last executing test programs: 13.502914786s ago: executing program 1 (id=2192): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) io_uring_setup$auto(0x9, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_CREATE_VM(r2, 0xc048aeca, 0x0) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/oom_adj\x00', 0x980, 0x0) read$auto(r4, 0x0, 0x4) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) ioctl$auto_TUNSETLINK(r0, 0x400454cd, 0x0) recvmsg$auto(0xffffffffffffffff, 0x0, 0xffff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) 13.234349367s ago: executing program 0 (id=2193): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x11, 0x2, 0x300) r1 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r1, 0x0, 0x2, 0x100) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000240)) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) preadv$auto(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000001c0), 0xff}, 0x5, 0x0, 0x4) r2 = socket(0x2, 0x1, 0x106) setsockopt$auto(r2, 0x6, 0x6, &(0x7f0000000700)='\b\x00\x00\x00\xe4\x15\rq\tW\x9d=\x1e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe7\x9b\xdd\x1cp\x19\xa0\x9dHN\xb4\x7f\x7f\xa0\xeaI\xa1\x0f/\xfc\x8e\xf9\xa6x\xa0\xdeo\t\x826Xe(\x0e\xffr\r\x8d\xefh\xdbG\x8b\xde\xfd$\'\a ]\x91YP\x94\xd0\xd0\x02\x10\xb1_z\xa2Ql\x8c\x91\xca4\x118\xcd\xc3\x97\x03J:\x1e\xe5f\xcaq\xdf`\x01;\xf9{D2\xc9WV)\xa3JH\xf5\xf9\x16\xac\xa4\x155\x80\x01I\xd9\xa5\xd0\xf1\xbd\xa0\xa4\xa5q\xc6F\x940\x00\xf8\xef\xa4\xfd\xd2z\xf5\x91z<\x9f\xf0\x8f.\x81\x84\xed J&\x8f\xd9\xab-\xf8\xd0\xd3\xcea\x91pM0\xcd\x18\xb4\xe0u\x99\b\x19I\x87\xbb/1\xf9\x84\xbf\xcc\x0e5\xba\x9a\xba\xfb\xde\x16kU\x97\xec\xc6\xe15u\xd5\x94D\xab\xec.K\xfbD\x0f\xc16g\xf3`\x03O\xae]B@\x0e!n\x8dy\x97\xaa\xa7\x12\xbbyD\xd3\x82\xb3\x9a\x88L\x1b\x8b\xfb\xe7\xc8\xa8\xf66\x16\xe1\x04T\'/8a\xeb\xe6\xe6+!\x97\b\xc8;P\f~\x88\x02\x91 \xd3\x93\xa7.xCNA\xcax)\xb4\xdf\xfe/\xe40\xc6y\x13\x8d\bfJ\x85\x05\xf5\x9f\xea\x15\xe9{3\xcc\xac\x94w.%\x11_\xd3\xe2\xe9\x8c\x9c\xb1\xfb\xf9o\xf4\xc9\x88\xbd\x90p\xae\x8ap\xb9\xa4\xb7\xadv&\x999\xdf\x83\xae\xff\xa5\xfc\xd3\xc0!\xdc\xc4\xa0\xce8:\xeb~\x9b_F\x8f\xcaY\xa9\x89@\x99)\x1c\x8b\xc5\xb7\x10\xd1\xc8`\xb6\x8f\x136\xc3\x1e\xbd\x8e$\"\xbfJ\n\xd6\x0f\x9d\xcbr\xb7\xa8\xed\r+$\x94\x9b\xfe8\x8ao\xf8\xba\'i\xf1\xd3\x9c7P\xe3\x14\xa2\x1b-\xbb\xae\xe3P#:$\xaf\aB\xd2\x95\x18\\r\xd1\x80\x9fD\xd5\xaba\xc8\xd4\xd1\xb6\xf5\xb9\x16\xbb\xbc\xd6\xb3+\xdf\xfc\x89\x1f\xe9M|\x0e?g\x18\v\"', 0x4000007) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0xffffffffffffffff, 0x4008550d, 0xffffffffffffffff) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) r4 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r4, &(0x7f0000000000)=' ', 0x1) settimeofday$auto(&(0x7f0000000180)={0x6ddb8b07, 0x9}, 0x0) write$auto(r3, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87xP\x11\xd1li0o\x85\x90QM\xd6wgF\xf1x\xb3:c\tP\x03\x84\x97\x99\x83\x95\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9) mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00', 0xfffe) writev$auto(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x10001}, 0xc) 12.323342942s ago: executing program 1 (id=2195): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101202, 0x0) acct$auto(&(0x7f0000000000)='/dev/sequencer2\x00') shmget$auto(0x0, 0x7b, 0x100) openat$dir(0xffffffffffffff9c, 0x0, 0x400, 0x2) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x100842, 0x0) socket(0x10, 0x2, 0x0) setsockopt$auto(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x1) connect$auto(r1, 0x0, 0x54) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x81, 0x734f, 0x37, 0x10001, 0x1ffde, 0x5, 0x3, 0x20000002, 0xd, 0x3, 0x800000001, 0x2091, 0x83b1, 0x9, 0x6, 0x6, 0x81, 0x4, 0x1cd7, 0x8, 0x2000, 0x203, 0x0, 0x1, 0xfffffffffffffffa, 0x9, 0x0, 0x2, 0x101, [0x40, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xa04, 0x0, 0xfffffffffffffffc, 0x3, 0x4, 0x1ff, 0x0, 0x9, 0x0, 0x40000000, 0x2, 0x5, 0x0, 0x2, 0x7fb, 0x0, 0x1, 0x2, 0x3ffffffffffffc, 0x0, 0x0, 0x0, 0x7fffffff, 0x45, 0x8, 0x0, 0x3c3, 0x3a42, 0x2, 0x0, 0xfffffffffffffffd]}, 0x1fe, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x13, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) r2 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x0, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x0, 0x0) r3 = openat$auto_transactions_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) read$auto_transactions_fops_(r3, &(0x7f0000000080)=""/18, 0x12) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000080)={0x0, 0xfc2}, 0x2, &(0x7f0000000100), 0x3, 0x2}, 0x10000}, 0xffffffff, 0x4008) 11.408102335s ago: executing program 0 (id=2199): pread64$auto(0xffffffffffffffff, 0x0, 0x4, 0x3a) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(r1, 0x84, 0xa, 0x0, &(0x7f0000000000)=0x7ffe) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rBBJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x99\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xb3\x9c2\xa2\xacyl\xb8\x00Y\xc8\'\xb6S(\xf2\xc2\xf2\x9dP\b\x88J\xae8\xf9>\xb6\xed\xb5/\xc9\xaa\xd8\xc4\xba\x94\xe6jv\x12Bp+\xb8\x16\x19kw\xbc\xbb5-i\xf0\xb9\xac\x9f&6\x89g\x9bh\x83D\xb3\x9fxe\x13\xd1\xb9\xe4\x7f|a\xf2\xdd\xa0\xfb\xfau-7\x94\x13\xa8\xec\xf6~\xacV\xa2S)\xc2\xce\x9b{+\x9ct2>\x98D\t\xc5HP\xc4\xb7\x84\xda*\x82)\x01\xd1\f\x1e\xd4\x8d0K\xa8\xd6\xa1\xa7\xd8VP\xfd\x19\x1cd\x84\xe7\xc6#\x9c\xdd\x88\xf9\x128\x0e\xe2\n\xd3\xd33\x01\xda\x83]\xd6\xd5U\xb0^\xaf\x12\x91\x85\x86\xfd\x95\'f\xb8&\x95\x82 )\xca\x99h\xcf\xfdK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0x8100000041, 0x413e) mremap$auto(0xfffff000, 0x4, 0x6, 0xfffffffffffffffa, 0x1001ff000) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/028/001\x00', 0x400, 0x0) read$auto_usbdev_file_operations_usb(r1, &(0x7f0000000180)=""/38, 0x26) socket(0x2c, 0x80003, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec8\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x0, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/dummy_hcd.2/usb3/authorized\x00', 0x20081, 0x0) write$auto(r3, &(0x7f0000000080)='0\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\x9f\x901\a2\xa2n`\a\xf1y\xb3\"=', 0x2) close_range$auto(0x2, 0x8000, 0x0) 7.892759909s ago: executing program 3 (id=2205): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0xa, 0x5, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/erofs/features/fragments\x00', 0x115801, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000002980)=""/4075, 0xfeb) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01032cb57000fbdbdf250a00000f0600010018"], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) r3 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000040), r1) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000100), 0xffffffffffffffff) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) socket(0x15, 0x5, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r7 = socket(0xa, 0x801, 0x84) getsockopt$auto(r7, 0x84, 0xc, 0x0, 0x0) r8 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) ioctl$auto_I2C_SMBUS(r8, 0x720, 0x0) sendmsg$auto_NBD_CMD_CONNECT(r5, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000040)={0x3c, r6, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}]}, 0x3c}, 0x1, 0x1000000, 0x0, 0x4}, 0x8880) wait4$auto(r4, 0x0, 0x8, 0x0) sendmsg$auto_NCSI_CMD_SET_CHANNEL_MASK(r1, &(0x7f0000002700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000026c0)={&(0x7f00000005c0)={0x5e0, r3, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NCSI_ATTR_DATA={0x2a9, 0x5, "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"}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x1ff}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x1}, @NCSI_ATTR_PACKAGE_LIST={0x4}, @NCSI_ATTR_PACKAGE_LIST={0x309, 0x2, 0x0, 0x1, [@typed={0x8, 0xcb, 0x0, 0x0, @ipv4=@broadcast}, @nested={0xde, 0x87, 0x0, 0x1, [@nested={0x4, 0x168}, @generic="bf85f1b59be6907c1e589e9fffab301cf5377ff7b4439a51ae7c874ef08ff2dc0ab396a6ef68ef2bcd154aac935fa8cc46a735c84e35abf83aa0cb58eed68f7e88d76f255e5e29c1655d203ad0f1ea43f9b899058366d545b32e41bb51b8dc056c623b1f4078cbea8d9c084e95a2c342afc43b597629a4f801a47fd60475e7e08e2b88fa57f770c816a2ab35c1e27bd6f0e9237815ad1a945c29f93ddec4e0d84b8ebbda4ff061455a63e652a956f2c74f12a459bddd278f9694c739f69b3d75804b6d5ee591dd255b598b02bfef6783480d64356310"]}, @generic="a5820c39c52454907dcc7f0b7dcaf8c28e9c79c25be9f40c8c98649621739ef745c6ceb2b57d398b99d48db36be08b94af33d741f5fdc6a9f994133f4f90135b8be40cf12be9b090f9cd96c74a5c6ecd8114a551198ee8433f7d11664d9f42866d99be420a8bd8dc10", @nested={0x1b1, 0x5e, 0x0, 0x1, [@generic="602256ecd2addad48c7b7a1b0108c12d6d41fb873901838e890be5c71b9f8f251e2bb7557b79f881aad4b6f7e81a58d9b19c5ba62e4b7378d644636891ff5aa5051db4ed80e74e0d19cecc2366779cf51ff07924ca8fdb8de4110bebad0aa861730e85ac071c8e9b62fe3e7f866bfd35eb2f258824cb89c464944d9b44ceb30b61d0dd62cf61c504eb17fb4486dce4283ef490bbd463d839ef8fb90cab9f3e3710cbc8a51bdc45a5b99beed991821e6af213b3949a2728d982a392e3e084962076ebee65e95c1afe9e0adcd111422bdd902c8dee9c8fd2784aa372d8b17a40cc3cea", @generic, @generic="b18be3baf048ada1b2d0a8df540348ee226a15c43d976e92ebb250519513ef8c644ecabc0c40add4df48e06c45971138d4d7a66433b4ae226af94fde2f5ff90228df26ccabe5bb68b6387102639f8169b95eabeab7776065c5c61dcfc441274d018c93d59846fc59f0123d141459ef557a652fafdb14f1622dbb7dcbf1c4901f75b95fa8e0d9341e", @generic="a0c7da31c63746ae77b5ecb7fcfe5c9035ab1633b22b4de571b7366f09b922dd0b6491f8624e4671858c13", @nested={0x4, 0x136}, @generic, @typed={0x14, 0x161, 0x0, 0x0, @ipv6=@loopback}]}]}]}, 0x5e0}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) readahead$auto(0xffffffffffffffff, 0x2, 0x10001) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000380), r1) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1) 6.916387478s ago: executing program 3 (id=2206): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10003, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x80064, 0x9) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) linkat$auto(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x3ff) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000200)={0x0, 0x1d, 0x3800, 0x2, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6, 0xfffffffffffffffd}, {0x100, 0x1, 0x55, 0x82, 0x8000004, 0x1a7b870a, 0x76c2, 0x9, 0x100000000}}) io_uring_register$auto(0x2, 0x21, &(0x7f0000000240), 0x1) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) futex$auto(0x0, 0x86, 0x8, 0x0, 0x0, 0x7) mmap$auto(0x0, 0x800, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0xc, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x4020009, 0xe2, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) keyctl$auto_KEYCTL_GET_KEYRING_ID(0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) 6.915531085s ago: executing program 2 (id=2214): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) close$auto(0xffffffffffffffff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(0x0, 0x0, 0x408) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r0, 0x0, 0x6, 0xffffffffffffffff, 0x4, 0x2e) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x100000000000000, 0x400053, 0x9) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008012, 0x3, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x55) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000e80)=""/206, 0xce) madvise$auto(0x0, 0x2003f0, 0x17) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x10000, 0x8402, 0x3, 0x9b70, 0x2, 0x2) 6.177655674s ago: executing program 1 (id=2207): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x8000000) semget$auto(0x0, 0x2e4a, 0x8000) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x9, 0x36ec}, 0x1f4, 0x0) mkdir$auto(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x8cd) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f00000002c0)=@test={0xffffffffffffffff, 0x0, 0x856, 0x189, 0x8, 0x7fff, 0x7fff, 0x10000, 0xc91a, 0x7, 0x5, 0x3, 0x3, 0x3, 0x6}, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x11, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/smaps_rollup\x00', 0x840, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @local}, 0x54) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x805, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) 6.144006862s ago: executing program 0 (id=2208): openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bus/usb/010/001\x00', 0x80d00, 0x0) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, 0x0, 0x100000a3d9) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, 0x0, 0x68182, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, 0x0, 0x80, 0x0) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) socket(0xa, 0x1, 0x84) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto_IOCTL_VMCI_DATAGRAM_RECEIVE(r1, 0x7ac, 0x0) sendmmsg$auto(0x3, 0x0, 0x8, 0xff) clock_nanosleep$auto(0x9, 0x1000000, 0x0, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv6/neigh/ip_vti0/base_reachable_time_ms\x00', 0x202, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x1, 0x2) r2 = open(0x0, 0x12ba7e, 0x144) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xe8202, 0x0) write$auto(r3, &(0x7f0000000300)='9\x00;T\x16\b\x06\x00\x00\x00\xd6\xe4mh|\xea\xa6v4\a?\x88+t\xc5L&FxW#\x8a<[t\x9f{\xb48q0c\x11\xf8X\x0ee\x81\xa0\xbe\xb2#-\x89m\x8a\xb1\xcd\xf1\xfd\x05WC\x9f\xbe]\xf4\xce\xb3\xdd$A\xd6\x99\xd5+I\x18(\xe8\xd3\xc1\xb2)\xf8\xf6\xf5o\x13\xcd\xa7\xe3\x87\x01\xab\xe1\rh\x8d\xbe0J\x1f0Si\xb2\x8b#xG\x80\x11d\xf0\xf3\x9d7\xc8ajQ\x10\a\xe36\xa6', 0xc) fanotify_mark$auto(0x0, 0x55, 0x9, r2, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 5.707653458s ago: executing program 3 (id=2209): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0xa, 0x5, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/erofs/features/fragments\x00', 0x115801, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000002980)=""/4075, 0xfeb) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) r3 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000040), r1) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000100), 0xffffffffffffffff) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) socket(0x15, 0x5, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r7 = socket(0xa, 0x801, 0x84) getsockopt$auto(r7, 0x84, 0xc, 0x0, 0x0) r8 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) ioctl$auto_I2C_SMBUS(r8, 0x720, 0x0) sendmsg$auto_NBD_CMD_CONNECT(r5, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000040)={0x3c, r6, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}]}, 0x3c}, 0x1, 0x1000000, 0x0, 0x4}, 0x8880) wait4$auto(r4, 0x0, 0x8, 0x0) sendmsg$auto_NCSI_CMD_SET_CHANNEL_MASK(r1, &(0x7f0000002700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000026c0)={&(0x7f00000005c0)={0x608, r3, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NCSI_ATTR_DATA={0x2a9, 0x5, "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"}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x1ff}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x1}, @NCSI_ATTR_PACKAGE_LIST={0x4}, @NCSI_ATTR_PACKAGE_LIST={0x331, 0x2, 0x0, 0x1, [@typed={0x8, 0xcb, 0x0, 0x0, @ipv4=@broadcast}, @nested={0xde, 0x87, 0x0, 0x1, [@nested={0x4, 0x168}, @generic="bf85f1b59be6907c1e589e9fffab301cf5377ff7b4439a51ae7c874ef08ff2dc0ab396a6ef68ef2bcd154aac935fa8cc46a735c84e35abf83aa0cb58eed68f7e88d76f255e5e29c1655d203ad0f1ea43f9b899058366d545b32e41bb51b8dc056c623b1f4078cbea8d9c084e95a2c342afc43b597629a4f801a47fd60475e7e08e2b88fa57f770c816a2ab35c1e27bd6f0e9237815ad1a945c29f93ddec4e0d84b8ebbda4ff061455a63e652a956f2c74f12a459bddd278f9694c739f69b3d75804b6d5ee591dd255b598b02bfef6783480d64356310"]}, @generic="a5820c39c52454907dcc7f0b7dcaf8c28e9c79c25be9f40c8c98649621739ef745c6ceb2b57d398b99d48db36be08b94af33d741f5fdc6a9f994133f4f90135b8be40cf12be9b090f9cd96c74a5c6ecd8114a551198ee8433f7d11664d9f42866d99be420a8bd8dc10", @nested={0x1dc, 0x5e, 0x0, 0x1, [@generic="602256ecd2addad48c7b7a1b0108c12d6d41fb873901838e890be5c71b9f8f251e2bb7557b79f881aad4b6f7e81a58d9b19c5ba62e4b7378d644636891ff5aa5051db4ed80e74e0d19cecc2366779cf51ff07924ca8fdb8de4110bebad0aa861730e85ac071c8e9b62fe3e7f866bfd35eb2f258824cb89c464944d9b44ceb30b61d0dd62cf61c504eb17fb4486dce4283ef490bbd463d839ef8fb90cab9f3e3710cbc8a51bdc45a5b99beed991821e6af213b3949a2728d982a392e3e084962076ebee65e95c1afe9e0adcd111422bdd902c8dee9c8fd2784aa372d8b17a40cc3cea", @generic, @generic="b18be3baf048ada1b2d0a8df540348ee226a15c43d976e92ebb250519513ef8c644ecabc0c40add4df48e06c45971138d4d7a66433b4ae226af94fde2f5ff90228df26ccabe5bb68b6387102639f8169b95eabeab7776065c5c61dcfc441274d018c93d59846fc59f0123d141459ef557a652fafdb14f1622dbb7dcbf1c4901f75b95fa8e0d9341e", @generic="a0c7da31c63746ae77b5ecb7fcfe5c9035ab1633b22b4de571b7366f09b922dd0b6491f8624e4671858c1357f32958a01d4c9881eaf142e0531cbd40f16542c631f32da9d6f785c95e858227f469eb313f3356ad85eb", @nested={0x4, 0x136}, @generic, @typed={0x14, 0x161, 0x0, 0x0, @ipv6=@loopback}]}]}]}, 0x608}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) readahead$auto(0xffffffffffffffff, 0x2, 0x10001) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000380), r1) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1) 3.914336658s ago: executing program 2 (id=2210): pread64$auto(0xffffffffffffffff, 0x0, 0x4, 0x3a) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rBBJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x99\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xb3\x9c2\xa2\xacyl\xb8\x00Y\xc8\'\xb6S(\xf2\xc2\xf2\x9dP\b\x88J\xae8\xf9>\xb6\xed\xb5/\xc9\xaa\xd8\xc4\xba\x94\xe6jv\x12Bp+\xb8\x16\x19kw\xbc\xbb5-i\xf0\xb9\xac\x9f&6\x89g\x9bh\x83D\xb3\x9fxe\x13\xd1\xb9\xe4\x7f|a\xf2\xdd\xa0\xfb\xfau-7\x94\x13\xa8\xec\xf6~\xacV\xa2S)\xc2\xce\x9b{+\x9ct2>\x98D\t\xc5HP\xc4\xb7\x84\xda*\x82)\x01\xd1\f\x1e\xd4\x8d0K\xa8\xd6\xa1\xa7\xd8VP\xfd\x19\x1cd\x84\xe7\xc6#\x9c\xdd\x88\xf9\x128\x0e\xe2\n\xd3\xd33\x01\xda\x83]\xd6\xd5U\xb0^\xaf\x12\x91\x85\x86\xfd\x95\'f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rBBJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x99\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xb3\x9c2\xa2\xacyl\xb8\x00Y\xc8\'\xb6S(\xf2\xc2\xf2\x9dP\b\x88J\xae8\xf9>\xb6\xed\xb5/\xc9\xaa\xd8\xc4\xba\x94\xe6jv\x12Bp+\xb8\x16\x19kw\xbc\xbb5-i\xf0\xb9\xac\x9f&6\x89g\x9bh\x83D\xb3\x9fxe\x13\xd1\xb9\xe4\x7f|a\xf2\xdd\xa0\xfb\xfau-7\x94\x13\xa8\xec\xf6~\xacV\xa2S)\xc2\xce\x9b{+\x9ct2>\x98D\t\xc5HP\xc4\xb7\x84\xda*\x82)\x01\xd1\f\x1e\xd4\x8d0K\xa8\xd6\xa1\xa7\xd8VP\xfd\x19\x1cd\x84\xe7\xc6#\x9c\xdd\x88\xf9\x128\x0e\xe2\n\xd3\xd33\x01\xda\x83]\xd6\xd5U\xb0^\xaf\x12\x91\x85\x86\xfd\x95\' 