJGHý1»Pd÷ó‹M’æÔ'£Ph†Á¸òN§N¥ýgôÇÿñli–Å–¬«Ö¾ÊªÓD´#õ\x09ÿ!îõϺé@oëb^GPçkNŸ_<ç¹\x5c2¸àbrmnF/~ø ¤ð³x_+ÚÔ­/é<…ŽçEŸßÃ\x5cJÌàÂÓ\x0a°ìt/Ê´õ\x0c«oõæDì'ù’c@µAÐz„CüÙ\x0cë§Ècáj²ÃêÒ!LÞ)6vÛ[ÂѶ:åºVÓ(î`ÈÛƒZt'xŸ¶šœZýP)ýÝͱµÕ¯ØÑꕱàqP•°ÿ\x0c¡çÃåæaáÔ’<Þuµ$à{ú\x1búß^wtš*×YÝ;»iƯ\x07K©\x5c\x5cë!w\x0cCS râ™­óSgë¸B?‚'äœ)•\x0c¸Ü¨ŽŽÒ‰îi%a®¿ø$(!Š(ÞO…Þ´£Pô.vDz‘qs›4À6™\x22]ù€ ×”˜¨1Yàî[+zˆí—¢n ·\x09lH†ìWb¥˜¼¬EY+ÝÇ…Q3P³8¢·!ËNº`#‡¶)½@\x0dçÍ\x0aÜ\x09R¨°× +uÖ©ÉŽ¿«Oã!nËŸ;áîúoSÅä’\x0b$åÃnHÛ°3…òà ÑöœgYA[ Çt¸P%•w—‰m´È³qœÃúµ/#¥…Áh~¼Ž•zöuÃ;vfSK¢~ÌôÝåzïû—£s÷”DCIÈ®‰èÛv¦P¯*\x1b¡“aºä5Ò%ÈëÈ´zHÕBì<Îk\x09ç ò\x0aÙ_‚~÷¯¹úÔLü€mWbM¶§&b\x5cÍø¾0X¸šëÕêEØó{Ž´¢S_RæÕòëmà?­«æí\x1b)¬e†ãᬢXºj±TfûH š# ¨ˆ¤ð¬ËQˆÉU [ 112.558462][ T6016] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 114.300681][ T6041] netlink: 'syz.0.45': attribute type 7 has an invalid length. [ 114.812164][ T6032] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 115.019370][ T6046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.48'. [ 115.038033][ T6046] netlink: 13 bytes leftover after parsing attributes in process `syz.1.48'. [ 115.213468][ T6046] ovs_ÿþÿþ?: entered promiscuous mode [ 115.577099][ T6058] random: crng reseeded on system resumption [ 116.426750][ T6068] netlink: 'syz.2.54': attribute type 11 has an invalid length. [ 117.533634][ T6061] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 118.261607][ T6088] FAULT_INJECTION: forcing a failure. [ 118.261607][ T6088] name failslab, interval 1, probability 0, space 0, times 0 [ 118.341900][ T6088] CPU: 1 UID: 0 PID: 6088 Comm: syz.1.59 Not tainted syzkaller #0 PREEMPT(full) [ 118.341943][ T6088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 118.341962][ T6088] Call Trace: [ 118.341973][ T6088] [ 118.341985][ T6088] dump_stack_lvl+0x100/0x190 [ 118.342028][ T6088] should_fail_ex.cold+0x5/0xa [ 118.342071][ T6088] should_failslab+0xc2/0x120 [ 118.342112][ T6088] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 118.342166][ T6088] ? __proc_create+0x2cb/0x8c0 [ 118.342219][ T6088] __proc_create+0x2cb/0x8c0 [ 118.342265][ T6088] ? __pfx___proc_create+0x10/0x10 [ 118.342307][ T6088] ? __lock_acquire+0x4a5/0x2630 [ 118.342340][ T6088] ? proc_register+0x559/0x8a0 [ 118.342396][ T6088] proc_create_reg+0x75/0x170 [ 118.342457][ T6088] proc_create_data+0x86/0x110 [ 118.342505][ T6088] ? __pfx_proc_create_data+0x10/0x10 [ 118.342551][ T6088] ? net_generic+0xea/0x2a0 [ 118.342609][ T6088] gss_svc_init_net+0x233/0x640 [ 118.342660][ T6088] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 118.342697][ T6088] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 118.342730][ T6088] ops_init+0x1e2/0x5f0 [ 118.342778][ T6088] setup_net+0x118/0x3a0 [ 118.342834][ T6088] ? __pfx_setup_net+0x10/0x10 [ 118.342878][ T6088] ? mutex_init_lockdep+0xf1/0x120 [ 118.342920][ T6088] copy_net_ns+0x46f/0x7c0 [ 118.342972][ T6088] create_new_namespaces+0x3ea/0xac0 [ 118.343029][ T6088] unshare_nsproxy_namespaces+0xf2/0x220 [ 118.343080][ T6088] ksys_unshare+0x438/0xab0 [ 118.343135][ T6088] ? __pfx_ksys_unshare+0x10/0x10 [ 118.343189][ T6088] ? xfd_validate_state+0x129/0x190 [ 118.343240][ T6088] __x64_sys_unshare+0x31/0x40 [ 118.343292][ T6088] do_syscall_64+0x10b/0xf80 [ 118.343341][ T6088] ? clear_bhb_loop+0x40/0x90 [ 118.343378][ T6088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.343407][ T6088] RIP: 0033:0x7f561b59ce59 [ 118.343430][ T6088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.343481][ T6088] RSP: 002b:00007f561c396028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 118.343509][ T6088] RAX: ffffffffffffffda RBX: 00007f561b815fa0 RCX: 00007f561b59ce59 [ 118.343528][ T6088] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 118.343546][ T6088] RBP: 00007f561b632d6f R08: 0000000000000000 R09: 0000000000000000 [ 118.343563][ T6088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.343580][ T6088] R13: 00007f561b816038 R14: 00007f561b815fa0 R15: 00007ffeb97e51d8 [ 118.343619][ T6088] [ 118.874232][ T6080] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 120.040063][ T6105] FAULT_INJECTION: forcing a failure. [ 120.040063][ T6105] name failslab, interval 1, probability 0, space 0, times 0 [ 120.057724][ T6081] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 120.122442][ T6105] CPU: 0 UID: 0 PID: 6105 Comm: syz.0.62 Not tainted syzkaller #0 PREEMPT(full) [ 120.122475][ T6105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 120.122489][ T6105] Call Trace: [ 120.122497][ T6105] [ 120.122505][ T6105] dump_stack_lvl+0x100/0x190 [ 120.122535][ T6105] should_fail_ex.cold+0x5/0xa [ 120.122566][ T6105] should_failslab+0xc2/0x120 [ 120.122594][ T6105] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 120.122635][ T6105] ? __proc_create+0x2cb/0x8c0 [ 120.122672][ T6105] __proc_create+0x2cb/0x8c0 [ 120.122704][ T6105] ? __pfx___proc_create+0x10/0x10 [ 120.122733][ T6105] ? __lock_acquire+0x4a5/0x2630 [ 120.122756][ T6105] ? proc_register+0x559/0x8a0 [ 120.122794][ T6105] proc_create_reg+0x75/0x170 [ 120.122832][ T6105] proc_create_data+0x86/0x110 [ 120.122904][ T6105] ? __pfx_proc_create_data+0x10/0x10 [ 120.122954][ T6105] ? net_generic+0xea/0x2a0 [ 120.122997][ T6105] gss_svc_init_net+0x233/0x640 [ 120.123034][ T6105] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 120.123059][ T6105] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 120.123082][ T6105] ops_init+0x1e2/0x5f0 [ 120.123116][ T6105] setup_net+0x118/0x3a0 [ 120.123146][ T6105] ? __pfx_setup_net+0x10/0x10 [ 120.123177][ T6105] ? mutex_init_lockdep+0xf1/0x120 [ 120.123206][ T6105] copy_net_ns+0x46f/0x7c0 [ 120.123242][ T6105] create_new_namespaces+0x3ea/0xac0 [ 120.123280][ T6105] unshare_nsproxy_namespaces+0xf2/0x220 [ 120.123314][ T6105] ksys_unshare+0x438/0xab0 [ 120.123357][ T6105] ? __pfx_ksys_unshare+0x10/0x10 [ 120.123392][ T6105] ? xfd_validate_state+0x129/0x190 [ 120.123427][ T6105] __x64_sys_unshare+0x31/0x40 [ 120.123462][ T6105] do_syscall_64+0x10b/0xf80 [ 120.123500][ T6105] ? clear_bhb_loop+0x40/0x90 [ 120.123528][ T6105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.123552][ T6105] RIP: 0033:0x7fb11919ce59 [ 120.123572][ T6105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.123595][ T6105] RSP: 002b:00007fb11a05d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 120.123619][ T6105] RAX: ffffffffffffffda RBX: 00007fb119415fa0 RCX: 00007fb11919ce59 [ 120.123634][ T6105] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 120.123648][ T6105] RBP: 00007fb119232d6f R08: 0000000000000000 R09: 0000000000000000 [ 120.123662][ T6105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.123676][ T6105] R13: 00007fb119416038 R14: 00007fb119415fa0 R15: 00007ffcf29f5cc8 [ 120.123706][ T6105] [ 120.530039][ T6108] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input7 [ 120.540647][ T30] audit: type=1800 audit(1779438893.767:2): pid=6106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.63" name="file0" dev="tmpfs" ino=111 res=0 errno=0 [ 120.979181][ T6113] FAULT_INJECTION: forcing a failure. [ 120.979181][ T6113] name failslab, interval 1, probability 0, space 0, times 0 [ 121.037337][ T6113] CPU: 0 UID: 0 PID: 6113 Comm: syz.2.65 Not tainted syzkaller #0 PREEMPT(full) [ 121.037369][ T6113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 121.037383][ T6113] Call Trace: [ 121.037391][ T6113] [ 121.037399][ T6113] dump_stack_lvl+0x100/0x190 [ 121.037430][ T6113] should_fail_ex.cold+0x5/0xa [ 121.037460][ T6113] should_failslab+0xc2/0x120 [ 121.037489][ T6113] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 121.037527][ T6113] ? __proc_create+0x2cb/0x8c0 [ 121.037564][ T6113] __proc_create+0x2cb/0x8c0 [ 121.037602][ T6113] ? __pfx___proc_create+0x10/0x10 [ 121.037637][ T6113] ? _raw_write_unlock+0x28/0x50 [ 121.037672][ T6113] ? proc_register+0x559/0x8a0 [ 121.037707][ T6113] proc_create_reg+0x75/0x170 [ 121.037740][ T6113] ? __pfx_can_rcvlist_proc_show+0x10/0x10 [ 121.037780][ T6113] proc_create_net_single+0x86/0x180 [ 121.037814][ T6113] ? __pfx_proc_create_net_single+0x10/0x10 [ 121.037849][ T6113] ? round_jiffies+0x10a/0x160 [ 121.037891][ T6113] can_init_proc+0x2b3/0x4b0 [ 121.037930][ T6113] can_pernet_init+0x1e4/0x370 [ 121.037966][ T6113] ? __pfx_can_pernet_init+0x10/0x10 [ 121.038001][ T6113] ops_init+0x1e2/0x5f0 [ 121.038034][ T6113] setup_net+0x118/0x3a0 [ 121.038064][ T6113] ? __pfx_setup_net+0x10/0x10 [ 121.038094][ T6113] ? mutex_init_lockdep+0xf1/0x120 [ 121.038125][ T6113] copy_net_ns+0x46f/0x7c0 [ 121.038160][ T6113] create_new_namespaces+0x3ea/0xac0 [ 121.038205][ T6113] unshare_nsproxy_namespaces+0xf2/0x220 [ 121.038240][ T6113] ksys_unshare+0x438/0xab0 [ 121.038279][ T6113] ? __pfx_ksys_unshare+0x10/0x10 [ 121.038326][ T6113] __x64_sys_unshare+0x31/0x40 [ 121.038362][ T6113] do_syscall_64+0x10b/0xf80 [ 121.038398][ T6113] ? clear_bhb_loop+0x40/0x90 [ 121.038432][ T6113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.038456][ T6113] RIP: 0033:0x7f974259ce59 [ 121.038475][ T6113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.038497][ T6113] RSP: 002b:00007f97407f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 121.038520][ T6113] RAX: ffffffffffffffda RBX: 00007f9742815fa0 RCX: 00007f974259ce59 [ 121.038536][ T6113] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 121.038550][ T6113] RBP: 00007f9742632d6f R08: 0000000000000000 R09: 0000000000000000 [ 121.038564][ T6113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.038584][ T6113] R13: 00007f9742816038 R14: 00007f9742815fa0 R15: 00007ffccf4d9548 [ 121.038614][ T6113] [ 122.144193][ T6128] netlink: 29 bytes leftover after parsing attributes in process `syz.3.64'. [ 122.571772][ T6134] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 122.841562][ T6130] syz.0.66 uses obsolete (PF_INET,SOCK_PACKET) [ 123.764627][ T6152] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input9 [ 124.606245][ T6162] FAULT_INJECTION: forcing a failure. [ 124.606245][ T6162] name failslab, interval 1, probability 0, space 0, times 0 [ 124.613633][ T6170] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input10 [ 124.687934][ T6162] CPU: 1 UID: 0 PID: 6162 Comm: syz.1.73 Not tainted syzkaller #0 PREEMPT(full) [ 124.687976][ T6162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 124.687996][ T6162] Call Trace: [ 124.688006][ T6162] [ 124.688020][ T6162] dump_stack_lvl+0x100/0x190 [ 124.688062][ T6162] should_fail_ex.cold+0x5/0xa [ 124.688104][ T6162] should_failslab+0xc2/0x120 [ 124.688146][ T6162] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 124.688200][ T6162] ? __proc_create+0x2cb/0x8c0 [ 124.688253][ T6162] __proc_create+0x2cb/0x8c0 [ 124.688299][ T6162] ? __pfx___proc_create+0x10/0x10 [ 124.688351][ T6162] ? _raw_write_unlock+0x28/0x50 [ 124.688417][ T6162] proc_create_reg+0x75/0x170 [ 124.688477][ T6162] proc_create_data+0x86/0x110 [ 124.688539][ T6162] ? __pfx_proc_create_data+0x10/0x10 [ 124.688593][ T6162] ? cache_register_net+0x137/0x5e0 [ 124.688630][ T6162] ? cache_register_net+0x137/0x5e0 [ 124.688675][ T6162] cache_register_net+0x1e0/0x5e0 [ 124.688715][ T6162] gss_svc_init_net+0x98/0x640 [ 124.688766][ T6162] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 124.688803][ T6162] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 124.688835][ T6162] ops_init+0x1e2/0x5f0 [ 124.688883][ T6162] setup_net+0x118/0x3a0 [ 124.688926][ T6162] ? __pfx_setup_net+0x10/0x10 [ 124.688969][ T6162] ? mutex_init_lockdep+0xf1/0x120 [ 124.689016][ T6162] copy_net_ns+0x46f/0x7c0 [ 124.689068][ T6162] create_new_namespaces+0x3ea/0xac0 [ 124.689123][ T6162] unshare_nsproxy_namespaces+0xf2/0x220 [ 124.689174][ T6162] ksys_unshare+0x438/0xab0 [ 124.689227][ T6162] ? __pfx_ksys_unshare+0x10/0x10 [ 124.689276][ T6162] ? xfd_validate_state+0x129/0x190 [ 124.689333][ T6162] __x64_sys_unshare+0x31/0x40 [ 124.689391][ T6162] do_syscall_64+0x10b/0xf80 [ 124.689442][ T6162] ? clear_bhb_loop+0x40/0x90 [ 124.689484][ T6162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.689517][ T6162] RIP: 0033:0x7f561b59ce59 [ 124.689543][ T6162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.689576][ T6162] RSP: 002b:00007f561c396028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 124.689607][ T6162] RAX: ffffffffffffffda RBX: 00007f561b815fa0 RCX: 00007f561b59ce59 [ 124.689629][ T6162] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 124.689650][ T6162] RBP: 00007f561b632d6f R08: 0000000000000000 R09: 0000000000000000 [ 124.689670][ T6162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.689689][ T6162] R13: 00007f561b816038 R14: 00007f561b815fa0 R15: 00007ffeb97e51d8 [ 124.689733][ T6162] [ 126.368003][ T6161] Process accounting paused [ 127.072409][ T6190] FAULT_INJECTION: forcing a failure. [ 127.072409][ T6190] name failslab, interval 1, probability 0, space 0, times 0 [ 127.157294][ T6190] CPU: 1 UID: 0 PID: 6190 Comm: syz.2.78 Not tainted syzkaller #0 PREEMPT(full) [ 127.157349][ T6190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 127.157368][ T6190] Call Trace: [ 127.157378][ T6190] [ 127.157390][ T6190] dump_stack_lvl+0x100/0x190 [ 127.157431][ T6190] should_fail_ex.cold+0x5/0xa [ 127.157461][ T6190] should_failslab+0xc2/0x120 [ 127.157488][ T6190] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 127.157526][ T6190] ? __proc_create+0x2cb/0x8c0 [ 127.157562][ T6190] __proc_create+0x2cb/0x8c0 [ 127.157592][ T6190] ? __pfx___proc_create+0x10/0x10 [ 127.157628][ T6190] ? mark_held_locks+0x40/0x70 [ 127.157652][ T6190] _proc_mkdir+0xb9/0x210 [ 127.157683][ T6190] ? __pfx__proc_mkdir+0x10/0x10 [ 127.157711][ T6190] ? sctp_defaults_init+0x720/0xd90 [ 127.157766][ T6190] sctp_proc_init+0x59/0x270 [ 127.157793][ T6190] ? __pfx_sctp_defaults_init+0x10/0x10 [ 127.157819][ T6190] sctp_defaults_init+0x758/0xd90 [ 127.157849][ T6190] ? __pfx_sctp_defaults_init+0x10/0x10 [ 127.157877][ T6190] ops_init+0x1e2/0x5f0 [ 127.157910][ T6190] setup_net+0x118/0x3a0 [ 127.157941][ T6190] ? __pfx_setup_net+0x10/0x10 [ 127.157977][ T6190] ? mutex_init_lockdep+0xf1/0x120 [ 127.158008][ T6190] copy_net_ns+0x46f/0x7c0 [ 127.158043][ T6190] create_new_namespaces+0x3ea/0xac0 [ 127.158081][ T6190] unshare_nsproxy_namespaces+0xf2/0x220 [ 127.158116][ T6190] ksys_unshare+0x438/0xab0 [ 127.158154][ T6190] ? __pfx_ksys_unshare+0x10/0x10 [ 127.158221][ T6190] ? xfd_validate_state+0x129/0x190 [ 127.158270][ T6190] __x64_sys_unshare+0x31/0x40 [ 127.158317][ T6190] do_syscall_64+0x10b/0xf80 [ 127.158355][ T6190] ? clear_bhb_loop+0x40/0x90 [ 127.158384][ T6190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.158408][ T6190] RIP: 0033:0x7f974259ce59 [ 127.158427][ T6190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.158449][ T6190] RSP: 002b:00007f97407f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 127.158471][ T6190] RAX: ffffffffffffffda RBX: 00007f9742815fa0 RCX: 00007f974259ce59 [ 127.158487][ T6190] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 127.158501][ T6190] RBP: 00007f9742632d6f R08: 0000000000000000 R09: 0000000000000000 [ 127.158515][ T6190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.158529][ T6190] R13: 00007f9742816038 R14: 00007f9742815fa0 R15: 00007ffccf4d9548 [ 127.158558][ T6190] [ 127.656095][ T6188] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 129.626042][ T6212] FAULT_INJECTION: forcing a failure. [ 129.626042][ T6212] name failslab, interval 1, probability 0, space 0, times 0 [ 129.694754][ T6203] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 129.706668][ T6212] CPU: 0 UID: 0 PID: 6212 Comm: syz.2.82 Not tainted syzkaller #0 PREEMPT(full) [ 129.706712][ T6212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 129.706733][ T6212] Call Trace: [ 129.706747][ T6212] [ 129.706760][ T6212] dump_stack_lvl+0x100/0x190 [ 129.706803][ T6212] should_fail_ex.cold+0x5/0xa [ 129.706852][ T6212] should_failslab+0xc2/0x120 [ 129.706893][ T6212] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 129.706969][ T6212] ? sock_alloc_inode+0x26/0x290 [ 129.707024][ T6212] ? __pfx_sock_alloc_inode+0x10/0x10 [ 129.707072][ T6212] sock_alloc_inode+0x26/0x290 [ 129.707122][ T6212] ? __pfx_sock_alloc_inode+0x10/0x10 [ 129.707196][ T6212] alloc_inode+0x68/0x250 [ 129.707255][ T6212] sock_alloc+0x44/0x280 [ 129.707299][ T6212] ? security_socket_create+0x7f/0x250 [ 129.707358][ T6212] __sock_create+0xc2/0x860 [ 129.707421][ T6212] __sys_socket+0x14d/0x260 [ 129.707480][ T6212] ? __pfx___sys_socket+0x10/0x10 [ 129.707541][ T6212] ? ksys_write+0x1ac/0x250 [ 129.707590][ T6212] __x64_sys_socket+0x72/0xb0 [ 129.707619][ T6212] ? lockdep_hardirqs_on+0x78/0x100 [ 129.707670][ T6212] do_syscall_64+0x10b/0xf80 [ 129.707721][ T6212] ? clear_bhb_loop+0x40/0x90 [ 129.707763][ T6212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.707799][ T6212] RIP: 0033:0x7f974259e6c7 [ 129.707830][ T6212] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.707862][ T6212] RSP: 002b:00007f97407f4f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 129.707895][ T6212] RAX: ffffffffffffffda RBX: 00007f9742815fa0 RCX: 00007f974259e6c7 [ 129.707920][ T6212] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 129.707939][ T6212] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 129.707959][ T6212] R10: 0000200000000140 R11: 0000000000000286 R12: 0000000000000000 [ 129.707983][ T6212] R13: 00007f9742816038 R14: 00007f9742815fa0 R15: 00007ffccf4d9548 [ 129.708026][ T6212] [ 129.713221][ T6212] socket: no more sockets [ 130.367608][ T6215] FAULT_INJECTION: forcing a failure. [ 130.367608][ T6215] name failslab, interval 1, probability 0, space 0, times 0 [ 130.398639][ T6215] CPU: 0 UID: 0 PID: 6215 Comm: syz.3.84 Not tainted syzkaller #0 PREEMPT(full) [ 130.398672][ T6215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 130.398687][ T6215] Call Trace: [ 130.398694][ T6215] [ 130.398702][ T6215] dump_stack_lvl+0x100/0x190 [ 130.398731][ T6215] should_fail_ex.cold+0x5/0xa [ 130.398760][ T6215] should_failslab+0xc2/0x120 [ 130.398787][ T6215] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 130.398851][ T6215] ? __proc_create+0x2cb/0x8c0 [ 130.398888][ T6215] __proc_create+0x2cb/0x8c0 [ 130.398919][ T6215] ? __pfx___proc_create+0x10/0x10 [ 130.398964][ T6215] proc_mkdir+0x81/0x170 [ 130.398995][ T6215] ? __pfx_proc_mkdir+0x10/0x10 [ 130.399058][ T6215] ? cache_register_net+0x137/0x5e0 [ 130.399085][ T6215] ? cache_register_net+0x137/0x5e0 [ 130.399115][ T6215] cache_register_net+0x18f/0x5e0 [ 130.399143][ T6215] gss_svc_init_net+0x14e/0x640 [ 130.399179][ T6215] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 130.399203][ T6215] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 130.399225][ T6215] ops_init+0x1e2/0x5f0 [ 130.399257][ T6215] setup_net+0x118/0x3a0 [ 130.399286][ T6215] ? __pfx_setup_net+0x10/0x10 [ 130.399316][ T6215] ? mutex_init_lockdep+0xf1/0x120 [ 130.399345][ T6215] copy_net_ns+0x46f/0x7c0 [ 130.399379][ T6215] create_new_namespaces+0x3ea/0xac0 [ 130.399416][ T6215] unshare_nsproxy_namespaces+0xf2/0x220 [ 130.399449][ T6215] ksys_unshare+0x438/0xab0 [ 130.399484][ T6215] ? __pfx_ksys_unshare+0x10/0x10 [ 130.399517][ T6215] ? xfd_validate_state+0x129/0x190 [ 130.399550][ T6215] __x64_sys_unshare+0x31/0x40 [ 130.399602][ T6215] do_syscall_64+0x10b/0xf80 [ 130.399654][ T6215] ? clear_bhb_loop+0x40/0x90 [ 130.399696][ T6215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.399726][ T6215] RIP: 0033:0x7fef6d59ce59 [ 130.399745][ T6215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.399773][ T6215] RSP: 002b:00007fef6e3b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 130.399796][ T6215] RAX: ffffffffffffffda RBX: 00007fef6d815fa0 RCX: 00007fef6d59ce59 [ 130.399811][ T6215] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 130.399829][ T6215] RBP: 00007fef6d632d6f R08: 0000000000000000 R09: 0000000000000000 [ 130.399843][ T6215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.399856][ T6215] R13: 00007fef6d816038 R14: 00007fef6d815fa0 R15: 00007ffd9a7d9898 [ 130.399885][ T6215] [ 130.737828][ T6222] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input11 [ 131.896402][ T6232] netlink: 28 bytes leftover after parsing attributes in process `syz.1.86'. [ 132.000468][ T6235] netlink: 'syz.1.86': attribute type 1 has an invalid length. [ 132.011354][ T6228] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 132.126399][ T6227] zswap: compressor 000 not available [ 132.193072][ T6239] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0 [ 132.755354][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.763761][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.832668][ T6233] cifs: Unknown parameter 'T.ŸÜÛæ¨Å¼c[ŸÐê€$âæµÈ)ü±UóÑnEó-Ê™¾l®öÚ-ºŒ -¾_€™¯Ôåáª5Z äoåé¢mžÐfwYÍhº*/ÿxDlÝ©Š×ígÕkÇAí³ùÏ7ÍØØ9’ôXöa/fê_ÿAR£ˆ™‘ÈxM ‚v¬—pÿ±$^;ôØq‡3±«£n졵-6©+e„k„¾ñÇ<°kœcÔ)n.üeMÍ÷Na¨t®ÐSMÎÆ1,™úuÍê*Ù‹1‡4M++j³ˆ×¹ç:|:/³+'Šm/úC [ 132.832668][ T6233] Ö!‰÷S»—gƒ‡ŒÐ@ΪMLîÝT¾w.‡œlÉ;Õ_-:Q÷y•K¶N½ïMz>‘l*[çG˜§ÜC°ŠH‚ž¸®Fx^ÉÄ’©’Pktkëyÿøývû¼e' [ 132.920472][ T6233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.87'. [ 134.453111][ T6270] ubi0: attaching mtd0 [ 134.489725][ T6270] ubi0: scanning is finished [ 134.500018][ T6270] ubi0: empty MTD device detected [ 134.751086][ T6252] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 135.273721][ T6276] FAULT_INJECTION: forcing a failure. [ 135.273721][ T6276] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 135.297013][ T6276] CPU: 0 UID: 0 PID: 6276 Comm: syz.2.94 Not tainted syzkaller #0 PREEMPT(full) [ 135.297044][ T6276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 135.297058][ T6276] Call Trace: [ 135.297066][ T6276] [ 135.297076][ T6276] dump_stack_lvl+0x100/0x190 [ 135.297106][ T6276] should_fail_ex.cold+0x5/0xa [ 135.297130][ T6276] ? prepare_alloc_pages+0x16d/0x5f0 [ 135.297162][ T6276] should_fail_alloc_page+0xeb/0x140 [ 135.297190][ T6276] prepare_alloc_pages+0x1f0/0x5f0 [ 135.297219][ T6276] ? arch_stack_walk+0xa6/0xf0 [ 135.297252][ T6276] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 135.297295][ T6276] ? ops_init+0x77/0x5f0 [ 135.297322][ T6276] ? stack_trace_save+0x8e/0xc0 [ 135.297354][ T6276] ? __pfx_stack_trace_save+0x10/0x10 [ 135.297387][ T6276] ? stack_depot_save_flags+0x27/0x9d0 [ 135.297420][ T6276] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 135.297458][ T6276] ? kasan_save_stack+0x3f/0x50 [ 135.297479][ T6276] ? kasan_save_stack+0x30/0x50 [ 135.297500][ T6276] ? kasan_save_track+0x14/0x30 [ 135.297522][ T6276] ? __kmalloc_noprof+0x301/0x850 [ 135.297542][ T6276] ? setup_net+0x118/0x3a0 [ 135.297568][ T6276] ? copy_net_ns+0x46f/0x7c0 [ 135.297598][ T6276] ? create_new_namespaces+0x3ea/0xac0 [ 135.297636][ T6276] ? unshare_nsproxy_namespaces+0xf2/0x220 [ 135.297666][ T6276] ? ksys_unshare+0x438/0xab0 [ 135.297699][ T6276] ? __x64_sys_unshare+0x31/0x40 [ 135.297732][ T6276] ? do_syscall_64+0x10b/0xf80 [ 135.297767][ T6276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.297802][ T6276] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 135.297841][ T6276] ? policy_nodemask+0xed/0x4f0 [ 135.297873][ T6276] alloc_pages_mpol+0x1fb/0x540 [ 135.297939][ T6276] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 135.297985][ T6276] ? __pfx_can_pernet_init+0x10/0x10 [ 135.298020][ T6276] ___kmalloc_large_node+0xe5/0x120 [ 135.298051][ T6276] ? __pfx_can_pernet_init+0x10/0x10 [ 135.298085][ T6276] __kmalloc_large_noprof+0x1c/0x70 [ 135.298115][ T6276] can_pernet_init+0x4b/0x370 [ 135.298150][ T6276] ? __pfx_can_pernet_init+0x10/0x10 [ 135.298184][ T6276] ops_init+0x1e2/0x5f0 [ 135.298215][ T6276] setup_net+0x118/0x3a0 [ 135.298244][ T6276] ? __pfx_setup_net+0x10/0x10 [ 135.298273][ T6276] ? mutex_init_lockdep+0xf1/0x120 [ 135.298302][ T6276] copy_net_ns+0x46f/0x7c0 [ 135.298336][ T6276] create_new_namespaces+0x3ea/0xac0 [ 135.298372][ T6276] unshare_nsproxy_namespaces+0xf2/0x220 [ 135.298405][ T6276] ksys_unshare+0x438/0xab0 [ 135.298441][ T6276] ? __pfx_ksys_unshare+0x10/0x10 [ 135.298473][ T6276] ? xfd_validate_state+0x129/0x190 [ 135.298506][ T6276] __x64_sys_unshare+0x31/0x40 [ 135.298541][ T6276] do_syscall_64+0x10b/0xf80 [ 135.298601][ T6276] ? clear_bhb_loop+0x40/0x90 [ 135.298638][ T6276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.298662][ T6276] RIP: 0033:0x7f974259ce59 [ 135.298682][ T6276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.298704][ T6276] RSP: 002b:00007f97407f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 135.298726][ T6276] RAX: ffffffffffffffda RBX: 00007f9742815fa0 RCX: 00007f974259ce59 [ 135.298742][ T6276] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 135.298756][ T6276] RBP: 00007f9742632d6f R08: 0000000000000000 R09: 0000000000000000 [ 135.298770][ T6276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.298783][ T6276] R13: 00007f9742816038 R14: 00007f9742815fa0 R15: 00007ffccf4d9548 [ 135.298813][ T6276] [ 135.662537][ T6270] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 135.670177][ T6270] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 135.833464][ T6270] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 135.840510][ T6270] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 135.847974][ T6270] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 135.854846][ T6270] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 135.862984][ T6270] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2004469967 [ 135.873160][ T6270] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 135.884876][ T6274] ubi0: detaching mtd0 [ 136.160820][ T6274] ubi0: mtd0 is detached [ 137.401092][ T6299] netlink: 504 bytes leftover after parsing attributes in process `syz.2.98'. [ 137.442255][ T6299] netlink: 504 bytes leftover after parsing attributes in process `syz.2.98'. [ 137.616740][ T6303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.99'. [ 138.281957][ T6294] FAULT_INJECTION: forcing a failure. [ 138.281957][ T6294] name failslab, interval 1, probability 0, space 0, times 0 [ 138.325911][ T6294] CPU: 1 UID: 0 PID: 6294 Comm: syz.0.97 Not tainted syzkaller #0 PREEMPT(full) [ 138.325950][ T6294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 138.325968][ T6294] Call Trace: [ 138.325976][ T6294] [ 138.325987][ T6294] dump_stack_lvl+0x100/0x190 [ 138.326024][ T6294] should_fail_ex.cold+0x5/0xa [ 138.326057][ T6294] should_failslab+0xc2/0x120 [ 138.326090][ T6294] __kmalloc_cache_noprof+0x7a/0x6f0 [ 138.326130][ T6294] ? __kthread_create_on_node+0xce/0x3f0 [ 138.326172][ T6294] ? lockdep_init_map_type+0x5c/0x250 [ 138.326208][ T6294] ? __pfx_rescuer_thread+0x10/0x10 [ 138.326235][ T6294] __kthread_create_on_node+0xce/0x3f0 [ 138.326280][ T6294] ? __pfx___kthread_create_on_node+0x10/0x10 [ 138.326333][ T6294] ? __pfx_vsnprintf+0x10/0x10 [ 138.326386][ T6294] ? __pfx_rescuer_thread+0x10/0x10 [ 138.326418][ T6294] kthread_create_on_node+0xc7/0x100 [ 138.326462][ T6294] ? __pfx_kthread_create_on_node+0x10/0x10 [ 138.326498][ T6294] ? __pfx_scnprintf+0x10/0x10 [ 138.326559][ T6294] init_rescuer+0x321/0x550 [ 138.326608][ T6294] ? __pfx_init_rescuer+0x10/0x10 [ 138.326669][ T6294] ? wq_adjust_max_active+0x352/0x4a0 [ 138.326717][ T6294] __alloc_workqueue+0xc70/0x1980 [ 138.326778][ T6294] alloc_workqueue_noprof+0xc7/0x130 [ 138.326834][ T6294] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 138.326897][ T6294] ? __pfx___debug_object_init+0x10/0x10 [ 138.326965][ T6294] nci_register_device+0x21e/0xb80 [ 138.327014][ T6294] ? __pfx_nci_register_device+0x10/0x10 [ 138.327064][ T6294] ? lockdep_init_map_type+0x5c/0x250 [ 138.327108][ T6294] virtual_ncidev_open+0x141/0x220 [ 138.327166][ T6294] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 138.327222][ T6294] misc_open+0x26d/0x450 [ 138.327268][ T6294] ? __pfx_misc_open+0x10/0x10 [ 138.327311][ T6294] chrdev_open+0x234/0x6a0 [ 138.327354][ T6294] ? __pfx_apparmor_file_open+0x10/0x10 [ 138.327387][ T6294] ? __pfx_chrdev_open+0x10/0x10 [ 138.327434][ T6294] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 138.327490][ T6294] do_dentry_open+0x6d8/0x1660 [ 138.327532][ T6294] ? __pfx_chrdev_open+0x10/0x10 [ 138.327586][ T6294] vfs_open+0x82/0x3f0 [ 138.327642][ T6294] path_openat+0x208c/0x31a0 [ 138.327709][ T6294] ? __pfx_path_openat+0x10/0x10 [ 138.327770][ T6294] do_file_open+0x20e/0x430 [ 138.327822][ T6294] ? __pfx_do_file_open+0x10/0x10 [ 138.327898][ T6294] ? alloc_fd+0x476/0x790 [ 138.327944][ T6294] ? do_getname+0x191/0x390 [ 138.327999][ T6294] do_sys_openat2+0x10d/0x1e0 [ 138.328051][ T6294] ? __pfx_do_sys_openat2+0x10/0x10 [ 138.328120][ T6294] __x64_sys_openat+0x12d/0x210 [ 138.328174][ T6294] ? __pfx___x64_sys_openat+0x10/0x10 [ 138.328237][ T6294] ? rcu_is_watching+0x12/0xc0 [ 138.328283][ T6294] do_syscall_64+0x10b/0xf80 [ 138.328336][ T6294] ? clear_bhb_loop+0x40/0x90 [ 138.328378][ T6294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.328412][ T6294] RIP: 0033:0x7fb11919ce59 [ 138.328439][ T6294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.328466][ T6294] RSP: 002b:00007fb11a01b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 