last executing test programs: 8.761659997s ago: executing program 1 (id=743): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x1) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x4000000000009b72, 0x2, 0x8000) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000002040)='/dev/snd/pcmC1D1c\x00', 0x80, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0x3f, 0x5, 0x2000000000948b, 0x3, 0x800295f4da0a, 0x2, 0x3, 0x62, 0x80000001, 0x50a7, 0x6d3f, 0x9, 0x3, 0xfffffffffffffffe]}, 0x0) 6.464384228s ago: executing program 1 (id=752): mmap$auto(0x0, 0x400008, 0x4, 0x40009b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x1000, 0x400050, 0x9) r0 = prctl$auto_PR_SET_MM_START_BRK(0x9, 0x6, 0x0, 0x6, 0x4) fcntl$auto_F_SETSIG(r0, 0xa, 0x1) write$auto(0x1, 0x0, 0x80000000) munmap$auto(0x8000, 0xffffffff) ioctl$auto(0x4000000000000c8, 0x3, 0x3) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x2003f0, 0x18) r1 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x2001, 0x0) ioctl$auto(r1, 0x400454d9, r1) syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mknod$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_', 0x1081, 0x9) acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') acct$auto(&(0x7f0000000000)=']\x00') open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x880c2, 0x95) 5.908222785s ago: executing program 0 (id=754): r0 = open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCGPTPEER2(r1, 0x5441, 0x0) fcntl$auto(r0, 0x400, 0x1) r2 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) fallocate$auto(r2, 0xb, 0xfffffffffffffff7, 0x7ffe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x40000080) memfd_secret$auto(0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$auto(0xffffffffffffffff, 0x10f, 0x6, 0x0, 0x9b5) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x401, 0x0) ioctl$auto(0xffffffffffffffff, 0xc0184d03, 0x7) open(&(0x7f0000000000)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x2) 5.841658753s ago: executing program 3 (id=755): socket(0x2, 0x3, 0xa) socket(0x11, 0x80003, 0x300) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0) socket(0xa, 0x3, 0x73) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0x10, 0x2, 0x0) socket(0x15, 0x5, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0xa, 0x2, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0xa, 0x801, 0x84) socket(0xa, 0x2, 0x3a) io_uring_setup$auto(0x6, 0x0) r1 = socket(0xa, 0x2, 0x88) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x4, @old_prog_fd=r0}, 0xa3) bpf$auto(0x1, &(0x7f0000000040)=@query={@target_ifindex, 0x4, 0x7, 0x9, 0x7f, @prog_cnt=0x404, 0x0, 0x80000000, 0xf, 0xb, 0x5}, 0x7) 5.598138797s ago: executing program 3 (id=756): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) eventfd$auto(0x4) r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5) ioctl$auto(r1, 0x4008af20, r0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto(0x3, 0xffffffff80088a02, 0x1) timer_settime$auto(0x40000000, 0x9, &(0x7f00000000c0)={{0x2, 0x10007}, {0x9, 0x5}}, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/sctp/assocs\x00', 0x40200, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, 0x0, 0xfffffe36) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000040)=""/9, 0x9) 5.597506236s ago: executing program 2 (id=764): bind$auto(0x3, 0x0, 0x6a) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) r0 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x42842, 0x95) read$auto(r0, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) userfaultfd$auto(0x1) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptya1\x00', 0x20080, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x28, 0x1, 0x0) sendmsg$auto_SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x20008804) sendto$auto(0xffffffffffffffff, 0x0, 0x8000000000000000, 0x7, 0x0, 0x5) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0xffffffffffffffff, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x4f4, 0x8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x1, 0xbc3, 0x800, 0x3, 0x2a, 0xc, 0x400000000003, 0x3, 0x0, 0xfffffffffffffffe, 0x6, 0x9, 0xffffffffffffff81, 0x1]}, 0x0) mmap$auto(0x4, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x1000000007, 0x0) 5.004374421s ago: executing program 1 (id=757): unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x0, 0x0) r0 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x7, 0x400b, r0, [], {0x6, 0x6, 0x8c48, 0x29a, 0x9, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x101, 0x85, 0x2, 0x24, 0xfe000000, 0x8, 0x3}}) r1 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read$auto_vhci_fops_hci_vhci(r1, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1, 0x200948d, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x6, 0x8000001f, 0x8, 0x6d3e, 0xc, 0x2, 0x2]}, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) request_key$auto_KEY_SPEC_GROUP_KEYRING(0x0, 0x0, 0x0, 0xfffffffffffffffa) ioctl$auto(0x3, 0x8905, 0x38) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) 4.930319321s ago: executing program 0 (id=758): unshare$auto(0x40000080) setrlimit$auto(0xb, 0x0) r0 = getpid() rt_tgsigqueueinfo$auto(r0, 0x0, 0x21, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r2, 0x1269, 0x0) mmap$auto(0x0, 0x402000b, 0x4af, 0xeb1, 0x401, 0x8000) read$auto(0x3, 0x0, 0xfffffdef) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) getsockopt$auto_SO_SNDBUF(0xffffffffffffffff, 0x73, 0x7, 0x0, 0x0) 3.974031873s ago: executing program 2 (id=759): mmap$auto(0x0, 0x4, 0xffffffffffffffff, 0x400eb1, 0xfffffffffffffffa, 0x8000) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/block/nbd3/queue/iosched/front_merges\x00', 0x2041, 0x0) getsockopt$auto(0xffffffffffffffff, 0x114, 0x2718, 0xfffffffffffffffc, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={"ef65ce6c00", 0x3ff, 0x408, 0xc, 0x400004, 0x200000000040000d}) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) madvise$auto(0x0, 0x5, 0x15) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) r2 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci1/power\x00', 0x217102, 0x0) recvmmsg$auto(r2, 0x0, 0xd, 0xc, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0xca, 0x0, 0x2d9) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, 0x0, 0x40800) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) 3.973830153s ago: executing program 3 (id=760): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x222c0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sem\x00', 0xc8202, 0x0) socket(0x21, 0x2, 0x2) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x20, 0x0) r0 = io_uring_setup$auto(0x299d, 0x0) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x11, 0x2, 0x200010) r1 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) accept$auto(r0, 0x0, 0x0) 3.79575867s ago: executing program 0 (id=761): bpf$auto(0x8000000, 0x0, 0x0) r0 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x40, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000002c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1d\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"P\x8a\xbbY8@Z5`\xa2\x9aSVd\x1d\xac\xe8\x90e\x9d\x03tm\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7.\xbe\x01\x98\xd7l\x00\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfa\xf0\xd9\xc0K\x8b\xa3c\x00'/160, 0xa9) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x20000054) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) shmctl$auto_SHM_LOCK(0x2, 0xb, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x4c2080, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20004000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) r2 = socketpair$auto(0x0, 0x1000, 0x7fffffff, 0x0) close_range$auto(r2, 0xffffffffffffffff, 0x0) ioctl$auto(0x3, 0x6f50, 0xffffffffffffffff) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r1, 0x8000) setresgid$auto(0x0, 0x0, 0x0) r3 = ioctl$auto_NS_GET_TGID_IN_PIDNS(r0, 0x8004b709, &(0x7f0000000240)=0x3) shmctl$auto_SHM_STAT(0x1, 0xd, &(0x7f00000029c0)={{0x3, 0x0, 0x0, 0x80000001, 0x6, 0xca, 0x8}, 0x1, 0x2, 0x2, 0x6, @inferred=r3, @raw=0x8, 0x0, 0x0, 0x0, &(0x7f00000019c0)="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"}) ioctl$auto_BLKRRPART(r1, 0x125f, 0x0) madvise$auto(0x0, 0x400053, 0x9) 2.83601894s ago: executing program 2 (id=762): socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x181040, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) pipe$auto(0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_udc.0/udc/dummy_udc.0/maximum_speed\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/irq.pressure\x00', 0x101102, 0x0) openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000040), 0x669400, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/asound/card0/pcm0p/sub3/xrun_injection\x00', 0x8a180, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/batadv_slave_0/proxy_ndp\x00', 0x382, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket(0xa, 0x801, 0x84) getsockopt$auto(r1, 0x84, 0x82, 0x0, 0x0) ioctl$auto(0x3, 0x80106f53, r0) 2.831757866s ago: executing program 3 (id=763): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x745100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x10000007, 0x400b, r1, [], {0x6, 0x6, 0x8c48, 0x29a, 0x9, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x101, 0x85, 0x2, 0x24, 0xfe000000, 0x8, 0x3}}) r2 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) read$auto_vhci_fops_hci_vhci(r2, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x0) socket(0x2b, 0x1, 0x0) ioctl$auto(0x3, 0x8905, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) 2.692997638s ago: executing program 0 (id=765): r0 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x69a5, 0xa800000000000000) sysfs$auto(0x2, 0x41, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000140), r0) sendmsg$auto_NL802154_CMD_ASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbfb}, 0x14}}, 0x10) syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000002c0), r0) sendmsg$auto_IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000014c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001500)={0x0}, 0x1, 0x0, 0x0, 0x4048090}, 0x404a004) socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) 2.590245037s ago: executing program 2 (id=766): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) r0 = socket(0x1d, 0x1, 0x7fff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) r3 = socket(0x18, 0x5, 0x1) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000240), r0) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r3, 0x0, 0x30004850) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r4, 0x4b47, 0x1) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bus/usb/037/001\x00', 0x40001, 0x0) mmap$auto(0x0, 0x404008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000040)={0xa0, 0x6, 0x5, 0xd102, 0x5, 0x80000, 0x0}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x4c440, 0x0) 1.595492869s ago: executing program 0 (id=767): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x5, 0xfd5, 0x12, 0xffffffffffffffff, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) rseq$auto(0x0, 0x6, 0x3, 0xff) rseq$auto(0x0, 0x2, 0x871, 0x2e0e) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0xa, 0x3, 0x84) getsockopt$auto(r1, 0x84, 0x3, 0x0, 0x0) r2 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r2, 0x0, 0xfffffdf1) linkat$auto(r2, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='&&\x00', 0x1000) open(0x0, 0x0, 0x154) mprotect$auto(0x0, 0x8000000000000001, 0x8) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8600, 0x0) mmap$auto(0x0, 0xd, 0x4000000000df, 0xeb1, 0x401, 0x4000000000008000) 1.545098598s ago: executing program 1 (id=768): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000002940)='/dev/fb0\x00', 0x841, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = socket(0x21, 0x2, 0x2) statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sysfs$auto(0x1, 0x4, 0x41) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x110c230000, 0x0, 0x2000101, 0x3, 0xf000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0xf, 0x7, 0x400004, 0xffffffffffffffff, 0x7, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r1, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0x40a0ae49, r0) 1.449832225s ago: executing program 3 (id=769): r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r0, r0, 0x0) read$auto_vhost_net_fops_net(r0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) semctl$auto(0x1, 0x2, 0x2, 0xf00) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) write$auto(r1, 0x0, 0x1) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) mmap$auto(0x0, 0x8, 0x1000000016, 0x13, 0x3, 0x400180000000) mmap$auto(0x0, 0x40009, 0xdf, 0x10, r0, 0x28000) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), 0xffffffffffffffff) getpid() ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000080)={0x28, 0xf3, 0xb0, @raw=0x3ff}}) 1.148320379s ago: executing program 3 (id=770): unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000040)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x8000000000000, 0x2f) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r2, 0x0, 0x1ff) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/fs/xfs/stats_clear\x00', 0x1, 0x0) write$auto(r3, 0x0, 0x3) listen$auto(0x3, 0x81) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) close_range$auto(0xffffffffffffffff, 0xa, 0x0) mmap$auto(0x0, 0x6, 0x3, 0x4000000000000eb1, 0x7, 0x8000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r4, 0x1269, 0x0) ioctl$auto_MEMGETINFO(r4, 0x80204d01, 0x0) r5 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x40200, 0x0) mmap$auto(0x0, 0x402000b, 0x4af, 0xeb1, 0x401, 0x69c6e201) read$auto(0x3, 0x0, 0xfffffdef) syz_genetlink_get_family_id$auto_batadv(&(0x7f00000002c0), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0x100000e983, 0x21000, 0x10, 0xffffffffffffffff, 0x8000) getsockopt$auto_SO_SNDBUF(r5, 0x73, 0x7, 0x0, &(0x7f0000000140)=0x9d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x1c0000, 0x800097, 0x1, 0x0, 0x3, 0x1) mbind$auto(0x0, 0x800605, 0x1, &(0x7f0000000180)=0xffff, 0xa, 0x3) 935.602688ms ago: executing program 2 (id=771): select$auto(0x10, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7f, 0xd, 0x1, 0x948f, 0x1005, 0x206, 0x7, 0xfffffffffffffff6, 0x7, 0x19, 0x79d, 0x6, 0x100000000000000, 0x7f, 0x20000f]}, 0x0) 840.285984ms ago: executing program 0 (id=772): socket(0x2, 0x2, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r2 = openat$auto_force_suspend_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/hci1/force_suspend\x00', 0x121401, 0x0) write$auto_force_suspend_fops_hci_vhci(r2, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000080)=""/173, 0xad) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x7f, 0x0) 829.423047ms ago: executing program 1 (id=773): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0xa, 0x8) syz_genetlink_get_family_id$auto_smc_pnetid(0x0, 0xffffffffffffffff) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x4) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000000)={0x20, 0x0, 0x1, 0x70bd37, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x80000) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) 720.907676ms ago: executing program 2 (id=774): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) r1 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400005, 0x100000005}}) io_uring_enter$auto(r1, 0x9, 0x820e, 0x6, 0x0, 0x18) ioctl$auto_EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x2, 0x2, 0x1, 0x2}) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bind$auto(r0, &(0x7f0000000240)=@sco, 0xfffffffb) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mlockall$auto(0x7) migrate_pages$auto(0x0, 0xa, &(0x7f0000000000)=0x5, &(0x7f0000000140)=0x2) 0s ago: executing program 1 (id=775): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40, 0x0) readv$auto(r1, &(0x7f0000000180)={&(0x7f0000000140), 0x9}, 0x4) madvise$auto(0x0, 0xffffffffffff0001, 0x15) poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x1000, 0x1c9}, 0x2, 0x7) io_uring_setup$auto(0x6, 0x0) set_mempolicy$auto(0x1, &(0x7f00000000c0)=0x6, 0x21) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sr0\x00', 0x60742, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) lseek$auto(0x3, 0x2, 0x4) bind$auto(0xffffffffffffffff, &(0x7f0000000080)=@phonet={0x23, 0x5, 0x9, 0x1}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x80000007, 0x20020000) write$auto(0x3, 0x0, 0x7fffffff) setsockopt$auto(0x3, 0x6, 0x13, 0x0, 0xfb1) io_uring_setup$auto(0x1, 0x0) prctl$auto(0x41, 0x1, 0x0, 0x0, 0x0) prctl$auto(0x41, 0x1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): T6092] should_fail_ex.cold+0x5/0xa [ 100.356950][ T6092] ? constrain_params_by_rules+0x175/0xcc0 [ 100.356987][ T6092] should_failslab+0xc2/0x120 [ 100.357021][ T6092] __kmalloc_noprof+0xe0/0x850 [ 100.357049][ T6092] ? lockdep_hardirqs_on+0x78/0x100 [ 100.357103][ T6092] constrain_params_by_rules+0x175/0xcc0 [ 100.357158][ T6092] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 100.357206][ T6092] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 100.357256][ T6092] ? __pfx___might_resched+0x10/0x10 [ 100.357292][ T6092] ? snd_interval_refine+0x2d0/0x580 [ 100.357339][ T6092] snd_pcm_hw_refine+0x7e7/0xad0 [ 100.357383][ T6092] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 100.357428][ T6092] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 100.357472][ T6092] ? snd_pcm_hw_param_value+0x27b/0x5b0 [ 100.357508][ T6092] snd_pcm_hw_param_first+0x2b0/0x680 [ 100.357550][ T6092] snd_pcm_hw_params+0x496/0x1cb0 [ 100.357596][ T6092] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 100.357637][ T6092] ? snd_pcm_hw_param_near.constprop.0+0x578/0x850 [ 100.357677][ T6092] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 100.357718][ T6092] snd_pcm_kernel_ioctl+0x167/0x2e0 [ 100.357760][ T6092] snd_pcm_oss_change_params_locked+0x1973/0x39f0 [ 100.357812][ T6092] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 100.357853][ T6092] ? __pfx___mutex_lock+0x10/0x10 [ 100.357921][ T6092] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 100.357964][ T6092] snd_pcm_oss_sync+0x265/0x840 [ 100.358005][ T6092] snd_pcm_oss_release+0x238/0x300 [ 100.358039][ T6092] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 100.358078][ T6092] __fput+0x3ff/0xb40 [ 100.358124][ T6092] task_work_run+0x150/0x240 [ 100.358158][ T6092] ? __pfx_task_work_run+0x10/0x10 [ 100.358201][ T6092] exit_to_user_mode_loop+0x100/0x4a0 [ 100.358229][ T6092] ? rcu_is_watching+0x12/0xc0 [ 100.358267][ T6092] do_syscall_64+0x668/0xf80 [ 100.358307][ T6092] ? clear_bhb_loop+0x40/0x90 [ 100.358342][ T6092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.358370][ T6092] RIP: 0033:0x7f9c7bd9bf79 [ 100.358394][ T6092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.358421][ T6092] RSP: 002b:00007f9c7ccc2028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 100.358449][ T6092] RAX: 0000000000000000 RBX: 00007f9c7c015fa0 RCX: 00007f9c7bd9bf79 [ 100.358467][ T6092] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 100.358484][ T6092] RBP: 00007f9c7be327e0 R08: 0000000000000000 R09: 0000000000000000 [ 100.358501][ T6092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.358517][ T6092] R13: 00007f9c7c016038 R14: 00007f9c7c015fa0 R15: 00007ffd1aafb0d8 [ 100.358556][ T6092] [ 100.523664][ T6094] CIFS: VFS: Invalid SecurityFlags: 0 [ 100.523664][ T6094] [ 101.353817][ T6107] syz.1.60 (6107): /proc/6107/oom_adj is deprecated, please use /proc/6107/oom_score_adj instead. [ 101.638040][ T6111] serio: Serial port ttyS2 [ 102.135959][ T6128] futex_wake_op: syz.1.67 tries to shift op by -2048; fix this program [ 102.145606][ T6128] futex_wake_op: syz.1.67 tries to shift op by -2048; fix this program [ 102.214127][ T6128] 0x000000000001-0x000000020000 : "" [ 102.243058][ T6128] ftl_cs: FTL header corrupt! [ 103.544430][ T6160] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 104.298008][ T6173] process 'syz.3.82' launched ':,' with NULL argv: empty string added [ 104.310340][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.545557][ T6181] XFS: Clearing xfsstats [ 104.558340][ T6181] futex_wake_op: syz.1.83 tries to shift op by -2048; fix this program [ 104.558459][ T6181] futex_wake_op: syz.1.83 tries to shift op by -2048; fix this program [ 104.559271][ T6181] 0x000000000001-0x000000020000 : "" [ 104.586159][ T6181] ftl_cs: FTL header corrupt! [ 104.646843][ T6184] XFS: Clearing xfsstats [ 104.674912][ T6184] futex_wake_op: syz.3.85 tries to shift op by -2048; fix this program [ 104.675020][ T6184] futex_wake_op: syz.3.85 tries to shift op by -2048; fix this program [ 104.711764][ T6184] 0x000000000001-0x000000020000 : "" [ 104.714109][ T6184] ftl_cs: FTL header corrupt! [ 105.375599][ T6197] FAULT_INJECTION: forcing a failure. [ 105.375599][ T6197] name failslab, interval 1, probability 0, space 0, times 0 [ 105.393162][ T6197] CPU: 0 UID: 0 PID: 6197 Comm: syz.1.89 Tainted: G L syzkaller #0 PREEMPT(full) [ 105.393208][ T6197] Tainted: [L]=SOFTLOCKUP [ 105.393218][ T6197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 105.393234][ T6197] Call Trace: [ 105.393243][ T6197] [ 105.393254][ T6197] dump_stack_lvl+0x100/0x190 [ 105.393299][ T6197] should_fail_ex.cold+0x5/0xa [ 105.393328][ T6197] should_failslab+0xc2/0x120 [ 105.393359][ T6197] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 105.393389][ T6197] ? __d_alloc+0x34/0xa80 [ 105.393422][ T6197] ? make_vfsgid+0xf1/0x140 [ 105.393468][ T6197] __d_alloc+0x34/0xa80 [ 105.393499][ T6197] ? bpf_lsm_inode_permission+0x9/0x10 [ 105.393532][ T6197] d_alloc+0x4a/0x1e0 [ 105.393574][ T6197] vfs_tmpfile+0x148/0x9a0 [ 105.393615][ T6197] path_openat+0x164e/0x31a0 [ 105.393645][ T6197] ? kasan_save_stack+0x3f/0x50 [ 105.393672][ T6197] ? kasan_save_stack+0x30/0x50 [ 105.393700][ T6197] ? __kasan_slab_alloc+0x89/0x90 [ 105.393729][ T6197] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 105.393755][ T6197] ? do_getname+0x35/0x390 [ 105.393792][ T6197] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.393824][ T6197] ? __pfx_path_openat+0x10/0x10 [ 105.393869][ T6197] do_file_open+0x20e/0x430 [ 105.393903][ T6197] ? __pfx_do_file_open+0x10/0x10 [ 105.393961][ T6197] ? _raw_spin_unlock+0x28/0x50 [ 105.393996][ T6197] ? alloc_fd+0x476/0x790 [ 105.394036][ T6197] do_sys_openat2+0x10d/0x1e0 [ 105.394075][ T6197] ? __pfx_do_sys_openat2+0x10/0x10 [ 105.394116][ T6197] ? __fget_files+0x21f/0x3d0 [ 105.394153][ T6197] __x64_sys_open+0xfe/0x1d0 [ 105.394188][ T6197] ? __pfx___x64_sys_open+0x10/0x10 [ 105.394241][ T6197] do_syscall_64+0x106/0xf80 [ 105.394280][ T6197] ? clear_bhb_loop+0x40/0x90 [ 105.394314][ T6197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.394342][ T6197] RIP: 0033:0x7f9c7bd9bf79 [ 105.394366][ T6197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.394392][ T6197] RSP: 002b:00007f9c7ccc2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 105.394418][ T6197] RAX: ffffffffffffffda RBX: 00007f9c7c015fa0 RCX: 00007f9c7bd9bf79 [ 105.394438][ T6197] RDX: 0000000000000408 RSI: 0000000000591002 RDI: 0000200000000100 [ 105.394456][ T6197] RBP: 00007f9c7be327e0 R08: 0000000000000000 R09: 0000000000000000 [ 105.394473][ T6197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.394489][ T6197] R13: 00007f9c7c016038 R14: 00007f9c7c015fa0 R15: 00007ffd1aafb0d8 [ 105.394528][ T6197] [ 105.904292][ T6208] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 106.750825][ T6227] futex_wake_op: syz.1.97 tries to shift op by -2048; fix this program [ 106.770018][ T6227] futex_wake_op: syz.1.97 tries to shift op by -2048; fix this program [ 106.810240][ T6227] 0x000000000001-0x000000020000 : "" [ 106.838545][ T6227] ftl_cs: FTL header corrupt! [ 108.448130][ T6262] kvm: kvm [6261]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000012) [ 111.090565][ T6332] mkiss: ax0: crc mode is auto. [ 111.804898][ T6350] netlink: 'syz.3.137': attribute type 1 has an invalid length. [ 111.813039][ T6350] netlink: 306 bytes leftover after parsing attributes in process `syz.3.137'. [ 111.824775][ T6350] netlink: 'syz.3.137': attribute type 1 has an invalid length. [ 111.833755][ T6350] netlink: 306 bytes leftover after parsing attributes in process `syz.3.137'. [ 111.854658][ T6353] FAULT_INJECTION: forcing a failure. [ 111.854658][ T6353] name failslab, interval 1, probability 0, space 0, times 0 [ 111.868299][ T6353] CPU: 0 UID: 0 PID: 6353 Comm: syz.2.136 Tainted: G L syzkaller #0 PREEMPT(full) [ 111.868347][ T6353] Tainted: [L]=SOFTLOCKUP [ 111.868357][ T6353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 111.868374][ T6353] Call Trace: [ 111.868384][ T6353] [ 111.868396][ T6353] dump_stack_lvl+0x100/0x190 [ 111.868442][ T6353] should_fail_ex.cold+0x5/0xa [ 111.868474][ T6353] should_failslab+0xc2/0x120 [ 111.868506][ T6353] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 111.868536][ T6353] ? __alloc_skb+0x140/0x710 [ 111.868581][ T6353] __alloc_skb+0x140/0x710 [ 111.868621][ T6353] ? __pfx___alloc_skb+0x10/0x10 [ 111.868661][ T6353] ? find_held_lock+0x2b/0x80 [ 111.868698][ T6353] ? tipc_node_xmit+0x1f6/0xfb0 [ 111.868743][ T6353] ? lockdep_init_map_type+0x5c/0x250 [ 111.868778][ T6353] tipc_buf_acquire+0x26/0xe0 [ 111.868814][ T6353] tipc_msg_build+0x112/0x1100 [ 111.868858][ T6353] ? __pfx_tipc_node_xmit+0x10/0x10 [ 111.868902][ T6353] ? __pfx_tipc_msg_build+0x10/0x10 [ 111.868957][ T6353] __tipc_sendstream+0x6a7/0x10b0 [ 111.869015][ T6353] ? __pfx___tipc_sendstream+0x10/0x10 [ 111.869050][ T6353] ? do_raw_spin_lock+0x128/0x260 [ 111.869085][ T6353] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 111.869119][ T6353] ? __pfx_woken_wake_function+0x10/0x10 [ 111.869161][ T6353] ? __local_bh_enable_ip+0x9e/0x120 [ 111.869209][ T6353] tipc_sendstream+0x4f/0x70 [ 111.869244][ T6353] sock_write_iter+0x566/0x610 [ 111.869275][ T6353] ? __pfx_sock_write_iter+0x10/0x10 [ 111.869322][ T6353] ? bpf_lsm_file_permission+0x9/0x10 [ 111.869355][ T6353] ? security_file_permission+0x76/0x210 [ 111.869389][ T6353] ? rw_verify_area+0xce/0x6d0 [ 111.869436][ T6353] vfs_write+0x6ac/0x1070 [ 111.869465][ T6353] ? __pfx_sock_write_iter+0x10/0x10 [ 111.869498][ T6353] ? __pfx_vfs_write+0x10/0x10 [ 111.869524][ T6353] ? find_held_lock+0x2b/0x80 [ 111.869582][ T6353] ksys_write+0x1f8/0x250 [ 111.869609][ T6353] ? __pfx_ksys_write+0x10/0x10 [ 111.869650][ T6353] do_syscall_64+0x106/0xf80 [ 111.869696][ T6353] ? clear_bhb_loop+0x40/0x90 [ 111.869732][ T6353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.869762][ T6353] RIP: 0033:0x7f826ef9bf79 [ 111.869787][ T6353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.869814][ T6353] RSP: 002b:00007f826fd77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 111.869842][ T6353] RAX: ffffffffffffffda RBX: 00007f826f215fa0 RCX: 00007f826ef9bf79 [ 111.869862][ T6353] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 111.869879][ T6353] RBP: 00007f826f0327e0 R08: 0000000000000000 R09: 0000000000000000 [ 111.869896][ T6353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.869911][ T6353] R13: 00007f826f216038 R14: 00007f826f215fa0 R15: 00007fffb4cc5e58 [ 111.869943][ T6353] [ 112.824873][ T6368] kvm_intel: kvm [6367]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0xfffffffffffffffe [ 113.625149][ T6391] zswap: compressor not available [ 114.393594][ T6415] XFS: Clearing xfsstats [ 114.476824][ T6421] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 114.584977][ T6411] futex_wake_op: syz.3.157 tries to shift op by -2048; fix this program [ 114.626077][ T6411] futex_wake_op: syz.3.157 tries to shift op by -2048; fix this program [ 114.666343][ T6411] 0x000000000001-0x000000020000 : "" [ 114.741170][ T6411] ftl_cs: FTL header corrupt! [ 115.535379][ T6445] XFS: Clearing xfsstats [ 115.556999][ T6445] futex_wake_op: syz.0.166 tries to shift op by -2048; fix this program [ 115.588235][ T6445] futex_wake_op: syz.0.166 tries to shift op by -2048; fix this program [ 115.647073][ T6445] 0x000000000001-0x000000020000 : "" [ 115.719235][ T6445] ftl_cs: FTL header corrupt! [ 116.627033][ T6478] input: jJǸ-9%vJ86 as /devices/virtual/input/input7 [ 116.999110][ T6488] mkiss: ax0: crc mode is auto. [ 119.099889][ T6538] syz.3.193 uses obsolete (PF_INET,SOCK_PACKET) [ 119.369691][ T6548] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 119.698413][ T6561] XFS: Clearing xfsstats [ 119.720891][ T6561] futex_wake_op: syz.2.201 tries to shift op by -2048; fix this program [ 119.732654][ T6561] futex_wake_op: syz.2.201 tries to shift op by -2048; fix this program [ 119.747913][ T6561] 0x000000000001-0x000000020000 : "" [ 119.758232][ T6561] ftl_cs: FTL header corrupt! [ 120.416124][ T6556] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 120.422622][ T6556] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 120.441971][ T6556] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 120.453388][ T6556] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 120.470176][ T6556] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 120.490909][ T6556] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 120.498147][ T6556] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 120.511352][ T6556] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 120.530853][ T6556] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 120.543825][ T6556] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 120.561069][ T6556] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 120.579530][ T6556] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 120.860698][ T6577] XFS: Clearing xfsstats [ 120.888917][ T6577] futex_wake_op: syz.3.204 tries to shift op by -2048; fix this program [ 120.912545][ T6577] futex_wake_op: syz.3.204 tries to shift op by -2048; fix this program [ 120.935738][ T6577] 0x000000000001-0x000000020000 : "" [ 120.965816][ T6577] ftl_cs: FTL header corrupt! [ 121.187588][ T6587] XFS: Clearing xfsstats [ 121.217242][ T6587] futex_wake_op: syz.0.207 tries to shift op by -2048; fix this program [ 121.239648][ T6587] futex_wake_op: syz.0.207 tries to shift op by -2048; fix this program [ 121.475993][ T6587] 0x000000000001-0x000000020000 : "" [ 121.500657][ T6587] ftl_cs: FTL header corrupt! [ 121.700717][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 122.491524][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 122.506647][ T6618] sp0: Synchronizing with TNC [ 122.570643][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 122.576758][ T5827] Bluetooth: hci2: command 0x0c1a tx timeout [ 123.108958][ T6632] FAULT_INJECTION: forcing a failure. [ 123.108958][ T6632] name failslab, interval 1, probability 0, space 0, times 0 [ 123.125513][ T6632] CPU: 1 UID: 0 PID: 6632 Comm: syz.1.224 Tainted: G L syzkaller #0 PREEMPT(full) [ 123.125561][ T6632] Tainted: [L]=SOFTLOCKUP [ 123.125571][ T6632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 123.125587][ T6632] Call Trace: [ 123.125597][ T6632] [ 123.125608][ T6632] dump_stack_lvl+0x100/0x190 [ 123.125667][ T6632] should_fail_ex.cold+0x5/0xa [ 123.125708][ T6632] should_failslab+0xc2/0x120 [ 123.125743][ T6632] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 123.125771][ T6632] ? dup_fd+0x4d/0xd10 [ 123.125799][ T6632] ? do_futex+0x192/0x350 [ 123.125829][ T6632] dup_fd+0x4d/0xd10 [ 123.125869][ T6632] __do_sys_close_range+0x327/0x740 [ 123.125905][ T6632] ? __pfx___do_sys_close_range+0x10/0x10 [ 123.125948][ T6632] do_syscall_64+0x106/0xf80 [ 123.125988][ T6632] ? clear_bhb_loop+0x40/0x90 [ 123.126022][ T6632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.126050][ T6632] RIP: 0033:0x7f9c7bd9bf79 [ 123.126087][ T6632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.126115][ T6632] RSP: 002b:00007f9c7ccc2028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 123.126142][ T6632] RAX: ffffffffffffffda RBX: 00007f9c7c015fa0 RCX: 00007f9c7bd9bf79 [ 123.126160][ T6632] RDX: 0000000000000002 RSI: 0000000000000008 RDI: 0000000000000004 [ 123.126177][ T6632] RBP: 00007f9c7be327e0 R08: 0000000000000000 R09: 0000000000000000 [ 123.126193][ T6632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.126209][ T6632] R13: 00007f9c7c016038 R14: 00007f9c7c015fa0 R15: 00007ffd1aafb0d8 [ 123.126244][ T6632] [ 123.643543][ T6643] sp0: Synchronizing with TNC [ 123.770723][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 123.795957][ T6647] smpboot: CPU 1 is now offline [ 123.917102][ T6648] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 124.216876][ T6656] XFS: Clearing xfsstats [ 124.248381][ T6656] futex_wake_op: syz.1.232 tries to shift op by -2048; fix this program [ 124.265290][ T6656] futex_wake_op: syz.1.232 tries to shift op by -2048; fix this program [ 124.340673][ T6656] 0x000000000001-0x000000020000 : "" [ 124.431888][ T6656] ftl_cs: FTL header corrupt! [ 124.571050][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 124.623464][ T6677] XFS: Clearing xfsstats [ 124.650058][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 124.650244][ T5827] Bluetooth: hci3: command 0x0c1a tx timeout [ 124.694118][ T6677] futex_wake_op: syz.2.239 tries to shift op by -2048; fix this program [ 124.705801][ T6677] futex_wake_op: syz.2.239 tries to shift op by -2048; fix this program [ 124.768431][ T6680] KVM: debugfs: duplicate directory 6680-3 [ 124.833428][ T6677] 0x000000000001-0x000000020000 : "" [ 124.843366][ T6683] netlink: 342 bytes leftover after parsing attributes in process `syz.0.242'. [ 124.884184][ T6677] ftl_cs: FTL header corrupt! [ 124.897893][ T6683] netlink: 294 bytes leftover after parsing attributes in process `syz.0.242'. [ 125.041175][ T6685] FAULT_INJECTION: forcing a failure. [ 125.041175][ T6685] name failslab, interval 1, probability 0, space 0, times 0 [ 125.092092][ T6685] CPU: 0 UID: 0 PID: 6685 Comm: syz.1.243 Tainted: G L syzkaller #0 PREEMPT(full) [ 125.092139][ T6685] Tainted: [L]=SOFTLOCKUP [ 125.092149][ T6685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 125.092165][ T6685] Call Trace: [ 125.092174][ T6685] [ 125.092184][ T6685] dump_stack_lvl+0x100/0x190 [ 125.092231][ T6685] should_fail_ex.cold+0x5/0xa [ 125.092262][ T6685] should_failslab+0xc2/0x120 [ 125.092297][ T6685] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 125.092325][ T6685] ? acpi_ps_alloc_op+0x29d/0x360 [ 125.092363][ T6685] acpi_ps_alloc_op+0x29d/0x360 [ 125.092392][ T6685] ? acpi_ut_status_exit+0x111/0x1c0 [ 125.092426][ T6685] acpi_ps_create_op+0x4b3/0xd10 [ 125.092456][ T6685] ? __pfx_acpi_ps_create_op+0x10/0x10 [ 125.092488][ T6685] ? acpi_ut_status_exit+0x111/0x1c0 [ 125.092526][ T6685] acpi_ps_parse_loop+0xa65/0x24a0 [ 125.092573][ T6685] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 125.092601][ T6685] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 125.092628][ T6685] ? acpi_ut_create_thread_state+0x6d/0x170 [ 125.092668][ T6685] acpi_ps_parse_aml+0x81e/0x1120 [ 125.092706][ T6685] acpi_ps_execute_method+0x5c4/0xe90 [ 125.092745][ T6685] acpi_ns_evaluate+0x640/0x1670 [ 125.092789][ T6685] acpi_evaluate_object+0x420/0xe00 [ 125.092829][ T6685] ? kasan_save_stack+0x30/0x50 [ 125.092856][ T6685] ? kasan_save_track+0x14/0x30 [ 125.092889][ T6685] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 125.092935][ T6685] ? __pfx___might_resched+0x10/0x10 [ 125.092973][ T6685] acpi_evaluate_integer+0xdf/0x220 [ 125.093012][ T6685] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 125.093066][ T6685] ? __pfx_status_show+0x10/0x10 [ 125.093108][ T6685] status_show+0xa0/0x120 [ 125.093150][ T6685] ? __pfx_status_show+0x10/0x10 [ 125.093201][ T6685] dev_attr_show+0x52/0xa0 [ 125.093227][ T6685] ? __pfx_dev_attr_show+0x10/0x10 [ 125.093252][ T6685] sysfs_kf_seq_show+0x217/0x3a0 [ 125.093291][ T6685] seq_read_iter+0x32f/0x1270 [ 125.093335][ T6685] kernfs_fop_read_iter+0x46c/0x610 [ 125.093363][ T6685] ? rw_verify_area+0xce/0x6d0 [ 125.093403][ T6685] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 125.093434][ T6685] vfs_read+0x825/0xb30 [ 125.093466][ T6685] ? __pfx_vfs_read+0x10/0x10 [ 125.093518][ T6685] ksys_read+0x12a/0x250 [ 125.093545][ T6685] ? __pfx_ksys_read+0x10/0x10 [ 125.093596][ T6685] do_syscall_64+0x106/0xf80 [ 125.093637][ T6685] ? clear_bhb_loop+0x40/0x90 [ 125.093671][ T6685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.093699][ T6685] RIP: 0033:0x7f9c7bd9bf79 [ 125.093722][ T6685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.093749][ T6685] RSP: 002b:00007f9c7ccc2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 125.093776][ T6685] RAX: ffffffffffffffda RBX: 00007f9c7c015fa0 RCX: 00007f9c7bd9bf79 [ 125.093795][ T6685] RDX: 000000000000007a RSI: 0000200000000240 RDI: 0000000000000005 [ 125.093812][ T6685] RBP: 00007f9c7be327e0 R08: 0000000000000000 R09: 0000000000000000 [ 125.093828][ T6685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.093844][ T6685] R13: 00007f9c7c016038 R14: 00007f9c7c015fa0 R15: 00007ffd1aafb0d8 [ 125.093883][ T6685] [ 125.093947][ T6685] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20251212/psparse-529) [ 125.851408][ T5827] Bluetooth: hci0: command 0x0c1a tx timeout [ 126.224469][ T6712] XFS: Clearing xfsstats [ 126.239571][ T6712] futex_wake_op: syz.3.251 tries to shift op by -2048; fix this program [ 126.248544][ T6712] futex_wake_op: syz.3.251 tries to shift op by -2048; fix this program [ 126.276572][ T6712] 0x000000000001-0x000000020000 : "" [ 126.279788][ T6713] XFS: Clearing xfsstats [ 126.306329][ T6713] futex_wake_op: syz.0.252 tries to shift op by -2048; fix this program [ 126.319438][ T6712] ftl_cs: FTL header corrupt! [ 126.338708][ T6713] futex_wake_op: syz.0.252 tries to shift op by -2048; fix this program [ 126.650033][ T5827] Bluetooth: hci1: command 0x0c1a tx timeout [ 126.730014][ T5827] Bluetooth: hci3: command 0x0c1a tx timeout [ 126.731065][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 127.035499][ T6727] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 127.122978][ T6735] input: 00 [ 127.122978][ T6735] as /devices/virtual/input/input8 [ 127.281858][ T6738] XFS: Clearing xfsstats [ 127.311970][ T6738] futex_wake_op: syz.2.256 tries to shift op by -2048; fix this program [ 127.328494][ T6738] futex_wake_op: syz.2.256 tries to shift op by -2048; fix this program [ 127.794467][ T6753] netlink: 342 bytes leftover after parsing attributes in process `syz.1.262'. [ 127.834205][ T6753] netlink: 274 bytes leftover after parsing attributes in process `syz.1.262'. [ 127.994512][ T6758] RDS: rds_bind could not find a transport for ::ffff:300, load rds_tcp or rds_rdma? [ 128.410742][ T6771] XFS: Clearing xfsstats [ 128.433226][ T6771] futex_wake_op: syz.3.267 tries to shift op by -2048; fix this program [ 128.465665][ T6771] futex_wake_op: syz.3.267 tries to shift op by -2048; fix this program [ 128.502894][ T6771] 0x000000000001-0x000000020000 : "" [ 128.581834][ T6771] ftl_cs: FTL header corrupt! [ 129.521983][ T6798] XFS: Clearing xfsstats [ 129.581413][ T6798] futex_wake_op: syz.0.277 tries to shift op by -2048; fix this program [ 129.618515][ T6798] futex_wake_op: syz.0.277 tries to shift op by -2048; fix this program [ 129.758282][ T6794] 0x000000000001-0x000000020000 : "" [ 129.846355][ T6794] ftl_cs: FTL header corrupt! [ 129.862668][ T6808] sp0: Synchronizing with TNC [ 130.156876][ T6815] netlink: 'syz.1.283': attribute type 35 has an invalid length. [ 130.916705][ T6837] FAULT_INJECTION: forcing a failure. [ 130.916705][ T6837] name failslab, interval 1, probability 0, space 0, times 0 [ 130.930419][ T6837] CPU: 0 UID: 0 PID: 6837 Comm: syz.0.290 Tainted: G L syzkaller #0 PREEMPT(full) [ 130.930463][ T6837] Tainted: [L]=SOFTLOCKUP [ 130.930472][ T6837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 130.930488][ T6837] Call Trace: [ 130.930497][ T6837] [ 130.930507][ T6837] dump_stack_lvl+0x100/0x190 [ 130.930552][ T6837] should_fail_ex.cold+0x5/0xa [ 130.930583][ T6837] should_failslab+0xc2/0x120 [ 130.930618][ T6837] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 130.930646][ T6837] ? __kernfs_new_node+0xd2/0x960 [ 130.930689][ T6837] __kernfs_new_node+0xd2/0x960 [ 130.930730][ T6837] ? __pfx___kernfs_new_node+0x10/0x10 [ 130.930777][ T6837] ? find_held_lock+0x2b/0x80 [ 130.930813][ T6837] ? kernfs_root+0xee/0x2a0 [ 130.930843][ T6837] ? kernfs_root+0xee/0x2a0 [ 130.930880][ T6837] kernfs_new_node+0x11b/0x1a0 [ 130.930915][ T6837] __kernfs_create_file+0x53/0x350 [ 130.930942][ T6837] sysfs_add_file_mode_ns+0x207/0x3c0 [ 130.930974][ T6837] internal_create_group+0x593/0xf40 [ 130.931010][ T6837] ? __pfx_internal_create_group+0x10/0x10 [ 130.931045][ T6837] ? kernfs_create_link+0x1bd/0x240 [ 130.931072][ T6837] internal_create_groups+0x9d/0x150 [ 130.931103][ T6837] device_add+0xf5b/0x1950 [ 130.931128][ T6837] ? __pfx_device_add+0x10/0x10 [ 130.931150][ T6837] ? lockdep_init_map_type+0x5c/0x250 [ 130.931173][ T6837] ? __init_waitqueue_head+0xca/0x150 [ 130.931208][ T6837] netdev_register_kobject+0x1a9/0x3d0 [ 130.931237][ T6837] register_netdevice+0x12e0/0x2210 [ 130.931294][ T6837] ? __pfx_register_netdevice+0x10/0x10 [ 130.931338][ T6837] __tun_chr_ioctl+0x1ded/0x47c0 [ 130.931372][ T6837] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 130.931417][ T6837] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 130.931454][ T6837] ? hook_file_ioctl_common+0x146/0x410 [ 130.931489][ T6837] ? __fget_files+0x21f/0x3d0 [ 130.931518][ T6837] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 130.931554][ T6837] __x64_sys_ioctl+0x18e/0x210 [ 130.931591][ T6837] do_syscall_64+0x106/0xf80 [ 130.931629][ T6837] ? clear_bhb_loop+0x40/0x90 [ 130.931661][ T6837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.931687][ T6837] RIP: 0033:0x7f407e19bf79 [ 130.931709][ T6837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.931734][ T6837] RSP: 002b:00007f407f0bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 130.931761][ T6837] RAX: ffffffffffffffda RBX: 00007f407e415fa0 RCX: 00007f407e19bf79 [ 130.931780][ T6837] RDX: 0000000000000038 RSI: 00000000400454ca RDI: 0000000000000005 [ 130.931798][ T6837] RBP: 00007f407e2327e0 R08: 0000000000000000 R09: 0000000000000000 [ 130.931814][ T6837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.931829][ T6837] R13: 00007f407e416038 R14: 00007f407e415fa0 R15: 00007ffc5ddd3318 [ 130.931862][ T6837] [ 131.422472][ T6840] sp0: Synchronizing with TNC [ 131.460821][ T6844] FAULT_INJECTION: forcing a failure. [ 131.460821][ T6844] name failslab, interval 1, probability 0, space 0, times 0 [ 131.475495][ T6840] sp0: Found TNC [ 131.487503][ T6844] CPU: 0 UID: 0 PID: 6844 Comm: syz.1.293 Tainted: G L syzkaller #0 PREEMPT(full) [ 131.487548][ T6844] Tainted: [L]=SOFTLOCKUP [ 131.487558][ T6844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 131.487575][ T6844] Call Trace: [ 131.487583][ T6844] [ 131.487593][ T6844] dump_stack_lvl+0x100/0x190 [ 131.487638][ T6844] should_fail_ex.cold+0x5/0xa [ 131.487672][ T6844] should_failslab+0xc2/0x120 [ 131.487706][ T6844] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 131.487738][ T6844] ? drm_edid_alloc+0x4d/0x120 [ 131.487773][ T6844] ? __might_fault+0xc5/0x140 [ 131.487810][ T6844] kmemdup_noprof+0x29/0x60 [ 131.487842][ T6844] drm_edid_alloc+0x4d/0x120 [ 131.487878][ T6844] drm_edid_override_set+0x27/0x2c0 [ 131.487925][ T6844] edid_write+0xe3/0x180 [ 131.487968][ T6844] full_proxy_write+0x135/0x1a0 [ 131.488018][ T6844] vfs_write+0x2aa/0x1070 [ 131.488048][ T6844] ? __pfx_full_proxy_write+0x10/0x10 [ 131.488096][ T6844] ? __pfx_vfs_write+0x10/0x10 [ 131.488122][ T6844] ? __fget_files+0x215/0x3d0 [ 131.488159][ T6844] ? __fget_files+0x21f/0x3d0 [ 131.488202][ T6844] ksys_write+0x12a/0x250 [ 131.488230][ T6844] ? __pfx_ksys_write+0x10/0x10 [ 131.488270][ T6844] do_syscall_64+0x106/0xf80 [ 131.488310][ T6844] ? clear_bhb_loop+0x40/0x90 [ 131.488343][ T6844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.488370][ T6844] RIP: 0033:0x7f9c7bd9bf79 [ 131.488393][ T6844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.488420][ T6844] RSP: 002b:00007f9c7ccc2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 131.488446][ T6844] RAX: ffffffffffffffda RBX: 00007f9c7c015fa0 RCX: 00007f9c7bd9bf79 [ 131.488465][ T6844] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 131.488481][ T6844] RBP: 00007f9c7be327e0 R08: 0000000000000000 R09: 0000000000000000 [ 131.488498][ T6844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.488515][ T6844] R13: 00007f9c7c016038 R14: 00007f9c7c015fa0 R15: 00007ffd1aafb0d8 [ 131.488554][ T6844] [ 132.351766][ T6858] XFS: Clearing xfsstats [ 132.486823][ T6849] futex_wake_op: syz.0.295 tries to shift op by -2048; fix this program [ 132.495762][ T6849] futex_wake_op: syz.0.295 tries to shift op by -2048; fix this program [ 132.505641][ T6849] 0x000000000001-0x000000020000 : "" [ 132.531533][ T6849] ftl_cs: FTL header corrupt! [ 132.961343][ T6865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.298'. [ 132.972450][ T6865] netlink: 'syz.1.298': attribute type 1 has an invalid length. [ 132.980175][ T6865] netlink: 13 bytes leftover after parsing attributes in process `syz.1.298'. [ 133.223372][ T6870] FAULT_INJECTION: forcing a failure. [ 133.223372][ T6870] name failslab, interval 1, probability 0, space 0, times 0 [ 133.248680][ T6870] CPU: 0 UID: 0 PID: 6870 Comm: syz.0.300 Tainted: G L syzkaller #0 PREEMPT(full) [ 133.248726][ T6870] Tainted: [L]=SOFTLOCKUP [ 133.248736][ T6870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 133.248752][ T6870] Call Trace: [ 133.248760][ T6870] [ 133.248769][ T6870] dump_stack_lvl+0x100/0x190 [ 133.248814][ T6870] should_fail_ex.cold+0x5/0xa [ 133.248850][ T6870] should_failslab+0xc2/0x120 [ 133.248886][ T6870] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 133.248915][ T6870] ? __kernfs_new_node+0xd2/0x960 [ 133.248956][ T6870] __kernfs_new_node+0xd2/0x960 [ 133.248994][ T6870] ? __pfx___kernfs_new_node+0x10/0x10 [ 133.249038][ T6870] ? find_held_lock+0x2b/0x80 [ 133.249073][ T6870] ? kernfs_root+0xee/0x2a0 [ 133.249104][ T6870] ? kernfs_root+0xee/0x2a0 [ 133.249147][ T6870] kernfs_new_node+0x11b/0x1a0 [ 133.249193][ T6870] __kernfs_create_file+0x53/0x350 [ 133.249223][ T6870] sysfs_add_file_mode_ns+0x207/0x3c0 [ 133.249266][ T6870] internal_create_group+0x593/0xf40 [ 133.249311][ T6870] ? __pfx_internal_create_group+0x10/0x10 [ 133.249353][ T6870] ? kernfs_create_link+0x1bd/0x240 [ 133.249383][ T6870] internal_create_groups+0x9d/0x150 [ 133.249422][ T6870] device_add+0x71a/0x1950 [ 133.249450][ T6870] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 133.249488][ T6870] ? __pfx_device_add+0x10/0x10 [ 133.249514][ T6870] ? lockdep_init_map_type+0x5c/0x250 [ 133.249543][ T6870] ? __init_waitqueue_head+0xca/0x150 [ 133.249584][ T6870] netdev_register_kobject+0x1a9/0x3d0 [ 133.249616][ T6870] register_netdevice+0x12e0/0x2210 [ 133.249668][ T6870] ? __pfx_register_netdevice+0x10/0x10 [ 133.249725][ T6870] ? __pfx_loopback_net_init+0x10/0x10 [ 133.249764][ T6870] register_netdev+0x34/0x50 [ 133.249805][ T6870] loopback_net_init+0x7a/0x170 [ 133.249971][ T6870] ? __pfx_loopback_net_init+0x10/0x10 [ 133.250007][ T6870] ops_init+0x1e2/0x5f0 [ 133.250061][ T6870] setup_net+0x118/0x3a0 [ 133.250102][ T6870] ? __pfx_setup_net+0x10/0x10 [ 133.250164][ T6870] ? lockdep_init_map_type+0x5c/0x250 [ 133.250195][ T6870] ? mutex_init_lockep+0x110/0x150 [ 133.250232][ T6870] copy_net_ns+0x46f/0x7c0 [ 133.250263][ T6870] create_new_namespaces+0x3ea/0xac0 [ 133.250313][ T6870] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 133.250357][ T6870] ksys_unshare+0x455/0xab0 [ 133.250389][ T6870] ? __pfx_ksys_unshare+0x10/0x10 [ 133.250419][ T6870] ? xfd_validate_state+0x129/0x190 [ 133.250466][ T6870] __x64_sys_unshare+0x31/0x40 [ 133.250495][ T6870] do_syscall_64+0x106/0xf80 [ 133.250536][ T6870] ? clear_bhb_loop+0x40/0x90 [ 133.250573][ T6870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.250601][ T6870] RIP: 0033:0x7f407e19bf79 [ 133.250624][ T6870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.250650][ T6870] RSP: 002b:00007f407f0bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 133.250677][ T6870] RAX: ffffffffffffffda RBX: 00007f407e415fa0 RCX: 00007f407e19bf79 [ 133.250696][ T6870] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 133.250713][ T6870] RBP: 00007f407e2327e0 R08: 0000000000000000 R09: 0000000000000000 [ 133.250731][ T6870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.250748][ T6870] R13: 00007f407e416038 R14: 00007f407e415fa0 R15: 00007ffc5ddd3318 [ 133.250785][ T6870] [ 134.508444][ T6896] __vm_enough_memory: pid: 6896, comm: syz.1.308, bytes: 4398046511104 not enough memory for the allocation [ 134.864799][ T6904] XFS: Clearing xfsstats [ 134.874777][ T6904] futex_wake_op: syz.1.309 tries to shift op by -2048; fix this program [ 134.883404][ T6904] futex_wake_op: syz.1.309 tries to shift op by -2048; fix this program [ 134.893829][ T6904] 0x000000000001-0x000000020000 : "" [ 134.914180][ T6904] ftl_cs: FTL header corrupt! [ 134.996507][ T6907] FAULT_INJECTION: forcing a failure. [ 134.996507][ T6907] name failslab, interval 1, probability 0, space 0, times 0 [ 135.039498][ T6907] CPU: 1 UID: 0 PID: 6907 Comm: syz.2.311 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.039543][ T6907] Tainted: [L]=SOFTLOCKUP [ 135.039553][ T6907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 135.039569][ T6907] Call Trace: [ 135.039578][ T6907] [ 135.039588][ T6907] dump_stack_lvl+0x100/0x190 [ 135.039632][ T6907] should_fail_ex.cold+0x5/0xa [ 135.039664][ T6907] should_failslab+0xc2/0x120 [ 135.039697][ T6907] __kmalloc_cache_noprof+0x7a/0x6f0 [ 135.039746][ T6907] ? do_signalfd4+0x14e/0x480 [ 135.039788][ T6907] do_signalfd4+0x14e/0x480 [ 135.039827][ T6907] __x64_sys_signalfd+0x120/0x1a0 [ 135.039863][ T6907] ? __pfx___x64_sys_signalfd+0x10/0x10 [ 135.039910][ T6907] do_syscall_64+0x106/0xf80 [ 135.039948][ T6907] ? clear_bhb_loop+0x40/0x90 [ 135.039980][ T6907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.040009][ T6907] RIP: 0033:0x7f826ef9bf79 [ 135.040031][ T6907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.040058][ T6907] RSP: 002b:00007f826fd77028 EFLAGS: 00000246 ORIG_RAX: 000000000000011a [ 135.040084][ T6907] RAX: ffffffffffffffda RBX: 00007f826f215fa0 RCX: 00007f826ef9bf79 [ 135.040102][ T6907] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 00000000ffffffff [ 135.040119][ T6907] RBP: 00007f826f0327e0 R08: 0000000000000000 R09: 0000000000000000 [ 135.040134][ T6907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.040151][ T6907] R13: 00007f826f216038 R14: 00007f826f215fa0 R15: 00007fffb4cc5e58 [ 135.040187][ T6907] [ 135.825918][ T6923] XFS: Clearing xfsstats [ 135.843682][ T6923] futex_wake_op: syz.3.314 tries to shift op by -2048; fix this program [ 135.859767][ T6923] futex_wake_op: syz.3.314 tries to shift op by -2048; fix this program [ 135.906590][ T6923] 0x000000000001-0x000000020000 : "" [ 136.289725][ T6923] ftl_cs: FTL header corrupt! [ 136.458617][ T6932] XFS: Clearing xfsstats [ 136.524817][ T6925] sp0: Synchronizing with TNC [ 136.530312][ T6932] futex_wake_op: syz.1.316 tries to shift op by -2048; fix this program [ 136.622065][ T6932] futex_wake_op: syz.1.316 tries to shift op by -2048; fix this program [ 136.697200][ T6932] 0x000000000001-0x000000020000 : "" [ 136.787535][ T6932] ftl_cs: FTL header corrupt! [ 138.097337][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.104371][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.143699][ T29] audit: type=1107 audit(1770916050.728:2): pid=6959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 138.162968][ T29] audit: type=1107 audit(1770916050.738:3): pid=6959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 138.814018][ T6989] XFS: Clearing xfsstats [ 138.876449][ T6989] futex_wake_op: syz.3.331 tries to shift op by -2048; fix this program [ 138.889135][ T6989] futex_wake_op: syz.3.331 tries to shift op by -2048; fix this program [ 138.915603][ T6989] 0x000000000001-0x000000020000 : "" [ 138.954909][ T6989] ftl_cs: FTL header corrupt! [ 139.552609][ T7007] FAULT_INJECTION: forcing a failure. [ 139.552609][ T7007] name failslab, interval 1, probability 0, space 0, times 0 [ 139.593648][ T7007] CPU: 1 UID: 0 PID: 7007 Comm: syz.0.335 Tainted: G L syzkaller #0 PREEMPT(full) [ 139.593696][ T7007] Tainted: [L]=SOFTLOCKUP [ 139.593706][ T7007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 139.593722][ T7007] Call Trace: [ 139.593731][ T7007] [ 139.593741][ T7007] dump_stack_lvl+0x100/0x190 [ 139.593788][ T7007] should_fail_ex.cold+0x5/0xa [ 139.593820][ T7007] ? tomoyo_encode2+0xfb/0x3c0 [ 139.593853][ T7007] should_failslab+0xc2/0x120 [ 139.593888][ T7007] __kmalloc_noprof+0xe0/0x850 [ 139.593913][ T7007] ? d_absolute_path+0x136/0x1b0 [ 139.593961][ T7007] tomoyo_encode2+0xfb/0x3c0 [ 139.594001][ T7007] tomoyo_encode+0x29/0x50 [ 139.594033][ T7007] tomoyo_realpath_from_path+0x18c/0x690 [ 139.594077][ T7007] tomoyo_get_exe+0x63/0xa0 [ 139.594120][ T7007] tomoyo_write_control+0x69e/0x13a0 [ 139.594175][ T7007] ? __pfx_tomoyo_write_control+0x10/0x10 [ 139.594225][ T7007] vfs_write+0x2aa/0x1070 [ 139.594254][ T7007] ? __pfx_tomoyo_write+0x10/0x10 [ 139.594292][ T7007] ? __pfx_vfs_write+0x10/0x10 [ 139.594319][ T7007] ? __fget_files+0x215/0x3d0 [ 139.594355][ T7007] ? __fget_files+0x21f/0x3d0 [ 139.594399][ T7007] ksys_write+0x12a/0x250 [ 139.594427][ T7007] ? __pfx_ksys_write+0x10/0x10 [ 139.594475][ T7007] do_syscall_64+0x106/0xf80 [ 139.594517][ T7007] ? clear_bhb_loop+0x40/0x90 [ 139.594550][ T7007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.594579][ T7007] RIP: 0033:0x7f407e19bf79 [ 139.594602][ T7007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.594628][ T7007] RSP: 002b:00007f407f0bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 139.594655][ T7007] RAX: ffffffffffffffda RBX: 00007f407e415fa0 RCX: 00007f407e19bf79 [ 139.594674][ T7007] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 139.594690][ T7007] RBP: 00007f407e2327e0 R08: 0000000000000000 R09: 0000000000000000 [ 139.594707][ T7007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.594724][ T7007] R13: 00007f407e416038 R14: 00007f407e415fa0 R15: 00007ffc5ddd3318 [ 139.594763][ T7007] [ 139.594894][ T7007] ERROR: Out of memory at tomoyo_realpath_from_path. [ 139.871493][ T7009] FAULT_INJECTION: forcing a failure. [ 139.871493][ T7009] name failslab, interval 1, probability 0, space 0, times 0 [ 139.884929][ T7009] CPU: 1 UID: 0 PID: 7009 Comm: syz.2.337 Tainted: G L syzkaller #0 PREEMPT(full) [ 139.884955][ T7009] Tainted: [L]=SOFTLOCKUP [ 139.884960][ T7009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 139.884968][ T7009] Call Trace: [ 139.884973][ T7009] [ 139.884981][ T7009] dump_stack_lvl+0x100/0x190 [ 139.885006][ T7009] should_fail_ex.cold+0x5/0xa [ 139.885023][ T7009] ? __register_sysctl_table+0xbe4/0x1650 [ 139.885045][ T7009] should_failslab+0xc2/0x120 [ 139.885063][ T7009] __kmalloc_noprof+0xe0/0x850 [ 139.885081][ T7009] __register_sysctl_table+0xbe4/0x1650 [ 139.885106][ T7009] ? __pfx___register_sysctl_table+0x10/0x10 [ 139.885127][ T7009] ? is_module_address+0x69/0xf0 [ 139.885140][ T7009] ? register_net_sysctl_sz+0x222/0x430 [ 139.885156][ T7009] ? __asan_memcpy+0x3c/0x60 [ 139.885180][ T7009] nf_log_net_init+0x109/0x450 [ 139.885204][ T7009] ? __pfx_nf_log_net_init+0x10/0x10 [ 139.885226][ T7009] ops_init+0x1e2/0x5f0 [ 139.885259][ T7009] setup_net+0x118/0x3a0 [ 139.885281][ T7009] ? __pfx_setup_net+0x10/0x10 [ 139.885302][ T7009] ? lockdep_init_map_type+0x5c/0x250 [ 139.885317][ T7009] ? mutex_init_lockep+0x110/0x150 [ 139.885335][ T7009] copy_net_ns+0x46f/0x7c0 [ 139.885350][ T7009] create_new_namespaces+0x3ea/0xac0 [ 139.885376][ T7009] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 139.885398][ T7009] ksys_unshare+0x455/0xab0 [ 139.885414][ T7009] ? __pfx_ksys_unshare+0x10/0x10 [ 139.885429][ T7009] ? xfd_validate_state+0x129/0x190 [ 139.885452][ T7009] __x64_sys_unshare+0x31/0x40 [ 139.885466][ T7009] do_syscall_64+0x106/0xf80 [ 139.885491][ T7009] ? clear_bhb_loop+0x40/0x90 [ 139.885508][ T7009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.885522][ T7009] RIP: 0033:0x7f826ef9bf79 [ 139.885535][ T7009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.885549][ T7009] RSP: 002b:00007f826fd77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 139.885564][ T7009] RAX: ffffffffffffffda RBX: 00007f826f215fa0 RCX: 00007f826ef9bf79 [ 139.885573][ T7009] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 139.885582][ T7009] RBP: 00007f826f0327e0 R08: 0000000000000000 R09: 0000000000000000 [ 139.885590][ T7009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.885599][ T7009] R13: 00007f826f216038 R14: 00007f826f215fa0 R15: 00007fffb4cc5e58 [ 139.885619][ T7009] [ 139.885626][ T7009] sysctl could not get directory: /net/netfilter/nf_log -12 [ 140.468745][ T7019] XFS: Clearing xfsstats [ 140.476667][ T7019] futex_wake_op: syz.3.340 tries to shift op by -2048; fix this program [ 140.485680][ T7019] futex_wake_op: syz.3.340 tries to shift op by -2048; fix this program [ 140.499995][ T7019] 0x000000000001-0x000000020000 : "" [ 140.511428][ T7019] ftl_cs: FTL header corrupt! [ 140.611865][ T7025] netlink: 25 bytes leftover after parsing attributes in process `syz.1.342'. [ 141.271750][ T7043] XFS: Clearing xfsstats [ 141.319459][ T7043] futex_wake_op: syz.2.347 tries to shift op by -2048; fix this program [ 141.328211][ T7043] futex_wake_op: syz.2.347 tries to shift op by -2048; fix this program [ 141.358650][ T7043] 0x000000000001-0x000000020000 : "" [ 141.425996][ T7043] ftl_cs: FTL header corrupt! [ 142.122026][ T7069] XFS: Clearing xfsstats [ 142.166432][ T7069] futex_wake_op: syz.0.354 tries to shift op by -2048; fix this program [ 142.207363][ T7069] futex_wake_op: syz.0.354 tries to shift op by -2048; fix this program [ 142.224445][ T7074] XFS: Clearing xfsstats [ 142.257252][ T7074] futex_wake_op: syz.2.355 tries to shift op by -2048; fix this program [ 142.289235][ T7074] futex_wake_op: syz.2.355 tries to shift op by -2048; fix this program [ 142.300093][ T7069] 0x000000000001-0x000000020000 : "" [ 142.326131][ T7069] ftl_cs: FTL header corrupt! [ 142.732209][ T7079] sp0: Synchronizing with TNC [ 143.167917][ T7094] netlink: 28 bytes leftover after parsing attributes in process `syz.2.360'. [ 143.191999][ T7094] veth1_macvtap: left promiscuous mode [ 143.460254][ T7091] ima: policy update failed [ 143.466164][ T29] audit: type=1802 audit(1770916056.048:4): pid=7091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.359" res=0 errno=0 [ 144.137950][ T7119] XFS: Clearing xfsstats [ 144.151377][ T7119] futex_wake_op: syz.1.366 tries to shift op by -2048; fix this program [ 144.159827][ T7119] futex_wake_op: syz.1.366 tries to shift op by -2048; fix this program [ 144.179365][ T7119] 0x000000000001-0x000000020000 : "" [ 144.203044][ T7119] ftl_cs: FTL header corrupt! [ 145.062693][ T7144] XFS: Clearing xfsstats [ 145.085617][ T7144] futex_wake_op: syz.1.371 tries to shift op by -2048; fix this program [ 145.157610][ T7144] futex_wake_op: syz.1.371 tries to shift op by -2048; fix this program [ 145.190972][ T7148] XFS: Clearing xfsstats [ 145.196565][ T7144] 0x000000000001-0x000000020000 : "" [ 145.217602][ T7148] futex_wake_op: syz.0.373 tries to shift op by -2048; fix this program [ 145.226490][ T7148] futex_wake_op: syz.0.373 tries to shift op by -2048; fix this program [ 145.290288][ T7144] ftl_cs: FTL header corrupt! [ 145.406519][ T7148] 0x000000000001-0x000000020000 : "" [ 145.506966][ T7148] ftl_cs: FTL header corrupt! [ 146.343154][ T7170] sp0: Synchronizing with TNC [ 146.440719][ T7174] XFS: Clearing xfsstats [ 146.482474][ T7174] futex_wake_op: syz.1.380 tries to shift op by -2048; fix this program [ 146.492468][ T7174] futex_wake_op: syz.1.380 tries to shift op by -2048; fix this program [ 146.533452][ T7174] 0x000000000001-0x000000020000 : "" [ 146.559355][ T7174] ftl_cs: FTL header corrupt! [ 147.354313][ T7193] XFS: Clearing xfsstats [ 147.401836][ T7193] futex_wake_op: syz.3.384 tries to shift op by -2048; fix this program [ 147.428867][ T7193] futex_wake_op: syz.3.384 tries to shift op by -2048; fix this program [ 147.586230][ T7197] 0x000000000001-0x000000020000 : "" [ 147.673261][ T7197] ftl_cs: FTL header corrupt! [ 148.499777][ T7221] vhci_hcd: not connected 4 [ 148.675174][ T7227] netlink: 338 bytes leftover after parsing attributes in process `syz.1.396'. [ 148.750928][ T7227] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.759064][ T7227] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.858280][ T7228] XFS: Clearing xfsstats [ 149.009555][ T7228] 0x000000000001-0x000000020000 : "" [ 149.240568][ T7228] ftl_cs: FTL header corrupt! [ 149.747867][ T7242] FAULT_INJECTION: forcing a failure. [ 149.747867][ T7242] name failslab, interval 1, probability 0, space 0, times 0 [ 149.791517][ T7242] CPU: 1 UID: 0 PID: 7242 Comm: syz.0.399 Tainted: G L syzkaller #0 PREEMPT(full) [ 149.791566][ T7242] Tainted: [L]=SOFTLOCKUP [ 149.791576][ T7242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 149.791593][ T7242] Call Trace: [ 149.791602][ T7242] [ 149.791612][ T7242] dump_stack_lvl+0x100/0x190 [ 149.791659][ T7242] should_fail_ex.cold+0x5/0xa [ 149.791690][ T7242] ? ima_alloc_init_template+0xb6/0x6d0 [ 149.791735][ T7242] should_failslab+0xc2/0x120 [ 149.791769][ T7242] __kmalloc_noprof+0xe0/0x850 [ 149.791793][ T7242] ? find_held_lock+0x2b/0x80 [ 149.791826][ T7242] ? take_dentry_name_snapshot+0x30b/0x7c0 [ 149.791870][ T7242] ima_alloc_init_template+0xb6/0x6d0 [ 149.791916][ T7242] ? take_dentry_name_snapshot+0x310/0x7c0 [ 149.791961][ T7242] ima_store_measurement+0x1e3/0x5b0 [ 149.791991][ T7242] ? __pfx_ima_store_measurement+0x10/0x10 [ 149.792033][ T7242] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 149.792078][ T7242] process_measurement+0x19cc/0x2350 [ 149.792133][ T7242] ? __pfx_process_measurement+0x10/0x10 [ 149.792175][ T7242] ? kasan_save_stack+0x3f/0x50 [ 149.792203][ T7242] ? kasan_save_track+0x14/0x30 [ 149.792239][ T7242] ? find_held_lock+0x2b/0x80 [ 149.792286][ T7242] ? aa_file_perm+0x268/0x1530 [ 149.792364][ T7242] ima_file_mmap+0x1c4/0x1f0 [ 149.792407][ T7242] ? __pfx_ima_file_mmap+0x10/0x10 [ 149.792455][ T7242] security_mmap_file+0x278/0x9b0 [ 149.792488][ T7242] vm_mmap_pgoff+0xec/0x470 [ 149.792527][ T7242] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 149.792560][ T7242] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 149.792600][ T7242] ? hugetlbfs_get_inode+0x36e/0x6f0 [ 149.792654][ T7242] ksys_mmap_pgoff+0x1c4/0x5b0 [ 149.792696][ T7242] __x64_sys_mmap+0x125/0x190 [ 149.792735][ T7242] do_syscall_64+0x106/0xf80 [ 149.792773][ T7242] ? clear_bhb_loop+0x40/0x90 [ 149.792807][ T7242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.792834][ T7242] RIP: 0033:0x7f407e19bf79 [ 149.792856][ T7242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.792882][ T7242] RSP: 002b:00007f407f0bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 149.792907][ T7242] RAX: ffffffffffffffda RBX: 00007f407e415fa0 RCX: 00007f407e19bf79 [ 149.792924][ T7242] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 149.792940][ T7242] RBP: 00007f407e2327e0 R08: 0000000000000401 R09: 0000300000000000 [ 149.792956][ T7242] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 149.792972][ T7242] R13: 00007f407e416038 R14: 00007f407e415fa0 R15: 00007ffc5ddd3318 [ 149.793010][ T7242] [ 149.809227][ T29] audit: type=1804 audit(1770916062.378:5): pid=7242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.0.399" name="anon_hugepage" dev="hugetlbfs" ino=19976 res=0 errno=0 [ 150.801934][ T7256] XFS: Clearing xfsstats [ 151.069562][ T7254] futex_atomic_op_inuser: 2 callbacks suppressed [ 151.069578][ T7254] futex_wake_op: syz.0.402 tries to shift op by -2048; fix this program [ 151.069648][ T7254] futex_wake_op: syz.0.402 tries to shift op by -2048; fix this program [ 151.148682][ T7254] 0x000000000001-0x000000020000 : "" [ 151.164744][ T7254] ftl_cs: FTL header corrupt! [ 153.511712][ T7290] smpboot: CPU 1 is now offline [ 153.714775][ T7292] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 153.979786][ T7301] XFS: Clearing xfsstats [ 154.089597][ T7299] futex_wake_op: syz.2.415 tries to shift op by -2048; fix this program [ 154.131659][ T7299] futex_wake_op: syz.2.415 tries to shift op by -2048; fix this program [ 154.160765][ T7301] 0x000000000001-0x000000020000 : "" [ 154.183480][ T7301] ftl_cs: FTL header corrupt! [ 154.543306][ T7304] futex_wake_op: syz.3.416 tries to shift op by -2048; fix this program [ 154.560202][ T7304] futex_wake_op: syz.3.416 tries to shift op by -2048; fix this program [ 155.089479][ T7309] sp0: Synchronizing with TNC [ 155.220686][ T7320] netlink: 338 bytes leftover after parsing attributes in process `syz.3.420'. [ 155.221725][ T7320] netlink: 338 bytes leftover after parsing attributes in process `syz.3.420'. [ 155.351695][ T7320] netlink: 290 bytes leftover after parsing attributes in process `syz.3.420'. [ 155.794371][ T7327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.423'. [ 155.838174][ T7327] netlink: 13 bytes leftover after parsing attributes in process `syz.0.423'. [ 157.441422][ T7355] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input9 [ 157.702233][ T7360] random: crng reseeded on system resumption [ 158.050763][ T7362] zswap: compressor not available [ 158.773638][ T7381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.440'. [ 158.822770][ T7381] netlink: 13 bytes leftover after parsing attributes in process `syz.2.440'. [ 158.910916][ T7386] XFS: Clearing xfsstats [ 159.395543][ T7386] futex_wake_op: syz.0.448 tries to shift op by -2048; fix this program [ 159.409108][ T7386] futex_wake_op: syz.0.448 tries to shift op by -2048; fix this program [ 159.439960][ T7386] 0x000000000001-0x000000020000 : "" [ 159.561594][ T7386] ftl_cs: FTL header corrupt! [ 159.763949][ T7397] XFS: Clearing xfsstats [ 159.804261][ T7397] futex_wake_op: syz.2.442 tries to shift op by -2048; fix this program [ 159.826133][ T7397] futex_wake_op: syz.2.442 tries to shift op by -2048; fix this program [ 159.886922][ T7397] 0x000000000001-0x000000020000 : "" [ 159.978199][ T7397] ftl_cs: FTL header corrupt! [ 160.541145][ T7409] netlink: 306 bytes leftover after parsing attributes in process `syz.3.445'. [ 161.794998][ T7432] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 162.149316][ T7442] netlink: 9 bytes leftover after parsing attributes in process `syz.0.455'. [ 162.275221][ T7444] netlink: 338 bytes leftover after parsing attributes in process `syz.1.456'. [ 162.349332][ T7445] netlink: 338 bytes leftover after parsing attributes in process `syz.1.456'. [ 162.394168][ T7444] netlink: 290 bytes leftover after parsing attributes in process `syz.1.456'. [ 162.542514][ T7452] netlink: 246 bytes leftover after parsing attributes in process `syz.2.458'. [ 163.357651][ T7464] FAULT_INJECTION: forcing a failure. [ 163.357651][ T7464] name failslab, interval 1, probability 0, space 0, times 0 [ 163.432660][ T29] audit: type=1326 audit(1770916076.018:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7466 comm="syz.2.464" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f826ef9bf79 code=0x0 [ 163.461202][ T7464] CPU: 1 UID: 0 PID: 7464 Comm: syz.0.463 Tainted: G L syzkaller #0 PREEMPT(full) [ 163.461229][ T7464] Tainted: [L]=SOFTLOCKUP [ 163.461234][ T7464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 163.461243][ T7464] Call Trace: [ 163.461248][ T7464] [ 163.461254][ T7464] dump_stack_lvl+0x100/0x190 [ 163.461280][ T7464] should_fail_ex.cold+0x5/0xa [ 163.461298][ T7464] should_failslab+0xc2/0x120 [ 163.461316][ T7464] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 163.461331][ T7464] ? __alloc_skb+0x140/0x710 [ 163.461354][ T7464] __alloc_skb+0x140/0x710 [ 163.461374][ T7464] ? __pfx___alloc_skb+0x10/0x10 [ 163.461398][ T7464] tipc_buf_acquire+0x26/0xe0 [ 163.461424][ T7464] tipc_msg_create+0x39/0x1d0 [ 163.461444][ T7464] tipc_group_proto_xmit+0x150/0x7c0 [ 163.461469][ T7464] tipc_group_delete+0xf8/0x4a0 [ 163.461488][ T7464] ? __call_rcu_common.constprop.0+0xa5/0x9b0 [ 163.461503][ T7464] ? kmem_cache_free+0x419/0x670 [ 163.461523][ T7464] ? __fput+0x68a/0xb40 [ 163.461542][ T7464] ? __pfx_tipc_group_delete+0x10/0x10 [ 163.461567][ T7464] ? __tipc_shutdown+0x855/0xed0 [ 163.461582][ T7464] ? __lock_acquire+0x485/0x2630 [ 163.461602][ T7464] tipc_sk_leave+0x10e/0x1c0 [ 163.461623][ T7464] ? __pfx_tipc_sk_leave+0x10/0x10 [ 163.461644][ T7464] ? __pfx_woken_wake_function+0x10/0x10 [ 163.461664][ T7464] ? tipc_sk_filtering+0x47d/0x590 [ 163.461682][ T7464] tipc_release+0x11f/0x1640 [ 163.461699][ T7464] ? down_write+0x146/0x1f0 [ 163.461712][ T7464] ? __pfx_down_write+0x10/0x10 [ 163.461726][ T7464] ? __pfx_locks_remove_file+0x10/0x10 [ 163.461743][ T7464] __sock_release+0xb3/0x260 [ 163.461764][ T7464] ? __pfx_sock_close+0x10/0x10 [ 163.461785][ T7464] sock_close+0x1c/0x30 [ 163.461804][ T7464] __fput+0x3ff/0xb40 [ 163.461823][ T7464] ? _raw_spin_unlock_irq+0x23/0x50 [ 163.461843][ T7464] task_work_run+0x150/0x240 [ 163.461861][ T7464] ? __pfx_task_work_run+0x10/0x10 [ 163.461882][ T7464] exit_to_user_mode_loop+0x100/0x4a0 [ 163.461896][ T7464] ? rcu_is_watching+0x12/0xc0 [ 163.461915][ T7464] do_syscall_64+0x668/0xf80 [ 163.461935][ T7464] ? clear_bhb_loop+0x40/0x90 [ 163.461952][ T7464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.461966][ T7464] RIP: 0033:0x7f407e19bf79 [ 163.461980][ T7464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.461993][ T7464] RSP: 002b:00007f407f0bf028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 163.462008][ T7464] RAX: 0000000000000000 RBX: 00007f407e415fa0 RCX: 00007f407e19bf79 [ 163.462017][ T7464] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 163.462025][ T7464] RBP: 00007f407e2327e0 R08: 0000000000000000 R09: 0000000000000000 [ 163.462033][ T7464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.462042][ T7464] R13: 00007f407e416038 R14: 00007f407e415fa0 R15: 00007ffc5ddd3318 [ 163.462068][ T7464] [ 164.169666][ T7475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.467'. [ 164.206112][ T7475] netlink: 25 bytes leftover after parsing attributes in process `syz.1.467'. [ 164.484547][ T7482] netlink: 342 bytes leftover after parsing attributes in process `syz.1.469'. [ 165.233578][ T7500] zswap: compressor not available [ 165.962563][ T7518] sp0: Synchronizing with TNC [ 166.437537][ T7528] XFS: Clearing xfsstats [ 166.471423][ T7528] futex_wake_op: syz.3.479 tries to shift op by -2048; fix this program [ 166.508468][ T7528] futex_wake_op: syz.3.479 tries to shift op by -2048; fix this program [ 166.647733][ T7528] 0x000000000001-0x000000020000 : "" [ 166.766559][ T7528] ftl_cs: FTL header corrupt! [ 167.726013][ T7549] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 167.858881][ T7552] FAULT_INJECTION: forcing a failure. [ 167.858881][ T7552] name failslab, interval 1, probability 0, space 0, times 0 [ 167.874635][ T7552] CPU: 1 UID: 0 PID: 7552 Comm: syz.1.486 Tainted: G L syzkaller #0 PREEMPT(full) [ 167.874681][ T7552] Tainted: [L]=SOFTLOCKUP [ 167.874692][ T7552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 167.874708][ T7552] Call Trace: [ 167.874717][ T7552] [ 167.874728][ T7552] dump_stack_lvl+0x100/0x190 [ 167.874773][ T7552] should_fail_ex.cold+0x5/0xa [ 167.874806][ T7552] should_failslab+0xc2/0x120 [ 167.874840][ T7552] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 167.874868][ T7552] ? acpi_ps_alloc_op+0x29d/0x360 [ 167.874907][ T7552] acpi_ps_alloc_op+0x29d/0x360 [ 167.874944][ T7552] ? acpi_ut_status_exit+0x111/0x1c0 [ 167.874984][ T7552] acpi_ps_create_op+0x4b3/0xd10 [ 167.875015][ T7552] ? __pfx_acpi_ps_create_op+0x10/0x10 [ 167.875053][ T7552] ? acpi_ut_status_exit+0x111/0x1c0 [ 167.875092][ T7552] acpi_ps_parse_loop+0xa65/0x24a0 [ 167.875130][ T7552] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 167.875158][ T7552] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 167.875184][ T7552] ? acpi_ut_create_thread_state+0x6d/0x170 [ 167.875224][ T7552] acpi_ps_parse_aml+0x81e/0x1120 [ 167.875260][ T7552] acpi_ps_execute_method+0x5c4/0xe90 [ 167.875300][ T7552] acpi_ns_evaluate+0x640/0x1670 [ 167.875344][ T7552] acpi_evaluate_object+0x420/0xe00 [ 167.875386][ T7552] ? kasan_save_stack+0x30/0x50 [ 167.875412][ T7552] ? kasan_save_track+0x14/0x30 [ 167.875447][ T7552] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 167.875494][ T7552] ? __pfx___might_resched+0x10/0x10 [ 167.875533][ T7552] acpi_evaluate_integer+0xdf/0x220 [ 167.875571][ T7552] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 167.875626][ T7552] ? __pfx_status_show+0x10/0x10 [ 167.875667][ T7552] status_show+0xa0/0x120 [ 167.875708][ T7552] ? __pfx_status_show+0x10/0x10 [ 167.875761][ T7552] dev_attr_show+0x52/0xa0 [ 167.875790][ T7552] ? __pfx_dev_attr_show+0x10/0x10 [ 167.875816][ T7552] sysfs_kf_seq_show+0x217/0x3a0 [ 167.875862][ T7552] seq_read_iter+0x32f/0x1270 [ 167.875906][ T7552] kernfs_fop_read_iter+0x46c/0x610 [ 167.875942][ T7552] ? rw_verify_area+0xce/0x6d0 [ 167.875986][ T7552] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 167.876017][ T7552] vfs_read+0x825/0xb30 [ 167.876051][ T7552] ? __pfx_vfs_read+0x10/0x10 [ 167.876103][ T7552] ksys_read+0x12a/0x250 [ 167.876130][ T7552] ? __pfx_ksys_read+0x10/0x10 [ 167.876169][ T7552] do_syscall_64+0x106/0xf80 [ 167.876209][ T7552] ? clear_bhb_loop+0x40/0x90 [ 167.876243][ T7552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.876271][ T7552] RIP: 0033:0x7f9c7bd9bf79 [ 167.876300][ T7552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.876327][ T7552] RSP: 002b:00007f9c7ccc2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 167.876354][ T7552] RAX: ffffffffffffffda RBX: 00007f9c7c015fa0 RCX: 00007f9c7bd9bf79 [ 167.876373][ T7552] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000005 [ 167.876391][ T7552] RBP: 00007f9c7be327e0 R08: 0000000000000000 R09: 0000000000000000 [ 167.876407][ T7552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.876424][ T7552] R13: 00007f9c7c016038 R14: 00007f9c7c015fa0 R15: 00007ffd1aafb0d8 [ 167.876462][ T7552] [ 167.876530][ T7552] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20251212/psparse-529) [ 168.523913][ T7558] smpboot: CPU 1 is now offline [ 168.681056][ T7561] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 170.362459][ T7580] zswap: compressor not available [ 170.653403][ T7591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.494'. [ 170.707376][ T7591] netlink: 25 bytes leftover after parsing attributes in process `syz.0.494'. [ 170.723035][ T7593] XFS: Clearing xfsstats [ 170.793993][ T7593] futex_wake_op: syz.3.496 tries to shift op by -2048; fix this program [ 170.830026][ T7593] futex_wake_op: syz.3.496 tries to shift op by -2048; fix this program [ 170.937926][ T7593] 0x001c00000000-0x100002c00000200 : "" [ 170.943817][ T7593] mtd: partition "" is out of reach -- disabled [ 171.004962][ T7593] ftl_cs: FTL header not found. [ 171.561643][ T7617] XFS: Clearing xfsstats [ 171.583887][ T7617] futex_wake_op: syz.3.503 tries to shift op by -2048; fix this program [ 171.601029][ T7617] futex_wake_op: syz.3.503 tries to shift op by -2048; fix this program [ 171.621543][ T7617] 0x000000000001-0x000000020000 : "" [ 171.644822][ T7617] ftl_cs: FTL header corrupt! [ 172.263856][ T7627] netlink: 'syz.3.506': attribute type 4 has an invalid length. [ 172.282827][ T7627] netlink: 'syz.3.506': attribute type 5 has an invalid length. [ 172.291025][ T7627] netlink: 10 bytes leftover after parsing attributes in process `syz.3.506'. [ 172.431698][ T7637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.509'. [ 172.442719][ T7637] netlink: 25 bytes leftover after parsing attributes in process `syz.3.509'. [ 172.761657][ T7644] FAULT_INJECTION: forcing a failure. [ 172.761657][ T7644] name failslab, interval 1, probability 0, space 0, times 0 [ 172.800411][ T7644] CPU: 0 UID: 0 PID: 7644 Comm: syz.3.512 Tainted: G L syzkaller #0 PREEMPT(full) [ 172.800468][ T7644] Tainted: [L]=SOFTLOCKUP [ 172.800478][ T7644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 172.800495][ T7644] Call Trace: [ 172.800503][ T7644] [ 172.800513][ T7644] dump_stack_lvl+0x100/0x190 [ 172.800558][ T7644] should_fail_ex.cold+0x5/0xa [ 172.800582][ T7644] should_failslab+0xc2/0x120 [ 172.800600][ T7644] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 172.800617][ T7644] ? __alloc_skb+0x140/0x710 [ 172.800640][ T7644] __alloc_skb+0x140/0x710 [ 172.800659][ T7644] ? __pfx___alloc_skb+0x10/0x10 [ 172.800684][ T7644] tipc_buf_acquire+0x26/0xe0 [ 172.800702][ T7644] tipc_msg_create+0x39/0x1d0 [ 172.800722][ T7644] tipc_group_proto_xmit+0x150/0x7c0 [ 172.800746][ T7644] tipc_group_delete+0xf8/0x4a0 [ 172.800765][ T7644] ? __call_rcu_common.constprop.0+0xa5/0x9b0 [ 172.800780][ T7644] ? kmem_cache_free+0x419/0x670 [ 172.800803][ T7644] ? __fput+0x68a/0xb40 [ 172.800823][ T7644] ? __pfx_tipc_group_delete+0x10/0x10 [ 172.800847][ T7644] ? __tipc_shutdown+0x855/0xed0 [ 172.800862][ T7644] ? __lock_acquire+0x485/0x2630 [ 172.800882][ T7644] tipc_sk_leave+0x10e/0x1c0 [ 172.800904][ T7644] ? __pfx_tipc_sk_leave+0x10/0x10 [ 172.800925][ T7644] ? __pfx_woken_wake_function+0x10/0x10 [ 172.800945][ T7644] ? tipc_sk_filtering+0x47d/0x590 [ 172.800963][ T7644] tipc_release+0x11f/0x1640 [ 172.800979][ T7644] ? down_write+0x146/0x1f0 [ 172.800993][ T7644] ? __pfx_down_write+0x10/0x10 [ 172.801007][ T7644] ? __pfx_locks_remove_file+0x10/0x10 [ 172.801024][ T7644] __sock_release+0xb3/0x260 [ 172.801045][ T7644] ? __pfx_sock_close+0x10/0x10 [ 172.801066][ T7644] sock_close+0x1c/0x30 [ 172.801086][ T7644] __fput+0x3ff/0xb40 [ 172.801105][ T7644] ? _raw_spin_unlock_irq+0x23/0x50 [ 172.801125][ T7644] task_work_run+0x150/0x240 [ 172.801142][ T7644] ? __pfx_task_work_run+0x10/0x10 [ 172.801164][ T7644] exit_to_user_mode_loop+0x100/0x4a0 [ 172.801182][ T7644] ? rcu_is_watching+0x12/0xc0 [ 172.801201][ T7644] do_syscall_64+0x668/0xf80 [ 172.801221][ T7644] ? clear_bhb_loop+0x40/0x90 [ 172.801238][ T7644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.801252][ T7644] RIP: 0033:0x7f1ad659bf79 [ 172.801266][ T7644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.801280][ T7644] RSP: 002b:00007f1ad7520028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 172.801294][ T7644] RAX: 0000000000000000 RBX: 00007f1ad6815fa0 RCX: 00007f1ad659bf79 [ 172.801304][ T7644] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 172.801313][ T7644] RBP: 00007f1ad66327e0 R08: 0000000000000000 R09: 0000000000000000 [ 172.801322][ T7644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.801331][ T7644] R13: 00007f1ad6816038 R14: 00007f1ad6815fa0 R15: 00007ffd13c1fb18 [ 172.801352][ T7644] [ 173.106417][ T7646] XFS: Clearing xfsstats [ 173.114142][ T7646] futex_wake_op: syz.2.511 tries to shift op by -2048; fix this program [ 173.122746][ T7646] futex_wake_op: syz.2.511 tries to shift op by -2048; fix this program [ 173.132518][ T7646] 0x000000000001-0x000000020000 : "" [ 173.141889][ T7646] ftl_cs: FTL header corrupt! [ 173.772399][ T7659] XFS: Clearing xfsstats [ 173.781974][ T7659] futex_wake_op: syz.1.515 tries to shift op by -2048; fix this program [ 173.790903][ T7659] futex_wake_op: syz.1.515 tries to shift op by -2048; fix this program [ 173.801548][ T7659] 0x000000000001-0x000000020000 : "" [ 173.907424][ T7659] ftl_cs: FTL header corrupt! [ 174.071050][ T7667] XFS: Clearing xfsstats [ 174.095474][ T7667] futex_wake_op: syz.0.517 tries to shift op by -2048; fix this program [ 174.178563][ T7667] futex_wake_op: syz.0.517 tries to shift op by -2048; fix this program [ 174.287656][ T7672] 0x000000000001-0x000000020000 : "" [ 174.527913][ T7672] ftl_cs: FTL header corrupt! [ 175.462283][ T7697] netlink: 330 bytes leftover after parsing attributes in process `syz.3.524'. [ 175.478241][ T7697] : renamed from bond_slave_0 (while UP) [ 175.537496][ T7697] netlink: 330 bytes leftover after parsing attributes in process `syz.3.524'. [ 176.929917][ T7723] netlink: 330 bytes leftover after parsing attributes in process `syz.0.530'. [ 177.795202][ T7742] futex_wake_op: syz.0.533 tries to shift op by -2048; fix this program [ 177.914063][ T7742] futex_wake_op: syz.0.533 tries to shift op by -2048; fix this program [ 178.022040][ T7747] 0x000000000001-0x000000020000 : "" [ 178.095244][ T7747] ftl_cs: FTL header corrupt! [ 178.868226][ T7767] XFS: Clearing xfsstats [ 178.922028][ T7767] futex_wake_op: syz.3.539 tries to shift op by -2048; fix this program [ 178.948013][ T7767] futex_wake_op: syz.3.539 tries to shift op by -2048; fix this program [ 179.222167][ T7767] 0x000000000001-0x000000020000 : "" [ 179.279349][ T7767] ftl_cs: FTL header corrupt! [ 180.353743][ T7784] FAULT_INJECTION: forcing a failure. [ 180.353743][ T7784] name failslab, interval 1, probability 0, space 0, times 0 [ 180.470545][ T7784] CPU: 1 UID: 0 PID: 7784 Comm: syz.2.544 Tainted: G L syzkaller #0 PREEMPT(full) [ 180.470573][ T7784] Tainted: [L]=SOFTLOCKUP [ 180.470578][ T7784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 180.470587][ T7784] Call Trace: [ 180.470592][ T7784] [ 180.470598][ T7784] dump_stack_lvl+0x100/0x190 [ 180.470624][ T7784] should_fail_ex.cold+0x5/0xa [ 180.470642][ T7784] should_failslab+0xc2/0x120 [ 180.470660][ T7784] __kmalloc_cache_noprof+0x7a/0x6f0 [ 180.470680][ T7784] ? snd_seq_fifo_new+0x42/0x270 [ 180.470700][ T7784] ? _raw_spin_unlock_irq+0x2e/0x50 [ 180.470721][ T7784] ? __pfx_snd_seq_open+0x10/0x10 [ 180.470734][ T7784] snd_seq_fifo_new+0x42/0x270 [ 180.470753][ T7784] snd_seq_open+0x3fe/0x590 [ 180.470768][ T7784] ? __pfx_snd_seq_open+0x10/0x10 [ 180.470780][ T7784] snd_open+0x22d/0x4c0 [ 180.470800][ T7784] ? __pfx_snd_open+0x10/0x10 [ 180.470819][ T7784] chrdev_open+0x234/0x6a0 [ 180.470834][ T7784] ? __pfx_apparmor_file_open+0x10/0x10 [ 180.470856][ T7784] ? __pfx_chrdev_open+0x10/0x10 [ 180.470873][ T7784] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 180.470893][ T7784] do_dentry_open+0x6d8/0x1660 [ 180.470909][ T7784] ? __pfx_chrdev_open+0x10/0x10 [ 180.470931][ T7784] vfs_open+0x82/0x3f0 [ 180.470954][ T7784] path_openat+0x208c/0x31a0 [ 180.470977][ T7784] ? __pfx_path_openat+0x10/0x10 [ 180.470999][ T7784] do_file_open+0x20e/0x430 [ 180.471016][ T7784] ? __pfx_do_file_open+0x10/0x10 [ 180.471045][ T7784] ? alloc_fd+0x476/0x790 [ 180.471062][ T7784] ? do_getname+0x191/0x390 [ 180.471082][ T7784] do_sys_openat2+0x10d/0x1e0 [ 180.471101][ T7784] ? __pfx_do_sys_openat2+0x10/0x10 [ 180.471128][ T7784] __x64_sys_openat+0x12d/0x210 [ 180.471148][ T7784] ? __pfx___x64_sys_openat+0x10/0x10 [ 180.471166][ T7784] ? xfd_validate_state+0x129/0x190 [ 180.471190][ T7784] do_syscall_64+0x106/0xf80 [ 180.471211][ T7784] ? clear_bhb_loop+0x40/0x90 [ 180.471228][ T7784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.471242][ T7784] RIP: 0033:0x7f826ef9bf79 [ 180.471255][ T7784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.471268][ T7784] RSP: 002b:00007f826fd77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 180.471283][ T7784] RAX: ffffffffffffffda RBX: 00007f826f215fa0 RCX: 00007f826ef9bf79 [ 180.471292][ T7784] RDX: 00000000001e3800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 180.471301][ T7784] RBP: 00007f826f0327e0 R08: 0000000000000000 R09: 0000000000000000 [ 180.471311][ T7784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.471319][ T7784] R13: 00007f826f216038 R14: 00007f826f215fa0 R15: 00007fffb4cc5e58 [ 180.471339][ T7784] [ 181.425877][ T7802] futex_wake_op: syz.0.548 tries to shift op by -2048; fix this program [ 181.436572][ T7803] FAULT_INJECTION: forcing a failure. [ 181.436572][ T7803] name fail_futex, interval 1, probability 0, space 0, times 1 [ 181.449669][ T7802] futex_wake_op: syz.0.548 tries to shift op by -2048; fix this program [ 181.472157][ T7802] 0x000000000001-0x000000020000 : "" [ 181.500084][ T7803] CPU: 1 UID: 0 PID: 7803 Comm: syz.3.547 Tainted: G L syzkaller #0 PREEMPT(full) [ 181.500130][ T7803] Tainted: [L]=SOFTLOCKUP [ 181.500140][ T7803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 181.500157][ T7803] Call Trace: [ 181.500166][ T7803] [ 181.500176][ T7803] dump_stack_lvl+0x100/0x190 [ 181.500217][ T7803] should_fail_ex.cold+0x5/0xa [ 181.500252][ T7803] get_futex_key+0x1d2/0x1620 [ 181.500298][ T7803] ? __pfx_get_futex_key+0x10/0x10 [ 181.500339][ T7803] ? futex_hash+0x2c5/0x380 [ 181.500398][ T7803] futex_wake+0xea/0x530 [ 181.500431][ T7803] ? __pfx_futex_wait+0x10/0x10 [ 181.500462][ T7803] ? __pfx_futex_wake+0x10/0x10 [ 181.500495][ T7803] ? ksys_write+0x190/0x250 [ 181.500515][ T7803] ? ksys_write+0x190/0x250 [ 181.500532][ T7803] do_futex+0x32b/0x350 [ 181.500546][ T7803] ? __pfx_do_futex+0x10/0x10 [ 181.500560][ T7803] ? cap_task_prctl+0x104/0xa50 [ 181.500581][ T7803] ? __pfx_sched_core_share_pid+0x10/0x10 [ 181.500605][ T7803] __x64_sys_futex+0x34f/0x4d0 [ 181.500622][ T7803] ? __pfx___x64_sys_futex+0x10/0x10 [ 181.500637][ T7803] ? __pfx___do_sys_prctl+0x10/0x10 [ 181.500663][ T7803] do_syscall_64+0x106/0xf80 [ 181.500683][ T7803] ? clear_bhb_loop+0x40/0x90 [ 181.500701][ T7803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.500716][ T7803] RIP: 0033:0x7f1ad659bf79 [ 181.500729][ T7803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.500743][ T7803] RSP: 002b:00007f1ad74ff0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 181.500757][ T7803] RAX: ffffffffffffffda RBX: 00007f1ad6816098 RCX: 00007f1ad659bf79 [ 181.500767][ T7803] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1ad681609c [ 181.500776][ T7803] RBP: 00007f1ad6816090 R08: 0000000000000000 R09: 0000000000000000 [ 181.500785][ T7803] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 181.500794][ T7803] R13: 00007f1ad6816128 R14: 00007ffd13c1fa30 R15: 00007ffd13c1fb18 [ 181.500813][ T7803] [ 181.948759][ T7802] ftl_cs: FTL header corrupt! [ 188.307405][ T7926] netlink: 'syz.2.578': attribute type 1 has an invalid length. [ 188.315749][ T7926] netlink: 17 bytes leftover after parsing attributes in process `syz.2.578'. [ 189.841351][ T7946] ecryptfs_miscdev_write: Invalid packet size [192] [ 190.764571][ T7954] futex_wake_op: syz.2.584 tries to shift op by -2048; fix this program [ 190.773187][ T7954] futex_wake_op: syz.2.584 tries to shift op by -2048; fix this program [ 190.908757][ T7950] 0x000000000001-0x000000020000 : "" [ 190.960068][ T7950] ftl_cs: FTL header corrupt! [ 191.450152][ T7961] futex_wake_op: syz.1.586 tries to shift op by -2048; fix this program [ 191.491634][ T7961] futex_wake_op: syz.1.586 tries to shift op by -2048; fix this program [ 191.567968][ T7961] 0x000000000001-0x000000020000 : "" [ 191.642007][ T7961] ftl_cs: FTL header corrupt! [ 191.889591][ T7970] futex_wake_op: syz.3.596 tries to shift op by -2048; fix this program [ 191.899749][ T7970] futex_wake_op: syz.3.596 tries to shift op by -2048; fix this program [ 191.942452][ T7970] 0x000000000001-0x000000020000 : "" [ 192.028109][ T7970] ftl_cs: FTL header corrupt! [ 193.076871][ T7989] syz.2.590 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 194.200796][ T8007] FAULT_INJECTION: forcing a failure. [ 194.200796][ T8007] name failslab, interval 1, probability 0, space 0, times 0 [ 194.214235][ T8007] CPU: 0 UID: 0 PID: 8007 Comm: syz.3.593 Tainted: G L syzkaller #0 PREEMPT(full) [ 194.214288][ T8007] Tainted: [L]=SOFTLOCKUP [ 194.214297][ T8007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 194.214313][ T8007] Call Trace: [ 194.214323][ T8007] [ 194.214333][ T8007] dump_stack_lvl+0x100/0x190 [ 194.214378][ T8007] should_fail_ex.cold+0x5/0xa [ 194.214403][ T8007] ? ip_finish_output2+0x883/0x24d0 [ 194.214451][ T8007] should_failslab+0xc2/0x120 [ 194.214484][ T8007] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 194.214510][ T8007] ? skb_clone+0x190/0x400 [ 194.214557][ T8007] skb_clone+0x190/0x400 [ 194.214599][ T8007] dev_queue_xmit_nit+0x255/0xa60 [ 194.214652][ T8007] dev_hard_start_xmit+0x2fb/0x6c0 [ 194.214691][ T8007] __dev_queue_xmit+0x6dd/0x46f0 [ 194.214738][ T8007] ? __pfx___dev_queue_xmit+0x10/0x10 [ 194.214774][ T8007] ? __local_bh_enable_ip+0x9e/0x120 [ 194.214820][ T8007] ? __lock_acquire+0x4a5/0x2630 [ 194.214866][ T8007] ? find_held_lock+0x2b/0x80 [ 194.214913][ T8007] ip_finish_output2+0xf4a/0x24d0 [ 194.214966][ T8007] ? __pfx_ip_finish_output2+0x10/0x10 [ 194.215011][ T8007] ? __pfx_ip_dst_mtu_maybe_forward+0x10/0x10 [ 194.215063][ T8007] __ip_finish_output.part.0+0x444/0x6f0 [ 194.215112][ T8007] ip_output+0x39b/0xec0 [ 194.215139][ T8007] ? __pfx_ip_output+0x10/0x10 [ 194.215186][ T8007] ? __pfx_ip_finish_output+0x10/0x10 [ 194.215210][ T8007] ? ip4_dst_hoplimit+0x1a9/0x400 [ 194.215269][ T8007] __ip_queue_xmit+0x1b73/0x22b0 [ 194.215303][ T8007] ? __pfx_ip_queue_xmit+0x10/0x10 [ 194.215332][ T8007] __tcp_transmit_skb+0x3347/0x4b50 [ 194.215389][ T8007] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 194.215447][ T8007] ? ktime_get+0x200/0x300 [ 194.215485][ T8007] ? lockdep_hardirqs_on+0x78/0x100 [ 194.215536][ T8007] tcp_write_xmit+0x12a2/0x8980 [ 194.215606][ T8007] __tcp_push_pending_frames+0xaf/0x3b0 [ 194.215648][ T8007] tcp_send_fin+0x11f/0x10f0 [ 194.215692][ T8007] __tcp_close+0xa0d/0x1110 [ 194.215727][ T8007] ? __local_bh_enable_ip+0x9e/0x120 [ 194.215773][ T8007] tcp_close+0x28/0x110 [ 194.215806][ T8007] inet_release+0xed/0x200 [ 194.215839][ T8007] __sock_release+0xb3/0x260 [ 194.215880][ T8007] ? __pfx_sock_close+0x10/0x10 [ 194.215921][ T8007] sock_close+0x1c/0x30 [ 194.215959][ T8007] __fput+0x3ff/0xb40 [ 194.215996][ T8007] ? _raw_spin_unlock_irq+0x23/0x50 [ 194.216037][ T8007] task_work_run+0x150/0x240 [ 194.216069][ T8007] ? __pfx_task_work_run+0x10/0x10 [ 194.216101][ T8007] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 194.216151][ T8007] get_signal+0x1bd/0x21e0 [ 194.216191][ T8007] ? __pfx___fput_deferred+0x10/0x10 [ 194.216225][ T8007] ? __pfx___file_ref_put+0x10/0x10 [ 194.216272][ T8007] ? __pfx_get_signal+0x10/0x10 [ 194.216312][ T8007] ? do_sendfile+0x44d/0xe20 [ 194.216346][ T8007] arch_do_signal_or_restart+0x91/0x770 [ 194.216378][ T8007] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 194.216417][ T8007] ? __x64_sys_sendfile64+0x189/0x220 [ 194.216449][ T8007] ? xfd_validate_state+0x129/0x190 [ 194.216489][ T8007] exit_to_user_mode_loop+0x86/0x4a0 [ 194.216516][ T8007] ? rcu_is_watching+0x12/0xc0 [ 194.216552][ T8007] do_syscall_64+0x668/0xf80 [ 194.216591][ T8007] ? clear_bhb_loop+0x40/0x90 [ 194.216625][ T8007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.216652][ T8007] RIP: 0033:0x7f1ad659bf79 [ 194.216676][ T8007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.216702][ T8007] RSP: 002b:00007f1ad7520028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 194.216728][ T8007] RAX: fffffffffffffe00 RBX: 00007f1ad6815fa0 RCX: 00007f1ad659bf79 [ 194.216748][ T8007] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000001 [ 194.216764][ T8007] RBP: 00007f1ad66327e0 R08: 0000000000000000 R09: 0000000000000000 [ 194.216781][ T8007] R10: 00000000000000a1 R11: 0000000000000246 R12: 0000000000000000 [ 194.216798][ T8007] R13: 00007f1ad6816038 R14: 00007f1ad6815fa0 