last executing test programs: 7.454849341s ago: executing program 2 (id=2251): mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x55) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/sctp/remaddr\x00', 0x20000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000e80)=""/206, 0xce) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) read$auto(r0, &(0x7f0000000000)='\x00', 0x91e2) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) getrandom$auto(0x0, 0x7fffffffffffffff, 0x1) r2 = socket(0xa, 0x1, 0x84) setsockopt$auto(r2, 0x0, 0x60, 0x0, 0x6f7250c4) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x4000000, 0x5}, 0x7ffc}, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000002980), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_STATUS(r3, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x400c0c4) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x44, r4, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, 'nl80211\x00'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x6}]}, 0x44}}, 0x20000000) r5 = socket(0xa, 0x3, 0x3a) getsockopt$auto(r5, 0x29, 0xd0, 0x0, 0x0) 6.971611572s ago: executing program 0 (id=2252): r0 = openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f0000000040), 0x2400, 0x0) getsockopt$auto_SO_BUF_LOCK(r0, 0x4, 0x48, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', &(0x7f0000000080)=0x2) unshare$auto(0x40000080) socket(0x23, 0x800, 0xfffff000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x0) setsockopt$auto(r1, 0x6, 0x1f, 0x0, 0x3a) sendmsg$auto_NETDEV_CMD_BIND_RX(r1, 0x0, 0x24008000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x2, 0x0, 0x1, 0x1) futex$auto(&(0x7f00000000c0)=0x2a08, 0xc, 0x1, 0x0, &(0x7f0000000180)=0x5, 0x2a08) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_NFC_CMD_LLC_SDREQ(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fbdbdf251300000005000f0009001d002b3ef8b0fdf9195984a638bfa774d959c9ed70dd906c8cd36d40f2e76fe6727fd929586d15a5b5a7e3b980592ecff2d4116bbe7a8e4b5138526f8ba8"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) socket(0x2b, 0x1, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000240)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x408, 0xffc, 0x400004, 0x200000000040000d}) ioctl$auto_BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$auto_BLKTRACETEARDOWN(r3, 0x1276, 0x0) listen$auto(0x3, 0x81) madvise$auto(0x0, 0x240007, 0x19) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x43, 0x9, 0x5) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x24048084) userfaultfd$auto(0x1) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) 6.316811987s ago: executing program 2 (id=2255): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) inotify_init1$auto(0x3000000000000) ioctl$auto(0x3, 0x40044900, 0xfffffffffffff4e0) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x9000, 0x8002, 0x2) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r2, &(0x7f00000000c0)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x2) getsockopt$auto_SO_ACCEPTCONN(0xffffffffffffffff, 0xffff, 0x1e, &(0x7f0000000040)='\xc4.)^\x00', &(0x7f0000000080)=0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000015c0), r3) sendmsg$auto_NL80211_CMD_GET_STATION(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000080)={0x28, r4, 0x4bcedae9142a5f4d, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_MLO_LINKS={0x14, 0x138, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_ATTR_MAC={0xb, 0x6, "b8e4b6f321dc9e"}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4001c005}, 0x800) sendmsg$auto_NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c0000f6", @ANYRES16=r4, @ANYBLOB="00032cbd7000fcdbdf25270000003200ac00a5f153232527d1c0b75b549c0789497a3635138570b532a378b2340b202ac1713bf8d3e89f1e821015b02ba545710000050074000200000005002001fb00000004004100"], 0x5c}, 0x1, 0x0, 0x0, 0x4044041}, 0x900) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x12de82, 0x0) socket(0x2, 0x1, 0x0) socketpair$auto(0x3, 0x5, 0x7, 0x0) ioctl$auto(0x3, 0x40106f52, r5) prctl$auto_PR_SET_VMA(0x53564d41, 0x2, 0x4c0d, 0xc2f9, 0x6) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) 6.165146431s ago: executing program 1 (id=2257): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a9402, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) timer_create$auto(0x9, 0x0, 0x0) socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, &(0x7f00000001c0)="624d1bfe595046ab5c98199adf260600de16baef6176e6021e1dce210500e8fdffff00", 0x23) ioctl$auto_VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000000c0)={0x6, r0}) mmap$auto(0x0, 0x40000b, 0xde, 0x9b72, 0xffffffffffffffff, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) unshare$auto(0x8000400) write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) mkdir$auto(&(0x7f0000000100)='./file0\x00', 0xff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/block/ram13/ro\x00', 0x80404, 0x0) read$auto(r2, &(0x7f0000000000)='/sys/devices/platform/vhci_hcd.8/usb26/descriptors\x00', 0x9) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x40080, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x2, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) close_range$auto(0x2, 0x8, 0x0) 5.295484015s ago: executing program 2 (id=2259): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(r0, 0xae41, 0xffffffffffffffff) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) statmount$auto(0x0, &(0x7f0000000480)={0x5ffc2f43, 0x4, 0x8000, 0xf, 0x8, 0x6, 0x15e, 0x8, 0x5, 0xffffffff, 0x3fb, 0x4688, 0x0, 0x6, 0x7, 0xffffffff, 0xfffffffffffffffa, 0x8, 0x6, 0x6, 0x2cf2, 0x0, 0x2, 0x8, 0x8001, 0x9, 0x5, 0xffffff53, 0x9, 0x3, 0x0, [0x2, 0xc5, 0x200, 0x0, 0x800, 0x15, 0x3, 0x200, 0x7, 0x8, 0x8000000000000001, 0x800, 0x6, 0x0, 0x5, 0x9, 0x8, 0x40, 0x87, 0x800, 0x3, 0x5, 0x1, 0x1f0b, 0x200, 0x1ff, 0x9, 0x0, 0x2, 0x7, 0x3, 0x1, 0x6, 0x100, 0x0, 0x1, 0x7, 0x2000000000000, 0xd5, 0x2, 0x7ff, 0x5, 0x8], "548d8ea698997f834de0f18213dd3b52214026ce4187935c0c77717f3e44f3f00f1a8f2d30b91d4e80e45ab184bba619e17ef29993af7cb9867ed24679cb4ef88c32af5dc2f73167ae"}, 0x9f, 0x7) unshare$auto(0x40000080) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x24048004) futex$auto(0x0, 0x9, 0x3e, 0x0, 0x0, 0x0) r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fb4a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f00", 0xa}) ioctl$auto_UI_DEV_CREATE(r3, 0x5501, 0x0) writev$auto(r3, &(0x7f0000000340)={0x0, 0x500000}, 0x3) 5.132821602s ago: executing program 0 (id=2260): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/oom_adj\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x1f40) timer_create$auto(0x9, 0x0, 0x0) landlock_restrict_self$auto(0xffffffffffffffff, 0x3f8) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/config/target/dbroot\x00', 0x109103, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x4802, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) listxattrat$auto(r3, 0x0, 0x4, 0x0, 0x10000000000000) close_range$auto(0x2, r2, 0xfffffffe) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x1, 0x0, 0x0) mmap$auto(0x2, 0x5, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 4.671349424s ago: executing program 1 (id=2262): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) socket(0x23, 0xa, 0x0) seccomp$auto(0x2, 0x10, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/boot_params/data\x00', 0x2c40, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001c00)=""/4109, 0x100d) fchmodat2$auto(0xffffffffffffffff, 0x0, 0x6, 0x8) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x2, 0x1d2c, 0x3, 0x4, 0x15f4da0e, 0x6, 0x9, 0x100000000000000c, 0x8, 0x4, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) get_mempolicy$auto(0x0, 0x0, 0x2, 0x86, 0x9) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x169000, 0x0) ioctl$auto(r1, 0xc0405626, r1) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x688200, 0x0) mmap$auto(0xd, 0x2000a, 0x5, 0xeb1, 0x401, 0x10000008000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/use_carrier\x00', 0x103b02, 0x0) sendfile$auto(r2, r2, 0x0, 0x8080000001) mmap$auto(0x4, 0x6, 0xdb, 0xebb, 0x40000000000a5, 0x8000) close_range$auto(0x0, 0x5, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) 4.296840532s ago: executing program 3 (id=2263): mmap$auto(0x0, 0x6, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x8000) prctl$auto(0x1000000003b, 0x100001, 0x4, 0x80a, 0x6) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) ioctl$auto_UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000080)={0x130, 0x8, 0x10001}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000080)) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0x400a507}, 0x800}, 0xa, 0x8) write$auto_proc_mem_operations_base(r0, &(0x7f0000000400)="94c5be883ae7ee95e2bff5f990f6f7249475e8960bf6c1ee8796193bfbd249c19c9460ea0c1c18bb983b84aebb8629e8e9e25558c9bfeb22ed79fdab8065d67eec271b56d08971f043224fe7604598e2506e785c6318c1b7696b10324d1e7db02961facdf9fab2640716f07dd1c617dcb6f1bb648821a53f78be14a6dc8f336e92e389609b991019c180950ed085b91123", 0x91) r3 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/loop9/hctx0/sched_tags_bitmap\x00', 0x101a00, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0xfffffffffffffffe, 0x3, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8040) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r4, 0x4c02, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r3, &(0x7f0000000340)=""/179, 0xb3) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2900, 0x0) read$auto(r5, 0x0, 0x7) acct$auto(&(0x7f0000000000)='/dev/tty\x00`Mx\x9d\xfa\xb3\x1f\xc6k\x01\x13\x9b\x15[\xf7\xaan\x1fOgo\xbb(\xcbx\x9bJ\x91*\xa5a\x02\xf3\x1b\x9d\xddy\xef\xee\xe4h\xd5\nH\x80\x8a\xd7Y\xb8\xcb\x90') socket(0x2, 0x2, 0x0) 3.53781497s ago: executing program 3 (id=2264): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/conf/hsr_slave_0/ignore_routes_with_linkdown\x00', 0x341641, 0x0) shmctl$auto_SHM_LOCK(0x7ff, 0xb, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x400c000) bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, 0x2, 0x4, 0x0, 0x85, 0x7, 0x9, 0x6, 0x8001}, 0x101) pwrite64$auto(r0, &(0x7f0000000000)='./cgroup/memory.pressure\x00', 0x6bc, 0x5) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xd1, 0x0, 0x14) setfsuid$auto(0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x3ff, 0xffffffffffffffff, [], {0x3ff, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) io_uring_register$auto(0x2, 0x11, &(0x7f0000000100), 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) ioctl$auto_MEMGETINFO(0xffffffffffffffff, 0x80204d01, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x2000, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x40200, 0x0) read$auto(0x3, 0x0, 0xfffffdef) syz_genetlink_get_family_id$auto_batadv(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) read$auto(0x3, 0x0, 0x5) ioctl$auto(0x3, 0x402c542b, 0x38) ioctl$auto_TIOCSTI2(r1, 0x5412, 0x0) 3.368055324s ago: executing program 1 (id=2265): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/kernel/soft_watchdog\x00', 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) readv$auto(0x3, &(0x7f0000003080)={0x0, 0x4}, 0x9) r1 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) read$auto(0x3, 0x0, 0x7fffffff) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x810c00, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000000c0)={0xfffffff7, "d01862fe819e604d4e68badb85f86d195c2182760db15e9e566832bae4a502d1", @inferred=r1}) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r3, 0x4, 0x8000040006) ptrace$auto_PTRACE_GETSIGMASK(0x420a, r3, 0x1, 0x9) semtimedop$auto(0x2, 0x0, 0xa2, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/003/001\x00', 0x8001, 0x0) ioctl$auto_USBDEVFS_RELEASE_PORT(r4, 0x80045519, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0xa, 0x300) sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000004840), 0xffffffffffffffff) 3.292993205s ago: executing program 3 (id=2266): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x5}, 0x3, 0xf8, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae80, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_register$auto(0x2, 0x1d, 0x0, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x200000) mremap$auto(0x1, 0x4, 0x3, 0x50a, 0x6) socket(0x2, 0x1, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) 3.046257366s ago: executing program 0 (id=2267): mmap$auto(0x0, 0x40006, 0xdf, 0x200009b72, 0x7, 0x28000) r0 = io_uring_setup$auto(0x6, 0x0) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r1 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x26241, 0x20) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000000)="b68161a86e8da4110338a92ca863a91beaa8558206154cc5fbaf33") ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) listen$auto(0x3, 0x81) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x1, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sysvipc/msg\x00', 0x8a880, 0x0) pread64$auto(r4, 0x0, 0x7fff, 0x3) remap_file_pages$auto(0x9, 0x2200000, 0x8, 0x80000001, 0xfffffffffffff5f3) 2.884858929s ago: executing program 3 (id=2268): close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.subtree_control\x00', 0x142, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/md_mod/parameters/new_array\x00', 0xa001, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/scsi_mod/parameters/default_dev_flags\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/bus/usb/drivers/em28xx/remove_id\x00', 0x942, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x800008000) get_robust_list$auto(0x0, 0x0, 0x0) r1 = open(0x0, 0x261c2, 0x84) close_range$auto(0x2, 0x8000, 0x0) r2 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r0, r3, 0x4, 0x1ff, r2, @relative_fd=r1, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r1, 0x0, 0x3}, 0xc) 2.8798416s ago: executing program 0 (id=2269): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x0, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socket(0x2, 0x1, 0x106) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x900, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x11, 0x3, 0x2) mmap$auto(0x0, 0x2, 0x7, 0x9b72, 0x7, 0x0) capget$auto(0x0, 0xfffffffffffffffe) r2 = socket(0xa, 0x1, 0x84) getsockopt$auto(r2, 0x84, 0x7, 0x0, 0x0) getsockopt$auto(r1, 0x107, 0x7, 0x0, 0x0) sendmsg$auto_NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, 0x0, 0x4084) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_CABLE_TEST_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x2c}}, 0x40000) getsockopt$auto_SO_TIMESTAMPNS_NEW(0xffffffffffffffff, 0x3, 0x40, 0x0, 0x0) 2.606324186s ago: executing program 1 (id=2270): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0x14, 0xffffffffffffffff, 0x8000) swapon$auto(0x0, 0x4) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) adjtimex$auto(&(0x7f0000000000)={0xffff92b5, 0x0, 0x9, 0x3, 0x0, 0x80000000000000, 0x80000000, 0x0, 0x4513, 0x9, 0xffffffffffffffff, {0x7, 0x6}, 0xfffffffc, 0xbfa, 0x9, 0x10, 0x0, 0x2, 0x8, 0xff, 0x10000, 0x100000001, 0x4}) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)="85f3fb1553598ec47684db1391b13104cecd41f8be06fc90431b916c8446c26b3c40032338db061ac5ca08be6bcb96d4e6127582af833024c4df19d0886c97fd96de84f3022840c11e57ae3c28994dbd466cbdd3cb09d88508ca6703fc06bb12c87e860ae0f9b0631f057dc6ff5ed57e749a5680b315ced066d2d2b727d134f312d7cb19785b25720bcd2dcbce2c60aa1a0bc0092abff4bb30a59dc6244a713dbbf0b597ccdb420de8c1e431db4cc531d4e5e31fa8eabdab039950462285b986907591fe0ddf0746a7bb1a1fcfdd75cd7ab8f392db250f4b3864f9b77c3c49ac8f") prctl$auto(0xe, 0x0, 0x3, 0x4, 0x400) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x24) close_range$auto(0x2, 0x8, 0x0) close_range$auto(r0, 0x8, 0xfffffe02) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x20002, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)="7f07d3") socketcall$auto(0x8000, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x60980, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) swapon$auto(&(0x7f0000000100)='\',\x00', 0x113) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto(0x3, 0xae41, r3) 2.517727369s ago: executing program 2 (id=2271): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_dev_fops_plock(0xffffffffffffff9c, 0x0, 0x2, 0x0) listen$auto(r0, 0x4d) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder1\x00', 0x240, 0x0) ioctl$auto_BINDER_WRITE_READ(r1, 0xc0306201, 0x0) statx$auto(0xffffffffffffffff, 0x0, 0x1000, 0x8, 0x0) r2 = open(0x0, 0x4000, 0x124) socket(0x2, 0x80802, 0x0) close_range$auto(r2, 0xa, 0x0) futex_waitv$auto(0x0, 0x3ff, 0x7, 0x0, 0x0) socket(0x18, 0xa, 0x1) unshare$auto(0x40000080) mmap$auto(0x4, 0xa020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x7ffe) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/cifs/mount_params\x00', 0x802, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000640)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\xff\x7f\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc:\xfa\x01\xd1\xa3\xb5\xc2B\xa5\xac:woR^a\xb9}\xe7\xbd\xe1\xf77.\xa3\xd8\xc2T\x95\x13\x91\xb6p\xf3\xb2w\xe6\xd7\x94DW\x97\x90a\xe6c\xfb\x88x\xd5L\xa9\xe4\x82\x04\xb1\x8b\r\xcaP\\\x1aVP\xc9\xa4`\xfd\v\x94\f\xc1\x0fQ\xc9\xdcL\x03\x9c\xbfk\xa6\xb1\xb0\xa1\xeeJ\xd8\xef\xc8t\x9d\x1e=J\x91W\xc6AuJ\xb9Q\xed\xd1\a\x05\x9d\x85\xb7b#r\xcd\xaf\xb7\x9f\xf7\xd2\xae\x0f\x98\xa9&\xb6~\xd4\xbd\xbbr\xb9\xc3\xacH!\xc1\x90K2\x05K@\xee\xac\xe8\xc7\t\xab\xbf\xa3\xedb\xd7\xb5\xd7\x83&\x95\xb2?