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.510024][ T9453] RSP: 002b:00007f8479150028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 271.510058][ T9453] RAX: ffffffffffffffda RBX: 00007f8478425fa0 RCX: 00007f847819de99 [ 271.510081][ T9453] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000000004 [ 271.510102][ T9453] RBP: 00007f8478233eaf R08: 0000000000000000 R09: 0000000000000000 [ 271.510123][ T9453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.510144][ T9453] R13: 00007f8478426038 R14: 00007f8478425fa0 R15: 00007ffc83dba0b8 [ 271.510187][ T9453] [ 271.942327][ T9459] FAULT_INJECTION: forcing a failure. [ 271.942327][ T9459] name failslab, interval 1, probability 0, space 0, times 0 [ 271.942419][ T9459] CPU: 1 UID: 5 PID: 9459 Comm: syz.1.1103 Tainted: G L syzkaller #0 PREEMPT(full) [ 271.942468][ T9459] Tainted: [L]=SOFTLOCKUP [ 271.942480][ T9459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 271.942500][ T9459] Call Trace: [ 271.942512][ T9459] [ 271.942524][ T9459] dump_stack_lvl+0x100/0x190 [ 271.942573][ T9459] should_fail_ex.cold+0x5/0xa [ 271.942614][ T9459] should_failslab+0xc2/0x120 [ 271.942664][ T9459] __kmalloc_noprof+0xfc/0x820 [ 271.942715][ T9459] ? trace_kmalloc+0xeb/0x110 [ 271.942767][ T9459] ? lsm_blob_alloc+0x68/0x90 [ 271.942829][ T9459] lsm_blob_alloc+0x68/0x90 [ 271.942884][ T9459] security_sk_alloc+0x2d/0x290 [ 271.942925][ T9459] sk_prot_alloc+0x12a/0x2a0 [ 271.942979][ T9459] sk_alloc+0x36/0xe80 [ 271.943024][ T9459] __netlink_create+0x5e/0x2c0 [ 271.943079][ T9459] __netlink_kernel_create+0xed/0x750 [ 271.943117][ T9459] ? __pfx___netlink_kernel_create+0x10/0x10 [ 271.943166][ T9459] fib_net_init+0x2ab/0x440 [ 271.943199][ T9459] ? is_module_address+0x69/0xf0 [ 271.943232][ T9459] ? __pfx_fib_net_init+0x10/0x10 [ 271.943269][ T9459] ? timer_init_key+0x150/0x310 [ 271.943319][ T9459] ? __pfx_nl_fib_input+0x10/0x10 [ 271.943362][ T9459] ? devinet_init_net+0x56c/0x8d0 [ 271.943413][ T9459] ? __pfx_fib_net_init+0x10/0x10 [ 271.943450][ T9459] ops_init+0x1e2/0x5f0 [ 271.943512][ T9459] setup_net+0x118/0x3a0 [ 271.943565][ T9459] ? __pfx_setup_net+0x10/0x10 [ 271.943616][ T9459] ? mutex_init_lockdep+0xf1/0x120 [ 271.943662][ T9459] copy_net_ns+0x46f/0x7c0 [ 271.943728][ T9459] create_new_namespaces+0x3ea/0xac0 [ 271.943774][ T9459] unshare_nsproxy_namespaces+0xf2/0x220 [ 271.943814][ T9459] ksys_unshare+0x438/0xab0 [ 271.943860][ T9459] ? __pfx_ksys_unshare+0x10/0x10 [ 271.943918][ T9459] __x64_sys_unshare+0x31/0x40 [ 271.943960][ T9459] do_syscall_64+0x115/0x840 [ 271.944000][ T9459] ? clear_bhb_loop+0x40/0x90 [ 271.944044][ T9459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.944080][ T9459] RIP: 0033:0x7f5e5ad9de99 [ 271.944109][ T9459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.944143][ T9459] RSP: 002b:00007f5e5bcfc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 271.944176][ T9459] RAX: ffffffffffffffda RBX: 00007f5e5b025fa0 RCX: 00007f5e5ad9de99 [ 271.944199][ T9459] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 271.944221][ T9459] RBP: 00007f5e5ae33eaf R08: 0000000000000000 R09: 0000000000000000 [ 271.944242][ T9459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.944262][ T9459] R13: 00007f5e5b026038 R14: 00007f5e5b025fa0 R15: 00007fff3ae89248 [ 271.944306][ T9459] [ 272.145670][ T9461] netlink: 226 bytes leftover after parsing attributes in process `syz.3.1106'. [ 272.452498][ T9461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1106'. [ 272.494185][ T9461] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 272.533630][ T9461] netlink: 226 bytes leftover after parsing attributes in process `syz.3.1106'. [ 272.622668][ T9461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1106'. [ 272.661419][ T9461] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 272.904229][ T4942] block nbd124: Receive control failed (result -32) [ 273.742449][ T9504] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 274.209921][ T9515] FAULT_INJECTION: forcing a failure. [ 274.209921][ T9515] name failslab, interval 1, probability 0, space 0, times 0 [ 274.257610][ T9515] CPU: 1 UID: 0 PID: 9515 Comm: syz.0.1125 Tainted: G L syzkaller #0 PREEMPT(full) [ 274.257668][ T9515] Tainted: [L]=SOFTLOCKUP [ 274.257680][ T9515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 274.257700][ T9515] Call Trace: [ 274.257711][ T9515] [ 274.257724][ T9515] dump_stack_lvl+0x100/0x190 [ 274.257771][ T9515] should_fail_ex.cold+0x5/0xa [ 274.257811][ T9515] should_failslab+0xc2/0x120 [ 274.257863][ T9515] __kmalloc_noprof+0xfc/0x820 [ 274.257908][ T9515] ? create_ruleset+0x21/0x140 [ 274.257955][ T9515] create_ruleset+0x21/0x140 [ 274.257995][ T9515] landlock_merge_ruleset+0xbb/0x8b0 [ 274.258042][ T9515] ? prepare_creds+0x5ee/0x950 [ 274.258099][ T9515] __do_sys_landlock_restrict_self+0x2af/0x9e0 [ 274.258149][ T9515] do_syscall_64+0x115/0x840 [ 274.258191][ T9515] ? clear_bhb_loop+0x40/0x90 [ 274.258235][ T9515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.258271][ T9515] RIP: 0033:0x7f86ecf9de99 [ 274.258301][ T9515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.258335][ T9515] RSP: 002b:00007f86eddab028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 274.258367][ T9515] RAX: ffffffffffffffda RBX: 00007f86ed226090 RCX: 00007f86ecf9de99 [ 274.258390][ T9515] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000000005 [ 274.258410][ T9515] RBP: 00007f86ed033eaf R08: 0000000000000000 R09: 0000000000000000 [ 274.258432][ T9515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.258452][ T9515] R13: 00007f86ed226128 R14: 00007f86ed226090 R15: 00007fff2836ced8 [ 274.258500][ T9515] [ 275.853654][ T4942] block nbd125: Receive control failed (result -32) [ 275.958198][ T9553] binder: 9552:9553 ioctl 4018620d 9 returned -22 [ 276.921854][ T4942] block nbd126: Receive control failed (result -32) [ 277.517149][ T4942] block nbd127: Receive control failed (result -32) [ 278.015940][ T9603] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input9 [ 279.299586][ T4942] block nbd128: Receive control failed (result -32) [ 280.038644][ T9632] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 280.236682][ T4942] block nbd129: Receive control failed (result -32) [ 281.266215][ T4942] block nbd130: Receive control failed (result -32) [ 281.465847][ T9668] netlink: 226 bytes leftover after parsing attributes in process `syz.2.1167'. [ 281.506540][ T9668] netlink: 226 bytes leftover after parsing attributes in process `syz.2.1167'. [ 284.210719][ T9732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1180'. [ 284.629110][ T9737] FAULT_INJECTION: forcing a failure. [ 284.629110][ T9737] name fail_futex, interval 1, probability 0, space 0, times 0 [ 284.644286][ T9737] CPU: 1 UID: 0 PID: 9737 Comm: syz.0.1180 Tainted: G L syzkaller #0 PREEMPT(full) [ 284.644340][ T9737] Tainted: [L]=SOFTLOCKUP [ 284.644352][ T9737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 284.644373][ T9737] Call Trace: [ 284.644384][ T9737] [ 284.644397][ T9737] dump_stack_lvl+0x100/0x190 [ 284.644443][ T9737] should_fail_ex.cold+0x5/0xa [ 284.644484][ T9737] should_fail_futex+0x4c/0x60 [ 284.644543][ T9737] futex_requeue+0x4ed/0x22e0 [ 284.644606][ T9737] ? __pfx_futex_requeue+0x10/0x10 [ 284.644680][ T9737] ? putname+0xb1/0x110 [ 284.644714][ T9737] ? kmem_cache_free+0x127/0x6b0 [ 284.644756][ T9737] do_futex+0x3ae/0x440 [ 284.644798][ T9737] ? __pfx_do_futex+0x10/0x10 [ 284.644833][ T9737] ? __pfx_do_sys_openat2+0x10/0x10 [ 284.644886][ T9737] ? do_raw_spin_lock+0x128/0x260 [ 284.644929][ T9737] __x64_sys_futex+0x34f/0x4d0 [ 284.644969][ T9737] ? __x64_sys_openat+0x12d/0x210 [ 284.645015][ T9737] ? __pfx___x64_sys_futex+0x10/0x10 [ 284.645069][ T9737] do_syscall_64+0x115/0x840 [ 284.645110][ T9737] ? clear_bhb_loop+0x40/0x90 [ 284.645152][ T9737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.645195][ T9737] RIP: 0033:0x7f86ecf9de99 [ 284.645224][ T9737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.645257][ T9737] RSP: 002b:00007f86edd8a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 284.645288][ T9737] RAX: ffffffffffffffda RBX: 00007f86ed226180 RCX: 00007f86ecf9de99 [ 284.645311][ T9737] RDX: 0000000000000001 RSI: 000000000000000c RDI: 0000200000000080 [ 284.645332][ T9737] RBP: 00007f86ed033eaf R08: 0000000000000000 R09: 00000000fffffffa [ 284.645354][ T9737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.645373][ T9737] R13: 00007f86ed226218 R14: 00007f86ed226180 R15: 00007fff2836ced8 [ 284.645413][ T9737] [ 285.554358][ T4942] block nbd131: Receive control failed (result -32) [ 286.129631][ T9768] FAULT_INJECTION: forcing a failure. [ 286.129631][ T9768] name failslab, interval 1, probability 0, space 0, times 0 [ 286.144348][ T9768] CPU: 1 UID: 0 PID: 9768 Comm: syz.0.1200 Tainted: G L syzkaller #0 PREEMPT(full) [ 286.144404][ T9768] Tainted: [L]=SOFTLOCKUP [ 286.144418][ T9768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 286.144438][ T9768] Call Trace: [ 286.144450][ T9768] [ 286.144463][ T9768] dump_stack_lvl+0x100/0x190 [ 286.144510][ T9768] should_fail_ex.cold+0x5/0xa [ 286.144552][ T9768] should_failslab+0xc2/0x120 [ 286.144605][ T9768] kmem_cache_alloc_noprof+0x91/0x6a0 [ 286.144650][ T9768] ? trace_kmalloc+0xeb/0x110 [ 286.144699][ T9768] ? dup_fd+0x4d/0xd10 [ 286.144741][ T9768] dup_fd+0x4d/0xd10 [ 286.144780][ T9768] ? apparmor_task_alloc+0x2c1/0x3b0 [ 286.144825][ T9768] copy_process+0x2c94/0x8030 [ 286.144892][ T9768] ? __pfx_copy_process+0x10/0x10 [ 286.144947][ T9768] ? _copy_from_user+0x59/0xd0 [ 286.145015][ T9768] kernel_clone+0x176/0x9d0 [ 286.145062][ T9768] ? __pfx_kernel_clone+0x10/0x10 [ 286.145103][ T9768] ? futex_private_hash_put+0x115/0x1c0 [ 286.145160][ T9768] ? __pfx_futex_wake+0x10/0x10 [ 286.145205][ T9768] ? __lock_acquire+0x49f/0x1a40 [ 286.145268][ T9768] __do_sys_clone3+0x214/0x290 [ 286.145313][ T9768] ? __pfx___do_sys_clone3+0x10/0x10 [ 286.145409][ T9768] do_syscall_64+0x115/0x840 [ 286.145453][ T9768] ? clear_bhb_loop+0x40/0x90 [ 286.145497][ T9768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.145535][ T9768] RIP: 0033:0x7f86ecf9de99 [ 286.145566][ T9768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.145600][ T9768] RSP: 002b:00007f86eddcbef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 286.145634][ T9768] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f86ecf9de99 [ 286.145656][ T9768] RDX: 00007f86eddcbf10 RSI: 0000000000000058 RDI: 00007f86eddcbf10 [ 286.145679][ T9768] RBP: 00007f86ed033eaf R08: 0000000000000000 R09: 0000000000000058 [ 286.145699][ T9768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.145719][ T9768] R13: 00007f86ed226038 R14: 00007f86ed225fa0 R15: 00007fff2836ced8 [ 286.145763][ T9768] [ 287.295188][ T4942] block nbd132: Receive control failed (result -32) [ 287.732143][ T9805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1202'. [ 287.760681][ T9803] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1202'. [ 288.528147][ T9825] bonding: unable to delete non-existent ) [ 289.088859][ T9837] FAULT_INJECTION: forcing a failure. [ 289.088859][ T9837] name failslab, interval 1, probability 0, space 0, times 0 [ 289.139109][ T9837] CPU: 0 UID: 0 PID: 9837 Comm: syz.2.1210 Tainted: G L syzkaller #0 PREEMPT(full) [ 289.139160][ T9837] Tainted: [L]=SOFTLOCKUP [ 289.139173][ T9837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 289.139192][ T9837] Call Trace: [ 289.139203][ T9837] [ 289.139216][ T9837] dump_stack_lvl+0x100/0x190 [ 289.139268][ T9837] should_fail_ex.cold+0x5/0xa [ 289.139309][ T9837] should_failslab+0xc2/0x120 [ 289.139356][ T9837] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 289.139398][ T9837] ? __alloc_skb+0x5b7/0x710 [ 289.139432][ T9837] ? __alloc_skb+0x140/0x710 [ 289.139474][ T9837] __alloc_skb+0x140/0x710 [ 289.139509][ T9837] ? __alloc_skb+0x5b7/0x710 [ 289.139546][ T9837] ? __pfx___alloc_skb+0x10/0x10 [ 289.139589][ T9837] ? __lock_acquire+0x49f/0x1a40 [ 289.139644][ T9837] __ip_append_data+0x2c95/0x44d0 [ 289.139688][ T9837] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 289.139738][ T9837] ? ip_dst_mtu_maybe_forward.constprop.0+0x3e9/0x750 [ 289.139789][ T9837] ? __pfx___ip_append_data+0x10/0x10 [ 289.139825][ T9837] ? __lock_acquire+0x49f/0x1a40 [ 289.139873][ T9837] ip_make_skb+0x28b/0x310 [ 289.139908][ T9837] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 289.139942][ T9837] ? __pfx_ip_make_skb+0x10/0x10 [ 289.139996][ T9837] ? udp_sendmsg+0x171c/0x2720 [ 289.140027][ T9837] udp_sendmsg+0x171c/0x2720 [ 289.140068][ T9837] ? __pfx_udp_sendmsg+0x10/0x10 [ 289.140097][ T9837] ? find_held_lock+0x2b/0x80 [ 289.140149][ T9837] ? __pfx___might_resched+0x10/0x10 [ 289.140208][ T9837] ? aa_sk_perm+0x309/0xaa0 [ 289.140251][ T9837] ? __pfx_aa_sk_perm+0x10/0x10 [ 289.140310][ T9837] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 289.140341][ T9837] ? __pfx_udp_sendmsg+0x10/0x10 [ 289.140374][ T9837] inet_sendmsg+0x105/0x140 [ 289.140420][ T9837] sock_write_iter+0x4ea/0x5b0 [ 289.140453][ T9837] ? __pfx_inet_sendmsg+0x10/0x10 [ 289.140498][ T9837] ? __pfx_sock_write_iter+0x10/0x10 [ 289.140553][ T9837] do_iter_readv_writev+0x6f7/0x930 [ 289.140606][ T9837] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 289.140655][ T9837] ? bpf_lsm_file_permission+0x9/0x10 [ 289.140683][ T9837] ? security_file_permission+0x76/0x210 [ 289.140732][ T9837] ? rw_verify_area+0xce/0x6d0 [ 289.140782][ T9837] vfs_writev+0x360/0xdd0 [ 289.140842][ T9837] ? __pfx_vfs_writev+0x10/0x10 [ 289.140902][ T9837] ? __local_bh_enable_ip+0x9e/0x120 [ 289.140959][ T9837] ? __fget_files+0x21f/0x3d0 [ 289.140997][ T9837] ? do_writev+0x28a/0x340 [ 289.141050][ T9837] do_writev+0x28a/0x340 [ 289.141103][ T9837] ? __pfx_do_writev+0x10/0x10 [ 289.141165][ T9837] do_syscall_64+0x115/0x840 [ 289.141207][ T9837] ? clear_bhb_loop+0x40/0x90 [ 289.141250][ T9837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.141298][ T9837] RIP: 0033:0x7f847819de99 [ 289.141327][ T9837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.141361][ T9837] RSP: 002b:00007f8479150028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 289.141412][ T9837] RAX: ffffffffffffffda RBX: 00007f8478425fa0 RCX: 00007f847819de99 [ 289.141435][ T9837] RDX: 0000000000000006 RSI: 00002000000000c0 RDI: 0000000000000003 [ 289.141455][ T9837] RBP: 00007f8478233eaf R08: 0000000000000000 R09: 0000000000000000 [ 289.141476][ T9837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.141495][ T9837] R13: 00007f8478426038 R14: 00007f8478425fa0 R15: 00007ffc83dba0b8 [ 289.141538][ T9837] [ 289.706380][ T9845] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 289.780449][ T9843] FAULT_INJECTION: forcing a failure. [ 289.780449][ T9843] name failslab, interval 1, probability 0, space 0, times 0 [ 289.823597][ T9843] CPU: 0 UID: 0 PID: 9843 Comm: syz.0.1211 Tainted: G L syzkaller #0 PREEMPT(full) [ 289.823652][ T9843] Tainted: [L]=SOFTLOCKUP [ 289.823664][ T9843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 289.823685][ T9843] Call Trace: [ 289.823696][ T9843] [ 289.823708][ T9843] dump_stack_lvl+0x100/0x190 [ 289.823753][ T9843] should_fail_ex.cold+0x5/0xa [ 289.823793][ T9843] should_failslab+0xc2/0x120 [ 289.823849][ T9843] kmem_cache_alloc_noprof+0x91/0x6a0 [ 289.823902][ T9843] ? __kernfs_new_node+0xd2/0xa10 [ 289.823950][ T9843] __kernfs_new_node+0xd2/0xa10 [ 289.823992][ T9843] ? __pfx___kernfs_new_node+0x10/0x10 [ 289.824039][ T9843] ? find_held_lock+0x2b/0x80 [ 289.824083][ T9843] ? kernfs_root+0xee/0x2a0 [ 289.824136][ T9843] ? kernfs_root+0xee/0x2a0 [ 289.824199][ T9843] kernfs_new_node+0x117/0x150 [ 289.824242][ T9843] __kernfs_create_file+0x53/0x350 [ 289.824293][ T9843] sysfs_add_file_mode_ns+0x207/0x3c0 [ 289.824355][ T9843] internal_create_group+0x593/0xfb0 [ 289.824422][ T9843] ? __pfx_internal_create_group+0x10/0x10 [ 289.824484][ T9843] ? kernfs_create_link+0x1bd/0x240 [ 289.824535][ T9843] internal_create_groups+0x9d/0x150 [ 289.824595][ T9843] device_add+0xf60/0x1970 [ 289.824661][ T9843] ? __pfx_device_add+0x10/0x10 [ 289.824720][ T9843] ? lockdep_init_map_type+0x5c/0x250 [ 289.824754][ T9843] ? __init_waitqueue_head+0xca/0x150 [ 289.824801][ T9843] wakeup_source_device_create+0x243/0x2e0 [ 289.824849][ T9843] wakeup_source_sysfs_add+0x1c/0x90 [ 289.824883][ T9843] wakeup_source_register+0x154/0x3e0 [ 289.824936][ T9843] ep_create_wakeup_source+0x13b/0x2e0 [ 289.824976][ T9843] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 289.825022][ T9843] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 289.825063][ T9843] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 289.825115][ T9843] do_epoll_ctl_file+0x1e26/0x36e0 [ 289.825172][ T9843] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 289.825223][ T9843] ? __fget_files+0x215/0x3d0 [ 289.825264][ T9843] ? __fget_files+0x21f/0x3d0 [ 289.825307][ T9843] ? do_epoll_ctl+0xfd/0x1a0 [ 289.825339][ T9843] do_epoll_ctl+0xfd/0x1a0 [ 289.825382][ T9843] ? __pfx_do_epoll_ctl+0x10/0x10 [ 289.825436][ T9843] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 289.825481][ T9843] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 289.825537][ T9843] do_syscall_64+0x115/0x840 [ 289.825580][ T9843] ? clear_bhb_loop+0x40/0x90 [ 289.825625][ T9843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.825662][ T9843] RIP: 