R15: 00007ffd13c1fb18 [ 194.216838][ T8007] [ 195.387036][ T8014] FAULT_INJECTION: forcing a failure. [ 195.387036][ T8014] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 195.441807][ T8014] CPU: 0 UID: 0 PID: 8014 Comm: syz.2.597 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.441855][ T8014] Tainted: [L]=SOFTLOCKUP [ 195.441865][ T8014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 195.441882][ T8014] Call Trace: [ 195.441892][ T8014] [ 195.441903][ T8014] dump_stack_lvl+0x100/0x190 [ 195.441951][ T8014] should_fail_ex.cold+0x5/0xa [ 195.441977][ T8014] ? prepare_alloc_pages+0x16d/0x5f0 [ 195.442016][ T8014] should_fail_alloc_page+0xeb/0x140 [ 195.442052][ T8014] prepare_alloc_pages+0x1f0/0x5f0 [ 195.442089][ T8014] ? arch_stack_walk+0xa6/0xf0 [ 195.442133][ T8014] __alloc_frozen_pages_noprof+0x193/0x2410 [ 195.442168][ T8014] ? copy_splice_read+0x1a3/0xb90 [ 195.442194][ T8014] ? stack_trace_save+0x8e/0xc0 [ 195.442244][ T8014] ? __pfx_stack_trace_save+0x10/0x10 [ 195.442280][ T8014] ? stack_depot_save_flags+0x27/0x9d0 [ 195.442310][ T8014] ? __lock_acquire+0x4a5/0x2630 [ 195.442335][ T8014] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 195.442363][ T8014] ? kasan_save_stack+0x3f/0x50 [ 195.442389][ T8014] ? kasan_save_stack+0x30/0x50 [ 195.442412][ T8014] ? kasan_save_track+0x14/0x30 [ 195.442435][ T8014] ? __kasan_kmalloc+0xaa/0xb0 [ 195.442456][ T8014] ? __kmalloc_noprof+0x301/0x850 [ 195.442478][ T8014] ? copy_splice_read+0x1a3/0xb90 [ 195.442499][ T8014] ? do_splice_read+0x285/0x370 [ 195.442525][ T8014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.442573][ T8014] alloc_pages_bulk_noprof+0x777/0x1500 [ 195.442615][ T8014] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 195.442652][ T8014] ? trace_kmalloc+0x83/0xb0 [ 195.442681][ T8014] ? __kmalloc_noprof+0x320/0x850 [ 195.442714][ T8014] copy_splice_read+0x1e1/0xb90 [ 195.442747][ T8014] ? __pfx_copy_splice_read+0x10/0x10 [ 195.442784][ T8014] ? find_held_lock+0x2b/0x80 [ 195.442818][ T8014] ? aa_file_perm+0x268/0x1530 [ 195.442848][ T8014] ? aa_file_perm+0x268/0x1530 [ 195.442880][ T8014] ? __pfx_copy_splice_read+0x10/0x10 [ 195.442904][ T8014] do_splice_read+0x285/0x370 [ 195.442933][ T8014] splice_direct_to_actor+0x2a1/0xa30 [ 195.442961][ T8014] ? __pfx_direct_splice_actor+0x10/0x10 [ 195.442995][ T8014] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 195.443023][ T8014] ? find_held_lock+0x2b/0x80 [ 195.443055][ T8014] ? get_signal+0x19b6/0x21e0 [ 195.443095][ T8014] do_splice_direct+0x174/0x240 [ 195.443122][ T8014] ? __pfx_do_splice_direct+0x10/0x10 [ 195.443147][ T8014] ? common_file_perm+0x1ab/0x4f0 [ 195.443174][ T8014] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 195.443206][ T8014] ? rw_verify_area+0xce/0x6d0 [ 195.443258][ T8014] do_sendfile+0xadc/0xe20 [ 195.443290][ T8014] ? __pfx_do_sendfile+0x10/0x10 [ 195.443316][ T8014] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 195.443354][ T8014] __x64_sys_sendfile64+0x1d8/0x220 [ 195.443386][ T8014] ? xfd_validate_state+0x129/0x190 [ 195.443419][ T8014] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 195.443460][ T8014] do_syscall_64+0x106/0xf80 [ 195.443498][ T8014] ? clear_bhb_loop+0x40/0x90 [ 195.443531][ T8014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.443558][ T8014] RIP: 0033:0x7f826ef9bf79 [ 195.443580][ T8014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.443605][ T8014] RSP: 002b:00007f826fd77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 195.443632][ T8014] RAX: ffffffffffffffda RBX: 00007f826f215fa0 RCX: 00007f826ef9bf79 [ 195.443649][ T8014] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 195.443665][ T8014] RBP: 00007f826f0327e0 R08: 0000000000000000 R09: 0000000000000000 [ 195.443681][ T8014] R10: 0000000000004a00 R11: 0000000000000246 R12: 0000000000000000 [ 195.443697][ T8014] R13: 00007f826f216038 R14: 00007f826f215fa0 R15: 00007fffb4cc5e58 [ 195.443737][ T8014] [ 196.452445][ T8027] netlink: 28 bytes leftover after parsing attributes in process `syz.3.601'. [ 196.564824][ T8030] futex_wake_op: syz.0.600 tries to shift op by -2048; fix this program [ 196.900332][ T8030] futex_wake_op: syz.0.600 tries to shift op by -2048; fix this program [ 196.960789][ T8025] FAULT_INJECTION: forcing a failure. [ 196.960789][ T8025] name failslab, interval 1, probability 0, space 0, times 0 [ 196.991640][ T8025] CPU: 0 UID: 0 PID: 8025 Comm: syz.2.602 Tainted: G L syzkaller #0 PREEMPT(full) [ 196.991686][ T8025] Tainted: [L]=SOFTLOCKUP [ 196.991695][ T8025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 196.991711][ T8025] Call Trace: [ 196.991720][ T8025] [ 196.991731][ T8025] dump_stack_lvl+0x100/0x190 [ 196.991775][ T8025] should_fail_ex.cold+0x5/0xa [ 196.991806][ T8025] should_failslab+0xc2/0x120 [ 196.991840][ T8025] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 196.991868][ T8025] ? __kernfs_new_node+0xd2/0x960 [ 196.991911][ T8025] __kernfs_new_node+0xd2/0x960 [ 196.991951][ T8025] ? __pfx___kernfs_new_node+0x10/0x10 [ 196.991996][ T8025] ? find_held_lock+0x2b/0x80 [ 196.992039][ T8025] ? kernfs_root+0xee/0x2a0 [ 196.992073][ T8025] ? kernfs_root+0xee/0x2a0 [ 196.992117][ T8025] kernfs_new_node+0x11b/0x1a0 [ 196.992168][ T8025] __kernfs_create_file+0x53/0x350 [ 196.992200][ T8025] sysfs_add_file_mode_ns+0x207/0x3c0 [ 196.992243][ T8025] internal_create_group+0x593/0xf40 [ 196.992288][ T8025] ? __pfx_internal_create_group+0x10/0x10 [ 196.992332][ T8025] ? kernfs_create_link+0x1bd/0x240 [ 196.992367][ T8025] internal_create_groups+0x9d/0x150 [ 196.992407][ T8025] device_add+0x71a/0x1950 [ 196.992436][ T8025] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 196.992473][ T8025] ? __pfx_device_add+0x10/0x10 [ 196.992499][ T8025] ? lockdep_init_map_type+0x5c/0x250 [ 196.992530][ T8025] ? __init_waitqueue_head+0xca/0x150 [ 196.992572][ T8025] netdev_register_kobject+0x1a9/0x3d0 [ 196.992606][ T8025] register_netdevice+0x12e0/0x2210 [ 196.992657][ T8025] ? __pfx_register_netdevice+0x10/0x10 [ 196.992708][ T8025] ? __pfx_loopback_net_init+0x10/0x10 [ 196.992747][ T8025] register_netdev+0x34/0x50 [ 196.992788][ T8025] loopback_net_init+0x7a/0x170 [ 196.992827][ T8025] ? __pfx_loopback_net_init+0x10/0x10 [ 196.992862][ T8025] ops_init+0x1e2/0x5f0 [ 196.992907][ T8025] setup_net+0x118/0x3a0 [ 196.992950][ T8025] ? __pfx_setup_net+0x10/0x10 [ 196.992988][ T8025] ? lockdep_init_map_type+0x5c/0x250 [ 196.993018][ T8025] ? mutex_init_lockep+0x110/0x150 [ 196.993059][ T8025] copy_net_ns+0x46f/0x7c0 [ 196.993090][ T8025] create_new_namespaces+0x3ea/0xac0 [ 196.993140][ T8025] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 196.993183][ T8025] ksys_unshare+0x455/0xab0 [ 196.993215][ T8025] ? __pfx_ksys_unshare+0x10/0x10 [ 196.993243][ T8025] ? xfd_validate_state+0x129/0x190 [ 196.993287][ T8025] __x64_sys_unshare+0x31/0x40 [ 196.993316][ T8025] do_syscall_64+0x106/0xf80 [ 196.993355][ T8025] ? clear_bhb_loop+0x40/0x90 [ 196.993390][ T8025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.993418][ T8025] RIP: 0033:0x7f826ef9bf79 [ 196.993441][ T8025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.993466][ T8025] RSP: 002b:00007f826fd77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 196.993493][ T8025] RAX: ffffffffffffffda RBX: 00007f826f215fa0 RCX: 00007f826ef9bf79 [ 196.993511][ T8025] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 196.993527][ T8025] RBP: 00007f826f0327e0 R08: 0000000000000000 R09: 0000000000000000 [ 196.993544][ T8025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.993560][ T8025] R13: 00007f826f216038 R14: 00007f826f215fa0 R15: 00007fffb4cc5e58 [ 196.993599][ T8025] [ 197.370074][ T8030] 0x000000000001-0x000000020000 : "" [ 197.491549][ T8030] ftl_cs: FTL header corrupt! [ 197.898697][ T8039] XFS: Clearing xfsstats [ 197.922424][ T8039] futex_wake_op: syz.3.605 tries to shift op by -2048; fix this program [ 197.931119][ T8039] futex_wake_op: syz.3.605 tries to shift op by -2048; fix this program [ 198.000807][ T8039] 0x000000000001-0x000000020000 : "" [ 198.036697][ T8039] ftl_cs: FTL header corrupt! [ 198.570006][ T5827] Bluetooth: hci4: command 0x1003 tx timeout [ 198.570016][ T5831] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 198.836006][ T8054] netlink: 25 bytes leftover after parsing attributes in process `syz.1.608'. [ 199.007284][ T8059] vcan0: tx drop: invalid sa for name 0x00000000000000fd [ 199.296763][ T8061] FAULT_INJECTION: forcing a failure. [ 199.296763][ T8061] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 199.327718][ T8061] CPU: 1 UID: 0 PID: 8061 Comm: syz.0.611 Tainted: G L syzkaller #0 PREEMPT(full) [ 199.327767][ T8061] Tainted: [L]=SOFTLOCKUP [ 199.327777][ T8061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 199.327794][ T8061] Call Trace: [ 199.327804][ T8061] [ 199.327814][ T8061] dump_stack_lvl+0x100/0x190 [ 199.327861][ T8061] should_fail_ex.cold+0x5/0xa [ 199.327887][ T8061] ? prepare_alloc_pages+0x16d/0x5f0 [ 199.327927][ T8061] should_fail_alloc_page+0xeb/0x140 [ 199.327969][ T8061] prepare_alloc_pages+0x1f0/0x5f0 [ 199.328006][ T8061] ? rcu_is_watching+0x12/0xc0 [ 199.328054][ T8061] __alloc_frozen_pages_noprof+0x193/0x2410 [ 199.328090][ T8061] ? stack_trace_save+0x8e/0xc0 [ 199.328129][ T8061] ? __pfx_stack_trace_save+0x10/0x10 [ 199.328167][ T8061] ? is_bpf_text_address+0x94/0x1a0 [ 199.328201][ T8061] ? stack_depot_save_flags+0x27/0x9d0 [ 199.328234][ T8061] ? __kernel_text_address+0xd/0x30 [ 199.328272][ T8061] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 199.328299][ T8061] ? kasan_save_stack+0x3f/0x50 [ 199.328326][ T8061] ? kasan_save_track+0x14/0x30 [ 199.328354][ T8061] ? snd_pcm_attach_substream+0x451/0xd60 [ 199.328395][ T8061] ? snd_pcm_open_substream+0x90/0x1850 [ 199.328433][ T8061] ? snd_pcm_oss_open+0x735/0x1390 [ 199.328463][ T8061] ? soundcore_open+0x2e3/0x5a0 [ 199.328490][ T8061] ? chrdev_open+0x234/0x6a0 [ 199.328520][ T8061] ? vfs_open+0x82/0x3f0 [ 199.328559][ T8061] ? __lock_acquire+0x4a5/0x2630 [ 199.328594][ T8061] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 199.328634][ T8061] ? policy_nodemask+0xed/0x4f0 [ 199.328672][ T8061] alloc_pages_mpol+0x1fb/0x550 [ 199.328711][ T8061] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 199.328756][ T8061] alloc_pages_noprof+0x131/0x390 [ 199.328790][ T8061] alloc_pages_exact_noprof+0x32/0xf0 [ 199.328830][ T8061] snd_pcm_attach_substream+0x4cb/0xd60 [ 199.328879][ T8061] snd_pcm_open_substream+0x90/0x1850 [ 199.328922][ T8061] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 199.328974][ T8061] snd_pcm_oss_open+0x735/0x1390 [ 199.329020][ T8061] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 199.329060][ T8061] ? __lock_acquire+0x4a5/0x2630 [ 199.329090][ T8061] ? __pfx_default_wake_function+0x10/0x10 [ 199.329133][ T8061] ? __lock_acquire+0x4a5/0x2630 [ 199.329174][ T8061] ? do_raw_spin_lock+0x128/0x260 [ 199.329210][ T8061] ? soundcore_open+0x231/0x5a0 [ 199.329241][ T8061] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 199.329276][ T8061] soundcore_open+0x2e3/0x5a0 [ 199.329308][ T8061] ? __pfx_soundcore_open+0x10/0x10 [ 199.329337][ T8061] chrdev_open+0x234/0x6a0 [ 199.329367][ T8061] ? __pfx_apparmor_file_open+0x10/0x10 [ 199.329410][ T8061] ? __pfx_chrdev_open+0x10/0x10 [ 199.329444][ T8061] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 199.329486][ T8061] do_dentry_open+0x6d8/0x1660 [ 199.329516][ T8061] ? __pfx_chrdev_open+0x10/0x10 [ 199.329557][ T8061] vfs_open+0x82/0x3f0 [ 199.329599][ T8061] path_openat+0x208c/0x31a0 [ 199.329644][ T8061] ? __pfx_path_openat+0x10/0x10 [ 199.329689][ T8061] do_file_open+0x20e/0x430 [ 199.329724][ T8061] ? __pfx_do_file_open+0x10/0x10 [ 199.329784][ T8061] ? alloc_fd+0x476/0x790 [ 199.329816][ T8061] ? do_getname+0x191/0x390 [ 199.329861][ T8061] do_sys_openat2+0x10d/0x1e0 [ 199.329894][ T8061] ? __pfx_do_sys_openat2+0x10/0x10 [ 199.329932][ T8061] ? __do_sys_capset+0xfb/0x460 [ 199.329973][ T8061] __x64_sys_openat+0x12d/0x210 [ 199.330011][ T8061] ? __pfx___x64_sys_openat+0x10/0x10 [ 199.330051][ T8061] ? xfd_validate_state+0x129/0x190 [ 199.330092][ T8061] do_syscall_64+0x106/0xf80 [ 199.330129][ T8061] ? clear_bhb_loop+0x40/0x90 [ 199.330161][ T8061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.330184][ T8061] RIP: 0033:0x7f407e19bf79 [ 199.330205][ T8061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.330228][ T8061] RSP: 002b:00007f407f0bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 199.330252][ T8061] RAX: ffffffffffffffda RBX: 00007f407e415fa0 RCX: 00007f407e19bf79 [ 199.330268][ T8061] RDX: 0000000000020342 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 199.330285][ T8061] RBP: 00007f407e2327e0 R08: 0000000000000000 R09: 0000000000000000 [ 199.330300][ T8061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.330314][ T8061] R13: 00007f407e416038 R14: 00007f407e415fa0 R15: 00007ffc5ddd3318 [ 199.330348][ T8061] [ 199.802379][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.808779][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.298694][ T8078] XFS: Clearing xfsstats [ 200.312387][ T8078] futex_wake_op: syz.0.616 tries to shift op by -2048; fix this program [ 200.491320][ T8078] futex_wake_op: syz.0.616 tries to shift op by -2048; fix this program [ 200.524031][ T8078] 0x000000000001-0x000000020000 : "" [ 200.565341][ T8078] ftl_cs: FTL header corrupt! [ 201.525053][ T8105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.623'. [ 201.534968][ T8105] netlink: 25 bytes leftover after parsing attributes in process `syz.2.623'. [ 201.991574][ T8108] FAULT_INJECTION: forcing a failure. [ 201.991574][ T8108] name failslab, interval 1, probability 0, space 0, times 0 [ 202.048552][ T8104] mmap: syz.0.624 (8104) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 202.057576][ T8108] CPU: 0 UID: 0 PID: 8108 Comm: syz.1.625 Tainted: G L syzkaller #0 PREEMPT(full) [ 202.057608][ T8108] Tainted: [L]=SOFTLOCKUP [ 202.057614][ T8108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 202.057623][ T8108] Call Trace: [ 202.057628][ T8108] [ 202.057635][ T8108] dump_stack_lvl+0x100/0x190 [ 202.057661][ T8108] should_fail_ex.cold+0x5/0xa [ 202.057677][ T8108] should_failslab+0xc2/0x120 [ 202.057695][ T8108] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 202.057711][ T8108] ? snd_pcm_hw_rule_add+0x3b3/0x510 [ 202.057731][ T8108] krealloc_node_align_noprof+0x30a/0x3e0 [ 202.057745][ T8108] ? find_held_lock+0x2b/0x80 [ 202.057767][ T8108] snd_pcm_hw_rule_add+0x3b3/0x510 [ 202.057783][ T8108] ? __pfx_snd_pcm_hw_rule_format+0x10/0x10 [ 202.057803][ T8108] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 202.057819][ T8108] ? mutex_init_lockep+0x110/0x150 [ 202.057836][ T8108] ? snd_pcm_attach_substream+0x29b/0xd60 [ 202.057860][ T8108] snd_pcm_open_substream+0x54a/0x1850 [ 202.057882][ T8108] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 202.057908][ T8108] snd_pcm_oss_open+0x735/0x1390 [ 202.057931][ T8108] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 202.057947][ T8108] ? __lock_acquire+0x4a5/0x2630 [ 202.057962][ T8108] ? __pfx_default_wake_function+0x10/0x10 [ 202.057983][ T8108] ? __lock_acquire+0x4a5/0x2630 [ 202.058001][ T8108] ? do_raw_spin_lock+0x128/0x260 [ 202.058018][ T8108] ? soundcore_open+0x231/0x5a0 [ 202.058034][ T8108] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 202.058051][ T8108] soundcore_open+0x2e3/0x5a0 [ 202.058067][ T8108] ? __pfx_soundcore_open+0x10/0x10 [ 202.058080][ T8108] chrdev_open+0x234/0x6a0 [ 202.058096][ T8108] ? __pfx_apparmor_file_open+0x10/0x10 [ 202.058118][ T8108] ? __pfx_chrdev_open+0x10/0x10 [ 202.058135][ T8108] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 202.058156][ T8108] do_dentry_open+0x6d8/0x1660 [ 202.058171][ T8108] ? __pfx_chrdev_open+0x10/0x10 [ 202.058192][ T8108] vfs_open+0x82/0x3f0 [ 202.058212][ T8108] path_openat+0x208c/0x31a0 [ 202.058235][ T8108] ? __pfx_path_openat+0x10/0x10 [ 202.058258][ T8108] do_file_open+0x20e/0x430 [ 202.058275][ T8108] ? __pfx_do_file_open+0x10/0x10 [ 202.058304][ T8108] ? alloc_fd+0x476/0x790 [ 202.058321][ T8108] ? do_getname+0x191/0x390 [ 202.058341][ T8108] do_sys_openat2+0x10d/0x1e0 [ 202.058360][ T8108] ? __pfx_do_sys_openat2+0x10/0x10 [ 202.058381][ T8108] ? __do_sys_capset+0xfb/0x460 [ 202.058405][ T8108] __x64_sys_openat+0x12d/0x210 [ 202.058425][ T8108] ? __pfx___x64_sys_openat+0x10/0x10 [ 202.058444][ T8108] ? xfd_validate_state+0x129/0x190 [ 202.058468][ T8108] do_syscall_64+0x106/0xf80 [ 202.058488][ T8108] ? clear_bhb_loop+0x40/0x90 [ 202.058506][ T8108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.058521][ T8108] RIP: 0033:0x7f9c7bd9bf79 [ 202.058538][ T8108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.058553][ T8108] RSP: 002b:00007f9c7ccc2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 202.058568][ T8108] RAX: ffffffffffffffda RBX: 00007f9c7c015fa0 RCX: 00007f9c7bd9bf79 [ 202.058583][ T8108] RDX: 0000000000020342 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 202.058592][ T8108] RBP: 00007f9c7be327e0 R08: 0000000000000000 R09: 0000000000000000 [ 202.058603][ T8108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.058612][ T8108] R13: 00007f9c7c016038 R14: 00007f9c7c015fa0 R15: 00007ffd1aafb0d8 [ 202.058632][ T8108] [ 202.836470][ T8127] capability: warning: `syz.3.631' uses 32-bit capabilities (legacy support in use) [ 202.977379][ T8134] FAULT_INJECTION: forcing a failure. [ 202.977379][ T8134] name failslab, interval 1, probability 0, space 0, times 0 [ 203.032975][ T8134] CPU: 1 UID: 0 PID: 8134 Comm: syz.0.633 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.033023][ T8134] Tainted: [L]=SOFTLOCKUP [ 203.033033][ T8134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 203.033050][ T8134] Call Trace: [ 203.033059][ T8134] [ 203.033070][ T8134] dump_stack_lvl+0x100/0x190 [ 203.033111][ T8134] should_fail_ex.cold+0x5/0xa [ 203.033140][ T8134] should_failslab+0xc2/0x120 [ 203.033173][ T8134] __kvmalloc_node_noprof+0xfa/0xa00 [ 203.033205][ T8134] ? proc_sys_call_handler+0x2c7/0x5a0 [ 203.033254][ T8134] proc_sys_call_handler+0x2c7/0x5a0 [ 203.033293][ T8134] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 203.033340][ T8134] ? splice_from_pipe_next+0x1ec/0x5a0 [ 