\x0e\x85\xaaIGu\xd6$\xeb\xb6\xdd\a\x121\a\xac\x1bx#\x87\xa9\x10\x9b\xf8YD\x04ZL\xca\x99]\x8f[\x90[\xa8\xbf\x98\xa6\xe50(zC\xe84*w\x13\x96\xd5\xd0\x877\x12\xbc\xa1\xd0h@|\xf9\xfa\x9b\x17\x94\xb9\xe7\xf3\x15\x05\x91\xe8\x98p\x7f:\xd7s\xd9wo\x82\xda\xec\x91\xb7\xd9;H\x8a\b\x00\x00\x00\x00\x00\x00\x00\x8aZ\x94\x14$X7\xaeW6=^I\x9fQ\r5c\x81\xca]\x97m\x89o\x8f\xd8}P>I\xd0\xb3\x88C\xd7', 0x100000a3d9) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) socket(0x2, 0x3, 0xa) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x28002, 0x0) select$auto(0x4, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd5, 0x948b, 0x0, 0x15f4da0a, 0x4, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x3, 0x785]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x80000001ff, 0x9, 0xd40, 0x20000000000001, 0x948b, 0x5, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x66, 0x800d2, 0x3, 0x6d3f, 0x80000a, 0x8, 0x6]}, 0x0) 2.50132138s ago: executing program 3 (id=2272): landlock_restrict_self$auto(0xffffffffffffffff, 0x7) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/config/target/dbroot\x00', 0x109103, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x4802, 0x0) statx$auto(r1, 0x0, 0x6d7, 0x80000008, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) listxattrat$auto(r3, 0x0, 0x4, 0x0, 0x10000000000000) close_range$auto(0x2, r2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x2, 0x5, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x0, &(0x7f0000000280)=@link_update={0xa, @new_map_fd=0x2, 0x7, @old_prog_fd=0x13b}, 0xa3) socket(0x10, 0x3, 0x6) 1.596172323s ago: executing program 1 (id=2273): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x242, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x101002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40014}, 0x0) ioctl$auto_SNDCTL_DSP_PROFILE(r1, 0x40045017, &(0x7f0000000100)="8fedd9edb3770101e83b1773") r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r4, 0x400454a4, 0x0) rmdir$auto(&(0x7f0000000080)='./cgroup/../file0\x00') prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x6, 0xf8, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram0\x00', 0x67f00, 0x0) preadv2$auto(r5, &(0x7f0000000080)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x400, 0x2f) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) pread64$auto(r0, &(0x7f0000000200)='/proc/self/net/ip6_tables_targets\x00', 0x34b, 0x10000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2a, 0x2, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r6 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r6, 0x65, 0x3, 0x0, 0x4) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f0000000000)={@raw=0xffffffff, 0x1000, 0xf45, 0x4, "5d9a2fcc30c3beecdc1a54ce1a7e3e0889b1688a00e55792c04b1f23e4200048a354403f8ac9679ba91774c7", @raw=0x8}) 1.59527878s ago: executing program 0 (id=2281): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a9402, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) timer_create$auto(0x9, 0x0, 0x0) socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, &(0x7f00000001c0)="624d1bfe595046ab5c98199adf260600de16baef6176e6021e1dce210500e8fdffff00", 0x23) ioctl$auto_VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000000c0)={0x6, r0}) mmap$auto(0x0, 0x40000b, 0xde, 0x9b72, 0xffffffffffffffff, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) unshare$auto(0x8000400) write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) mkdir$auto(&(0x7f0000000100)='./file0\x00', 0xff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/block/ram13/ro\x00', 0x80404, 0x0) read$auto(r2, &(0x7f0000000000)='/sys/devices/platform/vhci_hcd.8/usb26/descriptors\x00', 0x9) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x40080, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x2, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) close_range$auto(0x2, 0x8, 0x0) 1.051230314s ago: executing program 2 (id=2274): socket(0xa, 0x5, 0x0) clock_gettime$auto(0x1, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x71, 0x0, 0x8) ioctl$auto_I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nbd15\x00', 0x6d88c0, 0x0) mmap$auto(0x0, 0x1, 0x4, 0x8000000008011, 0x3, 0x8000) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event2\x00', 0x60240, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r1, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) clock_nanosleep$auto(0x2, 0x6, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) syz_clone(0x80f400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0xffffffffffffffff, 0x64cf, 0x1df) r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000040), r2) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="140072494e671fd283760000", @ANYRES16=r3, @ANYBLOB="1b0026bd7000fddbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000080), 0xffffffffffffffff) getpid() setfsuid$auto(0xee00) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r4, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$auto_EVIOCGREP(r0, 0x80084503, 0x0) 478.214039ms ago: executing program 0 (id=2275): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x2, 0x2, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb) ioctl$auto_SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000240)) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000480)={{&(0x7f0000000200)="fb08879254c1c24169fb1eb914e3b7f221f2841c3d38cd87d0", 0x1, &(0x7f0000000380)={&(0x7f0000000280)="8346937e12ba00e330311a19e48a0a9a2e91b6de44b66b63f1596b3f9d5c9f510298d5522b2f135e98b99e6fac9035b3e0469f8d1a694f4c16c64bb3c27c1179a6c16599a273abe7a3569be34d93", 0x4}, 0x54, &(0x7f00000003c0)="58a887ce482f9847847a27203ddba921d454a6c86fce97592078366c4f6c8fee6e7fd116b574b538e1bad18ef1da26cba8642753abd3f8a96926c38339c11b133eef5aa66e23c098ba119eb39971e64edb18441af8d68649f32ada49d82cc34fcb6e9bdf708ee7abcdfb1c5b915d39c0be5f029d67b53f7afb0a133600981508423b6fa88476b25248297c7d3426dff1c875d16de47691fc61aafcae44ff57e63b2b25a7", 0xd8, 0x7fffffff}, 0x5fb}, 0x101, 0xc2d2, 0x0) write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, &(0x7f0000000000)=' ', 0x1) write$auto(r1, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9) r2 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev$auto(r2, &(0x7f0000000300)={0x0, 0x10001}, 0xc) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/arp\x00', 0x101000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000100)=""/92, 0x5c) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x8) mmap$auto(0x0, 0x20009, 0xdf, 0x1000eb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x5) memfd_create$auto(0x0, 0x40) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) 477.771812ms ago: executing program 3 (id=2276): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) socket(0x2a, 0x5, 0x4) recvmmsg$auto(0xffffffffffffffff, 0x0, 0x6, 0x700, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.controllers\x00', 0x2, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001100)=""/4111, 0x100f) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) ioctl$auto(r2, 0x4b66, 0xffffffffffffffff) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'erspan0\x00'}) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) futex$auto(0x0, 0x86, 0x8, &(0x7f0000000280)={0x40000000000800, 0x9}, 0x0, 0x7) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0xffffffffffff0006, 0x17) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/netfilter/nf_log/3\x00', 0xa2202, 0x0) sendfile$auto(r4, r4, 0x0, 0xd) select$auto(0xa4d, 0x0, 0x0, &(0x7f00000002c0)={[0x8, 0x8, 0x208, 0x1, 0x0, 0x4000000008, 0x15f6da12, 0x3, 0x800080000010d08, 0x10000000000000b, 0xfffffffffffffffc, 0x3, 0x6d3f, 0x6, 0x4, 0x5]}, 0x0) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000080)={0x7, 0xf1, 0xad}}) 470.844708ms ago: executing program 1 (id=2277): sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @private=0xa010101}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x4800, 0x0) mmap$auto(0x2, 0x400008, 0xdf, 0x9b72, 0x2, 0x10000000008000) r0 = prctl$auto(0x80, 0x6, 0x0, 0x27c, 0xffffffff) utimensat$auto(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x4000000006, 0x40}, 0x38) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000002140)=""/4106, 0xfffffffffffffd1b) ioctl$auto(0xc8, 0x800454d3, 0x5c8d) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60204, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) fsconfig$auto_FSCONFIG_SET_PATH(r1, 0x3, 0x0, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x6) select$auto(0x6, &(0x7f0000000000)={[0x9, 0x4, 0x2, 0xa, 0xccf9, 0x9, 0xffffffffffffffff, 0x3, 0xb, 0x1, 0x100000000000000, 0x3, 0xfffffffffffffe8f, 0x3, 0x40000000000005, 0xfffffffffffffff5]}, 0x0, &(0x7f0000000180)={[0x2, 0x8000, 0x4, 0x8000000000000001, 0x7f, 0x0, 0x7, 0x7, 0x8, 0x2, 0x8, 0x10, 0x5, 0xfffffffffffffff4, 0x9, 0x2]}, &(0x7f0000000080)={0x1ff, 0x401}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) 0s ago: executing program 2 (id=2278): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) socket(0x6, 0x3, 0x37) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x26, 0x5, 0x8c68) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x101e41, 0x0) ioperm$auto(0x4, 0x100000001, 0x4000005) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyr0\x00', 0x74c40, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x800, 0x8000009, 0x1, 0x19, 0xffffffffffffffff, 0x100000000000008) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x7, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r3 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x40146f2c, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x40146f2b, 0x0) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x50ba82, 0x0) read$auto(r4, 0x0, 0xb4d3) unshare$auto(0x40000080) setsockopt$auto(r0, 0xd0, 0x800000e4, 0x0, 0x569) kernel console output (not intermixed with test programs): [T11273] [ 392.768734][T11273] dump_stack_lvl+0x100/0x190 [ 392.768784][T11273] should_fail_ex.cold+0x5/0xa [ 392.768804][T11273] ? ops_init+0x77/0x5f0 [ 392.768821][T11273] should_failslab+0xc2/0x120 [ 392.768836][T11273] __kmalloc_noprof+0xe0/0x850 [ 392.768856][T11273] ? __raw_spin_lock_init+0x3a/0x110 [ 392.768880][T11273] ops_init+0x77/0x5f0 [ 392.768898][T11273] setup_net+0x118/0x3a0 [ 392.768915][T11273] ? __pfx_setup_net+0x10/0x10 [ 392.768930][T11273] ? lockdep_init_map_type+0x5c/0x250 [ 392.768949][T11273] ? mutex_init_lockep+0x110/0x150 [ 392.768970][T11273] copy_net_ns+0x46f/0x7c0 [ 392.768990][T11273] create_new_namespaces+0x3ea/0xac0 [ 392.769009][T11273] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 392.769026][T11273] ksys_unshare+0x455/0xab0 [ 392.769045][T11273] ? __pfx_ksys_unshare+0x10/0x10 [ 392.769069][T11273] __x64_sys_unshare+0x31/0x40 [ 392.769086][T11273] do_syscall_64+0x106/0xf80 [ 392.769101][T11273] ? clear_bhb_loop+0x40/0x90 [ 392.769119][T11273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.769134][T11273] RIP: 0033:0x7f8de219c629 [ 392.769147][T11273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.769161][T11273] RSP: 002b:00007f8de2fde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 392.769175][T11273] RAX: ffffffffffffffda RBX: 00007f8de2415fa0 RCX: 00007f8de219c629 [ 392.769185][T11273] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 392.769193][T11273] RBP: 00007f8de2232b39 R08: 0000000000000000 R09: 0000000000000000 [ 392.769202][T11273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.769209][T11273] R13: 00007f8de2416038 R14: 00007f8de2415fa0 R15: 00007ffc58f73258 [ 392.769237][T11273] [ 393.629661][T11282] program syz.1.997 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 397.206525][T11336] block nbd7: not configured, cannot reconfigure [ 397.865120][T11360] netlink: 'syz.1.1013': attribute type 1 has an invalid length. [ 399.426337][T11385] can: request_module (can-proto-0) failed. [ 401.593906][T11408] FAULT_INJECTION: forcing a failure. [ 401.593906][T11408] name failslab, interval 1, probability 0, space 0, times 0 [ 402.124983][T11408] CPU: 1 UID: 0 PID: 11408 Comm: syz.0.1021 Tainted: G L syzkaller #0 PREEMPT(full) [ 402.125011][T11408] Tainted: [L]=SOFTLOCKUP [ 402.125016][T11408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 402.125024][T11408] Call Trace: [ 402.125030][T11408] [ 402.125035][T11408] dump_stack_lvl+0x100/0x190 [ 402.125062][T11408] should_fail_ex.cold+0x5/0xa [ 402.125081][T11408] ? dma_buf_export+0x389/0xcb0 [ 402.125097][T11408] should_failslab+0xc2/0x120 [ 402.125112][T11408] __kmalloc_noprof+0xe0/0x850 [ 402.125137][T11408] dma_buf_export+0x389/0xcb0 [ 402.125155][T11408] ? sg_alloc_table+0x4c/0x1c0 [ 402.125175][T11408] system_heap_allocate+0xb5e/0x1170 [ 402.125198][T11408] ? __pfx_system_heap_allocate+0x10/0x10 [ 402.125223][T11408] ? rep_movs_alternative+0x4a/0x90 [ 402.125246][T11408] dma_heap_ioctl+0x37f/0x5e0 [ 402.125265][T11408] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 402.125281][T11408] ? __x64_sys_close_range+0x2d9/0x5d0 [ 402.125303][T11408] ? xfd_validate_state+0x129/0x190 [ 402.125325][T11408] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 402.125343][T11408] __x64_sys_ioctl+0x18e/0x210 [ 402.125364][T11408] do_syscall_64+0x106/0xf80 [ 402.125379][T11408] ? clear_bhb_loop+0x40/0x90 [ 402.125396][T11408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.125411][T11408] RIP: 0033:0x7fa87bd9c629 [ 402.125424][T11408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.125438][T11408] RSP: 002b:00007fa87cbfc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 402.125452][T11408] RAX: ffffffffffffffda RBX: 00007fa87c016090 RCX: 00007fa87bd9c629 [ 402.125461][T11408] RDX: 0000200000000140 RSI: ffffffffffdffe00 RDI: 0000000000000001 [ 402.125470][T11408] RBP: 00007fa87be32b39 R08: 0000000000000000 R09: 0000000000000000 [ 402.125478][T11408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 402.125486][T11408] R13: 00007fa87c016128 R14: 00007fa87c016090 R15: 00007ffe5dfb8fe8 [ 402.125505][T11408] [ 415.340616][T11663] can: request_module (can-proto-0) failed. [ 421.131466][T11736] FAULT_INJECTION: forcing a failure. [ 421.131466][T11736] name failslab, interval 1, probability 0, space 0, times 0 [ 421.162256][T11736] CPU: 0 UID: 0 PID: 11736 Comm: syz.0.1074 Tainted: G L syzkaller #0 PREEMPT(full) [ 421.162302][T11736] Tainted: [L]=SOFTLOCKUP [ 421.162308][T11736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 421.162317][T11736] Call Trace: [ 421.162323][T11736] [ 421.162329][T11736] dump_stack_lvl+0x100/0x190 [ 421.162357][T11736] should_fail_ex.cold+0x5/0xa [ 421.162374][T11736] should_failslab+0xc2/0x120 [ 421.162389][T11736] __kmalloc_cache_noprof+0x7a/0x6f0 [ 421.162407][T11736] ? sctp_endpoint_new+0xfc/0xb20 [ 421.162425][T11736] ? __debug_object_init+0x2de/0x3d0 [ 421.162447][T11736] sctp_endpoint_new+0xfc/0xb20 [ 421.162466][T11736] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 421.162484][T11736] ? lockdep_init_map_type+0x5c/0x250 [ 421.162504][T11736] ? lockdep_init_map_type+0x5c/0x250 [ 421.162524][T11736] sctp_init_sock+0xe2b/0x1300 [ 421.162540][T11736] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 421.162557][T11736] sctp_v6_init_sock+0x16/0x70 [ 421.162571][T11736] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 421.162587][T11736] inet6_create+0xb21/0x12b0 [ 421.162605][T11736] ? inet6_create+0x7f/0x12b0 [ 421.162622][T11736] __sock_create+0x339/0x860 [ 421.162647][T11736] inet_ctl_sock_create+0x94/0x230 [ 421.162668][T11736] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 421.162688][T11736] ? timer_init_key+0x150/0x340 [ 421.162707][T11736] ? __pfx_sctp_ctrlsock_init+0x10/0x10 [ 421.162722][T11736] sctp_ctrlsock_init+0x40/0xd0 [ 421.162738][T11736] ops_init+0x1e2/0x5f0 [ 421.162757][T11736] setup_net+0x118/0x3a0 [ 421.162775][T11736] ? __pfx_setup_net+0x10/0x10 [ 421.162790][T11736] ? lockdep_init_map_type+0x5c/0x250 [ 421.162809][T11736] ? mutex_init_lockep+0x110/0x150 [ 421.162831][T11736] copy_net_ns+0x46f/0x7c0 [ 421.162851][T11736] create_new_namespaces+0x3ea/0xac0 [ 421.162870][T11736] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 421.162887][T11736] ksys_unshare+0x455/0xab0 [ 421.162906][T11736] ? __pfx_ksys_unshare+0x10/0x10 [ 421.162930][T11736] __x64_sys_unshare+0x31/0x40 [ 421.162947][T11736] do_syscall_64+0x106/0xf80 [ 421.162962][T11736] ? clear_bhb_loop+0x40/0x90 [ 421.162984][T11736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.162999][T11736] RIP: 0033:0x7fa87bd9c629 [ 421.163014][T11736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.163028][T11736] RSP: 002b:00007fa87cc1d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 421.163043][T11736] RAX: ffffffffffffffda RBX: 00007fa87c015fa0 RCX: 00007fa87bd9c629 [ 421.163052][T11736] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 421.163061][T11736] RBP: 00007fa87be32b39 R08: 0000000000000000 R09: 0000000000000000 [ 421.163070][T11736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 421.163079][T11736] R13: 00007fa87c016038 R14: 00007fa87c015fa0 R15: 00007ffe5dfb8fe8 [ 421.163099][T11736] [ 421.599147][T11739] Invalid ELF header magic: != ELF [ 422.779738][T11736] program syz.0.1074 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 424.119521][T11767] Invalid ELF header magic: != ELF [ 427.537874][T11841] Invalid ELF header magic: != ELF [ 429.656159][T11868] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 433.209836][T11944] Invalid ELF header magic: != ELF [ 433.247408][T11961] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 434.507479][T11970] Invalid ELF header magic: != ELF [ 436.903831][T12002] FAULT_INJECTION: forcing a failure. [ 436.903831][T12002] name failslab, interval 1, probability 0, space 0, times 0 [ 437.043399][T12002] CPU: 0 UID: 0 PID: 12002 Comm: syz.1.1120 Tainted: G L syzkaller #0 PREEMPT(full) [ 437.043426][T12002] Tainted: [L]=SOFTLOCKUP [ 437.043432][T12002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 437.043441][T12002] Call Trace: [ 437.043446][T12002] [ 437.043452][T12002] dump_stack_lvl+0x100/0x190 [ 437.043480][T12002] should_fail_ex.cold+0x5/0xa [ 437.043498][T12002] should_failslab+0xc2/0x120 [ 437.043513][T12002] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 437.043539][T12002] ? __proc_create+0x2cb/0x8c0 [ 437.043565][T12002] __proc_create+0x2cb/0x8c0 [ 437.043586][T12002] ? __pfx___proc_create+0x10/0x10 [ 437.043610][T12002] ? _raw_write_unlock+0x28/0x50 [ 437.043625][T12002] ? proc_register+0x559/0x8a0 [ 437.043648][T12002] proc_create_reg+0x75/0x170 [ 437.043670][T12002] ? __pfx_sctp_snmp_seq_show+0x10/0x10 [ 437.043685][T12002] proc_create_net_single+0x86/0x180 [ 437.043707][T12002] ? __pfx_proc_create_net_single+0x10/0x10 [ 437.043728][T12002] ? sctp_defaults_init+0x720/0xd90 [ 437.043750][T12002] sctp_proc_init+0xaa/0x270 [ 437.043765][T12002] ? __pfx_sctp_defaults_init+0x10/0x10 [ 437.043780][T12002] sctp_defaults_init+0x758/0xd90 [ 437.043802][T12002] ? __pfx_sctp_defaults_init+0x10/0x10 [ 437.043818][T12002] ops_init+0x1e2/0x5f0 [ 437.043838][T12002] setup_net+0x118/0x3a0 [ 437.043855][T12002] ? __pfx_setup_net+0x10/0x10 [ 437.043871][T12002] ? lockdep_init_map_type+0x5c/0x250 [ 437.043890][T12002] ? mutex_init_lockep+0x110/0x150 [ 437.043912][T12002] copy_net_ns+0x46f/0x7c0 [ 437.043931][T12002] create_new_namespaces+0x3ea/0xac0 [ 437.043951][T12002] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 437.043968][T12002] ksys_unshare+0x455/0xab0 [ 437.043987][T12002] ? __pfx_ksys_unshare+0x10/0x10 [ 437.044011][T12002] __x64_sys_unshare+0x31/0x40 [ 437.044028][T12002] do_syscall_64+0x106/0xf80 [ 437.044045][T12002] ? clear_bhb_loop+0x40/0x90 [ 437.044063][T12002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.044078][T12002] RIP: 0033:0x7f8de219c629 [ 437.044091][T12002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.044104][T12002] RSP: 