0033:0x7f86ecf9de99 [ 289.825693][ T9843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.825728][ T9843] RSP: 002b:00007f86eddcc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 289.825762][ T9843] RAX: ffffffffffffffda RBX: 00007f86ed225fa0 RCX: 00007f86ecf9de99 [ 289.825786][ T9843] RDX: 8000000000000000 RSI: 0000000000000001 RDI: 0000000000000007 [ 289.825912][ T9843] RBP: 00007f86ed033eaf R08: 0000000000000000 R09: 0000000000000000 [ 289.825936][ T9843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.825957][ T9843] R13: 00007f86ed226038 R14: 00007f86ed225fa0 R15: 00007fff2836ced8 [ 289.826004][ T9843] [ 290.262211][ T9847] netlink: 54 bytes leftover after parsing attributes in process `syz.2.1213'. [ 290.415532][ T4942] block nbd133: Receive control failed (result -32) [ 290.765836][ T9855] netlink: 354 bytes leftover after parsing attributes in process `syz.2.1224'. [ 291.560079][ T9880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1222'. [ 291.578442][ T9880] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1222'. [ 292.365204][ T4942] block nbd134: Receive control failed (result -32) [ 293.015908][ T9922] random: crng reseeded on system resumption [ 293.206174][ T9926] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input11 [ 294.798340][ T4942] block nbd135: Receive control failed (result -32) [ 295.213355][ T4942] block nbd136: Receive control failed (result -32) [ 295.240003][ T9959] FAULT_INJECTION: forcing a failure. [ 295.240003][ T9959] name failslab, interval 1, probability 0, space 0, times 0 [ 295.291405][ T9959] CPU: 1 UID: 0 PID: 9959 Comm: syz.2.1241 Tainted: G L syzkaller #0 PREEMPT(full) [ 295.291461][ T9959] Tainted: [L]=SOFTLOCKUP [ 295.291474][ T9959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 295.291495][ T9959] Call Trace: [ 295.291505][ T9959] [ 295.291519][ T9959] dump_stack_lvl+0x100/0x190 [ 295.291564][ T9959] should_fail_ex.cold+0x5/0xa [ 295.291604][ T9959] should_failslab+0xc2/0x120 [ 295.291655][ T9959] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 295.291703][ T9959] ? __alloc_skb+0x5b7/0x710 [ 295.291747][ T9959] ? __alloc_skb+0x140/0x710 [ 295.291799][ T9959] __alloc_skb+0x140/0x710 [ 295.291844][ T9959] ? __alloc_skb+0x5b7/0x710 [ 295.291889][ T9959] ? __pfx___alloc_skb+0x10/0x10 [ 295.291940][ T9959] ? plist_check_list+0x1b8/0x280 [ 295.291978][ T9959] new_skb+0x21/0x230 [ 295.292012][ T9959] aoecmd_cfg+0x210/0x7a0 [ 295.292054][ T9959] ? __pfx_aoecmd_cfg+0x10/0x10 [ 295.292106][ T9959] ? apparmor_file_permission+0x13f/0x1c0 [ 295.292158][ T9959] ? aoechr_write+0x10a/0x120 [ 295.292188][ T9959] aoechr_write+0x10a/0x120 [ 295.292235][ T9959] vfs_write+0x2aa/0x1050 [ 295.292269][ T9959] ? __pfx_aoechr_write+0x10/0x10 [ 295.292307][ T9959] ? __pfx_vfs_write+0x10/0x10 [ 295.292337][ T9959] ? find_held_lock+0x2b/0x80 [ 295.292381][ T9959] ? __fget_files+0x215/0x3d0 [ 295.292413][ T9959] ? __fget_files+0x215/0x3d0 [ 295.292454][ T9959] ? __fget_files+0x21f/0x3d0 [ 295.292499][ T9959] ksys_write+0x12a/0x250 [ 295.292531][ T9959] ? __pfx_ksys_write+0x10/0x10 [ 295.292575][ T9959] do_syscall_64+0x115/0x840 [ 295.292617][ T9959] ? clear_bhb_loop+0x40/0x90 [ 295.292660][ T9959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.292696][ T9959] RIP: 0033:0x7f847819de99 [ 295.292724][ T9959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.292758][ T9959] RSP: 002b:00007f8479150028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 295.292792][ T9959] RAX: ffffffffffffffda RBX: 00007f8478425fa0 RCX: 00007f847819de99 [ 295.292820][ T9959] RDX: 000000000000005a RSI: 0000000000000000 RDI: 0000000000000005 [ 295.292842][ T9959] RBP: 00007f8478233eaf R08: 0000000000000000 R09: 0000000000000000 [ 295.292865][ T9959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.292886][ T9959] R13: 00007f8478426038 R14: 00007f8478425fa0 R15: 00007ffc83dba0b8 [ 295.292932][ T9959] [ 295.536700][ T9959] aoe: skb alloc failure [ 295.641331][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 295.647797][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 296.886074][ T9986] FAULT_INJECTION: forcing a failure. [ 296.886074][ T9986] name fail_futex, interval 1, probability 0, space 0, times 0 [ 296.931371][ T9986] CPU: 1 UID: 0 PID: 9986 Comm: syz.3.1247 Tainted: G L syzkaller #0 PREEMPT(full) [ 296.931427][ T9986] Tainted: [L]=SOFTLOCKUP [ 296.931438][ T9986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 296.931460][ T9986] Call Trace: [ 296.931471][ T9986] [ 296.931484][ T9986] dump_stack_lvl+0x100/0x190 [ 296.931528][ T9986] should_fail_ex.cold+0x5/0xa [ 296.931568][ T9986] get_futex_key+0x1d2/0x14f0 [ 296.931609][ T9986] ? __pfx_get_futex_key+0x10/0x10 [ 296.931659][ T9986] futex_wake+0xf4/0x5e0 [ 296.931711][ T9986] ? __pfx_futex_wake+0x10/0x10 [ 296.931755][ T9986] ? kasan_quarantine_put+0x104/0x240 [ 296.931806][ T9986] ? putname+0xb1/0x110 [ 296.931842][ T9986] ? kmem_cache_free+0x127/0x6b0 [ 296.931888][ T9986] do_futex+0x2b2/0x440 [ 296.931931][ T9986] ? __pfx_do_futex+0x10/0x10 [ 296.931969][ T9986] ? __pfx_do_sys_openat2+0x10/0x10 [ 296.932035][ T9986] __x64_sys_futex+0x34f/0x4d0 [ 296.932079][ T9986] ? __x64_sys_openat+0x12d/0x210 [ 296.932127][ T9986] ? __pfx___x64_sys_futex+0x10/0x10 [ 296.932182][ T9986] do_syscall_64+0x115/0x840 [ 296.932224][ T9986] ? clear_bhb_loop+0x40/0x90 [ 296.932267][ T9986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.932305][ T9986] RIP: 0033:0x7fe45d39de99 [ 296.932335][ T9986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.932370][ T9986] RSP: 002b:00007fe45e2a10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 296.932403][ T9986] RAX: ffffffffffffffda RBX: 00007fe45d625fa8 RCX: 00007fe45d39de99 [ 296.932426][ T9986] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe45d625fac [ 296.932447][ T9986] RBP: 00007fe45d625fa0 R08: 0000000000000001 R09: 0000000000000000 [ 296.932468][ T9986] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 296.932489][ T9986] R13: 00007fe45d626038 R14: 00007fff323e5aa0 R15: 00007fff323e5b88 [ 296.932537][ T9986] [ 297.754521][ T4942] block nbd137: Receive control failed (result -32) [ 298.193874][ T4942] block nbd138: Receive control failed (result -32) [ 298.298668][T10022] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1255'. [ 298.311304][T10022] netlink: 294 bytes leftover after parsing attributes in process `syz.2.1255'. [ 298.972857][ T4942] block nbd139: Receive control failed (result -32) [ 300.659895][ T4942] block nbd140: Receive control failed (result -32) [ 301.185495][ T4942] block nbd141: Receive control failed (result -32) [ 302.127477][ T4942] block nbd142: Receive control failed (result -32) [ 302.874252][ T4942] block nbd143: Receive control failed (result -32) [ 303.498586][T10146] random: crng reseeded on system resumption [ 303.709775][T10151] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input12 [ 304.150474][ T4942] block nbd144: Receive control failed (result -32) [ 305.225037][T10171] input: jJǸ-9%vJ86 as /devices/virtual/input/input13 [ 305.370889][ T4942] block nbd145: Receive control failed (result -32) [ 305.966865][T10206] random: crng reseeded on system resumption [ 306.157206][T10216] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input14 [ 306.764797][ T4942] block nbd146: Receive control failed (result -32) [ 307.377666][ T4942] block nbd147: Receive control failed (result -32) [ 308.505804][ T4942] block nbd148: Receive control failed (result -32) [ 309.065755][T10290] random: crng reseeded on system resumption [ 309.279722][ T4942] block nbd149: Receive control failed (result -32) [ 309.293941][T10294] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input15 [ 309.612516][T10276] hub 1-0:1.0: USB hub found [ 309.733529][T10276] hub 1-0:1.0: 1 port detected [ 310.552210][ T4942] block nbd150: Receive control failed (result -32) [ 311.598417][ T4942] block nbd151: Receive control failed (result -32) [ 312.074857][ T4942] block nbd152: Receive control failed (result -32) [ 312.771129][ T4942] block nbd153: Receive control failed (result -32) [ 313.338307][ T4942] block nbd154: Receive control failed (result -32) [ 314.253151][ T4942] block nbd155: Receive control failed (result -32) [ 315.244623][ T4942] block nbd156: Receive control failed (result -32) [ 316.254112][ T4942] block nbd157: Receive control failed (result -32) [ 316.447431][T10455] [U] 0 [ 316.452622][T10454] [U] QUI [ 316.605007][T10462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1352'. [ 316.616269][T10462] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1352'. [ 316.759486][ T4942] block nbd158: Receive control failed (result -32) [ 317.008260][T10468] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1354'. [ 317.174107][T10478] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1356'. [ 317.468697][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.475347][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.765331][T10493] [U] 0 [ 317.768986][T10491] [U] QUI [ 318.027832][ T4942] block nbd159: Receive control failed (result -32) [ 318.561400][ T4942] block nbd160: Receive control failed (result -32) [ 318.588045][T10508] input: jJǸ-9%vJ86 as /devices/virtual/input/input16 [ 319.074482][T10529] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1369'. [ 319.420846][T10544] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1373'. [ 320.314361][ T4942] block nbd161: Receive control failed (result -32) [ 320.771096][ T4942] block nbd162: Receive control failed (result -32) [ 323.565244][ T4942] block nbd163: Receive control failed (result -32) [ 325.192888][T10667] CIFS: VFS: Invalid SecurityFlags: [ 325.879398][T10675] input: jJǸ-9%vJ86 as /devices/virtual/input/input17 [ 326.862580][T10712] CIFS: VFS: Invalid SecurityFlags: [ 327.904724][ T4942] block nbd164: Receive control failed (result -32) [ 328.180906][ T4942] block nbd165: Receive control failed (result -32) [ 329.810233][ T4942] block nbd166: Receive control failed (result -32) [ 330.020860][ T4942] block nbd167: Receive control failed (result -32) [ 332.798190][ T4942] block nbd168: Receive control failed (result -32) [ 335.433106][ T4942] block nbd169: Receive control failed (result -32) [ 336.187044][ T4942] block nbd170: Receive control failed (result -32) [ 336.521502][ T4942] block nbd171: Receive control failed (result -32) [ 337.592597][ T4942] block nbd172: Receive control failed (result -32) [ 340.010755][ T4942] block nbd173: Receive control failed (result -32) [ 341.598754][ T4942] block nbd174: Receive control failed (result -32) [ 343.378168][ T4942] block nbd175: Receive control failed (result -32) [ 344.247599][ T4942] block nbd176: Receive control failed (result -32) [ 344.910575][T11119] vivid-007: ================= START STATUS ================= [ 344.929470][T11119] vivid-007: Generate PTS: true [ 344.962615][T11119] vivid-007: Generate SCR: true [ 344.987156][T11119] tpg source WxH: 320x240 (Y'CbCr) [ 344.999142][T11119] tpg field: 1 [ 345.008030][T11119] tpg crop: (0,0)/320x240 [ 345.022026][T11119] tpg compose: (0,0)/320x240 [ 345.036072][T11119] tpg colorspace: 8 [ 345.061489][T11119] tpg transfer function: 0/0 [ 345.091214][T11119] tpg Y'CbCr encoding: 0/0 [ 345.106513][T11119] tpg quantization: 0/0 [ 345.140185][T11119] tpg RGB range: 0/2 [ 345.181168][T11119] vivid-007: ================== END STATUS ================== [ 345.874937][T11143] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1485'. [ 346.150255][T11151] futex_wake_op: syz.0.1488 tries to shift op by -2048; fix this program [ 346.172788][T11151] futex_wake_op: syz.0.1488 tries to shift op by -2048; fix this program [ 346.201935][T11151] 0x000000000001-0x000000020000 : "" [ 346.250749][ T4942] block nbd177: Receive control failed (result -32) [ 346.509184][T11151] ftl_cs: FTL header corrupt! [ 348.230850][T11186] random: crng reseeded on system resumption [ 348.357384][T11186] hub 1-0:1.0: USB hub found [ 348.387107][T11186] hub 1-0:1.0: 1 port detected [ 348.737643][T11194] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1494'. [ 350.006452][ T4942] block nbd178: Receive control failed (result -32) [ 350.514243][T11225] nbd: must specify at least one socket [ 350.808303][T11252] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1505'. [ 350.897250][T11244] FAULT_INJECTION: forcing a failure. [ 350.897250][T11244] name failslab, interval 1, probability 0, space 0, times 0 [ 350.918558][ T4942] block nbd179: Receive control failed (result -32) [ 350.961120][T11244] CPU: 1 UID: 0 PID: 11244 Comm: syz.2.1504 Tainted: G L syzkaller #0 PREEMPT(full) [ 350.961177][T11244] Tainted: [L]=SOFTLOCKUP [ 350.961191][T11244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 350.961222][T11244] Call Trace: [ 350.961234][T11244] [ 350.961246][T11244] dump_stack_lvl+0x100/0x190 [ 350.961436][T11244] should_fail_ex.cold+0x5/0xa [ 350.961496][T11244] should_failslab+0xc2/0x120 [ 350.961576][T11244] kmem_cache_alloc_noprof+0x91/0x6a0 [ 350.961626][T11244] ? __pfx_map_id_range_down+0x10/0x10 [ 350.961704][T11244] ? security_inode_alloc+0x3b/0x2c0 [ 350.961831][T11244] security_inode_alloc+0x3b/0x2c0 [ 350.961875][T11244] inode_init_always_gfp+0xc77/0xfb0 [ 350.961938][T11244] alloc_inode+0x8e/0x250 [ 350.961986][T11244] path_from_stashed+0x25b/0x750 [ 350.962072][T11244] open_namespace_file+0x8f/0x130 [ 350.962181][T11244] ? __pfx_open_namespace_file+0x10/0x10 [ 350.962232][T11244] vfs_open_tree+0x8ec/0xae0 [ 350.962272][T11244] ? _raw_spin_unlock+0x28/0x50 [ 350.962396][T11244] ? __pfx_vfs_open_tree+0x10/0x10 [ 350.962447][T11244] __x64_sys_open_tree+0xa3/0x150 [ 350.962492][T11244] do_syscall_64+0x115/0x840 [ 350.962578][T11244] ? clear_bhb_loop+0x40/0x90 [ 350.962641][T11244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.962685][T11244] RIP: 0033:0x7f847819de99 [ 350.962716][T11244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.962751][T11244] RSP: 002b:00007f8479150028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 350.962790][T11244] RAX: ffffffffffffffda RBX: 00007f8478425fa0 RCX: 00007f847819de99 [ 350.962813][T11244] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 350.962836][T11244] RBP: 00007f8478233eaf R08: 0000000000000000 R09: 0000000000000000 [ 350.962858][T11244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.962879][T11244] R13: 00007f8478426038 R14: 00007f8478425fa0 R15: 00007ffc83dba0b8 [ 350.962925][T11244] [ 351.219121][T11258] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1507'. [ 352.330059][ T4942] block nbd180: Receive control failed (result -32) [ 353.125464][T11296] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 353.496152][T11300] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1513'. [ 353.880014][T11305] netlink: 'syz.3.1514': attribute type 2 has an invalid length. [ 354.102206][T11308] nbd: must specify at least one socket [ 354.791022][T11316] nbd: must specify at least one socket [ 355.592882][T11343] ovs_: entered promiscuous mode [ 357.192725][ T4942] block nbd181: Receive control failed (result -32) [ 358.158270][ T4942] block nbd182: Receive control failed (result -32) [ 358.193540][ T4942] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 358.519917][T11405] vivid-007: ================= START STATUS ================= [ 358.538125][T11405] vivid-007: Generate PTS: true [ 358.557011][T11405] vivid-007: Generate SCR: true [ 358.582189][T11405] tpg source WxH: 320x240 (Y'CbCr) [ 358.630732][T11405] tpg field: 1 [ 358.641474][T11405] tpg crop: (0,0)/320x240 [ 358.656101][T11405] tpg compose: (0,0)/320x240 [ 358.683314][T11405] tpg colorspace: 8 [ 358.690476][T11405] tpg transfer function: 0/0 [ 358.707609][T11405] tpg Y'CbCr encoding: 0/0 [ 358.793664][T11405] tpg quantization: 0/0 [ 358.801861][T11405] tpg RGB range: 0/2 [ 358.812757][T11405] vivid-007: ================== END STATUS ================== [ 359.024345][T11410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1536'. [ 359.081053][T11410] netlink: 28905 bytes leftover after parsing attributes in process `syz.1.1536'. [ 360.130694][ T4942] block nbd183: Receive control failed (result -32) [ 360.786774][ T4942] block nbd184: Receive control failed (result -32) [ 360.914587][ T4942] Bluetooth: hci2: Malformed LE Event: 0x0b [ 363.405737][ T4942] block nbd185: Receive control failed (result -32) [ 363.477789][T11509] FAULT_INJECTION: forcing a failure. [ 363.477789][T11509] name failslab, interval 1, probability 0, space 0, times 0 [ 363.510526][T11509] CPU: 1 UID: 0 PID: 11509 Comm: syz.0.1554 Tainted: G L syzkaller #0 PREEMPT(full) [ 363.510567][T11509] Tainted: [L]=SOFTLOCKUP [ 363.510576][T11509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 363.510593][T11509] Call Trace: [ 363.510602][T11509] [ 363.510611][T11509] dump_stack_lvl+0x100/0x190 [ 363.510645][T11509] should_fail_ex.cold+0x5/0xa [ 363.510672][T11509] should_failslab+0xc2/0x120 [ 363.510709][T11509] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 363.510741][T11509] ? percpu_ref_put_many.constprop.0+0xc4/0x2a0 [ 363.510785][T11509] ? zswap_store+0xc6d/0x2e70 [ 363.510814][T11509] zswap_store+0xc6d/0x2e70 [ 363.510841][T11509] ? __lock_acquire+0x49f/0x1a40 [ 363.510914][T11509] ? __pfx_zswap_store+0x10/0x10 [ 363.510942][T11509] ? do_raw_spin_lock+0x128/0x260 [ 363.510970][T11509] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 363.510998][T11509] ? find_held_lock+0x2b/0x80 [ 363.511029][T11509] ? swap_writeout+0xdd8/0x1b20 [ 363.511053][T11509] ? swap_writeout+0xdd8/0x1b20 [ 363.511084][T11509] swap_writeout+0xde0/0x1b20 [ 363.511125][T11509] shrink_folio_list+0x51c5/0x60a0 [ 363.511190][T11509] ? __pfx_shrink_folio_list+0x10/0x10 [ 363.511277][T11509] ? __lock_acquire+0x49f/0x1a40 [ 363.511315][T11509] ? __css_rstat_updated+0x1ce/0x5a0 [ 363.511357][T11509] ? __pfx___css_rstat_updated+0x10/0x10 [ 363.511401][T11509] reclaim_folio_list+0xdc/0x5d0 [ 