203.033381][ T8134] iter_file_splice_write+0x82b/0x10a0 [ 203.033433][ T8134] ? __pfx_iter_file_splice_write+0x10/0x10 [ 203.033473][ T8134] ? __pfx_copy_splice_read+0x10/0x10 [ 203.033531][ T8134] ? __pfx_iter_file_splice_write+0x10/0x10 [ 203.033567][ T8134] direct_splice_actor+0x192/0x6c0 [ 203.033604][ T8134] splice_direct_to_actor+0x345/0xa30 [ 203.033637][ T8134] ? __pfx_direct_splice_actor+0x10/0x10 [ 203.033675][ T8134] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 203.033717][ T8134] do_splice_direct+0x174/0x240 [ 203.033747][ T8134] ? __pfx_do_splice_direct+0x10/0x10 [ 203.033775][ T8134] ? common_file_perm+0x1ab/0x4f0 [ 203.033806][ T8134] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 203.033842][ T8134] ? rw_verify_area+0xce/0x6d0 [ 203.033888][ T8134] do_sendfile+0xadc/0xe20 [ 203.033922][ T8134] ? __pfx_do_sendfile+0x10/0x10 [ 203.033955][ T8134] ? __x64_sys_futex+0x34f/0x4d0 [ 203.033981][ T8134] ? __x64_sys_futex+0x358/0x4d0 [ 203.034013][ T8134] __x64_sys_sendfile64+0x1d8/0x220 [ 203.034046][ T8134] ? xfd_validate_state+0x129/0x190 [ 203.034080][ T8134] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 203.034131][ T8134] do_syscall_64+0x106/0xf80 [ 203.034172][ T8134] ? clear_bhb_loop+0x40/0x90 [ 203.034207][ T8134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.034235][ T8134] RIP: 0033:0x7f407e19bf79 [ 203.034259][ T8134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.034286][ T8134] RSP: 002b:00007f407f0bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 203.034311][ T8134] RAX: ffffffffffffffda RBX: 00007f407e415fa0 RCX: 00007f407e19bf79 [ 203.034328][ T8134] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 203.034342][ T8134] RBP: 00007f407e2327e0 R08: 0000000000000000 R09: 0000000000000000 [ 203.034358][ T8134] R10: 0000000000004a00 R11: 0000000000000246 R12: 0000000000000000 [ 203.034373][ T8134] R13: 00007f407e416038 R14: 00007f407e415fa0 R15: 00007ffc5ddd3318 [ 203.034412][ T8134] [ 203.768470][ T8146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.637'. [ 203.781564][ T8146] netlink: 25 bytes leftover after parsing attributes in process `syz.0.637'. [ 204.204019][ T8160] futex_wake_op: syz.3.641 tries to shift op by -2048; fix this program [ 204.230331][ T8160] futex_wake_op: syz.3.641 tries to shift op by -2048; fix this program [ 204.279591][ T8160] 0x000000000001-0x000000020000 : "" [ 204.356958][ T8151] netlink: 25 bytes leftover after parsing attributes in process `syz.1.639'. [ 204.480113][ T8160] ftl_cs: FTL header corrupt! [ 204.974036][ T8172] ubi0: attaching mtd0 [ 204.996777][ T8172] ubi0: scanning is finished [ 205.010391][ T8172] ubi0: empty MTD device detected [ 205.154810][ T8181] XFS: Clearing xfsstats [ 205.220395][ T8181] futex_wake_op: syz.3.645 tries to shift op by -2048; fix this program [ 205.254246][ T8181] futex_wake_op: syz.3.645 tries to shift op by -2048; fix this program [ 205.286721][ T8172] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 205.302186][ T8172] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 205.328946][ T8172] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 205.360631][ T8172] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 205.377908][ T8172] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 205.459405][ T8172] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 205.476196][ T8172] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2253539654 [ 205.487447][ T8172] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 205.500604][ T8177] ubi0: detaching mtd0 [ 205.518773][ T8177] ubi0: mtd0 is detached [ 205.774293][ T8191] XFS: Clearing xfsstats [ 205.826347][ T8191] futex_wake_op: syz.0.647 tries to shift op by -2048; fix this program [ 205.852201][ T8191] futex_wake_op: syz.0.647 tries to shift op by -2048; fix this program [ 205.868279][ T8191] 0x000000000001-0x000000020000 : "" [ 206.001803][ T8191] ftl_cs: FTL header corrupt! [ 208.030146][ T8243] netlink: 25 bytes leftover after parsing attributes in process `syz.0.661'. [ 208.344808][ T8247] FAULT_INJECTION: forcing a failure. [ 208.344808][ T8247] name failslab, interval 1, probability 0, space 0, times 0 [ 208.376842][ T8255] XFS: Clearing xfsstats [ 208.399955][ T8247] CPU: 1 UID: 0 PID: 8247 Comm: syz.3.662 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.400010][ T8247] Tainted: [L]=SOFTLOCKUP [ 208.400021][ T8247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 208.400037][ T8247] Call Trace: [ 208.400043][ T8247] [ 208.400049][ T8247] dump_stack_lvl+0x100/0x190 [ 208.400076][ T8247] should_fail_ex.cold+0x5/0xa [ 208.400094][ T8247] should_failslab+0xc2/0x120 [ 208.400111][ T8247] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 208.400126][ T8247] ? __kernfs_new_node+0xd2/0x960 [ 208.400149][ T8247] __kernfs_new_node+0xd2/0x960 [ 208.400169][ T8247] ? __pfx___kernfs_new_node+0x10/0x10 [ 208.400192][ T8247] ? find_held_lock+0x2b/0x80 [ 208.400211][ T8247] ? kernfs_root+0xee/0x2a0 [ 208.400227][ T8247] ? kernfs_root+0xee/0x2a0 [ 208.400252][ T8247] kernfs_new_node+0x11b/0x1a0 [ 208.400275][ T8247] __kernfs_create_file+0x53/0x350 [ 208.400292][ T8247] sysfs_add_file_mode_ns+0x207/0x3c0 [ 208.400314][ T8247] internal_create_group+0x593/0xf40 [ 208.400338][ T8247] ? __pfx_internal_create_group+0x10/0x10 [ 208.400360][ T8247] ? kernfs_create_link+0x1bd/0x240 [ 208.400377][ T8247] internal_create_groups+0x9d/0x150 [ 208.400398][ T8247] device_add+0x71a/0x1950 [ 208.400413][ T8247] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 208.400432][ T8247] ? __pfx_device_add+0x10/0x10 [ 208.400446][ T8247] ? lockdep_init_map_type+0x5c/0x250 [ 208.400461][ T8247] ? __init_waitqueue_head+0xca/0x150 [ 208.400483][ T8247] netdev_register_kobject+0x1a9/0x3d0 [ 208.400501][ T8247] register_netdevice+0x12e0/0x2210 [ 208.400525][ T8247] ? idr_alloc+0xdd/0x130 [ 208.400545][ T8247] ? __pfx_register_netdevice+0x10/0x10 [ 208.400565][ T8247] ? net_generic+0xea/0x2a0 [ 208.400585][ T8247] ppp_dev_configure+0x986/0xcb0 [ 208.400605][ T8247] ppp_ioctl+0x985/0x2800 [ 208.400622][ T8247] ? find_held_lock+0x2b/0x80 [ 208.400640][ T8247] ? __pfx_ppp_ioctl+0x10/0x10 [ 208.400658][ T8247] ? __fget_files+0x21f/0x3d0 [ 208.400676][ T8247] ? __pfx_ppp_ioctl+0x10/0x10 [ 208.400692][ T8247] __x64_sys_ioctl+0x18e/0x210 [ 208.400714][ T8247] do_syscall_64+0x106/0xf80 [ 208.400734][ T8247] ? clear_bhb_loop+0x40/0x90 [ 208.400751][ T8247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.400765][ T8247] RIP: 0033:0x7f1ad659bf79 [ 208.400779][ T8247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.400792][ T8247] RSP: 002b:00007f1ad7520028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 208.400807][ T8247] RAX: ffffffffffffffda RBX: 00007f1ad6815fa0 RCX: 00007f1ad659bf79 [ 208.400817][ T8247] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000006 [ 208.400827][ T8247] RBP: 00007f1ad66327e0 R08: 0000000000000000 R09: 0000000000000000 [ 208.400836][ T8247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.400845][ T8247] R13: 00007f1ad6816038 R14: 00007f1ad6815fa0 R15: 00007ffd13c1fb18 [ 208.400866][ T8247] [ 208.405416][ T8255] futex_wake_op: syz.0.664 tries to shift op by -2048; fix this program [ 208.727031][ T8258] FAULT_INJECTION: forcing a failure. [ 208.727031][ T8258] name failslab, interval 1, probability 0, space 0, times 0 [ 208.742583][ T8258] CPU: 1 UID: 0 PID: 8258 Comm: syz.1.665 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.742634][ T8258] Tainted: [L]=SOFTLOCKUP [ 208.742645][ T8258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 208.742663][ T8258] Call Trace: [ 208.742672][ T8258] [ 208.742684][ T8258] dump_stack_lvl+0x100/0x190 [ 208.742732][ T8258] should_fail_ex.cold+0x5/0xa [ 208.742765][ T8258] should_failslab+0xc2/0x120 [ 208.742799][ T8258] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 208.742828][ T8258] ? security_inode_alloc+0x3b/0x2c0 [ 208.742879][ T8258] ? lockdep_init_map_type+0x5c/0x250 [ 208.742916][ T8258] security_inode_alloc+0x3b/0x2c0 [ 208.742961][ T8258] inode_init_always_gfp+0xced/0x1040 [ 208.742994][ T8258] alloc_inode+0x8e/0x250 [ 208.743030][ T8258] new_inode+0x22/0x1c0 [ 208.743071][ T8258] shmem_get_inode+0x197/0xf30 [ 208.743113][ T8258] ? __vm_enough_memory+0x184/0x390 [ 208.743153][ T8258] __shmem_file_setup+0x279/0x330 [ 208.743199][ T8258] shmem_zero_setup+0x93/0x1b0 [ 208.743240][ T8258] __mmap_region+0x2101/0x2820 [ 208.743290][ T8258] ? __pfx___mmap_region+0x10/0x10 [ 208.743355][ T8258] ? finish_task_switch.isra.0+0x205/0xb80 [ 208.743396][ T8258] ? lockdep_hardirqs_on+0x78/0x100 [ 208.743438][ T8258] ? finish_task_switch.isra.0+0x205/0xb80 [ 208.743553][ T8258] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 208.743593][ T8258] ? rcu_is_watching+0x12/0xc0 [ 208.743640][ T8258] mmap_region+0x180/0x3e0 [ 208.743683][ T8258] do_mmap+0xc63/0x12f0 [ 208.743727][ T8258] ? __pfx_do_mmap+0x10/0x10 [ 208.743764][ T8258] ? __pfx_down_write_killable+0x10/0x10 [ 208.743802][ T8258] vm_mmap_pgoff+0x29e/0x470 [ 208.743846][ T8258] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 208.743892][ T8258] ? __x64_sys_futex+0x34f/0x4d0 [ 208.743918][ T8258] ? __x64_sys_futex+0x358/0x4d0 [ 208.743952][ T8258] ksys_mmap_pgoff+0x7d/0x5b0 [ 208.743992][ T8258] __x64_sys_mmap+0x125/0x190 [ 208.744033][ T8258] do_syscall_64+0x106/0xf80 [ 208.744073][ T8258] ? clear_bhb_loop+0x40/0x90 [ 208.744108][ T8258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.744137][ T8258] RIP: 0033:0x7f9c7bd9bf79 [ 208.744162][ T8258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.744191][ T8258] RSP: 002b:00007f9c7cca1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 208.744226][ T8258] RAX: ffffffffffffffda RBX: 00007f9c7c016090 RCX: 00007f9c7bd9bf79 [ 208.744247][ T8258] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 208.744265][ T8258] RBP: 00007f9c7be327e0 R08: fffffffffffffffa R09: 0000000000008000 [ 208.744285][ T8258] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 208.744303][ T8258] R13: 00007f9c7c016128 R14: 00007f9c7c016090 R15: 00007ffd1aafb0d8 [ 208.744342][ T8258] [ 209.042020][ T8255] futex_wake_op: syz.0.664 tries to shift op by -2048; fix this program [ 209.166437][ T8264] netlink: set zone limit has 8 unknown bytes [ 209.177766][ T8264] netlink: zone id is out of range [ 209.182974][ T8264] netlink: zone id is out of range [ 209.188164][ T8264] netlink: zone id is out of range [ 209.193283][ T8264] netlink: zone id is out of range [ 209.198380][ T8264] netlink: zone id is out of range [ 209.203496][ T8264] netlink: zone id is out of range [ 209.208676][ T8264] netlink: zone id is out of range [ 209.214020][ T8264] netlink: zone id is out of range [ 209.219248][ T8264] netlink: zone id is out of range [ 209.429090][ T8266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.667'. [ 209.441323][ T8266] netlink: 'syz.3.667': attribute type 1 has an invalid length. [ 209.449212][ T8266] netlink: 5 bytes leftover after parsing attributes in process `syz.3.667'. [ 209.460193][ T8266] netlink: 'syz.3.667': attribute type 1 has an invalid length. [ 209.615921][ T8271] XFS: Clearing xfsstats [ 209.668524][ T8271] futex_wake_op: syz.0.668 tries to shift op by -2048; fix this program [ 209.704894][ T8271] futex_wake_op: syz.0.668 tries to shift op by -2048; fix this program [ 211.067485][ T8290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.673'. [ 211.078450][ T8290] netlink: 25 bytes leftover after parsing attributes in process `syz.1.673'. [ 211.280373][ T8296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.676'. [ 211.311022][ T8296] netlink: 25 bytes leftover after parsing attributes in process `syz.3.676'. [ 211.436741][ T8298] XFS: Clearing xfsstats [ 211.500129][ T8298] futex_wake_op: syz.1.675 tries to shift op by -2048; fix this program [ 211.519276][ T8298] futex_wake_op: syz.1.675 tries to shift op by -2048; fix this program [ 211.534174][ T8306] FAULT_INJECTION: forcing a failure. [ 211.534174][ T8306] name failslab, interval 1, probability 0, space 0, times 0 [ 211.601671][ T8298] 0x000000000001-0x000000020000 : "" [ 211.607402][ T8306] CPU: 1 UID: 0 PID: 8306 Comm: syz.2.677 Tainted: G L syzkaller #0 PREEMPT(full) [ 211.607448][ T8306] Tainted: [L]=SOFTLOCKUP [ 211.607459][ T8306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 211.607475][ T8306] Call Trace: [ 211.607485][ T8306] [ 211.607496][ T8306] dump_stack_lvl+0x100/0x190 [ 211.607549][ T8306] should_fail_ex.cold+0x5/0xa [ 211.607580][ T8306] should_failslab+0xc2/0x120 [ 211.607616][ T8306] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 211.607644][ T8306] ? acpi_ut_create_generic_state+0x61/0xc0 [ 211.607692][ T8306] acpi_ut_create_generic_state+0x61/0xc0 [ 211.607722][ T8306] acpi_ds_scope_stack_push+0x70/0x790 [ 211.607758][ T8306] acpi_ds_init_aml_walk+0x2d8/0x680 [ 211.607794][ T8306] acpi_ps_execute_method+0x39d/0xe90 [ 211.607836][ T8306] acpi_ns_evaluate+0x640/0x1670 [ 211.607881][ T8306] acpi_evaluate_object+0x420/0xe00 [ 211.607922][ T8306] ? kasan_save_stack+0x30/0x50 [ 211.607949][ T8306] ? kasan_save_track+0x14/0x30 [ 211.607984][ T8306] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 211.608032][ T8306] ? __pfx___might_resched+0x10/0x10 [ 211.608071][ T8306] acpi_evaluate_integer+0xdf/0x220 [ 211.608111][ T8306] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 211.608165][ T8306] ? __pfx_status_show+0x10/0x10 [ 211.608207][ T8306] status_show+0xa0/0x120 [ 211.608246][ T8306] ? __pfx_status_show+0x10/0x10 [ 211.608291][ T8306] dev_attr_show+0x52/0xa0 [ 211.608315][ T8306] ? __pfx_dev_attr_show+0x10/0x10 [ 211.608339][ T8306] sysfs_kf_seq_show+0x217/0x3a0 [ 211.608366][ T8306] seq_read_iter+0x32f/0x1270 [ 211.608389][ T8306] kernfs_fop_read_iter+0x46c/0x610 [ 211.608404][ T8306] ? rw_verify_area+0xce/0x6d0 [ 211.608426][ T8306] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 211.608442][ T8306] vfs_read+0x825/0xb30 [ 211.608459][ T8306] ? __pfx_vfs_read+0x10/0x10 [ 211.608486][ T8306] ksys_read+0x12a/0x250 [ 211.608500][ T8306] ? __pfx_ksys_read+0x10/0x10 [ 211.608519][ T8306] do_syscall_64+0x106/0xf80 [ 211.608540][ T8306] ? clear_bhb_loop+0x40/0x90 [ 211.608559][ T8306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.608574][ T8306] RIP: 0033:0x7f826ef9bf79 [ 211.608588][ T8306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.608601][ T8306] RSP: 002b:00007f826d1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 211.608617][ T8306] RAX: ffffffffffffffda RBX: 00007f826f216090 RCX: 00007f826ef9bf79 [ 211.608627][ T8306] RDX: 000000000000007a RSI: 0000200000000240 RDI: 0000000000000007 [ 211.608636][ T8306] RBP: 00007f826f0327e0 R08: 0000000000000000 R09: 0000000000000000 [ 211.608645][ T8306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.608654][ T8306] R13: 00007f826f216128 R14: 00007f826f216090 R15: 00007fffb4cc5e58 [ 211.608684][ T8306] [ 211.608708][ T8306] ACPI Error: ffff88801bf89000 walk still has a scope list (20251212/dswstate-694) [ 211.956068][ T8300] can0: slcan on ptm0. [ 211.982320][ T8298] ftl_cs: FTL header corrupt! [ 212.250937][ T8299] can0 (unregistered): slcan off ptm0. [ 212.544586][ T8325] ubi0: attaching mtd0 [ 212.553356][ T8325] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 212.619992][ T8325] eraseblock attaching information dump: [ 212.636059][ T8325] ec 1 [ 212.639464][ T8325] pnum 0 [ 212.681957][ T8325] lnum 0 [ 212.699965][ T8325] scrub 0 [ 212.710645][ T8325] sqnum 1 [ 212.713966][ T8325] Volume identifier header dump: [ 212.718917][ T8325] magic 55424921 [ 212.750704][ T8325] version 1 [ 212.754170][ T8325] vol_type 1 [ 212.758562][ T8325] copy_flag 0 [ 212.769972][ T8325] compat 5 [ 212.773412][ T8325] vol_id 2147479551 [ 212.777575][ T8325] lnum 0 [ 212.874935][ T8325] data_size 0 [ 212.878338][ T8325] used_ebs 0 [ 212.951229][ T8325] data_pad 0 [ 213.100571][ T8325] sqnum 1 [ 213.106509][ T8325] hdr_crc 65b3bd2d [ 213.120308][ T8325] Volume identifier header hexdump: [ 213.302122][ T8325] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 213.523458][ T8335] misc userio: Invalid payload size [ 213.904688][ T8361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.684'. [ 213.954063][ T8361] netlink: 25 bytes leftover after parsing attributes in process `syz.0.684'. [ 214.022778][ T8365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.687'. [ 214.052362][ T8365] netlink: 'syz.1.687': attribute type 1 has an invalid length. [ 214.070168][ T8365] netlink: 51505 bytes leftover after parsing attributes in process `syz.1.687'. [ 214.274923][ T8376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.689'. [ 214.330296][ T8376] unsupported nlmsg_type 40 [ 214.447880][ T8382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.690'. [ 214.777466][ T8359] FAULT_INJECTION: forcing a failure. [ 214.777466][ T8359] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 214.810079][ T8359] CPU: 1 UID: 0 PID: 8359 Comm: syz.2.685 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.810124][ T8359] Tainted: [L]=SOFTLOCKUP [ 214.810134][ T8359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 214.810150][ T8359] Call Trace: [ 214.810160][ T8359] [ 214.810170][ T8359] dump_stack_lvl+0x100/0x190 [ 214.810213][ T8359] should_fail_ex.cold+0x5/0xa [ 214.810236][ T8359] ? prepare_alloc_pages+0x16d/0x5f0 [ 214.810274][ T8359] should_fail_alloc_page+0xeb/0x140 [ 214.810307][ T8359] prepare_alloc_pages+0x1f0/0x5f0 [ 214.810345][ T8359] __alloc_frozen_pages_noprof+0x193/0x2410 [ 214.810381][ T8359] ? stack_trace_save+0x8e/0xc0 [ 214.810418][ T8359] ? __pfx_stack_trace_save+0x10/0x10 [ 214.810469][ T8359] ? stack_depot_save_flags+0x27/0x9d0 [ 214.810508][ T8359] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 214.810532][ T8359] ? kasan_save_track+0x14/0x30 [ 214.810558][ T8359] ? alloc_ldt_struct+0x5d/0x1b0 [ 214.810593][ T8359] ? __x64_sys_modify_ldt+0xb1/0x170 [ 214.810629][ T8359] ? do_syscall_64+0x106/0xf80 [ 214.810665][ T8359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.810707][ T8359] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 214.810743][ T8359] ? policy_nodemask+0xed/0x4f0 [ 214.810775][ T8359] alloc_pages_mpol+0x1fb/0x550 [ 214.810808][ T8359] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 214.810849][ T8359] alloc_pages_noprof+0x131/0x390 [ 214.810880][ T8359] get_zeroed_page_noprof+0x18/0xb0 [ 214.810922][ T8359] alloc_ldt_struct+0x9f/0x1b0 [ 214.810961][ T8359] write_ldt+0x62b/0xd40 [ 214.811009][ T8359] ? __pfx_write_ldt+0x10/0x10 [ 214.811050][ T8359] ? fput+0x79/0x100 [ 214.811083][ T8359] ? xfd_validate_state+0x129/0x190 [ 214.811128][ T8359] __x64_sys_modify_ldt+0xb1/0x170 [ 214.811171][ T8359] do_syscall_64+0x106/0xf80 [ 214.811212][ T8359] ? clear_bhb_loop+0x40/0x90 [ 214.811246][ T8359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.811275][ T8359] RIP: 0033:0x7f826ef9bf79 [ 214.811300][ T8359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.811332][ T8359] RSP: 002b:00007f826fd77028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 214.811360][ T8359] RAX: ffffffffffffffda RBX: 00007f826f215fa0 RCX: 00007f826ef9bf79 [ 214.811387][ T8359] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000001 [ 214.811405][ T8359] RBP: 00007f826f0327e0 R08: 0000000000000000 R09: 0000000000000000 [ 214.811423][ T8359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.811441][ T8359] R13: 00007f826f216038 R14: 00007f826f215fa0 R15: 00007fffb4cc5e58 [ 214.811481][ T8359] [ 216.032434][ T8409] XFS: Clearing xfsstats [ 216.075824][ T8409] futex_wake_op: syz.2.695 tries to shift op by -2048; fix this program [ 216.090160][ T8409] futex_wake_op: syz.2.695 tries to shift op by -2048; fix this program [ 216.110990][ T8409] 0x000000000001-0x000000020000 : "" [ 216.196823][ T8409] ftl_cs: FTL header corrupt! [ 216.619766][ T8418] zswap: compressor not available [ 217.017202][ T8434] XFS: Clearing xfsstats [ 217.051143][ T8434] futex_wake_op: syz.2.699 tries to shift op by -2048; fix this program [ 217.077637][ T8434] futex_wake_op: syz.2.699 tries to shift op by -2048; fix this program [ 217.553226][ T8421] kexec: Could not allocate control_code_buffer [ 217.633014][ T8441] XFS: Clearing xfsstats [ 217.662336][ T8441] futex_wake_op: syz.1.701 tries to shift op by -2048; fix this program [ 217.694946][ T8441] futex_wake_op: syz.1.701 tries to shift op by -2048; fix this program [ 217.715667][ T8441] 0x000000000001-0x000000020000 : "" [ 217.743017][ T8441] ftl_cs: FTL header corrupt! [ 218.571197][ T5831] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 219.000041][ T8463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.704'. [ 219.066795][ T8463] netlink: 'syz.0.704': attribute type 6 has an invalid length. [ 219.112011][ T8463] netlink: 20232 bytes leftover after parsing attributes in process `syz.0.704'. [ 219.170182][ T8463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.704'. [ 219.513904][ T8470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.706'. [ 219.771237][ T8474] netlink: 'syz.0.706': attribute type 1 has an invalid length. [ 219.815582][ T8474] netlink: 5 bytes leftover after parsing attributes in process `syz.0.706'. [ 219.857399][ T8474] netlink: 'syz.0.706': attribute type 1 has an invalid length. [ 220.058128][ T8478] futex_wake_op: syz.3.709 tries to shift op by -2048; fix this program [ 220.141448][ T8478] futex_wake_op: syz.3.709 tries to shift op by -2048; fix this program [ 220.178082][ T8483] 0x000000000001-0x000000020000 : "" [ 220.202674][ T8483] ftl_cs: FTL header corrupt! [ 222.164922][ T8509] netlink: 5 bytes leftover after parsing attributes in process `syz.1.715'. [ 222.247231][ T8517] netlink: 25 bytes leftover after parsing attributes in process `syz.3.718'. [ 222.612778][ T8528] XFS: Clearing xfsstats [ 222.683079][ T8528] futex_wake_op: syz.1.720 tries to shift op by -2048; fix this program [ 222.730854][ T8528] futex_wake_op: syz.1.720 tries to shift op by -2048; fix this program [ 222.767209][ T8536] random: crng reseeded on system resumption [ 222.836390][ T8521] 0x000000000001-0x000000020000 : "" [ 222.870445][ T8521] ftl_cs: FTL header corrupt! [ 223.693762][ T8551] random: crng reseeded on system resumption [ 225.475736][ T5831] Bluetooth: hci0: unexpected event 0x1c length: 725 > 5 [ 225.827798][ T8593] misc userio: Invalid payload size [ 226.325488][ T8602] XFS: Clearing xfsstats [ 226.358199][ T8604] futex_wake_op: syz.2.738 tries to shift op by -2048; fix this program [ 226.368688][ T8604] futex_wake_op: syz.2.738 tries to shift op by -2048; fix this program [ 226.381881][ T8600] futex_wake_op: syz.0.737 tries to shift op by -2048; fix this program [ 226.418249][ T8604] 0x000000000001-0x000000020000 : "" [ 226.427846][ T8600] futex_wake_op: syz.0.737 tries to shift op by -2048; fix this program [ 226.443169][ T8604] ftl_cs: FTL header corrupt! [ 227.206009][ T8623] XFS: Clearing xfsstats [ 227.212790][ T8623] futex_wake_op: syz.2.740 tries to shift op by -2048; fix this program [ 227.221307][ T8623] futex_wake_op: syz.2.740 tries to shift op by -2048; fix this program [ 227.230929][ T8623] 0x000000000001-0x000000020000 : "" [ 227.277548][ T8623] ftl_cs: FTL header corrupt! [ 228.786332][ T8652] can0: slcan on pty83. [ 228.991166][ T8651] can0 (unregistered): slcan off pty83. [ 231.285044][ T8723] futex_wake_op: syz.0.758 tries to shift op by -2048; fix this program [ 231.381006][ T8723] futex_wake_op: syz.0.758 tries to shift op by -2048; fix this program [ 231.419444][ T8723] 0x000000000001-0x000000020000 : "" [ 231.569234][ T8723] ftl_cs: FTL header corrupt! [ 234.250275][ T5831] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 235.087131][ T8784] XFS: Clearing xfsstats [ 235.133368][ T8784] futex_wake_op: syz.3.770 tries to shift op by -2048; fix this program [ 235.166995][ T8784] futex_wake_op: syz.3.770 tries to shift op by -2048; fix this program [ 235.230116][ T8780] 0x000000000001-0x000000020000 : "" [ 235.340322][ T8780] ftl_cs: FTL header corrupt! [ 235.439662][ T8792] FAULT_INJECTION: forcing a failure. [ 235.439662][ T8792] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 235.467184][ T8792] CPU: 1 UID: 0 PID: 8792 Comm: syz.0.772 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.467233][ T8792] Tainted: [L]=SOFTLOCKUP [ 235.467243][ T8792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 235.467261][ T8792] Call Trace: [ 235.467269][ T8792] [ 235.467281][ T8792] dump_stack_lvl+0x100/0x190 [ 235.467333][ T8792] should_fail_ex.cold+0x5/0xa [ 235.467360][ T8792] ? prepare_alloc_pages+0x16d/0x5f0 [ 235.467419][ T8792] should_fail_alloc_page+0xeb/0x140 [ 235.467457][ T8792] prepare_alloc_pages+0x1f0/0x5f0 [ 235.467494][ T8792] ? rcu_is_watching+0x12/0xc0 [ 235.467533][ T8792] __alloc_frozen_pages_noprof+0x193/0x2410 [ 235.467569][ T8792] ? rcu_is_watching+0x12/0xc0 [ 235.467602][ T8792] ? trace_mm_page_alloc+0x10e/0x160 [ 235.467640][ T8792] ? __alloc_frozen_pages_noprof+0x2a0/0x2410 [ 235.467672][ T8792] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 235.467715][ T8792] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 235.467742][ T8792] ? stack_depot_save_flags+0x27/0x9d0 [ 235.467775][ T8792] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 235.467802][ T8792] ? pcpu_create_chunk+0x254/0x730 [ 235.467862][ T8792] ? pcpu_create_chunk+0x254/0x730 [ 235.467911][ T8792] ? pcpu_alloc_noprof+0x18a0/0x1b70 [ 235.467944][ T8792] alloc_pages_bulk_noprof+0x777/0x1500 [ 235.467974][ T8792] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 235.468035][ T8792] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 235.468079][ T8792] ? alloc_pages_noprof+0x233/0x390 [ 235.468118][ T8792] __kasan_populate_vmalloc+0xf0/0x210 [ 235.468156][ T8792] pcpu_get_vm_areas+0x12b2/0x5160 [ 235.468214][ T8792] ? __pfx___vmalloc_noprof+0x10/0x10 [ 235.468256][ T8792] ? __pfx_pcpu_get_vm_areas+0x10/0x10 [ 235.468302][ T8792] pcpu_create_chunk+0x254/0x730 [ 235.468351][ T8792] pcpu_alloc_noprof+0x18a0/0x1b70 [ 235.468395][ T8792] bpf_map_alloc_percpu+0x9a/0xf0 [ 235.468436][ T8792] ? __pfx_bpf_map_alloc_percpu+0x10/0x10 [ 235.468476][ T8792] ? __pfx___might_resched+0x10/0x10 [ 235.468510][ T8792] ? __bpf_map_area_alloc+0x13a/0x200 [ 235.468557][ T8792] htab_map_alloc+0x1054/0x14e0 [ 235.468599][ T8792] ? ns_capable+0xd2/0xf0 [ 235.468637][ T8792] ? __pfx_htab_map_mem_usage+0x10/0x10 [ 235.468674][ T8792] map_create+0x84e/0x2ba0 [ 235.468704][ T8792] ? futex_unqueue+0x13d/0x2c0 [ 235.468748][ T8792] ? __futex_wait+0x256/0x300 [ 235.468790][ T8792] ? __pfx_map_create+0x10/0x10 [ 235.468831][ T8792] ? __might_fault+0xc5/0x140 [ 235.468857][ T8792] ? __might_fault+0xc5/0x140 [ 235.468900][ T8792] __sys_bpf+0x2091/0x4b90 [ 235.468947][ T8792] ? __pfx___sys_bpf+0x10/0x10 [ 235.468987][ T8792] ? __pfx_futex_wait+0x10/0x10 [ 235.469031][ T8792] ? do_writev+0x214/0x340 [ 235.469066][ T8792] ? do_futex+0x192/0x350 [ 235.469116][ T8792] ? xfd_validate_state+0x129/0x190 [ 235.469160][ T8792] __x64_sys_bpf+0x7b/0xc0 [ 235.469200][ T8792] ? lockdep_hardirqs_on+0x78/0x100 [ 235.469242][ T8792] do_syscall_64+0x106/0xf80 [ 235.469282][ T8792] ? clear_bhb_loop+0x40/0x90 [ 235.469318][ T8792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.469347][ T8792] RIP: 0033:0x7f407e19bf79 [ 235.469372][ T8792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.469400][ T8792] RSP: 002b:00007f407f0bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 235.469428][ T8792] RAX: ffffffffffffffda RBX: 00007f407e415fa0 RCX: 00007f407e19bf79 [ 235.469448][ T8792] RDX: 00000000000000a3 RSI: 0000200000000780 RDI: 0000000000000000 [ 235.469467][ T8792] RBP: 00007f407e2327e0 R08: 0000000000000000 R09: 0000000000000000 [ 235.469485][ T8792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.469502][ T8792] R13: 00007f407e416038 R14: 00007f407e415fa0 R15: 00007ffc5ddd3318 [ 235.469543][ T8792] [ 235.865641][ T8800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.773'. [ 235.876098][ T8800] netlink: 13 bytes leftover after parsing attributes in process `syz.1.773'. [ 236.111418][ T8780] "mq-deadline" elevator initialization, failed -12, falling back to "none" [ 236.131214][ T8780] ------------[ cut here ]------------ [ 236.136691][ T8780] !rwb [ 236.136712][ T8780] WARNING: block/blk-wbt.c:784 at wbt_init_enable_default+0xcb/0x120, CPU#0: syz.3.770/8780 [ 236.150684][ T8780] Modules linked in: [ 236.154977][ T8780] CPU: 0 UID: 0 PID: 8780 Comm: syz.3.770 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.166993][ T8780] Tainted: [L]=SOFTLOCKUP [ 236.171523][ T8780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 236.181691][ T8780] RIP: 0010:wbt_init_enable_default+0xcb/0x120 [ 236.187919][ T8780] Code: df e8 d9 cc a2 06 4c 89 e7 e8 e1 38 00 00 48 89 df e8 29 56 a2 06 e8 04 76 2b fd 5b 5d 41 5c e9 9b 22 a4 06 e8 f6 75 2b fd 90 <0f> 0b 90 eb 81 e8 eb 75 2b fd 90 0f 0b 90 48 b8 00 00 00 00 00 fc [ 236.207790][ T8780] RSP: 0000:ffffc9000af0f590 EFLAGS: 00010287 [ 236.213928][ T8780] RAX: 0000000000020da6 RBX: ffff888079969000 RCX: ffffc9000cd95000 [ 236.221987][ T8780] RDX: 0000000000080000 RSI: ffffffff84daf70a RDI: ffffffff8bfa9120 [ 236.230209][ T8780] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 236.238281][ T8780] R10: 0000000000000001 R11: ffffffff82708ed4 R12: ffff88802a6ad5c8 [ 236.249842][ T8780] R13: ffff888079969390 R14: ffff88802a6ad5d8 R15: ffff888079969090 [ 236.259179][ T8780] FS: 00007f1ad75206c0(0000) GS:ffff8881245a5000(0000) knlGS:0000000000000000 [ 236.268260][ T8780] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 236.274887][ T8780] CR2: 0000001b30ae6ff8 CR3: 0000000041012000 CR4: 00000000003526f0 [ 236.282957][ T8780] Call Trace: [ 236.286230][ T8780] [ 236.289154][ T8780] blk_register_queue+0x39e/0x4e0 [ 236.294232][ T8780] __add_disk+0x73f/0xe40 [ 236.298574][ T8780] add_disk_fwnode+0x118/0x5c0 [ 236.303484][ T8780] add_mtd_blktrans_dev+0xd0b/0x1520 [ 236.308777][ T8780] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 236.314573][ T8780] mtdblock_add_mtd+0x1cc/0x270 [ 236.319432][ T8780] blktrans_notify_add+0xa2/0xf0 [ 236.324465][ T8780] add_mtd_device+0xbe3/0x1750 [ 236.329301][ T8780] ? __pfx_add_mtd_device+0x10/0x10 [ 236.334658][ T8780] mtd_add_partition+0x30a/0x660 [ 236.339635][ T8780] ? __pfx_mtd_add_partition+0x10/0x10 [ 236.345182][ T8780] ? __might_fault+0xc5/0x140 [ 236.351636][ T8780] ? __might_fault+0xc5/0x140 [ 236.357536][ T8780] mtdchar_blkpg_ioctl+0x207/0x250 [ 236.362810][ T8780] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 236.368507][ T8780] mtdchar_ioctl+0x1670/0x1fd0 [ 236.373393][ T8780] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 236.378597][ T8780] ? lock_acquire+0x17c/0x330 [ 236.383419][ T8780] ? __pfx___might_resched+0x10/0x10 [ 236.388742][ T8780] ? trace_contention_end+0xd6/0x110 [ 236.394116][ T8780] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 236.399494][ T8780] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 236.404590][ T8780] ? __pfx___mutex_lock+0x10/0x10 [ 236.409620][ T8780] ? find_held_lock+0x2b/0x80 [ 236.414586][ T8780] mtdchar_unlocked_ioctl+0xb0/0xf0 [ 236.419831][ T8780] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 236.425795][ T8780] __x64_sys_ioctl+0x18e/0x210 [ 236.430610][ T8780] do_syscall_64+0x106/0xf80 [ 236.435203][ T8780] ? clear_bhb_loop+0x40/0x90 [ 236.439954][ T8780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.445880][ T8780] RIP: 0033:0x7f1ad659bf79 [ 236.450328][ T8780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.471003][ T8780] RSP: 002b:00007f1ad7520028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 236.480606][ T8780] RAX: ffffffffffffffda RBX: 00007f1ad6815fa0 RCX: 00007f1ad659bf79 [ 236.488607][ T8780] RDX: 0000000000000000 RSI: 0000000000001269 RDI: 0000000000000008 [ 236.496920][ T8780] RBP: 00007f1ad66327e0 R08: 0000000000000000 R09: 0000000000000000 [ 236.504971][ T8780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.512989][ T8780] R13: 00007f1ad6816038 R14: 00007f1ad6815fa0 R15: 00007ffd13c1fb18 [ 236.521006][ T8780] [ 236.524018][ T8780] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 236.531290][ T8780] CPU: 0 UID: 0 PID: 8780 Comm: syz.3.770 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.542038][ T8780] Tainted: [L]=SOFTLOCKUP [ 236.546354][ T8780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 236.556402][ T8780] Call Trace: [ 236.559696][ T8780] [ 236.562721][ T8780] dump_stack_lvl+0x100/0x190 [ 236.567399][ T8780] vpanic+0x20d/0x630 [ 236.571394][ T8780] panic+0xd1/0xd1 [ 236.575109][ T8780] ? __pfx_panic+0x10/0x10 [ 236.579557][ T8780] check_panic_on_warn.cold+0x19/0x34 [ 236.584922][ T8780] ? wbt_init_enable_default+0xcb/0x120 [ 236.590459][ T8780] __warn.cold+0x191/0x2f8 [ 236.594865][ T8780] __report_bug+0x296/0x3d0 [ 236.599370][ T8780] ? wbt_init_enable_default+0xcb/0x120 [ 236.604967][ T8780] ? __pfx___report_bug+0x10/0x10 [ 236.610004][ T8780] ? wbt_init_enable_default+0xcb/0x120 [ 236.615558][ T8780] report_bug+0xb2/0x220 [ 236.619803][ T8780] ? wbt_init_enable_default+0xcb/0x120 [ 236.625348][ T8780] handle_bug+0x166/0x2a0 [ 236.629675][ T8780] exc_invalid_op+0x17/0x50 [ 236.634183][ T8780] asm_exc_invalid_op+0x1a/0x20 [ 236.639055][ T8780] RIP: 0010:wbt_init_enable_default+0xcb/0x120 [ 236.645226][ T8780] Code: df e8 d9 cc a2 06 4c 89 e7 e8 e1 38 00 00 48 89 df e8 29 56 a2 06 e8 04 76 2b fd 5b 5d 41 5c e9 9b 22 a4 06 e8 f6 75 2b fd 90 <0f> 0b 90 eb 81 e8 eb 75 2b fd 90 0f 0b 90 48 b8 00 00 00 00 00 fc [ 236.664841][ T8780] RSP: 0000:ffffc9000af0f590 EFLAGS: 00010287 [ 236.670915][ T8780] RAX: 0000000000020da6 RBX: ffff888079969000 RCX: ffffc9000cd95000 [ 236.678889][ T8780] RDX: 0000000000080000 RSI: ffffffff84daf70a RDI: ffffffff8bfa9120 [ 236.686863][ T8780] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 236.694840][ T8780] R10: 0000000000000001 R11: ffffffff82708ed4 R12: ffff88802a6ad5c8 [ 236.702902][ T8780] R13: ffff888079969390 R14: ffff88802a6ad5d8 R15: ffff888079969090 [ 236.710882][ T8780] ? kasan_save_track+0x14/0x30 [ 236.715753][ T8780] ? wbt_init_enable_default+0xca/0x120 [ 236.721402][ T8780] blk_register_queue+0x39e/0x4e0 [ 236.726440][ T8780] __add_disk+0x73f/0xe40 [ 236.730796][ T8780] add_disk_fwnode+0x118/0x5c0 [ 236.735586][ T8780] add_mtd_blktrans_dev+0xd0b/0x1520 [ 236.740895][ T8780] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 236.746661][ T8780] mtdblock_add_mtd+0x1cc/0x270 [ 236.751535][ T8780] blktrans_notify_add+0xa2/0xf0 [ 236.756493][ T8780] add_mtd_device+0xbe3/0x1750 [ 236.761271][ T8780] ? __pfx_add_mtd_device+0x10/0x10 [ 236.766486][ T8780] mtd_add_partition+0x30a/0x660 [ 236.771442][ T8780] ? __pfx_mtd_add_partition+0x10/0x10 [ 236.776914][ T8780] ? __might_fault+0xc5/0x140 [ 236.781592][ T8780] ? __might_fault+0xc5/0x140 [ 236.786284][ T8780] mtdchar_blkpg_ioctl+0x207/0x250 [ 236.791414][ T8780] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 236.797094][ T8780] mtdchar_ioctl+0x1670/0x1fd0 [ 236.801896][ T8780] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 236.807058][ T8780] ? lock_acquire+0x17c/0x330 [ 236.811755][ T8780] ? __pfx___might_resched+0x10/0x10 [ 236.817055][ T8780] ? trace_contention_end+0xd6/0x110 [ 236.822358][ T8780] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 236.827746][ T8780] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 236.832789][ T8780] ? __pfx___mutex_lock+0x10/0x10 [ 236.837839][ T8780] ? find_held_lock+0x2b/0x80 [ 236.842546][ T8780] mtdchar_unlocked_ioctl+0xb0/0xf0 [ 236.847760][ T8780] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 236.853667][ T8780] __x64_sys_ioctl+0x18e/0x210 [ 236.858453][ T8780] do_syscall_64+0x106/0xf80 [ 236.863061][ T8780] ? clear_bhb_loop+0x40/0x90 [ 236.867748][ T8780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.873647][ T8780] RIP: 0033:0x7f1ad659bf79 [ 236.878072][ T8780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.897684][ T8780] RSP: 002b:00007f1ad7520028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 236.906108][ T8780] RAX: ffffffffffffffda RBX: 00007f1ad6815fa0 RCX: 00007f1ad659bf79 [ 236.914087][ T8780] RDX: 0000000000000000 RSI: 0000000000001269 RDI: 0000000000000008 [ 236.922053][ T8780] RBP: 00007f1ad66327e0 R08: 0000000000000000 R09: 0000000000000000 [ 236.930025][ T8780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.937995][ T8780] R13: 00007f1ad6816038 R14: 00007f1ad6815fa0 R15: 00007ffd13c1fb18 [ 236.945982][ T8780] [ 236.949543][ T8780] Kernel Offset: disabled [ 236.953857][ T8780] Rebooting in 86400 seconds..