138.328493][ T6294] RAX: ffffffffffffffda RBX: 00007fb119416180 RCX: 00007fb11919ce59 [ 138.328511][ T6294] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 138.328529][ T6294] RBP: 00007fb119232d6f R08: 0000000000000000 R09: 0000000000000000 [ 138.328546][ T6294] R10: 000000000000003e R11: 0000000000000246 R12: 0000000000000000 [ 138.328563][ T6294] R13: 00007fb119416218 R14: 00007fb119416180 R15: 00007ffcf29f5cc8 [ 138.328598][ T6294] [ 138.328981][ T6294] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -ENOMEM [ 139.467572][ T6330] netlink: 146 bytes leftover after parsing attributes in process `syz.1.106'. [ 139.670662][ T6331] ======================================================= [ 139.670662][ T6331] WARNING: The mand mount option has been deprecated and [ 139.670662][ T6331] and is ignored by this kernel. Remove the mand [ 139.670662][ T6331] option from the mount to silence this warning. [ 139.670662][ T6331] ======================================================= [ 139.808450][ T6338] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input12 [ 139.946548][ T6328] FAULT_INJECTION: forcing a failure. [ 139.946548][ T6328] name failslab, interval 1, probability 0, space 0, times 0 [ 140.003172][ T6328] CPU: 1 UID: 0 PID: 6328 Comm: syz.0.105 Not tainted syzkaller #0 PREEMPT(full) [ 140.003215][ T6328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 140.003234][ T6328] Call Trace: [ 140.003245][ T6328] [ 140.003258][ T6328] dump_stack_lvl+0x100/0x190 [ 140.003307][ T6328] should_fail_ex.cold+0x5/0xa [ 140.003360][ T6328] should_failslab+0xc2/0x120 [ 140.003402][ T6328] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 140.003458][ T6328] ? __proc_create+0x2cb/0x8c0 [ 140.003512][ T6328] __proc_create+0x2cb/0x8c0 [ 140.003557][ T6328] ? __pfx___proc_create+0x10/0x10 [ 140.003619][ T6328] proc_create_reg+0x75/0x170 [ 140.003670][ T6328] proc_create_net_data+0x8e/0x1c0 [ 140.003718][ T6328] ? __pfx_proc_create_net_data+0x10/0x10 [ 140.003764][ T6328] ? net_generic+0xea/0x2a0 [ 140.003812][ T6328] ? __pfx_phonet_init_net+0x10/0x10 [ 140.003855][ T6328] phonet_init_net+0x66/0x120 [ 140.003897][ T6328] ops_init+0x1e2/0x5f0 [ 140.003945][ T6328] setup_net+0x118/0x3a0 [ 140.003990][ T6328] ? __pfx_setup_net+0x10/0x10 [ 140.004034][ T6328] ? mutex_init_lockdep+0xf1/0x120 [ 140.004077][ T6328] copy_net_ns+0x46f/0x7c0 [ 140.004127][ T6328] create_new_namespaces+0x3ea/0xac0 [ 140.004178][ T6328] unshare_nsproxy_namespaces+0xf2/0x220 [ 140.004226][ T6328] ksys_unshare+0x438/0xab0 [ 140.004278][ T6328] ? __pfx_ksys_unshare+0x10/0x10 [ 140.004325][ T6328] ? xfd_validate_state+0x129/0x190 [ 140.004381][ T6328] __x64_sys_unshare+0x31/0x40 [ 140.004431][ T6328] do_syscall_64+0x10b/0xf80 [ 140.004483][ T6328] ? clear_bhb_loop+0x40/0x90 [ 140.004525][ T6328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.004559][ T6328] RIP: 0033:0x7fb11919ce59 [ 140.004587][ T6328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.004619][ T6328] RSP: 002b:00007fb11a05d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 140.004651][ T6328] RAX: ffffffffffffffda RBX: 00007fb119415fa0 RCX: 00007fb11919ce59 [ 140.004673][ T6328] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 140.004693][ T6328] RBP: 00007fb119232d6f R08: 0000000000000000 R09: 0000000000000000 [ 140.004713][ T6328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.004733][ T6328] R13: 00007fb119416038 R14: 00007fb119415fa0 R15: 00007ffcf29f5cc8 [ 140.004776][ T6328] [ 141.143438][ T6358] i2c i2c-0: new_device: Invalid device name [ 141.498893][ T6358] netlink: 338 bytes leftover after parsing attributes in process `syz.1.111'. [ 141.982007][ T4947] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 141.991023][ T4947] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 142.775195][ T6390] __vm_enough_memory: pid: 6390, comm: syz.1.117, bytes: 4398046457856 not enough memory for the allocation [ 143.175399][ T6365] Process accounting resumed [ 143.462084][ T6398] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 143.679697][ T6396] FAULT_INJECTION: forcing a failure. [ 143.679697][ T6396] name failslab, interval 1, probability 0, space 0, times 0 [ 143.698506][ T6396] CPU: 1 UID: 0 PID: 6396 Comm: syz.3.118 Not tainted syzkaller #0 PREEMPT(full) [ 143.698546][ T6396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 143.698565][ T6396] Call Trace: [ 143.698576][ T6396] [ 143.698588][ T6396] dump_stack_lvl+0x100/0x190 [ 143.698628][ T6396] should_fail_ex.cold+0x5/0xa [ 143.698679][ T6396] should_failslab+0xc2/0x120 [ 143.698717][ T6396] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 143.698766][ T6396] ? __proc_create+0x2cb/0x8c0 [ 143.698816][ T6396] __proc_create+0x2cb/0x8c0 [ 143.698858][ T6396] ? __pfx___proc_create+0x10/0x10 [ 143.698915][ T6396] proc_mkdir+0x81/0x170 [ 143.698955][ T6396] ? __pfx_proc_mkdir+0x10/0x10 [ 143.698995][ T6396] ? cache_register_net+0x137/0x5e0 [ 143.699029][ T6396] ? cache_register_net+0x137/0x5e0 [ 143.699069][ T6396] cache_register_net+0x18f/0x5e0 [ 143.699109][ T6396] gss_svc_init_net+0x14e/0x640 [ 143.699155][ T6396] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 143.699191][ T6396] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 143.699222][ T6396] ops_init+0x1e2/0x5f0 [ 143.699264][ T6396] setup_net+0x118/0x3a0 [ 143.699297][ T6396] ? __pfx_setup_net+0x10/0x10 [ 143.699328][ T6396] ? mutex_init_lockdep+0xf1/0x120 [ 143.699362][ T6396] copy_net_ns+0x46f/0x7c0 [ 143.699400][ T6396] create_new_namespaces+0x3ea/0xac0 [ 143.699456][ T6396] unshare_nsproxy_namespaces+0xf2/0x220 [ 143.699493][ T6396] ksys_unshare+0x438/0xab0 [ 143.699535][ T6396] ? __pfx_ksys_unshare+0x10/0x10 [ 143.699572][ T6396] ? xfd_validate_state+0x129/0x190 [ 143.699613][ T6396] __x64_sys_unshare+0x31/0x40 [ 143.699653][ T6396] do_syscall_64+0x10b/0xf80 [ 143.699696][ T6396] ? clear_bhb_loop+0x40/0x90 [ 143.699732][ T6396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.699762][ T6396] RIP: 0033:0x7fef6d59ce59 [ 143.699784][ T6396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.699814][ T6396] RSP: 002b:00007fef6e3b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 143.699842][ T6396] RAX: ffffffffffffffda RBX: 00007fef6d815fa0 RCX: 00007fef6d59ce59 [ 143.699862][ T6396] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 143.699881][ T6396] RBP: 00007fef6d632d6f R08: 0000000000000000 R09: 0000000000000000 [ 143.699900][ T6396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.699918][ T6396] R13: 00007fef6d816038 R14: 00007fef6d815fa0 R15: 00007ffd9a7d9898 [ 143.699960][ T6396] [ 144.097071][ T6407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.121'. [ 144.237037][ T6412] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input13 [ 145.080420][ T6420] FAULT_INJECTION: forcing a failure. [ 145.080420][ T6420] name failslab, interval 1, probability 0, space 0, times 0 [ 145.110406][ T6420] CPU: 0 UID: 0 PID: 6420 Comm: syz.1.123 Not tainted syzkaller #0 PREEMPT(full) [ 145.110449][ T6420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 145.110469][ T6420] Call Trace: [ 145.110479][ T6420] [ 145.110491][ T6420] dump_stack_lvl+0x100/0x190 [ 145.110533][ T6420] should_fail_ex.cold+0x5/0xa [ 145.110575][ T6420] should_failslab+0xc2/0x120 [ 145.110615][ T6420] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 145.110676][ T6420] ? __proc_create+0x2cb/0x8c0 [ 145.110729][ T6420] __proc_create+0x2cb/0x8c0 [ 145.110776][ T6420] ? __pfx___proc_create+0x10/0x10 [ 145.110826][ T6420] ? _raw_write_unlock+0x28/0x50 [ 145.110877][ T6420] ? proc_register+0x559/0x8a0 [ 145.110927][ T6420] proc_create_reg+0x75/0x170 [ 145.110975][ T6420] ? __pfx_can_rcvlist_eff_proc_show+0x10/0x10 [ 145.111032][ T6420] proc_create_net_single+0x86/0x180 [ 145.111097][ T6420] ? __pfx_proc_create_net_single+0x10/0x10 [ 145.111149][ T6420] ? round_jiffies+0x10a/0x160 [ 145.111211][ T6420] can_init_proc+0x319/0x4b0 [ 145.111268][ T6420] can_pernet_init+0x1e4/0x370 [ 145.111319][ T6420] ? __pfx_can_pernet_init+0x10/0x10 [ 145.111373][ T6420] ops_init+0x1e2/0x5f0 [ 145.111420][ T6420] setup_net+0x118/0x3a0 [ 145.111462][ T6420] ? __pfx_setup_net+0x10/0x10 [ 145.111504][ T6420] ? mutex_init_lockdep+0xf1/0x120 [ 145.111548][ T6420] copy_net_ns+0x46f/0x7c0 [ 145.111597][ T6420] create_new_namespaces+0x3ea/0xac0 [ 145.111652][ T6420] unshare_nsproxy_namespaces+0xf2/0x220 [ 145.111701][ T6420] ksys_unshare+0x438/0xab0 [ 145.111755][ T6420] ? __pfx_ksys_unshare+0x10/0x10 [ 145.111802][ T6420] ? xfd_validate_state+0x129/0x190 [ 145.111852][ T6420] __x64_sys_unshare+0x31/0x40 [ 145.111906][ T6420] do_syscall_64+0x10b/0xf80 [ 145.111956][ T6420] ? clear_bhb_loop+0x40/0x90 [ 145.111997][ T6420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.112031][ T6420] RIP: 0033:0x7f561b59ce59 [ 145.112057][ T6420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.112090][ T6420] RSP: 002b:00007f561c396028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 145.112122][ T6420] RAX: ffffffffffffffda RBX: 00007f561b815fa0 RCX: 00007f561b59ce59 [ 145.112143][ T6420] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 145.112163][ T6420] RBP: 00007f561b632d6f R08: 0000000000000000 R09: 0000000000000000 [ 145.112183][ T6420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.112202][ T6420] R13: 00007f561b816038 R14: 00007f561b815fa0 R15: 00007ffeb97e51d8 [ 145.112246][ T6420] [ 145.230149][ T6432] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input14 [ 146.373118][ T50] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 147.331892][ T6452] dyndbg: expected <4096 bytes into control [ 148.424200][ T50] Bluetooth: hci1: command 0x2016 tx timeout [ 148.992199][ T6470] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input15 [ 149.426940][ T6473] FAULT_INJECTION: forcing a failure. [ 149.426940][ T6473] name failslab, interval 1, probability 0, space 0, times 0 [ 149.464230][ T6473] CPU: 1 UID: 0 PID: 6473 Comm: syz.3.132 Not tainted syzkaller #0 PREEMPT(full) [ 149.464262][ T6473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 149.464280][ T6473] Call Trace: [ 149.464287][ T6473] [ 149.464296][ T6473] dump_stack_lvl+0x100/0x190 [ 149.464327][ T6473] should_fail_ex.cold+0x5/0xa [ 149.464356][ T6473] ? lsm_blob_alloc+0x68/0x90 [ 149.464389][ T6473] should_failslab+0xc2/0x120 [ 149.464417][ T6473] __kmalloc_noprof+0xe0/0x850 [ 149.464438][ T6473] ? trace_kmem_cache_alloc+0xd5/0x100 [ 149.464472][ T6473] lsm_blob_alloc+0x68/0x90 [ 149.464506][ T6473] security_sk_alloc+0x2d/0x290 [ 149.464542][ T6473] sk_prot_alloc+0x1d1/0x2a0 [ 149.464613][ T6473] sk_alloc+0x36/0xe80 [ 149.464652][ T6473] smc_create+0x11a/0x290 [ 149.464685][ T6473] __sock_create+0x339/0x860 [ 149.464742][ T6473] __sys_socket+0x14d/0x260 [ 149.464780][ T6473] ? __pfx___sys_socket+0x10/0x10 [ 149.464824][ T6473] __x64_sys_socket+0x72/0xb0 [ 149.464844][ T6473] ? lockdep_hardirqs_on+0x78/0x100 [ 149.464883][ T6473] do_syscall_64+0x10b/0xf80 [ 149.464918][ T6473] ? clear_bhb_loop+0x40/0x90 [ 149.464945][ T6473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.464969][ T6473] RIP: 0033:0x7fef6d59ce59 [ 149.464987][ T6473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.465009][ T6473] RSP: 002b:00007fef6e3b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 149.465030][ T6473] RAX: ffffffffffffffda RBX: 00007fef6d815fa0 RCX: 00007fef6d59ce59 [ 149.465045][ T6473] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 149.465058][ T6473] RBP: 00007fef6d632d6f R08: 0000000000000000 R09: 0000000000000000 [ 149.465072][ T6473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.465085][ T6473] R13: 00007fef6d816038 R14: 00007fef6d815fa0 R15: 00007ffd9a7d9898 [ 149.465124][ T6473] [ 150.503685][ T50] Bluetooth: hci1: command 0x2016 tx timeout [ 150.947780][ T6477] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 151.428802][ T6492] FAULT_INJECTION: forcing a failure. [ 151.428802][ T6492] name failslab, interval 1, probability 0, space 0, times 0 [ 151.443066][ T6492] CPU: 1 UID: 0 PID: 6492 Comm: syz.1.136 Not tainted syzkaller #0 PREEMPT(full) [ 151.443107][ T6492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 151.443124][ T6492] Call Trace: [ 151.443135][ T6492] [ 151.443146][ T6492] dump_stack_lvl+0x100/0x190 [ 151.443182][ T6492] should_fail_ex.cold+0x5/0xa [ 151.443229][ T6492] should_failslab+0xc2/0x120 [ 151.443261][ T6492] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 151.443310][ T6492] ? sctp_sysctl_net_register+0x30/0x200 [ 151.443360][ T6492] ? __pfx_sctp_defaults_init+0x10/0x10 [ 151.443391][ T6492] kmemdup_noprof+0x29/0x60 [ 151.443420][ T6492] sctp_sysctl_net_register+0x30/0x200 [ 151.443452][ T6492] ? __pfx_sctp_defaults_init+0x10/0x10 [ 151.443483][ T6492] sctp_defaults_init+0x6d2/0xd90 [ 151.443515][ T6492] ? __pfx_sctp_defaults_init+0x10/0x10 [ 151.443546][ T6492] ops_init+0x1e2/0x5f0 [ 151.443582][ T6492] setup_net+0x118/0x3a0 [ 151.443615][ T6492] ? __pfx_setup_net+0x10/0x10 [ 151.443648][ T6492] ? mutex_init_lockdep+0xf1/0x120 [ 151.443681][ T6492] copy_net_ns+0x46f/0x7c0 [ 151.443738][ T6492] create_new_namespaces+0x3ea/0xac0 [ 151.443811][ T6492] unshare_nsproxy_namespaces+0xf2/0x220 [ 151.443849][ T6492] ksys_unshare+0x438/0xab0 [ 151.443890][ T6492] ? __pfx_ksys_unshare+0x10/0x10 [ 151.443927][ T6492] ? xfd_validate_state+0x129/0x190 [ 151.443965][ T6492] __x64_sys_unshare+0x31/0x40 [ 151.444005][ T6492] do_syscall_64+0x10b/0xf80 [ 151.444044][ T6492] ? clear_bhb_loop+0x40/0x90 [ 151.444076][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.444102][ T6492] RIP: 0033:0x7f561b59ce59 [ 151.444123][ T6492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.444150][ T6492] RSP: 002b:00007f561c396028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 151.444174][ T6492] RAX: ffffffffffffffda RBX: 00007f561b815fa0 RCX: 00007f561b59ce59 [ 151.444193][ T6492] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 151.444209][ T6492] RBP: 00007f561b632d6f R08: 0000000000000000 R09: 0000000000000000 [ 151.444224][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.444240][ T6492] R13: 00007f561b816038 R14: 00007f561b815fa0 R15: 00007ffeb97e51d8 [ 151.444274][ T6492] [ 151.702004][ T6501] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input16 [ 156.697599][ T6545] FAULT_INJECTION: forcing a failure. [ 156.697599][ T6545] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 156.830501][ T6545] CPU: 1 UID: 0 PID: 6545 Comm: syz.0.147 Not tainted syzkaller #0 PREEMPT(full) [ 156.830546][ T6545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 156.830571][ T6545] Call Trace: [ 156.830582][ T6545] [ 156.830594][ T6545] dump_stack_lvl+0x100/0x190 [ 156.830636][ T6545] should_fail_ex.cold+0x5/0xa [ 156.830677][ T6545] _copy_from_user+0x2e/0xd0 [ 156.830714][ T6545] snd_rawmidi_kernel_write1+0x390/0x7c0 [ 156.830768][ T6545] snd_rawmidi_write+0x2dc/0xc60 [ 156.830814][ T6545] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 156.830855][ T6545] ? __pfx_default_wake_function+0x10/0x10 [ 156.830904][ T6545] ? bpf_lsm_file_permission+0x9/0x10 [ 156.830937][ T6545] ? security_file_permission+0x76/0x210 [ 156.830975][ T6545] ? rw_verify_area+0xce/0x6d0 [ 156.831006][ T6545] vfs_write+0x2aa/0x1070 [ 156.831040][ T6545] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 156.831072][ T6545] ? __pfx_vfs_write+0x10/0x10 [ 156.831102][ T6545] ? find_held_lock+0x2b/0x80 [ 156.831139][ T6545] ? __fget_files+0x215/0x3d0 [ 156.831171][ T6545] ? __fget_files+0x215/0x3d0 [ 156.831210][ T6545] ? __fget_files+0x21f/0x3d0 [ 156.831251][ T6545] ksys_write+0x1f8/0x250 [ 156.831283][ T6545] ? __pfx_ksys_write+0x10/0x10 [ 156.831319][ T6545] ? rcu_is_watching+0x12/0xc0 [ 156.831357][ T6545] do_syscall_64+0x10b/0xf80 [ 156.831401][ T6545] ? clear_bhb_loop+0x40/0x90 [ 156.831435][ T6545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.831463][ T6545] RIP: 0033:0x7fb11919ce59 [ 156.831486][ T6545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.831514][ T6545] RSP: 002b:00007fb11a05d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 156.831540][ T6545] RAX: ffffffffffffffda RBX: 00007fb119415fa0 RCX: 00007fb11919ce59 [ 156.831558][ T6545] RDX: 000000100000a3d9 RSI: 0000200000000400 RDI: 0000000000000007 [ 156.831582][ T6545] RBP: 00007fb119232d6f R08: 0000000000000000 R09: 0000000000000000 [ 156.831599][ T6545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.831616][ T6545] R13: 00007fb119416038 R14: 00007fb119415fa0 R15: 00007ffcf29f5cc8 [ 156.831651][ T6545] [ 158.948009][ T6573] FAULT_INJECTION: forcing a failure. [ 158.948009][ T6573] name failslab, interval 1, probability 0, space 0, times 0 [ 159.021000][ T6573] CPU: 1 UID: 0 PID: 6573 Comm: syz.3.153 Not tainted syzkaller #0 PREEMPT(full) [ 159.021063][ T6573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 159.021085][ T6573] Call Trace: [ 159.021095][ T6573] [ 159.021108][ T6573] dump_stack_lvl+0x100/0x190 [ 159.021152][ T6573] should_fail_ex.cold+0x5/0xa [ 159.021196][ T6573] should_failslab+0xc2/0x120 [ 159.021237][ T6573] __kmalloc_cache_noprof+0x7a/0x6f0 [ 159.021288][ T6573] ? sctp_endpoint_new+0xfc/0xb20 [ 159.021332][ T6573] ? __debug_object_init+0x2de/0x3d0 [ 159.021401][ T6573] sctp_endpoint_new+0xfc/0xb20 [ 159.021449][ T6573] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 159.021493][ T6573] ? lockdep_init_map_type+0x5c/0x250 [ 159.021532][ T6573] ? lockdep_init_map_type+0x5c/0x250 [ 159.021573][ T6573] sctp_init_sock+0xe2b/0x1300 [ 159.021614][ T6573] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 159.021657][ T6573] sctp_v6_init_sock+0x16/0x70 [ 159.021695][ T6573] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 159.021737][ T6573] inet6_create+0xb21/0x12b0 [ 159.021790][ T6573] ? inet6_create+0x7f/0x12b0 [ 159.021843][ T6573] __sock_create+0x339/0x860 [ 159.021903][ T6573] inet_ctl_sock_create+0x94/0x230 [ 159.021938][ T6573] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 159.021972][ T6573] ? timer_init_key+0x155/0x330 [ 159.022031][ T6573] ? __pfx_sctp_ctrlsock_init+0x10/0x10 [ 159.022069][ T6573] sctp_ctrlsock_init+0x40/0xd0 [ 159.022107][ T6573] ops_init+0x1e2/0x5f0 [ 159.022154][ T6573] setup_net+0x118/0x3a0 [ 159.022199][ T6573] ? __pfx_setup_net+0x10/0x10 [ 159.022243][ T6573] ? mutex_init_lockdep+0xf1/0x120 [ 159.022287][ T6573] copy_net_ns+0x46f/0x7c0 [ 159.022342][ T6573] create_new_namespaces+0x3ea/0xac0 [ 159.022404][ T6573] unshare_nsproxy_namespaces+0xf2/0x220 [ 159.022455][ T6573] ksys_unshare+0x438/0xab0 [ 159.022510][ T6573] ? __pfx_ksys_unshare+0x10/0x10 [ 159.022558][ T6573] ? xfd_validate_state+0x129/0x190 [ 159.022608][ T6573] __x64_sys_unshare+0x31/0x40 [ 159.022659][ T6573] do_syscall_64+0x10b/0xf80 [ 159.022712][ T6573] ? clear_bhb_loop+0x40/0x90 [ 159.022754][ T6573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.022789][ T6573] RIP: 0033:0x7fef6d59ce59 [ 159.022815][ T6573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.022847][ T6573] RSP: 002b:00007fef6e3b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 159.022877][ T6573] RAX: ffffffffffffffda RBX: 00007fef6d815fa0 RCX: 00007fef6d59ce59 [ 159.022898][ T6573] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 159.022917][ T6573] RBP: 00007fef6d632d6f R08: 0000000000000000 R09: 0000000000000000 [ 159.022937][ T6573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.022956][ T6573] R13: 00007fef6d816038 R14: 00007fef6d815fa0 R15: 00007ffd9a7d9898 [ 159.023000][ T6573] [ 159.314296][ T6576] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input17 [ 159.624916][ T4947] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 159.918544][ T6556] Process accounting resumed [ 160.787538][ T6567] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 161.995968][ T6595] FAULT_INJECTION: forcing a failure. [ 161.995968][ T6595] name failslab, interval 1, probability 0, space 0, times 0 [ 162.043450][ T6595] CPU: 0 UID: 0 PID: 6595 Comm: syz.0.158 Not tainted syzkaller #0 PREEMPT(full) [ 162.043494][ T6595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 162.043513][ T6595] Call Trace: [ 162.043523][ T6595] [ 162.043535][ T6595] dump_stack_lvl+0x100/0x190 [ 162.043579][ T6595] should_fail_ex.cold+0x5/0xa [ 162.043622][ T6595] should_failslab+0xc2/0x120 [ 162.043663][ T6595] __kmalloc_cache_noprof+0x7a/0x6f0 [ 162.043712][ T6595] ? snd_pcm_oss_change_params_locked+0x1db/0x39f0 [ 162.043777][ T6595] snd_pcm_oss_change_params_locked+0x1db/0x39f0 [ 162.043834][ T6595] ? rcu_is_watching+0x12/0xc0 [ 162.043875][ T6595] ? trace_contention_end+0x122/0x170 [ 162.043916][ T6595] ? snd_pcm_oss_sync+0x243/0x840 [ 162.043969][ T6595] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 162.044029][ T6595] ? __pfx___mutex_lock+0x10/0x10 [ 162.044069][ T6595] ? __fsnotify_parent+0x2b4/0xca0 [ 162.044126][ T6595] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 162.044184][ T6595] snd_pcm_oss_sync+0x265/0x840 [ 162.044245][ T6595] snd_pcm_oss_release+0x238/0x300 [ 162.044297][ T6595] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 162.044360][ T6595] __fput+0x3ff/0xb50 [ 162.044415][ T6595] task_work_run+0x150/0x240 [ 162.044451][ T6595] ? __pfx_task_work_run+0x10/0x10 [ 162.044490][ T6595] ? rcu_is_watching+0x12/0xc0 [ 162.044536][ T6595] exit_to_user_mode_loop+0x107/0x4f0 [ 162.044569][ T6595] ? rcu_is_watching+0x12/0xc0 [ 162.044613][ T6595] do_syscall_64+0x6f2/0xf80 [ 162.044662][ T6595] ? clear_bhb_loop+0x40/0x90 [ 162.044702][ T6595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.044735][ T6595] RIP: 0033:0x7fb11919ce59 [ 162.044762][ T6595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.044794][ T6595] RSP: 002b:00007fb11a05d028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 162.044825][ T6595] RAX: 0000000000000000 RBX: 00007fb119415fa0 RCX: 00007fb11919ce59 [ 162.044850][ T6595] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 162.044869][ T6595] RBP: 00007fb119232d6f R08: 0000000000000000 R09: 0000000000000000 [ 162.044888][ T6595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.044907][ T6595] R13: 00007fb119416038 R14: 00007fb119415fa0 R15: 00007ffcf29f5cc8 [ 162.044949][ T6595] [ 162.372559][ T6585] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 167.418637][ T6671] ubi0: attaching mtd0 [ 167.458755][ T6671] ubi0: scanning is finished [ 167.933333][ T6671] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 167.958958][ T6671] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 167.974109][ T6671] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 168.006059][ T6671] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 168.032693][ T6671] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 168.048256][ T6671] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 168.099083][ T6671] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2004469967 [ 168.116138][ T6671] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 168.149364][ T6683] ubi0: background thread "ubi_bgt0d" started, PID 6683 [ 168.161863][ T6673] ubi0: detaching mtd0 [ 168.391828][ T6673] ubi0: mtd0 is detached [ 170.301345][ T6707] usb usb26: usbfs: process 6707 (syz.0.180) did not claim interface 0 before use [ 171.722285][ T6718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.182'. [ 172.117729][ T6702] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 174.118246][ T6734] Process accounting paused [ 174.326096][ T4947] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 175.374175][ T6765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.194'. [ 175.945911][ T6752] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 176.343054][ T4947] Bluetooth: hci2: command 0x2016 tx timeout [ 177.931523][ T6806] zram0: detected capacity change from 0 to 16 [ 178.423916][ T4947] Bluetooth: hci2: command 0x2016 tx timeout [ 185.428496][ T6941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.227'. [ 187.708244][ T6999] sd 0:0:1:0: PR command failed: 1026 [ 187.729124][ T6999] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 187.750341][ T6999] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 187.772514][ T6999] sd 0:0:1:0: PR command failed: 1026 [ 187.789140][ T6999] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 187.837133][ T6999] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 189.860018][ T7018] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 189.978864][ T7034] Process accounting paused [ 190.424181][ T7042] futex_wake_op: syz.3.247 tries to shift op by -2048; fix this program [ 190.436586][ T7042] 0x000000000001-0x000000020000 : "" [ 190.479917][ T7042] ftl_cs: FTL header corrupt! [ 193.223549][ T7094] random: crng reseeded on system resumption [ 193.586277][ T7080] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 194.188499][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.198861][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.780087][ T7158] ubi0: attaching mtd0 [ 196.805128][ T7158] ubi0: scanning is finished [ 197.161367][ T7158] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 197.175318][ T7158] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 197.187361][ T7158] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 197.199914][ T7158] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 197.223987][ T7158] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 197.240636][ T7158] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 197.261958][ T7158] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 2004469967 [ 197.278209][ T7158] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 197.301423][ T7162] ubi0: background thread "ubi_bgt0d" started, PID 7162 [ 197.321240][ T7160] ubi0: detaching mtd0 [ 197.369872][ T7160] ubi0: mtd0 is detached [ 197.502528][ T7165] zram: Cannot change disksize for initialized device [ 200.939473][ T7190] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 201.652613][ T7218] usb usb26: usbfs: process 7218 (syz.1.286) did not claim interface 0 before use [ 204.262519][ T7238] Process accounting resumed [ 206.768750][ T7280] cgroup: fork rejected by pids controller in /syz0 [ 210.193809][ C1] sd 0:0:1:0: [sda] tag#1633 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 210.204948][ C1] sd 0:0:1:0: [sda] tag#1633 CDB: Read(6) 08 00 00 00 09 00 00 00 00 00 00 00 [ 211.623895][ T5643] Bluetooth: hci1: command 0x2016 tx timeout [ 211.634204][ T5639] Bluetooth: hci3: command 0x0406 tx timeout [ 211.641843][ T5639] Bluetooth: hci2: command 0x2016 tx timeout [ 211.654037][ T5643] Bluetooth: hci0: command 0x0406 tx timeout [ 213.939480][ T7402] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 216.811104][ T7445] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 217.911088][ T7452] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 219.292729][ T7465] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 219.591527][ T7486] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18 [ 220.491342][ T7486] Process accounting resumed [ 220.895796][ T7476] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 221.213851][ T7507] netlink: 146 bytes leftover after parsing attributes in process `syz.0.336'. [ 221.976361][ T7492] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 223.329797][ T5645] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 223.436315][ T7531] bridge_slave_0: left allmulticast mode [ 223.474895][ T7531] bridge_slave_0: left promiscuous mode [ 223.521806][ T7531] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.605690][ T7541] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 225.001673][ T7553] random: crng reseeded on system resumption [ 225.212305][ T7562] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 225.383148][ T5645] Bluetooth: hci0: command 0x0406 tx timeout [ 225.568148][ T7572] netlink: 28 bytes leftover after parsing attributes in process `syz.3.351'. [ 225.621429][ T7572] bridge_slave_1: left allmulticast mode [ 225.631096][ T7572] bridge_slave_1: left promiscuous mode [ 225.637727][ T7572] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.462903][ T5636] Bluetooth: hci0: command 0x0406 tx timeout [ 229.377897][ T7589] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 230.637702][ T7603] kexec: Could not allocate control_code_buffer [ 232.489365][ T7654] ubi0: attaching mtd0 [ 232.520282][ T7654] ubi0: scanning is finished [ 233.205027][ T7654] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 233.227153][ T7683] random: crng reseeded on system resumption [ 233.317362][ T7654] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 233.421144][ T7654] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 233.585616][ T7654] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 233.643781][ T7654] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 233.653643][ T7654] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 233.672016][ T7654] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 2004469967 [ 233.710742][ T7654] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 233.736635][ T7682] ubi0: background thread "ubi_bgt0d" started, PID 7682 [ 233.753186][ T7655] ubi0: detaching mtd0 [ 234.050790][ T7655] ubi0: mtd0 is detached [ 234.158244][ T7695] netlink: 'syz.3.372': attribute type 2 has an invalid length. [ 234.175603][ T7695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.372'. [ 234.485900][ T7693] Process accounting paused [ 234.984061][ T7699] smpboot: CPU 1 is now offline [ 236.319798][ T7672] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 238.419746][ T5636] Bluetooth: hci1: unexpected event 0x3e length: 0 < 1 [ 239.624925][ T5645] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 243.714012][ T7804] random: crng reseeded on system resumption [ 252.845441][ T7854] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 255.641168][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.648998][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.096362][ T7904] Process accounting paused [ 256.911500][ T7977] random: crng reseeded on system resumption [ 256.968651][ T7978] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 259.066510][ T8012] netlink: 504 bytes leftover after parsing attributes in process `syz.0.430'. [ 259.142184][ T8018] netlink: 504 bytes leftover after parsing attributes in process `syz.0.430'. [ 259.185095][ T8020] netlink: zone id is out of range [ 259.281795][ T8020] netlink: zone id is out of range [ 259.361544][ T8020] netlink: zone id is out of range [ 259.452741][ T8020] netlink: zone id is out of range [ 259.551981][ T8020] netlink: zone id is out of range [ 259.629059][ T8020] netlink: zone id is out of range [ 259.721223][ T8020] netlink: zone id is out of range [ 259.836869][ T8020] netlink: zone id is out of range [ 259.917132][ T8020] netlink: zone id is out of range [ 263.043402][ T8100] netlink: 28 bytes leftover after parsing attributes in process `syz.1.451'. [ 265.850377][ T8138] netlink: 342 bytes leftover after parsing attributes in process `syz.1.458'. [ 266.391785][ T8150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.459'. [ 266.478423][ T8124] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.549730][ T8152] zram: Can't change algorithm for initialized device [ 267.527302][ T8121] Process accounting resumed [ 268.174048][ T8161] netlink: 146 bytes leftover after parsing attributes in process `syz.0.464'. [ 268.304201][ T8160] FAULT_INJECTION: forcing a failure. [ 268.304201][ T8160] name fail_futex, interval 1, probability 0, space 0, times 1 [ 268.385994][ T8160] CPU: 0 UID: 0 PID: 8160 Comm: syz.1.465 Tainted: G L syzkaller #0 PREEMPT(full) [ 268.386031][ T8160] Tainted: [L]=SOFTLOCKUP [ 268.386039][ T8160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 268.386057][ T8160] Call Trace: [ 268.386065][ T8160] [ 268.386073][ T8160] dump_stack_lvl+0x100/0x190 [ 268.386108][ T8160] should_fail_ex.cold+0x5/0xa [ 268.386133][ T8160] ? rcu_is_watching+0x12/0xc0 [ 268.386166][ T8160] get_futex_key+0x1d2/0x1510 [ 268.386195][ T8160] ? __pfx_get_futex_key+0x10/0x10 [ 268.386228][ T8160] futex_wait_setup+0x83/0x510 [ 268.386266][ T8160] __futex_wait+0x19f/0x300 [ 268.386303][ T8160] ? __pfx___futex_wait+0x10/0x10 [ 268.386345][ T8160] ? __pfx_futex_wake_mark+0x10/0x10 [ 268.386380][ T8160] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 268.386406][ T8160] ? __hrtimer_setup+0x208/0x330 [ 268.386434][ T8160] ? ktime_add_safe+0x60/0x70 [ 268.386468][ T8160] futex_wait+0xe6/0x370 [ 268.386500][ T8160] ? __pfx_futex_wait+0x10/0x10 [ 268.386536][ T8160] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 268.386576][ T8160] do_futex+0x1ef/0x350 [ 268.386603][ T8160] ? __pfx_do_futex+0x10/0x10 [ 268.386629][ T8160] ? ktime_get+0x22c/0x320 [ 268.386664][ T8160] ? lockdep_hardirqs_on+0x78/0x100 [ 268.386706][ T8160] __x64_sys_futex+0x34f/0x4d0 [ 268.386736][ T8160] ? __pfx___x64_sys_futex+0x10/0x10 [ 268.386768][ T8160] ? rcu_is_watching+0x12/0xc0 [ 268.386800][ T8160] do_syscall_64+0x10b/0xf80 [ 268.386836][ T8160] ? clear_bhb_loop+0x40/0x90 [ 268.386864][ T8160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.386888][ T8160] RIP: 0033:0x7f561b59ce59 [ 268.386918][ T8160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.386948][ T8160] RSP: 002b:00007ffeb97e5338 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 268.386974][ T8160] RAX: ffffffffffffffda RBX: 00000000000417f7 RCX: 00007f561b59ce59 [ 268.386990][ T8160] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f561b815fac [ 268.387004][ T8160] RBP: 0000000000000032 R08: 0000000000000001 R09: 0000000000000000 [ 268.387022][ T8160] R10: 00007ffeb97e5440 R11: 0000000000000246 R12: 00007ffeb97e5460 [ 268.387037][ T8160] R13: 00007f561b815fac R14: 0000000000041829 R15: 00007ffeb97e5440 [ 268.387072][ T8160] [ 269.577309][ T8176] FAULT_INJECTION: forcing a failure. [ 269.577309][ T8176] name failslab, interval 1, probability 0, space 0, times 0 [ 269.641725][ T8176] CPU: 0 UID: 0 PID: 8176 Comm: syz.1.469 Tainted: G L syzkaller #0 PREEMPT(full) [ 269.641780][ T8176] Tainted: [L]=SOFTLOCKUP [ 269.641789][ T8176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 269.641807][ T8176] Call Trace: [ 269.641815][ T8176] [ 269.641833][ T8176] dump_stack_lvl+0x100/0x190 [ 269.642057][ T8176] should_fail_ex.cold+0x5/0xa [ 269.642094][ T8176] should_failslab+0xc2/0x120 [ 269.642125][ T8176] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 269.642160][ T8176] ? ip6_route_net_init+0x30f/0x8d0 [ 269.642202][ T8176] kmemdup_noprof+0x29/0x60 [ 269.642253][ T8176] ip6_route_net_init+0x30f/0x8d0 [ 269.642290][ T8176] ? __pfx_ip6_route_net_init+0x10/0x10 [ 269.642324][ T8176] ops_init+0x1e2/0x5f0 [ 269.642360][ T8176] setup_net+0x118/0x3a0 [ 269.642392][ T8176] ? __pfx_setup_net+0x10/0x10 [ 269.642425][ T8176] ? mutex_init_lockdep+0xf1/0x120 [ 269.642492][ T8176] copy_net_ns+0x46f/0x7c0 [ 269.642543][ T8176] create_new_namespaces+0x3ea/0xac0 [ 269.642583][ T8176] unshare_nsproxy_namespaces+0xf2/0x220 [ 269.642620][ T8176] ksys_unshare+0x438/0xab0 [ 269.642659][ T8176] ? __pfx_ksys_unshare+0x10/0x10 [ 269.642696][ T8176] ? xfd_validate_state+0x129/0x190 [ 269.642732][ T8176] __x64_sys_unshare+0x31/0x40 [ 269.642770][ T8176] do_syscall_64+0x10b/0xf80 [ 269.642811][ T8176] ? clear_bhb_loop+0x40/0x90 [ 269.642842][ T8176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.642870][ T8176] RIP: 0033:0x7f561b59ce59 [ 269.642905][ T8176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.642930][ T8176] RSP: 002b:00007f561c396028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 269.642954][ T8176] RAX: ffffffffffffffda RBX: 00007f561b815fa0 RCX: 00007f561b59ce59 [ 269.642971][ T8176] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 269.642987][ T8176] RBP: 00007f561b632d6f R08: 0000000000000000 R09: 0000000000000000 [ 269.643002][ T8176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.643018][ T8176] R13: 00007f561b816038 R14: 00007f561b815fa0 R15: 00007ffeb97e51d8 [ 269.643050][ T8176] [ 272.227526][ T8155] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 273.645365][ T8212] Process accounting resumed [ 273.958147][ T8230] program syz.0.478 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 273.999549][ T8230] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 274.616949][ T8240] netlink: 16 bytes leftover after parsing attributes in process `syz.1.480'. [ 276.565733][ T8263] can: request_module (can-proto-0) failed. [ 279.831980][ T8299] netlink: 342 bytes leftover after parsing attributes in process `syz.1.490'. [ 279.936087][ T8310] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5628] was attempted by ""[8310] [ 283.978278][ T8342] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 284.747447][ T8359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.503'. [ 284.808141][ T8360] netlink: 'syz.2.503': attribute type 1 has an invalid length. [ 284.848638][ T8360] netlink: 51465 bytes leftover after parsing attributes in process `syz.2.503'. [ 285.752587][ T8347] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 286.370228][ T8378] Process accounting resumed [ 292.957069][ T8470] netlink: 342 bytes leftover after parsing attributes in process `syz.1.532'. [ 293.327630][ T8473] sysfs_service_op_show: Client not running :-5: [ 295.406346][ T8502] nvme_fabrics: missing parameter 'transport=%s' [ 295.406389][ T8502] nvme_fabrics: missing parameter 'nqn=%s' [ 296.816974][ T8520] FAULT_INJECTION: forcing a failure. [ 296.816974][ T8520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 296.993262][ T8520] CPU: 0 UID: 0 PID: 8520 Comm: syz.0.541 Tainted: G L syzkaller #0 PREEMPT(full) [ 296.993301][ T8520] Tainted: [L]=SOFTLOCKUP [ 296.993309][ T8520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 296.993323][ T8520] Call Trace: [ 296.993331][ T8520] [ 296.993340][ T8520] dump_stack_lvl+0x100/0x190 [ 296.993371][ T8520] should_fail_ex.cold+0x5/0xa [ 296.993401][ T8520] _copy_from_user+0x2e/0xd0 [ 296.993438][ T8520] __do_sys_capset+0x1ec/0x460 [ 296.993473][ T8520] ? __pfx___do_sys_capset+0x10/0x10 [ 296.993505][ T8520] ? __x64_sys_futex+0x358/0x4d0 [ 296.993550][ T8520] ? rcu_is_watching+0x12/0xc0 [ 296.993582][ T8520] do_syscall_64+0x10b/0xf80 [ 296.993637][ T8520] ? clear_bhb_loop+0x40/0x90 [ 296.993675][ T8520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.993699][ T8520] RIP: 0033:0x7fb11919ce59 [ 296.993718][ T8520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.993741][ T8520] RSP: 002b:00007fb11a03c028 EFLAGS: 00000246 ORIG_RAX: 000000000000007e [ 296.993764][ T8520] RAX: ffffffffffffffda RBX: 00007fb119416090 RCX: 00007fb11919ce59 [ 296.993785][ T8520] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 296.993799][ T8520] RBP: 00007fb119232d6f R08: 0000000000000000 R09: 0000000000000000 [ 296.993819][ T8520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.993833][ T8520] R13: 00007fb119416128 R14: 00007fb119416090 R15: 00007ffcf29f5cc8 [ 296.993863][ T8520] [ 299.698181][ T8549] random: crng reseeded on system resumption [ 303.222442][ T5645] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 303.979262][ T8570] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 304.728201][ T5636] Bluetooth: hci1: unexpected event 0x2c length: 1022 > 17 [ 305.279322][ T5645] Bluetooth: hci3: command 0x0406 tx timeout [ 305.774504][ T8590] Process accounting paused [ 306.949005][ T8638] FAULT_INJECTION: forcing a failure. [ 306.949005][ T8638] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 307.019006][ T8630] FAULT_INJECTION: forcing a failure. [ 307.019006][ T8630] name failslab, interval 1, probability 0, space 0, times 0 [ 307.101126][ T8630] CPU: 0 UID: 0 PID: 8630 Comm: syz.0.558 Tainted: G L syzkaller #0 PREEMPT(full) [ 307.101165][ T8630] Tainted: [L]=SOFTLOCKUP [ 307.101173][ T8630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 307.101188][ T8630] Call Trace: [ 307.101197][ T8630] [ 307.101207][ T8630] dump_stack_lvl+0x100/0x190 [ 307.101239][ T8630] should_fail_ex.cold+0x5/0xa [ 307.101270][ T8630] should_failslab+0xc2/0x120 [ 307.101299][ T8630] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 307.101339][ T8630] ? sk_prot_alloc+0x60/0x2a0 [ 307.101380][ T8630] sk_prot_alloc+0x60/0x2a0 [ 307.101418][ T8630] sk_alloc+0x36/0xe80 [ 307.101445][ T8630] inet_create+0x3a0/0x1060 [ 307.101472][ T8630] ? inet_create+0x94/0x1060 [ 307.101503][ T8630] __sock_create+0x339/0x860 [ 307.101546][ T8630] __sys_socket+0x14d/0x260 [ 307.101592][ T8630] ? __pfx___sys_socket+0x10/0x10 [ 307.101630][ T8630] ? ksys_write+0x1ac/0x250 [ 307.101666][ T8630] __x64_sys_socket+0x72/0xb0 [ 307.101687][ T8630] ? lockdep_hardirqs_on+0x78/0x100 [ 307.101726][ T8630] do_syscall_64+0x10b/0xf80 [ 307.101764][ T8630] ? clear_bhb_loop+0x40/0x90 [ 307.101793][ T8630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.101818][ T8630] RIP: 0033:0x7fb11919ce59 [ 307.101838][ T8630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.101862][ T8630] RSP: 002b:00007fb11a05d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 307.101885][ T8630] RAX: ffffffffffffffda RBX: 00007fb119415fa0 RCX: 00007fb11919ce59 [ 307.101901][ T8630] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 307.101915][ T8630] RBP: 00007fb119232d6f R08: 0000000000000000 R09: 0000000000000000 [ 307.101930][ T8630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.101944][ T8630] R13: 00007fb119416038 R14: 00007fb119415fa0 R15: 00007ffcf29f5cc8 [ 307.101975][ T8630] [ 307.652028][ T8638] CPU: 0 UID: 0 PID: 8638 Comm: syz.1.559 Tainted: G L syzkaller #0 PREEMPT(full) [ 307.652066][ T8638] Tainted: [L]=SOFTLOCKUP [ 307.652074][ T8638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 307.652088][ T8638] Call Trace: [ 307.652095][ T8638] [ 307.652104][ T8638] dump_stack_lvl+0x100/0x190 [ 307.652134][ T8638] should_fail_ex.cold+0x5/0xa [ 307.652158][ T8638] ? prepare_alloc_pages+0x16d/0x5f0 [ 307.652190][ T8638] should_fail_alloc_page+0xeb/0x140 [ 307.652219][ T8638] prepare_alloc_pages+0x1f0/0x5f0 [ 307.652252][ T8638] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 307.652293][ T8638] ? mark_held_locks+0x40/0x70 [ 307.652314][ T8638] ? irqentry_exit+0x24d/0x7e0 [ 307.652349][ T8638] ? lockdep_hardirqs_on+0x78/0x100 [ 307.652384][ T8638] ? irqentry_exit+0x24d/0x7e0 [ 307.652420][ T8638] ? folios_put_refs+0x716/0xa90 [ 307.652446][ T8638] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 307.652489][ T8638] ? __lock_acquire+0x4a5/0x2630 [ 307.652510][ T8638] ? __lock_acquire+0x4a5/0x2630 [ 307.652530][ T8638] ? css_rstat_updated+0x1ce/0x5a0 [ 307.652574][ T8638] ? lock_acquire+0x1b1/0x370 [ 307.652595][ T8638] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 307.652630][ T8638] ? policy_nodemask+0xed/0x4f0 [ 307.652659][ T8638] alloc_pages_mpol+0x1fb/0x540 [ 307.652687][ T8638] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 307.652717][ T8638] ? __lock_acquire+0x4a5/0x2630 [ 307.652741][ T8638] folio_alloc_mpol_noprof+0x36/0x260 [ 307.652774][ T8638] vma_alloc_folio_noprof+0xed/0x1d0 [ 307.652805][ T8638] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 307.652844][ T8638] do_anonymous_page+0xb46/0x2050 [ 307.652880][ T8638] ? rcu_read_unlock+0x2d/0xb0 [ 307.652921][ T8638] __handle_mm_fault+0x1d2c/0x2a00 [ 307.652967][ T8638] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 307.652997][ T8638] ? __pfx___handle_mm_fault+0x10/0x10 [ 307.653033][ T8638] ? pte_offset_map_lock+0x174/0x320 [ 307.653060][ T8638] ? find_held_lock+0x2b/0x80 [ 307.653098][ T8638] ? follow_page_pte+0x4d0/0x13f0 [ 307.653131][ T8638] handle_mm_fault+0x36d/0xa20 [ 307.653171][ T8638] __get_user_pages+0x1178/0x32a0 [ 307.653210][ T8638] ? __pfx___get_user_pages+0x10/0x10 [ 307.653246][ T8638] populate_vma_page_range+0x267/0x3f0 [ 307.653278][ T8638] ? __pfx_populate_vma_page_range+0x10/0x10 [ 307.653308][ T8638] ? __pfx_find_vma_intersection+0x10/0x10 [ 307.653337][ T8638] ? do_mmap+0x93f/0x12f0 [ 307.653368][ T8638] __mm_populate+0x107/0x3a0 [ 307.653399][ T8638] ? __pfx___mm_populate+0x10/0x10 [ 307.653430][ T8638] ? up_write+0x28c/0x4f0 [ 307.653458][ T8638] vm_mmap_pgoff+0x37f/0x470 [ 307.653490][ T8638] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 307.653521][ T8638] ? do_futex+0x192/0x350 [ 307.653546][ T8638] ? __pfx_do_futex+0x10/0x10 [ 307.653568][ T8638] ? lockdep_hardirqs_on+0x78/0x100 [ 307.653603][ T8638] ? irqentry_exit+0x24d/0x7e0 [ 307.653641][ T8638] ksys_mmap_pgoff+0xe4/0x610 [ 307.653669][ T8638] ? __x64_sys_futex+0x358/0x4d0 [ 307.653695][ T8638] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 307.653721][ T8638] ? xfd_validate_state+0x129/0x190 [ 307.653751][ T8638] __x64_sys_mmap+0x125/0x190 [ 307.653779][ T8638] do_syscall_64+0x10b/0xf80 [ 307.653814][ T8638] ? clear_bhb_loop+0x40/0x90 [ 307.653842][ T8638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.653866][ T8638] RIP: 0033:0x7f561b59ce59 [ 307.653884][ T8638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.653906][ T8638] RSP: 002b:00007f561c396028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 307.653927][ T8638] RAX: ffffffffffffffda RBX: 00007f561b815fa0 RCX: 00007f561b59ce59 [ 307.653948][ T8638] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 307.653962][ T8638] RBP: 00007f561b632d6f R08: 0000000000000002 R09: 0000000000008000 [ 307.653975][ T8638] R10: 0000100000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 307.653989][ T8638] R13: 00007f561b816038 R14: 00007f561b815fa0 R15: 00007ffeb97e51d8 [ 307.654018][ T8638] [ 308.167152][ T5645] Bluetooth: hci3: command 0x0406 tx timeout [ 314.182496][ T30] audit: type=1326 audit(4294967359.991:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8725 comm="syz.2.576" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f974259ce59 code=0x0 [ 317.702410][ T8764] netlink: 28 bytes leftover after parsing attributes in process `syz.1.583'. [ 317.907067][ T8768] sd 0:0:1:0: device reset [ 318.779380][ T8781] futex_wake_op: syz.3.587 tries to shift op by -2048; fix this program [ 318.864167][ T8781] futex_wake_op: syz.3.587 tries to shift op by -2048; fix this program [ 319.574863][ T8793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.590'. [ 320.004547][ T8800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.591'. [ 321.744968][ T8827] MTRR 1 not used [ 321.814106][ T30] audit: type=1800 audit(4294967367.625:4): pid=8826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.596" name="dbroot" dev="configfs" ino=24082 res=0 errno=0 [ 323.037964][ T8844] vivid-007: ================= START STATUS ================= [ 323.124601][ T8844] vivid-007: Generate PTS: true [ 323.173868][ T8844] vivid-007: Generate SCR: true [ 323.208535][ T8844] tpg source WxH: 320x240 (Y'CbCr) [ 323.305406][ T8844] tpg field: 1 [ 323.345310][ T8847] net_ratelimit: 48 callbacks suppressed [ 323.345332][ T8847] netlink: ct family unspecified [ 323.450950][ T8844] tpg crop: (0,0)/320x240 [ 323.518368][ T8844] tpg compose: (0,0)/320x240 [ 323.572521][ T8844] tpg colorspace: 8 [ 323.599348][ T8844] tpg transfer function: 0/0 [ 323.628465][ T8844] tpg Y'CbCr encoding: 0/0 [ 323.652067][ T8854] FAULT_INJECTION: forcing a failure. [ 323.652067][ T8854] name failslab, interval 1, probability 0, space 0, times 0 [ 323.676817][ T8844] tpg quantization: 0/0 [ 323.697074][ T8844] tpg RGB range: 0/2 [ 323.715258][ T8844] vivid-007: ================== END STATUS ================== [ 323.757079][ T8854] CPU: 0 UID: 0 PID: 8854 Comm: syz.1.601 Tainted: G L syzkaller #0 PREEMPT(full) [ 323.757127][ T8854] Tainted: [L]=SOFTLOCKUP [ 323.757136][ T8854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 323.757150][ T8854] Call Trace: [ 323.757158][ T8854] [ 323.757167][ T8854] dump_stack_lvl+0x100/0x190 [ 323.757198][ T8854] should_fail_ex.cold+0x5/0xa [ 323.757228][ T8854] should_failslab+0xc2/0x120 [ 323.757257][ T8854] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 323.757295][ T8854] ? __kernfs_new_node+0xd2/0x9f0 [ 323.757328][ T8854] __kernfs_new_node+0xd2/0x9f0 [ 323.757358][ T8854] ? __pfx___kernfs_new_node+0x10/0x10 [ 323.757392][ T8854] ? find_held_lock+0x2b/0x80 [ 323.757423][ T8854] ? kernfs_root+0xee/0x2a0 [ 323.757447][ T8854] ? kernfs_root+0xee/0x2a0 [ 323.757480][ T8854] kernfs_new_node+0x11b/0x1a0 [ 323.757515][ T8854] __kernfs_create_file+0x53/0x350 [ 323.757556][ T8854] sysfs_add_file_mode_ns+0x207/0x3c0 [ 323.757588][ T8854] internal_create_group+0x593/0xf40 [ 323.757623][ T8854] ? __pfx_internal_create_group+0x10/0x10 [ 323.757656][ T8854] ? kernfs_create_link+0x1bd/0x240 [ 323.757697][ T8854] internal_create_groups+0x9d/0x150 [ 323.757728][ T8854] device_add+0x71a/0x1950 [ 323.757763][ T8854] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 323.757798][ T8854] ? __pfx_device_add+0x10/0x10 [ 323.757831][ T8854] ? lockdep_init_map_type+0x5c/0x250 [ 323.757856][ T8854] ? __init_waitqueue_head+0xca/0x150 [ 323.757891][ T8854] netdev_register_kobject+0x1a9/0x3d0 [ 323.757932][ T8854] register_netdevice+0x151c/0x24b0 [ 323.757977][ T8854] ? __pfx_register_netdevice+0x10/0x10 [ 323.758015][ T8854] ? __pfx_loopback_net_init+0x10/0x10 [ 323.758052][ T8854] register_netdev+0x34/0x50 [ 323.758090][ T8854] loopback_net_init+0x7a/0x170 [ 323.758129][ T8854] ? __pfx_loopback_net_init+0x10/0x10 [ 323.758163][ T8854] ops_init+0x1e2/0x5f0 [ 323.758197][ T8854] setup_net+0x118/0x3a0 [ 323.758228][ T8854] ? __pfx_setup_net+0x10/0x10 [ 323.758258][ T8854] ? mutex_init_lockdep+0xf1/0x120 [ 323.758288][ T8854] copy_net_ns+0x46f/0x7c0 [ 323.758323][ T8854] create_new_namespaces+0x3ea/0xac0 [ 323.758362][ T8854] unshare_nsproxy_namespaces+0xf2/0x220 [ 323.758396][ T8854] ksys_unshare+0x438/0xab0 [ 323.758440][ T8854] ? __pfx_ksys_unshare+0x10/0x10 [ 323.758474][ T8854] ? xfd_validate_state+0x129/0x190 [ 323.758509][ T8854] __x64_sys_unshare+0x31/0x40 [ 323.758545][ T8854] do_syscall_64+0x10b/0xf80 [ 323.758582][ T8854] ? clear_bhb_loop+0x40/0x90 [ 323.758612][ T8854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.758636][ T8854] RIP: 0033:0x7f561b59ce59 [ 323.758656][ T8854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.758679][ T8854] RSP: 002b:00007f561c375028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 323.758702][ T8854] RAX: ffffffffffffffda RBX: 00007f561b816090 RCX: 00007f561b59ce59 [ 323.758718][ T8854] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 323.758732][ T8854] RBP: 00007f561b632d6f R08: 0000000000000000 R09: 0000000000000000 [ 323.758746][ T8854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.758760][ T8854] R13: 00007f561b816128 R14: 00007f561b816090 R15: 00007ffeb97e51d8 [ 323.758795][ T8854] [ 325.378598][ T5636] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 326.061621][ T8874] random: crng reseeded on system resumption [ 327.424824][ T5636] Bluetooth: hci3: command 0x0406 tx timeout [ 328.113256][ T8912] netlink: 62 bytes leftover after parsing attributes in process `syz.0.611'. [ 328.819068][ T8928] ubi0: attaching mtd0 [ 328.976402][ T8928] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 329.073730][ T8928] eraseblock attaching information dump: [ 329.148646][ T8928] ec 1 [ 329.197644][ T8928] pnum 0 [ 329.253542][ T8928] lnum 0 [ 329.285536][ T8928] scrub 0 [ 329.336282][ T8928] sqnum 1 [ 329.373625][ T8928] Volume identifier header dump: [ 329.442150][ T8928] magic 55424921 [ 329.507847][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 329.524263][ T8928] version 1 [ 329.540961][ T8928] vol_type 1 [ 329.572728][ T8928] copy_flag 0 [ 329.598254][ T8928] compat 5 [ 329.621155][ T8928] vol_id 2147479551 [ 329.652194][ T8928] lnum 0 [ 329.675251][ T8928] data_size 0 [ 329.702585][ T8928] used_ebs 0 [ 329.726699][ T8928] data_pad 0 [ 329.750560][ T8928] sqnum 1 [ 329.791102][ T8928] hdr_crc 65b3bd2d [ 329.826594][ T8928] Volume identifier header hexdump: [ 330.115876][ T8928] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 333.153932][ T8983] random: crng reseeded on system resumption [ 338.133075][ T9008] Process accounting resumed [ 344.770290][ T9145] kfence: disabled [ 346.826908][ T9138] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 348.098535][ T9177] netlink: 338 bytes leftover after parsing attributes in process `syz.1.656'. [ 349.490508][ T9193] ubi0: attaching mtd0 [ 349.847095][ T9193] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 350.008035][ T9193] eraseblock attaching information dump: [ 350.120439][ T9193] ec 1 [ 350.220776][ T9193] pnum 0 [ 350.326757][ T9193] lnum 0 [ 350.428636][ T9193] scrub 0 [ 350.522955][ T9193] sqnum 1 [ 350.578185][ T9193] Volume identifier header dump: [ 350.745735][ T9193] magic 55424921 [ 350.838892][ T9193] version 1 [ 350.942352][ T9193] vol_type 1 [ 351.080862][ T9193] copy_flag 0 [ 351.190147][ T9193] compat 5 [ 351.300574][ T9193] vol_id 2147479551 [ 351.365577][ T9193] lnum 0 [ 351.466491][ T9193] data_size 0 [ 351.539545][ T9193] used_ebs 0 [ 351.667577][ T9193] data_pad 0 [ 351.762191][ T9193] sqnum 1 [ 351.851283][ T9193] hdr_crc 65b3bd2d [ 352.003110][ T9193] Volume identifier header hexdump: [ 352.498683][ T9193] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 355.358390][ T9237] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 361.206050][ T9354] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 361.382689][ T9366] random: crng reseeded on system resumption [ 362.796737][ T9367] hub 1-0:1.0: USB hub found [ 362.897644][ T9367] hub 1-0:1.0: 1 port detected [ 362.912989][ T9383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.691'. [ 363.013370][ T9358] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 367.130685][ T9419] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 367.460197][ T5636] Bluetooth: hci3: unexpected event 0x10 length: 124 > 1 [ 367.464062][ T50] Bluetooth: hci3: hardware error 0x00 [ 368.153121][ T9417] Process accounting paused [ 368.861127][ T9462] FAULT_INJECTION: forcing a failure. [ 368.861127][ T9462] name failslab, interval 1, probability 0, space 0, times 0 [ 368.945288][ T9462] CPU: 0 UID: 0 PID: 9462 Comm: syz.0.705 Tainted: G L syzkaller #0 PREEMPT(full) [ 368.945324][ T9462] Tainted: [L]=SOFTLOCKUP [ 368.945332][ T9462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 368.945346][ T9462] Call Trace: [ 368.945353][ T9462] [ 368.945362][ T9462] dump_stack_lvl+0x100/0x190 [ 368.945392][ T9462] should_fail_ex.cold+0x5/0xa [ 368.945420][ T9462] should_failslab+0xc2/0x120 [ 368.945447][ T9462] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 368.945484][ T9462] ? __pmd_alloc+0xbf/0x950 [ 368.945519][ T9462] __pmd_alloc+0xbf/0x950 [ 368.945556][ T9462] __handle_mm_fault+0xa9c/0x2a00 [ 368.945597][ T9462] ? mt_find+0x45e/0x8e0 [ 368.945621][ T9462] ? __pfx___handle_mm_fault+0x10/0x10 [ 368.945654][ T9462] ? __pfx_mt_find+0x10/0x10 [ 368.945698][ T9462] handle_mm_fault+0x36d/0xa20 [ 368.945738][ T9462] __get_user_pages+0x1178/0x32a0 [ 368.945778][ T9462] ? __pfx___get_user_pages+0x10/0x10 [ 368.945815][ T9462] populate_vma_page_range+0x267/0x3f0 [ 368.945862][ T9462] ? __pfx_populate_vma_page_range+0x10/0x10 [ 368.945893][ T9462] ? __pfx_find_vma_intersection+0x10/0x10 [ 368.945934][ T9462] ? do_mmap+0x93f/0x12f0 [ 368.945967][ T9462] __mm_populate+0x107/0x3a0 [ 368.945999][ T9462] ? __pfx___mm_populate+0x10/0x10 [ 368.946033][ T9462] ? up_write+0x28c/0x4f0 [ 368.946063][ T9462] vm_mmap_pgoff+0x37f/0x470 [ 368.946097][ T9462] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 368.946136][ T9462] ? do_futex+0x192/0x350 [ 368.946163][ T9462] ? __pfx_do_futex+0x10/0x10 [ 368.946195][ T9462] ksys_mmap_pgoff+0xe4/0x610 [ 368.946224][ T9462] ? __x64_sys_futex+0x358/0x4d0 [ 368.946251][ T9462] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 368.946282][ T9462] ? xfd_validate_state+0x129/0x190 [ 368.946307][ T9462] ? ksys_write+0x1ac/0x250 [ 368.946340][ T9462] __x64_sys_mmap+0x125/0x190 [ 368.946371][ T9462] do_syscall_64+0x10b/0xf80 [ 368.946408][ T9462] ? clear_bhb_loop+0x40/0x90 [ 368.946438][ T9462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.946462][ T9462] RIP: 0033:0x7fb11919ce59 [ 368.946481][ T9462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.946504][ T9462] RSP: 002b:00007fb11a05d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 368.946526][ T9462] RAX: ffffffffffffffda RBX: 00007fb119415fa0 RCX: 00007fb11919ce59 [ 368.946542][ T9462] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000 [ 368.946556][ T9462] RBP: 00007fb119232d6f R08: 0000000000000007 R09: 0000000000028000 [ 368.946570][ T9462] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 368.946584][ T9462] R13: 00007fb119416038 R14: 00007fb119415fa0 R15: 00007ffcf29f5cc8 [ 368.946614][ T9462] [ 369.747278][ T50] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 373.822944][ T9492] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 376.107443][ T9528] futex_wake_op: syz.3.718 tries to shift op by -1; fix this program [ 378.926007][ T9555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.723'. [ 379.833125][ C0] sd 0:0:1:0: [sda] tag#1649 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 379.845054][ C0] sd 0:0:1:0: [sda] tag#1649 CDB: Read(6) 08 00 00 00 09 00 00 00 00 00 00 00 [ 379.919917][ T9601] FAULT_INJECTION: forcing a failure. [ 379.919917][ T9601] name fail_futex, interval 1, probability 0, space 0, times 0 [ 380.020946][ T9601] CPU: 0 UID: 0 PID: 9601 Comm: syz.3.732 Tainted: G L syzkaller #0 PREEMPT(full) [ 380.020983][ T9601] Tainted: [L]=SOFTLOCKUP [ 380.020992][ T9601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 380.021006][ T9601] Call Trace: [ 380.021014][ T9601] [ 380.021022][ T9601] dump_stack_lvl+0x100/0x190 [ 380.021054][ T9601] should_fail_ex.cold+0x5/0xa [ 380.021084][ T9601] get_futex_key+0x1d2/0x1510 [ 380.021116][ T9601] ? __pfx_get_futex_key+0x10/0x10 [ 380.021149][ T9601] futex_wait_setup+0x83/0x510 [ 380.021188][ T9601] __futex_wait+0x19f/0x300 [ 380.021223][ T9601] ? __pfx___futex_wait+0x10/0x10 [ 380.021261][ T9601] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 380.021303][ T9601] ? __pfx_futex_wake_mark+0x10/0x10 [ 380.021339][ T9601] ? futex_hash+0x2ad/0x370 [ 380.021363][ T9601] ? futex_hash+0x141/0x370 [ 380.021391][ T9601] futex_wait+0xe6/0x370 [ 380.021424][ T9601] ? __pfx_futex_wait+0x10/0x10 [ 380.021471][ T9601] do_futex+0x1ef/0x350 [ 380.021497][ T9601] ? __pfx_do_futex+0x10/0x10 [ 380.021530][ T9601] __x64_sys_futex+0x34f/0x4d0 [ 380.021558][ T9601] ? fdget_pos+0x2c0/0x380 [ 380.021589][ T9601] ? __pfx___x64_sys_futex+0x10/0x10 [ 380.021615][ T9601] ? ksys_read+0x1ac/0x250 [ 380.021641][ T9601] ? __pfx_ksys_read+0x10/0x10 [ 380.021670][ T9601] ? rcu_is_watching+0x12/0xc0 [ 380.021702][ T9601] do_syscall_64+0x10b/0xf80 [ 380.021739][ T9601] ? clear_bhb_loop+0x40/0x90 [ 380.021768][ T9601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.021792][ T9601] RIP: 0033:0x7fef6d59ce59 [ 380.021811][ T9601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.021834][ T9601] RSP: 002b:00007fef6e3700e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 380.021857][ T9601] RAX: ffffffffffffffda RBX: 00007fef6d816188 RCX: 00007fef6d59ce59 [ 380.021872][ T9601] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fef6d816188 [ 380.021886][ T9601] RBP: 00007fef6d816180 R08: 0000000000000000 R09: 0000000000000000 [ 380.021900][ T9601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.021913][ T9601] R13: 00007fef6d816218 R14: 00007ffd9a7d97b0 R15: 00007ffd9a7d9898 [ 380.021942][ T9601] [ 385.317898][ T9614] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 387.048650][ T9620] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 388.242395][ T9651] FAULT_INJECTION: forcing a failure. [ 388.242395][ T9651] name failslab, interval 1, probability 0, space 0, times 0 [ 388.335292][ T9651] CPU: 0 UID: 0 PID: 9651 Comm: syz.3.745 Tainted: G L syzkaller #0 PREEMPT(full) [ 388.335580][ T9651] Tainted: [L]=SOFTLOCKUP [ 388.335589][ T9651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 388.335603][ T9651] Call Trace: [ 388.335612][ T9651] [ 388.335621][ T9651] dump_stack_lvl+0x100/0x190 [ 388.335650][ T9651] should_fail_ex.cold+0x5/0xa [ 388.335679][ T9651] should_failslab+0xc2/0x120 [ 388.335706][ T9651] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 388.335748][ T9651] ? __d_alloc+0x34/0xa40 [ 388.335778][ T9651] ? lockdep_init_map_type+0x5c/0x250 [ 388.335807][ T9651] __d_alloc+0x34/0xa40 [ 388.335845][ T9651] d_alloc_pseudo+0x1c/0xc0 [ 388.335898][ T9651] alloc_file_pseudo+0xcf/0x230 [ 388.335935][ T9651] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 388.335970][ T9651] ? alloc_fd+0x476/0x790 [ 388.336003][ T9651] sock_alloc_file+0x50/0x210 [ 388.336034][ T9651] __sys_socket+0x1c0/0x260 [ 388.336070][ T9651] ? __pfx___sys_socket+0x10/0x10 [ 388.336116][ T9651] __x64_sys_socket+0x72/0xb0 [ 388.336141][ T9651] ? lockdep_hardirqs_on+0x78/0x100 [ 388.336178][ T9651] do_syscall_64+0x10b/0xf80 [ 388.336213][ T9651] ? clear_bhb_loop+0x40/0x90 [ 388.336241][ T9651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.336276][ T9651] RIP: 0033:0x7fef6d59ce59 [ 388.336295][ T9651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.336319][ T9651] RSP: 002b:00007fef6e3b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 388.336342][ T9651] RAX: ffffffffffffffda RBX: 00007fef6d815fa0 RCX: 00007fef6d59ce59 [ 388.336358][ T9651] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 388.336372][ T9651] RBP: 00007fef6d632d6f R08: 0000000000000000 R09: 0000000000000000 [ 388.336386][ T9651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.336400][ T9651] R13: 00007fef6d816038 R14: 00007fef6d815fa0 R15: 00007ffd9a7d9898 [ 388.336429][ T9651] [ 393.519122][ T9735] FAULT_INJECTION: forcing a failure. [ 393.519122][ T9735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.785212][ T9735] CPU: 0 UID: 0 PID: 9735 Comm: syz.1.763 Tainted: G L syzkaller #0 PREEMPT(full) [ 393.785249][ T9735] Tainted: [L]=SOFTLOCKUP [ 393.785257][ T9735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 393.785271][ T9735] Call Trace: [ 393.785278][ T9735] [ 393.785287][ T9735] dump_stack_lvl+0x100/0x190 [ 393.785317][ T9735] should_fail_ex.cold+0x5/0xa [ 393.785346][ T9735] _copy_from_user+0x2e/0xd0 [ 393.785371][ T9735] core_sys_select+0x472/0xbb0 [ 393.785405][ T9735] ? __pfx_core_sys_select+0x10/0x10 [ 393.785431][ T9735] ? get_pid_task+0xfc/0x250 [ 393.785471][ T9735] ? get_pid_task+0x106/0x250 [ 393.785523][ T9735] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 393.785551][ T9735] ? kernel_write+0x5e3/0x6c0 [ 393.785577][ T9735] ? __fget_files+0x215/0x3d0 [ 393.785612][ T9735] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 393.785640][ T9735] kern_select+0x1d0/0x280 [ 393.785669][ T9735] ? __pfx_kern_select+0x10/0x10 [ 393.785700][ T9735] ? __pfx_ksys_write+0x10/0x10 [ 393.785731][ T9735] __x64_sys_select+0xbd/0x160 [ 393.785757][ T9735] ? do_syscall_64+0x90/0xf80 [ 393.785793][ T9735] ? lockdep_hardirqs_on+0x78/0x100 [ 393.785834][ T9735] do_syscall_64+0x10b/0xf80 [ 393.785869][ T9735] ? clear_bhb_loop+0x40/0x90 [ 393.785897][ T9735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.785920][ T9735] RIP: 0033:0x7f561b59ce59 [ 393.785939][ T9735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.785962][ T9735] RSP: 002b:00007f56197f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 393.785984][ T9735] RAX: ffffffffffffffda RBX: 00007f561b816180 RCX: 00007f561b59ce59 [ 393.786000][ T9735] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 393.786013][ T9735] RBP: 00007f56197f6090 R08: 0000000000000000 R09: 0000000000000000 [ 393.786027][ T9735] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 393.786041][ T9735] R13: 00007f561b816218 R14: 00007f561b816180 R15: 00007ffeb97e51d8 [ 393.786070][ T9735] [ 394.665006][ T9747] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 394.776025][ T9747] ep_00: uevent: failed to send synthetic uevent: -22 [ 394.895390][ T9745] FAULT_INJECTION: forcing a failure. [ 394.895390][ T9745] name failslab, interval 1, probability 0, space 0, times 0 [ 394.987939][ T9745] CPU: 0 UID: 0 PID: 9745 Comm: syz.1.765 Tainted: G L syzkaller #0 PREEMPT(full) [ 394.987976][ T9745] Tainted: [L]=SOFTLOCKUP [ 394.987984][ T9745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 394.987998][ T9745] Call Trace: [ 394.988006][ T9745] [ 394.988014][ T9745] dump_stack_lvl+0x100/0x190 [ 394.988044][ T9745] should_fail_ex.cold+0x5/0xa [ 394.988073][ T9745] should_failslab+0xc2/0x120 [ 394.988100][ T9745] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 394.988138][ T9745] ? mas_preallocate+0x1105/0x14a0 [ 394.988170][ T9745] mas_preallocate+0x1105/0x14a0 [ 394.988200][ T9745] ? __pfx_mas_preallocate+0x10/0x10 [ 394.988234][ T9745] ? anon_vma_name+0x5a/0x250 [ 394.988269][ T9745] __split_vma+0x33d/0xd90 [ 394.988308][ T9745] ? __pfx___split_vma+0x10/0x10 [ 394.988357][ T9745] vma_modify+0x12ad/0x25c0 [ 394.988398][ T9745] ? __lock_acquire+0x3c0/0x2630 [ 394.988423][ T9745] ? __pfx_vma_modify+0x10/0x10 [ 394.988457][ T9745] ? register_lock_class+0x40/0x560 [ 394.988497][ T9745] vma_modify_policy+0x238/0x300 [ 394.988545][ T9745] ? __pfx_vma_modify_policy+0x10/0x10 [ 394.988605][ T9745] mbind_range+0x175/0x550 [ 394.988640][ T9745] do_mbind+0x7dc/0xfd0 [ 394.988677][ T9745] ? __might_fault+0xc5/0x140 [ 394.988713][ T9745] ? __pfx_do_mbind+0x10/0x10 [ 394.988750][ T9745] ? _copy_from_user+0x59/0xd0 [ 394.988781][ T9745] ? __pfx_get_nodes+0x10/0x10 [ 394.988811][ T9745] kernel_mbind+0x1b7/0x200 [ 394.988846][ T9745] ? __pfx_kernel_mbind+0x10/0x10 [ 394.988880][ T9745] ? rcu_is_watching+0x12/0xc0 [ 394.988912][ T9745] do_syscall_64+0x10b/0xf80 [ 394.988948][ T9745] ? clear_bhb_loop+0x40/0x90 [ 394.988981][ T9745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.989004][ T9745] RIP: 0033:0x7f561b59ce59 [ 394.989023][ T9745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.989045][ T9745] RSP: 002b:00007f561c375028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 394.989067][ T9745] RAX: ffffffffffffffda RBX: 00007f561b816090 RCX: 00007f561b59ce59 [ 394.989082][ T9745] RDX: 0000000000008003 RSI: 0000000000800605 RDI: 0000000000000000 [ 394.989096][ T9745] RBP: 00007f561b632d6f R08: 0000000000000003 R09: 0000000000000003 [ 394.989110][ T9745] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 394.989124][ T9745] R13: 00007f561b816128 R14: 00007f561b816090 R15: 00007ffeb97e51d8 [ 394.989153][ T9745] [ 396.178060][ T9779] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 396.314367][ T9780] netlink: 330 bytes leftover after parsing attributes in process `syz.2.772'. [ 397.783031][ T9793] FAULT_INJECTION: forcing a failure. [ 397.783031][ T9793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 397.862722][ T9793] CPU: 0 UID: 0 PID: 9793 Comm: syz.3.774 Tainted: G L syzkaller #0 PREEMPT(full) [ 397.862760][ T9793] Tainted: [L]=SOFTLOCKUP [ 397.862768][ T9793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 397.862783][ T9793] Call Trace: [ 397.862790][ T9793] [ 397.862799][ T9793] dump_stack_lvl+0x100/0x190 [ 397.862828][ T9793] should_fail_ex.cold+0x5/0xa [ 397.862856][ T9793] core_sys_select+0x5d1/0xbb0 [ 397.862890][ T9793] ? __pfx_core_sys_select+0x10/0x10 [ 397.862916][ T9793] ? get_pid_task+0xfc/0x250 [ 397.862956][ T9793] ? get_pid_task+0x106/0x250 [ 397.863012][ T9793] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 397.863034][ T9793] ? kernel_write+0x5e3/0x6c0 [ 397.863060][ T9793] ? __fget_files+0x215/0x3d0 [ 397.863088][ T9793] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 397.863114][ T9793] kern_select+0x1d0/0x280 [ 397.863143][ T9793] ? __pfx_kern_select+0x10/0x10 [ 397.863173][ T9793] ? __pfx_ksys_write+0x10/0x10 [ 397.863203][ T9793] __x64_sys_select+0xbd/0x160 [ 397.863229][ T9793] ? do_syscall_64+0x90/0xf80 [ 397.863264][ T9793] ? lockdep_hardirqs_on+0x78/0x100 [ 397.863298][ T9793] do_syscall_64+0x10b/0xf80 [ 397.863333][ T9793] ? clear_bhb_loop+0x40/0x90 [ 397.863445][ T9793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.863473][ T9793] RIP: 0033:0x7fef6d59ce59 [ 397.863492][ T9793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.863516][ T9793] RSP: 002b:00007fef6e370028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 397.863538][ T9793] RAX: ffffffffffffffda RBX: 00007fef6d816180 RCX: 00007fef6d59ce59 [ 397.863553][ T9793] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 397.863566][ T9793] RBP: 00007fef6e370090 R08: 0000000000000000 R09: 0000000000000000 [ 397.863580][ T9793] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 397.863594][ T9793] R13: 00007fef6d816218 R14: 00007fef6d816180 R15: 00007ffd9a7d9898 [ 397.863628][ T9793] [ 398.265599][ T9786] Process accounting resumed [ 399.739381][ T9801] Process accounting resumed [ 400.727332][ T9836] zswap: compressor not available [ 401.219983][ T9847] can: request_module (can-proto-0) failed. [ 402.205620][ T9860] random: crng reseeded on system resumption [ 403.183471][ T9849] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 403.326507][ T9877] zram0: detected capacity change from 16 to 0 [ 403.442605][ T9877] zram: Removed device: zram0 [ 406.000506][ T9926] ovs_: entered promiscuous mode [ 406.277730][ T9940] FAULT_INJECTION: forcing a failure. [ 406.277730][ T9940] name failslab, interval 1, probability 0, space 0, times 0 [ 406.353568][ T9940] CPU: 0 UID: 0 PID: 9940 Comm: syz.1.803 Tainted: G L syzkaller #0 PREEMPT(full) [ 406.353606][ T9940] Tainted: [L]=SOFTLOCKUP [ 406.353614][ T9940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 406.353628][ T9940] Call Trace: [ 406.353636][ T9940] [ 406.353645][ T9940] dump_stack_lvl+0x100/0x190 [ 406.353675][ T9940] should_fail_ex.cold+0x5/0xa [ 406.353705][ T9940] should_failslab+0xc2/0x120 [ 406.353734][ T9940] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 406.353773][ T9940] ? __d_alloc+0x34/0xa40 [ 406.353809][ T9940] ? __asan_memset+0x23/0x50 [ 406.353850][ T9940] __d_alloc+0x34/0xa40 [ 406.353886][ T9940] d_alloc_pseudo+0x1c/0xc0 [ 406.353910][ T9940] alloc_file_pseudo+0xcf/0x230 [ 406.354087][ T9940] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 406.354126][ T9940] ? alloc_fd+0x476/0x790 [ 406.354166][ T9940] sock_alloc_file+0x50/0x210 [ 406.354394][ T9940] __sys_socket+0x1c0/0x260 [ 406.354437][ T9940] ? __pfx___sys_socket+0x10/0x10 [ 406.354474][ T9940] ? ksys_write+0x1ac/0x250 [ 406.354509][ T9940] __x64_sys_socket+0x72/0xb0 [ 406.354529][ T9940] ? lockdep_hardirqs_on+0x78/0x100 [ 406.354567][ T9940] do_syscall_64+0x10b/0xf80 [ 406.354603][ T9940] ? clear_bhb_loop+0x40/0x90 [ 406.354633][ T9940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.354657][ T9940] RIP: 0033:0x7f561b59ce59 [ 406.354677][ T9940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.354700][ T9940] RSP: 002b:00007f561c396028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 406.354723][ T9940] RAX: ffffffffffffffda RBX: 00007f561b815fa0 RCX: 00007f561b59ce59 [ 406.354739][ T9940] RDX: 0000000000000106 RSI: 0000000000000001 RDI: 0000000000000002 [ 406.354753][ T9940] RBP: 00007f561b632d6f R08: 0000000000000000 R09: 0000000000000000 [ 406.354767][ T9940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 406.354781][ T9940] R13: 00007f561b816038 R14: 00007f561b815fa0 R15: 00007ffeb97e51d8 [ 406.354811][ T9940] [ 407.077658][ T30] audit: type=1800 audit(4294967452.897:5): pid=9946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.804" name="version" dev="configfs" ino=29416 res=0 errno=0 [ 409.959745][ T30] audit: type=1804 audit(4294967455.829:6): pid=9982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.814" name="/newroot/196/file0" dev="tmpfs" ino=1077 res=1 errno=0 [ 410.714707][ T9995] random: crng reseeded on system resumption [ 412.114470][T10006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.819'. [ 414.484016][T10027] Process accounting resumed [ 415.165177][ T30] audit: type=1804 audit(4294967461.031:7): pid=10065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.832" name="/newroot/204/file0" dev="tmpfs" ino=1093 res=1 errno=0 [ 416.116256][T10079] futex_wake_op: syz.3.836 tries to shift op by -2048; fix this program [ 416.713404][T10059] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 417.793938][T10088] zswap: compressor 000 not available [ 421.162796][T10130] random: crng reseeded on system resumption [ 422.206652][T10147] netlink: 28 bytes leftover after parsing attributes