363.511487][T11509] ? __pfx_reclaim_folio_list+0x10/0x10 [ 363.511552][T11509] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 363.511623][T11509] ? lru_gen_update_size+0x431/0xe20 [ 363.511668][T11509] ? lru_gen_del_folio+0x382/0x5f0 [ 363.511708][T11509] reclaim_pages+0x428/0x5e0 [ 363.511735][T11509] ? __pfx_reclaim_pages+0x10/0x10 [ 363.511757][T11509] ? find_held_lock+0x2b/0x80 [ 363.511794][T11509] ? madvise_cold_or_pageout_pte_range+0xb8e/0x2690 [ 363.511846][T11509] madvise_cold_or_pageout_pte_range+0x15a1/0x2690 [ 363.511937][T11509] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 363.511987][T11509] ? look_up_lock_class+0x64/0x120 [ 363.512021][T11509] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 363.512065][T11509] walk_pgd_range+0xc1a/0x1dd0 [ 363.512120][T11509] ? __pfx_walk_pgd_range+0x10/0x10 [ 363.512150][T11509] ? __pfx___might_resched+0x10/0x10 [ 363.512197][T11509] __walk_page_range+0x171/0x850 [ 363.512228][T11509] ? find_held_lock+0x2b/0x80 [ 363.512270][T11509] walk_page_range_vma_unsafe+0x209/0x8f0 [ 363.512305][T11509] ? __lock_acquire+0x49f/0x1a40 [ 363.512344][T11509] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 363.512382][T11509] ? find_held_lock+0x2b/0x80 [ 363.512413][T11509] ? mlock_drain_local+0x254/0x4e0 [ 363.512440][T11509] ? mlock_drain_local+0x254/0x4e0 [ 363.512472][T11509] walk_page_range_vma+0x63/0x90 [ 363.512506][T11509] madvise_pageout+0x29e/0x5b0 [ 363.512545][T11509] ? __pfx_madvise_pageout+0x10/0x10 [ 363.512605][T11509] ? __lock_acquire+0x49f/0x1a40 [ 363.512685][T11509] ? find_held_lock+0x2b/0x80 [ 363.512726][T11509] ? mt_find+0x687/0x8e0 [ 363.512833][T11509] madvise_vma_behavior+0x452/0x2240 [ 363.512876][T11509] ? mt_find+0x45e/0x8e0 [ 363.512910][T11509] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 363.512951][T11509] ? __pfx_mt_find+0x10/0x10 [ 363.513018][T11509] ? find_vma_prev+0xd8/0x150 [ 363.513106][T11509] ? find_vma+0xbf/0x140 [ 363.513150][T11509] ? __pfx_find_vma+0x10/0x10 [ 363.513203][T11509] madvise_walk_vmas+0x2fe/0xa90 [ 363.513257][T11509] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 363.513306][T11509] madvise_do_behavior+0x1ea/0x510 [ 363.513354][T11509] ? __pfx_madvise_do_behavior+0x10/0x10 [ 363.513400][T11509] ? down_read+0x13b/0x4c0 [ 363.513464][T11509] ? __pfx_futex_wait+0x10/0x10 [ 363.513517][T11509] do_madvise+0x238/0x290 [ 363.513557][T11509] ? __pfx_do_madvise+0x10/0x10 [ 363.513602][T11509] ? do_futex+0x190/0x440 [ 363.513634][T11509] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 363.513687][T11509] __x64_sys_madvise+0xa9/0x110 [ 363.513755][T11509] ? lockdep_hardirqs_on+0x78/0x100 [ 363.513797][T11509] do_syscall_64+0x115/0x840 [ 363.513840][T11509] ? clear_bhb_loop+0x40/0x90 [ 363.513872][T11509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.513898][T11509] RIP: 0033:0x7f86ecf9de99 [ 363.513919][T11509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.513943][T11509] RSP: 002b:00007f86eddcc028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 363.513967][T11509] RAX: ffffffffffffffda RBX: 00007f86ed225fa0 RCX: 00007f86ecf9de99 [ 363.513984][T11509] RDX: 0000000000000015 RSI: ffffffffffff0001 RDI: 0000000000000000 [ 363.514000][T11509] RBP: 00007f86ed033eaf R08: 0000000000000000 R09: 0000000000000000 [ 363.514020][T11509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.514034][T11509] R13: 00007f86ed226038 R14: 00007f86ed225fa0 R15: 00007fff2836ced8 [ 363.514066][T11509] [ 365.616836][T11541] FAULT_INJECTION: forcing a failure. [ 365.616836][T11541] name failslab, interval 1, probability 0, space 0, times 0 [ 365.633125][T11541] CPU: 1 UID: 0 PID: 11541 Comm: syz.0.1559 Tainted: G L syzkaller #0 PREEMPT(full) [ 365.633182][T11541] Tainted: [L]=SOFTLOCKUP [ 365.633195][T11541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 365.633215][T11541] Call Trace: [ 365.633226][T11541] [ 365.633239][T11541] dump_stack_lvl+0x100/0x190 [ 365.633287][T11541] should_fail_ex.cold+0x5/0xa [ 365.633328][T11541] should_failslab+0xc2/0x120 [ 365.633387][T11541] kmem_cache_alloc_noprof+0x91/0x6a0 [ 365.633431][T11541] ? fsnotify_add_mark_locked+0x33e/0x15f0 [ 365.633558][T11541] ? fsnotify_add_mark_locked+0x33e/0x15f0 [ 365.633606][T11541] ? fsnotify_add_mark_locked+0x39c/0x15f0 [ 365.633660][T11541] fsnotify_add_mark_locked+0x39c/0x15f0 [ 365.633712][T11541] ? __pfx_inc_ucount+0x10/0x10 [ 365.633780][T11541] ? find_held_lock+0x2b/0x80 [ 365.633823][T11541] ? inotify_update_watch+0x680/0xa90 [ 365.633914][T11541] inotify_update_watch+0x7bc/0xa90 [ 365.633982][T11541] __x64_sys_inotify_add_watch+0x2d7/0x370 [ 365.634041][T11541] ? __pfx___x64_sys_inotify_add_watch+0x10/0x10 [ 365.634110][T11541] do_syscall_64+0x115/0x840 [ 365.634151][T11541] ? clear_bhb_loop+0x40/0x90 [ 365.634195][T11541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.634237][T11541] RIP: 0033:0x7f86ecf9de99 [ 365.634266][T11541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.634299][T11541] RSP: 002b:00007f86eddcc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fe [ 365.634331][T11541] RAX: ffffffffffffffda RBX: 00007f86ed225fa0 RCX: 00007f86ecf9de99 [ 365.634351][T11541] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000004 [ 365.634379][T11541] RBP: 00007f86ed033eaf R08: 0000000000000000 R09: 0000000000000000 [ 365.634399][T11541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 365.634417][T11541] R13: 00007f86ed226038 R14: 00007f86ed225fa0 R15: 00007fff2836ced8 [ 365.634456][T11541] [ 366.013699][T11545] futex_wake_op: syz.0.1560 tries to shift op by -2048; fix this program [ 366.024914][T11545] futex_wake_op: syz.0.1560 tries to shift op by -2048; fix this program [ 366.554237][T11548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1561'. [ 366.668710][T11550] FAULT_INJECTION: forcing a failure. [ 366.668710][T11550] name failslab, interval 1, probability 0, space 0, times 0 [ 366.668762][T11550] CPU: 0 UID: 0 PID: 11550 Comm: syz.3.1561 Tainted: G L syzkaller #0 PREEMPT(full) [ 366.668798][T11550] Tainted: [L]=SOFTLOCKUP [ 366.668806][T11550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 366.668826][T11550] Call Trace: [ 366.668834][T11550] [ 366.668843][T11550] dump_stack_lvl+0x100/0x190 [ 366.668878][T11550] should_fail_ex.cold+0x5/0xa [ 366.668911][T11550] should_failslab+0xc2/0x120 [ 366.668948][T11550] __kmalloc_cache_noprof+0x91/0x6c0 [ 366.668976][T11550] ? sync_file_alloc+0x3c/0x160 [ 366.669120][T11550] sync_file_alloc+0x3c/0x160 [ 366.669154][T11550] sync_file_create+0x17/0xf0 [ 366.669190][T11550] sw_sync_ioctl+0x3b4/0x13f0 [ 366.669232][T11550] ? find_held_lock+0x2b/0x80 [ 366.669272][T11550] ? __pfx_sw_sync_ioctl+0x10/0x10 [ 366.669322][T11550] ? __pfx_sw_sync_ioctl+0x10/0x10 [ 366.669361][T11550] __x64_sys_ioctl+0x18e/0x210 [ 366.669401][T11550] do_syscall_64+0x115/0x840 [ 366.669432][T11550] ? clear_bhb_loop+0x40/0x90 [ 366.669462][T11550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.669488][T11550] RIP: 0033:0x7fe45d39de99 [ 366.669509][T11550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.669533][T11550] RSP: 002b:00007fe45e280028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 366.669557][T11550] RAX: ffffffffffffffda RBX: 00007fe45d626090 RCX: 00007fe45d39de99 [ 366.669573][T11550] RDX: 0000200000000540 RSI: 00000000c0285700 RDI: 0000000000000007 [ 366.669589][T11550] RBP: 00007fe45d433eaf R08: 0000000000000000 R09: 0000000000000000 [ 366.669604][T11550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.669619][T11550] R13: 00007fe45d626128 R14: 00007fe45d626090 R15: 00007fff323e5b88 [ 366.669652][T11550] [ 366.890812][T11552] netlink: 'syz.1.1562': attribute type 1 has an invalid length. [ 367.334311][T11558] nbd: must specify a size in bytes for the device [ 367.458445][T11565] FAULT_INJECTION: forcing a failure. [ 367.458445][T11565] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 367.473782][T11565] CPU: 0 UID: 0 PID: 11565 Comm: syz.1.1566 Tainted: G L syzkaller #0 PREEMPT(full) [ 367.473847][T11565] Tainted: [L]=SOFTLOCKUP [ 367.473860][T11565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 367.473881][T11565] Call Trace: [ 367.473892][T11565] [ 367.473905][T11565] dump_stack_lvl+0x100/0x190 [ 367.473949][T11565] should_fail_ex.cold+0x5/0xa [ 367.473982][T11565] ? prepare_alloc_pages+0x16d/0x5f0 [ 367.474035][T11565] should_fail_alloc_page+0xeb/0x140 [ 367.474089][T11565] prepare_alloc_pages+0x1f0/0x5f0 [ 367.474139][T11565] ? __kernel_text_address+0xd/0x30 [ 367.474198][T11565] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 367.474254][T11565] ? stack_trace_save+0x8e/0xc0 [ 367.474334][T11565] ? __pfx_stack_trace_save+0x10/0x10 [ 367.474415][T11565] ? stack_depot_save_flags+0x27/0x9d0 [ 367.474559][T11565] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 367.474604][T11565] ? kasan_save_stack+0x3f/0x50 [ 367.474645][T11565] ? kasan_save_stack+0x30/0x50 [ 367.474687][T11565] ? kasan_save_track+0x14/0x30 [ 367.474730][T11565] ? __kasan_slab_alloc+0x89/0x90 [ 367.474774][T11565] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 367.474825][T11565] ? __pmd_alloc+0xbf/0x950 [ 367.474873][T11565] ? __handle_mm_fault+0xa9c/0x2a00 [ 367.474906][T11565] ? handle_mm_fault+0x37b/0xa30 [ 367.474937][T11565] ? do_user_addr_fault+0x74c/0x12f0 [ 367.474998][T11565] ? exc_page_fault+0x6f/0xd0 [ 367.475041][T11565] ? asm_exc_page_fault+0x26/0x30 [ 367.475076][T11565] ? rep_movs_alternative+0x33/0xa0 [ 367.475128][T11565] ? _copy_to_user+0xa4/0xd0 [ 367.475262][T11565] ? fs_name+0x25e/0x4a0 [ 367.475301][T11565] ? __x64_sys_sysfs+0xe6/0x120 [ 367.475342][T11565] ? do_syscall_64+0x115/0x840 [ 367.475384][T11565] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.475437][T11565] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 367.475492][T11565] ? policy_nodemask+0xed/0x4f0 [ 367.475547][T11565] alloc_pages_mpol+0x1fb/0x540 [ 367.475601][T11565] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 367.475664][T11565] ? __pfx_filemap_map_pages+0x10/0x10 [ 367.475704][T11565] alloc_pages_noprof+0x1a/0x160 [ 367.475740][T11565] pte_alloc_one+0x1c/0x3d0 [ 367.475807][T11565] __do_fault+0x26c/0x440 [ 367.475852][T11565] do_fault+0x2db/0x1750 [ 367.475899][T11565] ? __pmd_alloc+0x3fb/0x950 [ 367.475953][T11565] __handle_mm_fault+0x187d/0x2a00 [ 367.475996][T11565] ? mt_find+0x45e/0x8e0 [ 367.476043][T11565] ? __pfx___handle_mm_fault+0x10/0x10 [ 367.476074][T11565] ? __pfx_mt_find+0x10/0x10 [ 367.476140][T11565] ? find_vma+0xbf/0x140 [ 367.476182][T11565] ? __pfx_find_vma+0x10/0x10 [ 367.476237][T11565] handle_mm_fault+0x37b/0xa30 [ 367.476282][T11565] do_user_addr_fault+0x74c/0x12f0 [ 367.476339][T11565] exc_page_fault+0x6f/0xd0 [ 367.476381][T11565] asm_exc_page_fault+0x26/0x30 [ 367.476415][T11565] RIP: 0010:rep_movs_alternative+0x33/0xa0 [ 367.476472][T11565] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 7d 9d 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 367.476507][T11565] RSP: 0018:ffffc900079cfe78 EFLAGS: 00050202 [ 367.476538][T11565] RAX: 7366706d74766564 RBX: 0000000000000009 RCX: 0000000000000009 [ 367.476560][T11565] RDX: 0000000000000001 RSI: ffffffff8c716920 RDI: 0000000000000000 [ 367.476581][T11565] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff18e2d25 [ 367.476602][T11565] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8c716920 [ 367.476623][T11565] R13: 0000000000000009 R14: 00007ffffffff000 R15: 0000000000000000 [ 367.476666][T11565] _copy_to_user+0xa4/0xd0 [ 367.476724][T11565] fs_name+0x25e/0x4a0 [ 367.476766][T11565] __x64_sys_sysfs+0xe6/0x120 [ 367.476818][T11565] do_syscall_64+0x115/0x840 [ 367.476860][T11565] ? clear_bhb_loop+0x40/0x90 [ 367.476902][T11565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.476936][T11565] RIP: 0033:0x7f5e5ad9de99 [ 367.476964][T11565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.476998][T11565] RSP: 002b:00007f5e5bcfc028 EFLAGS: 00000246 ORIG_RAX: 000000000000008b [ 367.477030][T11565] RAX: ffffffffffffffda RBX: 00007f5e5b025fa0 RCX: 00007f5e5ad9de99 [ 367.477053][T11565] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000002 [ 367.477074][T11565] RBP: 00007f5e5ae33eaf R08: 0000000000000000 R09: 0000000000000000 [ 367.477095][T11565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.477117][T11565] R13: 00007f5e5b026038 R14: 00007f5e5b025fa0 R15: 00007fff3ae89248 [ 367.477162][T11565] [ 368.030950][T11565] vivid-007: ================= START STATUS ================= [ 368.060270][T11565] vivid-007: Enable Output Cropping: true grabbed [ 368.117745][T11565] vivid-007: Enable Output Composing: true grabbed [ 368.147505][T11565] vivid-007: Enable Output Scaler: true grabbed [ 368.194054][T11565] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 368.238649][T11565] vivid-007: Transmit Mode: HDMI grabbed [ 368.270528][T11565] vivid-007: Hotplug Present: 0x00000000 [ 368.309636][T11565] vivid-007: RxSense Present: 0x00000000 [ 368.333010][T11565] vivid-007: EDID Present: 0x00000000 [ 368.368288][T11565] vivid-007: ================== END STATUS ================== [ 368.546722][T11571] nbd: must specify a size in bytes for the device [ 368.752017][T11582] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1569'. [ 368.990324][ T4942] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 371.157743][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807bf2b400: rx timeout, send abort [ 371.196253][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807bf2b400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 371.316698][T11608] nbd: must specify a size in bytes for the device [ 372.353864][T11622] syz.2.1580 (11622) used greatest stack depth: 19768 bytes left [ 372.862413][T11630] nbd: must specify a size in bytes for the device [ 373.323744][T11641] FAULT_INJECTION: forcing a failure. [ 373.323744][T11641] name failslab, interval 1, probability 0, space 0, times 0 [ 373.362190][T11641] CPU: 1 UID: 0 PID: 11641 Comm: syz.3.1583 Tainted: G L syzkaller #0 PREEMPT(full) [ 373.362253][T11641] Tainted: [L]=SOFTLOCKUP [ 373.362265][T11641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 373.362286][T11641] Call Trace: [ 373.362298][T11641] [ 373.362311][T11641] dump_stack_lvl+0x100/0x190 [ 373.362358][T11641] should_fail_ex.cold+0x5/0xa [ 373.362398][T11641] should_failslab+0xc2/0x120 [ 373.362450][T11641] __kmalloc_noprof+0xfc/0x820 [ 373.362488][T11641] ? trace_kmem_cache_alloc+0xdd/0x100 [ 373.362539][T11641] ? lsm_blob_alloc+0x68/0x90 [ 373.362684][T11641] lsm_blob_alloc+0x68/0x90 [ 373.362744][T11641] security_sk_alloc+0x2d/0x290 [ 373.362814][T11641] sk_prot_alloc+0x1d1/0x2a0 [ 373.362925][T11641] sk_alloc+0x36/0xe80 [ 373.362973][T11641] inet_create+0x3a0/0x1060 [ 373.363103][T11641] ? inet_create+0x94/0x1060 [ 373.363158][T11641] __sock_create+0x339/0x860 [ 373.363223][T11641] inet_ctl_sock_create+0x94/0x230 [ 373.363269][T11641] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 373.363315][T11641] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 373.363352][T11641] ? lockdep_init_map_type+0x5c/0x250 [ 373.363391][T11641] ? lockdep_init_map_type+0x5c/0x250 [ 373.363426][T11641] ? __pfx_igmp_net_init+0x10/0x10 [ 373.363479][T11641] igmp_net_init+0xd0/0x150 [ 373.363537][T11641] ops_init+0x1e2/0x5f0 [ 373.363644][T11641] setup_net+0x118/0x3a0 [ 373.363697][T11641] ? __pfx_setup_net+0x10/0x10 [ 373.363750][T11641] ? mutex_init_lockdep+0xf1/0x120 [ 373.363792][T11641] copy_net_ns+0x46f/0x7c0 [ 373.363846][T11641] create_new_namespaces+0x3ea/0xac0 [ 373.363889][T11641] unshare_nsproxy_namespaces+0xf2/0x220 [ 373.363930][T11641] ksys_unshare+0x438/0xab0 [ 373.363980][T11641] ? __pfx_ksys_unshare+0x10/0x10 [ 373.364042][T11641] __x64_sys_unshare+0x31/0x40 [ 373.364119][T11641] do_syscall_64+0x115/0x840 [ 373.364161][T11641] ? clear_bhb_loop+0x40/0x90 [ 373.364206][T11641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.364244][T11641] RIP: 0033:0x7fe45d39de99 [ 373.364275][T11641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.364310][T11641] RSP: 002b:00007fe45e280028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 373.364345][T11641] RAX: ffffffffffffffda RBX: 00007fe45d626090 RCX: 00007fe45d39de99 [ 373.364366][T11641] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 373.364387][T11641] RBP: 00007fe45d433eaf R08: 0000000000000000 R09: 0000000000000000 [ 373.364409][T11641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 373.364430][T11641] R13: 00007fe45d626128 R14: 00007fe45d626090 R15: 00007fff323e5b88 [ 373.364474][T11641] [ 373.683609][T11641] Failed to initialize the IGMP autojoin socket (err -12) [ 374.359662][T11653] syz.2.1586 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 374.404136][T11653] [U]  [ 374.407029][T11653] [U] [ 374.409792][T11653] [U] [ 374.412555][T11653] [U] [ 374.430348][T11653] [U] [ 374.433155][T11653] [U] [ 374.435917][T11653] [U] [ 374.438709][T11653] [U] [ 374.480457][T11653] [U] [ 374.483278][T11653] [U] [ 374.486031][T11653] [U] [ 374.488768][T11653] [U] [ 374.503709][T11653] [U] [ 374.506507][T11653] [U] [ 374.509282][T11653] [U] [ 374.512037][T11653] [U] [ 374.558579][T11653] [U] [ 374.561418][T11653] [U] [ 374.564191][T11653] [U] [ 374.566958][T11653] [U] [ 374.589535][T11653] [U] [ 374.592346][T11653] [U] [ 374.595116][T11653] [U] [ 374.597874][T11653] [U] [ 374.613791][T11653] [U] [ 374.616547][T11653] [U] [ 374.619265][T11653] [U] [ 374.621978][T11653] [U] [ 374.659123][T11653] [U] [ 374.661981][T11653] [U] [ 374.664729][T11653] [U] [ 374.667455][T11653] [U] [ 374.742980][T11653] [U] [ 374.745833][T11653] [U] [ 374.748594][T11653] [U] [ 374.751362][T11653] [U] [ 374.771203][T11653] [U] [ 374.773979][T11653] [U] [ 374.776708][T11653] [U] [ 374.779440][T11653] [U] [ 374.791403][T11653] [U] [ 374.794197][T11653] [U] [ 374.796922][T11653] [U] [ 374.799663][T11653] [U] [ 374.820844][T11653] [U] [ 374.823658][T11653] [U] [ 374.826421][T11653] [U] [ 374.829184][T11653] [U] [ 