last executing test programs: 15.014480576s ago: executing program 1 (id=3736): unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(0x3, 0xfffffffe) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fsopen$auto(0x0, 0x1) prctl$auto(0x1000000003b, 0x1, 0x4, 0xd73, 0x7) madvise$auto(0xfffffffffffffffa, 0x9, 0x19) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xfc4f}, 0x1, 0x0, 0x0, 0x9}, 0x8}, 0x3, 0x0) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, r0) socket(0x2, 0x80002, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r2, 0x1, 0x70bd2d, 0x25dfdbf6, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3b}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x11e789c}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) 12.621026388s ago: executing program 1 (id=3731): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) r1 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400005, 0x100000005}}) ioctl$auto_EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x2, 0x2, 0x1, 0x2}) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0xfffffffffffffffd, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) getsockopt$auto_SO_RCVMARK(r2, 0x0, 0x4b, 0x0, 0x0) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) pread64$auto(r3, 0x0, 0x800007, 0x9) r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r4, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fb4a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f00", 0xa}) ioctl$auto_UI_DEV_CREATE(r4, 0x5501, 0x0) writev$auto(r4, &(0x7f0000000340)={0x0, 0x500000}, 0x9) clock_settime$auto(0x14, 0x0) 10.378886489s ago: executing program 1 (id=3737): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x80e42, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) read$auto(r1, 0x0, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) socket(0x22, 0x3, 0x0) bind$auto(0x3, &(0x7f0000000080)=@isdn={0x22, 0x3d, 0x7, 0x64, 0x7}, 0x6b) sendfile$auto(r0, r2, 0x0, 0x1000200) mmap$auto(0x0, 0x5, 0x4000, 0xeb1, r2, 0x8001) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/cuse\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/pci0000:00/0000:00:00.0/msi_bus\x00', 0x149b01, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000140), 0x7111}, 0x8) 9.776833904s ago: executing program 3 (id=3740): write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) io_uring_setup$auto(0xf0, &(0x7f0000000180)={0x6, 0x18, 0xd64, 0xc852, 0x6, 0x7, r0, [0x1, 0x401, 0x1000], {0x7, 0x5, 0x1, 0x4, 0x95, 0xf4c, 0x7fff, 0xfffffffb, 0x65f29f6d}, {0x3, 0xadc, 0x10000, 0x0, 0x5, 0xffffffff, 0x1000, 0x54f, 0x5}}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r1 = socket(0xa, 0x3, 0xff) connect$auto(r1, &(0x7f00000018c0)=@generic={0xa}, 0x55) write$auto_proc_mem_operations_base(0xffffffffffffffff, 0x0, 0x0) madvise$auto(0x1ffff000, 0x7, 0x100000000) mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}}) syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0) futex_wake$auto(0x0, 0x5, 0x4, 0xa) futex_wake$auto(&(0x7f0000000000)="facff2b53ab3522cb329b5a87bdbc091f5a6ad597f2789e870d64db4cf6503135f5a750abc973b65703b664991ab45d13445d9c4df1d25210345f44468854c9689b943d1c65073bf11fd0c98fb48f9f4d67c0908e7470167", 0xfffffffffffffff8, 0xfff, 0x7f) shmget$auto(0x8, 0x10563, 0x568d1af2) 8.882352754s ago: executing program 1 (id=3744): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) bind$auto(0x3, 0x0, 0x6a) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = ioctl$auto_UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r0, 0xfffffffe, 0x8, 0x2}) socket(0x2, 0x80802, 0x0) r2 = socket(0x2b, 0x1, 0x0) ioctl$auto_BTRFS_IOC_ENCODED_WRITE_32(0xffffffffffffffff, 0x40789440, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) ioctl$auto_SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000080)="175679ebe11ad9956a7a2c482809f39b64c46475443970e7be0c1a0a6e3342336f47023428503ce8d7c34721c8a3f197b7c3f7ebf0da20965d8acd8c4b2e506654f9aa56dcd5c947c84562d92cc2ca22ab6b0531333749383f2e2435dc81f9bd26cd60fb9492c9f96d27067d48bef5af87907ae10d3ddf25bf6435941545d2cefa2d30878bcd535e586b777aea98c2ae8a6cd9e94408209f28547f08c38888da6fe865ec67f3") recvmmsg$auto(0x3, 0x0, 0xfffe, 0x6, 0x0) connect$auto(0x3, 0x0, 0x51) setresgid$auto(0x800, 0xee01, 0xffffffffffffffff) prctl$auto_PR_SET_MM_END_DATA(0x900000, 0x4, 0x0, 0x6, 0x7ff) 8.147500566s ago: executing program 3 (id=3746): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, 0x0, 0x54) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000200)='/-\xc4-\'(])\x00', 0x8, 0x3) write$auto(0x3, 0x0, 0x1) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r1, 0x0, 0x400000000006) sysfs$auto(0x2, 0xd, 0x0) unshare$auto(0x40000080) mmap$auto(0x3dbcb68f, 0x7ff, 0xffb, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1, 0x1, 0x0, 0x402, 0xdd16) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa142, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000140)={{@inferred, 0xfffffffd, 0x4, 0x8, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d"}, 0x43, 0x5, 0x4, @inferred, @enumerated={0x3, 0x800, "c832bcbae48ab01ec23457b7fd2dd3547c4e2eeba79edd0d1599ded9cbfaf517162fbe6a6f50f1aaa18fb20cabb4f176263bb0e781e3d0a2f992e8fcdcec86d9", 0x400, 0xc278}, "7a9fc199a16a2311eacf2fc7ae1da978dc3e8090334fdd73340238d212b6debe0ada55bdd70925450e24e87212f0bcab84a16f7ce8cbce0bb32777702b8d7c2d"}) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec10\x00', 0x101901, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x2, 0x9b3, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]}) ioctl$auto_CEC_TRANSMIT(r3, 0xc0386105, 0x0) 7.822062766s ago: executing program 0 (id=3747): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) recvmmsg$auto(r0, &(0x7f00000000c0)={{&(0x7f00000001c0)="3584df3619212a7c67b8cfd38dfe0cfd33ea9d6f805b15afef3c9d6ad7e9f861eced5d8257ab6a722ba9d844eb3083b557eba63fd890a3faabad4b2f516133b6793542b4426c409a4be312165aeb5ff331127980621d58b6b7c891bcb5d9d8e0072ba2b097635b8ef1b3003601c23899eb0f7721a2ab92be17c447f4bbb38c5f477947d168e1cb147ab08d02a8a55170a35081869c23b8448ef400204d881599b583df", 0x7, &(0x7f0000000080)={&(0x7f0000000000)="b912174eaebb8e605169d386bf3a4ee25976e58dfcb02889e8e7dcdbd018aa23f51b3e81104581608dfc5bbb22f6110b3af7dc", 0x3}, 0x0, &(0x7f0000000280)="9a0256ed9a83991e08b790deabe1ae3bebda4e2c9f38e8946cdd53db267a1be31e5353ffd9ede87b782e7f15c6964b6b993b95bdac78b2351ddf29d69ce63169311ddf48d8a273bb6277d35e97c91b259a57512bfdf257a18f02332c20ca4a345e35388f3a51608879d2ac7240535c4765ef18f378fe081385a35c54055637caf0a5db81e109e7780348bfaf098affb7def1b699d6b60fa3cc21ca1c92f771a18f0f5fc910927c7feee626cf597d77411ff71eaf605e868364444a7a33a3b779d646c0c405", 0x6, 0xa01}, 0x6}, 0x400, 0x200, &(0x7f0000000380)={0x3, 0x3}) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/trace_marker_raw\x00', 0x40, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) setresuid$auto(0x0, 0x0, 0x0) ioctl$auto_BLKALIGNOFF(r1, 0x127a, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYRES32=r3, @ANYRES32=r1, @ANYRESDEC=r2, @ANYRESDEC=0x0, @ANYRES16], 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0xc000) syz_clone(0x80010000, &(0x7f00000008c0)="65b2b2b17639fd35b174c4bd101de0bde7ec8f938a472dc95cbd1742b6f9ac69fb811acd734aa1427b726d1207670b4ecd6aaf9cf7fbf22e4c7b074cd87bb9a12584889f566e8ac2d282b1e93d719504acaeef9b46b7c67f06809092a6ad84e799d7f3b823c1d1b863b15dc8839aea525000906600bf43e12d82bf863d16c0ca5b473d1c633391a841def9bf81259bb592e50e", 0x93, 0x0, &(0x7f00000002c0), &(0x7f0000000b00)="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") waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f00000003c0)={@_si_pad}, 0x1ecc, &(0x7f0000000440)={{0xffffffff, 0x2}, {0x7, 0x19}, 0x9, 0x80000000, 0x4, 0x5, 0x8000000000000001, 0x6, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1000, 0x0, 0x4}) getpgid$auto(0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x8203, 0x0) 7.414552343s ago: executing program 3 (id=3748): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0x301000, 0x0) r1 = socket(0x22, 0x3, 0x0) bind$auto(r1, &(0x7f0000000040)=@l2tp={0x2, 0x0, @multicast2}, 0x5) ioctl$auto(r0, 0x40104d01, r0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7}) pread64$auto(r2, 0x0, 0x7ff, 0xd) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x20882, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/ram4/queue/nr_zones\x00', 0x17003, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000000)='\x00', 0x1) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) 6.739919048s ago: executing program 0 (id=3749): r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x3, 0x4001}, 0x4006b) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) semctl$auto(0xa, 0x2, 0x13, 0xde) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS0\x00', 0x101e81, 0x0) write$auto_tty_fops_tty_io(r2, &(0x7f0000000680), 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) ioctl$auto_I2C_SMBUS(r1, 0x720, &(0x7f0000000080)) recvmmsg$auto(0x3, 0x0, 0x80000401, 0x4000, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x5) r3 = socket(0x11, 0xa, 0x9) bind$auto(r3, 0x0, 0x9) sendmsg$auto_OVS_FLOW_CMD_SET(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) 6.035953594s ago: executing program 3 (id=3750): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x300c00, 0x0) ioctl$auto_TIOCGDEV2(r0, 0x80045432, &(0x7f0000000040)=0xddc) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r1, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x4a7) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) getpgid(0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, 0x0, 0x414041, 0x0) mmap$auto(0x0, 0x400008, 0xde, 0x9b72, 0x2, 0x800008000) 5.809282976s ago: executing program 0 (id=3751): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x1) io_uring_setup$auto(0x6, 0x0) socket(0x10, 0x2, 0x0) socket(0x2c, 0x3, 0x0) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) socket(0xa, 0x801, 0x84) socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x0) socket(0xa, 0x801, 0x84) socket(0x2, 0x801, 0x106) socket(0xa, 0x2, 0x0) socket(0xa, 0x2, 0x3a) io_uring_setup$auto(0x6, 0x0) r0 = socket(0xa, 0x2, 0x88) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=0x4, 0x8, @old_prog_fd=r0}, 0xa3) bpf$auto(0x1, &(0x7f0000000040)=@query={@target_ifindex, 0xff, 0xffffff01, 0x9, 0x6, @count=0xfffffff1, 0x0, 0x80000000, 0xc, 0x0, 0x7}, 0x9) 5.099217226s ago: executing program 0 (id=3753): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = clone3$auto(&(0x7f0000000040)={0x43, 0x4, 0xa5e7, 0x10000, 0x1, 0x8000000000000000, 0x10, 0x5, 0xf, 0x1ff, 0x5185}, 0x1) prctl$auto(0x3e, 0x1, r1, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f0000000000)) mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x80000001) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0xfffffffffffffffe, 0x240007, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) r3 = prctl$auto_PR_SET_MM_END_DATA(0x223, 0x4, r1, 0x5, 0x9) ioctl$auto_HPET_IRQFREQ(r3, 0x40086806, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r5 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r4, 0x4b72, r5) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) rseq$auto(&(0x7f0000000340)={0xe, 0x401, 0x0, 0x806, 0xffffffff, 0x2}, 0x8000, 0x0, 0x8000006) 4.38624315s ago: executing program 3 (id=3754): mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/irq/6/smp_affinity_list\x00', 0xe0182, 0x0) readv$auto(r0, &(0x7f0000000140)={0x0, 0x8}, 0x200000000080003) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/pagetypeinfo\x00', 0x109040, 0x0) ioctl$auto_FS_IOC_RESVSP(r1, 0x40305828, 0x4) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/rose8/address\x00', 0x752502, 0x0) arch_prctl$auto_ARCH_MAP_VDSO_32(0x2002, 0x3) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/kexec_load_limit_panic\x00', 0x101202, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) 3.838025053s ago: executing program 2 (id=3755): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x80e42, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) read$auto(r0, 0x0, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) socket(0x22, 0x3, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/cuse\x00', 0x0, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) io_uring_setup$auto(0x6, 0x0) select$auto(0x5, 0x0, &(0x7f0000000140)={[0x9, 0x8, 0x3, 0x10, 0x3, 0x9, 0x9, 0xff, 0x3, 0x2, 0x2, 0x7, 0x100000001, 0x8000000000000001, 0x4, 0x9]}, 0x0, 0x0) 3.449540779s ago: executing program 2 (id=3756): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0xc048aeca, 0x0) r2 = openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, 0x0, 0x40000, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x3c8082, 0x0) openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/options/overwrite\x00', 0x121082, 0x0) capget$auto(&(0x7f00000000c0)={0x0, 0xffffffffffffffff}, &(0x7f0000000140)={0x72c, 0x61a, 0x1}) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r3, 0x0, 0x1ff) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x710e}, 0x8) read$auto_o2hb_debug_fops_heartbeat(r2, 0x0, 0x0) 3.385742121s ago: executing program 1 (id=3757): mmap$auto(0xffffffffffffffff, 0x20005, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020008, 0xffffffffffffffff, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) socket(0x2, 0x1, 0x106) connect$auto(0x3, 0x0, 0x54) ioprio_set$auto(0x3, 0x0, 0x4b34) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r0 = io_uring_setup$auto(0x59, 0x0) socket(0xf, 0x3, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@link_create={@prog_fd=r0, @target_fd=0xa, 0x3, 0x8, @tracing={0x4, 0xffffffff}}, 0xfbf) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, 0x0, 0xc0401, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r1, 0x0, 0x80, 0x0, 0x0) 2.843639922s ago: executing program 2 (id=3758): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) writev$auto(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0x101}, 0x1) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x5, 0x0, 0x2, 0x0) mmap$auto(0x88, 0xe983, 0xdc, 0xeb5, 0x401, 0x41) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380)=&(0x7f00000004c0)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xcaGzw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\x1c\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00', 0x0) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$auto_null_fops_mem(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x100000000, 0x66) madvise$auto(0x1000, 0x400050, 0x9) ioctl$auto_USB_RAW_IOCTL_EP_SET_HALT(r3, 0x4004550d, &(0x7f0000000180)=0x795) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd41, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x341, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x8, 0x400]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000440)={[0x10000000001ff, 0x4, 0xd, 0x1, 0x3, 0x10, 0x15f4da0a, 0x3, 0x5, 0x62, 0x80000023, 0x7, 0x6d3e, 0xd, 0xd, 0x40000000001]}, 0x0) 2.842028627s ago: executing program 3 (id=3766): mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) sysfs$auto(0x2, 0x23, 0x0) open(0x0, 0x22040, 0x75) fallocate$auto(r0, 0x9, 0x2, 0xd) utimes$auto(0x0, 0x0) clone$auto(0x20003b46, 0x7, 0x0, 0x0, 0x2) mprotect$auto(0x0, 0x8000000000000001, 0x8) socket(0x5, 0x801, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, 0x0, 0x9) listen$auto(0x3, 0xffffff39) r2 = openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) lseek$auto(r2, 0x8000, 0x0) mmap$auto(0x0, 0x202000c, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 2.216462253s ago: executing program 2 (id=3759): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0x301000, 0x0) r1 = socket(0x22, 0x3, 0x0) bind$auto(r1, &(0x7f0000000040)=@l2tp={0x2, 0x0, @multicast2}, 0x5) ioctl$auto(r0, 0x40104d01, r0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7}) pread64$auto(r2, 0x0, 0x7ff, 0xd) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x20882, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/ram4/queue/nr_zones\x00', 0x17003, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000000)='\x00', 0x1) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) 2.210853585s ago: executing program 0 (id=3768): madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0x20499d, 0x9) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) open(&(0x7f0000000100)='./file0\x00', 0x161302, 0x17f) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) read$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmstat\x00', 0x20000, 0x0) adjtimex$auto(0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x141300, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x121002, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x42000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x80000001, 0x7, 0x77, 0x0) adjtimex$auto(0x0) adjtimex$auto(0x0) write$auto(0x3, 0x0, 0xfffffdef) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) r0 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) ioctl$auto_BTRFS_IOC_DEVICES_READY(r0, 0x90009427, &(0x7f0000001080)={@inferred, "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"}) 994.679411ms ago: executing program 0 (id=3760): unshare$auto(0x40000080) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) socket(0x2, 0x1, 0x106) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) write$auto(r0, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb) capset$auto(0x0, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', 0x0, 0x10000, 0x0) mount$auto(0x0, &(0x7f0000000180)='}[,&*}\x00', 0x0, 0xeb, 0x0) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, 0x0) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x9, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000080), r3) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/swradio11\x00', 0x80002, 0x0) mmap$auto(0x7fffffffe000, 0x81, 0xffffffffffffa3a6, 0x8011, 0x3, 0x8000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) mq_timedsend$auto(0xffffffffffffffff, 0x0, 0x2, 0x6, 