002b:00007f8de2fde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 437.044119][T12002] RAX: ffffffffffffffda RBX: 00007f8de2415fa0 RCX: 00007f8de219c629 [ 437.044128][T12002] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 437.044137][T12002] RBP: 00007f8de2232b39 R08: 0000000000000000 R09: 0000000000000000 [ 437.044145][T12002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.044153][T12002] R13: 00007f8de2416038 R14: 00007f8de2415fa0 R15: 00007ffc58f73258 [ 437.044172][T12002] [ 438.143641][T12013] program syz.1.1120 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 440.325492][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.332556][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.868550][T12191] Invalid ELF header magic: != ELF [ 449.290132][T12214] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input6 [ 449.807995][T12220] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 449.980388][T12231] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 451.030019][T12243] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 451.038605][T12243] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 451.044997][T12243] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 451.070433][T12243] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 452.214044][T12290] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 452.383084][T12285] kvm: kvm [12275]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc1) = 0x2 [ 452.487808][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 452.719984][T12281] Invalid ELF header magic: != ELF [ 453.054750][T12311] Invalid ELF header magic: != ELF [ 453.069439][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 453.069967][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout [ 453.130120][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout [ 455.015311][T12359] Invalid ELF header magic: != ELF [ 456.283636][T12378] kvm: kvm [12372]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc1) = 0x2 [ 457.215307][T12388] FAULT_INJECTION: forcing a failure. [ 457.215307][T12388] name failslab, interval 1, probability 0, space 0, times 0 [ 457.313579][T12388] CPU: 0 UID: 0 PID: 12388 Comm: syz.2.1191 Tainted: G L syzkaller #0 PREEMPT(full) [ 457.313606][T12388] Tainted: [L]=SOFTLOCKUP [ 457.313612][T12388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 457.313621][T12388] Call Trace: [ 457.313627][T12388] [ 457.313634][T12388] dump_stack_lvl+0x100/0x190 [ 457.313661][T12388] should_fail_ex.cold+0x5/0xa [ 457.313680][T12388] should_failslab+0xc2/0x120 [ 457.313694][T12388] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 457.313716][T12388] ? sock_alloc_inode+0x25/0x1c0 [ 457.313735][T12388] ? mark_held_locks+0x40/0x70 [ 457.313754][T12388] ? __pfx_sock_alloc_inode+0x10/0x10 [ 457.313773][T12388] sock_alloc_inode+0x25/0x1c0 [ 457.313792][T12388] alloc_inode+0x68/0x250 [ 457.313809][T12388] sock_alloc+0x44/0x280 [ 457.313825][T12388] ? security_socket_create+0x7f/0x250 [ 457.313845][T12388] __sock_create+0xc2/0x860 [ 457.313868][T12388] inet_ctl_sock_create+0x94/0x230 [ 457.313889][T12388] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 457.313908][T12388] ? timer_init_key+0x150/0x340 [ 457.313927][T12388] ? __pfx_sctp_ctrlsock_init+0x10/0x10 [ 457.313943][T12388] sctp_ctrlsock_init+0x40/0xd0 [ 457.313958][T12388] ops_init+0x1e2/0x5f0 [ 457.313976][T12388] setup_net+0x118/0x3a0 [ 457.313993][T12388] ? __pfx_setup_net+0x10/0x10 [ 457.314008][T12388] ? lockdep_init_map_type+0x5c/0x250 [ 457.314026][T12388] ? mutex_init_lockep+0x110/0x150 [ 457.314049][T12388] copy_net_ns+0x46f/0x7c0 [ 457.314069][T12388] create_new_namespaces+0x3ea/0xac0 [ 457.314089][T12388] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 457.314106][T12388] ksys_unshare+0x455/0xab0 [ 457.314124][T12388] ? __pfx_ksys_unshare+0x10/0x10 [ 457.314149][T12388] __x64_sys_unshare+0x31/0x40 [ 457.314165][T12388] do_syscall_64+0x106/0xf80 [ 457.314181][T12388] ? clear_bhb_loop+0x40/0x90 [ 457.314198][T12388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.314213][T12388] RIP: 0033:0x7fc98879c629 [ 457.314226][T12388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.314239][T12388] RSP: 002b:00007fc989698028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 457.314254][T12388] RAX: ffffffffffffffda RBX: 00007fc988a15fa0 RCX: 00007fc98879c629 [ 457.314263][T12388] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 457.314272][T12388] RBP: 00007fc988832b39 R08: 0000000000000000 R09: 0000000000000000 [ 457.314281][T12388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 457.314289][T12388] R13: 00007fc988a16038 R14: 00007fc988a15fa0 R15: 00007ffd584e7258 [ 457.314310][T12388] [ 457.314319][T12388] socket: no more sockets [ 457.803030][T12403] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 458.209088][T12411] Invalid ELF header magic: != ELF [ 458.317595][T12391] program syz.2.1191 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 459.995373][ T29] audit: type=1800 audit(1772079474.509:2): pid=12435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1200" name="dbroot" dev="configfs" ino=50593 res=0 errno=0 [ 460.377852][T12439] tipc: Started in network mode [ 460.411976][T12439] tipc: Node identity ffffffff, cluster identity 4711 [ 460.446097][T12439] tipc: Node number set to 4294967295 [ 460.976988][T12449] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 461.581046][T12458] FAULT_INJECTION: forcing a failure. [ 461.581046][T12458] name failslab, interval 1, probability 0, space 0, times 0 [ 461.610401][T12458] CPU: 0 UID: 0 PID: 12458 Comm: syz.2.1206 Tainted: G L syzkaller #0 PREEMPT(full) [ 461.610429][T12458] Tainted: [L]=SOFTLOCKUP [ 461.610434][T12458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 461.610443][T12458] Call Trace: [ 461.610449][T12458] [ 461.610456][T12458] dump_stack_lvl+0x100/0x190 [ 461.610484][T12458] should_fail_ex.cold+0x5/0xa [ 461.610502][T12458] should_failslab+0xc2/0x120 [ 461.610517][T12458] __kmalloc_cache_noprof+0x7a/0x6f0 [ 461.610536][T12458] ? sctp_auth_shkey_create+0x9e/0x210 [ 461.610558][T12458] sctp_auth_shkey_create+0x9e/0x210 [ 461.610578][T12458] sctp_endpoint_new+0x589/0xb20 [ 461.610597][T12458] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 461.610617][T12458] ? lockdep_init_map_type+0x5c/0x250 [ 461.610639][T12458] sctp_init_sock+0xe2b/0x1300 [ 461.610654][T12458] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 461.610671][T12458] sctp_v6_init_sock+0x16/0x70 [ 461.610685][T12458] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 461.610700][T12458] inet6_create+0xb21/0x12b0 [ 461.610718][T12458] ? inet6_create+0x7f/0x12b0 [ 461.610735][T12458] __sock_create+0x339/0x860 [ 461.610760][T12458] inet_ctl_sock_create+0x94/0x230 [ 461.610780][T12458] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 461.610799][T12458] ? timer_init_key+0x150/0x340 [ 461.610819][T12458] ? __pfx_sctp_ctrlsock_init+0x10/0x10 [ 461.610834][T12458] sctp_ctrlsock_init+0x40/0xd0 [ 461.610849][T12458] ops_init+0x1e2/0x5f0 [ 461.610867][T12458] setup_net+0x118/0x3a0 [ 461.610884][T12458] ? __pfx_setup_net+0x10/0x10 [ 461.610899][T12458] ? lockdep_init_map_type+0x5c/0x250 [ 461.610917][T12458] ? mutex_init_lockep+0x110/0x150 [ 461.610939][T12458] copy_net_ns+0x46f/0x7c0 [ 461.610962][T12458] create_new_namespaces+0x3ea/0xac0 [ 461.610982][T12458] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 461.610999][T12458] ksys_unshare+0x455/0xab0 [ 461.611018][T12458] ? __pfx_ksys_unshare+0x10/0x10 [ 461.611042][T12458] __x64_sys_unshare+0x31/0x40 [ 461.611059][T12458] do_syscall_64+0x106/0xf80 [ 461.611074][T12458] ? clear_bhb_loop+0x40/0x90 [ 461.611097][T12458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.611112][T12458] RIP: 0033:0x7fc98879c629 [ 461.611126][T12458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.611139][T12458] RSP: 002b:00007fc989698028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 461.611154][T12458] RAX: ffffffffffffffda RBX: 00007fc988a15fa0 RCX: 00007fc98879c629 [ 461.611164][T12458] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 461.611174][T12458] RBP: 00007fc988832b39 R08: 0000000000000000 R09: 0000000000000000 [ 461.611183][T12458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.611192][T12458] R13: 00007fc988a16038 R14: 00007fc988a15fa0 R15: 00007ffd584e7258 [ 461.611220][T12458] [ 462.113622][T12456] Invalid ELF header magic: != ELF [ 462.601772][T12469] program syz.2.1206 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 464.780322][T12497] FAULT_INJECTION: forcing a failure. [ 464.780322][T12497] name failslab, interval 1, probability 0, space 0, times 0 [ 464.811380][T12497] CPU: 1 UID: 0 PID: 12497 Comm: syz.0.1212 Tainted: G L syzkaller #0 PREEMPT(full) [ 464.811428][T12497] Tainted: [L]=SOFTLOCKUP [ 464.811438][T12497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 464.811455][T12497] Call Trace: [ 464.811465][T12497] [ 464.811475][T12497] dump_stack_lvl+0x100/0x190 [ 464.811523][T12497] should_fail_ex.cold+0x5/0xa [ 464.811559][T12497] should_failslab+0xc2/0x120 [ 464.811588][T12497] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 464.811628][T12497] ? __kernfs_new_node+0xd2/0x960 [ 464.811673][T12497] __kernfs_new_node+0xd2/0x960 [ 464.811715][T12497] ? __pfx___kernfs_new_node+0x10/0x10 [ 464.811760][T12497] ? find_held_lock+0x2b/0x80 [ 464.811785][T12497] ? kernfs_root+0xee/0x2a0 [ 464.811818][T12497] ? kernfs_root+0xee/0x2a0 [ 464.811861][T12497] kernfs_new_node+0x11b/0x1a0 [ 464.811889][T12497] __kernfs_create_file+0x53/0x350 [ 464.811907][T12497] sysfs_add_file_mode_ns+0x207/0x3c0 [ 464.811930][T12497] internal_create_group+0x593/0xf40 [ 464.811955][T12497] ? __pfx_internal_create_group+0x10/0x10 [ 464.811977][T12497] ? kernfs_create_link+0x1bd/0x240 [ 464.811995][T12497] internal_create_groups+0x9d/0x150 [ 464.812016][T12497] device_add+0x7c8/0x1950 [ 464.812041][T12497] ? __pfx_device_add+0x10/0x10 [ 464.812062][T12497] ? lockdep_init_map_type+0x5c/0x250 [ 464.812082][T12497] ? __init_waitqueue_head+0xca/0x150 [ 464.812118][T12497] netdev_register_kobject+0x1a9/0x3d0 [ 464.812141][T12497] register_netdevice+0x12e0/0x2210 [ 464.812162][T12497] ? idr_alloc+0xdd/0x130 [ 464.812177][T12497] ? __pfx_register_netdevice+0x10/0x10 [ 464.812193][T12497] ? net_generic+0xea/0x2a0 [ 464.812214][T12497] ppp_dev_configure+0x986/0xcb0 [ 464.812234][T12497] ppp_ioctl+0x985/0x2800 [ 464.812250][T12497] ? find_held_lock+0x2b/0x80 [ 464.812264][T12497] ? __pfx_ppp_ioctl+0x10/0x10 [ 464.812283][T12497] ? __fget_files+0x21f/0x3d0 [ 464.812308][T12497] ? __pfx_ppp_ioctl+0x10/0x10 [ 464.812324][T12497] __x64_sys_ioctl+0x18e/0x210 [ 464.812345][T12497] do_syscall_64+0x106/0xf80 [ 464.812360][T12497] ? clear_bhb_loop+0x40/0x90 [ 464.812378][T12497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.812396][T12497] RIP: 0033:0x7fa87bd9c629 [ 464.812411][T12497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.812426][T12497] RSP: 002b:00007fa87cc1d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 464.812441][T12497] RAX: ffffffffffffffda RBX: 00007fa87c015fa0 RCX: 00007fa87bd9c629 [ 464.812452][T12497] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 000000000000000d [ 464.812461][T12497] RBP: 00007fa87be32b39 R08: 0000000000000000 R09: 0000000000000000 [ 464.812470][T12497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 464.812479][T12497] R13: 00007fa87c016038 R14: 00007fa87c015fa0 R15: 00007ffe5dfb8fe8 [ 464.812499][T12497] [ 465.200118][T12499] hub 1-0:1.0: USB hub found [ 465.206779][T12499] hub 1-0:1.0: 1 port detected [ 466.839473][T12529] FAULT_INJECTION: forcing a failure. [ 466.839473][T12529] name failslab, interval 1, probability 0, space 0, times 0 [ 467.058326][T12529] CPU: 1 UID: 0 PID: 12529 Comm: syz.3.1215 Tainted: G L syzkaller #0 PREEMPT(full) [ 467.058353][T12529] Tainted: [L]=SOFTLOCKUP [ 467.058359][T12529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 467.058368][T12529] Call Trace: [ 467.058373][T12529] [ 467.058380][T12529] dump_stack_lvl+0x100/0x190 [ 467.058406][T12529] should_fail_ex.cold+0x5/0xa [ 467.058425][T12529] should_failslab+0xc2/0x120 [ 467.058455][T12529] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 467.058476][T12529] ? security_inode_alloc+0x3b/0x2c0 [ 467.058498][T12529] ? lockdep_init_map_type+0x5c/0x250 [ 467.058519][T12529] security_inode_alloc+0x3b/0x2c0 [ 467.058540][T12529] inode_init_always_gfp+0xced/0x1040 [ 467.058566][T12529] alloc_inode+0x8e/0x250 [ 467.058587][T12529] alloc_anon_inode+0x2a/0x3e0 [ 467.058613][T12529] ioctx_alloc+0x4dc/0x21d0 [ 467.058634][T12529] ? find_held_lock+0x2b/0x80 [ 467.058648][T12529] ? __pfx_ioctx_alloc+0x10/0x10 [ 467.058667][T12529] __x64_sys_io_setup+0xc9/0x220 [ 467.058684][T12529] do_syscall_64+0x106/0xf80 [ 467.058699][T12529] ? clear_bhb_loop+0x40/0x90 [ 467.058717][T12529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.058732][T12529] RIP: 0033:0x7f9381b9c629 [ 467.058745][T12529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.058759][T12529] RSP: 002b:00007f9382aa5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 467.058774][T12529] RAX: ffffffffffffffda RBX: 00007f9381e16270 RCX: 00007f9381b9c629 [ 467.058783][T12529] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000e [ 467.058792][T12529] RBP: 00007f9381c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 467.058801][T12529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 467.058810][T12529] R13: 00007f9381e16308 R14: 00007f9381e16270 R15: 00007ffdb4a442b8 [ 467.058836][T12529] [ 467.842907][T12543] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input7 [ 468.981438][T12555] Invalid ELF header magic: != ELF [ 470.911524][T12590] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 474.234731][T12644] overlayfs: missing 'lowerdir' [ 477.863390][T12736] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 478.460978][T12750] Invalid ELF header magic: != ELF [ 478.561909][T12762] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 479.087500][T12776] sctp: [Deprecated]: syz.2.1260 (pid 12776) Use of int in max_burst socket option deprecated. [ 479.087500][T12776] Use struct sctp_assoc_value instead [ 479.186107][T12770] zswap: compressor not available [ 479.487565][T12782] Invalid ELF header magic: != ELF [ 481.649125][T12825] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 481.663149][ T5832] Bluetooth: hci1: unexpected event 0x18 length: 440 > 23 [ 482.672536][T12846] Invalid ELF header magic: != ELF [ 485.428273][ T29] audit: type=1800 audit(1772090752.932:3): pid=12904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1280" name="dbroot" dev="configfs" ino=54515 res=0 errno=0 [ 485.465745][T12904] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1280'. [ 485.492779][T12904] team_slave_1 (unregistering): left promiscuous mode [ 485.506577][T12904] team_slave_1 (unregistering): left allmulticast mode [ 485.533001][T12904] team0: Port device team_slave_1 removed [ 485.561671][ T29] audit: type=1804 audit(1772090753.062:4): pid=12908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1279" name="/newroot/sys/kernel/config/target/dbroot" dev="configfs" ino=54515 res=1 errno=0 [ 488.621658][T12985] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input8 [ 489.342320][T13002] Invalid ELF header magic: != ELF [ 490.497124][T13037] Invalid ELF header magic: != ELF [ 491.078784][T13046] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 493.000575][T13074] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1307'. [ 494.825520][T13112] Invalid ELF header magic: != ELF [ 495.336576][T13126] FAULT_INJECTION: forcing a failure. [ 495.336576][T13126] name failslab, interval 1, probability 0, space 0, times 0 [ 495.380912][T13126] CPU: 0 UID: 0 PID: 13126 Comm: syz.2.1317 Tainted: G L syzkaller #0 PREEMPT(full) [ 495.380958][T13126] Tainted: [L]=SOFTLOCKUP [ 495.380968][T13126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 495.380985][T13126] Call Trace: [ 495.380994][T13126] [ 495.381006][T13126] dump_stack_lvl+0x100/0x190 [ 495.381054][T13126] should_fail_ex.cold+0x5/0xa [ 495.381087][T13126] ? lsm_blob_alloc+0x68/0x90 [ 495.381117][T13126] should_failslab+0xc2/0x120 [ 495.381145][T13126] __kmalloc_noprof+0xe0/0x850 [ 495.381183][T13126] ? trace_kmem_cache_alloc+0xf3/0x120 [ 495.381212][T13126] lsm_blob_alloc+0x68/0x90 [ 495.381241][T13126] security_sk_alloc+0x2d/0x290 [ 495.381277][T13126] sk_prot_alloc+0x1d1/0x2a0 [ 495.381316][T13126] sk_alloc+0x36/0xe80 [ 495.381343][T13126] inet_create+0x3a0/0x1060 [ 495.381382][T13126] ? inet_create+0x94/0x1060 [ 495.381423][T13126] __sock_create+0x339/0x860 [ 495.381468][T13126] inet_ctl_sock_create+0x94/0x230 [ 495.381506][T13126] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 495.381557][T13126] ? lockdep_init_map_type+0x5c/0x250 [ 495.381598][T13126] ? lockdep_init_map_type+0x5c/0x250 [ 495.381636][T13126] ? __pfx_igmp_net_init+0x10/0x10 [ 495.381675][T13126] igmp_net_init+0xd0/0x150 [ 495.381717][T13126] ops_init+0x1e2/0x5f0 [ 495.381765][T13126] setup_net+0x118/0x3a0 [ 495.381799][T13126] ? __pfx_setup_net+0x10/0x10 [ 495.381830][T13126] ? lockdep_init_map_type+0x5c/0x250 [ 495.381871][T13126] ? mutex_init_lockep+0x110/0x150 [ 495.381914][T13126] copy_net_ns+0x46f/0x7c0 [ 495.381955][T13126] create_new_namespaces+0x3ea/0xac0 [ 495.381993][T13126] copy_namespaces+0x468/0x5e0 [ 495.382025][T13126] copy_process+0x3226/0x7a10 [ 495.382077][T13126] ? __pfx_copy_process+0x10/0x10 [ 495.382127][T13126] kernel_clone+0xfc/0x9a0 [ 495.382157][T13126] ? __pfx_futex_wait+0x10/0x10 [ 495.382201][T13126] ? __pfx_kernel_clone+0x10/0x10 [ 495.382242][T13126] ? __pfx_sock_write_iter+0x10/0x10 [ 495.382290][T13126] __do_sys_clone+0xd9/0x120 [ 495.382323][T13126] ? __pfx___do_sys_clone+0x10/0x10 [ 495.382387][T13126] do_syscall_64+0x106/0xf80 [ 495.382418][T13126] ? clear_bhb_loop+0x40/0x90 [ 495.382452][T13126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.382482][T13126] RIP: 0033:0x7fc98879c629 [ 495.382505][T13126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.382539][T13126] RSP: 002b:00007fc989676fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 495.382567][T13126] RAX: ffffffffffffffda RBX: 00007fc988a16090 RCX: 00007fc98879c629 [ 495.382586][T13126] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040180211 [ 495.382603][T13126] RBP: 00007fc988832b39 R08: 0000000000000000 R09: 0000000000000000 [ 495.382620][T13126] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 