374.867447][T11653] [U] [ 374.870250][T11653] [U] [ 374.873002][T11653] [U] [ 374.875762][T11653] [U] [ 374.905248][T11653] [U] [ 374.908052][T11653] [U] [ 374.910815][T11653] [U] [ 374.913584][T11653] [U] [ 374.955082][T11653] [U] [ 374.957844][T11653] [U] [ 374.960592][T11653] [U] [ 374.963327][T11653] [U] [ 375.011041][T11653] [U] [ 375.013852][T11653] [U] [ 375.016612][T11653] [U] [ 375.019360][T11653] [U] [ 375.055768][T11653] [U] [ 375.058617][T11653] [U] [ 375.061392][T11653] [U] [ 375.064183][T11653] [U] [ 375.094660][T11653] [U] [ 375.097473][T11653] [U] [ 375.100233][T11653] [U] [ 375.102991][T11653] [U] [ 375.141028][T11653] [U] [ 375.206108][T11664] nbd: must specify a size in bytes for the device [ 375.712143][T11670] block nbd186: Unsupported socket: should be TCP or UNIX. [ 376.552901][T11699] serial 00:02: in use; can't configure [ 377.038438][T11703] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1596'. [ 377.289279][T11703] bond0: (slave bond_slave_0): Releasing backup interface [ 378.255346][T11716] nbd: must specify at least one socket [ 378.631436][T11730] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1603'. [ 378.698901][T11730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1603'. [ 378.836960][T11728] block nbd186: Unsupported socket: should be TCP or UNIX. [ 378.912505][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.919027][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.212744][T11740] nbd: must specify at least one socket [ 380.089977][T11757] nbd: must specify at least one socket [ 381.175699][T11774] nbd: must specify at least one socket [ 381.479189][T11784] FAULT_INJECTION: forcing a failure. [ 381.479189][T11784] name failslab, interval 1, probability 0, space 0, times 0 [ 381.530753][T11784] CPU: 0 UID: 7 PID: 11784 Comm: syz.1.1614 Tainted: G L syzkaller #0 PREEMPT(full) [ 381.530812][T11784] Tainted: [L]=SOFTLOCKUP [ 381.530824][T11784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 381.530847][T11784] Call Trace: [ 381.530857][T11784] [ 381.530871][T11784] dump_stack_lvl+0x100/0x190 [ 381.530918][T11784] should_fail_ex.cold+0x5/0xa [ 381.530969][T11784] should_failslab+0xc2/0x120 [ 381.531021][T11784] kmem_cache_alloc_noprof+0x91/0x6a0 [ 381.531069][T11784] ? key_alloc+0x3c5/0x1310 [ 381.531214][T11784] key_alloc+0x3c5/0x1310 [ 381.531276][T11784] ? __pfx_key_alloc+0x10/0x10 [ 381.531322][T11784] ? __pfx_key_default_cmp+0x10/0x10 [ 381.531376][T11784] ? __pfx_keyring_search_iterator+0x10/0x10 [ 381.531437][T11784] keyring_alloc+0x44/0xc0 [ 381.531494][T11784] look_up_user_keyrings+0x508/0x790 [ 381.531545][T11784] ? __pfx_look_up_user_keyrings+0x10/0x10 [ 381.531604][T11784] lookup_user_key+0x456/0x1300 [ 381.531650][T11784] ? __pfx_lookup_user_key+0x10/0x10 [ 381.531706][T11784] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 381.531761][T11784] ? xfd_validate_state+0x129/0x190 [ 381.531840][T11784] keyctl_keyring_clear+0x24/0x1a0 [ 381.531880][T11784] __do_sys_keyctl+0x3c6/0x5a0 [ 381.531922][T11784] do_syscall_64+0x115/0x840 [ 381.531973][T11784] ? clear_bhb_loop+0x40/0x90 [ 381.532015][T11784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.532050][T11784] RIP: 0033:0x7f5e5ad9de99 [ 381.532077][T11784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.532110][T11784] RSP: 002b:00007f5e5bcfc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 381.532140][T11784] RAX: ffffffffffffffda RBX: 00007f5e5b025fa0 RCX: 00007f5e5ad9de99 [ 381.532163][T11784] RDX: 0000000000000000 RSI: 00000000fffffffb RDI: 0000000000000007 [ 381.532183][T11784] RBP: 00007f5e5ae33eaf R08: 0000000000000008 R09: 0000000000000000 [ 381.532203][T11784] R10: 000000000000003e R11: 0000000000000246 R12: 0000000000000000 [ 381.532222][T11784] R13: 00007f5e5b026038 R14: 00007f5e5b025fa0 R15: 00007fff3ae89248 [ 381.532264][T11784] [ 382.327298][T11798] ICMPv6: process `syz.1.1617' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 382.385805][T11792] nbd: must specify at least one socket [ 382.599722][T11798] loop13: detected capacity change from 0 to 8 [ 383.501270][T11819] nbd: must specify at least one socket [ 385.791034][T11853] nbd: must specify at least one socket [ 386.109845][T11858] ubi0: attaching mtd0 [ 386.327713][T11858] ubi0: scanning is finished [ 386.340109][T11858] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 386.745296][ T4942] block nbd186: Receive control failed (result -32) [ 387.150621][T11858] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 387.428833][T11884] FAULT_INJECTION: forcing a failure. [ 387.428833][T11884] name failslab, interval 1, probability 0, space 0, times 0 [ 387.469894][T11884] CPU: 1 UID: 0 PID: 11884 Comm: syz.2.1633 Tainted: G L syzkaller #0 PREEMPT(full) [ 387.469950][T11884] Tainted: [L]=SOFTLOCKUP [ 387.469963][T11884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 387.469983][T11884] Call Trace: [ 387.469995][T11884] [ 387.470007][T11884] dump_stack_lvl+0x100/0x190 [ 387.470053][T11884] should_fail_ex.cold+0x5/0xa [ 387.470094][T11884] should_failslab+0xc2/0x120 [ 387.470145][T11884] __kmalloc_noprof+0xfc/0x820 [ 387.470190][T11884] ? landlock_init_hierarchy_log+0x186/0x820 [ 387.470370][T11884] landlock_init_hierarchy_log+0x186/0x820 [ 387.470451][T11884] landlock_merge_ruleset+0x66d/0x8b0 [ 387.470497][T11884] ? prepare_creds+0x5ee/0x950 [ 387.470556][T11884] __do_sys_landlock_restrict_self+0x2af/0x9e0 [ 387.470607][T11884] do_syscall_64+0x115/0x840 [ 387.470649][T11884] ? clear_bhb_loop+0x40/0x90 [ 387.470694][T11884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.470734][T11884] RIP: 0033:0x7f847819de99 [ 387.470764][T11884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.470798][T11884] RSP: 002b:00007f8479150028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 387.470830][T11884] RAX: ffffffffffffffda RBX: 00007f8478425fa0 RCX: 00007f847819de99 [ 387.470853][T11884] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000000006 [ 387.470873][T11884] RBP: 00007f8478233eaf R08: 0000000000000000 R09: 0000000000000000 [ 387.470893][T11884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.470912][T11884] R13: 00007f8478426038 R14: 00007f8478425fa0 R15: 00007ffc83dba0b8 [ 387.470958][T11884] [ 388.808591][T11905] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1637'. [ 389.105166][T11910] bridge0: port 3(veth1) entered blocking state [ 389.126849][T11910] bridge0: port 3(veth1) entered disabled state [ 389.176239][T11910] veth1: entered allmulticast mode [ 389.217697][T11910] veth1: entered promiscuous mode [ 389.245617][T11910] bridge0: port 3(veth1) entered blocking state [ 389.253549][T11910] bridge0: port 3(veth1) entered forwarding state [ 389.327909][T11915] nbd: must specify at least one socket [ 390.042788][ T4942] block nbd187: Receive control failed (result -32) [ 390.718645][T11939] vivid-007: ================= START STATUS ================= [ 390.746094][T11939] vivid-007: Generate PTS: true [ 390.760286][T11939] vivid-007: Generate SCR: true [ 390.772354][T11939] tpg source WxH: 320x240 (Y'CbCr) [ 390.792282][T11939] tpg field: 1 [ 390.798336][T11939] tpg crop: (0,0)/320x240 [ 390.814947][T11939] tpg compose: (0,0)/320x240 [ 390.840765][T11939] tpg colorspace: 8 [ 390.850042][T11939] tpg transfer function: 0/0 [ 390.868502][T11939] tpg Y'CbCr encoding: 0/0 [ 390.879490][T11939] tpg quantization: 0/0 [ 390.895876][T11939] tpg RGB range: 0/2 [ 390.902098][T11939] vivid-007: ================== END STATUS ================== [ 391.736405][T11954] can0: slcan on pty119. [ 391.915463][T11953] can0 (unregistered): slcan off pty119. [ 392.391098][ T4942] block nbd188: Receive control failed (result -32) [ 392.734459][T11981] FAULT_INJECTION: forcing a failure. [ 392.734459][T11981] name fail_futex, interval 1, probability 0, space 0, times 0 [ 392.768006][T11981] CPU: 1 UID: 0 PID: 11981 Comm: syz.1.1653 Tainted: G L syzkaller #0 PREEMPT(full) [ 392.768063][T11981] Tainted: [L]=SOFTLOCKUP [ 392.768075][T11981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 392.768096][T11981] Call Trace: [ 392.768106][T11981] [ 392.768119][T11981] dump_stack_lvl+0x100/0x190 [ 392.768166][T11981] should_fail_ex.cold+0x5/0xa [ 392.768205][T11981] get_futex_key+0x1d2/0x14f0 [ 392.768244][T11981] ? __pfx_get_futex_key+0x10/0x10 [ 392.768280][T11981] ? wakeup_preempt_fair+0x640/0x1060 [ 392.768329][T11981] futex_wait_setup+0x91/0x540 [ 392.768388][T11981] __futex_wait+0x19f/0x300 [ 392.768437][T11981] ? __pfx___futex_wait+0x10/0x10 [ 392.768481][T11981] ? __pfx_try_to_wake_up+0x10/0x10 [ 392.768516][T11981] ? futex_hash+0x311/0x400 [ 392.768552][T11981] ? __pfx_futex_wake_mark+0x10/0x10 [ 392.768604][T11981] ? find_held_lock+0x2b/0x80 [ 392.768646][T11981] ? futex_wake+0x4ea/0x5e0 [ 392.768701][T11981] futex_wait+0xe6/0x370 [ 392.768748][T11981] ? __pfx_futex_wait+0x10/0x10 [ 392.768821][T11981] do_futex+0x265/0x440 [ 392.768861][T11981] ? __pfx_do_futex+0x10/0x10 [ 392.768922][T11981] __x64_sys_futex+0x34f/0x4d0 [ 392.768965][T11981] ? putname+0xb1/0x110 [ 392.769003][T11981] ? __pfx___x64_sys_futex+0x10/0x10 [ 392.769059][T11981] do_syscall_64+0x115/0x840 [ 392.769101][T11981] ? clear_bhb_loop+0x40/0x90 [ 392.769144][T11981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.769180][T11981] RIP: 0033:0x7f5e5ad9de99 [ 392.769208][T11981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.769242][T11981] RSP: 002b:00007f5e5bcdb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 392.769276][T11981] RAX: ffffffffffffffda RBX: 00007f5e5b026098 RCX: 00007f5e5ad9de99 [ 392.769299][T11981] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5e5b026098 [ 392.769321][T11981] RBP: 00007f5e5b026090 R08: 0000000000000000 R09: 0000000000000000 [ 392.769342][T11981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.769363][T11981] R13: 00007f5e5b026128 R14: 00007fff3ae89160 R15: 00007fff3ae89248 [ 392.769410][T11981] [ 393.321659][ T4942] block nbd189: Receive control failed (result -32) [ 394.814460][T11998] hub 1-0:1.0: USB hub found [ 394.841057][T11998] hub 1-0:1.0: 1 port detected [ 395.473990][T12010] ubi6: attaching mtd0 [ 395.494261][T12010] ubi6 error: ubi_attach_mtd_dev: bad VID header (33180) or data offsets (33244) [ 399.063541][ T4942] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 401.490652][T12067] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input18 [ 402.384583][ T4942] block nbd190: Receive control failed (result -32) [ 403.008899][ T30] audit: type=1804 audit(4294967576.770:2): pid=12089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1670" name="/newroot/423/file0" dev="tmpfs" ino=2183 res=1 errno=0 [ 406.461250][T12137] nbd: must specify a size in bytes for the device [ 407.378372][ T4942] block nbd191: Receive control failed (result -32) [ 408.256331][T12130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.346121][T12130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.419882][T12180] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1689'. [ 409.527884][T12178] nbd: must specify a size in bytes for the device [ 410.048682][ T4942] Bluetooth: hci0: unexpected event 0x10 length: 124 > 1 [ 410.052560][ T5632] Bluetooth: hci0: hardware error 0x00 [ 410.185693][ T4942] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 410.193533][ T4942] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 410.342633][ T50] block nbd192: Receive control failed (result -32) [ 411.531448][ T5359] Process accounting resumed [ 412.185749][ T5632] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 412.958674][T12221] netlink: 'syz.2.1698': attribute type 1 has an invalid length. [ 412.981474][T12221] nbd: error processing sock list [ 415.497044][T12203] Process accounting resumed [ 418.455252][T12247] nbd: must specify at least one socket [ 418.542084][T12251] nbd: must specify a size in bytes for the device [ 419.049362][T12260] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input19 [ 419.175665][ T5632] block nbd193: Receive control failed (result -32) [ 424.669895][T12315] nbd: must specify at least one socket [ 428.033226][T12350] FAULT_INJECTION: forcing a failure. [ 428.033226][T12350] name failslab, interval 1, probability 0, space 0, times 0 [ 428.076137][T12350] CPU: 1 UID: 0 PID: 12350 Comm: syz.1.1723 Tainted: G L syzkaller #0 PREEMPT(full) [ 428.076191][T12350] Tainted: [L]=SOFTLOCKUP [ 428.076203][T12350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 428.076225][T12350] Call Trace: [ 428.076236][T12350] [ 428.076250][T12350] dump_stack_lvl+0x100/0x190 [ 428.076299][T12350] should_fail_ex.cold+0x5/0xa [ 428.076340][T12350] should_failslab+0xc2/0x120 [ 428.076400][T12350] __kmalloc_noprof+0xfc/0x820 [ 428.076442][T12350] ? rcu_is_watching+0x12/0xc0 [ 428.076515][T12350] ? vhost_dev_set_owner+0x190/0xa30 [ 428.076647][T12350] vhost_dev_set_owner+0x190/0xa30 [ 428.076704][T12350] vhost_net_ioctl+0xfa3/0x1910 [ 428.076767][T12350] ? do_vfs_ioctl+0x226/0x13e0 [ 428.076820][T12350] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 428.076871][T12350] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 428.076923][T12350] ? find_held_lock+0x2b/0x80 [ 428.076965][T12350] ? __fget_files+0x215/0x3d0 [ 428.076996][T12350] ? hook_file_ioctl_common+0x140/0x440 [ 428.077051][T12350] ? __fget_files+0x21f/0x3d0 [ 428.077091][T12350] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 428.077134][T12350] __x64_sys_ioctl+0x18e/0x210 [ 428.077188][T12350] do_syscall_64+0x115/0x840 [ 428.077231][T12350] ? clear_bhb_loop+0x40/0x90 [ 428.077273][T12350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.077309][T12350] RIP: 0033:0x7f5e5ad9de99 [ 428.077338][T12350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.077381][T12350] RSP: 002b:00007f5e5bcfc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 428.077415][T12350] RAX: ffffffffffffffda RBX: 00007f5e5b025fa0 RCX: 00007f5e5ad9de99 [ 428.077438][T12350] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000003 [ 428.077460][T12350] RBP: 00007f5e5ae33eaf R08: 0000000000000000 R09: 0000000000000000 [ 428.077482][T12350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 428.077506][T12350] R13: 00007f5e5b026038 R14: 00007f5e5b025fa0 R15: 00007fff3ae89248 [ 428.077551][T12350] [ 429.444251][ T5632] block nbd194: Receive control failed (result -32) [ 430.520823][T12347] ubi0: attaching mtd0 [ 430.701540][T12347] ubi0: scanning is finished [ 430.779779][T12347] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 431.651239][T12347] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 434.648342][T12428] netlink: 'syz.3.1735': attribute type 1 has an invalid length. [ 434.675549][T12428] nbd: error processing sock list [ 435.558666][ T5632] block nbd195: Receive control failed (result -32) [ 435.656183][T11875] syz.0.1629 (11875) used greatest stack depth: 18448 bytes left [ 438.383694][T12464] ======================================================= [ 438.383694][T12464] WARNING: The mand mount option has been deprecated and [ 438.383694][T12464] and is ignored by this kernel. Remove the mand [ 438.383694][T12464] option from the mount to silence this warning. [ 438.383694][T12464] ======================================================= [ 440.347788][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.358301][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.375903][ T5632] block nbd196: Receive control failed (result -32) [ 440.445050][T12504] vivid-011: ================= START STATUS ================= [ 440.486851][T12504] vivid-011: Radio HW Seek Mode: Bounded [ 440.559247][T12504] vivid-011: Radio Programmable HW Seek: false [ 440.584306][T12504] vivid-011: RDS Rx I/O Mode: Block I/O [ 440.604099][T12504] vivid-011: Generate RBDS Instead of RDS: false [ 440.623892][T12504] vivid-011: RDS Reception: true [ 440.660767][T12504] vivid-011: RDS Program Type: 0 inactive [ 440.683293][T12504] vivid-011: RDS PS Name: inactive [ 440.729717][T12504] vivid-011: RDS Radio Text: inactive [ 440.759641][T12504] vivid-011: RDS Traffic Announcement: false inactive [ 440.776203][T12511] random: crng reseeded on system resumption [ 440.795756][T12504] [ 440.809835][T12504] vivid-011: RDS Traffic Program: false inactive [ 440.857257][T12504] vivid-011: RDS Music: false inactive [ 440.906055][T12504] vivid-011: ================== END STATUS ================== [ 444.706939][T12552] netlink: 'syz.1.1758': attribute type 1 has an invalid length. [ 444.716881][T12552] nbd: error processing sock list [ 444.869580][T12554] netlink: 'syz.2.1759': attribute type 1 has an invalid length. [ 444.877460][T12554] nbd: error processing sock list [ 446.948975][T12599] binder: 12598:12599 ioctl c0306201 0 returned -14 [ 447.464265][ T30] audit: type=1800 audit(4294967621.230:3): pid=12605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1767" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 447.822548][T12590] Process accounting paused [ 448.297947][T12613] netlink: 'syz.0.1769': attribute type 1 has an invalid length. [ 448.333503][T12613] nbd: error processing sock list [ 448.780600][T12622] netlink: 'syz.1.1771': attribute type 1 has an invalid length. [ 448.811601][T12622] nbd: error processing sock list [ 458.131352][T12755] nfs: Unknown parameter '' [ 459.628358][T12775] netlink: 'syz.0.1797': attribute type 1 has an invalid length. [ 459.647337][T12775] nbd: error processing sock list [ 459.985386][T12784] netlink: 'syz.3.1798': attribute type 1 has an invalid length. [ 460.316125][T12790] netlink: 'syz.0.1800': attribute type 1 has an invalid length. [ 460.368694][T12790] nbd: error processing sock list [ 461.516036][T12803] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 461.539378][T12803] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 461.726921][T12803] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 461.754482][T12803] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 