0x0) ioctl$auto_SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000200)="538b2f525e17429845091e0af7da403c56eaa6f80b80de3866dbf18d049307def4e2becf58bc80eccb7cf4264c2051d48b9e9366e07e691f93161a7afbaedd1e5653be34b2ba4594cb045fb918676c92bf2f0e59566c5f5cac2cd65d9f26a74c18737b1e66395f4a71bbb60ed6d9ebec9220c0efff4c2be998cf1b3b0aefedb898978058171f2dc17cd27cf0ad") 442.282555ms ago: executing program 2 (id=3761): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r0 = socket(0x2, 0x1, 0x84) setsockopt$auto(r0, 0x84, 0x15, 0x0, 0x1) 253.808146ms ago: executing program 1 (id=3762): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x300c00, 0x0) ioctl$auto_TIOCGDEV2(r0, 0x80045432, &(0x7f0000000040)=0xddc) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r1, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x4a7) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) getpgid(0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, 0x0, 0x414041, 0x0) mmap$auto(0x0, 0x400008, 0xde, 0x9b72, 0x2, 0x800008000) 0s ago: executing program 2 (id=3763): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg1\x00', 0x180443, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x121d02, 0x0) socket(0x10, 0x2, 0x14) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x622340, 0x0) openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) eventfd$auto(0x3) pipe$auto(0x0) socketpair$auto(0x1e, 0x1, 0x4, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto_TCFLSH2(r0, 0x40384708, 0x0) kernel console output (not intermixed with test programs): 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 501.670469][T13307] RBP: 00007ffbb6c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 501.670477][T13307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 501.670485][T13307] R13: 00007ffbb6e16128 R14: 00007ffbb6e16090 R15: 00007ffcba56ebf8 [ 501.670505][T13307] [ 504.742426][T13322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2266'. [ 505.069187][T13324] HfR: entered promiscuous mode [ 505.210595][T13322] i: entered promiscuous mode [ 506.365511][T13347] FAULT_INJECTION: forcing a failure. [ 506.365511][T13347] name failslab, interval 1, probability 0, space 0, times 0 [ 506.470839][T13347] CPU: 0 UID: 0 PID: 13347 Comm: syz.3.2273 Tainted: G L syzkaller #0 PREEMPT(full) [ 506.470865][T13347] Tainted: [L]=SOFTLOCKUP [ 506.470870][T13347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 506.470879][T13347] Call Trace: [ 506.470885][T13347] [ 506.470891][T13347] dump_stack_lvl+0x100/0x190 [ 506.470919][T13347] should_fail_ex.cold+0x5/0xa [ 506.470936][T13347] should_failslab+0xc2/0x120 [ 506.470952][T13347] __kmalloc_node_noprof+0xe6/0x850 [ 506.470972][T13347] ? __blk_mq_realloc_hw_ctxs+0x579/0x820 [ 506.470993][T13347] __blk_mq_realloc_hw_ctxs+0x579/0x820 [ 506.471012][T13347] ? lockdep_init_map_type+0x5c/0x250 [ 506.471034][T13347] blk_mq_init_allocated_queue+0x308/0x1440 [ 506.471059][T13347] ? blk_alloc_queue+0x627/0x790 [ 506.471075][T13347] ? blk_alloc_queue+0x1a3/0x790 [ 506.471094][T13347] blk_mq_alloc_queue+0x1bd/0x290 [ 506.471114][T13347] ? __pfx_blk_mq_alloc_queue+0x10/0x10 [ 506.471145][T13347] ? blk_mq_alloc_tag_set+0xe2c/0x1330 [ 506.471174][T13347] __blk_mq_alloc_disk+0x29/0x120 [ 506.471196][T13347] loop_add+0x498/0xb60 [ 506.471214][T13347] ? __pfx_loop_add+0x10/0x10 [ 506.471243][T13347] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 506.471270][T13347] loop_control_ioctl+0xae/0x620 [ 506.471290][T13347] ? __pfx_loop_control_ioctl+0x10/0x10 [ 506.471309][T13347] ? xfd_validate_state+0x129/0x190 [ 506.471329][T13347] ? __pfx_loop_control_ioctl+0x10/0x10 [ 506.471349][T13347] __x64_sys_ioctl+0x18e/0x210 [ 506.471371][T13347] do_syscall_64+0x106/0xf80 [ 506.471390][T13347] ? clear_bhb_loop+0x40/0x90 [ 506.471407][T13347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.471423][T13347] RIP: 0033:0x7f5d4b79c799 [ 506.471436][T13347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.471450][T13347] RSP: 002b:00007f5d4c61f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 506.471464][T13347] RAX: ffffffffffffffda RBX: 00007f5d4ba15fa0 RCX: 00007f5d4b79c799 [ 506.471474][T13347] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000002 [ 506.471482][T13347] RBP: 00007f5d4b832c99 R08: 0000000000000000 R09: 0000000000000000 [ 506.471491][T13347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 506.471498][T13347] R13: 00007f5d4ba16038 R14: 00007f5d4ba15fa0 R15: 00007ffd24475b08 [ 506.471517][T13347] [ 508.610785][T13364] FAULT_INJECTION: forcing a failure. [ 508.610785][T13364] name failslab, interval 1, probability 0, space 0, times 0 [ 508.729484][T13364] CPU: 0 UID: 0 PID: 13364 Comm: syz.3.2276 Tainted: G L syzkaller #0 PREEMPT(full) [ 508.729512][T13364] Tainted: [L]=SOFTLOCKUP [ 508.729518][T13364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 508.729528][T13364] Call Trace: [ 508.729533][T13364] [ 508.729540][T13364] dump_stack_lvl+0x100/0x190 [ 508.729567][T13364] should_fail_ex.cold+0x5/0xa [ 508.729585][T13364] should_failslab+0xc2/0x120 [ 508.729601][T13364] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 508.729623][T13364] ? kasprintf+0xc7/0x100 [ 508.729639][T13364] ? do_dentry_open+0x6d8/0x1660 [ 508.729652][T13364] ? vfs_open+0x82/0x3f0 [ 508.729667][T13364] ? path_openat+0x208c/0x31a0 [ 508.729683][T13364] kvasprintf+0xbc/0x150 [ 508.729699][T13364] ? __pfx_kvasprintf+0x10/0x10 [ 508.729723][T13364] kasprintf+0xc7/0x100 [ 508.729739][T13364] ? __pfx_kasprintf+0x10/0x10 [ 508.729757][T13364] ? rcu_is_watching+0x12/0xc0 [ 508.729778][T13364] ? lockdep_init_map_type+0x5c/0x250 [ 508.729800][T13364] drm_debugfs_clients_add+0x48/0x210 [ 508.729818][T13364] drm_file_alloc+0x5c6/0xb40 [ 508.729839][T13364] drm_open_helper+0x1fc/0x540 [ 508.729859][T13364] drm_open+0x1a0/0x3e0 [ 508.729875][T13364] ? __pfx_drm_open+0x10/0x10 [ 508.729891][T13364] drm_stub_open+0x20f/0x380 [ 508.729909][T13364] ? __pfx_drm_stub_open+0x10/0x10 [ 508.729925][T13364] chrdev_open+0x234/0x6a0 [ 508.729939][T13364] ? __pfx_apparmor_file_open+0x10/0x10 [ 508.729961][T13364] ? __pfx_chrdev_open+0x10/0x10 [ 508.729976][T13364] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 508.729995][T13364] do_dentry_open+0x6d8/0x1660 [ 508.730008][T13364] ? __pfx_chrdev_open+0x10/0x10 [ 508.730031][T13364] vfs_open+0x82/0x3f0 [ 508.730050][T13364] path_openat+0x208c/0x31a0 [ 508.730070][T13364] ? __pfx_path_openat+0x10/0x10 [ 508.730093][T13364] do_file_open+0x20e/0x430 [ 508.730109][T13364] ? __pfx_do_file_open+0x10/0x10 [ 508.730138][T13364] ? alloc_fd+0x476/0x790 [ 508.730154][T13364] ? do_getname+0x191/0x390 [ 508.730188][T13364] do_sys_openat2+0x10d/0x1e0 [ 508.730207][T13364] ? __pfx_do_sys_openat2+0x10/0x10 [ 508.730227][T13364] ? __fget_files+0x21f/0x3d0 [ 508.730244][T13364] __x64_sys_openat+0x12d/0x210 [ 508.730263][T13364] ? __pfx___x64_sys_openat+0x10/0x10 [ 508.730290][T13364] do_syscall_64+0x106/0xf80 [ 508.730309][T13364] ? clear_bhb_loop+0x40/0x90 [ 508.730326][T13364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.730342][T13364] RIP: 0033:0x7f5d4b79c799 [ 508.730355][T13364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.730369][T13364] RSP: 002b:00007f5d4c5fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 508.730383][T13364] RAX: ffffffffffffffda RBX: 00007f5d4ba16090 RCX: 00007f5d4b79c799 [ 508.730393][T13364] RDX: 0000000000129800 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 508.730402][T13364] RBP: 00007f5d4b832c99 R08: 0000000000000000 R09: 0000000000000000 [ 508.730410][T13364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 508.730419][T13364] R13: 00007f5d4ba16128 R14: 00007f5d4ba16090 R15: 00007ffd24475b08 [ 508.730438][T13364] [ 509.519553][ T29] audit: type=1804 audit(676908.729:12): pid=13367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2277" name="/newroot/532/file0" dev="tmpfs" ino=2789 res=1 errno=0 [ 509.632027][ T29] audit: type=1804 audit(676908.759:13): pid=13367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2277" name="/newroot/532/file0" dev="tmpfs" ino=2789 res=1 errno=0 [ 509.850206][T13378] FAULT_INJECTION: forcing a failure. [ 509.850206][T13378] name failslab, interval 1, probability 0, space 0, times 0 [ 509.890957][T13377] FAULT_INJECTION: forcing a failure. [ 509.890957][T13377] name failslab, interval 1, probability 0, space 0, times 0 [ 509.947499][T13377] CPU: 0 UID: 0 PID: 13377 Comm: syz.3.2279 Tainted: G L syzkaller #0 PREEMPT(full) [ 509.947525][T13377] Tainted: [L]=SOFTLOCKUP [ 509.947531][T13377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 509.947540][T13377] Call Trace: [ 509.947545][T13377] [ 509.947551][T13377] dump_stack_lvl+0x100/0x190 [ 509.947577][T13377] should_fail_ex.cold+0x5/0xa [ 509.947595][T13377] should_failslab+0xc2/0x120 [ 509.947611][T13377] __kmalloc_cache_noprof+0x7a/0x6f0 [ 509.947629][T13377] ? vkms_plane_duplicate_state+0x87/0x130 [ 509.947650][T13377] vkms_plane_duplicate_state+0x87/0x130 [ 509.947666][T13377] drm_atomic_get_plane_state+0x279/0x760 [ 509.947686][T13377] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 509.947707][T13377] ? trace_contention_end+0x140/0x180 [ 509.947729][T13377] ? __mutex_lock+0x26a/0x1b90 [ 509.947750][T13377] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 509.947770][T13377] ? drm_master_internal_acquire+0x21/0x80 [ 509.947806][T13377] drm_client_modeset_commit_locked+0x14d/0x580 [ 509.947829][T13377] drm_client_modeset_commit+0x4f/0x80 [ 509.947849][T13377] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 509.947873][T13377] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 509.947895][T13377] drm_fbdev_client_restore+0x1b/0x30 [ 509.947910][T13377] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 509.947925][T13377] drm_client_dev_restore+0x205/0x2a0 [ 509.947948][T13377] drm_release+0x2c6/0x360 [ 509.947966][T13377] ? __pfx_drm_release+0x10/0x10 [ 509.947983][T13377] __fput+0x3ff/0xb40 [ 509.948004][T13377] task_work_run+0x150/0x240 [ 509.948026][T13377] ? __pfx_task_work_run+0x10/0x10 [ 509.948051][T13377] exit_to_user_mode_loop+0x100/0x4a0 [ 509.948071][T13377] do_syscall_64+0x668/0xf80 [ 509.948090][T13377] ? clear_bhb_loop+0x40/0x90 [ 509.948107][T13377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.948122][T13377] RIP: 0033:0x7f5d4b79c799 [ 509.948136][T13377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.948149][T13377] RSP: 002b:00007f5d4c5fe028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 509.948164][T13377] RAX: 0000000000000000 RBX: 00007f5d4ba16090 RCX: 00007f5d4b79c799 [ 509.948173][T13377] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 509.948181][T13377] RBP: 00007f5d4b832c99 R08: 0000000000000000 R09: 0000000000000000 [ 509.948189][T13377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.948198][T13377] R13: 00007f5d4ba16128 R14: 00007f5d4ba16090 R15: 00007ffd24475b08 [ 509.948218][T13377] [ 510.236566][T13376] syz.1.2287 (13376): /proc/13373/oom_adj is deprecated, please use /proc/13373/oom_score_adj instead. [ 510.481516][T13378] CPU: 0 UID: 0 PID: 13378 Comm: syz.1.2287 Tainted: G L syzkaller #0 PREEMPT(full) [ 510.481544][T13378] Tainted: [L]=SOFTLOCKUP [ 510.481549][T13378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 510.481558][T13378] Call Trace: [ 510.481563][T13378] [ 510.481569][T13378] dump_stack_lvl+0x100/0x190 [ 510.481596][T13378] should_fail_ex.cold+0x5/0xa [ 510.481613][T13378] ? ima_alloc_init_template+0xb6/0x6d0 [ 510.481628][T13378] should_failslab+0xc2/0x120 [ 510.481642][T13378] __kmalloc_noprof+0xe0/0x850 [ 510.481675][T13378] ima_alloc_init_template+0xb6/0x6d0 [ 510.481695][T13378] ima_store_measurement+0x1e3/0x5b0 [ 510.481712][T13378] ? __pfx_ima_store_measurement+0x10/0x10 [ 510.481737][T13378] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 510.481761][T13378] process_measurement+0x19cc/0x2350 [ 510.481791][T13378] ? __pfx_process_measurement+0x10/0x10 [ 510.481837][T13378] ? seq_open+0x116/0x170 [ 510.481855][T13378] ? inode_to_bdi+0x9e/0x160 [ 510.481871][T13378] ima_file_check+0xcc/0x120 [ 510.481892][T13378] ? __pfx_ima_file_check+0x10/0x10 [ 510.481918][T13378] security_file_post_open+0xc4/0x210 [ 510.481934][T13378] path_openat+0x1418/0x31a0 [ 510.481955][T13378] ? __pfx_path_openat+0x10/0x10 [ 510.481977][T13378] do_file_open+0x20e/0x430 [ 510.481992][T13378] ? __pfx_do_file_open+0x10/0x10 [ 510.482020][T13378] ? alloc_fd+0x476/0x790 [ 510.482036][T13378] ? do_getname+0x191/0x390 [ 510.482054][T13378] do_sys_openat2+0x10d/0x1e0 [ 510.482072][T13378] ? __pfx_do_sys_openat2+0x10/0x10 [ 510.482098][T13378] __x64_sys_openat+0x12d/0x210 [ 510.482116][T13378] ? __pfx___x64_sys_openat+0x10/0x10 [ 510.482141][T13378] do_syscall_64+0x106/0xf80 [ 510.482161][T13378] ? clear_bhb_loop+0x40/0x90 [ 510.482178][T13378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.482192][T13378] RIP: 0033:0x7ffbb6b9c799 [ 510.482206][T13378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.482220][T13378] RSP: 002b:00007ffbb7a1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 510.482234][T13378] RAX: ffffffffffffffda RBX: 00007ffbb6e16090 RCX: 00007ffbb6b9c799 [ 510.482244][T13378] RDX: 0000000000008000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 510.482253][T13378] RBP: 00007ffbb6c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 510.482262][T13378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.482270][T13378] R13: 00007ffbb6e16128 R14: 00007ffbb6e16090 R15: 00007ffcba56ebf8 [ 510.482290][T13378] [ 510.742147][ T29] audit: type=1804 audit(676910.091:14): pid=13378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.1.2287" name="/newroot/sys/kernel/tracing/set_event" dev="tracefs" ino=21 res=0 errno=0 [ 510.824472][T13371] netlink: 354 bytes leftover after parsing attributes in process `syz.0.2278'. [ 513.123539][T13405] netlink: 62 bytes leftover after parsing attributes in process `syz.3.2285'. [ 513.377817][T13410] FAULT_INJECTION: forcing a failure. [ 513.377817][T13410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 513.493440][T13410] CPU: 0 UID: 0 PID: 13410 Comm: syz.0.2286 Tainted: G L syzkaller #0 PREEMPT(full) [ 513.493466][T13410] Tainted: [L]=SOFTLOCKUP [ 513.493472][T13410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 513.493484][T13410] Call Trace: [ 513.493490][T13410] [ 513.493495][T13410] dump_stack_lvl+0x100/0x190 [ 513.493522][T13410] should_fail_ex.cold+0x5/0xa [ 513.493539][T13410] _copy_from_user+0x2e/0xd0 [ 513.493558][T13410] snd_pcm_oss_write2+0x1c2/0x400 [ 513.493579][T13410] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 513.493601][T13410] snd_pcm_oss_write+0x729/0xa30 [ 513.493618][T13410] ? security_file_permission+0x76/0x210 [ 513.493640][T13410] vfs_write+0x2aa/0x1070 [ 513.493654][T13410] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 513.493673][T13410] ? __pfx_vfs_write+0x10/0x10 [ 513.493692][T13410] ? find_held_lock+0x2b/0x80 [ 513.493706][T13410] ? __fget_files+0x215/0x3d0 [ 513.493719][T13410] ? __fget_files+0x215/0x3d0 [ 513.493734][T13410] ? __fget_files+0x21f/0x3d0 [ 513.493752][T13410] ksys_write+0x12a/0x250 [ 513.493765][T13410] ? __pfx_ksys_write+0x10/0x10 [ 513.493784][T13410] do_syscall_64+0x106/0xf80 [ 513.493802][T13410] ? clear_bhb_loop+0x40/0x90 [ 513.493819][T13410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.493834][T13410] RIP: 0033:0x7fbe4fb9c799 [ 513.493847][T13410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.493860][T13410] RSP: 002b:00007fbe50a4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 513.493875][T13410] RAX: ffffffffffffffda RBX: 00007fbe4fe16180 RCX: 00007fbe4fb9c799 [ 513.493884][T13410] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 513.493893][T13410] RBP: 00007fbe4fc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 513.493901][T13410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.493909][T13410] R13: 00007fbe4fe16218 R14: 00007fbe4fe16180 R15: 00007ffcd71b0528 [ 513.493928][T13410] [ 515.538991][T13430] FAULT_INJECTION: forcing a failure. [ 515.538991][T13430] name fail_futex, interval 1, probability 0, space 0, times 0 [ 515.737972][T13430] CPU: 0 UID: 0 PID: 13430 Comm: syz.3.2292 Tainted: G L syzkaller #0 PREEMPT(full) [ 515.738000][T13430] Tainted: [L]=SOFTLOCKUP [ 515.738006][T13430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 515.738015][T13430] Call Trace: [ 515.738020][T13430] [ 515.738026][T13430] dump_stack_lvl+0x100/0x190 [ 515.738055][T13430] should_fail_ex.cold+0x5/0xa [ 515.738073][T13430] get_futex_key+0x295/0x1620 [ 515.738093][T13430] ? __pfx_get_futex_key+0x10/0x10 [ 515.738111][T13430] ? kasan_save_track+0x14/0x30 [ 515.738133][T13430] ? __kasan_kmalloc+0xaa/0xb0 [ 515.738158][T13430] futex_lock_pi+0x1d3/0x7b0 [ 515.738179][T13430] ? preempt_schedule_thunk+0x16/0x30 [ 515.738196][T13430] ? __pfx_futex_lock_pi+0x10/0x10 [ 515.738215][T13430] ? preempt_schedule_common+0x42/0xc0 [ 515.738235][T13430] ? preempt_schedule_thunk+0x16/0x30 [ 515.738258][T13430] ? __pfx_try_to_wake_up+0x10/0x10 [ 515.738278][T13430] ? futex_private_hash_put+0x107/0x1c0 [ 515.738298][T13430] ? __pfx_futex_wake_mark+0x10/0x10 [ 515.738323][T13430] ? __get_user_nocheck_8+0x20/0x20 [ 515.738341][T13430] ? do_vfs_ioctl+0x226/0x13e0 [ 515.738363][T13430] do_futex+0x18a/0x350 [ 515.738381][T13430] ? __pfx_do_futex+0x10/0x10 [ 515.738399][T13430] ? find_held_lock+0x2b/0x80 [ 515.738415][T13430] __x64_sys_futex+0x34f/0x4d0 [ 515.738435][T13430] ? __pfx___x64_sys_futex+0x10/0x10 [ 515.738460][T13430] do_syscall_64+0x106/0xf80 [ 515.738477][T13430] ? clear_bhb_loop+0x40/0x90 [ 515.738494][T13430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.738508][T13430] RIP: 0033:0x7f5d4b79c799 [ 515.738521][T13430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.738535][T13430] RSP: 002b:00007f5d4c5fe028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 515.738550][T13430] RAX: ffffffffffffffda RBX: 00007f5d4ba16090 RCX: 00007f5d4b79c799 [ 515.738559][T13430] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 515.738567][T13430] RBP: 00007f5d4b832c99 R08: 0000000000000000 R09: 000000008000fff5 [ 515.738576][T13430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 515.738584][T13430] R13: 00007f5d4ba16128 R14: 00007f5d4ba16090 R15: 00007ffd24475b08 [ 515.738603][T13430] [ 