495.382637][T13126] R13: 00007fc988a16128 R14: 00007fc988a16090 R15: 00007ffd584e7258 [ 495.382677][T13126] [ 495.382901][T13126] Failed to initialize the IGMP autojoin socket (err -12) [ 497.355625][T13167] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 498.122500][T13145] futex_wake_op: syz.3.1321 tries to shift op by -2048; fix this program [ 500.055840][T13221] overlayfs: missing 'lowerdir' [ 500.669722][T13226] Invalid ELF header magic: != ELF [ 500.832457][ T29] audit: type=1804 audit(1772096906.327:5): pid=13232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1339" name="/newroot/334/file0" dev="tmpfs" ino=1758 res=1 errno=0 [ 500.978265][ T29] audit: type=1804 audit(1772096906.467:6): pid=13247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1339" name="/newroot/334/file0" dev="tmpfs" ino=1758 res=1 errno=0 [ 501.842705][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.849419][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.587600][T13284] netlink: 'syz.3.1341': attribute type 64 has an invalid length. [ 502.693586][T13284] netlink: 74 bytes leftover after parsing attributes in process `syz.3.1341'. [ 506.375686][T13360] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 509.884280][T13442] Invalid ELF header magic: != ELF [ 510.381739][T13453] FAULT_INJECTION: forcing a failure. [ 510.381739][T13453] name failslab, interval 1, probability 0, space 0, times 0 [ 510.397891][T13453] CPU: 1 UID: 0 PID: 13453 Comm: syz.3.1368 Tainted: G L syzkaller #0 PREEMPT(full) [ 510.397936][T13453] Tainted: [L]=SOFTLOCKUP [ 510.397947][T13453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 510.397963][T13453] Call Trace: [ 510.397973][T13453] [ 510.397983][T13453] dump_stack_lvl+0x100/0x190 [ 510.398031][T13453] should_fail_ex.cold+0x5/0xa [ 510.398065][T13453] ? xfrm_hash_alloc+0xcf/0x100 [ 510.398103][T13453] should_failslab+0xc2/0x120 [ 510.398131][T13453] __kmalloc_noprof+0xe0/0x850 [ 510.398180][T13453] xfrm_hash_alloc+0xcf/0x100 [ 510.398218][T13453] xfrm_state_init+0x15d/0x640 [ 510.398262][T13453] ? __pfx_xfrm_net_init+0x10/0x10 [ 510.398300][T13453] xfrm_net_init+0x20e/0xcc0 [ 510.398348][T13453] ? __pfx_xfrm_net_init+0x10/0x10 [ 510.398387][T13453] ops_init+0x1e2/0x5f0 [ 510.398425][T13453] setup_net+0x118/0x3a0 [ 510.398459][T13453] ? __pfx_setup_net+0x10/0x10 [ 510.398490][T13453] ? lockdep_init_map_type+0x5c/0x250 [ 510.398529][T13453] ? mutex_init_lockep+0x110/0x150 [ 510.398573][T13453] copy_net_ns+0x46f/0x7c0 [ 510.398613][T13453] create_new_namespaces+0x3ea/0xac0 [ 510.398652][T13453] copy_namespaces+0x468/0x5e0 [ 510.398684][T13453] copy_process+0x3226/0x7a10 [ 510.398744][T13453] ? __pfx_copy_process+0x10/0x10 [ 510.398778][T13453] ? find_held_lock+0x2b/0x80 [ 510.398820][T13453] kernel_clone+0xfc/0x9a0 [ 510.398851][T13453] ? __pfx_futex_wait+0x10/0x10 [ 510.398898][T13453] ? __pfx_kernel_clone+0x10/0x10 [ 510.398941][T13453] ? __pfx_sock_write_iter+0x10/0x10 [ 510.398991][T13453] __do_sys_clone+0xd9/0x120 [ 510.399024][T13453] ? __pfx___do_sys_clone+0x10/0x10 [ 510.399073][T13453] ? ksys_write+0x1ac/0x250 [ 510.399115][T13453] ? __pfx_ksys_write+0x10/0x10 [ 510.399169][T13453] do_syscall_64+0x106/0xf80 [ 510.399198][T13453] ? clear_bhb_loop+0x40/0x90 [ 510.399237][T13453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.399266][T13453] RIP: 0033:0x7f9381b9c629 [ 510.399290][T13453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.399318][T13453] RSP: 002b:00007f9382ae6fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 510.399345][T13453] RAX: ffffffffffffffda RBX: 00007f9381e16090 RCX: 00007f9381b9c629 [ 510.399364][T13453] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040180211 [ 510.399382][T13453] RBP: 00007f9381c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 510.399399][T13453] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 510.399417][T13453] R13: 00007f9381e16128 R14: 00007f9381e16090 R15: 00007ffdb4a442b8 [ 510.399453][T13453] [ 513.238178][ T29] audit: type=1804 audit(1772098964.719:7): pid=13488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1374" name="/newroot/339/file0" dev="tmpfs" ino=1776 res=1 errno=0 [ 513.385703][ T29] audit: type=1804 audit(1772098964.719:8): pid=13489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1374" name="/newroot/339/file0" dev="tmpfs" ino=1776 res=1 errno=0 [ 513.652297][T13479] overlayfs: missing 'lowerdir' [ 515.308558][T13520] FAULT_INJECTION: forcing a failure. [ 515.308558][T13520] name failslab, interval 1, probability 0, space 0, times 0 [ 515.409615][T13520] CPU: 1 UID: 0 PID: 13520 Comm: syz.0.1380 Tainted: G L syzkaller #0 PREEMPT(full) [ 515.409662][T13520] Tainted: [L]=SOFTLOCKUP [ 515.409672][T13520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 515.409688][T13520] Call Trace: [ 515.409697][T13520] [ 515.409708][T13520] dump_stack_lvl+0x100/0x190 [ 515.409757][T13520] should_fail_ex.cold+0x5/0xa [ 515.409790][T13520] ? ops_init+0x77/0x5f0 [ 515.409821][T13520] should_failslab+0xc2/0x120 [ 515.409849][T13520] __kmalloc_noprof+0xe0/0x850 [ 515.409889][T13520] ? __raw_spin_lock_init+0x3a/0x110 [ 515.409937][T13520] ops_init+0x77/0x5f0 [ 515.409973][T13520] setup_net+0x118/0x3a0 [ 515.410006][T13520] ? __pfx_setup_net+0x10/0x10 [ 515.410037][T13520] ? lockdep_init_map_type+0x5c/0x250 [ 515.410074][T13520] ? mutex_init_lockep+0x110/0x150 [ 515.410119][T13520] copy_net_ns+0x46f/0x7c0 [ 515.410158][T13520] create_new_namespaces+0x3ea/0xac0 [ 515.410195][T13520] copy_namespaces+0x468/0x5e0 [ 515.410225][T13520] copy_process+0x3226/0x7a10 [ 515.410276][T13520] ? __pfx_copy_process+0x10/0x10 [ 515.410308][T13520] ? find_held_lock+0x2b/0x80 [ 515.410335][T13520] ? futex_private_hash_put+0x107/0x1c0 [ 515.410378][T13520] kernel_clone+0xfc/0x9a0 [ 515.410410][T13520] ? __pfx_kernel_clone+0x10/0x10 [ 515.410449][T13520] ? __pfx_sock_write_iter+0x10/0x10 [ 515.410493][T13520] __do_sys_clone+0xd9/0x120 [ 515.410524][T13520] ? __pfx___do_sys_clone+0x10/0x10 [ 515.410585][T13520] do_syscall_64+0x106/0xf80 [ 515.410616][T13520] ? clear_bhb_loop+0x40/0x90 [ 515.410655][T13520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.410684][T13520] RIP: 0033:0x7fa87bd9c629 [ 515.410708][T13520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.410735][T13520] RSP: 002b:00007fa87cbfbfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 515.410762][T13520] RAX: ffffffffffffffda RBX: 00007fa87c016090 RCX: 00007fa87bd9c629 [ 515.410781][T13520] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040180211 [ 515.410799][T13520] RBP: 00007fa87be32b39 R08: 0000000000000000 R09: 0000000000000000 [ 515.410817][T13520] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 515.410835][T13520] R13: 00007fa87c016128 R14: 00007fa87c016090 R15: 00007ffe5dfb8fe8 [ 515.410875][T13520] [ 515.982297][T13527] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 516.001541][T13527] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 516.016098][T13527] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 516.031929][T13527] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 517.743077][T13548] overlayfs: missing 'lowerdir' [ 518.041571][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout [ 518.047883][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 518.058035][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 518.060426][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 519.968498][T13594] [U] [ 519.971565][T13594] [U] [ 519.974374][T13594] [U] [ 519.977100][T13594] [U] [ 520.000697][T13594] [U] [ 520.003459][T13594] [U] [ 520.006183][T13594] [U] [ 520.008907][T13594] [U] [ 520.079304][T13594] [U] [ 520.082081][T13594] [U] [ 520.084801][T13594] [U] [ 520.087513][T13594] [U] [ 520.159557][T13594] [U] [ 520.162327][T13594] [U] [ 520.165040][T13594] [U] [ 520.167745][T13594] [U] [ 520.189392][T13594] [U] [ 520.192164][T13594] [U] [ 520.194865][T13594] [U] [ 520.197541][T13594] [U] [ 520.245303][T13594] [U] [ 520.724418][T13610] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1401'. [ 521.489786][T13619] Invalid ELF header magic: != ELF [ 524.998383][T13679] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 528.545883][T13727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1425'. [ 528.623949][T13724] overlayfs: missing 'lowerdir' [ 528.646910][T13724] FAULT_INJECTION: forcing a failure. [ 528.646910][T13724] name failslab, interval 1, probability 0, space 0, times 0 [ 528.683459][T13724] CPU: 0 UID: 0 PID: 13724 Comm: syz.2.1433 Tainted: G L syzkaller #0 PREEMPT(full) [ 528.683492][T13724] Tainted: [L]=SOFTLOCKUP [ 528.683498][T13724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 528.683507][T13724] Call Trace: [ 528.683513][T13724] [ 528.683519][T13724] dump_stack_lvl+0x100/0x190 [ 528.683546][T13724] should_fail_ex.cold+0x5/0xa [ 528.683566][T13724] should_failslab+0xc2/0x120 [ 528.683581][T13724] __kmalloc_cache_noprof+0x7a/0x6f0 [ 528.683599][T13724] ? drm_atomic_helper_setup_commit+0x806/0x14f0 [ 528.683621][T13724] drm_atomic_helper_setup_commit+0x806/0x14f0 [ 528.683646][T13724] drm_atomic_helper_commit+0xa9/0x380 [ 528.683662][T13724] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 528.683679][T13724] drm_atomic_commit+0x230/0x300 [ 528.683704][T13724] ? __pfx_drm_atomic_commit+0x10/0x10 [ 528.683725][T13724] ? __pfx___drm_printfn_info+0x10/0x10 [ 528.683744][T13724] ? drm_client_rotation+0x451/0x6a0 [ 528.683763][T13724] drm_client_modeset_commit_atomic+0x6a6/0x7e0 [ 528.683785][T13724] ? __mutex_lock+0x26a/0x1b90 [ 528.683802][T13724] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 528.683819][T13724] ? drm_master_internal_acquire+0x21/0x80 [ 528.683853][T13724] drm_client_modeset_commit_locked+0x14d/0x580 [ 528.683872][T13724] drm_client_modeset_commit+0x4f/0x80 [ 528.683890][T13724] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 528.683919][T13724] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 528.683938][T13724] drm_fbdev_client_restore+0x1b/0x30 [ 528.683959][T13724] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 528.683979][T13724] drm_client_dev_restore+0x205/0x2a0 [ 528.683999][T13724] drm_release+0x2c6/0x360 [ 528.684014][T13724] ? __pfx_drm_release+0x10/0x10 [ 528.684028][T13724] __fput+0x3ff/0xb40 [ 528.684049][T13724] task_work_run+0x150/0x240 [ 528.684071][T13724] ? __pfx_task_work_run+0x10/0x10 [ 528.684096][T13724] exit_to_user_mode_loop+0x100/0x4a0 [ 528.684117][T13724] do_syscall_64+0x668/0xf80 [ 528.684132][T13724] ? clear_bhb_loop+0x40/0x90 [ 528.684151][T13724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.684166][T13724] RIP: 0033:0x7fc98879c629 [ 528.684179][T13724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.684196][T13724] RSP: 002b:00007fc989677028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 528.684211][T13724] RAX: 0000000000000000 RBX: 00007fc988a16090 RCX: 00007fc98879c629 [ 528.684221][T13724] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000002 [ 528.684230][T13724] RBP: 00007fc988832b39 R08: 0000000000000000 R09: 0000000000000000 [ 528.684239][T13724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 528.684248][T13724] R13: 00007fc988a16128 R14: 00007fc988a16090 R15: 00007ffd584e7258 [ 528.684269][T13724] [ 533.007997][T13759] futex_wake_op: syz.0.1429 tries to shift op by -2048; fix this program [ 533.778524][T13791] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 534.870649][T13792] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input13 [ 537.038589][T13839] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 539.674069][T13891] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1457'. [ 540.591487][T13915] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 541.081815][T13922] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 543.312482][T13974] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 548.778141][T14066] vhci_hcd vhci_hcd.0: default hub control req: 0000 v0000 i0000 l0 [ 549.135365][T14070] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 551.099240][T13568] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 551.107084][T13568] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 551.387817][T14090] FAULT_INJECTION: forcing a failure. [ 551.387817][T14090] name fail_futex, interval 1, probability 0, space 0, times 1 [ 551.411148][T14090] CPU: 0 UID: 0 PID: 14090 Comm: syz.3.1496 Tainted: G L syzkaller #0 PREEMPT(full) [ 551.411192][T14090] Tainted: [L]=SOFTLOCKUP [ 551.411207][T14090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 551.411223][T14090] Call Trace: [ 551.411231][T14090] [ 551.411242][T14090] dump_stack_lvl+0x100/0x190 [ 551.411287][T14090] should_fail_ex.cold+0x5/0xa [ 551.411320][T14090] get_futex_key+0x1d2/0x1620 [ 551.411357][T14090] ? __pfx_get_futex_key+0x10/0x10 [ 551.411386][T14090] ? lock_acquire+0x1cf/0x380 [ 551.411431][T14090] futex_wake+0xea/0x530 [ 551.411471][T14090] ? __pfx_futex_wake+0x10/0x10 [ 551.411516][T14090] ? exit_mm_release+0x19/0x30 [ 551.411554][T14090] do_futex+0x32b/0x350 [ 551.411587][T14090] ? __pfx_do_futex+0x10/0x10 [ 551.411616][T14090] ? __might_fault+0xc5/0x140 [ 551.411660][T14090] mm_release+0x24a/0x2f0 [ 551.411687][T14090] do_exit+0x675/0x2aa0 [ 551.411726][T14090] ? __pfx_do_exit+0x10/0x10 [ 551.411759][T14090] ? do_raw_spin_lock+0x128/0x260 [ 551.411795][T14090] ? find_held_lock+0x2b/0x80 [ 551.411819][T14090] ? get_signal+0x7e0/0x21e0 [ 551.411850][T14090] do_group_exit+0xd5/0x2a0 [ 551.411887][T14090] get_signal+0x1ec7/0x21e0 [ 551.411929][T14090] ? __pfx_get_signal+0x10/0x10 [ 551.411959][T14090] ? do_futex+0x192/0x350 [ 551.411997][T14090] arch_do_signal_or_restart+0x91/0x770 [ 551.412032][T14090] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 551.412076][T14090] ? __pfx___x64_sys_futex+0x10/0x10 [ 551.412124][T14090] exit_to_user_mode_loop+0x86/0x4a0 [ 551.412162][T14090] do_syscall_64+0x668/0xf80 [ 551.412191][T14090] ? clear_bhb_loop+0x40/0x90 [ 551.412224][T14090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.412252][T14090] RIP: 0033:0x7f9381b9c629 [ 551.412275][T14090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.412301][T14090] RSP: 002b:00007f9382ae70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 551.412327][T14090] RAX: fffffffffffffe00 RBX: 00007f9381e16098 RCX: 00007f9381b9c629 [ 551.412345][T14090] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9381e16098 [ 551.412362][T14090] RBP: 00007f9381e16090 R08: 0000000000000000 R09: 0000000000000000 [ 551.412397][T14090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 551.412413][T14090] R13: 00007f9381e16128 R14: 00007ffdb4a441d0 R15: 00007ffdb4a442b8 [ 551.412449][T14090] [ 553.058072][T14105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1499'. [ 553.441122][T14116] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1502'. [ 553.488571][T14116] ipvlan1: entered promiscuous mode [ 553.502319][T14116] ipvlan1: entered allmulticast mode [ 553.528287][T14116] veth0_vlan: entered allmulticast mode [ 554.557721][T14150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1508'. [ 554.585613][T14150] netlink: 'syz.2.1508': attribute type 1 has an invalid length. [ 554.668842][T14150] netlink: 51505 bytes leftover after parsing attributes in process `syz.2.1508'. [ 555.334089][ T29] audit: type=1807 audit(1772117420.799:9): UNKNOWN= [ 555.335751][ T29] audit: type=1802 audit(1772117420.799:10): pid=14155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.1507" res=0 errno=0 [ 556.529020][T14145] ima: policy update failed [ 556.579498][ T29] audit: type=1802 audit(1772117422.039:11): pid=14145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1507" res=0 errno=0 [ 556.941764][T14171] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16 [ 559.716271][T14185] futex_wake_op: syz.1.1523 tries to shift op by -2048; fix this program [ 562.002928][T14232] vhci_hcd vhci_hcd.0: default hub control req: 0000 v0000 i0000 l0 [ 562.499059][T14246] ksmbd: Unknown IPC event: 14, ignore. [ 562.534297][T14246] FAULT_INJECTION: forcing a failure. [ 562.534297][T14246] name failslab, interval 1, probability 0, space 0, times 0 [ 562.570010][T14246] CPU: 1 UID: 0 PID: 14246 Comm: syz.1.1527 Tainted: G L syzkaller #0 PREEMPT(full) [ 562.570057][T14246] Tainted: [L]=SOFTLOCKUP [ 562.570067][T14246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 562.570084][T14246] Call Trace: [ 562.570094][T14246] [ 562.570105][T14246] dump_stack_lvl+0x100/0x190 [ 562.570154][T14246] should_fail_ex.cold+0x5/0xa [ 562.570187][T14246] ? ima_alloc_init_template+0x19d/0x6d0 [ 562.570227][T14246] should_failslab+0xc2/0x120 [ 562.570255][T14246] __kmalloc_noprof+0xe0/0x850 [ 562.570304][T14246] ima_alloc_init_template+0x19d/0x6d0 [ 562.570355][T14246] ima_store_measurement+0x1e3/0x5b0 [ 562.570398][T14246] ? __pfx_ima_store_measurement+0x10/0x10 [ 562.570454][T14246] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 562.570496][T14246] process_measurement+0x19cc/0x2350 [ 562.570547][T14246] ? __pfx_process_measurement+0x10/0x10 [ 562.570585][T14246] ? trace_contention_end+0x140/0x180 [ 562.570630][T14246] ? find_held_lock+0x2b/0x80 [ 562.570656][T14246] ? trace_array_get+0xd8/0x100 [ 562.570681][T14246] ? trace_array_get+0xd8/0x100 [ 562.570737][T14246] ? bpf_lsm_locked_down+0x9/0x10 [ 562.570765][T14246] ? security_locked_down+0x70/0x1e0 [ 562.570795][T14246] ? tracing_open_generic+0x94/0xc0 [ 562.570836][T14246] ? subsystem_open+0x1bc/0x4b0 [ 562.570865][T14246] ? inode_to_bdi+0x9e/0x160 [ 562.570910][T14246] ima_file_check+0xcc/0x120 [ 562.570944][T14246] ? __pfx_ima_file_check+0x10/0x10 [ 562.570998][T14246] security_file_post_open+0xc4/0x210 [ 562.571033][T14246] path_openat+0x1418/0x31a0 [ 562.571055][T14246] ? __pfx_path_openat+0x10/0x10 [ 562.571076][T14246] do_file_open+0x20e/0x430 [ 562.571091][T14246] ? __pfx_do_file_open+0x10/0x10 [ 562.571119][T14246] ? alloc_fd+0x476/0x790 [ 562.571144][T14246] ? do_getname+0x191/0x390 [ 562.571162][T14246] do_sys_openat2+0x10d/0x1e0 [ 562.571179][T14246] ? __pfx_do_sys_openat2+0x10/0x10 [ 562.571209][T14246] __x64_sys_openat+0x12d/0x210 [ 562.571227][T14246] ? __pfx___x64_sys_openat+0x10/0x10 [ 562.571252][T14246] do_syscall_64+0x106/0xf80 [ 562.571268][T14246] ? clear_bhb_loop+0x40/0x90 [ 562.571288][T14246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.571303][T14246] RIP: 0033:0x7f8de219c629 [ 562.571318][T14246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.571332][T14246] RSP: 002b:00007f8de2fde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 562.571347][T14246] RAX: ffffffffffffffda