461.820343][T12803] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 461.836330][T12803] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 461.846138][T12803] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 462.671389][T12819] ubi0: attaching mtd0 [ 462.782269][T12819] ubi0: scanning is finished [ 462.791070][T12819] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 463.153744][T12819] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 463.387224][ T5632] Bluetooth: hci3: command 0x0406 tx timeout [ 463.784127][ T5632] Bluetooth: hci1: command 0x0406 tx timeout [ 463.863324][ T5632] Bluetooth: hci2: command 0x0406 tx timeout [ 464.617818][ T5632] block nbd197: Receive control failed (result -32) [ 465.463254][ T5632] Bluetooth: hci3: command 0x0406 tx timeout [ 465.866216][ T5632] Bluetooth: hci1: command 0x0406 tx timeout [ 465.944374][ T5632] Bluetooth: hci2: command 0x0406 tx timeout [ 467.943978][ T5632] Bluetooth: hci1: command 0x0406 tx timeout [ 468.115958][T12891] netlink: 'syz.1.1817': attribute type 1 has an invalid length. [ 468.171821][T12891] nbd: error processing sock list [ 468.443647][T12897] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1818'. [ 472.398521][ T5632] block nbd198: Receive control failed (result -32) [ 473.096316][ T5632] block nbd199: Receive control failed (result -32) [ 473.462065][T12975] Invalid ELF header magic: != ELF [ 473.590112][T12973] FAULT_INJECTION: forcing a failure. [ 473.590112][T12973] name failslab, interval 1, probability 0, space 0, times 0 [ 473.614783][T12973] CPU: 1 UID: 0 PID: 12973 Comm: syz.3.1831 Tainted: G L syzkaller #0 PREEMPT(full) [ 473.614835][T12973] Tainted: [L]=SOFTLOCKUP [ 473.614844][T12973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 473.614860][T12973] Call Trace: [ 473.614868][T12973] [ 473.614877][T12973] dump_stack_lvl+0x100/0x190 [ 473.614914][T12973] should_fail_ex.cold+0x5/0xa [ 473.614943][T12973] should_failslab+0xc2/0x120 [ 473.614981][T12973] __kmalloc_cache_noprof+0x91/0x6c0 [ 473.615007][T12973] ? _raw_read_unlock_irqrestore+0x3b/0x80 [ 473.615041][T12973] ? snd_pcm_attach_substream+0x436/0xd20 [ 473.615165][T12973] snd_pcm_attach_substream+0x436/0xd20 [ 473.615211][T12973] snd_pcm_open_substream+0x90/0x1850 [ 473.615290][T12973] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 473.615326][T12973] ? snd_pcm_oss_open+0x5e5/0x1390 [ 473.615373][T12973] snd_pcm_oss_open+0x735/0x1390 [ 473.615409][T12973] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 473.615436][T12973] ? __lock_acquire+0x49f/0x1a40 [ 473.615478][T12973] ? __pfx_default_wake_function+0x10/0x10 [ 473.615518][T12973] ? do_raw_spin_lock+0x128/0x260 [ 473.615547][T12973] ? soundcore_open+0x231/0x5a0 [ 473.615620][T12973] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 473.615647][T12973] soundcore_open+0x2e3/0x5a0 [ 473.615689][T12973] ? __pfx_soundcore_open+0x10/0x10 [ 473.615735][T12973] chrdev_open+0x234/0x6a0 [ 473.615762][T12973] ? __pfx_apparmor_file_open+0x10/0x10 [ 473.615880][T12973] ? __pfx_chrdev_open+0x10/0x10 [ 473.615908][T12973] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 473.615945][T12973] do_dentry_open+0x6ab/0x14d0 [ 473.615970][T12973] ? __pfx_chrdev_open+0x10/0x10 [ 473.616002][T12973] vfs_open+0x82/0x3f0 [ 473.616038][T12973] path_openat+0x2873/0x4280 [ 473.616076][T12973] ? __pfx_path_openat+0x10/0x10 [ 473.616110][T12973] do_file_open+0x20e/0x430 [ 473.616138][T12973] ? __pfx_do_file_open+0x10/0x10 [ 473.616184][T12973] ? alloc_fd+0x471/0x7a0 [ 473.616213][T12973] ? do_getname+0x191/0x390 [ 473.616248][T12973] do_sys_openat2+0x10f/0x1e0 [ 473.616282][T12973] ? __pfx_do_sys_openat2+0x10/0x10 [ 473.616326][T12973] __x64_sys_openat+0x12d/0x210 [ 473.616362][T12973] ? __pfx___x64_sys_openat+0x10/0x10 [ 473.616407][T12973] do_syscall_64+0x115/0x840 [ 473.616438][T12973] ? clear_bhb_loop+0x40/0x90 [ 473.616469][T12973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.616495][T12973] RIP: 0033:0x7fe45d39de99 [ 473.616516][T12973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.616541][T12973] RSP: 002b:00007fe45e2a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 473.616565][T12973] RAX: ffffffffffffffda RBX: 00007fe45d625fa0 RCX: 00007fe45d39de99 [ 473.616582][T12973] RDX: 0000000000020b42 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 473.616598][T12973] RBP: 00007fe45d433eaf R08: 0000000000000000 R09: 0000000000000000 [ 473.616613][T12973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.616628][T12973] R13: 00007fe45d626038 R14: 00007fe45d625fa0 R15: 00007fff323e5b88 [ 473.616660][T12973] [ 474.300260][ T5632] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 475.650512][T12994] netlink: 'syz.1.1835': attribute type 1 has an invalid length. [ 475.686133][T12994] nbd: error processing sock list [ 476.185072][T12987] FAULT_INJECTION: forcing a failure. [ 476.185072][T12987] name failslab, interval 1, probability 0, space 0, times 0 [ 476.210658][T12987] CPU: 1 UID: 0 PID: 12987 Comm: syz.2.1834 Tainted: G L syzkaller #0 PREEMPT(full) [ 476.210712][T12987] Tainted: [L]=SOFTLOCKUP [ 476.210724][T12987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 476.210744][T12987] Call Trace: [ 476.210755][T12987] [ 476.210768][T12987] dump_stack_lvl+0x100/0x190 [ 476.210813][T12987] should_fail_ex.cold+0x5/0xa [ 476.210854][T12987] should_failslab+0xc2/0x120 [ 476.210905][T12987] kmem_cache_alloc_noprof+0x91/0x6a0 [ 476.210947][T12987] ? rcu_is_watching+0x12/0xc0 [ 476.210991][T12987] ? anon_vma_clone+0x2ba/0xcd0 [ 476.211051][T12987] anon_vma_clone+0x2ba/0xcd0 [ 476.211116][T12987] copy_vma+0x6ed/0xac0 [ 476.211160][T12987] ? __pfx_copy_vma+0x10/0x10 [ 476.211247][T12987] copy_vma_and_data+0x1cf/0x7c0 [ 476.211292][T12987] ? __pfx_copy_vma_and_data+0x10/0x10 [ 476.211350][T12987] ? __vma_start_write+0x17f/0x280 [ 476.211408][T12987] ? __pfx___vma_start_write+0x10/0x10 [ 476.211488][T12987] move_vma+0x574/0x1920 [ 476.211534][T12987] ? __pfx_move_vma+0x10/0x10 [ 476.211578][T12987] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 476.211632][T12987] ? cap_mmap_addr+0x4b/0x120 [ 476.211671][T12987] ? bpf_lsm_mmap_addr+0x9/0x30 [ 476.211706][T12987] ? security_mmap_addr+0x71/0x1e0 [ 476.211758][T12987] ? __get_unmapped_area+0x255/0x3e0 [ 476.211819][T12987] ? vrm_set_new_addr+0x204/0x290 [ 476.211861][T12987] mremap_to+0x234/0x4c0 [ 476.211899][T12987] ? mas_walk+0x6ef/0x9b0 [ 476.211943][T12987] ? __pfx_mremap_to+0x10/0x10 [ 476.211981][T12987] ? check_prep_vma+0x912/0xe60 [ 476.212028][T12987] __do_sys_mremap+0x88c/0x1850 [ 476.212083][T12987] ? __pfx___do_sys_mremap+0x10/0x10 [ 476.212136][T12987] ? __pfx_do_futex+0x10/0x10 [ 476.212189][T12987] ? __x64_sys_futex+0x34f/0x4d0 [ 476.212254][T12987] do_syscall_64+0x115/0x840 [ 476.212298][T12987] ? clear_bhb_loop+0x40/0x90 [ 476.212342][T12987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.212380][T12987] RIP: 0033:0x7f847819de99 [ 476.212409][T12987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.212450][T12987] RSP: 002b:00007f8479150028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 476.212522][T12987] RAX: ffffffffffffffda RBX: 00007f8478425fa0 RCX: 00007f847819de99 [ 476.212545][T12987] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 476.212567][T12987] RBP: 00007f8478233eaf R08: 0000000100000000 R09: 0000000000000000 [ 476.212589][T12987] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 476.212610][T12987] R13: 00007f8478426038 R14: 00007f8478425fa0 R15: 00007ffc83dba0b8 [ 476.212655][T12987] [ 477.881696][T13023] netlink: 'syz.0.1838': attribute type 1 has an invalid length. [ 477.890439][T13023] nbd: error processing sock list [ 478.071646][T13025] Process accounting resumed [ 478.304925][T13031] FAULT_INJECTION: forcing a failure. [ 478.304925][T13031] name failslab, interval 1, probability 0, space 0, times 0 [ 478.320533][T13031] CPU: 1 UID: 0 PID: 13031 Comm: syz.0.1840 Tainted: G L syzkaller #0 PREEMPT(full) [ 478.320588][T13031] Tainted: [L]=SOFTLOCKUP [ 478.320601][T13031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 478.320622][T13031] Call Trace: [ 478.320632][T13031] [ 478.320646][T13031] dump_stack_lvl+0x100/0x190 [ 478.320694][T13031] should_fail_ex.cold+0x5/0xa [ 478.320731][T13031] should_failslab+0xc2/0x120 [ 478.320783][T13031] kmem_cache_alloc_noprof+0x91/0x6a0 [ 478.320831][T13031] ? __kernfs_new_node+0xd2/0xa10 [ 478.320960][T13031] __kernfs_new_node+0xd2/0xa10 [ 478.321002][T13031] ? __pfx___kernfs_new_node+0x10/0x10 [ 478.321047][T13031] ? find_held_lock+0x2b/0x80 [ 478.321093][T13031] ? kernfs_root+0xee/0x2a0 [ 478.321171][T13031] ? kernfs_root+0xee/0x2a0 [ 478.321230][T13031] kernfs_new_node+0x117/0x150 [ 478.321270][T13031] __kernfs_create_file+0x53/0x350 [ 478.321317][T13031] sysfs_add_file_mode_ns+0x207/0x3c0 [ 478.321415][T13031] sysfs_merge_group+0x194/0x340 [ 478.321473][T13031] ? __pfx_sysfs_merge_group+0x10/0x10 [ 478.321528][T13031] ? bus_add_device+0x2e2/0x6c0 [ 478.321617][T13031] ? __pfx_bus_add_device+0x10/0x10 [ 478.321658][T13031] ? __pfx_dev_add_physical_location+0x10/0x10 [ 478.321773][T13031] dpm_sysfs_add+0x237/0x280 [ 478.321829][T13031] device_add+0x9f4/0x1970 [ 478.321931][T13031] ? __pfx_device_add+0x10/0x10 [ 478.321985][T13031] ? lockdep_init_map_type+0x5c/0x250 [ 478.322021][T13031] ? __init_waitqueue_head+0xca/0x150 [ 478.322069][T13031] rfkill_register+0x1ad/0xb30 [ 478.322155][T13031] nfc_register_device+0x11f/0x3e0 [ 478.322256][T13031] nci_register_device+0x7f1/0xb80 [ 478.322316][T13031] ? __pfx_nci_register_device+0x10/0x10 [ 478.322359][T13031] ? lockdep_init_map_type+0x5c/0x250 [ 478.322410][T13031] virtual_ncidev_open+0x141/0x220 [ 478.322517][T13031] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 478.322574][T13031] misc_open+0x26d/0x450 [ 478.322662][T13031] ? __pfx_misc_open+0x10/0x10 [ 478.322698][T13031] chrdev_open+0x234/0x6a0 [ 478.322735][T13031] ? __pfx_apparmor_file_open+0x10/0x10 [ 478.322776][T13031] ? __pfx_chrdev_open+0x10/0x10 [ 478.322816][T13031] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 478.322868][T13031] do_dentry_open+0x6ab/0x14d0 [ 478.322903][T13031] ? __pfx_chrdev_open+0x10/0x10 [ 478.322949][T13031] vfs_open+0x82/0x3f0 [ 478.322999][T13031] path_openat+0x2873/0x4280 [ 478.323054][T13031] ? __pfx_path_openat+0x10/0x10 [ 478.323103][T13031] do_file_open+0x20e/0x430 [ 478.323141][T13031] ? __pfx_do_file_open+0x10/0x10 [ 478.323207][T13031] ? alloc_fd+0x471/0x7a0 [ 478.323257][T13031] ? do_getname+0x191/0x390 [ 478.323306][T13031] do_sys_openat2+0x10f/0x1e0 [ 478.323360][T13031] ? __pfx_do_sys_openat2+0x10/0x10 [ 478.323433][T13031] ? __fget_files+0x21f/0x3d0 [ 478.323476][T13031] __x64_sys_openat+0x12d/0x210 [ 478.323527][T13031] ? __pfx___x64_sys_openat+0x10/0x10 [ 478.323593][T13031] do_syscall_64+0x115/0x840 [ 478.323666][T13031] ? clear_bhb_loop+0x40/0x90 [ 478.323711][T13031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.323747][T13031] RIP: 0033:0x7f86ecf9de99 [ 478.323785][T13031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.323819][T13031] RSP: 002b:00007f86eddcc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 478.323853][T13031] RAX: ffffffffffffffda RBX: 00007f86ed225fa0 RCX: 00007f86ecf9de99 [ 478.323876][T13031] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 478.323898][T13031] RBP: 00007f86ed033eaf R08: 0000000000000000 R09: 0000000000000000 [ 478.323920][T13031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 478.323940][T13031] R13: 00007f86ed226038 R14: 00007f86ed225fa0 R15: 00007fff2836ced8 [ 478.323986][T13031] [ 478.805762][ T5632] block nbd200: Receive control failed (result -32) [ 479.523272][T13044] ima: policy update failed [ 479.562430][ T30] audit: type=1802 audit(1843104531.430:4): pid=13044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1840" res=0 errno=0 [ 480.504863][ T5632] block nbd201: Receive control failed (result -32) [ 480.802970][T13066] random: crng reseeded on system resumption [ 483.246238][ T5632] block nbd202: Receive control failed (result -32) [ 484.076452][ T5632] block nbd203: Receive control failed (result -32) [ 485.030335][T13133] netlink: 'syz.3.1858': attribute type 1 has an invalid length. [ 485.150070][T13133] nbd: error processing sock list [ 486.104851][ T5632] block nbd204: Receive control failed (result -32) [ 486.826981][T13164] FAULT_INJECTION: forcing a failure. [ 486.826981][T13164] name failslab, interval 1, probability 0, space 0, times 0 [ 486.875382][T13164] CPU: 1 UID: 0 PID: 13164 Comm: syz.2.1863 Tainted: G L syzkaller #0 PREEMPT(full) [ 486.875423][T13164] Tainted: [L]=SOFTLOCKUP [ 486.875432][T13164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 486.875447][T13164] Call Trace: [ 486.875455][T13164] [ 486.875464][T13164] dump_stack_lvl+0x100/0x190 [ 486.875497][T13164] should_fail_ex.cold+0x5/0xa [ 486.875525][T13164] should_failslab+0xc2/0x120 [ 486.875561][T13164] __kmalloc_cache_noprof+0x91/0x6c0 [ 486.875589][T13164] ? percpu_ref_init+0xec/0x3f0 [ 486.875624][T13164] ? __pfx_blk_queue_usage_counter_release+0x10/0x10 [ 486.875727][T13164] percpu_ref_init+0xec/0x3f0 [ 486.875760][T13164] blk_alloc_queue+0x574/0x790 [ 486.875828][T13164] blk_mq_alloc_queue+0x174/0x290 [ 486.875880][T13164] ? __pfx_blk_mq_alloc_queue+0x10/0x10 [ 486.875926][T13164] ? blk_mq_alloc_tag_set+0xe2c/0x1330 [ 486.875963][T13164] __blk_mq_alloc_disk+0x29/0x120 [ 486.875993][T13164] loop_add+0x498/0xb60 [ 486.876023][T13164] ? __pfx_loop_add+0x10/0x10 [ 486.876069][T13164] ? find_held_lock+0x2b/0x80 [ 486.876101][T13164] ? __fget_files+0x215/0x3d0 [ 486.876127][T13164] loop_control_ioctl+0xae/0x620 [ 486.876159][T13164] ? __pfx_loop_control_ioctl+0x10/0x10 [ 486.876194][T13164] ? __pfx_loop_control_ioctl+0x10/0x10 [ 486.876227][T13164] __x64_sys_ioctl+0x18e/0x210 [ 486.876266][T13164] do_syscall_64+0x115/0x840 [ 486.876297][T13164] ? clear_bhb_loop+0x40/0x90 [ 486.876328][T13164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.876354][T13164] RIP: 0033:0x7f847819de99 [ 486.876377][T13164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.876402][T13164] RSP: 002b:00007f8479150028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 486.876426][T13164] RAX: ffffffffffffffda RBX: 00007f8478425fa0 RCX: 00007f847819de99 [ 486.876443][T13164] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000006 [ 486.876459][T13164] RBP: 00007f8478233eaf R08: 0000000000000000 R09: 0000000000000000 [ 486.876474][T13164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.876489][T13164] R13: 00007f8478426038 R14: 00007f8478425fa0 R15: 00007ffc83dba0b8 [ 486.876549][T13164] [ 487.115045][ T5632] block nbd205: Receive control failed (result -32) [ 487.475964][T13176] scsi_dev_info_list_add_str: bad dev info string '/&c' '' '' [ 489.065299][T13195] netlink: 'syz.0.1869': attribute type 1 has an invalid length. [ 489.076940][T13195] nbd: error processing sock list [ 489.219673][ T30] audit: type=1800 audit(1843104541.100:5): pid=13200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1870" name="version" dev="configfs" ino=72159 res=0 errno=0 [ 490.483814][ T5632] block nbd206: Receive control failed (result -32) [ 492.128733][ T5632] block nbd207: Receive control failed (result -32) [ 494.735146][ T5632] block nbd208: Receive control failed (result -32) [ 495.348963][ T5632] block nbd209: Receive control failed (result -32) [ 495.617868][T13313] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 498.094573][T13336] random: crng reseeded on system resumption [ 498.914414][ T5632] block nbd210: Receive control failed (result -32) [ 499.677005][ T5632] block nbd211: Receive control failed (result -32) [ 499.833261][T13376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1899'. [ 500.278682][T13382] FAULT_INJECTION: forcing a failure. [ 500.278682][T13382] name failslab, interval 1, probability 0, space 0, times 0 [ 500.278740][T13382] CPU: 1 UID: 0 PID: 13382 Comm: syz.3.1900 Tainted: G L syzkaller #0 PREEMPT(full) [ 500.278800][T13382] Tainted: [L]=SOFTLOCKUP [ 500.278812][T13382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 500.278833][T13382] Call Trace: [ 500.278844][T13382] [ 500.278857][T13382] dump_stack_lvl+0x100/0x190 [ 500.278902][T13382] should_fail_ex.cold+0x5/0xa [ 500.278948][T13382] should_failslab+0xc2/0x120 [ 500.278999][T13382] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 500.279051][T13382] ? devinet_init_net+0xa3/0x8d0 [ 500.279100][T13382] ? __pfx_devinet_init_net+0x10/0x10 [ 500.279141][T13382] kmemdup_noprof+0x29/0x60 [ 500.279183][T13382] devinet_init_net+0xa3/0x8d0 [ 500.279227][T13382] ? __pfx_devinet_init_net+0x10/0x10 [ 500.279270][T13382] ops_init+0x1e2/0x5f0 [ 500.279326][T13382] setup_net+0x118/0x3a0 [ 500.279378][T13382] ? __pfx_setup_net+0x10/0x10 [ 500.279430][T13382] ? mutex_init_lockdep+0xf1/0x120 [ 500.279472][T13382] copy_net_ns+0x46f/0x7c0 [ 500.279533][T13382] create_new_namespaces+0x3ea/0xac0 [ 500.279582][T13382] unshare_nsproxy_namespaces+0xf2/0x220 [ 500.279625][T13382] ksys_unshare+0x438/0xab0 [ 500.279671][T13382] ? __pfx_ksys_unshare+0x10/0x10 [ 500.279732][T13382] __x64_sys_unshare+0x31/0x40 [ 500.279785][T13382] do_syscall_64+0x115/0x840 [ 500.279828][T13382] ? clear_bhb_loop+0x40/0x90 [ 500.279871][T13382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.279907][T13382] RIP: 0033:0x7fe45d39de99 [ 500.279935][T13382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.279970][T13382] RSP: 002b:00007fe45e280028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 500.280003][T13382] RAX: ffffffffffffffda RBX: 00007fe45d626090 RCX: 00007fe45d39de99 [ 500.280027][T13382] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 500.280048][T13382] RBP: 00007fe45d433eaf R08: 0000000000000000 R09: 0000000000000000 [ 500.280069][T13382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 500.280089][T13382] R13: 00007fe45d626128 R14: 00007fe45d626090 R15: 00007fff323e5b88 [ 500.280134][T13382] [ 