516.946926][T13440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2295'. [ 517.021901][T13440] netlink: 354 bytes leftover after parsing attributes in process `syz.1.2295'. [ 517.069591][T13442] netlink: 93 bytes leftover after parsing attributes in process `syz.2.2294'. [ 517.239866][T13438] netlink: 93 bytes leftover after parsing attributes in process `syz.2.2294'. [ 520.650489][T13479] [U] [ 520.653212][T13479] [U] [ 520.655890][T13479] [U] [ 520.658561][T13479] [U] [ 520.959707][T13479] [U] [ 520.962431][T13479] [U] [ 520.965104][T13479] [U] [ 520.967774][T13479] [U] [ 521.617442][T13472] [U] [ 522.612696][T13502] FAULT_INJECTION: forcing a failure. [ 522.612696][T13502] name failslab, interval 1, probability 0, space 0, times 0 [ 522.704931][T13502] CPU: 0 UID: 0 PID: 13502 Comm: syz.0.2310 Tainted: G L syzkaller #0 PREEMPT(full) [ 522.704958][T13502] Tainted: [L]=SOFTLOCKUP [ 522.704963][T13502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 522.704972][T13502] Call Trace: [ 522.704978][T13502] [ 522.704984][T13502] dump_stack_lvl+0x100/0x190 [ 522.705011][T13502] should_fail_ex.cold+0x5/0xa [ 522.705030][T13502] should_failslab+0xc2/0x120 [ 522.705046][T13502] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 522.705070][T13502] ? __devinet_sysctl_register+0xbc/0x360 [ 522.705096][T13502] kmemdup_noprof+0x29/0x60 [ 522.705119][T13502] __devinet_sysctl_register+0xbc/0x360 [ 522.705142][T13502] ? trace_kmalloc+0x101/0x130 [ 522.705157][T13502] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 522.705182][T13502] ? __asan_memcpy+0x3c/0x60 [ 522.705203][T13502] devinet_init_net+0x334/0x8d0 [ 522.705225][T13502] ? __pfx_devinet_init_net+0x10/0x10 [ 522.705246][T13502] ops_init+0x1e2/0x5f0 [ 522.705267][T13502] setup_net+0x118/0x3a0 [ 522.705288][T13502] ? __pfx_setup_net+0x10/0x10 [ 522.705306][T13502] ? lockdep_init_map_type+0x5c/0x250 [ 522.705325][T13502] ? mutex_init_lockep+0x110/0x150 [ 522.705347][T13502] copy_net_ns+0x46f/0x7c0 [ 522.705362][T13502] create_new_namespaces+0x3ea/0xac0 [ 522.705395][T13502] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 522.705413][T13502] ksys_unshare+0x473/0xad0 [ 522.705433][T13502] ? __pfx_ksys_unshare+0x10/0x10 [ 522.705458][T13502] __x64_sys_unshare+0x31/0x40 [ 522.705476][T13502] do_syscall_64+0x106/0xf80 [ 522.705495][T13502] ? clear_bhb_loop+0x40/0x90 [ 522.705513][T13502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.705528][T13502] RIP: 0033:0x7fbe4fb9c799 [ 522.705541][T13502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.705555][T13502] RSP: 002b:00007fbe50a8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 522.705570][T13502] RAX: ffffffffffffffda RBX: 00007fbe4fe15fa0 RCX: 00007fbe4fb9c799 [ 522.705580][T13502] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 522.705588][T13502] RBP: 00007fbe4fc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 522.705596][T13502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 522.705604][T13502] R13: 00007fbe4fe16038 R14: 00007fbe4fe15fa0 R15: 00007ffcd71b0528 [ 522.705622][T13502] [ 524.474513][T13526] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2317'. [ 524.513699][T13528] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 529.439986][T13597] capability: warning: `syz.1.2333' uses 32-bit capabilities (legacy support in use) [ 529.651861][ T29] audit: type=1800 audit(676929.261:15): pid=13601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2334" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 530.012988][T13604] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=538976288 (1077952576 ns) > initial count (3830 ns). Using initial count to start timer. [ 530.101912][T13606] netlink: 'syz.1.2336': attribute type 3 has an invalid length. [ 530.152425][T13606] netlink: 306 bytes leftover after parsing attributes in process `syz.1.2336'. [ 530.609906][T13615] netlink: 13 bytes leftover after parsing attributes in process `syz.3.2340'. [ 534.441006][T13651] blktrace: Concurrent blktraces are not allowed on loop2 [ 538.009184][T13686] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2358'. [ 539.954600][T13699] netlink: 'syz.1.2362': attribute type 2 has an invalid length. [ 540.032854][T13699] netlink: 'syz.1.2362': attribute type 3 has an invalid length. [ 540.174007][T13699] netlink: 'syz.1.2362': attribute type 2 has an invalid length. [ 540.247919][T13699] netlink: 'syz.1.2362': attribute type 3 has an invalid length. [ 540.247939][T13699] netlink: 30 bytes leftover after parsing attributes in process `syz.1.2362'. [ 541.460567][T13713] sp0: Synchronizing with TNC [ 543.100849][ T5833] block nbd0: Receive control failed (result -32) [ 545.388227][T13773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2381'. [ 545.469920][T13774] netlink: 354 bytes leftover after parsing attributes in process `syz.3.2381'. [ 549.208379][T13815] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 551.343658][ T5833] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 551.897301][T13848] netlink: 504 bytes leftover after parsing attributes in process `syz.1.2404'. [ 552.021424][T13845] netlink: 350 bytes leftover after parsing attributes in process `syz.1.2404'. [ 553.988631][T13877] mkiss: ax0: crc mode is auto. [ 556.663620][T13927] binder: 13924:13927 ioctl c018620c 200000000040 returned -22 [ 557.359167][T13816] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 557.567407][T13941] Invalid ELF header magic: != ELF [ 558.553655][T13960] FAULT_INJECTION: forcing a failure. [ 558.553655][T13960] name failslab, interval 1, probability 0, space 0, times 0 [ 558.646229][T13960] CPU: 0 UID: 0 PID: 13960 Comm: syz.0.2429 Tainted: G L syzkaller #0 PREEMPT(full) [ 558.646255][T13960] Tainted: [L]=SOFTLOCKUP [ 558.646260][T13960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 558.646270][T13960] Call Trace: [ 558.646275][T13960] [ 558.646282][T13960] dump_stack_lvl+0x100/0x190 [ 558.646310][T13960] should_fail_ex.cold+0x5/0xa [ 558.646328][T13960] should_failslab+0xc2/0x120 [ 558.646344][T13960] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 558.646378][T13960] ? __devinet_sysctl_register+0xbc/0x360 [ 558.646406][T13960] kmemdup_noprof+0x29/0x60 [ 558.646430][T13960] __devinet_sysctl_register+0xbc/0x360 [ 558.646454][T13960] ? trace_kmalloc+0x101/0x130 [ 558.646469][T13960] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 558.646494][T13960] ? __asan_memcpy+0x3c/0x60 [ 558.646515][T13960] devinet_init_net+0x303/0x8d0 [ 558.646538][T13960] ? __pfx_devinet_init_net+0x10/0x10 [ 558.646558][T13960] ops_init+0x1e2/0x5f0 [ 558.646581][T13960] setup_net+0x118/0x3a0 [ 558.646601][T13960] ? __pfx_setup_net+0x10/0x10 [ 558.646622][T13960] ? lockdep_init_map_type+0x5c/0x250 [ 558.646641][T13960] ? mutex_init_lockep+0x110/0x150 [ 558.646662][T13960] copy_net_ns+0x46f/0x7c0 [ 558.646677][T13960] create_new_namespaces+0x3ea/0xac0 [ 558.646697][T13960] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 558.646714][T13960] ksys_unshare+0x473/0xad0 [ 558.646732][T13960] ? __pfx_ksys_unshare+0x10/0x10 [ 558.646756][T13960] __x64_sys_unshare+0x31/0x40 [ 558.646773][T13960] do_syscall_64+0x106/0xf80 [ 558.646793][T13960] ? clear_bhb_loop+0x40/0x90 [ 558.646810][T13960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.646825][T13960] RIP: 0033:0x7fbe4fb9c799 [ 558.646838][T13960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 558.646853][T13960] RSP: 002b:00007fbe50a8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 558.646868][T13960] RAX: ffffffffffffffda RBX: 00007fbe4fe15fa0 RCX: 00007fbe4fb9c799 [ 558.646878][T13960] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 558.646887][T13960] RBP: 00007fbe4fc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 558.646895][T13960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.646904][T13960] R13: 00007fbe4fe16038 R14: 00007fbe4fe15fa0 R15: 00007ffcd71b0528 [ 558.646924][T13960] [ 559.444411][T13970] netlink: zone id is out of range [ 559.487256][T13970] netlink: zone id is out of range [ 559.538809][T13971] netlink: zone id is out of range [ 559.543943][T13971] netlink: zone id is out of range [ 559.620336][T13970] netlink: zone id is out of range [ 559.633958][T13970] netlink: zone id is out of range [ 559.655990][T13971] netlink: zone id is out of range [ 559.688964][T13970] netlink: zone id is out of range [ 559.747605][T13971] netlink: zone id is out of range [ 559.786172][T13970] netlink: zone id is out of range [ 559.869301][T13975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2432'. [ 559.910475][T13975] netlink: 'syz.1.2432': attribute type 1 has an invalid length. [ 559.959704][T13975] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2432'. [ 561.609283][T14004] FAULT_INJECTION: forcing a failure. [ 561.609283][T14004] name failslab, interval 1, probability 0, space 0, times 0 [ 561.718932][T14004] CPU: 0 UID: 0 PID: 14004 Comm: syz.1.2441 Tainted: G L syzkaller #0 PREEMPT(full) [ 561.718960][T14004] Tainted: [L]=SOFTLOCKUP [ 561.718965][T14004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 561.718974][T14004] Call Trace: [ 561.718979][T14004] [ 561.718985][T14004] dump_stack_lvl+0x100/0x190 [ 561.719012][T14004] should_fail_ex.cold+0x5/0xa [ 561.719030][T14004] should_failslab+0xc2/0x120 [ 561.719046][T14004] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 561.719068][T14004] ? do_kmem_cache_create+0x18c/0x540 [ 561.719086][T14004] do_kmem_cache_create+0x18c/0x540 [ 561.719104][T14004] __kmem_cache_create_args+0x386/0x420 [ 561.719127][T14004] mon_text_open+0x333/0x510 [ 561.719142][T14004] ? __pfx_mon_text_open+0x10/0x10 [ 561.719157][T14004] ? __pfx_mon_text_ctor+0x10/0x10 [ 561.719169][T14004] ? find_held_lock+0x2b/0x80 [ 561.719184][T14004] ? __pfx_apparmor_file_open+0x10/0x10 [ 561.719206][T14004] ? lockdown_is_locked_down+0x3d/0x140 [ 561.719226][T14004] ? bpf_lsm_locked_down+0x9/0x10 [ 561.719244][T14004] ? __pfx_mon_text_open+0x10/0x10 [ 561.719257][T14004] full_proxy_open_regular+0x1b6/0x370 [ 561.719280][T14004] do_dentry_open+0x6d8/0x1660 [ 561.719294][T14004] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 561.719320][T14004] vfs_open+0x82/0x3f0 [ 561.719339][T14004] path_openat+0x208c/0x31a0 [ 561.719360][T14004] ? __pfx_path_openat+0x10/0x10 [ 561.719382][T14004] do_file_open+0x20e/0x430 [ 561.719398][T14004] ? __pfx_do_file_open+0x10/0x10 [ 561.719426][T14004] ? alloc_fd+0x476/0x790 [ 561.719442][T14004] ? do_getname+0x191/0x390 [ 561.719461][T14004] do_sys_openat2+0x10d/0x1e0 [ 561.719488][T14004] ? __pfx_do_sys_openat2+0x10/0x10 [ 561.719509][T14004] ? __sys_sendmsg+0x18f/0x220 [ 561.719534][T14004] __x64_sys_openat+0x12d/0x210 [ 561.719553][T14004] ? __pfx___x64_sys_openat+0x10/0x10 [ 561.719581][T14004] do_syscall_64+0x106/0xf80 [ 561.719600][T14004] ? clear_bhb_loop+0x40/0x90 [ 561.719617][T14004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.719632][T14004] RIP: 0033:0x7ffbb6b9c799 [ 561.719646][T14004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.719660][T14004] RSP: 002b:00007ffbb7a3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 561.719674][T14004] RAX: ffffffffffffffda RBX: 00007ffbb6e15fa0 RCX: 00007ffbb6b9c799 [ 561.719683][T14004] RDX: 0000000000022202 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 561.719692][T14004] RBP: 00007ffbb6c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 561.719702][T14004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 561.719710][T14004] R13: 00007ffbb6e16038 R14: 00007ffbb6e15fa0 R15: 00007ffcba56ebf8 [ 561.719731][T14004] [ 561.719886][T14004] __kmem_cache_create_args(mon_text_ffff88802c4be000) failed with error -22 [ 563.099261][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.111489][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.483420][T14004] CPU: 0 UID: 0 PID: 14004 Comm: syz.1.2441 Tainted: G L syzkaller #0 PREEMPT(full) [ 563.483447][T14004] Tainted: [L]=SOFTLOCKUP [ 563.483452][T14004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 563.483461][T14004] Call Trace: [ 563.483466][T14004] [ 563.483472][T14004] dump_stack_lvl+0x100/0x190 [ 563.483498][T14004] __kmem_cache_create_args.cold+0x33/0x6e [ 563.483520][T14004] mon_text_open+0x333/0x510 [ 563.483534][T14004] ? __pfx_mon_text_open+0x10/0x10 [ 563.483549][T14004] ? __pfx_mon_text_ctor+0x10/0x10 [ 563.483562][T14004] ? find_held_lock+0x2b/0x80 [ 563.483575][T14004] ? __pfx_apparmor_file_open+0x10/0x10 [ 563.483598][T14004] ? lockdown_is_locked_down+0x3d/0x140 [ 563.483618][T14004] ? bpf_lsm_locked_down+0x9/0x10 [ 563.483635][T14004] ? __pfx_mon_text_open+0x10/0x10 [ 563.483648][T14004] full_proxy_open_regular+0x1b6/0x370 [ 563.483671][T14004] do_dentry_open+0x6d8/0x1660 [ 563.483685][T14004] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 563.483710][T14004] vfs_open+0x82/0x3f0 [ 563.483729][T14004] path_openat+0x208c/0x31a0 [ 563.483750][T14004] ? __pfx_path_openat+0x10/0x10 [ 563.483771][T14004] do_file_open+0x20e/0x430 [ 563.483787][T14004] ? __pfx_do_file_open+0x10/0x10 [ 563.483815][T14004] ? alloc_fd+0x476/0x790 [ 563.483831][T14004] ? do_getname+0x191/0x390 [ 563.483850][T14004] do_sys_openat2+0x10d/0x1e0 [ 563.483868][T14004] ? __pfx_do_sys_openat2+0x10/0x10 [ 563.483888][T14004] ? __sys_sendmsg+0x18f/0x220 [ 563.483912][T14004] __x64_sys_openat+0x12d/0x210 [ 563.483930][T14004] ? __pfx___x64_sys_openat+0x10/0x10 [ 563.483955][T14004] do_syscall_64+0x106/0xf80 [ 563.483974][T14004] ? clear_bhb_loop+0x40/0x90 [ 563.483991][T14004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.484006][T14004] RIP: 0033:0x7ffbb6b9c799 [ 563.484018][T14004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.484032][T14004] RSP: 002b:00007ffbb7a3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 563.484046][T14004] RAX: ffffffffffffffda RBX: 00007ffbb6e15fa0 RCX: 00007ffbb6b9c799 [ 563.484056][T14004] RDX: 0000000000022202 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 563.484065][T14004] RBP: 00007ffbb6c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 563.484073][T14004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 563.484082][T14004] R13: 00007ffbb6e16038 R14: 00007ffbb6e15fa0 R15: 00007ffcba56ebf8 [ 563.484101][T14004] [ 565.566762][T14033] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2446'. [ 566.595084][T14046] nbd: must specify at least one socket [ 567.475993][T14062] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2456'. [ 568.103475][T14065] hub 1-0:1.0: USB hub found [ 568.155087][T14065] hub 1-0:1.0: 1 port detected [ 568.189198][ T5833] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 569.051269][T14079] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xca1 pfn:0x78001 [ 569.295263][T14079] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 569.493186][T14079] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 569.690536][T14079] raw: 0000000000000ca1 0000000000000000 00000001ffffffff 0000000000000000 [ 570.002467][T14079] page dumped because: unmovable page [ 570.007910][T14079] page_owner tracks the page as allocated [ 570.316886][T14079] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO), pid 8429, tgid 8428 (syz.3.863), ts 191496296170, free_ts 155786888580 [ 570.703320][T14079] post_alloc_hook+0x153/0x170 [ 570.708122][T14079] get_page_from_freelist+0x111d/0x3140 [ 570.932919][T14079] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 571.094115][T14079] alloc_pages_mpol+0x1fb/0x550 [ 571.142612][T14112] Invalid ELF header magic: != ELF [ 571.173040][T14079] alloc_pages_noprof+0x131/0x390 [ 571.178122][T14079] brd_submit_bio+0x116a/0x20d0 [ 571.355836][T14079] __submit_bio+0x419/0x6c0 [ 571.360420][T14079] submit_bio_noacct_nocheck+0x74f/0xc10 [ 571.583066][T14079] submit_bio_noacct+0xd17/0x2010 [ 571.588293][T14079] submit_bh_wbc+0x59c/0x770 [ 571.592956][T14079] __block_write_full_folio+0x77f/0xee0 [ 571.812074][T14079] block_write_full_folio+0x3b5/0x4e0 [ 571.930472][T14079] blkdev_writepages+0xc7/0x150 [ 572.019340][T14079] do_writepages+0x278/0x600 [ 572.115366][T14079] filemap_writeback+0x22d/0x2e0 [ 572.165166][T14120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2470'. [ 572.215182][T14079] filemap_write_and_wait_range+0xa6/0x130 [ 572.363375][T14079] page last free pid 7581 tgid 7580 stack trace: [ 572.487665][T14079] free_unref_folios+0xaea/0x1790 [ 572.593734][T14079] folios_put_refs+0x53c/0x840 [ 572.719447][T14079] shmem_undo_range+0x5e5/0x1570 [ 572.837783][T14079] shmem_evict_inode+0x39e/0xbd0 [ 572.964180][T14079] evict+0x3c2/0xad0 [ 572.975298][T14079] iput.part.0+0x605/0xf50 [ 573.077429][T14079] iput+0x35/0x40 [ 573.081117][T14079] dentry_unlink_inode+0x2a1/0x490 [ 573.264109][T14079] __dentry_kill+0x1d0/0x600 [ 573.353518][T14079] finish_dput+0x76/0x480 [ 573.438054][T14079] dput.part.0+0x456/0x570 [ 573.442518][T14079] dput+0x1f/0x30 [ 573.555533][T14079] __fput+0x519/0xb40 [ 573.670735][T14079] task_work_run+0x150/0x240 [ 573.744549][T14079] do_exit+0x8b8/0x2b60 [ 573.748757][T14079] do_group_exit+0xd5/0x2a0 [ 575.578285][T14153] Invalid ELF header magic: != ELF [ 584.237078][T14218] kAFS: Invalid Command on /proc/fs/afs/cells file [ 584.761396][T14221] FAULT_INJECTION: forcing a failure. [ 584.761396][T14221] name failslab, interval 1, probability 0, space 0, times 0 [ 584.938218][T14221] CPU: 0 UID: 0 PID: 14221 Comm: syz.1.2495 Tainted: G L syzkaller #0 PREEMPT(full) [ 584.938246][T14221] Tainted: [L]=SOFTLOCKUP [ 584.938251][T14221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 584.938260][T14221] Call Trace: [ 584.938265][T14221] [ 584.938272][T14221] dump_stack_lvl+0x100/0x190 [ 584.938299][T14221] should_fail_ex.cold+0x5/0xa [ 584.938316][T14221] ? ops_init+0x77/0x5f0 [ 584.938336][T14221] should_failslab+0xc2/0x120 [ 584.938351][T14221] __kmalloc_noprof+0xe0/0x850 [ 584.938372][T14221] ? __raw_spin_lock_init+0x3a/0x110 [ 584.938395][T14221] ops_init+0x77/0x5f0 [ 584.938416][T14221] setup_net+0x118/0x3a0 [ 584.938435][T14221] ? __pfx_setup_net+0x10/0x10 [ 584.938454][T14221] ? lockdep_init_map_type+0x5c/0x250 [ 584.938473][T14221] ? mutex_init_lockep+0x110/0x150 [ 