RBX: 00007f8de2415fa0 RCX: 00007f8de219c629 [ 562.571356][T14246] RDX: 0000000000000400 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 562.571366][T14246] RBP: 00007f8de2232b39 R08: 0000000000000000 R09: 0000000000000000 [ 562.571374][T14246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 562.571382][T14246] R13: 00007f8de2416038 R14: 00007f8de2415fa0 R15: 00007ffc58f73258 [ 562.571402][T14246] [ 562.901940][ T29] audit: type=1804 audit(1772117428.365:12): pid=14246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.1.1527" name="/newroot/sys/kernel/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=0 errno=0 [ 563.266940][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.275772][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.726480][T14269] misc userio: Invalid payload size [ 566.483758][T14324] FAULT_INJECTION: forcing a failure. [ 566.483758][T14324] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 566.509721][T14324] CPU: 1 UID: 0 PID: 14324 Comm: syz.2.1540 Tainted: G L syzkaller #0 PREEMPT(full) [ 566.509749][T14324] Tainted: [L]=SOFTLOCKUP [ 566.509754][T14324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 566.509769][T14324] Call Trace: [ 566.509775][T14324] [ 566.509781][T14324] dump_stack_lvl+0x100/0x190 [ 566.509808][T14324] should_fail_ex.cold+0x5/0xa [ 566.509824][T14324] ? prepare_alloc_pages+0x16d/0x5f0 [ 566.509841][T14324] should_fail_alloc_page+0xeb/0x140 [ 566.509858][T14324] prepare_alloc_pages+0x1f0/0x5f0 [ 566.509873][T14324] ? arch_stack_walk+0xa6/0xf0 [ 566.509889][T14324] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 566.509915][T14324] ? stack_trace_save+0x8e/0xc0 [ 566.509929][T14324] ? __pfx_stack_trace_save+0x10/0x10 [ 566.509943][T14324] ? stack_depot_save_flags+0x27/0x9d0 [ 566.509968][T14324] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 566.509988][T14324] ? kasan_save_stack+0x3f/0x50 [ 566.510008][T14324] ? kasan_save_stack+0x30/0x50 [ 566.510028][T14324] ? __kasan_slab_alloc+0x89/0x90 [ 566.510049][T14324] ? __pmd_alloc+0xbf/0x9c0 [ 566.510064][T14324] ? walk_pgd_range+0x896/0x1eb0 [ 566.510083][T14324] ? __walk_page_range+0x163/0x820 [ 566.510102][T14324] ? walk_page_range_mm_unsafe+0x563/0xa10 [ 566.510122][T14324] ? madvise_guard_install+0x2f9/0x7c0 [ 566.510136][T14324] ? madvise_vma_behavior+0x11f1/0x3050 [ 566.510151][T14324] ? madvise_walk_vmas+0x2fe/0xa90 [ 566.510165][T14324] ? madvise_do_behavior+0x1ea/0x510 [ 566.510179][T14324] ? do_madvise+0x195/0x240 [ 566.510200][T14324] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 566.510224][T14324] ? policy_nodemask+0xed/0x4f0 [ 566.510240][T14324] alloc_pages_mpol+0x1fb/0x550 [ 566.510255][T14324] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 566.510274][T14324] alloc_pages_noprof+0x131/0x390 [ 566.510289][T14324] pte_alloc_one+0x1e/0x3e0 [ 566.510306][T14324] __pte_alloc+0x6d/0x3f0 [ 566.510319][T14324] ? __pfx___pte_alloc+0x10/0x10 [ 566.510332][T14324] ? _raw_spin_unlock+0x28/0x50 [ 566.510355][T14324] ? __pmd_alloc+0x6aa/0x9c0 [ 566.510372][T14324] walk_pgd_range+0xb83/0x1eb0 [ 566.510395][T14324] ? __pfx_guard_install_set_pte+0x10/0x10 [ 566.510409][T14324] ? __pfx_guard_install_pte_entry+0x10/0x10 [ 566.510426][T14324] ? __pfx_guard_install_set_pte+0x10/0x10 [ 566.510443][T14324] ? __pfx_guard_install_set_pte+0x10/0x10 [ 566.510458][T14324] ? __pfx_guard_install_set_pte+0x10/0x10 [ 566.510473][T14324] ? __pfx_walk_pgd_range+0x10/0x10 [ 566.510498][T14324] __walk_page_range+0x163/0x820 [ 566.510524][T14324] ? find_vma+0xbf/0x140 [ 566.510545][T14324] ? __pfx_find_vma+0x10/0x10 [ 566.510571][T14324] ? walk_page_test+0x78/0x180 [ 566.510592][T14324] walk_page_range_mm_unsafe+0x563/0xa10 [ 566.510617][T14324] ? __pfx_walk_page_range_mm_unsafe+0x10/0x10 [ 566.510645][T14324] ? __anon_vma_prepare+0x2e2/0x5e0 [ 566.510667][T14324] madvise_guard_install+0x2f9/0x7c0 [ 566.510687][T14324] ? __pfx_madvise_guard_install+0x10/0x10 [ 566.510705][T14324] ? __pfx_guard_install_pud_entry+0x10/0x10 [ 566.510719][T14324] ? __pfx_guard_install_pmd_entry+0x10/0x10 [ 566.510733][T14324] ? __pfx_guard_install_pte_entry+0x10/0x10 [ 566.510750][T14324] ? __pfx_guard_install_set_pte+0x10/0x10 [ 566.510774][T14324] madvise_vma_behavior+0x11f1/0x3050 [ 566.510795][T14324] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 566.510811][T14324] ? mas_prev_setup.constprop.0+0xb6/0x9c0 [ 566.510830][T14324] ? mas_prev+0x9b/0xf0 [ 566.510847][T14324] ? __pfx_mas_prev+0x10/0x10 [ 566.510870][T14324] ? find_vma_prev+0xd8/0x150 [ 566.510883][T14324] ? lock_vma_under_rcu+0x1f9/0x590 [ 566.510900][T14324] ? __pfx_find_vma_prev+0x10/0x10 [ 566.510919][T14324] ? find_held_lock+0x2b/0x80 [ 566.510932][T14324] ? madvise_do_behavior+0x1ea/0x510 [ 566.510947][T14324] ? madvise_do_behavior+0x1ea/0x510 [ 566.510966][T14324] madvise_walk_vmas+0x2fe/0xa90 [ 566.510985][T14324] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 566.511001][T14324] ? futex_hash+0x2c5/0x380 [ 566.511020][T14324] madvise_do_behavior+0x1ea/0x510 [ 566.511037][T14324] ? __pfx_madvise_do_behavior+0x10/0x10 [ 566.511052][T14324] ? futex_wait+0x125/0x380 [ 566.511079][T14324] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 566.511104][T14324] do_madvise+0x195/0x240 [ 566.511119][T14324] ? __pfx_do_madvise+0x10/0x10 [ 566.511134][T14324] ? do_futex+0x192/0x350 [ 566.511169][T14324] __x64_sys_madvise+0xa9/0x110 [ 566.511185][T14324] ? lockdep_hardirqs_on+0x78/0x100 [ 566.511200][T14324] do_syscall_64+0x106/0xf80 [ 566.511215][T14324] ? clear_bhb_loop+0x40/0x90 [ 566.511233][T14324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.511248][T14324] RIP: 0033:0x7fc98879c629 [ 566.511263][T14324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.511277][T14324] RSP: 002b:00007fc989677028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 566.511304][T14324] RAX: ffffffffffffffda RBX: 00007fc988a16090 RCX: 00007fc98879c629 [ 566.511314][T14324] RDX: 0000000000000066 RSI: 0000000002021000 RDI: 0000000000000000 [ 566.511323][T14324] RBP: 00007fc988832b39 R08: 0000000000000000 R09: 0000000000000000 [ 566.511333][T14324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 566.511342][T14324] R13: 00007fc988a16128 R14: 00007fc988a16090 R15: 00007ffd584e7258 [ 566.511363][T14324] [ 569.255291][T14367] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1559'. [ 569.264400][T14367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 569.272382][T14367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 569.287260][T14367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 569.301609][T14367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 572.160316][T14431] netlink: 504 bytes leftover after parsing attributes in process `syz.3.1564'. [ 572.181549][T14431] netlink: 350 bytes leftover after parsing attributes in process `syz.3.1564'. [ 576.628613][T14490] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 582.277329][T14572] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 582.553666][T13568] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 582.710898][T13568] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 582.719994][T13568] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 583.473435][T14581] bond0: Unable to set up delay as MII monitoring is disabled [ 583.654896][ T29] audit: type=1800 audit(1772121541.107:13): pid=14594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1590" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 586.233644][T14646] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 589.136892][T14695] QAT: Invalid ioctl 21531 [ 590.095336][T14721] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 590.211766][T14713] misc userio: Invalid payload size [ 593.187028][ T29] audit: type=1807 audit(1772122573.631:14): UNKNOWN= [ 593.187247][ T29] audit: type=1802 audit(1772122573.631:15): pid=14767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.1628" res=0 errno=0 [ 593.650311][T14770] ima: policy update failed [ 593.667053][ T29] audit: type=1802 audit(1772122574.111:16): pid=14770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1628" res=0 errno=0 [ 594.345911][T14793] misc userio: Invalid payload size [ 594.938008][T14805] FAULT_INJECTION: forcing a failure. [ 594.938008][T14805] name failslab, interval 1, probability 0, space 0, times 0 [ 594.999611][T14805] CPU: 0 UID: 0 PID: 14805 Comm: syz.1.1634 Tainted: G L syzkaller #0 PREEMPT(full) [ 594.999655][T14805] Tainted: [L]=SOFTLOCKUP [ 594.999665][T14805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 594.999681][T14805] Call Trace: [ 594.999687][T14805] [ 594.999695][T14805] dump_stack_lvl+0x100/0x190 [ 594.999730][T14805] should_fail_ex.cold+0x5/0xa [ 594.999748][T14805] should_failslab+0xc2/0x120 [ 594.999763][T14805] __kmalloc_cache_noprof+0x7a/0x6f0 [ 594.999781][T14805] ? sc_common_open+0x46/0x200 [ 594.999794][T14805] ? __pfx___debugfs_file_get+0x10/0x10 [ 594.999810][T14805] ? find_held_lock+0x2b/0x80 [ 594.999826][T14805] ? __pfx_stats_fop_open+0x10/0x10 [ 594.999839][T14805] sc_common_open+0x46/0x200 [ 594.999855][T14805] full_proxy_open_regular+0x1b6/0x370 [ 594.999876][T14805] do_dentry_open+0x6d8/0x1660 [ 594.999897][T14805] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 594.999920][T14805] vfs_open+0x82/0x3f0 [ 594.999939][T14805] path_openat+0x208c/0x31a0 [ 594.999959][T14805] ? __pfx_path_openat+0x10/0x10 [ 594.999980][T14805] do_file_open+0x20e/0x430 [ 594.999996][T14805] ? __pfx_do_file_open+0x10/0x10 [ 595.000023][T14805] ? alloc_fd+0x476/0x790 [ 595.000047][T14805] ? do_getname+0x191/0x390 [ 595.000065][T14805] do_sys_openat2+0x10d/0x1e0 [ 595.000082][T14805] ? __pfx_do_sys_openat2+0x10/0x10 [ 595.000101][T14805] ? __fget_files+0x21f/0x3d0 [ 595.000126][T14805] __x64_sys_openat+0x12d/0x210 [ 595.000144][T14805] ? __pfx___x64_sys_openat+0x10/0x10 [ 595.000169][T14805] do_syscall_64+0x106/0xf80 [ 595.000184][T14805] ? clear_bhb_loop+0x40/0x90 [ 595.000202][T14805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.000217][T14805] RIP: 0033:0x7f8de219c629 [ 595.000231][T14805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 595.000245][T14805] RSP: 002b:00007f8de2fbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 595.000260][T14805] RAX: ffffffffffffffda RBX: 00007f8de2416090 RCX: 00007f8de219c629 [ 595.000270][T14805] RDX: 0000000000008382 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 595.000279][T14805] RBP: 00007f8de2232b39 R08: 0000000000000000 R09: 0000000000000000 [ 595.000287][T14805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 595.000295][T14805] R13: 00007f8de2416128 R14: 00007f8de2416090 R15: 00007ffc58f73258 [ 595.000315][T14805] [ 602.022648][T13568] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 602.030145][T13568] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 604.044810][T14922] Setting dangerous option i915.mitigations - tainting kernel [ 606.322688][ T29] audit: type=1800 audit(1772122586.765:17): pid=14979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1665" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 607.538091][T14997] vhci_hcd vhci_hcd.3: default hub control req: ff03 v0202 i0002 l8 [ 607.596691][T15009] QAT: Invalid ioctl 21531 [ 608.185534][T15021] FAULT_INJECTION: forcing a failure. [ 608.185534][T15021] name failslab, interval 1, probability 0, space 0, times 0 [ 608.284099][T15021] CPU: 1 UID: 0 PID: 15021 Comm: syz.1.1684 Tainted: G U L syzkaller #0 PREEMPT(full) [ 608.284146][T15021] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 608.284156][T15021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 608.284171][T15021] Call Trace: [ 608.284181][T15021] [ 608.284191][T15021] dump_stack_lvl+0x100/0x190 [ 608.284239][T15021] should_fail_ex.cold+0x5/0xa [ 608.284272][T15021] should_failslab+0xc2/0x120 [ 608.284301][T15021] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 608.284340][T15021] ? do_getname+0x35/0x390 [ 608.284375][T15021] do_getname+0x35/0x390 [ 608.284410][T15021] user_path_at+0x26/0x60 [ 608.284453][T15021] __x64_sys_mount+0x1fb/0x310 [ 608.284487][T15021] ? __pfx___x64_sys_mount+0x10/0x10 [ 608.284527][T15021] do_syscall_64+0x106/0xf80 [ 608.284558][T15021] ? clear_bhb_loop+0x40/0x90 [ 608.284594][T15021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.284621][T15021] RIP: 0033:0x7f8de219c629 [ 608.284644][T15021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 608.284669][T15021] RSP: 002b:00007f8de2fbd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 608.284694][T15021] RAX: ffffffffffffffda RBX: 00007f8de2416090 RCX: 00007f8de219c629 [ 608.284711][T15021] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 0000200000000180 [ 608.284726][T15021] RBP: 00007f8de2232b39 R08: 0000200000000280 R09: 0000000000000000 [ 608.284742][T15021] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 608.284768][T15021] R13: 00007f8de2416128 R14: 00007f8de2416090 R15: 00007ffc58f73258 [ 608.284802][T15021] [ 609.517699][T15037] bond0: Unable to set up delay as MII monitoring is disabled [ 609.599383][T15047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1681'. [ 609.921289][T15047] netlink: 354 bytes leftover after parsing attributes in process `syz.0.1681'. [ 611.674805][T15087] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17 [ 613.566432][ T29] audit: type=1800 audit(1772122594.001:18): pid=15107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1696" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 615.618343][T15140] binder: 15138:15140 ioctl c018620c 0 returned -1 [ 618.064476][T15192] QAT: Invalid ioctl 21531 [ 619.091451][ T29] audit: type=1800 audit(1772122599.518:19): pid=15209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1712" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 619.199703][ T29] audit: type=1400 audit(1772122599.628:20): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=15214 comm="syz.3.1714" [ 623.132962][T13568] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 623.370955][T15268] FAULT_INJECTION: forcing a failure. [ 623.370955][T15268] name failslab, interval 1, probability 0, space 0, times 0 [ 623.393048][T15268] CPU: 1 UID: 0 PID: 15268 Comm: syz.0.1726 Tainted: G U L syzkaller #0 PREEMPT(full) [ 623.393100][T15268] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 623.393110][T15268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 623.393126][T15268] Call Trace: [ 623.393135][T15268] [ 623.393145][T15268] dump_stack_lvl+0x100/0x190 [ 623.393193][T15268] should_fail_ex.cold+0x5/0xa [ 623.393228][T15268] should_failslab+0xc2/0x120 [ 623.393256][T15268] __kmalloc_cache_noprof+0x7a/0x6f0 [ 623.393292][T15268] ? percpu_ref_init+0xec/0x3f0 [ 623.393333][T15268] ? __pfx_free_ioctx_reqs+0x10/0x10 [ 623.393378][T15268] percpu_ref_init+0xec/0x3f0 [ 623.393411][T15268] ? __init_waitqueue_head+0xca/0x150 [ 623.393466][T15268] ioctx_alloc+0x3ee/0x21d0 [ 623.393495][T15268] ? cap_task_prctl+0x104/0xa50 [ 623.393543][T15268] ? find_held_lock+0x2b/0x80 [ 623.393569][T15268] ? __pfx_ioctx_alloc+0x10/0x10 [ 623.393609][T15268] __x64_sys_io_setup+0xc9/0x220 [ 623.393642][T15268] do_syscall_64+0x106/0xf80 [ 623.393672][T15268] ? clear_bhb_loop+0x40/0x90 [ 623.393708][T15268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.393738][T15268] RIP: 0033:0x7fa87bd9c629 [ 623.393763][T15268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 623.393791][T15268] RSP: 002b:00007fa87cbba028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 623.393823][T15268] RAX: ffffffffffffffda RBX: 00007fa87c016270 RCX: 00007fa87bd9c629 [ 623.393843][T15268] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000e [ 623.393860][T15268] RBP: 00007fa87be32b39 R08: 0000000000000000 R09: 0000000000000000 [ 623.393878][T15268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 623.393895][T15268] R13: 00007fa87c016308 R14: 00007fa87c016270 R15: 00007ffe5dfb8fe8 [ 623.393934][T15268] [ 623.674458][T15263] FAULT_INJECTION: forcing a failure. [ 623.674458][T15263] name failslab, interval 1, probability 0, space 0, times 0 [ 623.687151][T15263] CPU: 1 UID: 0 PID: 15263 Comm: syz.2.1725 Tainted: G U L syzkaller #0 PREEMPT(full) [ 623.687216][T15263] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 623.687227][T15263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 623.687242][T15263] Call Trace: [ 623.687251][T15263] [ 623.687261][T15263] dump_stack_lvl+0x100/0x190 [ 623.687307][T15263] should_fail_ex.cold+0x5/0xa [ 623.687340][T15263] should_failslab+0xc2/0x120 [ 623.687366][T15263] __kmalloc_cache_noprof+0x7a/0x6f0 [ 623.687399][T15263] ? kobject_uevent_env+0x263/0x18b0 [ 623.687453][T15263] kobject_uevent_env+0x263/0x18b0 [ 623.687496][T15263] ? kvm_uevent_notify_change.part.0+0x321/0x450 [ 623.687533][T15263] ? kfree+0x1f6/0x6b0 [ 623.687571][T15263] kvm_uevent_notify_change.part.0+0x3a6/0x450 [ 623.687610][T15263] ? __pfx_kvm_vm_release+0x10/0x10 [ 623.687640][T15263] kvm_put_kvm+0xe4/0xb10 [ 623.687670][T15263] ? lockdep_hardirqs_on+0x78/0x100 [ 623.687700][T15263] ? _raw_spin_unlock_irq+0x2e/0x50 [ 623.687728][T15263] ? __pfx_kvm_vm_release+0x10/0x10 [ 623.687759][T15263] kvm_vm_release+0x3c/0x50 [ 623.687787][T15263] __fput+0x3ff/0xb40 [ 623.687826][T15263] task_work_run+0x150/0x240 [ 623.687867][T15263] ? __pfx_task_work_run+0x10/0x10 [ 623.687918][T15263] exit_to_user_mode_loop+0x100/0x4a0 [ 623.687958][T15263] do_syscall_64+0x668/0xf80 [ 623.687988][T15263] ? clear_bhb_loop+0x40/0x90 [ 623.688023][T15263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.688052][T15263] RIP: 0033:0x7fc98879c629 [ 623.688075][T15263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 623.688102][T15263] RSP: 002b:00007fc989677028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 623.688129][T15263] RAX: 0000000000000000 RBX: 00007fc988a16090 RCX: 00007fc98879c629 [ 623.688148][T15263] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000002 [ 623.688165][T15263] RBP: 00007fc988832b39 R08: 0000000000000000 R09: 0000000000000000 [ 623.688183][T15263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 623.688201][T15263] R13: 00007fc988a16128 R14: 00007fc988a16090 R15: 00007ffd584e7258 [ 623.688239][T15263] [ 624.738930][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.745622][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.494157][T15295] FAULT_INJECTION: forcing a failure. [ 626.494157][T15295] name failslab, interval 1, probability 0, space 0, times 0 [ 626.528371][T15295] CPU: 0 UID: 0 PID: 15295 Comm: syz.0.1732 Tainted: G U L syzkaller #0 PREEMPT(full) [ 