in process `syz.0.852'. [ 422.216850][T10147] batadv0: entered promiscuous mode [ 422.256132][T10147] netlink: 28 bytes leftover after parsing attributes in process `syz.0.852'. [ 423.026493][T10165] FAULT_INJECTION: forcing a failure. [ 423.026493][T10165] name failslab, interval 1, probability 0, space 0, times 0 [ 423.368087][T10165] CPU: 0 UID: 0 PID: 10165 Comm: syz.0.857 Tainted: G L syzkaller #0 PREEMPT(full) [ 423.368125][T10165] Tainted: [L]=SOFTLOCKUP [ 423.368134][T10165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 423.368148][T10165] Call Trace: [ 423.368155][T10165] [ 423.368163][T10165] dump_stack_lvl+0x100/0x190 [ 423.368201][T10165] should_fail_ex.cold+0x5/0xa [ 423.368231][T10165] should_failslab+0xc2/0x120 [ 423.368258][T10165] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 423.368297][T10165] ? sock_alloc_inode+0x26/0x290 [ 423.368327][T10165] ? unix_create1+0x517/0x700 [ 423.368366][T10165] ? __pfx_sock_alloc_inode+0x10/0x10 [ 423.368399][T10165] sock_alloc_inode+0x26/0x290 [ 423.368434][T10165] ? __pfx_sock_alloc_inode+0x10/0x10 [ 423.368471][T10165] alloc_inode+0x68/0x250 [ 423.368515][T10165] sock_alloc+0x44/0x280 [ 423.368543][T10165] ? security_socket_create+0x7f/0x250 [ 423.368584][T10165] __sock_create+0xc2/0x860 [ 423.368624][T10165] __sys_socketpair+0x261/0x5b0 [ 423.368648][T10165] ? __pfx___sys_socketpair+0x10/0x10 [ 423.368670][T10165] ? xfd_validate_state+0x129/0x190 [ 423.368702][T10165] __x64_sys_socketpair+0x96/0x100 [ 423.368724][T10165] ? lockdep_hardirqs_on+0x78/0x100 [ 423.368760][T10165] do_syscall_64+0x10b/0xf80 [ 423.368795][T10165] ? clear_bhb_loop+0x40/0x90 [ 423.368823][T10165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.368846][T10165] RIP: 0033:0x7fb11919ce59 [ 423.368864][T10165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.369141][T10165] RSP: 002b:00007fb11a05d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 423.369172][T10165] RAX: ffffffffffffffda RBX: 00007fb119415fa0 RCX: 00007fb11919ce59 [ 423.369187][T10165] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 423.369201][T10165] RBP: 00007fb119232d6f R08: 0000000000000000 R09: 0000000000000000 [ 423.369214][T10165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 423.369228][T10165] R13: 00007fb119416038 R14: 00007fb119415fa0 R15: 00007ffcf29f5cc8 [ 423.369258][T10165] [ 424.227943][T10182] ================================================================== [ 424.238166][T10182] BUG: KASAN: use-after-free in kvm_xen_shared_info_init+0x3c6/0x440 [ 424.247095][T10182] Read of size 4 at addr ffff88804c76d900 by task syz.1.860/10182 [ 424.258446][T10182] [ 424.261698][T10182] CPU: 0 UID: 0 PID: 10182 Comm: syz.1.860 Tainted: G L syzkaller #0 PREEMPT(full) [ 424.261736][T10182] Tainted: [L]=SOFTLOCKUP [ 424.261746][T10182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 424.261761][T10182] Call Trace: [ 424.261770][T10182] [ 424.261780][T10182] dump_stack_lvl+0x100/0x190 [ 424.261809][T10182] print_report+0x13d/0x4b0 [ 424.261845][T10182] ? __virt_addr_valid+0x239/0x430 [ 424.261886][T10182] ? kvm_xen_shared_info_init+0x3c6/0x440 [ 424.261926][T10182] kasan_report+0xdf/0x1d0 [ 424.261954][T10182] ? kvm_xen_shared_info_init+0x3c6/0x440 [ 424.261997][T10182] kvm_xen_shared_info_init+0x3c6/0x440 [ 424.262039][T10182] kvm_xen_hvm_set_attr+0xcef/0x16a0 [ 424.262062][T10182] ? __might_fault+0xc5/0x140 [ 424.262100][T10182] ? __pfx_kvm_xen_hvm_set_attr+0x10/0x10 [ 424.262128][T10182] kvm_arch_vm_ioctl+0x2a0/0x18d0 [ 424.262173][T10182] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 424.262210][T10182] ? __update_page_owner_handle+0x3c7/0x550 [ 424.262241][T10182] ? __lock_acquire+0x4a5/0x2630 [ 424.262267][T10182] ? __lock_acquire+0x4a5/0x2630 [ 424.262292][T10182] ? __lock_acquire+0x4a5/0x2630 [ 424.262317][T10182] ? __lock_acquire+0x4a5/0x2630 [ 424.262348][T10182] ? is_bpf_text_address+0x8a/0x1a0 [ 424.262382][T10182] ? bpf_ksym_find+0x124/0x1c0 [ 424.262407][T10182] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 424.262442][T10182] ? is_bpf_text_address+0x94/0x1a0 [ 424.262476][T10182] ? kernel_text_address+0x8d/0x100 [ 424.262500][T10182] ? __pfx_widen_string+0x10/0x10 [ 424.262529][T10182] ? __kernel_text_address+0xd/0x30 [ 424.262553][T10182] ? unwind_get_return_address+0x59/0xa0 [ 424.262586][T10182] ? arch_stack_walk+0xa6/0xf0 [ 424.262619][T10182] ? tomoyo_path_number_perm+0x46d/0x580 [ 424.262647][T10182] ? stack_trace_save+0x8e/0xc0 [ 424.262679][T10182] ? __pfx_stack_trace_save+0x10/0x10 [ 424.262713][T10182] ? stack_depot_save_flags+0x27/0x9d0 [ 424.262742][T10182] ? __lock_acquire+0x4a5/0x2630 [ 424.262764][T10182] ? tomoyo_path_number_perm+0x46d/0x580 [ 424.262791][T10182] ? kasan_save_stack+0x3f/0x50 [ 424.262813][T10182] ? kasan_save_stack+0x30/0x50 [ 424.262835][T10182] ? kasan_save_track+0x14/0x30 [ 424.262857][T10182] ? kasan_save_free_info+0x3b/0x70 [ 424.262893][T10182] kvm_vm_ioctl+0x1564/0x4050 [ 424.262931][T10182] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 424.262973][T10182] ? kasan_quarantine_put+0x104/0x240 [ 424.262995][T10182] ? lockdep_hardirqs_on+0x78/0x100 [ 424.263034][T10182] ? find_held_lock+0x2b/0x80 [ 424.263064][T10182] ? tomoyo_path_number_perm+0x28f/0x580 [ 424.263090][T10182] ? tomoyo_path_number_perm+0x28f/0x580 [ 424.263119][T10182] ? tomoyo_path_number_perm+0x188/0x580 [ 424.263154][T10182] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 424.263181][T10182] ? futex_wait+0x11e/0x370 [ 424.263217][T10182] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 424.263253][T10182] ? do_vfs_ioctl+0x226/0x13e0 [ 424.263276][T10182] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 424.263304][T10182] ? find_held_lock+0x2b/0x80 [ 424.263334][T10182] ? __fget_files+0x215/0x3d0 [ 424.263361][T10182] ? hook_file_ioctl_common+0x149/0x410 [ 424.263391][T10182] ? __fget_files+0x21f/0x3d0 [ 424.263421][T10182] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 424.263453][T10182] __x64_sys_ioctl+0x18e/0x210 [ 424.263478][T10182] do_syscall_64+0x10b/0xf80 [ 424.263515][T10182] ? clear_bhb_loop+0x40/0x90 [ 424.263542][T10182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.263567][T10182] RIP: 0033:0x7f561b59ce59 [ 424.263587][T10182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.263612][T10182] RSP: 002b:00007f561c375028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 424.263643][T10182] RAX: ffffffffffffffda RBX: 00007f561b816090 RCX: 00007f561b59ce59 [ 424.263659][T10182] RDX: 0000000000000004 RSI: 000000004048aec9 RDI: 0000000000000003 [ 424.263674][T10182] RBP: 00007f561b632d6f R08: 0000000000000000 R09: 0000000000000000 [ 424.263689][T10182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 424.263703][T10182] R13: 00007f561b816128 R14: 00007f561b816090 R15: 00007ffeb97e51d8 [ 424.263727][T10182] [ 424.263735][T10182] [ 424.765296][T10182] The buggy address belongs to the physical page: [ 424.773791][T10182] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x4c76d [ 424.783807][T10182] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 424.793130][T10182] raw: 00fff00000000000 ffffea0001499108 ffff8880b84412f0 0000000000000000 [ 424.802731][T10182] raw: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 424.812832][T10182] page dumped because: kasan: bad access detected [ 424.820524][T10182] page_owner tracks the page as freed [ 424.826611][T10182] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 10182, tgid 10179 (syz.1.860), ts 424112873623, free_ts 424227877438 [ 424.848788][T10182] post_alloc_hook+0xfd/0x120 [ 424.854376][T10182] get_page_from_freelist+0x11a6/0x33b0 [ 424.860324][T10182] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 424.867900][T10182] alloc_pages_mpol+0x1fb/0x540 [ 424.873759][T10182] folio_alloc_mpol_noprof+0x36/0x260 [ 424.880832][T10182] shmem_alloc_folio+0x135/0x160 [ 424.887184][T10182] shmem_alloc_and_add_folio+0x371/0xd40 [ 424.894513][T10182] shmem_get_folio_gfp+0x6ab/0x1900 [ 424.900702][T10182] shmem_fault+0x1f9/0xa20 [ 424.906212][T10182] __do_fault+0x10b/0x440 [ 424.911619][T10182] do_fault+0x2db/0x1750 [ 424.918862][T10182] __handle_mm_fault+0x187d/0x2a00 [ 424.925357][T10182] handle_mm_fault+0x36d/0xa20 [ 424.930592][T10182] __get_user_pages+0x1178/0x32a0 [ 424.936680][T10182] get_user_pages_unlocked+0x1cb/0x7d0 [ 424.943239][T10182] hva_to_pfn+0x871/0xd60 [ 424.949199][T10182] page last free pid 10182 tgid 10179 stack trace: [ 424.956854][T10182] __free_frozen_pages+0x747/0x1040 [ 424.962975][T10182] __folio_put+0x3b4/0x5f0 [ 424.969070][T10182] kvm_release_page_clean+0x1dc/0x250 [ 424.975707][T10182] __kvm_gpc_refresh+0x195d/0x22c0 [ 424.981199][T10182] __kvm_gpc_activate+0x2ab/0x490 [ 424.986961][T10182] kvm_gpc_activate_hva+0x73/0xa0 [ 424.993499][T10182] kvm_xen_hvm_set_attr+0x395/0x16a0 [ 424.999073][T10182] kvm_arch_vm_ioctl+0x2a0/0x18d0 [ 425.005287][T10182] kvm_vm_ioctl+0x1564/0x4050 [ 425.011796][T10182] __x64_sys_ioctl+0x18e/0x210 [ 425.017846][T10182] do_syscall_64+0x10b/0xf80 [ 425.023784][T10182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.030768][T10182] [ 425.034397][T10182] Memory state around the buggy address: [ 425.040843][T10182] ffff88804c76d800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 425.049642][T10182] ffff88804c76d880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 425.059600][T10182] >ffff88804c76d900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 425.069762][T10182] ^ [ 425.077168][T10182] ffff88804c76d980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 425.087537][T10182] ffff88804c76da00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 425.096441][T10182] ================================================================== [ 425.107814][T10182] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 425.116725][T10182] CPU: 0 UID: 0 PID: 10182 Comm: syz.1.860 Tainted: G L syzkaller #0 PREEMPT(full) [ 425.128897][T10182] Tainted: [L]=SOFTLOCKUP [ 425.135011][T10182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 425.148940][T10182] Call Trace: [ 425.152439][T10182] [ 425.156105][T10182] dump_stack_lvl+0x100/0x190 [ 425.162061][T10182] vpanic+0x552/0x970 [ 425.166682][T10182] ? __pfx_vpanic+0x10/0x10 [ 425.171930][T10182] ? __pfx_vprintk_emit+0x10/0x10 [ 425.177566][T10182] ? kvm_xen_shared_info_init+0x3c6/0x440 [ 425.184663][T10182] panic+0xd1/0xe0 [ 425.190701][T10182] ? __pfx_panic+0x10/0x10 [ 425.196595][T10182] ? end_report.part.0+0x23/0x90 [ 425.203150][T10182] ? rcu_is_watching+0x12/0xc0 [ 425.209089][T10182] ? end_report.part.0+0x23/0x90 [ 425.214861][T10182] check_panic_on_warn.cold+0x19/0x34 [ 425.222636][T10182] end_report.part.0+0x3a/0x90 [ 425.229123][T10182] kasan_report.cold+0xe/0x18 [ 425.235169][T10182] ? kvm_xen_shared_info_init+0x3c6/0x440 [ 425.243788][T10182] kvm_xen_shared_info_init+0x3c6/0x440 [ 425.250446][T10182] kvm_xen_hvm_set_attr+0xcef/0x16a0 [ 425.256204][T10182] ? __might_fault+0xc5/0x140 [ 425.261416][T10182] ? __pfx_kvm_xen_hvm_set_attr+0x10/0x10 [ 425.268543][T10182] kvm_arch_vm_ioctl+0x2a0/0x18d0 [ 425.275784][T10182] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 425.283717][T10182] ? __update_page_owner_handle+0x3c7/0x550 [ 425.291565][T10182] ? __lock_acquire+0x4a5/0x2630 [ 425.297338][T10182] ? __lock_acquire+0x4a5/0x2630 [ 425.303114][T10182] ? __lock_acquire+0x4a5/0x2630 [ 425.310692][T10182] ? __lock_acquire+0x4a5/0x2630 [ 425.316085][T10182] ? is_bpf_text_address+0x8a/0x1a0 [ 425.323440][T10182] ? bpf_ksym_find+0x124/0x1c0 [ 425.329503][T10182] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 425.337420][T10182] ? is_bpf_text_address+0x94/0x1a0 [ 425.343656][T10182] ? kernel_text_address+0x8d/0x100 [ 425.349275][T10182] ? __pfx_widen_string+0x10/0x10 [ 425.356039][T10182] ? __kernel_text_address+0xd/0x30 [ 425.364348][T10182] ? unwind_get_return_address+0x59/0xa0 [ 425.372071][T10182] ? arch_stack_walk+0xa6/0xf0 [ 425.378293][T10182] ? tomoyo_path_number_perm+0x46d/0x580 [ 425.387037][T10182] ? stack_trace_save+0x8e/0xc0 [ 425.392813][T10182] ? __pfx_stack_trace_save+0x10/0x10 [ 425.401216][T10182] ? stack_depot_save_flags+0x27/0x9d0 [ 425.408422][T10182] ? __lock_acquire+0x4a5/0x2630 [ 425.414711][T10182] ? tomoyo_path_number_perm+0x46d/0x580 [ 425.422121][T10182] ? kasan_save_stack+0x3f/0x50 [ 425.427762][T10182] ? kasan_save_stack+0x30/0x50 [ 425.435588][T10182] ? kasan_save_track+0x14/0x30 [ 425.443115][T10182] ? kasan_save_free_info+0x3b/0x70 [ 425.448614][T10182] kvm_vm_ioctl+0x1564/0x4050 [ 425.455162][T10182] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 425.461323][T10182] ? kasan_quarantine_put+0x104/0x240 [ 425.467877][T10182] ? lockdep_hardirqs_on+0x78/0x100 [ 425.476700][T10182] ? find_held_lock+0x2b/0x80 [ 425.482921][T10182] ? tomoyo_path_number_perm+0x28f/0x580 [ 425.489888][T10182] ? tomoyo_path_number_perm+0x28f/0x580 [ 425.496825][T10182] ? tomoyo_path_number_perm+0x188/0x580 [ 425.503392][T10182] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 425.512816][T10182] ? futex_wait+0x11e/0x370 [ 425.520336][T10182] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 425.528267][T10182] ? do_vfs_ioctl+0x226/0x13e0 [ 425.534527][T10182] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 425.539795][T10182] ? find_held_lock+0x2b/0x80 [ 425.545458][T10182] ? __fget_files+0x215/0x3d0 [ 425.552775][T10182] ? hook_file_ioctl_common+0x149/0x410 [ 425.558540][T10182] ? __fget_files+0x21f/0x3d0 [ 425.565779][T10182] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 425.572965][T10182] __x64_sys_ioctl+0x18e/0x210 [ 425.579035][T10182] do_syscall_64+0x10b/0xf80 [ 425.584838][T10182] ? clear_bhb_loop+0x40/0x90 [ 425.591312][T10182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.598908][T10182] RIP: 0033:0x7f561b59ce59 [ 425.605123][T10182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.630839][T10182] RSP: 002b:00007f561c375028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 425.640471][T10182] RAX: ffffffffffffffda RBX: 00007f561b816090 RCX: 00007f561b59ce59 [ 425.650315][T10182] RDX: 0000000000000004 RSI: 000000004048aec9 RDI: 0000000000000003 [ 425.660065][T10182] RBP: 00007f561b632d6f R08: 0000000000000000 R09: 0000000000000000 [ 425.669730][T10182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.679781][T10182] R13: 00007f561b816128 R14: 00007f561b816090 R15: 00007ffeb97e51d8 [ 425.688863][T10182] [ 425.693436][T10182] Kernel Offset: disabled [ 425.698880][T10182] Rebooting in 86400 seconds..