584.938494][T14221] copy_net_ns+0x46f/0x7c0 [ 584.938509][T14221] create_new_namespaces+0x3ea/0xac0 [ 584.938528][T14221] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 584.938545][T14221] ksys_unshare+0x473/0xad0 [ 584.938564][T14221] ? __pfx_ksys_unshare+0x10/0x10 [ 584.938588][T14221] __x64_sys_unshare+0x31/0x40 [ 584.938605][T14221] do_syscall_64+0x106/0xf80 [ 584.938624][T14221] ? clear_bhb_loop+0x40/0x90 [ 584.938641][T14221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.938656][T14221] RIP: 0033:0x7ffbb6b9c799 [ 584.938669][T14221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.938683][T14221] RSP: 002b:00007ffbb7a3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 584.938697][T14221] RAX: ffffffffffffffda RBX: 00007ffbb6e15fa0 RCX: 00007ffbb6b9c799 [ 584.938707][T14221] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 584.938715][T14221] RBP: 00007ffbb6c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 584.938723][T14221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 584.938731][T14221] R13: 00007ffbb6e16038 R14: 00007ffbb6e15fa0 R15: 00007ffcba56ebf8 [ 584.938750][T14221] [ 586.429809][T14231] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2497'. [ 586.909339][T14235] FAULT_INJECTION: forcing a failure. [ 586.909339][T14235] name failslab, interval 1, probability 0, space 0, times 0 [ 587.158583][T14235] CPU: 0 UID: 0 PID: 14235 Comm: syz.1.2499 Tainted: G L syzkaller #0 PREEMPT(full) [ 587.158610][T14235] Tainted: [L]=SOFTLOCKUP [ 587.158616][T14235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 587.158625][T14235] Call Trace: [ 587.158630][T14235] [ 587.158637][T14235] dump_stack_lvl+0x100/0x190 [ 587.158664][T14235] should_fail_ex.cold+0x5/0xa [ 587.158682][T14235] should_failslab+0xc2/0x120 [ 587.158698][T14235] __kmalloc_cache_noprof+0x7a/0x6f0 [ 587.158716][T14235] ? vhost_worker_create+0xf7/0x310 [ 587.158738][T14235] vhost_worker_create+0xf7/0x310 [ 587.158756][T14235] ? __pfx_vhost_worker_create+0x10/0x10 [ 587.158781][T14235] vhost_dev_set_owner+0x719/0xa30 [ 587.158808][T14235] vhost_net_ioctl+0xfa3/0x1910 [ 587.158827][T14235] ? do_vfs_ioctl+0x226/0x13e0 [ 587.158847][T14235] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 587.158866][T14235] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 587.158890][T14235] ? find_held_lock+0x2b/0x80 [ 587.158903][T14235] ? __fget_files+0x215/0x3d0 [ 587.158915][T14235] ? hook_file_ioctl_common+0x146/0x410 [ 587.158935][T14235] ? __fget_files+0x21f/0x3d0 [ 587.158951][T14235] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 587.158972][T14235] __x64_sys_ioctl+0x18e/0x210 [ 587.158992][T14235] do_syscall_64+0x106/0xf80 [ 587.159011][T14235] ? clear_bhb_loop+0x40/0x90 [ 587.159029][T14235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.159043][T14235] RIP: 0033:0x7ffbb6b9c799 [ 587.159056][T14235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.159070][T14235] RSP: 002b:00007ffbb7a1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 587.159083][T14235] RAX: ffffffffffffffda RBX: 00007ffbb6e16090 RCX: 00007ffbb6b9c799 [ 587.159093][T14235] RDX: 0000000000000005 RSI: 000000000000af01 RDI: 0000000000000007 [ 587.159101][T14235] RBP: 00007ffbb6c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 587.159109][T14235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 587.159117][T14235] R13: 00007ffbb6e16128 R14: 00007ffbb6e16090 R15: 00007ffcba56ebf8 [ 587.159137][T14235] [ 587.915608][T14255] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2504'. [ 588.472920][T14260] ecryptfs_miscdev_write: Invalid packet size [192] [ 588.600860][T14269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2507'. [ 590.478485][T14281] FAULT_INJECTION: forcing a failure. [ 590.478485][T14281] name failslab, interval 1, probability 0, space 0, times 0 [ 590.643812][T14281] CPU: 0 UID: 0 PID: 14281 Comm: syz.3.2508 Tainted: G L syzkaller #0 PREEMPT(full) [ 590.643839][T14281] Tainted: [L]=SOFTLOCKUP [ 590.643844][T14281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 590.643853][T14281] Call Trace: [ 590.643858][T14281] [ 590.643865][T14281] dump_stack_lvl+0x100/0x190 [ 590.643892][T14281] should_fail_ex.cold+0x5/0xa [ 590.643909][T14281] ? __register_sysctl_table+0xbe4/0x1650 [ 590.643930][T14281] should_failslab+0xc2/0x120 [ 590.643946][T14281] __kmalloc_noprof+0xe0/0x850 [ 590.643971][T14281] __register_sysctl_table+0xbe4/0x1650 [ 590.643996][T14281] ? __pfx___register_sysctl_table+0x10/0x10 [ 590.644017][T14281] ? is_module_address+0x69/0xf0 [ 590.644034][T14281] ? register_net_sysctl_sz+0x222/0x430 [ 590.644060][T14281] __devinet_sysctl_register+0x1b9/0x360 [ 590.644083][T14281] ? trace_kmalloc+0x101/0x130 [ 590.644097][T14281] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 590.644123][T14281] ? __asan_memcpy+0x3c/0x60 [ 590.644145][T14281] devinet_init_net+0x303/0x8d0 [ 590.644169][T14281] ? __pfx_devinet_init_net+0x10/0x10 [ 590.644190][T14281] ops_init+0x1e2/0x5f0 [ 590.644213][T14281] setup_net+0x118/0x3a0 [ 590.644233][T14281] ? __pfx_setup_net+0x10/0x10 [ 590.644251][T14281] ? lockdep_init_map_type+0x5c/0x250 [ 590.644270][T14281] ? mutex_init_lockep+0x110/0x150 [ 590.644291][T14281] copy_net_ns+0x46f/0x7c0 [ 590.644306][T14281] create_new_namespaces+0x3ea/0xac0 [ 590.644325][T14281] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 590.644342][T14281] ksys_unshare+0x473/0xad0 [ 590.644361][T14281] ? __pfx_ksys_unshare+0x10/0x10 [ 590.644385][T14281] __x64_sys_unshare+0x31/0x40 [ 590.644402][T14281] do_syscall_64+0x106/0xf80 [ 590.644420][T14281] ? clear_bhb_loop+0x40/0x90 [ 590.644438][T14281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.644453][T14281] RIP: 0033:0x7f5d4b79c799 [ 590.644466][T14281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 590.644481][T14281] RSP: 002b:00007f5d4c61f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 590.644495][T14281] RAX: ffffffffffffffda RBX: 00007f5d4ba15fa0 RCX: 00007f5d4b79c799 [ 590.644504][T14281] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 590.644513][T14281] RBP: 00007f5d4b832c99 R08: 0000000000000000 R09: 0000000000000000 [ 590.644522][T14281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 590.644530][T14281] R13: 00007f5d4ba16038 R14: 00007f5d4ba15fa0 R15: 00007ffd24475b08 [ 590.644549][T14281] [ 590.644557][T14281] sysctl could not get directory: /net/ipv4/conf -12 [ 592.285742][T14295] FAULT_INJECTION: forcing a failure. [ 592.285742][T14295] name failslab, interval 1, probability 0, space 0, times 0 [ 592.396502][T14295] CPU: 0 UID: 0 PID: 14295 Comm: syz.1.2512 Tainted: G L syzkaller #0 PREEMPT(full) [ 592.396529][T14295] Tainted: [L]=SOFTLOCKUP [ 592.396534][T14295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 592.396543][T14295] Call Trace: [ 592.396548][T14295] [ 592.396555][T14295] dump_stack_lvl+0x100/0x190 [ 592.396585][T14295] should_fail_ex.cold+0x5/0xa [ 592.396603][T14295] should_failslab+0xc2/0x120 [ 592.396618][T14295] __kmalloc_cache_noprof+0x7a/0x6f0 [ 592.396637][T14295] ? kvm_dev_ioctl+0x1320/0x1a50 [ 592.396657][T14295] kvm_dev_ioctl+0x1320/0x1a50 [ 592.396678][T14295] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 592.396697][T14295] ? xfd_validate_state+0x129/0x190 [ 592.396718][T14295] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 592.396734][T14295] __x64_sys_ioctl+0x18e/0x210 [ 592.396755][T14295] do_syscall_64+0x106/0xf80 [ 592.396774][T14295] ? clear_bhb_loop+0x40/0x90 [ 592.396792][T14295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.396807][T14295] RIP: 0033:0x7ffbb6b9c799 [ 592.396820][T14295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.396834][T14295] RSP: 002b:00007ffbb7a3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 592.396856][T14295] RAX: ffffffffffffffda RBX: 00007ffbb6e15fa0 RCX: 00007ffbb6b9c799 [ 592.396866][T14295] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000000 [ 592.396875][T14295] RBP: 00007ffbb6c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 592.396884][T14295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 592.396893][T14295] R13: 00007ffbb6e16038 R14: 00007ffbb6e15fa0 R15: 00007ffcba56ebf8 [ 592.396913][T14295] [ 593.064346][T14287] can: request_module (can-proto-3) failed. [ 596.069392][T14351] Process accounting resumed [ 596.630666][T14374] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2529'. [ 599.125954][T14423] can0: slcan on ttyS2. [ 599.563596][T14417] can0 (unregistered): slcan off ttyS2. [ 601.486891][T14455] sd 0:0:1:0: PR command failed: 1026 [ 601.580590][T14453] ptp ptp0: new virtual clock ptp1 [ 601.604382][T14455] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 601.778250][T14453] ptp ptp0: guarantee physical clock free running [ 601.795334][T14455] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 601.887035][T14458] ptp ptp0: delete virtual clock ptp1 [ 602.306943][T14458] ptp ptp0: only physical clock in use now [ 603.598663][T14485] netlink: 334 bytes leftover after parsing attributes in process `syz.0.2547'. [ 607.074514][T14532] pim6reg: entered allmulticast mode [ 607.263855][ T29] audit: type=1800 audit(678029.848:16): pid=14540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2560" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 612.712781][T14616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2585'. [ 617.519401][T14675] FAULT_INJECTION: forcing a failure. [ 617.519401][T14675] name failslab, interval 1, probability 0, space 0, times 0 [ 617.791075][T14679] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 617.946373][T14675] CPU: 0 UID: 0 PID: 14675 Comm: syz.1.2599 Tainted: G L syzkaller #0 PREEMPT(full) [ 617.946400][T14675] Tainted: [L]=SOFTLOCKUP [ 617.946406][T14675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 617.946415][T14675] Call Trace: [ 617.946420][T14675] [ 617.946427][T14675] dump_stack_lvl+0x100/0x190 [ 617.946454][T14675] should_fail_ex.cold+0x5/0xa [ 617.946472][T14675] should_failslab+0xc2/0x120 [ 617.946487][T14675] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 617.946508][T14675] ? shmem_alloc_inode+0x25/0x50 [ 617.946526][T14675] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 617.946544][T14675] shmem_alloc_inode+0x25/0x50 [ 617.946559][T14675] alloc_inode+0x68/0x250 [ 617.946578][T14675] new_inode+0x22/0x1c0 [ 617.946597][T14675] shmem_get_inode+0x212/0x1040 [ 617.946618][T14675] ? __pfx_shmem_get_inode+0x10/0x10 [ 617.946635][T14675] ? d_add+0x443/0x850 [ 617.946652][T14675] ? do_raw_spin_unlock+0x145/0x1e0 [ 617.946676][T14675] shmem_mknod+0x20c/0x470 [ 617.946695][T14675] ? __pfx_shmem_mknod+0x10/0x10 [ 617.946711][T14675] ? bpf_lsm_inode_create+0x9/0x10 [ 617.946733][T14675] ? __pfx_shmem_create+0x10/0x10 [ 617.946751][T14675] lookup_open.isra.0+0xc47/0x11b0 [ 617.946776][T14675] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 617.946799][T14675] ? __pfx___might_resched+0x10/0x10 [ 617.946819][T14675] ? mnt_get_write_access+0x52/0x2f0 [ 617.946841][T14675] ? __pfx_down_write+0x10/0x10 [ 617.946861][T14675] ? mnt_get_write_access+0x1e9/0x2f0 [ 617.946883][T14675] path_openat+0x2291/0x31a0 [ 617.946903][T14675] ? __pfx_path_openat+0x10/0x10 [ 617.946924][T14675] do_file_open+0x20e/0x430 [ 617.946941][T14675] ? __pfx_do_file_open+0x10/0x10 [ 617.946969][T14675] ? alloc_fd+0x476/0x790 [ 617.946985][T14675] ? do_getname+0x191/0x390 [ 617.947004][T14675] do_sys_openat2+0x10d/0x1e0 [ 617.947023][T14675] ? __pfx_do_sys_openat2+0x10/0x10 [ 617.947042][T14675] ? __fget_files+0x21f/0x3d0 [ 617.947059][T14675] __x64_sys_openat+0x12d/0x210 [ 617.947077][T14675] ? __pfx___x64_sys_openat+0x10/0x10 [ 617.947103][T14675] do_syscall_64+0x106/0xf80 [ 617.947121][T14675] ? clear_bhb_loop+0x40/0x90 [ 617.947138][T14675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.947153][T14675] RIP: 0033:0x7ffbb6b9c799 [ 617.947166][T14675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 617.947191][T14675] RSP: 002b:00007ffbb7a3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 617.947206][T14675] RAX: ffffffffffffffda RBX: 00007ffbb6e15fa0 RCX: 00007ffbb6b9c799 [ 617.947215][T14675] RDX: 00000000000861c2 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 617.947224][T14675] RBP: 00007ffbb6c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 617.947233][T14675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 617.947242][T14675] R13: 00007ffbb6e16038 R14: 00007ffbb6e15fa0 R15: 00007ffcba56ebf8 [ 617.947262][T14675] [ 620.384472][T14697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2606'. [ 620.513715][T14701] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2606'. [ 622.809434][T14717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2610'. [ 623.004640][T14726] netlink: 'syz.1.2610': attribute type 1 has an invalid length. [ 623.188217][T14726] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2610'. [ 623.736480][T14731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2614'. [ 624.482555][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.489958][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.389978][T14760] FAULT_INJECTION: forcing a failure. [ 626.389978][T14760] name failslab, interval 1, probability 0, space 0, times 0 [ 626.488578][T14760] CPU: 0 UID: 0 PID: 14760 Comm: syz.3.2619 Tainted: G L syzkaller #0 PREEMPT(full) [ 626.488606][T14760] Tainted: [L]=SOFTLOCKUP [ 626.488611][T14760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 626.488621][T14760] Call Trace: [ 626.488626][T14760] [ 626.488632][T14760] dump_stack_lvl+0x100/0x190 [ 626.488659][T14760] should_fail_ex.cold+0x5/0xa [ 626.488676][T14760] should_failslab+0xc2/0x120 [ 626.488691][T14760] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 626.488713][T14760] ? sock_alloc_inode+0x25/0x1c0 [ 626.488729][T14760] ? __pfx_sock_alloc_inode+0x10/0x10 [ 626.488743][T14760] sock_alloc_inode+0x25/0x1c0 [ 626.488755][T14760] alloc_inode+0x68/0x250 [ 626.488774][T14760] sock_alloc+0x44/0x280 [ 626.488793][T14760] ? security_socket_create+0x7f/0x250 [ 626.488816][T14760] sock_create_lite+0x82/0x120 [ 626.488838][T14760] __netlink_kernel_create+0xbd/0x750 [ 626.488861][T14760] ? __pfx___netlink_kernel_create+0x10/0x10 [ 626.488888][T14760] fib_net_init+0x26d/0x3f0 [ 626.488908][T14760] ? is_module_address+0x69/0xf0 [ 626.488926][T14760] ? __pfx_fib_net_init+0x10/0x10 [ 626.488945][T14760] ? timer_init_key+0x150/0x340 [ 626.488960][T14760] ? __pfx_nl_fib_input+0x10/0x10 [ 626.488981][T14760] ? devinet_init_net+0x56c/0x8d0 [ 626.489006][T14760] ? __pfx_fib_net_init+0x10/0x10 [ 626.489025][T14760] ops_init+0x1e2/0x5f0 [ 626.489047][T14760] setup_net+0x118/0x3a0 [ 626.489067][T14760] ? __pfx_setup_net+0x10/0x10 [ 626.489086][T14760] ? lockdep_init_map_type+0x5c/0x250 [ 626.489105][T14760] ? mutex_init_lockep+0x110/0x150 [ 626.489127][T14760] copy_net_ns+0x46f/0x7c0 [ 626.489142][T14760] create_new_namespaces+0x3ea/0xac0 [ 626.489162][T14760] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 626.489179][T14760] ksys_unshare+0x473/0xad0 [ 626.489197][T14760] ? __pfx_ksys_unshare+0x10/0x10 [ 626.489221][T14760] __x64_sys_unshare+0x31/0x40 [ 626.489238][T14760] do_syscall_64+0x106/0xf80 [ 626.489256][T14760] ? clear_bhb_loop+0x40/0x90 [ 626.489274][T14760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.489288][T14760] RIP: 0033:0x7f5d4b79c799 [ 626.489301][T14760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 626.489315][T14760] RSP: 002b:00007f5d4c61f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 626.489329][T14760] RAX: ffffffffffffffda RBX: 00007f5d4ba15fa0 RCX: 00007f5d4b79c799 [ 626.489338][T14760] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 626.489347][T14760] RBP: 00007f5d4b832c99 R08: 0000000000000000 R09: 0000000000000000 [ 626.489355][T14760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 626.489364][T14760] R13: 00007f5d4ba16038 R14: 00007f5d4ba15fa0 R15: 00007ffd24475b08 [ 626.489384][T14760] [ 627.800975][T14721] Process accounting paused [ 630.672605][T14805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2627'. [ 630.759616][T14805] netlink: 354 bytes leftover after parsing attributes in process `syz.0.2627'. [ 631.635002][T14815] FAULT_INJECTION: forcing a failure. [ 631.635002][T14815] name failslab, interval 1, probability 0, space 0, times 0 [ 631.678602][T14815] CPU: 0 UID: 0 PID: 14815 Comm: syz.0.2631 Tainted: G L syzkaller #0 PREEMPT(full) [ 631.678628][T14815] Tainted: [L]=SOFTLOCKUP [ 631.678634][T14815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 631.678642][T14815] Call Trace: [ 631.678648][T14815] [ 631.678655][T14815] dump_stack_lvl+0x100/0x190 [ 631.678683][T14815] should_fail_ex.cold+0x5/0xa [ 631.678700][T14815] ? sk_prot_alloc+0x10b/0x2a0 [ 631.678713][T14815] should_failslab+0xc2/0x120 [ 631.678729][T14815] __kmalloc_noprof+0xe0/0x850 [ 631.678750][T14815] ? security_inode_alloc+0xcf/0x2c0 [ 631.678768][T14815] sk_prot_alloc+0x10b/0x2a0 [ 631.678784][T14815] sk_alloc+0x36/0xe80 [ 631.678802][T14815] __netlink_create+0x5e/0x2c0 [ 631.678823][T14815] __netlink_kernel_create+0xed/0x750 [ 631.678845][T14815] ? __pfx___netlink_kernel_create+0x10/0x10 [ 631.678871][T14815] fib_net_init+0x26d/0x3f0 [ 631.678891][T14815] ? is_module_address+0x69/0xf0 [ 631.678909][T14815] ? __pfx_fib_net_init+0x10/0x10 [ 631.678928][T14815] ? timer_init_key+0x150/0x340 [ 631.678943][T14815] ? __pfx_nl_fib_input+0x10/0x10 [ 631.678965][T14815] ? devinet_init_net+0x56c/0x8d0 [ 631.678989][T14815] ? __pfx_fib_net_init+0x10/0x10 [ 631.679007][T14815] ops_init+0x1e2/0x5f0 [ 631.679029][T14815] setup_net+0x118/0x3a0 [ 631.679060][T14815] ? __pfx_setup_net+0x10/0x10 [ 631.679080][T14815] ? lockdep_init_map_type+0x5c/0x250 [ 631.679101][T14815] ? mutex_init_lockep+0x110/0x150 [ 631.679123][T14815] copy_net_ns+0x46f/0x7c0 [ 631.679138][T14815] create_new_namespaces+0x3ea/0xac0 [ 631.679157][T14815] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 631.679175][T14815] ksys_unshare+0x473/0xad0 [ 631.679194][T14815] ? __pfx_ksys_unshare+0x10/0x10 [ 631.679218][T14815] __x64_sys_unshare+0x31/0x40 [ 631.679235][T14815] do_syscall_64+0x106/0xf80 [ 631.679254][T14815] ? clear_bhb_loop+0x40/0x90 [ 631.679272][T14815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.679286][T14815] RIP: 0033:0x7fbe4fb9c799 [ 631.679299][T14815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 631.679313][T14815] RSP: 002b:00007fbe50a8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 631.679328][T14815] RAX: ffffffffffffffda RBX: 00007fbe4fe15fa0 RCX: 00007fbe4fb9c799 [ 631.679337][T14815] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 631.679346][T14815] RBP: 00007fbe4fc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 631.679355][T14815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 631.679363][T14815] R13: 00007fbe4fe16038 R14: 00007fbe4fe15fa0 R15: 00007ffcd71b0528 [ 631.679383][T14815] [ 634.435267][T14849] futex_wake_op: syz.2.2640 tries to shift op by -2048; fix this program [ 634.501480][T14849] futex_wake_op: syz.2.2640 tries to shift op by -2048; fix this program [ 636.411797][T14872] : Can't lookup blockdev [ 637.411186][T14877] __vm_enough_memory: pid: 14877, comm: syz.2.2647, bytes: 4398046511104 not enough memory for the allocation [ 637.935203][T14890] ptrace attach of "./syz-executor exec"[5824] was attempted by "=tõ&#ۜS?xӨ;0s$!JhpS4{'†y`4~MR82gؽbP?5AF$‡\x0bÞMR S#-ob\x0b[vC&Oz=ˌr%.Z/ԬJx8\x0b\x0a\x0aaf;mECȩ\x5c ˭6}EgM\x07+wy_NMMY}E*N>ȴR\x5cX\x0b0&)C048@erژ9C$`p2Be\x1bFOIY!S*c^]G#cT+qoDuk-)eZmaA[ϳuEwxU\x0dZ@TGL0XB0-\x0abrWl{먏F`Cj4ÂO_96;9d;P\x07[Iy\x0bk9tsY\x09QFY6S\x07f:Ɣ}yА\x5c\x5c)+T\x5cSl\x22c]k+)>n;gnltYZ `<.T3*@aT̓\x0aM\x1b9l cU|I)ii˥?