626.528409][T15295] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 626.528415][T15295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 626.528424][T15295] Call Trace: [ 626.528430][T15295] [ 626.528436][T15295] dump_stack_lvl+0x100/0x190 [ 626.528463][T15295] should_fail_ex.cold+0x5/0xa [ 626.528482][T15295] ? __seq_open_private+0x22/0xd0 [ 626.528502][T15295] should_failslab+0xc2/0x120 [ 626.528517][T15295] __kmalloc_noprof+0xe0/0x850 [ 626.528541][T15295] ? __pfx_stats_fop_open+0x10/0x10 [ 626.528556][T15295] __seq_open_private+0x22/0xd0 [ 626.528576][T15295] sc_common_open+0x6b/0x200 [ 626.528591][T15295] full_proxy_open_regular+0x1b6/0x370 [ 626.528613][T15295] do_dentry_open+0x6d8/0x1660 [ 626.528635][T15295] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 626.528658][T15295] vfs_open+0x82/0x3f0 [ 626.528677][T15295] path_openat+0x208c/0x31a0 [ 626.528697][T15295] ? __pfx_path_openat+0x10/0x10 [ 626.528718][T15295] do_file_open+0x20e/0x430 [ 626.528733][T15295] ? __pfx_do_file_open+0x10/0x10 [ 626.528761][T15295] ? alloc_fd+0x476/0x790 [ 626.528784][T15295] ? do_getname+0x191/0x390 [ 626.528802][T15295] do_sys_openat2+0x10d/0x1e0 [ 626.528820][T15295] ? __pfx_do_sys_openat2+0x10/0x10 [ 626.528838][T15295] ? __fget_files+0x21f/0x3d0 [ 626.528863][T15295] __x64_sys_openat+0x12d/0x210 [ 626.528881][T15295] ? __pfx___x64_sys_openat+0x10/0x10 [ 626.528906][T15295] do_syscall_64+0x106/0xf80 [ 626.528922][T15295] ? clear_bhb_loop+0x40/0x90 [ 626.528939][T15295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.528954][T15295] RIP: 0033:0x7fa87bd9c629 [ 626.528968][T15295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 626.528982][T15295] RSP: 002b:00007fa87cbfc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 626.528996][T15295] RAX: ffffffffffffffda RBX: 00007fa87c016090 RCX: 00007fa87bd9c629 [ 626.529006][T15295] RDX: 0000000000008382 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 626.529015][T15295] RBP: 00007fa87be32b39 R08: 0000000000000000 R09: 0000000000000000 [ 626.529024][T15295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 626.529033][T15295] R13: 00007fa87c016128 R14: 00007fa87c016090 R15: 00007ffe5dfb8fe8 [ 626.529053][T15295] [ 627.456870][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 627.463263][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.515842][T13568] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 628.523365][T13568] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 629.179405][T15348] nvme_fcloop: unknown parameter or missing value '7' [ 630.153202][T15371] Invalid ELF header magic: != ELF [ 632.436681][T15406] ima: policy update failed [ 632.457748][ T29] audit: type=1802 audit(1772122612.882:21): pid=15406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1749" res=0 errno=0 [ 633.626303][T15416] QAT: Invalid ioctl 21531 [ 636.828970][T15486] FAULT_INJECTION: forcing a failure. [ 636.828970][T15486] name failslab, interval 1, probability 0, space 0, times 0 [ 636.909779][T15486] CPU: 0 UID: 0 PID: 15486 Comm: syz.3.1760 Tainted: G U L syzkaller #0 PREEMPT(full) [ 636.909826][T15486] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 636.909837][T15486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 636.909853][T15486] Call Trace: [ 636.909861][T15486] [ 636.909871][T15486] dump_stack_lvl+0x100/0x190 [ 636.909918][T15486] should_fail_ex.cold+0x5/0xa [ 636.909948][T15486] ? apply_wqattrs_prepare+0xfe/0xbb0 [ 636.909975][T15486] should_failslab+0xc2/0x120 [ 636.910003][T15486] __kmalloc_noprof+0xe0/0x850 [ 636.910053][T15486] apply_wqattrs_prepare+0xfe/0xbb0 [ 636.910081][T15486] ? __alloc_workqueue+0x901/0x1880 [ 636.910125][T15486] apply_workqueue_attrs_locked+0x64/0xe0 [ 636.910157][T15486] __alloc_workqueue+0x1111/0x1880 [ 636.910203][T15486] alloc_workqueue_noprof+0xd2/0x200 [ 636.910238][T15486] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 636.910276][T15486] ? kobject_init+0x159/0x1b0 [ 636.910312][T15486] ? __alloc_disk_node+0x4d8/0x6b0 [ 636.910364][T15486] nbd_dev_add+0x51a/0xb10 [ 636.910403][T15486] ? find_held_lock+0x2b/0x80 [ 636.910430][T15486] ? __pfx_nbd_dev_add+0x10/0x10 [ 636.910466][T15486] ? nbd_genl_connect+0x131a/0x1a40 [ 636.910528][T15486] ? bpf_lsm_capable+0x9/0x10 [ 636.910558][T15486] ? __radix_tree_lookup+0x217/0x2b0 [ 636.910611][T15486] nbd_genl_connect+0xb8d/0x1a40 [ 636.910649][T15486] ? rcu_is_watching+0x12/0xc0 [ 636.910692][T15486] ? __pfx_nbd_genl_connect+0x10/0x10 [ 636.910742][T15486] ? __nla_parse+0x40/0x60 [ 636.910782][T15486] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 636.910826][T15486] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 636.910875][T15486] genl_family_rcv_msg_doit+0x214/0x300 [ 636.910921][T15486] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 636.910961][T15486] ? genl_get_cmd+0x3ef/0x720 [ 636.911008][T15486] ? __dev_queue_xmit+0x7fd/0x4750 [ 636.911048][T15486] ? __radix_tree_lookup+0x217/0x2b0 [ 636.911099][T15486] genl_rcv_msg+0x560/0x800 [ 636.911144][T15486] ? __pfx_genl_rcv_msg+0x10/0x10 [ 636.911184][T15486] ? __pfx_nbd_genl_connect+0x10/0x10 [ 636.911239][T15486] netlink_rcv_skb+0x159/0x420 [ 636.911275][T15486] ? __pfx_genl_rcv_msg+0x10/0x10 [ 636.911316][T15486] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 636.911368][T15486] ? netlink_deliver_tap+0x1ae/0xcc0 [ 636.911407][T15486] genl_rcv+0x28/0x40 [ 636.911442][T15486] netlink_unicast+0x5aa/0x870 [ 636.911481][T15486] ? __pfx_netlink_unicast+0x10/0x10 [ 636.911532][T15486] netlink_sendmsg+0x8b0/0xda0 [ 636.911574][T15486] ? __pfx_netlink_sendmsg+0x10/0x10 [ 636.911606][T15486] ? __import_iovec+0x1d2/0x640 [ 636.911655][T15486] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 636.911700][T15486] ____sys_sendmsg+0xa54/0xc30 [ 636.911753][T15486] ? __pfx_____sys_sendmsg+0x10/0x10 [ 636.911801][T15486] ? try_to_wake_up+0x644/0x1a80 [ 636.911839][T15486] ___sys_sendmsg+0x190/0x1e0 [ 636.911884][T15486] ? __pfx____sys_sendmsg+0x10/0x10 [ 636.911926][T15486] ? futex_private_hash_put+0x107/0x1c0 [ 636.912006][T15486] __sys_sendmsg+0x170/0x220 [ 636.912039][T15486] ? __pfx___sys_sendmsg+0x10/0x10 [ 636.912070][T15486] ? __x64_sys_futex+0x34f/0x4d0 [ 636.912130][T15486] do_syscall_64+0x106/0xf80 [ 636.912161][T15486] ? clear_bhb_loop+0x40/0x90 [ 636.912197][T15486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.912226][T15486] RIP: 0033:0x7f9381b9c629 [ 636.912253][T15486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 636.912282][T15486] RSP: 002b:00007f9382b08028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 636.912311][T15486] RAX: ffffffffffffffda RBX: 00007f9381e15fa0 RCX: 00007f9381b9c629 [ 636.912330][T15486] RDX: 0000000020040000 RSI: 0000200000000500 RDI: 0000000000000002 [ 636.912348][T15486] RBP: 00007f9381c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 636.912366][T15486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 636.912383][T15486] R13: 00007f9381e16038 R14: 00007f9381e15fa0 R15: 00007ffdb4a442b8 [ 636.912422][T15486] [ 636.983450][T15486] block (null): Could not allocate knbd recv work queue. [ 637.389236][T15486] nbd: failed to add new device [ 638.660454][T15511] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 639.141524][T13568] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 639.578529][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 639.587191][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 642.382760][T15575] FAULT_INJECTION: forcing a failure. [ 642.382760][T15575] name failslab, interval 1, probability 0, space 0, times 0 [ 642.456192][T15575] CPU: 0 UID: 0 PID: 15575 Comm: syz.0.1777 Tainted: G U L syzkaller #0 PREEMPT(full) [ 642.456221][T15575] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 642.456227][T15575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 642.456236][T15575] Call Trace: [ 642.456242][T15575] [ 642.456248][T15575] dump_stack_lvl+0x100/0x190 [ 642.456281][T15575] should_fail_ex.cold+0x5/0xa [ 642.456300][T15575] should_failslab+0xc2/0x120 [ 642.456316][T15575] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 642.456337][T15575] ? __d_alloc+0x34/0xa80 [ 642.456352][T15575] ? security_inode_alloc+0xcf/0x2c0 [ 642.456375][T15575] __d_alloc+0x34/0xa80 [ 642.456388][T15575] ? __ns_ref_active_get+0x9f/0x1b0 [ 642.456408][T15575] path_from_stashed+0x427/0x750 [ 642.456422][T15575] ? do_vfs_ioctl+0x226/0x13e0 [ 642.456443][T15575] open_namespace+0x93/0x1c0 [ 642.456457][T15575] ? __pfx_open_namespace+0x10/0x10 [ 642.456477][T15575] ns_ioctl+0x16e/0x1060 [ 642.456490][T15575] ? __pfx_ns_ioctl+0x10/0x10 [ 642.456503][T15575] ? __fget_files+0x21f/0x3d0 [ 642.456527][T15575] ? __pfx_ns_ioctl+0x10/0x10 [ 642.456541][T15575] __x64_sys_ioctl+0x18e/0x210 [ 642.456561][T15575] do_syscall_64+0x106/0xf80 [ 642.456577][T15575] ? clear_bhb_loop+0x40/0x90 [ 642.456595][T15575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.456610][T15575] RIP: 0033:0x7fa87bd9c629 [ 642.456623][T15575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 642.456638][T15575] RSP: 002b:00007fa87cc1d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 642.456653][T15575] RAX: ffffffffffffffda RBX: 00007fa87c015fa0 RCX: 00007fa87bd9c629 [ 642.456662][T15575] RDX: 0000000000000000 RSI: 000000000000b701 RDI: 0000000000000006 [ 642.456671][T15575] RBP: 00007fa87be32b39 R08: 0000000000000000 R09: 0000000000000000 [ 642.456679][T15575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 642.456688][T15575] R13: 00007fa87c016038 R14: 00007fa87c015fa0 R15: 00007ffe5dfb8fe8 [ 642.456707][T15575] [ 643.939279][T15589] binder: 15588:15589 ioctl c018620c 0 returned -1 [ 645.074957][T15619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1786'. [ 650.059009][T15706] Invalid ELF header magic: != ELF [ 650.619969][T15583] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 650.664229][T15583] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 652.847385][T15747] FAULT_INJECTION: forcing a failure. [ 652.847385][T15747] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 652.902254][T15747] CPU: 1 UID: 0 PID: 15747 Comm: syz.2.1811 Tainted: G U L syzkaller #0 PREEMPT(full) [ 652.902306][T15747] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 652.902317][T15747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 652.902333][T15747] Call Trace: [ 652.902342][T15747] [ 652.902354][T15747] dump_stack_lvl+0x100/0x190 [ 652.902404][T15747] should_fail_ex.cold+0x5/0xa [ 652.902434][T15747] ? prepare_alloc_pages+0x16d/0x5f0 [ 652.902469][T15747] should_fail_alloc_page+0xeb/0x140 [ 652.902506][T15747] prepare_alloc_pages+0x1f0/0x5f0 [ 652.902544][T15747] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 652.902591][T15747] ? __pfx_css_rstat_updated+0x10/0x10 [ 652.902620][T15747] ? kasan_save_stack+0x3f/0x50 [ 652.902658][T15747] ? kasan_save_stack+0x30/0x50 [ 652.902694][T15747] ? kasan_save_track+0x14/0x30 [ 652.902729][T15747] ? __kasan_slab_alloc+0x89/0x90 [ 652.902769][T15747] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 652.902808][T15747] ? ptlock_alloc+0x1f/0x70 [ 652.902842][T15747] ? pte_alloc_one+0x84/0x3e0 [ 652.902870][T15747] ? __pte_alloc+0x6d/0x3f0 [ 652.902894][T15747] ? do_anonymous_page+0x13cc/0x1fb0 [ 652.902925][T15747] ? __handle_mm_fault+0x1d42/0x2b60 [ 652.902959][T15747] ? rcu_is_watching+0x12/0xc0 [ 652.903001][T15747] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 652.903050][T15747] ? lru_gen_add_folio+0x20f/0x13e0 [ 652.903095][T15747] ? lock_acquire+0x1cf/0x380 [ 652.903128][T15747] ? find_held_lock+0x2b/0x80 [ 652.903151][T15747] ? page_table_check_set+0x49a/0xa10 [ 652.903191][T15747] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 652.903238][T15747] ? policy_nodemask+0xed/0x4f0 [ 652.903267][T15747] alloc_pages_mpol+0x1fb/0x550 [ 652.903298][T15747] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 652.903337][T15747] folio_alloc_mpol_noprof+0x36/0x340 [ 652.903373][T15747] vma_alloc_folio_noprof+0xed/0x1d0 [ 652.903405][T15747] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 652.903449][T15747] do_anonymous_page+0xb3a/0x1fb0 [ 652.903507][T15747] __handle_mm_fault+0x1d42/0x2b60 [ 652.903557][T15747] ? __pfx___handle_mm_fault+0x10/0x10 [ 652.903596][T15747] ? pte_offset_map_lock+0x174/0x320 [ 652.903640][T15747] ? find_held_lock+0x2b/0x80 [ 652.903677][T15747] ? follow_page_pte+0x5b3/0x1400 [ 652.903711][T15747] handle_mm_fault+0x36d/0xa20 [ 652.903751][T15747] __get_user_pages+0xf9c/0x34d0 [ 652.903792][T15747] ? __pfx___get_user_pages+0x10/0x10 [ 652.903831][T15747] populate_vma_page_range+0x267/0x3f0 [ 652.903866][T15747] ? __pfx_populate_vma_page_range+0x10/0x10 [ 652.903896][T15747] ? __pfx_find_vma_intersection+0x10/0x10 [ 652.903945][T15747] ? do_mmap+0x93f/0x12f0 [ 652.903976][T15747] __mm_populate+0x107/0x3a0 [ 652.904007][T15747] ? __pfx___mm_populate+0x10/0x10 [ 652.904039][T15747] ? up_write+0x290/0x4f0 [ 652.904078][T15747] vm_mmap_pgoff+0x37f/0x470 [ 652.904110][T15747] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 652.904139][T15747] ? do_futex+0x192/0x350 [ 652.904173][T15747] ? __pfx_do_futex+0x10/0x10 [ 652.904204][T15747] ? __pfx_do_sys_openat2+0x10/0x10 [ 652.904242][T15747] ksys_mmap_pgoff+0xe1/0x650 [ 652.904267][T15747] ? __x64_sys_futex+0x34f/0x4d0 [ 652.904299][T15747] ? __x64_sys_futex+0x358/0x4d0 [ 652.904333][T15747] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 652.904360][T15747] ? xfd_validate_state+0x129/0x190 [ 652.904404][T15747] __x64_sys_mmap+0x125/0x190 [ 652.904446][T15747] do_syscall_64+0x106/0xf80 [ 652.904474][T15747] ? clear_bhb_loop+0x40/0x90 [ 652.904513][T15747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.904541][T15747] RIP: 0033:0x7fc98879c629 [ 652.904564][T15747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 652.904590][T15747] RSP: 002b:00007fc989677028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 652.904615][T15747] RAX: ffffffffffffffda RBX: 00007fc988a16090 RCX: 00007fc98879c629 [ 652.904634][T15747] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 652.904650][T15747] RBP: 00007fc988832b39 R08: 0000000000000002 R09: 0000000000008000 [ 652.904667][T15747] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 652.904683][T15747] R13: 00007fc988a16128 R14: 00007fc988a16090 R15: 00007ffd584e7258 [ 652.904718][T15747] [ 653.800559][T15747] Invalid ELF header magic: != ELF [ 655.260095][T15772] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18 [ 655.768469][T15778] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input19 [ 656.099727][T15772] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20 [ 657.992695][T15726] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 658.000179][T15726] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 660.800796][T15855] FAULT_INJECTION: forcing a failure. [ 660.800796][T15855] name fail_futex, interval 1, probability 0, space 0, times 0 [ 660.888028][T15855] CPU: 1 UID: 0 PID: 15855 Comm: syz.0.1835 Tainted: G U L syzkaller #0 PREEMPT(full) [ 660.888057][T15855] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 660.888063][T15855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 660.888072][T15855] Call Trace: [ 660.888078][T15855] [ 660.888085][T15855] dump_stack_lvl+0x100/0x190 [ 660.888112][T15855] should_fail_ex.cold+0x5/0xa [ 660.888131][T15855] get_futex_key+0x1d2/0x1620 [ 660.888151][T15855] ? __pfx_get_futex_key+0x10/0x10 [ 660.888174][T15855] futex_wake+0xea/0x530 [ 660.888197][T15855] ? __pfx_futex_wake+0x10/0x10 [ 660.888218][T15855] ? __call_rcu_common.constprop.0+0x3f0/0x9b0 [ 660.888245][T15855] do_futex+0x32b/0x350 [ 660.888263][T15855] ? __pfx_do_futex+0x10/0x10 [ 660.888282][T15855] ? __pfx___might_resched+0x10/0x10 [ 660.888301][T15855] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 660.888322][T15855] __x64_sys_futex+0x34f/0x4d0 [ 660.888342][T15855] ? __pfx_task_work_run+0x10/0x10 [ 660.888362][T15855] ? __pfx___x64_sys_futex+0x10/0x10 [ 660.888384][T15855] ? exit_to_user_mode_loop+0xdd/0x4a0 [ 660.888408][T15855] do_syscall_64+0x106/0xf80 [ 660.888424][T15855] ? clear_bhb_loop+0x40/0x90 [ 660.888441][T15855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.888456][T15855] RIP: 0033:0x7fa87bd9c629 [ 660.888470][T15855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 660.888485][T15855] RSP: 002b:00007fa87cbba0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 660.888500][T15855] RAX: ffffffffffffffda RBX: 00007fa87c016278 RCX: 00007fa87bd9c629 [ 660.888509][T15855] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa87c01627c [ 660.888519][T15855] RBP: 00007fa87c016270 R08: 0000000000000000 R09: 0000000000000000 [ 660.888528][T15855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 660.888537][T15855] R13: 00007fa87c016308 R14: 00007ffe5dfb8f00 R15: 00007ffe5dfb8fe8 [ 660.888556][T15855] [ 661.142396][T15849] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 661.322299][T15849] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 661.333756][T15849] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 661.350551][T15849] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 662.602750][T15577] Bluetooth: hci0: command 0x0c1a tx timeout [ 663.393744][T15577] Bluetooth: hci1: command 0x0c1a tx timeout [ 663.400009][T15726] Bluetooth: hci3: command 0x0c1a tx timeout [ 663.406685][T15583] Bluetooth: hci2: command 0x0c1a tx timeout [ 663.878620][T15911] input: jJǸ-9%vJ86 as /devices/virtual/input/input21 [ 666.385145][T15957] ima: policy update failed [ 666.406126][ T29] audit: type=1807 audit(1772122646.805:22): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 666.470268][ T29] audit: type=1802 audit(1772122646.805:23): pid=15957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.1857" res=0 errno=0 [ 666.586130][ T29] audit: type=1802 audit(1772122646.805:24): pid=15957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1857" res=0 errno=0 [ 672.147843][T16070] QAT: Invalid ioctl 21531 [ 674.001999][T16097] capability: warning: `syz.2.1882' uses 32-bit capabilities (legacy support in use) [ 674.782304][T16118] QAT: Invalid ioctl 21531 [ 675.128639][T16112] Invalid ELF header magic: != ELF [ 678.228668][ T29] audit: type=1804 audit(1772122658.629:25): pid=16167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1895" name="/newroot/480/file0" dev="tmpfs" ino=2510 res=1 errno=0 [ 678.316958][ T29] audit: type=1804 audit(1772122658.659:26): pid=16167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1895" name="/newroot/480/file0" dev="tmpfs" ino=2510 res=1 errno=0 [ 678.694223][T16165] FAULT_INJECTION: forcing a failure. [ 678.694223][T16165] name failslab, interval 1, probability 0, space 0, times 0 [ 678.731519][T16165] CPU: 0 UID: 0 PID: 16165 Comm: syz.1.1894 Tainted: G U L syzkaller #0 PREEMPT(full) [ 678.731574][T16165] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 678.731586][T16165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 678.731605][T16165] Call Trace: [ 678.731614][T16165] [ 678.731625][T16165] dump_stack_lvl+0x100/0x190 [ 678.731683][T16165] should_fail_ex.cold+0x5/0xa [ 678.731720][T16165] should_failslab+0xc2/0x120 [ 678.731749][T16165] __kmalloc_cache_noprof+0x7a/0x6f0 [ 678.731784][T16165] ? kobject_uevent_env+0x263/0x18b0 [ 678.731834][T16165] kobject_uevent_env+0x263/0x18b0 [ 678.731879][T16165] ? kvm_uevent_notify_change.part.0+0x321/0x450 [ 678.731917][T16165] ? kfree+0x1f6/0x6b0 [ 678.731957][T16165] kvm_uevent_notify_change.part.0+0x3a6/0x450 [ 678.731997][T16165] ? __pfx_kvm_vm_release+0x10/0x10 [ 678.732029][T16165] kvm_put_kvm+0xe4/0xb10 [ 678.732060][T16165] ? lockdep_hardirqs_on+0x78/0x100 [ 678.732092][T16165] ? _raw_spin_unlock_irq+0x2e/0x50 [ 678.732121][T16165] ? __pfx_kvm_vm_release+0x10/0x10 [ 678.732153][T16165] kvm_vm_release+0x3c/0x50 [ 678.732182][T16165] __fput+0x3ff/0xb40 [ 678.732223][T16165] task_work_run+0x150/0x240 [ 678.732265][T16165] ? __pfx_task_work_run+0x10/0x10 [ 678.732317][T16165] exit_to_user_mode_loop+0x100/0x4a0 [ 678.732358][T16165] do_syscall_64+0x668/0xf80 [ 678.732387][T16165] ? clear_bhb_loop+0x40/0x90 [ 678.732432][T16165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.732468][T16165] RIP: 0033:0x7f8de219c629 [ 678.732494][T16165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 678.732523][T16165] RSP: 002b:00007f8de2fbd028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 678.732553][T16165] RAX: 0000000000000000 RBX: 00007f8de2416090 RCX: 00007f8de219c629 [ 678.732573][T16165] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000002 [ 678.732590][T16165] RBP: 00007f8de2232b39 R08: 0000000000000000 R09: 0000000000000000 [ 678.732609][T16165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 678.732627][T16165] R13: 00007f8de2416128 R14: 00007f8de2416090 R15: 00007ffc58f73258 [ 678.732670][T16165] [ 679.372209][T16180] random: crng reseeded on system resumption [ 680.251724][T16198] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 681.029641][T16214] QAT: Invalid ioctl 21531 [ 681.176539][T16199] netlink: 4128 bytes leftover after parsing attributes in process `syz.0.1905'. [ 681.755719][T16195] kexec: Could not allocate control_code_buffer [ 686.208209][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.218222][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.990628][T16406] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 692.013403][T16406] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 692.061905][T16406] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 692.177693][T16406] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 693.573671][T15726] Bluetooth: hci0: command 0x0c1a tx timeout [ 694.048353][T15726] Bluetooth: hci2: command 0x0c1a tx timeout [ 694.130367][T15726] Bluetooth: hci3: command 0x0c1a tx timeout [ 694.188987][T16461] FAULT_INJECTION: forcing a failure. [ 694.188987][T16461] name failslab, interval 1, probability 0, space 0, times 0 [ 694.208865][T15726] Bluetooth: hci1: command 0x0c1a tx timeout [ 694.238015][T16461] CPU: 1 UID: 0 PID: 16461 Comm: syz.0.1951 Tainted: G U L syzkaller #0 PREEMPT(full) [ 694.238063][T16461] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 694.238073][T16461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 694.238089][T16461] Call Trace: [ 694.238097][T16461] [ 694.238107][T16461] dump_stack_lvl+0x100/0x190 [ 694.238154][T16461] should_fail_ex.cold+0x5/0xa [ 694.238184][T16461] should_failslab+0xc2/0x120 [ 694.238211][T16461] __kmalloc_cache_noprof+0x7a/0x6f0 [ 694.238245][T16461] ? kobject_uevent_env+0x263/0x18b0 [ 694.238301][T16461] kobject_uevent_env+0x263/0x18b0 [ 694.238345][T16461] ? kvm_uevent_notify_change.part.0+0x321/0x450 [ 694.238379][T16461] ? kfree+0x1f6/0x6b0 [ 694.238416][T16461] kvm_uevent_notify_change.part.0+0x3a6/0x450 [ 694.238450][T16461] ? __pfx_kvm_vm_release+0x10/0x10 [ 694.238478][T16461] kvm_put_kvm+0xe4/0xb10 [ 694.238507][T16461] ? lockdep_hardirqs_on+0x78/0x100 [ 694.238536][T16461] ? _raw_spin_unlock_irq+0x2e/0x50 [ 694.238562][T16461] ? __pfx_kvm_vm_release+0x10/0x10 [ 694.238592][T16461] kvm_vm_release+0x3c/0x50 [ 694.238618][T16461] __fput+0x3ff/0xb40 [ 694.238653][T16461] task_work_run+0x150/0x240 [ 694.238692][T16461] ? __pfx_task_work_run+0x10/0x10 [ 694.238740][T16461] exit_to_user_mode_loop+0x100/0x4a0 [ 694.238777][T16461] do_syscall_64+0x668/0xf80 [ 694.238806][T16461] ? clear_bhb_loop+0x40/0x90 [ 694.238841][T16461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.238868][T16461] RIP: 0033:0x7fa87bd9c629 [ 694.238892][T16461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 694.238918][T16461] RSP: 002b:00007fa87cbdb028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 694.238945][T16461] RAX: 0000000000000000 RBX: 00007fa87c016180 RCX: 00007fa87bd9c629 [ 694.238963][T16461] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000002 [ 694.238979][T16461] RBP: 00007fa87be32b39 R08: 0000000000000000 R09: 0000000000000000 [ 694.238996][T16461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 694.239013][T16461] R13: 00007fa87c016218 R14: 00007fa87c016180 R15: 00007ffe5dfb8fe8 [ 694.239051][T16461] [ 703.481897][T16619] netlink: 4128 bytes leftover after parsing attributes in process `syz.3.1984'. [ 705.404735][T16654] FAULT_INJECTION: forcing a failure. [ 705.404735][T16654] name failslab, interval 1, probability 0, space 0, times 0 [ 705.467137][T16654] CPU: 1 UID: 0 PID: 16654 Comm: syz.1.1991 Tainted: G U L syzkaller #0 PREEMPT(full) [ 705.467191][T16654] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 705.467203][T16654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 705.467221][T16654] Call Trace: [ 705.467231][T16654] [ 705.467242][T16654] dump_stack_lvl+0x100/0x190 [ 705.467293][T16654] should_fail_ex.cold+0x5/0xa [ 705.467329][T16654] should_failslab+0xc2/0x120 [ 705.467358][T16654] __kmalloc_cache_noprof+0x7a/0x6f0 [ 705.467394][T16654] ? kobject_uevent_env+0x263/0x18b0 [ 705.467442][T16654] kobject_uevent_env+0x263/0x18b0 [ 705.467484][T16654] ? kvm_uevent_notify_change.part.0+0x321/0x450 [ 705.467520][T16654] ? kfree+0x1f6/0x6b0 [ 705.467560][T16654] kvm_uevent_notify_change.part.0+0x3a6/0x450 [ 705.467598][T16654] ? __pfx_kvm_vm_release+0x10/0x10 [ 705.467629][T16654] kvm_put_kvm+0xe4/0xb10 [ 705.467660][T16654] ? lockdep_hardirqs_on+0x78/0x100 [ 705.467699][T16654] ? _raw_spin_unlock_irq+0x2e/0x50 [ 705.467731][T16654] ? __pfx_kvm_vm_release+0x10/0x10 [ 705.467763][T16654] kvm_vm_release+0x3c/0x50 [ 705.467794][T16654] __fput+0x3ff/0xb40 [ 705.467834][T16654] task_work_run+0x150/0x240 [ 705.467876][T16654] ? __pfx_task_work_run+0x10/0x10 [ 705.467927][T16654] exit_to_user_mode_loop+0x100/0x4a0 [ 705.467968][T16654] do_syscall_64+0x668/0xf80 [ 705.467999][T16654] ? clear_bhb_loop+0x40/0x90 [ 705.468034][T16654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.468063][T16654] RIP: 0033:0x7f8de219c629 [ 705.468088][T16654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 705.468116][T16654] RSP: 002b:00007f8de2fde028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 705.468144][T16654] RAX: 0000000000000000 RBX: 00007f8de2415fa0 RCX: 00007f8de219c629 [ 705.468163][T16654] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000002 [ 705.468181][T16654] RBP: 00007f8de2232b39 R08: 0000000000000000 R09: 0000000000000000 [ 705.468199][T16654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 705.468215][T16654] R13: 00007f8de2416038 R14: 00007f8de2415fa0 R15: 00007ffc58f73258 [ 705.468254][T16654] [ 708.431989][T16723] QAT: Invalid ioctl 21531 [ 709.374561][T16743] FAULT_INJECTION: forcing a failure. [ 709.374561][T16743] name failslab, interval 1, probability 0, space 0, times 0 [ 709.449673][T16743] CPU: 0 UID: 0 PID: 16743 Comm: syz.1.2007 Tainted: G U L syzkaller #0 PREEMPT(full) [ 709.449703][T16743] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 709.449709][T16743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 709.449718][T16743] Call Trace: [ 709.449723][T16743] [ 709.449729][T16743] dump_stack_lvl+0x100/0x190 [ 709.449758][T16743] should_fail_ex.cold+0x5/0xa [ 709.449775][T16743] should_failslab+0xc2/0x120 [ 709.449790][T16743] __kmalloc_cache_noprof+0x7a/0x6f0 [ 709.449810][T16743] ? kobject_uevent_env+0x263/0x18b0 [ 709.449834][T16743] kobject_uevent_env+0x263/0x18b0 [ 709.449856][T16743] ? kvm_uevent_notify_change.part.0+0x321/0x450 [ 709.449875][T16743] ? kfree+0x1f6/0x6b0 [ 709.449895][T16743] kvm_uevent_notify_change.part.0+0x3a6/0x450 [ 709.449915][T16743] ? __pfx_kvm_vm_release+0x10/0x10 [ 709.449930][T16743] kvm_put_kvm+0xe4/0xb10 [ 709.449945][T16743] ? lockdep_hardirqs_on+0x78/0x100 [ 709.449961][T16743] ? _raw_spin_unlock_irq+0x2e/0x50 [ 709.449976][T16743] ? __pfx_kvm_vm_release+0x10/0x10 [ 709.449991][T16743] kvm_vm_release+0x3c/0x50 [ 709.450006][T16743] __fput+0x3ff/0xb40 [ 709.450026][T16743] task_work_run+0x150/0x240 [ 709.450047][T16743] ? __pfx_task_work_run+0x10/0x10 [ 709.450072][T16743] exit_to_user_mode_loop+0x100/0x4a0 [ 709.450093][T16743] do_syscall_64+0x668/0xf80 [ 709.450109][T16743] ? clear_bhb_loop+0x40/0x90 [ 709.450127][T16743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.450142][T16743] RIP: 0033:0x7f8de219c629 [ 709.450155][T16743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 709.450169][T16743] RSP: 002b:00007f8de2f9c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 709.450184][T16743] RAX: 0000000000000000 RBX: 00007f8de2416180 RCX: 00007f8de219c629 [ 709.450193][T16743] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000002 [ 709.450201][T16743] RBP: 00007f8de2232b39 R08: 0000000000000000 R09: 0000000000000000 [ 709.450218][T16743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 709.450227][T16743] R13: 00007f8de2416218 R14: 00007f8de2416180 R15: 00007ffc58f73258 [ 709.450247][T16743] [ 710.751714][T16747] binder: 16745:16747 ioctl c018620c 0 returned -1 [ 716.325718][T16835] FAULT_INJECTION: forcing a failure. [ 716.325718][T16835] name failslab, interval 1, probability 0, space 0, times 0 [ 716.349608][T16835] CPU: 0 UID: 0 PID: 16835 Comm: syz.0.2029 Tainted: G U L syzkaller #0 PREEMPT(full) [ 716.349644][T16835] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 716.349651][T16835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 716.349660][T16835] Call Trace: [ 716.349666][T16835] [ 716.349672][T16835] dump_stack_lvl+0x100/0x190 [ 716.349701][T16835] should_fail_ex.cold+0x5/0xa [ 716.349720][T16835] should_failslab+0xc2/0x120 [ 716.349742][T16835] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 716.349764][T16835] ? alloc_inode+0x183/0x250 [ 716.349780][T16835] ? stashed_dentry_get+0x10a/0x2c0 [ 716.349794][T16835] ? stashed_dentry_get+0x10a/0x2c0 [ 716.349811][T16835] alloc_inode+0x183/0x250 [ 716.349829][T16835] path_from_stashed+0x25b/0x750 [ 716.349847][T16835] pidfs_alloc_file+0xf8/0x290 [ 716.349868][T16835] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 716.349894][T16835] pidfd_prepare+0x123/0x200 [ 716.349911][T16835] __x64_sys_pidfd_open+0x105/0x1a0 [ 716.349932][T16835] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 716.349957][T16835] do_syscall_64+0x106/0xf80 [ 716.349972][T16835] ? clear_bhb_loop+0x40/0x90 [ 716.349990][T16835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.350004][T16835] RIP: 0033:0x7fa87bd9c629 [ 716.350018][T16835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 716.350032][T16835] RSP: 002b:00007fa87cc1d028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 716.350047][T16835] RAX: ffffffffffffffda RBX: 00007fa87c015fa0 RCX: 00007fa87bd9c629 [ 716.350056][T16835] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 716.350065][T16835] RBP: 00007fa87be32b39 R08: 0000000000000000 R09: 0000000000000000 [ 716.350073][T16835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 716.350082][T16835] R13: 00007fa87c016038 R14: 00007fa87c015fa0 R15: 00007ffe5dfb8fe8 [ 716.350101][T16835] [ 716.823898][T16840] ======================================================= [ 716.823898][T16840] WARNING: The mand mount option has been deprecated and [ 716.823898][T16840] and is ignored by this kernel. Remove the mand [ 716.823898][T16840] option from the mount to silence this warning. [ 716.823898][T16840] ======================================================= [ 717.787907][T16840] kexec: Could not allocate control_code_buffer [ 718.342934][T16854] kvm: kvm [16853]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000085) [ 722.980029][T16916] usbip-vudc usbip-vudc.0: gadget not bound [ 725.153365][T16963] netlink: 504 bytes leftover after parsing attributes in process `syz.0.2059'. [ 725.175858][T16963] netlink: 350 bytes leftover after parsing attributes in process `syz.0.2059'. [ 727.029602][T16997] bridge0: port 4(gretap0) entered blocking state [ 727.046904][T16997] bridge0: port 4(gretap0) entered disabled state [ 727.055010][T16997] gretap0: entered allmulticast mode [ 727.064679][T16997] gretap0: entered promiscuous mode [ 727.129959][T16997] FAULT_INJECTION: forcing a failure. [ 727.129959][T16997] name failslab, interval 1, probability 0, space 0, times 0 [ 727.142941][T16997] CPU: 1 UID: 0 PID: 16997 Comm: syz.0.2065 Tainted: G U L syzkaller #0 PREEMPT(full) [ 727.142989][T16997] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 727.143000][T16997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 727.143017][T16997] Call Trace: [ 727.143026][T16997] [ 727.143036][T16997] dump_stack_lvl+0x100/0x190 [ 727.143085][T16997] should_fail_ex.cold+0x5/0xa [ 727.143117][T16997] should_failslab+0xc2/0x120 [ 727.143144][T16997] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 727.143194][T16997] ? __alloc_skb+0x140/0x710 [ 727.143230][T16997] __alloc_skb+0x140/0x710 [ 727.143256][T16997] ? __alloc_skb+0x5b7/0x710 [ 727.143285][T16997] ? __pfx___alloc_skb+0x10/0x10 [ 727.143318][T16997] ? __pfx_fdb_create+0x10/0x10 [ 727.143361][T16997] fdb_notify+0xa2/0x190 [ 727.143400][T16997] fdb_add_local+0x184/0x1c0 [ 727.143442][T16997] br_fdb_add_local+0x39/0x60 [ 727.143485][T16997] __vlan_add+0x1820/0x2dd0 [ 727.143545][T16997] ? __pfx___vlan_add+0x10/0x10 [ 727.143599][T16997] nbp_vlan_add+0x258/0x3e0 [ 727.143648][T16997] nbp_vlan_init+0x373/0x500 [ 727.143675][T16997] ? __pfx_nbp_vlan_init+0x10/0x10 [ 727.143730][T16997] ? br_fdb_add_local+0x43/0x60 [ 727.143769][T16997] ? __local_bh_enable_ip+0xff/0x120 [ 727.143805][T16997] br_add_if+0xf79/0x1b40 [ 727.143833][T16997] ? veth_get_iflink+0x213/0x2c0 [ 727.143874][T16997] add_del_if+0x114/0x160 [ 727.143905][T16997] br_dev_siocdevprivate+0x8ac/0x1650 [ 727.143939][T16997] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 727.143985][T16997] ? lock_acquire+0x1cf/0x380 [ 727.144033][T16997] ? netdev_name_node_lookup+0x107/0x150 [ 727.144078][T16997] ? __mutex_lock+0x26a/0x1b90 [ 727.144115][T16997] dev_ifsioc+0xc1e/0x1e90 [ 727.144148][T16997] ? __pfx_dev_ifsioc+0x10/0x10 [ 727.144181][T16997] ? __pfx___mutex_lock+0x10/0x10 [ 727.144228][T16997] ? dev_load+0x8e/0x240 [ 727.144252][T16997] ? dev_load+0x8e/0x240 [ 727.144287][T16997] dev_ioctl+0x70e/0x1070 [ 727.144319][T16997] sock_ioctl+0x494/0x6b0 [ 727.144361][T16997] ? __pfx_sock_ioctl+0x10/0x10 [ 727.144400][T16997] ? hook_file_ioctl_common+0x146/0x410 [ 727.144451][T16997] ? __fget_files+0x21f/0x3d0 [ 727.144501][T16997] ? __pfx_sock_ioctl+0x10/0x10 [ 727.144545][T16997] __x64_sys_ioctl+0x18e/0x210 [ 727.144587][T16997] do_syscall_64+0x106/0xf80 [ 727.144616][T16997] ? clear_bhb_loop+0x40/0x90 [ 727.144652][T16997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.144681][T16997] RIP: 0033:0x7fa87bd9c629 [ 727.144706][T16997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 727.144732][T16997] RSP: 002b:00007fa87cbdb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 727.144764][T16997] RAX: ffffffffffffffda RBX: 00007fa87c016180 RCX: 00007fa87bd9c629 [ 727.144780][T16997] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000008 [ 727.144795][T16997] RBP: 00007fa87be32b39 R08: 0000000000000000 R09: 0000000000000000 [ 727.144810][T16997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 727.144825][T16997] R13: 00007fa87c016218 R14: 00007fa87c016180 R15: 00007ffe5dfb8fe8 [ 727.144859][T16997] [ 727.486053][T16997] bridge0: port 4(gretap0) entered blocking state [ 727.492651][T16997] bridge0: port 4(gretap0) entered forwarding state [ 728.018737][T16978] kexec: Could not allocate control_code_buffer [ 728.842030][T17022] input: jJǸ-9%vJ86 as /devices/virtual/input/input22 [ 730.432299][T17051] QAT: Invalid ioctl 21531 [ 731.507072][T15726] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 732.036803][T17089] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2085'. [ 732.091582][T17089] team_slave_1 (unregistering): left promiscuous mode [ 732.098573][T17092] QAT: Invalid ioctl 21531 [ 732.122961][T17089] team_slave_1 (unregistering): left allmulticast mode [ 732.154086][T17089] team0: Port device team_slave_1 removed [ 732.918837][T17112] futex_wake_op: syz.3.2089 tries to shift op by -2048; fix this program [ 732.933046][T17112] futex_wake_op: syz.3.2089 tries to shift op by -2048; fix this program [ 733.454726][T17067] kexec: Could not allocate control_code_buffer [ 733.732147][T17110] : Can't lookup blockdev [ 736.155518][T17187] misc userio: Invalid payload size [ 736.387949][T15726] Bluetooth: hci1: unexpected event 0x32 length: 727 > 9 [ 736.459106][T17193] netlink: set zone limit has 8 unknown bytes [ 736.475257][T17193] netlink: zone id is out of range [ 736.514746][T17193] netlink: zone id is out of range [ 736.532670][T17193] netlink: zone id is out of range [ 736.551133][T17193] netlink: zone id is out of range [ 736.556490][T17193] netlink: zone id is out of range [ 736.609904][T17193] netlink: zone id is out of range [ 736.615111][T17193] netlink: zone id is out of range [ 736.712463][T17193] netlink: zone id is out of range [ 736.718522][T17193] netlink: zone id is out of range [ 737.247750][T17216] usbip-vudc usbip-vudc.0: gadget not bound [ 738.201962][T17179] kexec: Could not allocate control_code_buffer [ 741.821510][T17274] kexec: Could not allocate control_code_buffer [ 743.811816][T17330] sg_write: data in/out 