501.788091][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.795110][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.368630][ T5632] block nbd212: Receive control failed (result -32) [ 504.534983][ T30] audit: type=1800 audit(1843104556.420:6): pid=13444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1910" name="dbroot" dev="configfs" ino=75121 res=0 errno=0 [ 504.601418][T13444] db_root: cannot open: /sy] [ 504.974315][T13425] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 504.992591][T13425] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 505.000578][T13425] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 505.895158][ T5632] block nbd213: Receive control failed (result -32) [ 506.023249][ T5632] Bluetooth: hci3: command 0x0406 tx timeout [ 507.063278][ T5632] Bluetooth: hci2: command 0x0406 tx timeout [ 507.069386][ T5632] Bluetooth: hci1: command 0x0406 tx timeout [ 507.781428][ T5632] block nbd214: Receive control failed (result -32) [ 508.239426][ T5632] block nbd215: Receive control failed (result -32) [ 508.334705][T13501] Process accounting paused [ 509.086607][ T5632] block nbd216: Receive control failed (result -32) [ 509.367808][T13536] random: crng reseeded on system resumption [ 509.917209][ T5632] block nbd217: Receive control failed (result -32) [ 511.112309][ T5632] block nbd218: Receive control failed (result -32) [ 512.295742][ T5632] block nbd219: Receive control failed (result -32) [ 512.409737][T13572] FAULT_INJECTION: forcing a failure. [ 512.409737][T13572] name failslab, interval 1, probability 0, space 0, times 0 [ 512.424948][T13572] CPU: 0 UID: 0 PID: 13572 Comm: syz.3.1928 Tainted: G L syzkaller #0 PREEMPT(full) [ 512.424998][T13572] Tainted: [L]=SOFTLOCKUP [ 512.425015][T13572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 512.425030][T13572] Call Trace: [ 512.425037][T13572] [ 512.425045][T13572] dump_stack_lvl+0x100/0x190 [ 512.425082][T13572] should_fail_ex.cold+0x5/0xa [ 512.425116][T13572] should_failslab+0xc2/0x120 [ 512.425149][T13572] kmem_cache_alloc_noprof+0x91/0x6a0 [ 512.425179][T13572] ? __pfx_acct_collect+0x10/0x10 [ 512.425210][T13572] ? taskstats_exit+0x6d3/0xca0 [ 512.425249][T13572] taskstats_exit+0x6d3/0xca0 [ 512.425281][T13572] ? __pfx_acct_update_integrals+0x10/0x10 [ 512.425318][T13572] ? __pfx_taskstats_exit+0x10/0x10 [ 512.425354][T13572] ? rcu_read_lock_any_held+0x6a/0xa0 [ 512.425390][T13572] do_exit+0x65c/0x2ae0 [ 512.425427][T13572] ? __pfx_do_exit+0x10/0x10 [ 512.425459][T13572] ? do_raw_spin_lock+0x128/0x260 [ 512.425485][T13572] ? find_held_lock+0x2b/0x80 [ 512.425513][T13572] ? get_signal+0x7e0/0x21e0 [ 512.425546][T13572] do_group_exit+0xd5/0x2a0 [ 512.425581][T13572] get_signal+0x1ec7/0x21e0 [ 512.425651][T13572] ? __pfx_get_signal+0x10/0x10 [ 512.425680][T13572] ? do_futex+0x190/0x440 [ 512.425708][T13572] arch_do_signal_or_restart+0x91/0x7a0 [ 512.425779][T13572] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 512.425835][T13572] exit_to_user_mode_loop+0x139/0x6f0 [ 512.425858][T13572] ? rcu_is_watching+0x12/0xc0 [ 512.425889][T13572] do_syscall_64+0x652/0x840 [ 512.425918][T13572] ? clear_bhb_loop+0x40/0x90 [ 512.425947][T13572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.425971][T13572] RIP: 0033:0x7fe45d39de99 [ 512.425991][T13572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.426014][T13572] RSP: 002b:00007fe45e25f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 512.426036][T13572] RAX: fffffffffffffe00 RBX: 00007fe45d626188 RCX: 00007fe45d39de99 [ 512.426051][T13572] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe45d626188 [ 512.426066][T13572] RBP: 00007fe45d626180 R08: 0000000000000000 R09: 0000000000000000 [ 512.426080][T13572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 512.426099][T13572] R13: 00007fe45d626218 R14: 00007fff323e5aa0 R15: 00007fff323e5b88 [ 512.426129][T13572] [ 513.399217][T13584] workqueue: Failed to create a rescuer kthread for wq "nbd221-recv": -EINTR [ 513.405147][T13584] block (null): Could not allocate knbd recv work queue. [ 513.526361][T13584] nbd: failed to add new device [ 513.565383][ T5632] block nbd220: Receive control failed (result -32) [ 513.812571][T13607] futex_wake_op: syz.1.1935 tries to shift op by -2048; fix this program [ 513.821991][T13607] futex_wake_op: syz.1.1935 tries to shift op by -2048; fix this program [ 514.318429][ T5632] block nbd221: Receive control failed (result -32) [ 515.478977][ T5632] block nbd222: Receive control failed (result -32) [ 516.911496][T13660] random: crng reseeded on system resumption [ 518.289291][ T5632] block nbd223: Receive control failed (result -32) [ 518.771065][ T5632] block nbd224: Receive control failed (result -32) [ 520.060153][ T5632] block nbd225: Receive control failed (result -32) [ 520.180739][T13719] ovs_: entered promiscuous mode [ 524.541602][ T5632] block nbd226: Receive control failed (result -32) [ 525.120776][ T5632] block nbd227: Receive control failed (result -32) [ 526.620883][ T5632] block nbd228: Receive control failed (result -32) [ 526.689568][T13825] bridge0: port 3(veth1) entered blocking state [ 526.696266][T13825] bridge0: port 3(veth1) entered disabled state [ 526.706201][T13825] veth1: entered allmulticast mode [ 526.732909][T13825] veth1: entered promiscuous mode [ 526.759118][T13825] bridge0: port 3(veth1) entered blocking state [ 526.765631][T13825] bridge0: port 3(veth1) entered forwarding state [ 529.727579][ T5632] block nbd229: Receive control failed (result -32) [ 530.756689][ T5632] block nbd230: Receive control failed (result -32) [ 531.991412][ T5632] block nbd231: Receive control failed (result -32) [ 534.184824][T13949] random: crng reseeded on system resumption [ 536.990677][T13980] ubi0: attaching mtd0 [ 537.092963][T13980] ubi0: scanning is finished [ 537.097828][T13980] ubi0: empty MTD device detected [ 537.818279][T13980] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 537.857439][T13980] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 537.910688][T13980] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 537.944726][T13980] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 537.968507][T13980] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 538.004857][T13980] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 538.013943][T13980] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 828036297 [ 538.046478][T13980] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 538.124606][T13994] ubi0: background thread "ubi_bgt0d" started, PID 13994 [ 538.218367][T13983] ubi0: detaching mtd0 [ 538.324671][ T5632] block nbd232: Receive control failed (result -32) [ 538.426575][T13983] ubi0: mtd0 is detached [ 538.697171][T14003] Process accounting resumed [ 539.013204][ T5632] block nbd233: Receive control failed (result -32) [ 539.654564][T14023] hub 1-0:1.0: USB hub found [ 539.725153][T14023] hub 1-0:1.0: 1 port detected [ 544.180083][ T5632] Bluetooth: hci1: unexpected event 0x10 length: 124 > 1 [ 544.184076][ T50] Bluetooth: hci1: hardware error 0x00 [ 544.240977][ T5632] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 544.248932][ T5632] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 544.695841][ T5632] block nbd234: Receive control failed (result -32) [ 545.168823][ T5778] Process accounting resumed [ 546.270718][ T50] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 546.884839][T14090] Process accounting resumed [ 550.648322][ T50] block nbd235: Receive control failed (result -32) [ 551.595255][T14134] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 552.298396][T14161] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input20 [ 553.353580][ T50] block nbd236: Receive control failed (result -32) [ 553.461682][T14183] ubi0: attaching mtd0 [ 553.669733][T14183] ubi0: scanning is finished [ 554.369789][T14183] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 554.387174][T14183] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 554.417400][T14183] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 554.457979][T14183] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 554.507269][T14183] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 554.598166][T14183] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 554.638842][T14183] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 828036297 [ 554.686747][T14183] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 554.716225][T14200] ubi0: background thread "ubi_bgt0d" started, PID 14200 [ 554.739710][T14186] ubi0: detaching mtd0 [ 554.779451][T14186] ubi0: mtd0 is detached [ 554.805920][ T50] block nbd237: Receive control failed (result -32) [ 556.614769][ T50] block nbd238: Receive control failed (result -32) [ 556.782701][T14231] ubi0: attaching mtd0 [ 556.828007][T14231] ubi0: scanning is finished [ 557.197366][T14231] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 557.245591][T14231] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 557.291700][T14231] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 557.329326][T14231] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 557.504960][T14231] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 557.532187][T14231] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 557.552018][T14231] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 828036297 [ 557.613360][T14231] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 557.676706][T14235] ubi0: detaching mtd0 [ 557.720614][T14235] ubi0: mtd0 is detached [ 559.335105][ T50] block nbd239: Receive control failed (result -32) [ 560.383956][T14265] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 561.138317][ T30] audit: type=1804 audit(1843104613.020:7): pid=14285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2056" name="/newroot/481/file0" dev="tmpfs" ino=2485 res=1 errno=0 [ 561.425533][T14294] hub 1-0:1.0: USB hub found [ 561.452320][T14294] hub 1-0:1.0: 1 port detected [ 562.546777][ T50] block nbd240: Receive control failed (result -32) [ 562.827806][T14310] FAULT_INJECTION: forcing a failure. [ 562.827806][T14310] name failslab, interval 1, probability 0, space 0, times 0 [ 562.895004][T14314] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2055'. [ 562.904628][T14310] CPU: 1 UID: 0 PID: 14310 Comm: syz.3.2053 Tainted: G L syzkaller #0 PREEMPT(full) [ 562.904681][T14310] Tainted: [L]=SOFTLOCKUP [ 562.904693][T14310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 562.904714][T14310] Call Trace: [ 562.904726][T14310] [ 562.904739][T14310] dump_stack_lvl+0x100/0x190 [ 562.904786][T14310] should_fail_ex.cold+0x5/0xa [ 562.904826][T14310] should_failslab+0xc2/0x120 [ 562.904878][T14310] __kmalloc_cache_noprof+0x91/0x6c0 [ 562.904918][T14310] ? landlock_restrict_sibling_threads+0x530/0x1490 [ 562.904984][T14310] landlock_restrict_sibling_threads+0x530/0x1490 [ 562.905051][T14310] ? __pfx_landlock_restrict_sibling_threads+0x10/0x10 [ 562.905148][T14310] ? __pfx___might_resched+0x10/0x10 [ 562.905206][T14310] ? landlock_merge_ruleset+0x213/0x8b0 [ 562.905258][T14310] __do_sys_landlock_restrict_self+0x5d2/0x9e0 [ 562.905309][T14310] do_syscall_64+0x115/0x840 [ 562.905351][T14310] ? clear_bhb_loop+0x40/0x90 [ 562.905394][T14310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.905431][T14310] RIP: 0033:0x7fe45d39de99 [ 562.905459][T14310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.905497][T14310] RSP: 002b:00007fe45e2a1028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 562.905530][T14310] RAX: ffffffffffffffda RBX: 00007fe45d625fa0 RCX: 00007fe45d39de99 [ 562.905553][T14310] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000000006 [ 562.905574][T14310] RBP: 00007fe45d433eaf R08: 0000000000000000 R09: 0000000000000000 [ 562.905596][T14310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 562.905623][T14310] R13: 00007fe45d626038 R14: 00007fe45d625fa0 R15: 00007fff323e5b88 [ 562.905668][T14310] [ 563.258918][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.265424][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.539297][T14323] FAULT_INJECTION: forcing a failure. [ 563.539297][T14323] name failslab, interval 1, probability 0, space 0, times 0 [ 563.594744][T14323] CPU: 1 UID: 7 PID: 14323 Comm: syz.0.2058 Tainted: G L syzkaller #0 PREEMPT(full) [ 563.594784][T14323] Tainted: [L]=SOFTLOCKUP [ 563.594793][T14323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 563.594808][T14323] Call Trace: [ 563.594816][T14323] [ 563.594825][T14323] dump_stack_lvl+0x100/0x190 [ 563.594858][T14323] should_fail_ex.cold+0x5/0xa [ 563.594886][T14323] should_failslab+0xc2/0x120 [ 563.594922][T14323] __kmalloc_cache_noprof+0x91/0x6c0 [ 563.594950][T14323] ? loop_add+0xb9/0xb60 [ 563.594982][T14323] loop_add+0xb9/0xb60 [ 563.595010][T14323] ? __pfx_loop_add+0x10/0x10 [ 563.595059][T14323] ? find_held_lock+0x2b/0x80 [ 563.595090][T14323] ? __fget_files+0x215/0x3d0 [ 563.595117][T14323] loop_control_ioctl+0xae/0x620 [ 563.595148][T14323] ? __pfx_loop_control_ioctl+0x10/0x10 [ 563.595183][T14323] ? __pfx_loop_control_ioctl+0x10/0x10 [ 563.595215][T14323] __x64_sys_ioctl+0x18e/0x210 [ 563.595254][T14323] do_syscall_64+0x115/0x840 [ 563.595284][T14323] ? clear_bhb_loop+0x40/0x90 [ 563.595315][T14323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.595341][T14323] RIP: 0033:0x7f86ecf9de99 [ 563.595360][T14323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.595385][T14323] RSP: 002b:00007f86eddcc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 563.595409][T14323] RAX: ffffffffffffffda RBX: 00007f86ed225fa0 RCX: 00007f86ecf9de99 [ 563.595425][T14323] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 563.595441][T14323] RBP: 00007f86ed033eaf R08: 0000000000000000 R09: 0000000000000000 [ 563.595456][T14323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 563.595471][T14323] R13: 00007f86ed226038 R14: 00007f86ed225fa0 R15: 00007fff2836ced8 [ 563.595502][T14323] [ 564.144584][ T50] block nbd241: Receive control failed (result -32) [ 564.290757][T14328] hub 1-0:1.0: USB hub found [ 564.340503][T14328] hub 1-0:1.0: 1 port detected [ 564.450278][T14334] vivid-007: ================= START STATUS ================= [ 564.483297][T14334] vivid-007: Generate PTS: true [ 564.509414][T14334] vivid-007: Generate SCR: true [ 564.521753][T14334] tpg source WxH: 320x240 (Y'CbCr) [ 564.539144][T14334] tpg field: 1 [ 564.552032][T14334] tpg crop: (0,0)/320x240 [ 564.563707][T14334] tpg compose: (0,0)/320x240 [ 564.599985][T14334] tpg colorspace: 8 [ 564.613798][T14334] tpg transfer function: 0/0 [ 564.629373][T14334] tpg Y'CbCr encoding: 0/0 [ 564.650092][T14334] tpg quantization: 0/0 [ 564.663333][T14334] tpg RGB range: 0/2 [ 564.672971][T14334] vivid-007: ================== END STATUS ================== [ 566.558938][ T50] block nbd242: Receive control failed (result -32) [ 567.886415][ T50] block nbd243: Receive control failed (result -32) [ 568.323681][T14383] netlink: 'syz.2.2068': attribute type 4 has an invalid length. [ 568.352228][T14383] netlink: 'syz.2.2068': attribute type 5 has an invalid length. [ 568.367448][T14383] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2068'. [ 571.072604][T14397] Process accounting paused [ 571.746901][ T50] block nbd244: Receive control failed (result -32) [ 574.838881][T14464] ubi0: attaching mtd0 [ 574.867577][T14464] ubi0: scanning is finished [ 575.231305][T14464] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 575.254799][T14464] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 575.268865][T14464] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 575.284823][T14464] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 575.295466][T14464] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 575.313178][T14464] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 575.322331][T14464] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 828036297 [ 575.370440][T14464] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 575.397199][T14474] ubi0: background thread "ubi_bgt0d" started, PID 14474 [ 575.425836][T14470] ubi0: detaching mtd0 [ 575.507906][T14470] ubi0: mtd0 is detached [ 575.975675][ T50] block nbd245: Receive control failed (result -32) [ 576.170161][T14488] FAULT_INJECTION: forcing a failure. [ 576.170161][T14488] name failslab, interval 1, probability 0, space 0, times 0 [ 576.209162][T14488] CPU: 1 UID: 0 PID: 14488 Comm: syz.2.2087 Tainted: G L syzkaller #0 PREEMPT(full) [ 576.209214][T14488] Tainted: [L]=SOFTLOCKUP [ 576.209223][T14488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 576.209238][T14488] Call Trace: [ 576.209247][T14488] [ 576.209256][T14488] dump_stack_lvl+0x100/0x190 [ 576.209289][T14488] should_fail_ex.cold+0x5/0xa [ 576.209317][T14488] should_failslab+0xc2/0x120 [ 576.209354][T14488] kmem_cache_alloc_noprof+0x91/0x6a0 [ 576.209385][T14488] ? fsnotify_add_mark_locked+0x33e/0x15f0 [ 576.209420][T14488] ? fsnotify_add_mark_locked+0x33e/0x15f0 [ 576.209461][T14488] ? fsnotify_add_mark_locked+0x39c/0x15f0 [ 576.209502][T14488] fsnotify_add_mark_locked+0x39c/0x15f0 [ 576.209538][T14488] ? __pfx_inc_ucount+0x10/0x10 [ 576.209571][T14488] ? find_held_lock+0x2b/0x80 [ 576.209601][T14488] ? inotify_update_watch+0x680/0xa90 [ 576.209646][T14488] inotify_update_watch+0x7bc/0xa90 [ 576.209690][T14488] __x64_sys_inotify_add_watch+0x2d7/0x370 [ 576.209735][T14488] ? __pfx___x64_sys_inotify_add_watch+0x10/0x10 [ 576.209785][T14488] do_syscall_64+0x115/0x840 [ 576.209818][T14488] ? clear_bhb_loop+0x40/0x90 [ 576.209884][T14488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.209910][T14488] RIP: 0033:0x7f847819de99 [ 576.209932][T14488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 576.209959][T14488] RSP: 002b:00007f8479150028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fe [ 576.209983][T14488] RAX: ffffffffffffffda RBX: 00007f8478425fa0 RCX: 00007f847819de99 [ 576.210000][T14488] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000004 [ 576.210014][T14488] RBP: 00007f8478233eaf R08: 0000000000000000 R09: 0000000000000000 [ 576.210029][T14488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 576.210044][T14488] R13: 00007f8478426038 R14: 00007f8478425fa0 R15: 00007ffc83dba0b8 [ 576.210076][T14488] [ 578.988089][T14514] Process accounting paused [ 579.305327][T14518] nfs: Unknown parameter '' [ 581.004174][ T50] block nbd246: Receive control failed (result -32) [ 583.838369][T14563] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2096'. [ 584.133842][T14563] bond0: (slave bond_slave_0): Releasing backup interface [ 584.745146][ T50] block nbd247: Receive control failed (result -32) [ 586.118097][T14606] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2103'. [ 587.670880][T14578] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 590.679107][T14626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2107'. [ 590.714327][T14626] netlink: 28905 bytes leftover after parsing attributes in process `syz.2.2107'. [ 594.191241][T14654] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2109'. [ 594.355918][T14654] bond0: (slave bond_slave_0): Releasing backup interface [ 595.583641][T14670] vivid-007: ================= START STATUS ================= [ 595.752024][T14670] vivid-007: Enable Output Cropping: true grabbed [ 595.854725][T14670] vivid-007: Enable Output Composing: true grabbed [ 595.893625][T14670] vivid-007: Enable Output Scaler: true grabbed [ 595.906243][T14670] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 595.925936][T14670] vivid-007: Transmit Mode: HDMI grabbed [ 595.958060][T14670] vivid-007: Hotplug Present: 0x00000000 [ 595.987776][T14670] vivid-007: RxSense Present: 0x00000000 [ 596.038288][T14670] vivid-007: EDID Present: 0x00000000 [ 596.078360][T14670] vivid-007: ================== END STATUS ================== [ 600.190227][T14718] vivid-011: ================= START STATUS ================= [ 600.291086][T14718] vivid-011: Radio HW Seek Mode: Bounded [ 600.389686][T14718] vivid-011: Radio Programmable HW Seek: false [ 600.576265][T14718] vivid-011: RDS Rx I/O Mode: Block I/O [ 600.661767][T14718] vivid-011: Generate RBDS Instead of RDS: false [ 600.756515][T14718] vivid-011: RDS Reception: true [ 600.895791][T14718] vivid-011: RDS Program Type: 0 inactive [ 600.969461][T14718] vivid-011: RDS PS Name: inactive [ 601.036079][T14718] vivid-011: RDS Radio Text: inactive [ 601.062177][T14718] vivid-011: RDS Traffic Announcement: false inactive [ 601.109408][T14718] vivid-011: RDS Traffic Program: false inactive [ 601.135487][T14718] vivid-011: RDS Music: false inactive [ 601.142756][T14718] vivid-011: ================== END STATUS ================== [ 601.426575][ T50] block nbd248: Receive control failed (result -32) [ 601.538705][T14715] Process accounting resumed [ 602.689683][T14737] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2123'. [ 602.862993][T14737] bond0: (slave bond_slave_0): Releasing backup interface [ 609.298909][T14794] Process accounting resumed [ 611.214294][T14833] vivid-011: ================= START STATUS ================= [ 611.230874][T14833] vivid-011: Radio HW Seek Mode: Bounded [ 611.259965][T14833] vivid-011: Radio Programmable HW Seek: false [ 611.285948][T14833] vivid-011: RDS Rx I/O Mode: Block I/O [ 611.306667][T14833] vivid-011: Generate RBDS Instead of RDS: false [ 611.325398][T14833] vivid-011: RDS Reception: true [ 611.344070][T14833] vivid-011: RDS Program Type: 0 inactive [ 611.373246][T14833] vivid-011: RDS PS Name: inactive [ 611.390788][T14833] vivid-011: RDS Radio Text: inactive [ 611.406108][T14833] vivid-011: RDS Traffic Announcement: false inactive [ 611.501130][T14833] vivid-011: RDS Traffic Program: false inactive [ 611.515508][T14833] vivid-011: RDS Music: false inactive [ 611.583114][T14833] vivid-011: ================== END STATUS ================== [ 614.214295][ T50] block nbd249: Receive control failed (result -32) [ 617.915523][T14491] syz.3.2082 (14491) used greatest stack depth: 18408 bytes left [ 618.299704][ T50] block nbd250: Receive control failed (result -32) [ 623.977159][ T30] audit: type=1800 audit(1843104675.850:8): pid=14986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2165" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 624.664757][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.664865][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.855906][ T50] block nbd251: Receive control failed (result -32) [ 632.348959][T15090] Process accounting paused [ 635.247860][T15140] Invalid ELF header magic: != ELF [ 637.370938][T15153] FAULT_INJECTION: forcing a failure. [ 637.370938][T15153] name failslab, interval 1, probability 0, space 0, times 0 [ 637.409274][T15153] CPU: 1 UID: 0 PID: 15153 Comm: syz.1.2192 Tainted: G L syzkaller #0 PREEMPT(full) [ 637.409316][T15153] Tainted: [L]=SOFTLOCKUP [ 637.409325][T15153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 637.409340][T15153] Call Trace: [ 637.409350][T15153] [ 637.409362][T15153] dump_stack_lvl+0x100/0x190 [ 637.409416][T15153] should_fail_ex.cold+0x5/0xa [ 637.409445][T15153] should_failslab+0xc2/0x120 [ 637.409481][T15153] __kmalloc_noprof+0xfc/0x820 [ 637.409513][T15153] ? tomoyo_encode2+0xfb/0x3c0 [ 637.409629][T15153] tomoyo_encode2+0xfb/0x3c0 [ 637.409670][T15153] tomoyo_encode+0x29/0x50 [ 637.409705][T15153] tomoyo_realpath_from_path+0x18c/0x690 [ 637.409750][T15153] tomoyo_check_open_permission+0x2af/0x3c0 [ 637.409786][T15153] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 637.409828][T15153] ? hook_file_open+0x24f/0x8f0 [ 637.409889][T15153] ? path_get+0x61/0x80 [ 637.409921][T15153] tomoyo_file_open+0x6b/0x90 [ 637.409946][T15153] security_file_open+0xb5/0x1e0 [ 637.409982][T15153] do_dentry_open+0x588/0x14d0 [ 637.410015][T15153] vfs_open+0x82/0x3f0 [ 637.410049][T15153] path_openat+0x2873/0x4280 [ 637.410097][T15153] ? __pfx_path_openat+0x10/0x10 [ 637.410130][T15153] do_file_open+0x20e/0x430 [ 637.410158][T15153] ? __pfx_do_file_open+0x10/0x10 [ 637.410203][T15153] ? alloc_fd+0x471/0x7a0 [ 637.410248][T15153] ? do_getname+0x191/0x390 [ 637.410284][T15153] do_sys_openat2+0x10f/0x1e0 [ 637.410318][T15153] ? __pfx_do_sys_openat2+0x10/0x10 [ 637.410365][T15153] __x64_sys_openat+0x12d/0x210 [ 637.410401][T15153] ? __pfx___x64_sys_openat+0x10/0x10 [ 637.410446][T15153] do_syscall_64+0x115/0x840 [ 637.410480][T15153] ? clear_bhb_loop+0x40/0x90 [ 637.410512][T15153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.410538][T15153] RIP: 0033:0x7f5e5ad9de99 [ 637.410559][T15153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.410584][T15153] RSP: 002b:00007f5e5bcfc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 637.410607][T15153] RAX: ffffffffffffffda RBX: 00007f5e5b025fa0 RCX: 00007f5e5ad9de99 [ 637.410624][T15153] RDX: 0000000000020b42 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 637.410640][T15153] RBP: 00007f5e5ae33eaf R08: 0000000000000000 R09: 0000000000000000 [ 637.410655][T15153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 637.410670][T15153] R13: 00007f5e5b026038 R14: 00007f5e5b025fa0 R15: 00007fff3ae89248 [ 637.410702][T15153] [ 637.662166][T15153] ERROR: Out of memory at tomoyo_realpath_from_path. [ 638.290174][T15175] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2196'. [ 638.386406][T15175] ce_p: renamed from lo (while UP) [ 638.678069][T15174] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2195'. [ 639.362677][T15186] Process accounting paused [ 639.569125][T15198] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 639.624952][ T50] block nbd252: Receive control failed (result -32) [ 640.400720][T15210] ubi0: attaching mtd0 [ 640.449705][T15210] ubi0: scanning is finished [ 640.839622][T15210] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 640.881118][T15210] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 640.902240][T15210] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 640.949323][T15210] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 640.963123][T15210] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 641.003232][T15210] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 641.014911][T15210] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 828036297 [ 641.073791][T15210] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 641.088337][T15196] ubi0: detaching mtd0 [ 641.177592][T15196] ubi0: mtd0 is detached [ 642.340675][T15216] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 642.374464][T15216] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 643.363575][ T50] block nbd253: Receive control failed (result -32) [ 643.943325][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 644.423360][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 645.375037][ T50] block nbd254: Receive control failed (result -32) [ 649.373343][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 649.722237][ T30] audit: type=1800 audit(1843104530.700:9): pid=15314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2216" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 650.226068][ T50] block nbd255: Receive control failed (result -32) [ 650.414550][T15327] ubi0: attaching mtd0 [ 650.528701][T15327] ubi0: scanning is finished [ 650.625900][T15329] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x1f pfn:0x47813 [ 650.655189][T15329] memcg:ffff888031ee6b00 [ 650.666089][T15329] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 650.682922][T15329] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 650.704378][T15329] raw: 000000000000001f 0000000000000000 00000001ffffffff ffff888031ee6b00 [ 650.726896][T15329] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 650.750052][T15329] page_owner tracks the page as allocated [ 650.770412][T15329] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 15329, tgid 15328 (syz.2.2219), ts 650625870618, free_ts 650602676584 [ 650.822229][T15329] post_alloc_hook+0xfd/0x120 [ 650.839249][T15329] get_page_from_freelist+0xf48/0x3530 [ 650.863747][T15329] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 650.879857][T15329] alloc_pages_mpol+0x1fb/0x540 [ 650.887354][T15329] folio_alloc_noprof+0x22/0x250 [ 650.893850][T15329] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 650.905954][T15329] filemap_alloc_folio_noprof+0x5e/0x80 [ 650.934992][T15329] page_cache_ra_order+0x539/0xed0 [ 650.948104][T15329] filemap_fault+0x1943/0x3130 [ 650.962050][T15329] __do_fault+0x10b/0x440 [ 650.969988][T15329] do_fault+0xeb2/0x1750 [ 650.986853][T15329] __handle_mm_fault+0x187d/0x2a00 [ 651.003970][T15329] handle_mm_fault+0x37b/0xa30 [ 651.020276][T15329] __get_user_pages+0x1178/0x32a0 [ 651.037187][T15329] populate_vma_page_range+0x267/0x3f0 [ 651.056742][T15329] __mm_populate+0x107/0x3a0 [ 651.071574][T15329] page last free pid 15330 tgid 15328 stack trace: [ 651.088679][T15329] free_unref_folios+0xa44/0x1710 [ 651.107552][T15329] folios_put_refs+0x585/0xaa0 [ 651.122965][T15329] truncate_inode_pages_range+0x30c/0x1050 [ 651.142760][T15329] set_blocksize+0x2d1/0x460 [ 651.158190][T15329] blkdev_bszset+0x19b/0x240 [ 651.170287][T15329] blkdev_ioctl+0x513/0x6f0 [ 651.186823][T15329] __x64_sys_ioctl+0x18e/0x210 [ 651.204565][T15329] do_syscall_64+0x115/0x840 [ 651.213499][T15329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.234249][T15329] ------------[ cut here ]------------ [ 651.239887][T15329] kernel BUG at mm/filemap.c:858! [ 651.245960][T15329] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 651.252277][T15329] CPU: 1 UID: 0 PID: 15329 Comm: syz.2.2219 Tainted: G L syzkaller #0 PREEMPT(full) [ 651.263283][T15329] Tainted: [L]=SOFTLOCKUP [ 651.267670][T15329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 651.277777][T15329] RIP: 0010:__filemap_add_folio+0xfc2/0x12a0 [ 651.283826][T15329] Code: 3d c2 ff 48 c7 c6 e0 89 dd 8b 4c 89 ef e8 66 ec 12 00 90 0f 0b e8 9e 3d c2 ff 48 c7 c6 40 8a dd 8b 4c 89 ef e8 4f ec 12 00 90 <0f> 0b e8 87 3d c2 ff 48 c7 c6 c0 8a dd 8b 4c 89 ef e8 38 ec 12 00 [ 651.303499][T15329] RSP: 0000:ffffc90003d173f8 EFLAGS: 00010246 [ 651.309617][T15329] RAX: 0000000000080000 RBX: 0000000000112cc0 RCX: ffffc90006201000 [ 651.317651][T15329] RDX: 0000000000080000 RSI: ffffffff825a5ba8 RDI: ffff8880468061c4 [ 651.325670][T15329] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 651.333690][T15329] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000004 [ 651.341710][T15329] R13: ffffea00011e04c0 R14: 0000000000000140 R15: 0000000000000000 [ 651.349725][T15329] FS: 00007f84791506c0(0000) GS:ffff888123ee3000(0000) knlGS:0000000000000000 [ 651.358707][T15329] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 651.365352][T15329] CR2: 0000000003b1d000 CR3: 0000000047ec4000 CR4: 00000000003526f0 [ 651.373379][T15329] Call Trace: [ 651.376692][T15329] [ 651.379661][T15329] ? __pfx___filemap_add_folio+0x10/0x10 [ 651.385364][T15329] filemap_add_folio+0x1d3/0x630 [ 651.390354][T15329] ? __lock_acquire+0x49f/0x1a40 [ 651.395382][T15329] ? __pfx_filemap_add_folio+0x10/0x10 [ 651.400899][T15329] ? __pfx___css_rstat_updated+0x10/0x10 [ 651.406620][T15329] page_cache_ra_order+0x602/0xed0 [ 651.411844][T15329] filemap_fault+0x1943/0x3130 [ 651.416689][T15329] ? __pfx_filemap_fault+0x10/0x10 [ 651.421864][T15329] ? blk_cgroup_congested+0x136/0x270 [ 651.427362][T15329] ? blk_cgroup_congested+0x136/0x270 [ 651.432793][T15329] ? __pfx_filemap_map_pages+0x10/0x10 [ 651.438306][T15329] __do_fault+0x10b/0x440 [ 651.442697][T15329] do_fault+0xeb2/0x1750 [ 651.447019][T15329] __handle_mm_fault+0x187d/0x2a00 [ 651.452171][T15329] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 651.457586][T15329] ? __pfx___handle_mm_fault+0x10/0x10 [ 651.463084][T15329] ? pte_offset_map_lock+0x174/0x320 [ 651.468419][T15329] ? find_held_lock+0x2b/0x80 [ 651.473144][T15329] ? follow_page_pte+0x4d0/0x13f0 [ 651.478215][T15329] handle_mm_fault+0x37b/0xa30 [ 651.483023][T15329] __get_user_pages+0x1178/0x32a0 [ 651.488117][T15329] ? __pfx___get_user_pages+0x10/0x10 [ 651.493542][T15329] populate_vma_page_range+0x267/0x3f0 [ 651.499050][T15329] ? __pfx_populate_vma_page_range+0x10/0x10 [ 651.505086][T15329] ? __pfx_find_vma_intersection+0x10/0x10 [ 651.511008][T15329] ? do_mmap+0x93f/0x12f0 [ 651.515386][T15329] __mm_populate+0x107/0x3a0 [ 651.520025][T15329] ? __pfx___mm_populate+0x10/0x10 [ 651.525187][T15329] ? up_write+0x2e5/0x5c0 [ 651.529554][T15329] vm_mmap_pgoff+0x37f/0x470 [ 651.534197][T15329] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 651.539355][T15329] ? __fget_files+0x215/0x3d0 [ 651.544075][T15329] ? __fget_files+0x21f/0x3d0 [ 651.548789][T15329] ksys_mmap_pgoff+0x3cb/0x610 [ 651.553619][T15329] ? __x64_sys_futex+0x358/0x4d0 [ 651.558615][T15329] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 651.563941][T15329] ? xfd_validate_state+0x129/0x190 [ 651.569183][T15329] __x64_sys_mmap+0x125/0x190 [ 651.573902][T15329] do_syscall_64+0x115/0x840 [ 651.578534][T15329] ? clear_bhb_loop+0x40/0x90 [ 651.583247][T15329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.589168][T15329] RIP: 0033:0x7f847819de99 [ 651.593607][T15329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.613247][T15329] RSP: 002b:00007f8479150028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 651.621707][T15329] RAX: ffffffffffffffda RBX: 00007f8478425fa0 RCX: 00007f847819de99 [ 651.629721][T15329] RDX: 0000000000000ffb RSI: 0000000000810004 RDI: 0000000000000000 [ 651.637731][T15329] RBP: 00007f8478233eaf R08: 0000000000000003 R09: 0000000000008000 [ 651.645733][T15329] R10: 0008000000008012 R11: 0000000000000246 R12: 0000000000000000 [ 651.653739][T15329] R13: 00007f8478426038 R14: 00007f8478425fa0 R15: 00007ffc83dba0b8 [ 651.661756][T15329] [ 651.664806][T15329] Modules linked in: [ 651.670008][T15329] ---[ end trace 0000000000000000 ]--- [ 651.717004][T15329] RIP: 0010:__filemap_add_folio+0xfc2/0x12a0 [ 651.724345][T15329] Code: 3d c2 ff 48 c7 c6 e0 89 dd 8b 4c 89 ef e8 66 ec 12 00 90 0f 0b e8 9e 3d c2 ff 48 c7 c6 40 8a dd 8b 4c 89 ef e8 4f ec 12 00 90 <0f> 0b e8 87 3d c2 ff 48 c7 c6 c0 8a dd 8b 4c 89 ef e8 38 ec 12 00 [ 651.761139][T15329] RSP: 0000:ffffc90003d173f8 EFLAGS: 00010246 [ 651.772777][T15327] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 651.780490][T15327] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 651.802678][T15329] RAX: 0000000000080000 RBX: 0000000000112cc0 RCX: ffffc90006201000 [ 651.815578][T15321] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 651.836310][T15321] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 651.865615][T15327] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 651.874688][T15329] RDX: 0000000000080000 RSI: ffffffff825a5ba8 RDI: ffff8880468061c4 [ 651.893103][T15327] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 651.932790][T15327] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 651.952006][T15327] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 651.971578][T15327] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 828036297 [ 651.993153][T15327] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 652.026126][T15331] ubi0: detaching mtd0 [ 652.027487][T15329] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 652.039318][T15334] ubi0: background thread "ubi_bgt0d" started, PID 15334 [ 652.075118][T15331] ubi0: mtd0 is detached [ 652.075611][T15329] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000004 [ 652.119233][T15329] R13: ffffea00011e04c0 R14: 0000000000000140 R15: 0000000000000000 [ 652.149259][T15329] FS: 00007f84791506c0(0000) GS:ffff888123ee3000(0000) knlGS:0000000000000000 [ 652.167687][T15329] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 652.190372][T15329] CR2: 00000000000bd000 CR3: 0000000047ec4000 CR4: 00000000003526f0 [ 652.223642][T15329] Kernel panic - not syncing: Fatal exception [ 652.230421][T15329] Kernel Offset: disabled [ 652.234761][T15329] Rebooting in 86400 seconds..