(o&y($eT.Rru9k:Hm!nn\x0bx2~ZS\x226fP=IONZ؃vLCx\x09mZ;i>T`\x0a셢柜'E\x09mG\x07-\x079Bib`*Uy`VnifEX;A*Xe-ƈ}oʵB*IQ\x1b\x0ab}=QmVGCU7C!W\x1b [ 642.339598][T14953] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 642.363830][T14953] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 642.413214][T14953] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 642.503097][T14953] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 642.582112][T14953] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 642.604863][T14953] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 642.929286][T14960] futex_wake_op: syz.3.2667 tries to shift op by -2048; fix this program [ 642.979768][T14960] futex_wake_op: syz.3.2667 tries to shift op by -2048; fix this program [ 643.048301][T14961] 0x000000000001-0x000000020000 : "" [ 643.115131][T14961] ftl_cs: FTL header corrupt! [ 644.398347][T13816] Bluetooth: hci2: command 0x0406 tx timeout [ 644.404511][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 644.480975][T13816] Bluetooth: hci1: command 0x0406 tx timeout [ 644.584538][T13816] Bluetooth: hci3: unexpected event 0x1c length: 725 > 5 [ 644.638157][T13816] Bluetooth: hci3: command 0x0406 tx timeout [ 646.558241][T13816] Bluetooth: hci1: command 0x0406 tx timeout [ 646.719105][T13816] Bluetooth: hci3: command 0x0406 tx timeout [ 646.968237][T15011] FAULT_INJECTION: forcing a failure. [ 646.968237][T15011] name fail_futex, interval 1, probability 0, space 0, times 0 [ 646.982805][T15011] CPU: 0 UID: 0 PID: 15011 Comm: syz.3.2680 Tainted: G L syzkaller #0 PREEMPT(full) [ 646.982837][T15011] Tainted: [L]=SOFTLOCKUP [ 646.982844][T15011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 646.982853][T15011] Call Trace: [ 646.982858][T15011] [ 646.982863][T15011] dump_stack_lvl+0x100/0x190 [ 646.982891][T15011] should_fail_ex.cold+0x5/0xa [ 646.982908][T15011] should_fail_futex+0x4c/0x60 [ 646.982925][T15011] futex_lock_pi_atomic+0xe7/0xaf0 [ 646.982950][T15011] futex_lock_pi+0x246/0x7b0 [ 646.982983][T15011] ? __pfx_futex_lock_pi+0x10/0x10 [ 646.983006][T15011] ? __pfx___futex_wait+0x10/0x10 [ 646.983044][T15011] ? __pfx_futex_wake_mark+0x10/0x10 [ 646.983070][T15011] ? ksys_write+0x190/0x250 [ 646.983084][T15011] ? ksys_write+0x190/0x250 [ 646.983100][T15011] do_futex+0x18a/0x350 [ 646.983118][T15011] ? __pfx_do_futex+0x10/0x10 [ 646.983140][T15011] __x64_sys_futex+0x34f/0x4d0 [ 646.983161][T15011] ? __pfx___x64_sys_futex+0x10/0x10 [ 646.983186][T15011] do_syscall_64+0x106/0xf80 [ 646.983205][T15011] ? clear_bhb_loop+0x40/0x90 [ 646.983222][T15011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.983237][T15011] RIP: 0033:0x7f5d4b79c799 [ 646.983251][T15011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.983266][T15011] RSP: 002b:00007f5d4c61f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 646.983281][T15011] RAX: ffffffffffffffda RBX: 00007f5d4ba15fa0 RCX: 00007f5d4b79c799 [ 646.983291][T15011] RDX: 0000000000000001 RSI: 0000000000000006 RDI: 0000200000000080 [ 646.983300][T15011] RBP: 00007f5d4b832c99 R08: 0000000000000000 R09: 00000000fffffffa [ 646.983309][T15011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 646.983318][T15011] R13: 00007f5d4ba16038 R14: 00007f5d4ba15fa0 R15: 00007ffd24475b08 [ 646.983340][T15011] [ 650.107976][T15049] random: crng reseeded on system resumption [ 652.260231][T15076] tipc: Started in network mode [ 652.302223][T15076] tipc: Node identity ffffffff, cluster identity 4711 [ 652.359638][T15076] tipc: Node number set to 4294967295 [ 652.729006][T15082] ptrace attach of "./syz-executor exec"[5826] was attempted by ".Gz{.MmF(x.jKAIXLR(Ulz\x0c;$#&jdVQlk|4\x0c/\x5cL}FӠDGD\x07\x22ĭLl7IZwEKii ,zNH$${:EKM\x5c/O;qHPTygwkT6.NE\x07s׭yChqq#hT\x0cPnj4'\x5cg578I^l6#T-/af3ce\x0c0Ğ`\x0cDI{i\x07\x0dnǽxK\x0db7-\x0cֿCP@rXqo-ۓICvp7@Ts\x22^D2P@Uw\x227~sb!W/b>\x0a\x07+>d؜N>=,aes֯%ܷn_5L 2_n:\x0aFqrh9lzE5F8:qt[69\x09f|0b:0mpr*Hį\x5chE$,eun-^,N1x/Ϟ\x0a$z%\x0dWȥp{Yۓf$+d\x1b-0\x5c%m3iC*=bG\x22S0P%O]|ng\x0cvGvxﷀhmDB˵vRȄoUUkZ'#:LC\x09ayJM^FYJӊ^A}R^\x5c$_R%A#EHM},˟o7W®`%wq\x5c.4A\x5c#W<VX/Bn\x22Ss\x09 [ 654.160882][T15104] : Can't lookup blockdev [ 654.951310][T15099] netlink: 186 bytes leftover after parsing attributes in process `syz.0.2707'. [ 655.859606][T15122] FAULT_INJECTION: forcing a failure. [ 655.859606][T15122] name fail_futex, interval 1, probability 0, space 0, times 0 [ 655.872485][T15122] CPU: 0 UID: 0 PID: 15122 Comm: syz.0.2703 Tainted: G L syzkaller #0 PREEMPT(full) [ 655.872510][T15122] Tainted: [L]=SOFTLOCKUP [ 655.872516][T15122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 655.872525][T15122] Call Trace: [ 655.872532][T15122] [ 655.872537][T15122] dump_stack_lvl+0x100/0x190 [ 655.872565][T15122] should_fail_ex.cold+0x5/0xa [ 655.872582][T15122] should_fail_futex+0x4c/0x60 [ 655.872600][T15122] futex_lock_pi_atomic+0xe7/0xaf0 [ 655.872624][T15122] futex_lock_pi+0x246/0x7b0 [ 655.872648][T15122] ? __pfx_futex_lock_pi+0x10/0x10 [ 655.872670][T15122] ? __pfx___futex_wait+0x10/0x10 [ 655.872690][T15122] ? lockdep_hardirqs_on+0x78/0x100 [ 655.872724][T15122] ? __pfx_futex_wake_mark+0x10/0x10 [ 655.872749][T15122] ? ksys_write+0x190/0x250 [ 655.872761][T15122] ? ksys_write+0x190/0x250 [ 655.872778][T15122] do_futex+0x18a/0x350 [ 655.872796][T15122] ? __pfx_do_futex+0x10/0x10 [ 655.872819][T15122] __x64_sys_futex+0x34f/0x4d0 [ 655.872839][T15122] ? __pfx___x64_sys_futex+0x10/0x10 [ 655.872863][T15122] do_syscall_64+0x106/0xf80 [ 655.872882][T15122] ? clear_bhb_loop+0x40/0x90 [ 655.872899][T15122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.872914][T15122] RIP: 0033:0x7fbe4fb9c799 [ 655.872927][T15122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 655.872940][T15122] RSP: 002b:00007fbe50a8d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 655.872955][T15122] RAX: ffffffffffffffda RBX: 00007fbe4fe15fa0 RCX: 00007fbe4fb9c799 [ 655.872965][T15122] RDX: 0000000000000001 RSI: 0000000000000006 RDI: 0000200000000080 [ 655.872974][T15122] RBP: 00007fbe4fc32c99 R08: 0000000000000000 R09: 00000000fffffffa [ 655.872983][T15122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 655.872992][T15122] R13: 00007fbe4fe16038 R14: 00007fbe4fe15fa0 R15: 00007ffcd71b0528 [ 655.873011][T15122] [ 658.027776][T15152] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2713'. [ 658.085207][T15152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2713'. [ 658.223936][T15152] Process accounting resumed [ 659.829297][T15175] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 659.889381][T15175] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 659.932096][T15175] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 659.969831][T15175] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 660.298523][T15187] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2720'. [ 661.042663][T15195] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2723'. [ 661.091338][T15195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2723'. [ 661.838415][T13816] Bluetooth: hci0: command 0x0406 tx timeout [ 661.920180][T13816] Bluetooth: hci2: command 0x0406 tx timeout [ 662.001993][T13816] Bluetooth: hci3: command 0x0406 tx timeout [ 662.008019][T13816] Bluetooth: hci1: command 0x0406 tx timeout [ 662.212610][T15214] FAULT_INJECTION: forcing a failure. [ 662.212610][T15214] name failslab, interval 1, probability 0, space 0, times 0 [ 662.283314][T15214] CPU: 0 UID: 0 PID: 15214 Comm: syz.0.2729 Tainted: G L syzkaller #0 PREEMPT(full) [ 662.283341][T15214] Tainted: [L]=SOFTLOCKUP [ 662.283347][T15214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 662.283356][T15214] Call Trace: [ 662.283361][T15214] [ 662.283367][T15214] dump_stack_lvl+0x100/0x190 [ 662.283406][T15214] should_fail_ex.cold+0x5/0xa [ 662.283425][T15214] should_failslab+0xc2/0x120 [ 662.283441][T15214] __kmalloc_cache_noprof+0x7a/0x6f0 [ 662.283460][T15214] ? vkms_plane_duplicate_state+0x87/0x130 [ 662.283480][T15214] vkms_plane_duplicate_state+0x87/0x130 [ 662.283496][T15214] drm_atomic_get_plane_state+0x279/0x760 [ 662.283516][T15214] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 662.283537][T15214] ? trace_contention_end+0x140/0x180 [ 662.283560][T15214] ? __mutex_lock+0x26a/0x1b90 [ 662.283581][T15214] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 662.283601][T15214] ? drm_master_internal_acquire+0x21/0x80 [ 662.283637][T15214] drm_client_modeset_commit_locked+0x14d/0x580 [ 662.283660][T15214] drm_client_modeset_commit+0x4f/0x80 [ 662.283681][T15214] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 662.283703][T15214] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 662.283724][T15214] drm_fbdev_client_restore+0x1b/0x30 [ 662.283740][T15214] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 662.283755][T15214] drm_client_dev_restore+0x205/0x2a0 [ 662.283778][T15214] drm_release+0x2c6/0x360 [ 662.283795][T15214] ? __pfx_drm_release+0x10/0x10 [ 662.283813][T15214] __fput+0x3ff/0xb40 [ 662.283834][T15214] task_work_run+0x150/0x240 [ 662.283858][T15214] ? __pfx_task_work_run+0x10/0x10 [ 662.283883][T15214] exit_to_user_mode_loop+0x100/0x4a0 [ 662.283903][T15214] do_syscall_64+0x668/0xf80 [ 662.283922][T15214] ? clear_bhb_loop+0x40/0x90 [ 662.283940][T15214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.283954][T15214] RIP: 0033:0x7fbe4fb9c799 [ 662.283968][T15214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 662.283982][T15214] RSP: 002b:00007fbe50a8d028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 662.283997][T15214] RAX: 0000000000000000 RBX: 00007fbe4fe15fa0 RCX: 00007fbe4fb9c799 [ 662.284005][T15214] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 662.284014][T15214] RBP: 00007fbe4fc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 662.284023][T15214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 662.284032][T15214] R13: 00007fbe4fe16038 R14: 00007fbe4fe15fa0 R15: 00007ffcd71b0528 [ 662.284051][T15214] [ 663.239113][T13816] Bluetooth: hci2: unexpected event 0x1c length: 725 > 5 [ 666.767194][T15278] random: crng reseeded on system resumption [ 666.980633][T15278] hub 1-0:1.0: USB hub found [ 667.023663][T15278] hub 1-0:1.0: 1 port detected [ 667.845724][T15296] tipc: Started in network mode [ 667.904532][T15296] tipc: Node identity ffffffff, cluster identity 4711 [ 667.970386][T15296] tipc: Node number set to 4294967295 [ 669.193873][T15313] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2753'. [ 669.889344][T15314] netlink: 186 bytes leftover after parsing attributes in process `syz.2.2754'. [ 671.199488][T15339] netlink: 'syz.2.2760': attribute type 2 has an invalid length. [ 671.207268][T15339] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2760'. [ 671.256383][T15341] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2761'. [ 672.227109][T15357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2765'. [ 672.299207][T15359] netlink: 'syz.1.2765': attribute type 1 has an invalid length. [ 672.349682][T15359] netlink: 51505 bytes leftover after parsing attributes in process `syz.1.2765'. [ 672.455419][T15362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2766'. [ 672.536804][T15363] netlink: 354 bytes leftover after parsing attributes in process `syz.2.2766'. [ 675.489592][T15405] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2777'. [ 675.536568][T15405] team0: left allmulticast mode [ 675.561951][T15405] team_slave_0: left allmulticast mode [ 675.592929][T15405] team_slave_1: left allmulticast mode [ 675.658605][T15405] team0: left promiscuous mode [ 675.722394][T15405] team_slave_0: left promiscuous mode [ 675.761065][T15405] team_slave_1: left promiscuous mode [ 675.798774][T15405] bridge0: port 2(team0) entered disabled state [ 675.879871][T15405] bond0: left allmulticast mode [ 675.894161][T15405] bond_slave_0: left allmulticast mode [ 675.944181][T15405] bond0: left promiscuous mode [ 675.988165][T15405] bond_slave_0: left promiscuous mode [ 676.019701][T15405] bridge0: port 3(bond0) entered disabled state [ 676.104734][T15405] bridge_slave_0: left allmulticast mode [ 676.124600][T15405] bridge_slave_0: left promiscuous mode [ 676.165030][T15405] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.236081][T15413] tipc: Started in network mode [ 676.268128][T15413] tipc: Node identity ffffffff, cluster identity 4711 [ 676.274916][T15413] tipc: Node number set to 4294967295 [ 678.599729][T15454] netlink: 326 bytes leftover after parsing attributes in process `syz.2.2789'. [ 680.974414][T15492] random: crng reseeded on system resumption [ 681.242248][T15492] hub 1-0:1.0: USB hub found [ 681.339166][T15492] hub 1-0:1.0: 1 port detected [ 682.006693][T15498] can0: slcan on ttyS2. [ 682.206228][T15496] can0 (unregistered): slcan off ttyS2. [ 682.270964][T15502] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2799'. [ 683.776478][T13816] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 685.844551][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 685.922021][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.928567][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.172794][T15567] FAULT_INJECTION: forcing a failure. [ 687.172794][T15567] name failslab, interval 1, probability 0, space 0, times 0 [ 687.327110][T15567] CPU: 0 UID: 0 PID: 15567 Comm: syz.3.2810 Tainted: G L syzkaller #0 PREEMPT(full) [ 687.327137][T15567] Tainted: [L]=SOFTLOCKUP [ 687.327143][T15567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 687.327152][T15567] Call Trace: [ 687.327157][T15567] [ 687.327163][T15567] dump_stack_lvl+0x100/0x190 [ 687.327191][T15567] should_fail_ex.cold+0x5/0xa [ 687.327208][T15567] ? memcg_list_lru_alloc+0x4ec/0x740 [ 687.327229][T15567] should_failslab+0xc2/0x120 [ 687.327244][T15567] __kmalloc_noprof+0xe0/0x850 [ 687.327264][T15567] ? ipcget+0xee/0xf50 [ 687.327284][T15567] memcg_list_lru_alloc+0x4ec/0x740 [ 687.327319][T15567] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 687.327340][T15567] ? rcu_read_unlock+0x17/0x60 [ 687.327361][T15567] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 687.327384][T15567] __memcg_slab_post_alloc_hook+0x130/0x990 [ 687.327405][T15567] ? kasan_save_track+0x14/0x30 [ 687.327429][T15567] kmem_cache_alloc_lru_noprof+0x592/0x6e0 [ 687.327449][T15567] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 687.327468][T15567] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 687.327482][T15567] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 687.327497][T15567] alloc_inode+0x68/0x250 [ 687.327515][T15567] new_inode+0x22/0x1c0 [ 687.327534][T15567] hugetlbfs_get_inode+0x313/0x750 [ 687.327551][T15567] hugetlb_file_setup+0x3cc/0x5b0 [ 687.327569][T15567] newseg+0xabb/0xed0 [ 687.327589][T15567] ? __pfx_newseg+0x10/0x10 [ 687.327605][T15567] ? down_write+0x146/0x1f0 [ 687.327626][T15567] ? ksys_write+0x190/0x250 [ 687.327639][T15567] ? ksys_write+0x190/0x250 [ 687.327654][T15567] ipcget+0xee/0xf50 [ 687.327671][T15567] ? do_futex+0x192/0x350 [ 687.327689][T15567] ? __pfx_do_futex+0x10/0x10 [ 687.327709][T15567] ? __pfx_ipcget+0x10/0x10 [ 687.327727][T15567] ? __x64_sys_futex+0x34f/0x4d0 [ 687.327743][T15567] ? __x64_sys_futex+0x358/0x4d0 [ 687.327763][T15567] __x64_sys_shmget+0x13b/0x1b0 [ 687.327781][T15567] ? __pfx___x64_sys_shmget+0x10/0x10 [ 687.327804][T15567] do_syscall_64+0x106/0xf80 [ 687.327822][T15567] ? clear_bhb_loop+0x40/0x90 [ 687.327839][T15567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.327854][T15567] RIP: 0033:0x7f5d4b79c799 [ 687.327867][T15567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 687.327882][T15567] RSP: 002b:00007f5d4c5fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 687.327897][T15567] RAX: ffffffffffffffda RBX: 00007f5d4ba16090 RCX: 00007f5d4b79c799 [ 687.327908][T15567] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000 [ 687.327917][T15567] RBP: 00007f5d4b832c99 R08: 0000000000000000 R09: 0000000000000000 [ 687.327926][T15567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 687.327935][T15567] R13: 00007f5d4ba16128 R14: 00007f5d4ba16090 R15: 00007ffd24475b08 [ 687.327954][T15567] [ 687.981352][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 688.977715][T15582] Process accounting paused [ 689.882896][T15601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2824'. [ 689.949837][T15601] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2824'. [ 690.242943][ T51] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 690.380180][ T29] audit: type=1800 audit(678112.968:17): pid=15615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2818" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 700.316727][T15740] tipc: Started in network mode [ 700.398634][T15740] tipc: Node identity ffffffff, cluster identity 4711 [ 700.462144][T15740] tipc: Node number set to 4294967295 [ 700.812878][T15749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2847'. [ 700.900260][T15749] netlink: 'syz.1.2847': attribute type 1 has an invalid length. [ 700.966204][T15749] netlink: 'syz.1.2847': attribute type 6 has an invalid length. [ 703.365874][T15761] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 703.439542][T15761] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 703.530577][T15761] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 703.566118][T15761] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 703.918646][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 705.438161][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 705.599115][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 705.605182][T15596] Bluetooth: hci1: command 0x0406 tx timeout [ 705.894359][T15844] can: request_module (can-proto-5) failed. [ 707.279292][T15878] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 711.126902][T15937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2878'. [ 711.218418][T15944] netlink: 'syz.0.2878': attribute type 1 has an invalid length. [ 711.324227][T15944] netlink: 13 bytes leftover after parsing attributes in process `syz.0.2878'. [ 713.561850][T15978] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2889'. [ 714.847293][T15992] [U] [ 714.850023][T15992] [U] [ 714.852716][T15992] [U] [ 714.855385][T15992] [U] [ 714.953830][T15992] [U] [ 714.956569][T15992] [U] [ 714.959351][T15992] [U] [ 714.962040][T15992] [U] [ 714.998329][T15995] random: crng reseeded on system resumption [ 715.039674][T15992] [U] [ 715.042397][T15992] [U] [ 715.045067][T15992] [U] [ 715.047732][T15992] [U] [ 715.158341][T15992] [U] [ 715.164541][T15995] Restarting kernel threads ... [ 715.244479][T15995] Done restarting kernel threads. [ 718.540453][T16036] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(12) [ 720.213527][T16042] Process accounting resumed [ 723.782154][T16099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2919'. [ 723.852434][T16099] netlink: 13 bytes leftover after parsing attributes in process `syz.1.2919'. [ 724.459886][T16112] FAULT_INJECTION: forcing a failure. [ 724.459886][T16112] name fail_futex, interval 1, probability 0, space 0, times 0 [ 724.585371][T16112] CPU: 0 UID: 0 PID: 16112 Comm: syz.1.2920 Tainted: G L syzkaller #0 PREEMPT(full) [ 724.585399][T16112] Tainted: [L]=SOFTLOCKUP [ 724.585405][T16112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 724.585415][T16112] Call Trace: [ 724.585420][T16112] [ 724.585426][T16112] dump_stack_lvl+0x100/0x190 [ 724.585453][T16112] should_fail_ex.cold+0x5/0xa [ 724.585470][T16112] get_futex_key+0x1d2/0x1620 [ 724.585490][T16112] ? __pfx_get_futex_key+0x10/0x10 [ 724.585513][T16112] futex_wake+0xea/0x530 [ 724.585534][T16112] ? __pfx_futex_wake+0x10/0x10 [ 724.585558][T16112] ? putname+0xb1/0x110 [ 724.585572][T16112] ? kmem_cache_free+0x124/0x6a0 [ 724.585613][T16112] do_futex+0x32b/0x350 [ 724.585632][T16112] ? __pfx_do_futex+0x10/0x10 [ 724.585650][T16112] ? __pfx_do_sys_openat2+0x10/0x10 [ 724.585673][T16112] __x64_sys_futex+0x34f/0x4d0 [ 724.585693][T16112] ? __x64_sys_openat+0x12d/0x210 [ 724.585711][T16112] ? __pfx___x64_sys_futex+0x10/0x10 [ 724.585736][T16112] do_syscall_64+0x106/0xf80 [ 724.585754][T16112] ? clear_bhb_loop+0x40/0x90 [ 724.585771][T16112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.585786][T16112] RIP: 0033:0x7ffbb6b9c799 [ 724.585799][T16112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 724.585813][T16112] RSP: 002b:00007ffbb7a1a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 724.585826][T16112] RAX: ffffffffffffffda RBX: 00007ffbb6e16098 RCX: 00007ffbb6b9c799 [ 724.585835][T16112] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ffbb6e1609c [ 724.585844][T16112] RBP: 00007ffbb6e16090 R08: 0000000000000000 R09: 0000000000000000 [ 724.585852][T16112] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 724.585860][T16112] R13: 00007ffbb6e16128 R14: 00007ffcba56eb10 R15: 00007ffcba56ebf8 [ 724.585879][T16112] [ 727.399209][T16161] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input16 [ 728.425904][T16169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2932'. [ 728.492327][T16169] netlink: 354 bytes leftover after parsing attributes in process `syz.0.2932'. [ 728.862469][T16174] FAULT_INJECTION: forcing a failure. [ 728.862469][T16174] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 728.996842][T16174] CPU: 0 UID: 0 PID: 16174 Comm: syz.3.2933 Tainted: G L syzkaller #0 PREEMPT(full) [ 728.996870][T16174] Tainted: [L]=SOFTLOCKUP [ 728.996875][T16174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 728.996884][T16174] Call Trace: [ 728.996891][T16174] [ 728.996898][T16174] dump_stack_lvl+0x100/0x190 [ 728.996925][T16174] should_fail_ex.cold+0x5/0xa [ 728.996940][T16174] ? prepare_alloc_pages+0x16d/0x5f0 [ 728.996958][T16174] should_fail_alloc_page+0xeb/0x140 [ 728.996975][T16174] prepare_alloc_pages+0x1f0/0x5f0 [ 728.996994][T16174] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 728.997020][T16174] ? kasan_save_stack+0x3f/0x50 [ 728.997040][T16174] ? kasan_save_stack+0x30/0x50 [ 728.997059][T16174] ? kasan_save_track+0x14/0x30 [ 728.997078][T16174] ? __kasan_slab_alloc+0x89/0x90 [ 728.997090][T16174] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 728.997110][T16174] ? ptlock_alloc+0x1f/0x70 [ 728.997127][T16174] ? pte_alloc_one+0x82/0x3d0 [ 728.997144][T16174] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 728.997169][T16174] ? __lock_acquire+0x4a5/0x2630 [ 728.997191][T16174] ? __lock_acquire+0x4a5/0x2630 [ 728.997210][T16174] ? __lock_acquire+0x4a5/0x2630 [ 728.997226][T16174] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 728.997250][T16174] ? policy_nodemask+0xed/0x4f0 [ 728.997266][T16174] alloc_pages_mpol+0x1fb/0x550 [ 728.997282][T16174] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 728.997296][T16174] ? page_table_check_set+0x49a/0xa10 [ 728.997315][T16174] alloc_pages_noprof+0x131/0x390 [ 728.997330][T16174] pte_alloc_one+0x1c/0x3d0 [ 728.997346][T16174] __pte_alloc+0x6d/0x3e0 [ 728.997360][T16174] ? __pfx___pte_alloc+0x10/0x10 [ 728.997373][T16174] ? __pfx___might_resched+0x10/0x10 [ 728.997392][T16174] ? copy_page_range+0x1e9d/0x6570 [ 728.997413][T16174] copy_page_range+0x3e51/0x6570 [ 728.997451][T16174] ? __pfx_copy_page_range+0x10/0x10 [ 728.997476][T16174] ? __pfx___might_resched+0x10/0x10 [ 728.997503][T16174] ? up_write+0x290/0x4f0 [ 728.997524][T16174] dup_mmap+0xd25/0x2180 [ 728.997548][T16174] ? __pfx_dup_mmap+0x10/0x10 [ 728.997563][T16174] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 728.997586][T16174] ? __lock_acquire+0x4a5/0x2630 [ 728.997603][T16174] ? find_held_lock+0x2b/0x80 [ 728.997616][T16174] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 728.997647][T16174] copy_process+0x7523/0x7a40 [ 728.997673][T16174] ? __pfx_copy_process+0x10/0x10 [ 728.997706][T16174] kernel_clone+0xfc/0x9a0 [ 728.997723][T16174] ? __pfx_futex_wait+0x10/0x10 [ 728.997746][T16174] ? __pfx_kernel_clone+0x10/0x10 [ 728.997777][T16174] __do_sys_clone+0xd9/0x120 [ 728.997794][T16174] ? __pfx___do_sys_clone+0x10/0x10 [ 728.997809][T16174] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 728.997844][T16174] do_syscall_64+0x106/0xf80 [ 728.997863][T16174] ? clear_bhb_loop+0x40/0x90 [ 728.997880][T16174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.997895][T16174] RIP: 0033:0x7f5d4b79c799 [ 728.997908][T16174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 728.997923][T16174] RSP: 002b:00007f5d4c61efd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 728.997937][T16174] RAX: ffffffffffffffda RBX: 00007f5d4ba15fa0 RCX: 00007f5d4b79c799 [ 728.997947][T16174] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 728.997956][T16174] RBP: 00007f5d4b832c99 R08: 0000000000000000 R09: 0000000000000000 [ 728.997964][T16174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 728.997973][T16174] R13: 00007f5d4ba16038 R14: 00007f5d4ba15fa0 R15: 00007ffd24475b08 [ 728.997993][T16174] [ 731.311327][T16198] rtc_cmos 00:00: Alarms can be up to one day in the future [ 732.189798][T16214] FAULT_INJECTION: forcing a failure. [ 732.189798][T16214] name failslab, interval 1, probability 0, space 0, times 0 [ 732.387128][T16214] CPU: 0 UID: 0 PID: 16214 Comm: syz.3.2940 Tainted: G L syzkaller #0 PREEMPT(full) [ 732.387155][T16214] Tainted: [L]=SOFTLOCKUP [ 732.387160][T16214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 732.387169][T16214] Call Trace: [ 732.387175][T16214] [ 732.387181][T16214] dump_stack_lvl+0x100/0x190 [ 732.387207][T16214] should_fail_ex.cold+0x5/0xa [ 732.387225][T16214] ? lsm_blob_alloc+0x68/0x90 [ 732.387243][T16214] should_failslab+0xc2/0x120 [ 732.387259][T16214] __kmalloc_noprof+0xe0/0x850 [ 732.387280][T16214] ? trace_kmem_cache_alloc+0xf3/0x120 [ 732.387298][T16214] lsm_blob_alloc+0x68/0x90 [ 732.387317][T16214] security_sk_alloc+0x2d/0x290 [ 732.387331][T16214] sk_prot_alloc+0x1d1/0x2a0 [ 732.387356][T16214] sk_alloc+0x36/0xe80 [ 732.387376][T16214] inet_create+0x3a0/0x1060 [ 732.387393][T16214] ? inet_create+0x94/0x1060 [ 732.387412][T16214] __sock_create+0x339/0x860 [ 732.387431][T16214] udp_sock_create4+0xa6/0x450 [ 732.387451][T16214] ? __pfx_udp_sock_create4+0x10/0x10 [ 732.387472][T16214] ? lockdep_hardirqs_on+0x78/0x100 [ 732.387493][T16214] ? crng_make_state+0x2b0/0x6c0 [ 732.387510][T16214] rxrpc_open_socket+0x4ef/0x6b0 [ 732.387526][T16214] ? __pfx_rxrpc_open_socket+0x10/0x10 [ 732.387550][T16214] ? rcu_is_watching+0x12/0xc0 [ 732.387573][T16214] rxrpc_lookup_local+0xac7/0x1220 [ 732.387593][T16214] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 732.387609][T16214] ? __local_bh_enable_ip+0x9e/0x120 [ 732.387627][T16214] rxrpc_sendmsg+0x34a/0x680 [ 732.387646][T16214] sock_write_iter+0x524/0x5a0 [ 732.387660][T16214] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 732.387675][T16214] ? __pfx_sock_write_iter+0x10/0x10 [ 732.387696][T16214] ? bpf_lsm_file_permission+0x9/0x10 [ 732.387717][T16214] ? security_file_permission+0x76/0x210 [ 732.387735][T16214] ? rw_verify_area+0xce/0x6d0 [ 732.387756][T16214] vfs_write+0x6ac/0x1070 [ 732.387770][T16214] ? __pfx_sock_write_iter+0x10/0x10 [ 732.387785][T16214] ? __pfx_vfs_write+0x10/0x10 [ 732.387805][T16214] ? find_held_lock+0x2b/0x80 [ 732.387830][T16214] ksys_write+0x1f8/0x250 [ 732.387843][T16214] ? __pfx_ksys_write+0x10/0x10 [ 732.387864][T16214] do_syscall_64+0x106/0xf80 [ 732.387882][T16214] ? clear_bhb_loop+0x40/0x90 [ 732.387899][T16214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.387913][T16214] RIP: 0033:0x7f5d4b79c799 [ 732.387926][T16214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 732.387939][T16214] RSP: 002b:00007f5d4c5fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 732.387953][T16214] RAX: ffffffffffffffda RBX: 00007f5d4ba16090 RCX: 00007f5d4b79c799 [ 732.387963][T16214] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 732.387971][T16214] RBP: 00007f5d4b832c99 R08: 0000000000000000 R09: 0000000000000000 [ 732.387979][T16214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 732.387988][T16214] R13: 00007f5d4ba16128 R14: 00007f5d4ba16090 R15: 00007ffd24475b08 [ 732.388008][T16214] [ 733.490124][T16224] net_ratelimit: 8 callbacks suppressed [ 733.490144][T16224] openvswitch: netlink: Missing valid actions attribute. [ 736.472999][T16258] loop12: detected capacity change from 0 to 8192 [ 739.078785][T16287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2957'. [ 739.276986][T16287] netlink: 'syz.1.2957': attribute type 1 has an invalid length. [ 739.339252][T16287] netlink: 51505 bytes leftover after parsing attributes in process `syz.1.2957'. [ 740.177783][T16298] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17 [ 741.692432][T16327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2967'. [ 741.790139][T16329] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2967'. [ 744.647581][T16356] FAULT_INJECTION: forcing a failure. [ 744.647581][T16356] name failslab, interval 1, probability 0, space 0, times 0 [ 744.731533][T16356] CPU: 0 UID: 0 PID: 16356 Comm: syz.3.2974 Tainted: G L syzkaller #0 PREEMPT(full) [ 744.731578][T16356] Tainted: [L]=SOFTLOCKUP [ 744.731584][T16356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 744.731593][T16356] Call Trace: [ 744.731598][T16356] [ 744.731605][T16356] dump_stack_lvl+0x100/0x190 [ 744.731633][T16356] should_fail_ex.cold+0x5/0xa [ 744.731650][T16356] ? memcg_list_lru_alloc+0x4ec/0x740 [ 744.731671][T16356] should_failslab+0xc2/0x120 [ 744.731686][T16356] __kmalloc_noprof+0xe0/0x850 [ 744.731707][T16356] ? do_syscall_64+0x106/0xf80 [ 744.731729][T16356] memcg_list_lru_alloc+0x4ec/0x740 [ 744.731753][T16356] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 744.731773][T16356] ? rcu_read_unlock+0x17/0x60 [ 744.731793][T16356] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 744.731816][T16356] __memcg_slab_post_alloc_hook+0x130/0x990 [ 744.731836][T16356] ? kasan_save_track+0x14/0x30 [ 744.731859][T16356] kmem_cache_alloc_lru_noprof+0x592/0x6e0 [ 744.731879][T16356] ? alloc_inode+0x183/0x250 [ 744.731901][T16356] alloc_inode+0x183/0x250 [ 744.731919][T16356] alloc_anon_inode+0x2a/0x3e0 [ 744.731934][T16356] dma_buf_export+0x267/0xcb0 [ 744.731956][T16356] ? sg_alloc_table+0x4c/0x1c0 [ 744.731980][T16356] system_heap_allocate+0xb5e/0x1170 [ 744.732006][T16356] ? __pfx_system_heap_allocate+0x10/0x10 [ 744.732035][T16356] ? rep_movs_alternative+0x4a/0x90 [ 744.732053][T16356] dma_heap_ioctl+0x37f/0x5e0 [ 744.732075][T16356] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 744.732094][T16356] ? __x64_sys_close_range+0x2d9/0x5d0 [ 744.732115][T16356] ? xfd_validate_state+0x129/0x190 [ 744.732136][T16356] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 744.732157][T16356] __x64_sys_ioctl+0x18e/0x210 [ 744.732178][T16356] do_syscall_64+0x106/0xf80 [ 744.732196][T16356] ? clear_bhb_loop+0x40/0x90 [ 744.732213][T16356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.732228][T16356] RIP: 0033:0x7f5d4b79c799 [ 744.732241][T16356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 744.732255][T16356] RSP: 002b:00007f5d4c61f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 744.732269][T16356] RAX: ffffffffffffffda RBX: 00007f5d4ba15fa0 RCX: 00007f5d4b79c799 [ 744.732279][T16356] RDX: 0000200000000140 RSI: ffffffffffdffe00 RDI: 0000000000000000 [ 744.732288][T16356] RBP: 00007f5d4b832c99 R08: 0000000000000000 R09: 0000000000000000 [ 744.732297][T16356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 744.732305][T16356] R13: 00007f5d4ba16038 R14: 00007f5d4ba15fa0 R15: 00007ffd24475b08 [ 744.732325][T16356] [ 747.371955][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.388370][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.639619][T16393] random: crng reseeded on system resumption [ 750.621044][T16425] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2991'. [ 750.847399][T16425] veth1_macvtap: left promiscuous mode [ 754.275759][T16454] Process accounting paused [ 756.100065][T16481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3000'. [ 756.222682][T16486] netlink: 354 bytes leftover after parsing attributes in process `syz.2.3000'. [ 759.491656][T16513] ptp ptp0: new virtual clock ptp1 [ 759.543175][T16513] ptp ptp0: new virtual clock ptp2 [ 759.609214][T16513] ptp ptp0: new virtual clock ptp3 [ 759.643625][T16513] ptp ptp0: guarantee physical clock free running [ 763.550123][T16556] random: crng reseeded on system resumption [ 763.796400][T16558] hub 1-0:1.0: USB hub found [ 763.998325][T16558] hub 1-0:1.0: 1 port detected [ 778.521877][T16727] netlink: zone id is out of range [ 778.570961][T16727] netlink: zone id is out of range [ 778.576236][T16727] netlink: zone id is out of range [ 778.691120][T16727] netlink: zone id is out of range [ 778.722389][T16728] netlink: zone id is out of range [ 778.753224][T16727] netlink: zone id is out of range [ 778.793704][T16728] netlink: zone id is out of range [ 778.839043][T16727] netlink: zone id is out of range [ 778.874615][T16728] netlink: zone id is out of range [ 778.922353][T16728] netlink: zone id is out of range [ 779.681814][T16735] can: request_module (can-proto-5) failed. [ 779.917420][T16735] netlink: 186 bytes leftover after parsing attributes in process `syz.1.3052'. [ 783.510451][T16794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3062'. [ 783.573318][T16794] netlink: 'syz.2.3062': attribute type 1 has an invalid length. [ 783.658721][T16794] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3062'. [ 784.841476][T16799] Process accounting resumed [ 785.717040][T16831] Invalid ELF header magic: != ELF [ 788.261624][T16862] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 788.267681][T16862] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 788.428275][T16862] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 788.588218][T16862] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 789.080108][T16879] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3079'. [ 789.648241][T16879] veth0_macvtap: left promiscuous mode [ 789.750438][T16879] macvtap0: entered promiscuous mode [ 789.755802][T16879] macvtap0: entered allmulticast mode [ 790.172540][T16892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3080'. [ 790.220833][T16894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3081'. [ 790.246585][T16892] netlink: 'syz.1.3080': attribute type 1 has an invalid length. [ 790.293700][T16896] netlink: 354 bytes leftover after parsing attributes in process `syz.2.3081'. [ 790.313745][T16892] netlink: 'syz.1.3080': attribute type 6 has an invalid length. [ 790.324285][T15596] Bluetooth: hci2: command 0x0406 tx timeout [ 790.330350][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 790.482556][T15596] Bluetooth: hci3: command 0x0406 tx timeout [ 790.488847][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 795.425410][ T29] audit: type=1800 audit(678218.008:18): pid=16954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3092" name="dbroot" dev="configfs" ino=320587 res=0 errno=0 [ 797.388822][T16976] can0: slcan on ttyS2. [ 797.631312][T16976] can0 (unregistered): slcan off ttyS2. [ 799.666469][T17016] input: jJǸ-9%vJ86 as /devices/virtual/input/input18 [ 800.058830][T17005] random: crng reseeded on system resumption [ 800.278438][T17031] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(12) [ 804.595293][T17084] FAULT_INJECTION: forcing a failure. [ 804.595293][T17084] name failslab, interval 1, probability 0, space 0, times 0 [ 804.661936][T17084] CPU: 0 UID: 0 PID: 17084 Comm: syz.1.3116 Tainted: G L syzkaller #0 PREEMPT(full) [ 804.661964][T17084] Tainted: [L]=SOFTLOCKUP [ 804.661971][T17084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 804.661981][T17084] Call Trace: [ 804.661986][T17084] [ 804.661992][T17084] dump_stack_lvl+0x100/0x190 [ 804.662020][T17084] should_fail_ex.cold+0x5/0xa [ 804.662038][T17084] should_failslab+0xc2/0x120 [ 804.662053][T17084] __kmalloc_cache_noprof+0x7a/0x6f0 [ 804.662072][T17084] ? percpu_ref_init+0xec/0x3f0 [ 804.662096][T17084] ? __pfx_blkg_release+0x10/0x10 [ 804.662112][T17084] percpu_ref_init+0xec/0x3f0 [ 804.662131][T17084] ? kasan_save_track+0x14/0x30 [ 804.662155][T17084] blkg_alloc+0xf0/0xae0 [ 804.662177][T17084] blkcg_init_disk+0x51/0x580 [ 804.662197][T17084] __alloc_disk_node+0x2f6/0x6b0 [ 804.662215][T17084] __blk_alloc_disk+0xd2/0x170 [ 804.662229][T17084] ? __pfx___blk_alloc_disk+0x10/0x10 [ 804.662254][T17084] ? __pfx_idr_alloc+0x10/0x10 [ 804.662272][T17084] ? lockdep_init_map_type+0x5c/0x250 [ 804.662292][T17084] ? __raw_spin_lock_init+0x3a/0x110 [ 804.662314][T17084] ? __pfx_hot_add_show+0x10/0x10 [ 804.662332][T17084] zram_add+0x1bf/0x610 [ 804.662349][T17084] ? __pfx_zram_add+0x10/0x10 [ 804.662379][T17084] ? find_held_lock+0x2b/0x80 [ 804.662392][T17084] ? sysfs_file_kobj+0xe4/0x290 [ 804.662412][T17084] ? __pfx_hot_add_show+0x10/0x10 [ 804.662430][T17084] hot_add_show+0x21/0x80 [ 804.662448][T17084] class_attr_show+0x72/0xa0 [ 804.662465][T17084] ? __pfx_class_attr_show+0x10/0x10 [ 804.662479][T17084] sysfs_kf_seq_show+0x217/0x3a0 [ 804.662500][T17084] seq_read_iter+0x32f/0x1270 [ 804.662529][T17084] kernfs_fop_read_iter+0x46c/0x610 [ 804.662545][T17084] ? rw_verify_area+0xce/0x6d0 [ 804.662564][T17084] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 804.662581][T17084] vfs_read+0x825/0xb30 [ 804.662605][T17084] ? __pfx_vfs_read+0x10/0x10 [ 804.662638][T17084] ksys_read+0x12a/0x250 [ 804.662650][T17084] ? __pfx_ksys_read+0x10/0x10 [ 804.662669][T17084] do_syscall_64+0x106/0xf80 [ 804.662687][T17084] ? clear_bhb_loop+0x40/0x90 [ 804.662704][T17084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.662719][T17084] RIP: 0033:0x7ffbb6b9c799 [ 804.662732][T17084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 804.662756][T17084] RSP: 002b:00007ffbb7a3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 804.662771][T17084] RAX: ffffffffffffffda RBX: 00007ffbb6e15fa0 RCX: 00007ffbb6b9c799 [ 804.662781][T17084] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000006 [ 804.662791][T17084] RBP: 00007ffbb6c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 804.662801][T17084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 804.662809][T17084] R13: 00007ffbb6e16038 R14: 00007ffbb6e15fa0 R15: 00007ffcba56ebf8 [ 804.662830][T17084] [ 806.296725][T17084] zram: Error allocating disk structure for device 1 [ 806.524484][T17090] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 806.865077][T17094] netlink: 122 bytes leftover after parsing attributes in process `syz.0.3117'. [ 807.010851][T17100] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 808.341445][T17115] FAULT_INJECTION: forcing a failure. [ 808.341445][T17115] name failslab, interval 1, probability 0, space 0, times 0 [ 808.462605][T17115] CPU: 0 UID: 0 PID: 17115 Comm: syz.1.3122 Tainted: G L syzkaller #0 PREEMPT(full) [ 808.462631][T17115] Tainted: [L]=SOFTLOCKUP [ 808.462636][T17115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 808.462645][T17115] Call Trace: [ 808.462650][T17115] [ 808.462656][T17115] dump_stack_lvl+0x100/0x190 [ 808.462683][T17115] should_fail_ex.cold+0x5/0xa [ 808.462700][T17115] ? __list_lru_init+0xd9/0x4b0 [ 808.462719][T17115] should_failslab+0xc2/0x120 [ 808.462735][T17115] __kmalloc_noprof+0xe0/0x850 [ 808.462756][T17115] ? lockdep_init_map_type+0x5c/0x250 [ 808.462778][T17115] __list_lru_init+0xd9/0x4b0 [ 808.462799][T17115] alloc_super+0x8d8/0xd20 [ 808.462821][T17115] ? __pfx_mqueue_fill_super+0x10/0x10 [ 808.462841][T17115] sget_fc+0x117/0xc70 [ 808.462862][T17115] ? __pfx_set_anon_super_fc+0x10/0x10 [ 808.462884][T17115] ? __pfx_mqueue_fill_super+0x10/0x10 [ 808.462903][T17115] get_tree_nodev+0x28/0x190 [ 808.462925][T17115] mqueue_get_tree+0xf1/0x130 [ 808.462945][T17115] vfs_get_tree+0x92/0x320 [ 808.462964][T17115] fc_mount_longterm+0x1a/0x270 [ 808.462984][T17115] mq_init_ns+0x482/0x820 [ 808.463000][T17115] copy_ipcs+0x3dd/0x7e0 [ 808.463015][T17115] create_new_namespaces+0x20a/0xac0 [ 808.463030][T17115] ? security_capable+0x80/0x260 [ 808.463053][T17115] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 808.463070][T17115] ksys_unshare+0x473/0xad0 [ 808.463088][T17115] ? __pfx_ksys_unshare+0x10/0x10 [ 808.463113][T17115] __x64_sys_unshare+0x31/0x40 [ 808.463131][T17115] do_syscall_64+0x106/0xf80 [ 808.463150][T17115] ? clear_bhb_loop+0x40/0x90 [ 808.463166][T17115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.463181][T17115] RIP: 0033:0x7ffbb6b9c799 [ 808.463194][T17115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 808.463208][T17115] RSP: 002b:00007ffbb7a3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 808.463222][T17115] RAX: ffffffffffffffda RBX: 00007ffbb6e15fa0 RCX: 00007ffbb6b9c799 [ 808.463231][T17115] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 808.463240][T17115] RBP: 00007ffbb6c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 808.463248][T17115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 808.463256][T17115] R13: 00007ffbb6e16038 R14: 00007ffbb6e15fa0 R15: 00007ffcba56ebf8 [ 808.463275][T17115] [ 809.083704][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.090353][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.236230][T17124] vivid-007: ================= START STATUS ================= [ 809.262528][T17124] vivid-007: Generate PTS: true [ 809.292487][T17124] vivid-007: Generate SCR: true [ 809.297501][T17124] tpg source WxH: 320x240 (Y'CbCr) [ 809.347440][T17124] tpg field: 1 [ 809.358183][T17124] tpg crop: (0,0)/320x240 [ 809.379797][T17124] tpg compose: (0,0)/320x240 [ 809.411286][T17124] tpg colorspace: 8 [ 809.424662][T17124] tpg transfer function: 0/0 [ 809.455915][T17124] tpg Y'CbCr encoding: 0/0 [ 809.478261][T17124] tpg quantization: 0/0 [ 809.508304][T17124] tpg RGB range: 0/2 [ 809.528187][T17124] vivid-007: ================== END STATUS ================== [ 810.898144][T17144] zswap: compressor not available [ 811.140822][T17143] netlink: 306 bytes leftover after parsing attributes in process `syz.0.3129'. [ 814.842748][T17228] netlink: 25 bytes leftover after parsing attributes in process `syz.1.3145'. [ 816.044829][T17231] Process accounting paused [ 818.562126][T17292] netlink: 504 bytes leftover after parsing attributes in process `syz.0.3158'. [ 819.997957][T17320] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3164'. [ 820.651619][T17333] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3166'. [ 824.269963][T17376] netlink: 25 bytes leftover after parsing attributes in process `syz.0.3183'. [ 824.420575][T17378] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3174'. [ 826.209070][T17394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3179'. [ 826.328956][T17400] netlink: 25 bytes leftover after parsing attributes in process `syz.1.3179'. [ 826.500406][T17408] can0: slcan on ttyS2. [ 826.704609][T17404] can0 (unregistered): slcan off ttyS2. [ 827.058939][T17407] netlink: 306 bytes leftover after parsing attributes in process `syz.2.3181'. [ 832.764463][T17509] FAULT_INJECTION: forcing a failure. [ 832.764463][T17509] name failslab, interval 1, probability 0, space 0, times 0 [ 832.861959][T17509] CPU: 0 UID: 0 PID: 17509 Comm: syz.0.3197 Tainted: G L syzkaller #0 PREEMPT(full) [ 832.861987][T17509] Tainted: [L]=SOFTLOCKUP [ 832.861993][T17509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 832.862002][T17509] Call Trace: [ 832.862008][T17509] [ 832.862013][T17509] dump_stack_lvl+0x100/0x190 [ 832.862041][T17509] should_fail_ex.cold+0x5/0xa [ 832.862059][T17509] should_failslab+0xc2/0x120 [ 832.862074][T17509] __kmalloc_cache_node_noprof+0x7d/0x770 [ 832.862097][T17509] ? bdi_alloc+0x44/0x140 [ 832.862116][T17509] bdi_alloc+0x44/0x140 [ 832.862131][T17509] __alloc_disk_node+0xac/0x6b0 [ 832.862150][T17509] __blk_alloc_disk+0xd2/0x170 [ 832.862164][T17509] ? __pfx___blk_alloc_disk+0x10/0x10 [ 832.862190][T17509] ? __pfx_idr_alloc+0x10/0x10 [ 832.862209][T17509] ? lockdep_init_map_type+0x5c/0x250 [ 832.862228][T17509] ? __raw_spin_lock_init+0x3a/0x110 [ 832.862250][T17509] ? __pfx_hot_add_show+0x10/0x10 [ 832.862269][T17509] zram_add+0x1bf/0x610 [ 832.862286][T17509] ? __pfx_zram_add+0x10/0x10 [ 832.862315][T17509] ? find_held_lock+0x2b/0x80 [ 832.862327][T17509] ? sysfs_file_kobj+0xe4/0x290 [ 832.862347][T17509] ? __pfx_hot_add_show+0x10/0x10 [ 832.862365][T17509] hot_add_show+0x21/0x80 [ 832.862383][T17509] class_attr_show+0x72/0xa0 [ 832.862399][T17509] ? __pfx_class_attr_show+0x10/0x10 [ 832.862414][T17509] sysfs_kf_seq_show+0x217/0x3a0 [ 832.862435][T17509] seq_read_iter+0x32f/0x1270 [ 832.862465][T17509] kernfs_fop_read_iter+0x46c/0x610 [ 832.862481][T17509] ? rw_verify_area+0xce/0x6d0 [ 832.862500][T17509] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 832.862517][T17509] vfs_read+0x825/0xb30 [ 832.862559][T17509] ? __pfx_vfs_read+0x10/0x10 [ 832.862594][T17509] ksys_read+0x12a/0x250 [ 832.862607][T17509] ? __pfx_ksys_read+0x10/0x10 [ 832.862627][T17509] do_syscall_64+0x106/0xf80 [ 832.862648][T17509] ? clear_bhb_loop+0x40/0x90 [ 832.862665][T17509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.862680][T17509] RIP: 0033:0x7fbe4fb9c799 [ 832.862693][T17509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 832.862706][T17509] RSP: 002b:00007fbe50a8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 832.862720][T17509] RAX: ffffffffffffffda RBX: 00007fbe4fe15fa0 RCX: 00007fbe4fb9c799 [ 832.862730][T17509] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000006 [ 832.862738][T17509] RBP: 00007fbe4fc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 832.862747][T17509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 832.862755][T17509] R13: 00007fbe4fe16038 R14: 00007fbe4fe15fa0 R15: 00007ffcd71b0528 [ 832.862775][T17509] [ 834.832240][T17509] zram: Error allocating disk structure for device 1 [ 835.471312][T15596] Bluetooth: hci0: unexpected event 0x12 length: 440 > 8 [ 836.233856][T17545] FAULT_INJECTION: forcing a failure. [ 836.233856][T17545] name failslab, interval 1, probability 0, space 0, times 0 [ 836.409161][T17545] CPU: 0 UID: 0 PID: 17545 Comm: syz.3.3206 Tainted: G L syzkaller #0 PREEMPT(full) [ 836.409188][T17545] Tainted: [L]=SOFTLOCKUP [ 836.409193][T17545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 836.409203][T17545] Call Trace: [ 836.409208][T17545] [ 836.409213][T17545] dump_stack_lvl+0x100/0x190 [ 836.409241][T17545] should_fail_ex.cold+0x5/0xa [ 836.409259][T17545] ? __register_sysctl_table+0xbe4/0x1650 [ 836.409281][T17545] should_failslab+0xc2/0x120 [ 836.409295][T17545] __kmalloc_noprof+0xe0/0x850 [ 836.409321][T17545] __register_sysctl_table+0xbe4/0x1650 [ 836.409351][T17545] ? __pfx___register_sysctl_table+0x10/0x10 [ 836.409372][T17545] ? is_module_address+0x69/0xf0 [ 836.409391][T17545] ? register_net_sysctl_sz+0x222/0x430 [ 836.409414][T17545] ? __asan_memcpy+0x3c/0x60 [ 836.409435][T17545] sctp_sysctl_net_register+0x15e/0x200 [ 836.409457][T17545] ? __pfx_sctp_defaults_init+0x10/0x10 [ 836.409476][T17545] sctp_defaults_init+0x6d2/0xd90 [ 836.409495][T17545] ? __pfx_sctp_defaults_init+0x10/0x10 [ 836.409515][T17545] ops_init+0x1e2/0x5f0 [ 836.409545][T17545] setup_net+0x118/0x3a0 [ 836.409568][T17545] ? __pfx_setup_net+0x10/0x10 [ 836.409588][T17545] ? lockdep_init_map_type+0x5c/0x250 [ 836.409608][T17545] ? mutex_init_lockep+0x110/0x150 [ 836.409631][T17545] copy_net_ns+0x46f/0x7c0 [ 836.409646][T17545] create_new_namespaces+0x3ea/0xac0 [ 836.409665][T17545] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 836.409682][T17545] ksys_unshare+0x473/0xad0 [ 836.409700][T17545] ? __pfx_ksys_unshare+0x10/0x10 [ 836.409724][T17545] __x64_sys_unshare+0x31/0x40 [ 836.409741][T17545] do_syscall_64+0x106/0xf80 [ 836.409760][T17545] ? clear_bhb_loop+0x40/0x90 [ 836.409777][T17545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.409791][T17545] RIP: 0033:0x7f5d4b79c799 [ 836.409805][T17545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 836.409820][T17545] RSP: 002b:00007f5d4c61f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 836.409834][T17545] RAX: ffffffffffffffda RBX: 00007f5d4ba15fa0 RCX: 00007f5d4b79c799 [ 836.409844][T17545] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 836.409852][T17545] RBP: 00007f5d4b832c99 R08: 0000000000000000 R09: 0000000000000000 [ 836.409860][T17545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 836.409868][T17545] R13: 00007f5d4ba16038 R14: 00007f5d4ba15fa0 R15: 00007ffd24475b08 [ 836.409887][T17545] [ 836.669400][T17545] sysctl could not get directory: /net/sctp -12 [ 838.439321][T17588] can0: slcan on ttyS2. [ 838.579575][T17588] can0 (unregistered): slcan off ttyS2. [ 842.922727][T17666] sd 0:0:1:0: PR command failed: 1026 [ 842.950545][T17666] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 842.998778][T17666] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 846.159973][T17694] Process accounting resumed [ 846.906877][ T29] audit: type=1804 audit(678269.488:19): pid=17718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3234" name="/newroot/772/file0" dev="tmpfs" ino=4064 res=1 errno=0 [ 847.077309][ T29] audit: type=1804 audit(678269.518:20): pid=17720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3234" name="/newroot/772/file0" dev="tmpfs" ino=4064 res=1 errno=0 [ 847.618586][T17731] random: crng reseeded on system resumption [ 854.729200][T17843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3256'. [ 854.788924][T17850] netlink: 'syz.3.3256': attribute type 1 has an invalid length. [ 854.817638][T17849] netlink: 25 bytes leftover after parsing attributes in process `syz.1.3257'. [ 854.897280][T17850] netlink: 13 bytes leftover after parsing attributes in process `syz.3.3256'. [ 856.870185][T17882] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22 [ 858.394807][T17886] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 860.597213][T17940] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 860.648685][T17940] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 860.654765][T17940] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 860.738804][T17940] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 862.638116][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 862.718090][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 862.724135][T15596] Bluetooth: hci2: command 0x0406 tx timeout [ 862.798081][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 867.761363][T18021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3289'. [ 867.830243][T18022] netlink: 13 bytes leftover after parsing attributes in process `syz.3.3289'. [ 869.448222][T18049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3294'. [ 869.509628][T18049] netlink: 354 bytes leftover after parsing attributes in process `syz.3.3294'. [ 870.250104][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.256424][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.964047][T18070] FAULT_INJECTION: forcing a failure. [ 872.964047][T18070] name failslab, interval 1, probability 0, space 0, times 0 [ 873.350284][T18070] CPU: 0 UID: 0 PID: 18070 Comm: syz.1.3296 Tainted: G L syzkaller #0 PREEMPT(full) [ 873.350312][T18070] Tainted: [L]=SOFTLOCKUP [ 873.350317][T18070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 873.350326][T18070] Call Trace: [ 873.350331][T18070] [ 873.350337][T18070] dump_stack_lvl+0x100/0x190 [ 873.350365][T18070] should_fail_ex.cold+0x5/0xa [ 873.350383][T18070] should_failslab+0xc2/0x120 [ 873.350400][T18070] __kmalloc_cache_noprof+0x7a/0x6f0 [ 873.350419][T18070] ? __kthread_create_on_node+0xce/0x3f0 [ 873.350436][T18070] ? lockdep_init_map_type+0x5c/0x250 [ 873.350457][T18070] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 873.350478][T18070] __kthread_create_on_node+0xce/0x3f0 [ 873.350495][T18070] ? __pfx___kthread_create_on_node+0x10/0x10 [ 873.350521][T18070] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 873.350542][T18070] kthread_create_on_node+0xc7/0x100 [ 873.350558][T18070] ? __pfx_kthread_create_on_node+0x10/0x10 [ 873.350574][T18070] ? find_held_lock+0x2b/0x80 [ 873.350587][T18070] ? setup_udp_tunnel_sock+0x56a/0x680 [ 873.350607][T18070] ? setup_udp_tunnel_sock+0x56a/0x680 [ 873.350628][T18070] ? do_raw_spin_unlock+0x145/0x1e0 [ 873.350652][T18070] rxrpc_open_socket+0x3d5/0x6b0 [ 873.350667][T18070] ? __pfx_rxrpc_open_socket+0x10/0x10 [ 873.350706][T18070] ? __pfx_rxrpc_encap_rcv+0x10/0x10 [ 873.350727][T18070] ? __pfx_rxrpc_encap_err_rcv+0x10/0x10 [ 873.350758][T18070] ? rcu_is_watching+0x12/0xc0 [ 873.350781][T18070] rxrpc_lookup_local+0xac7/0x1220 [ 873.350799][T18070] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 873.350816][T18070] ? __local_bh_enable_ip+0x9e/0x120 [ 873.350833][T18070] rxrpc_sendmsg+0x34a/0x680 [ 873.350853][T18070] sock_write_iter+0x524/0x5a0 [ 873.350867][T18070] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 873.350883][T18070] ? __pfx_sock_write_iter+0x10/0x10 [ 873.350912][T18070] ? bpf_lsm_file_permission+0x9/0x10 [ 873.350936][T18070] ? security_file_permission+0x76/0x210 [ 873.350954][T18070] ? rw_verify_area+0xce/0x6d0 [ 873.350976][T18070] vfs_write+0x6ac/0x1070 [ 873.350989][T18070] ? __pfx_sock_write_iter+0x10/0x10 [ 873.351006][T18070] ? __pfx_vfs_write+0x10/0x10 [ 873.351026][T18070] ? find_held_lock+0x2b/0x80 [ 873.351052][T18070] ksys_write+0x1f8/0x250 [ 873.351065][T18070] ? __pfx_ksys_write+0x10/0x10 [ 873.351084][T18070] do_syscall_64+0x106/0xf80 [ 873.351103][T18070] ? clear_bhb_loop+0x40/0x90 [ 873.351120][T18070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.351134][T18070] RIP: 0033:0x7ffbb6b9c799 [ 873.351148][T18070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 873.351163][T18070] RSP: 002b:00007ffbb7a1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 873.351178][T18070] RAX: ffffffffffffffda RBX: 00007ffbb6e16090 RCX: 00007ffbb6b9c799 [ 873.351188][T18070] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 873.351196][T18070] RBP: 00007ffbb6c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 873.351205][T18070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 873.351214][T18070] R13: 00007ffbb6e16128 R14: 00007ffbb6e16090 R15: 00007ffcba56ebf8 [ 873.351233][T18070] [ 876.486614][T18084] Process accounting paused [ 886.437040][T18222] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3323'. [ 887.765330][T18234] random: crng reseeded on system resumption [ 893.748871][T18320] random: crng reseeded on system resumption [ 900.509293][T18414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3354'. [ 900.718917][T18421] netlink: 25 bytes leftover after parsing attributes in process `syz.1.3354'. [ 902.328339][T18440] random: crng reseeded on system resumption [ 907.995328][T18496] Process accounting resumed [ 918.458947][T18647] random: crng reseeded on system resumption [ 918.877268][T18653] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input25 [ 919.898118][T18655] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input26 [ 923.888684][T18719] Invalid ELF header magic: != ELF [ 925.648640][T18742] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input27 [ 927.079676][T18744] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input28 [ 929.348465][T18783] can0: slcan on ttyS2. [ 929.500960][T18786] can0 (unregistered): slcan off ttyS2. [ 930.638930][T18781] zswap: compressor  not available [ 931.528593][T18822] ptp ptp0: guarantee physical clock free running [ 931.680969][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.687420][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.061372][T18827] [U] [ 932.064103][T18827] [U] [ 932.066775][T18827] [U] [ 932.069446][T18827] [U] [ 932.168129][T18827] [U] [ 932.170936][T18827] [U] [ 932.173722][T18827] [U] [ 932.176392][T18827] [U] [ 932.340087][T18827] [U] [ 937.532633][T18887] futex_wake_op: syz.0.3449 tries to shift op by -2048; fix this program [ 938.536042][T18909] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3454'. [ 938.690833][T18884] Process accounting paused [ 938.921626][T18914] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 939.222741][T18917] netlink: 122 bytes leftover after parsing attributes in process `syz.3.3456'. [ 939.447747][T18922] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 951.355906][T19086] net_ratelimit: 16 callbacks suppressed [ 951.355921][T19086] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 955.607608][T19118] futex_wake_op: syz.1.3503 tries to shift op by -2048; fix this program [ 956.832464][T19147] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 965.360254][T19250] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3532'. [ 966.071601][T19263] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 969.487821][ T13] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u8:1: bg 1: bad block bitmap checksum [ 969.629744][ T13] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1395 with max blocks 8 with error 74 [ 969.757031][ T13] EXT4-fs (sda1): This should not happen!! Data will be lost [ 969.757031][ T13] [ 971.254897][T19290] Process accounting resumed [ 974.580988][T19351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3550'. [ 976.159051][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 981.767441][T19432] ptp ptp0: guarantee physical clock free running [ 984.904108][T19471] zswap: compressor not available [ 986.061164][T19486] ptp ptp0: guarantee physical clock free running [ 991.325621][T19562] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 993.121251][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.127550][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 999.151992][ T51] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 999.152019][ T51] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 999.169049][ T51] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 999.169090][ T51] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1002.287175][T19651] Process accounting paused [ 1003.984599][T19676] FAULT_INJECTION: forcing a failure. [ 1003.984599][T19676] name failslab, interval 1, probability 0, space 0, times 0 [ 1004.161920][T19676] CPU: 0 UID: 0 PID: 19676 Comm: syz.0.3621 Tainted: G L syzkaller #0 PREEMPT(full) [ 1004.161947][T19676] Tainted: [L]=SOFTLOCKUP [ 1004.161953][T19676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1004.161962][T19676] Call Trace: [ 1004.161967][T19676] [ 1004.161974][T19676] dump_stack_lvl+0x100/0x190 [ 1004.162002][T19676] should_fail_ex.cold+0x5/0xa [ 1004.162020][T19676] should_failslab+0xc2/0x120 [ 1004.162035][T19676] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1004.162057][T19676] ? __proc_create+0x2cb/0x8c0 [ 1004.162086][T19676] __proc_create+0x2cb/0x8c0 [ 1004.162108][T19676] ? __pfx___proc_create+0x10/0x10 [ 1004.162131][T19676] ? _raw_write_unlock+0x28/0x50 [ 1004.162150][T19676] ? proc_register+0x559/0x8a0 [ 1004.162166][T19676] proc_create_reg+0x75/0x170 [ 1004.162180][T19676] ? __pfx_sctp_snmp_seq_show+0x10/0x10 [ 1004.162199][T19676] proc_create_net_single+0x86/0x180 [ 1004.162214][T19676] ? __pfx_proc_create_net_single+0x10/0x10 [ 1004.162228][T19676] ? sctp_defaults_init+0x720/0xd90 [ 1004.162251][T19676] sctp_proc_init+0xaa/0x270 [ 1004.162270][T19676] ? __pfx_sctp_defaults_init+0x10/0x10 [ 1004.162287][T19676] sctp_defaults_init+0x758/0xd90 [ 1004.162308][T19676] ? __pfx_sctp_defaults_init+0x10/0x10 [ 1004.162327][T19676] ops_init+0x1e2/0x5f0 [ 1004.162349][T19676] setup_net+0x118/0x3a0 [ 1004.162369][T19676] ? __pfx_setup_net+0x10/0x10 [ 1004.162389][T19676] ? lockdep_init_map_type+0x5c/0x250 [ 1004.162408][T19676] ? mutex_init_lockep+0x110/0x150 [ 1004.162429][T19676] copy_net_ns+0x46f/0x7c0 [ 1004.162444][T19676] create_new_namespaces+0x3ea/0xac0 [ 1004.162464][T19676] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1004.162480][T19676] ksys_unshare+0x473/0xad0 [ 1004.162499][T19676] ? __pfx_ksys_unshare+0x10/0x10 [ 1004.162523][T19676] __x64_sys_unshare+0x31/0x40 [ 1004.162540][T19676] do_syscall_64+0x106/0xf80 [ 1004.162559][T19676] ? clear_bhb_loop+0x40/0x90 [ 1004.162575][T19676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.162590][T19676] RIP: 0033:0x7fbe4fb9c799 [ 1004.162604][T19676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1004.162618][T19676] RSP: 002b:00007fbe50a8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1004.162633][T19676] RAX: ffffffffffffffda RBX: 00007fbe4fe15fa0 RCX: 00007fbe4fb9c799 [ 1004.162643][T19676] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1004.162651][T19676] RBP: 00007fbe4fc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1004.162659][T19676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1004.162668][T19676] R13: 00007fbe4fe16038 R14: 00007fbe4fe15fa0 R15: 00007ffcd71b0528 [ 1004.162687][T19676] [ 1006.298932][ T29] audit: type=1326 audit(678428.888:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19696 comm="syz.0.3627" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbe4fb9c799 code=0x0 [ 1007.566782][T19717] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3629'. [ 1012.882413][T19774] kexec: Could not allocate control_code_buffer [ 1015.901437][T19813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3648'. [ 1015.969413][T19813] netlink: 'syz.1.3648': attribute type 1 has an invalid length. [ 1016.029865][T19813] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3648'. [ 1017.628814][T19842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3653'. [ 1032.995055][T19968] Process accounting resumed [ 1035.506202][T20017] ptrace attach of "./syz-executor exec"[5826] was attempted by ""[20017] [ 1035.674194][T20010] Invalid ELF header magic: != ELF [ 1038.261416][T20041] futex_wake_op: syz.3.3692 tries to shift op by -2048; fix this program [ 1039.209843][T20052] can: request_module (can-proto-4) failed. [ 1042.493296][T20099] ptp ptp0: guarantee physical clock free running [ 1047.087062][T20137] Invalid ELF header magic: != ELF [ 1050.104948][T20176] Invalid ELF header magic: != ELF [ 1051.681293][T20199] can: request_module (can-proto-4) failed. [ 1052.035737][ T51] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 1054.080195][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 1054.560726][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.567062][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.160514][T20201] Bluetooth: hci0: command 0x0406 tx timeout [ 1057.847995][T20262] input: jJǸ-9%vJ86 as /devices/virtual/input/input29 [ 1061.080844][ T12] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u8:0: bg 2: bad block bitmap checksum [ 1061.178675][ T12] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 1390 with max blocks 10 with error 74 [ 1061.279069][ T12] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1061.279069][ T12] [ 1063.737461][T20335] Process accounting paused [ 1069.396923][T20400] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1069.538889][T20410] ======================================================= [ 1069.538889][T20410] WARNING: The mand mount option has been deprecated and [ 1069.538889][T20410] and is ignored by this kernel. Remove the mand [ 1069.538889][T20410] option from the mount to silence this warning. [ 1069.538889][T20410] ======================================================= [ 1069.911159][T20402] smpboot: CPU 1 is now offline [ 1070.107042][T20402] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1070.159596][T20402] ------------[ cut here ]------------ [ 1070.165130][T20402] DEAD callback error for CPU1 [ 1070.165150][T20402] WARNING: kernel/cpu.c:1463 at _cpu_down+0x759/0x1020, CPU#0: syz.0.3760/20402 [ 1070.179086][T20402] Modules linked in: [ 1070.183580][T20402] CPU: 0 UID: 0 PID: 20402 Comm: syz.0.3760 Tainted: G L syzkaller #0 PREEMPT(full) [ 1070.194636][T20402] Tainted: [L]=SOFTLOCKUP [ 1070.199736][T20402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1070.210216][T20402] RIP: 0010:_cpu_down+0x75c/0x1020 [ 1070.215929][T20402] Code: 5e 7a f6 89 ee bf 91 00 00 00 e8 df 58 7a f6 81 fd 91 00 00 00 0f 84 6b 02 00 00 e8 1e 5e 7a f6 48 8d 3d f7 f4 4e 05 44 89 ee <67> 48 0f b9 3a e9 3a fa ff ff 45 31 ff e9 32 fa ff ff e8 fd 5d 7a [ 1070.235684][T20402] RSP: 0018:ffffc9000395faa8 EFLAGS: 00010283 [ 1070.241831][T20402] RAX: 000000000000d1fd RBX: ffff8880b85242e0 RCX: ffffc9000f543000 [ 1070.249944][T20402] RDX: 0000000000080000 RSI: 0000000000000001 RDI: ffffffff90dcaf40 [ 1070.258101][T20402] RBP: 0000000000000092 R08: 0000000000000005 R09: 0000000000000091 [ 1070.266174][T20402] R10: 0000000000000092 R11: 0000000000000000 R12: 00000000000000ed [ 1070.274316][T20402] R13: 0000000000000001 R14: 0000000000000001 R15: 00000000fffffff5 [ 1070.282360][T20402] FS: 00007fbe50a4b6c0(0000) GS:ffff88812434a000(0000) knlGS:0000000000000000 [ 1070.291376][T20402] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1070.298540][T20402] CR2: 0000000000004f70 CR3: 00000000226aa000 CR4: 00000000003526f0 [ 1070.306921][T20402] Call Trace: [ 1070.310359][T20402] [ 1070.313285][T20402] ? __pfx_cpu_subsys_offline+0x10/0x10 [ 1070.318888][T20402] cpu_device_down+0x82/0xc0 [ 1070.323471][T20402] device_offline+0x2a7/0x3c0 [ 1070.328198][T20402] ? __pfx_device_offline+0x10/0x10 [ 1070.333389][T20402] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1070.339337][T20402] ? __pfx_online_store+0x10/0x10 [ 1070.344368][T20402] online_store+0xd1/0x180 [ 1070.348817][T20402] ? __pfx_online_store+0x10/0x10 [ 1070.353834][T20402] ? __pfx_find_held_lock+0x10/0x10 [ 1070.359087][T20402] ? sysfs_file_kobj+0xe4/0x290 [ 1070.363983][T20402] ? sysfs_file_kobj+0xe4/0x290 [ 1070.368900][T20402] dev_attr_store+0x58/0x80 [ 1070.373396][T20402] ? __pfx_dev_attr_store+0x10/0x10 [ 1070.378636][T20402] sysfs_kf_write+0xf2/0x150 [ 1070.383305][T20402] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1070.388684][T20402] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1070.393927][T20402] vfs_write+0x6ac/0x1070 [ 1070.398766][T20402] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1070.405353][T20402] ? __pfx_vfs_write+0x10/0x10 [ 1070.410512][T20402] ksys_write+0x12a/0x250 [ 1070.414835][T20402] ? __pfx_ksys_write+0x10/0x10 [ 1070.419748][T20402] do_syscall_64+0x106/0xf80 [ 1070.424351][T20402] ? clear_bhb_loop+0x40/0x90 [ 1070.429106][T20402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.435000][T20402] RIP: 0033:0x7fbe4fb9c799 [ 1070.439458][T20402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1070.459271][T20402] RSP: 002b:00007fbe50a4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1070.467826][T20402] RAX: ffffffffffffffda RBX: 00007fbe4fe16180 RCX: 00007fbe4fb9c799 [ 1070.475870][T20402] RDX: 000000000000000b RSI: 00002000000002c0 RDI: 0000000000000003 [ 1070.484125][T20402] RBP: 00007fbe4fc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1070.492191][T20402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1070.500215][T20402] R13: 00007fbe4fe16218 R14: 00007fbe4fe16180 R15: 00007ffcd71b0528 [ 1070.508810][T20402] [ 1070.512151][T20402] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1070.519422][T20402] CPU: 0 UID: 0 PID: 20402 Comm: syz.0.3760 Tainted: G L syzkaller #0 PREEMPT(full) [ 1070.530362][T20402] Tainted: [L]=SOFTLOCKUP [ 1070.534675][T20402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1070.544725][T20402] Call Trace: [ 1070.548001][T20402] [ 1070.550922][T20402] dump_stack_lvl+0x100/0x190 [ 1070.555609][T20402] vpanic+0x552/0x970 [ 1070.559577][T20402] ? __pfx_vpanic+0x10/0x10 [ 1070.564073][T20402] panic+0xd1/0xe0 [ 1070.567781][T20402] ? __pfx_panic+0x10/0x10 [ 1070.572191][T20402] check_panic_on_warn.cold+0x19/0x34 [ 1070.577553][T20402] ? _cpu_down+0x759/0x1020 [ 1070.582047][T20402] __warn.cold+0x191/0x348 [ 1070.586452][T20402] __report_bug+0x296/0x3d0 [ 1070.590942][T20402] ? _cpu_down+0x759/0x1020 [ 1070.595498][T20402] ? __pfx___report_bug+0x10/0x10 [ 1070.600513][T20402] ? __pfx_try_to_wake_up+0x10/0x10 [ 1070.605716][T20402] report_bug_entry+0xe1/0x290 [ 1070.610464][T20402] ? _cpu_down+0x75c/0x1020 [ 1070.614974][T20402] handle_bug+0x1cd/0x2a0 [ 1070.619405][T20402] exc_invalid_op+0x17/0x50 [ 1070.623949][T20402] asm_exc_invalid_op+0x1a/0x20 [ 1070.628802][T20402] RIP: 0010:_cpu_down+0x75c/0x1020 [ 1070.633933][T20402] Code: 5e 7a f6 89 ee bf 91 00 00 00 e8 df 58 7a f6 81 fd 91 00 00 00 0f 84 6b 02 00 00 e8 1e 5e 7a f6 48 8d 3d f7 f4 4e 05 44 89 ee <67> 48 0f b9 3a e9 3a fa ff ff 45 31 ff e9 32 fa ff ff e8 fd 5d 7a [ 1070.653526][T20402] RSP: 0018:ffffc9000395faa8 EFLAGS: 00010283 [ 1070.659575][T20402] RAX: 000000000000d1fd RBX: ffff8880b85242e0 RCX: ffffc9000f543000 [ 1070.667530][T20402] RDX: 0000000000080000 RSI: 0000000000000001 RDI: ffffffff90dcaf40 [ 1070.675482][T20402] RBP: 0000000000000092 R08: 0000000000000005 R09: 0000000000000091 [ 1070.683460][T20402] R10: 0000000000000092 R11: 0000000000000000 R12: 00000000000000ed [ 1070.691413][T20402] R13: 0000000000000001 R14: 0000000000000001 R15: 00000000fffffff5 [ 1070.699466][T20402] ? _cpu_down+0x752/0x1020 [ 1070.703961][T20402] ? __pfx_cpu_subsys_offline+0x10/0x10 [ 1070.709523][T20402] cpu_device_down+0x82/0xc0 [ 1070.714098][T20402] device_offline+0x2a7/0x3c0 [ 1070.718758][T20402] ? __pfx_device_offline+0x10/0x10 [ 1070.723939][T20402] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1070.729833][T20402] ? __pfx_online_store+0x10/0x10 [ 1070.734848][T20402] online_store+0xd1/0x180 [ 1070.739263][T20402] ? __pfx_online_store+0x10/0x10 [ 1070.744462][T20402] ? __pfx_find_held_lock+0x10/0x10 [ 1070.749648][T20402] ? sysfs_file_kobj+0xe4/0x290 [ 1070.754499][T20402] ? sysfs_file_kobj+0xe4/0x290 [ 1070.759337][T20402] dev_attr_store+0x58/0x80 [ 1070.763829][T20402] ? __pfx_dev_attr_store+0x10/0x10 [ 1070.769187][T20402] sysfs_kf_write+0xf2/0x150 [ 1070.773774][T20402] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1070.779042][T20402] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1070.784229][T20402] vfs_write+0x6ac/0x1070 [ 1070.788542][T20402] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1070.794333][T20402] ? __pfx_vfs_write+0x10/0x10 [ 1070.799122][T20402] ksys_write+0x12a/0x250 [ 1070.803470][T20402] ? __pfx_ksys_write+0x10/0x10 [ 1070.808339][T20402] do_syscall_64+0x106/0xf80 [ 1070.812946][T20402] ? clear_bhb_loop+0x40/0x90 [ 1070.817631][T20402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.823516][T20402] RIP: 0033:0x7fbe4fb9c799 [ 1070.827938][T20402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1070.847579][T20402] RSP: 002b:00007fbe50a4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1070.855988][T20402] RAX: ffffffffffffffda RBX: 00007fbe4fe16180 RCX: 00007fbe4fb9c799 [ 1070.863942][T20402] RDX: 000000000000000b RSI: 00002000000002c0 RDI: 0000000000000003 [ 1070.871895][T20402] RBP: 00007fbe4fc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1070.879859][T20402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1070.887834][T20402] R13: 00007fbe4fe16218 R14: 00007fbe4fe16180 R15: 00007ffcd71b0528 [ 1070.895921][T20402] [ 1070.899196][T20402] Kernel Offset: disabled [ 1070.903549][T20402] Rebooting in 86400 seconds..