50331612/1048664 bytes for SCSI command 0x0-- guessing data in; [ 743.811816][T17330] program syz.0.2136 not setting count and/or reply_len properly [ 743.971582][T17330] forcing mempool usage for bio_alloc_bioset+0x392/0x850 [ 744.381008][T17345] futex_wake_op: syz.3.2141 tries to shift op by -2048; fix this program [ 744.402213][T17345] futex_wake_op: syz.3.2141 tries to shift op by -2048; fix this program [ 746.015301][T17384] kvm: kvm [17383]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000085) [ 746.428629][T17391] blktrace: Concurrent blktraces are not allowed on loop2 [ 747.679745][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.686198][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.092562][T17431] usbip-vudc usbip-vudc.0: gadget not bound [ 755.075908][T17512] netlink: 'syz.3.2172': attribute type 11 has an invalid length. [ 756.638358][T17546] bridge0: port 4(gretap0) entered blocking state [ 756.645021][T17546] bridge0: port 4(gretap0) entered disabled state [ 756.651719][T17546] gretap0: entered allmulticast mode [ 756.659275][T17546] gretap0: entered promiscuous mode [ 756.672937][T17532] hub 1-0:1.0: USB hub found [ 756.696768][T17532] hub 1-0:1.0: 1 port detected [ 756.806013][T17546] bridge0: port 4(gretap0) entered blocking state [ 756.812678][T17546] bridge0: port 4(gretap0) entered forwarding state [ 756.962575][T17495] kexec: Could not allocate control_code_buffer [ 760.478220][T17601] futex_wake_op: syz.0.2188 tries to shift op by -2048; fix this program [ 760.497641][T17601] futex_wake_op: syz.0.2188 tries to shift op by -2048; fix this program [ 761.508258][T15726] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 762.459486][T17607] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 767.413732][T17700] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 767.485160][T17700] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 767.612021][T17700] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 767.814587][T17700] page_type: f5(slab) [ 767.904969][T17700] raw: 00fff00000000040 ffff88801ce8a8c0 dead000000000100 dead000000000122 [ 767.913632][T17700] raw: 0000000000000000 0000000000150015 00000000f5000000 0000000000000000 [ 767.930590][T17700] head: 00fff00000000040 ffff88801ce8a8c0 dead000000000100 dead000000000122 [ 767.943853][T17714] netlink: 334 bytes leftover after parsing attributes in process `syz.1.2209'. [ 767.960186][T17714] FAULT_INJECTION: forcing a failure. [ 767.960186][T17714] name failslab, interval 1, probability 0, space 0, times 0 [ 767.960220][T17714] CPU: 1 UID: 0 PID: 17714 Comm: syz.1.2209 Tainted: G U L syzkaller #0 PREEMPT(full) [ 767.960243][T17714] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 767.960249][T17714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 767.960258][T17714] Call Trace: [ 767.960263][T17714] [ 767.960269][T17714] dump_stack_lvl+0x100/0x190 [ 767.960295][T17714] should_fail_ex.cold+0x5/0xa [ 767.960321][T17714] should_failslab+0xc2/0x120 [ 767.960336][T17714] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 767.960359][T17714] ? kvasprintf_const+0x66/0x1a0 [ 767.960387][T17714] kvasprintf+0xbc/0x150 [ 767.960409][T17714] ? __pfx_kvasprintf+0x10/0x10 [ 767.960432][T17714] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 767.960455][T17714] ? lockdep_init_map_type+0x5c/0x250 [ 767.960478][T17714] kvasprintf_const+0x66/0x1a0 [ 767.960501][T17714] kobject_set_name_vargs+0x5a/0x140 [ 767.960522][T17714] device_create_groups_vargs+0x1b1/0x270 [ 767.960549][T17714] device_create+0xed/0x130 [ 767.960572][T17714] ? __pfx_device_create+0x10/0x10 [ 767.960595][T17714] ? is_console_locked+0x9/0x20 [ 767.960611][T17714] ? con_is_visible+0x65/0x150 [ 767.960632][T17714] ? csi_J+0x57e/0xad0 [ 767.960650][T17714] vcs_make_sysfs+0x32/0x80 [ 767.960672][T17714] vc_allocate+0x539/0x880 [ 767.960688][T17714] ? __pfx_vc_allocate+0x10/0x10 [ 767.960709][T17714] con_install+0xa1/0x620 [ 767.960726][T17714] ? __pfx_con_install+0x10/0x10 [ 767.960745][T17714] ? __pfx_con_install+0x10/0x10 [ 767.960761][T17714] tty_init_dev.part.0+0x9e/0x470 [ 767.960781][T17714] tty_open+0xa63/0xfa0 [ 767.960802][T17714] ? __pfx_tty_open+0x10/0x10 [ 767.960818][T17714] ? chrdev_open+0x589/0x6a0 [ 767.960831][T17714] ? chrdev_open+0x589/0x6a0 [ 767.960847][T17714] ? __pfx_tty_open+0x10/0x10 [ 767.960864][T17714] chrdev_open+0x234/0x6a0 [ 767.960878][T17714] ? __pfx_chrdev_open+0x10/0x10 [ 767.960892][T17714] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 767.960919][T17714] do_dentry_open+0x6d8/0x1660 [ 767.960941][T17714] ? __pfx_chrdev_open+0x10/0x10 [ 767.960959][T17714] vfs_open+0x82/0x3f0 [ 767.960978][T17714] path_openat+0x208c/0x31a0 [ 767.960999][T17714] ? __pfx_path_openat+0x10/0x10 [ 767.961020][T17714] do_file_open+0x20e/0x430 [ 767.961035][T17714] ? __pfx_do_file_open+0x10/0x10 [ 767.961063][T17714] ? alloc_fd+0x476/0x790 [ 767.961087][T17714] ? do_getname+0x191/0x390 [ 767.961105][T17714] do_sys_openat2+0x10d/0x1e0 [ 767.961122][T17714] ? __pfx_do_sys_openat2+0x10/0x10 [ 767.961147][T17714] __x64_sys_openat+0x12d/0x210 [ 767.961165][T17714] ? __pfx___x64_sys_openat+0x10/0x10 [ 767.961191][T17714] do_syscall_64+0x106/0xf80 [ 767.961206][T17714] ? clear_bhb_loop+0x40/0x90 [ 767.961224][T17714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.961239][T17714] RIP: 0033:0x7f8de219c629 [ 767.961253][T17714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 767.961267][T17714] RSP: 002b:00007f8de2fde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 767.961283][T17714] RAX: ffffffffffffffda RBX: 00007f8de2415fa0 RCX: 00007f8de219c629 [ 767.961293][T17714] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 767.961303][T17714] RBP: 00007f8de2232b39 R08: 0000000000000000 R09: 0000000000000000 [ 767.961318][T17714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 767.961327][T17714] R13: 00007f8de2416038 R14: 00007f8de2415fa0 R15: 00007ffc58f73258 [ 767.961347][T17714] [ 768.155050][T17700] head: 0000000000000000 0000000000150015 00000000f5000000 0000000000000000 [ 768.166317][T17700] head: 00fff00000000001 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 768.166354][T17700] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 768.166373][T17700] page dumped because: unmovable page [ 768.166411][T17700] page_owner tracks the page as allocated [ 768.166488][T17700] page last allocated via order 1, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5207, tgid 5207 (udevadm), ts 31244554817, free_ts 24669120150 [ 768.166548][T17700] post_alloc_hook+0x153/0x170 [ 768.166589][T17700] get_page_from_freelist+0x111d/0x3140 [ 768.166626][T17700] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 768.166666][T17700] new_slab+0xa6/0x6d0 [ 768.166695][T17700] refill_objects+0x26b/0x400 [ 768.166736][T17700] __pcs_replace_empty_main+0x19f/0x600 [ 768.166775][T17700] kmem_cache_alloc_lru_noprof+0x485/0x6e0 [ 768.166817][T17700] __d_alloc+0x34/0xa80 [ 768.166844][T17700] d_alloc_parallel+0x111/0x14e0 [ 768.166881][T17700] __lookup_slow+0x193/0x460 [ 768.166910][T17700] lookup_slow+0x50/0x70 [ 768.166938][T17700] path_lookupat+0x5e8/0xc40 [ 768.166972][T17700] filename_lookup+0x202/0x590 [ 768.167010][T17700] vfs_statx+0xff/0x3f0 [ 768.167044][T17700] vfs_fstatat+0x77/0xe0 [ 768.167073][T17700] __do_sys_newfstatat+0x9d/0x120 [ 768.167106][T17700] page last free pid 1 tgid 1 stack trace: [ 768.167124][T17700] __free_frozen_pages+0x7e1/0x10d0 [ 768.167157][T17700] free_contig_range+0xde/0x1d0 [ 768.167190][T17700] destroy_args+0xa8/0x7a0 [ 768.167223][T17700] debug_vm_pgtable+0x1b66/0x34c0 [ 768.167259][T17700] do_one_initcall+0x11d/0x760 [ 768.167287][T17700] kernel_init_freeable+0x6e5/0x7a0 [ 768.167321][T17700] kernel_init+0x1f/0x1e0 [ 768.167359][T17700] ret_from_fork+0x754/0xd80 [ 768.167399][T17700] ret_from_fork_asm+0x1a/0x30 [ 768.263787][T17706] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 768.263821][T17706] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 768.263845][T17706] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 768.263869][T17706] page_type: f5(slab) [ 768.263893][T17706] raw: 00fff00000000040 ffff88801ce8a8c0 dead000000000100 dead000000000122 [ 768.263920][T17706] raw: 0000000000000000 0000000000150015 00000000f5000000 0000000000000000 [ 768.263946][T17706] head: 00fff00000000040 ffff88801ce8a8c0 dead000000000100 dead000000000122 [ 768.263973][T17706] head: 0000000000000000 0000000000150015 00000000f5000000 0000000000000000 [ 768.263997][T17706] head: 00fff00000000001 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 768.264060][T17706] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 768.264078][T17706] page dumped because: unmovable page [ 768.264091][T17706] page_owner tracks the page as allocated [ 768.264104][T17706] page last allocated via order 1, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5207, tgid 5207 (udevadm), ts 31244554817, free_ts 24669120150 [ 768.264155][T17706] post_alloc_hook+0x153/0x170 [ 768.264192][T17706] get_page_from_freelist+0x111d/0x3140 [ 768.264225][T17706] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 768.264261][T17706] new_slab+0xa6/0x6d0 [ 768.264300][T17706] refill_objects+0x26b/0x400 [ 768.264332][T17706] __pcs_replace_empty_main+0x19f/0x600 [ 768.264364][T17706] kmem_cache_alloc_lru_noprof+0x485/0x6e0 [ 768.264399][T17706] __d_alloc+0x34/0xa80 [ 768.264426][T17706] d_alloc_parallel+0x111/0x14e0 [ 768.264459][T17706] __lookup_slow+0x193/0x460 [ 768.264492][T17706] lookup_slow+0x50/0x70 [ 768.264522][T17706] path_lookupat+0x5e8/0xc40 [ 768.264559][T17706] filename_lookup+0x202/0x590 [ 768.264770][T17706] vfs_statx+0xff/0x3f0 [ 768.264801][T17706] vfs_fstatat+0x77/0xe0 [ 768.264858][T17706] __do_sys_newfstatat+0x9d/0x120 [ 768.264891][T17706] page last free pid 1 tgid 1 stack trace: [ 768.264909][T17706] __free_frozen_pages+0x7e1/0x10d0 [ 768.264943][T17706] free_contig_range+0xde/0x1d0 [ 768.264977][T17706] destroy_args+0xa8/0x7a0 [ 768.265009][T17706] debug_vm_pgtable+0x1b66/0x34c0 [ 768.265039][T17706] do_one_initcall+0x11d/0x760 [ 768.265152][T17706] kernel_init_freeable+0x6e5/0x7a0 [ 768.265316][T17706] kernel_init+0x1f/0x1e0 [ 768.265357][T17706] ret_from_fork+0x754/0xd80 [ 768.265393][T17706] ret_from_fork_asm+0x1a/0x30 [ 768.810053][T17704] kexec: Could not allocate control_code_buffer [ 769.573166][T17727] input: jJǸ-9%vJ86 as /devices/virtual/input/input23 [ 772.855508][T17763] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24 [ 775.187873][T17788] forcing mempool usage for bio_alloc_bioset+0x392/0x850 [ 778.038155][T17845] nvme_fcloop: unknown parameter or missing value '7' [ 779.113216][T17867] input: jJǸ-9%vJ86 as /devices/virtual/input/input25 [ 781.128074][T17917] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2247'. [ 781.163971][T17914] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 784.650979][T17980] input: jJǸ-9%vJ86 as /devices/virtual/input/input26 [ 784.849302][ T29] audit: type=1800 audit(4294967334.318:27): pid=17978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2260" name="dbroot" dev="configfs" ino=84459 res=0 errno=0 [ 789.078313][T18046] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input27 [ 789.505076][T18069] FAULT_INJECTION: forcing a failure. [ 789.505076][T18069] name failslab, interval 1, probability 0, space 0, times 0 [ 789.519425][T18069] CPU: 0 UID: 0 PID: 18069 Comm: syz.2.2278 Tainted: G U L syzkaller #0 PREEMPT(full) [ 789.519453][T18069] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 789.519459][T18069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 789.519468][T18069] Call Trace: [ 789.519475][T18069] [ 789.519481][T18069] dump_stack_lvl+0x100/0x190 [ 789.519508][T18069] should_fail_ex.cold+0x5/0xa [ 789.519528][T18069] should_failslab+0xc2/0x120 [ 789.519543][T18069] __kmalloc_cache_noprof+0x7a/0x6f0 [ 789.519561][T18069] ? vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 789.519587][T18069] vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 789.519608][T18069] vidtv_mux_init+0x8a6/0xbf0 [ 789.519627][T18069] vidtv_start_feed+0x33e/0x4c0 [ 789.519656][T18069] ? __pfx_vidtv_start_feed+0x10/0x10 [ 789.519678][T18069] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 789.519704][T18069] ? mark_held_locks+0x40/0x70 [ 789.519725][T18069] ? __pfx_vidtv_start_feed+0x10/0x10 [ 789.519746][T18069] dmx_ts_feed_start_filtering+0xf6/0x220 [ 789.519771][T18069] dvb_dmxdev_start_feed+0x273/0x3f0 [ 789.519793][T18069] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 789.519816][T18069] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 789.519837][T18069] dvb_demux_do_ioctl+0xe64/0x1200 [ 789.519864][T18069] dvb_usercopy+0x167/0x340 [ 789.519881][T18069] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 789.519902][T18069] ? __pfx_dvb_usercopy+0x10/0x10 [ 789.519928][T18069] ? __fget_files+0x21f/0x3d0 [ 789.519953][T18069] dvb_demux_ioctl+0x29/0x40 [ 789.519971][T18069] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 789.519989][T18069] __x64_sys_ioctl+0x18e/0x210 [ 789.520010][T18069] do_syscall_64+0x106/0xf80 [ 789.520026][T18069] ? clear_bhb_loop+0x40/0x90 [ 789.520044][T18069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.520058][T18069] RIP: 0033:0x7fc98879c629 [ 789.520073][T18069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 789.520087][T18069] RSP: 002b:00007fc989698028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 789.520102][T18069] RAX: ffffffffffffffda RBX: 00007fc988a15fa0 RCX: 00007fc98879c629 [ 789.520112][T18069] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000002 [ 789.520121][T18069] RBP: 00007fc988832b39 R08: 0000000000000000 R09: 0000000000000000 [ 789.520130][T18069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 789.520139][T18069] R13: 00007fc988a16038 R14: 00007fc988a15fa0 R15: 00007ffd584e7258 [ 789.520160][T18069] [ 789.520745][ T9] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 789.779669][ T9] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 789.788095][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G U L syzkaller #0 PREEMPT(full) [ 789.798772][ T9] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 789.803947][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 789.813999][ T9] Workqueue: events vidtv_mux_tick [ 789.819134][ T9] RIP: 0010:vidtv_psi_ts_psi_write_into+0x54a/0xbc0 [ 789.825724][ T9] Code: 3c c3 dc f9 4c 8d 63 20 4c 89 e0 48 c1 e8 03 80 3c 28 00 0f 85 e8 04 00 00 48 8b 43 20 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 <0f> b6 14 2a 38 ca 7f 08 84 d2 0f 85 19 05 00 00 0f b6 10 48 8b 7c [ 789.845328][ T9] RSP: 0018:ffffc900000e73f8 EFLAGS: 00010202 [ 789.851387][ T9] RAX: 0000000000000002 RBX: ffffc900000e7678 RCX: 0000000000000002 [ 789.859348][ T9] RDX: 0000000000000000 RSI: ffffffff882b3804 RDI: ffff88801e2cdac0 [ 789.867309][ T9] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 789.875277][ T9] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc900000e7698 [ 789.883234][ T9] R13: 0000000000000178 R14: 0000000000000000 R15: 0000000000000008 [ 789.891199][ T9] FS: 0000000000000000(0000) GS:ffff888124351000(0000) knlGS:0000000000000000 [ 789.900116][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 789.906684][ T9] CR2: 0000001b30a11ff8 CR3: 000000003534e000 CR4: 00000000003526f0 [ 789.914640][ T9] Call Trace: [ 789.917900][ T9] [ 789.920816][ T9] ? __pfx_vidtv_psi_ts_psi_write_into+0x10/0x10 [ 789.927140][ T9] vidtv_psi_pmt_write_into+0x3b2/0xa70 [ 789.932678][ T9] ? __pfx_vidtv_psi_pmt_write_into+0x10/0x10 [ 789.938753][ T9] ? vidtv_psi_pat_write_into+0x56a/0x690 [ 789.944458][ T9] ? __pfx_vidtv_psi_pat_write_into+0x10/0x10 [ 789.950543][ T9] ? kasan_quarantine_put+0x104/0x240 [ 789.955905][ T9] ? kfree_skbmem+0x15d/0x210 [ 789.960659][ T9] ? kmem_cache_free+0x124/0x6a0 [ 789.965586][ T9] vidtv_mux_push_si+0x932/0xe80 [ 789.970509][ T9] ? __pfx_vidtv_mux_push_si+0x10/0x10 [ 789.975954][ T9] ? __lock_acquire+0x4a5/0x2630 [ 789.980881][ T9] ? __pfx_tcp_release_cb+0x10/0x10 [ 789.986064][ T9] ? __pfx_vidtv_ts_pcr_write_into+0x10/0x10 [ 789.992032][ T9] ? do_raw_spin_lock+0x128/0x260 [ 789.997048][ T9] ? debug_object_activate+0x331/0x490 [ 790.002501][ T9] vidtv_mux_tick+0xe9b/0x1480 [ 790.007252][ T9] ? __lock_acquire+0x4a5/0x2630 [ 790.012178][ T9] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 790.017361][ T9] ? __lock_acquire+0x4a5/0x2630 [ 790.022306][ T9] ? debug_object_deactivate+0x2e4/0x3b0 [ 790.027931][ T9] ? finish_task_switch.isra.0+0x200/0xb80 [ 790.033727][ T9] ? rcu_is_watching+0x12/0xc0 [ 790.038504][ T9] process_one_work+0x9d7/0x1920 [ 790.043441][ T9] ? __pfx_process_one_work+0x10/0x10 [ 790.048835][ T9] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 790.054021][ T9] worker_thread+0x5da/0xe40 [ 790.058615][ T9] ? kthread+0x13a/0x450 [ 790.062852][ T9] ? __pfx_worker_thread+0x10/0x10 [ 790.067955][ T9] kthread+0x370/0x450 [ 790.072019][ T9] ? __pfx_kthread+0x10/0x10 [ 790.076597][ T9] ret_from_fork+0x754/0xd80 [ 790.081181][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 790.086282][ T9] ? __switch_to+0x7b4/0x1120 [ 790.090942][ T9] ? __pfx_kthread+0x10/0x10 [ 790.095546][ T9] ret_from_fork_asm+0x1a/0x30 [ 790.100330][ T9] [ 790.103336][ T9] Modules linked in: [ 790.107867][ T9] ---[ end trace 0000000000000000 ]--- [ 790.132146][T18059] misc userio: Invalid payload size [ 790.214081][ T9] RIP: 0010:vidtv_psi_ts_psi_write_into+0x54a/0xbc0 [ 790.220908][ T9] Code: 3c c3 dc f9 4c 8d 63 20 4c 89 e0 48 c1 e8 03 80 3c 28 00 0f 85 e8 04 00 00 48 8b 43 20 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 <0f> b6 14 2a 38 ca 7f 08 84 d2 0f 85 19 05 00 00 0f b6 10 48 8b 7c [ 790.302264][ T9] RSP: 0018:ffffc900000e73f8 EFLAGS: 00010202 [ 790.336205][ T9] RAX: 0000000000000002 RBX: ffffc900000e7678 RCX: 0000000000000002 [ 790.450611][ T9] RDX: 0000000000000000 RSI: ffffffff882b3804 RDI: ffff88801e2cdac0 [ 790.464044][ T9] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 790.472133][ T9] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc900000e7698 [ 790.489587][ T9] R13: 0000000000000178 R14: 0000000000000000 R15: 0000000000000008 [ 790.498042][ T9] FS: 0000000000000000(0000) GS:ffff888124351000(0000) knlGS:0000000000000000 [ 790.507312][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 790.514454][ T9] CR2: 0000000000007000 CR3: 000000003604e000 CR4: 00000000003526f0 [ 790.522625][ T9] Kernel panic - not syncing: Fatal exception [ 790.529051][ T9] Kernel Offset: disabled [ 790.533366][ T9] Rebooting in 86400 seconds..