last executing test programs: 15.216160187s ago: executing program 1 (id=1185): open(0x0, 0x0, 0x57e) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bus/usb/010/001\x00', 0x80d00, 0x0) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) fsconfig$auto_SHMEM_HUGE_ALWAYS(r0, 0x1, &(0x7f00000001c0)='/dev/bus/usb/010/001\x00', &(0x7f0000000240)="3c8f4ca673f0d58965f83aeb0c1e4df81cf06581135c81a02b28ee516507c90d9e35c195944e25427bd67625c84ec08fa4fea6c0500098dad37010d7004d228c40ffa24d8064db8142b90ccababb4f3cd3834d7aa2f74b6cef73908fc750eabd69f34ca197c216e0397d1e1f632dd8274ddc53eb488842419a12298b807181f20c3c3de41aa92db22f99f83864da0ce4a6313eb41e89ed744750153b46da", 0x1) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyy7/power/runtime_suspended_time\x00', 0x0, 0x0) unshare$auto(0x40000080) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) clock_nanosleep$auto(0x9, 0x1000000, &(0x7f0000000000)={0xe, 0x8}, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x1e3a02, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) futimesat$auto(r2, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 13.515867386s ago: executing program 2 (id=1186): r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$auto_VHOST_SET_VRING_BASE2(r0, 0x4008af12, &(0x7f0000000040)={0xa, 0x4}) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60040440}, 0x800) pwrite64$auto(0xffffffffffffffff, 0x0, 0x6bc, 0x5) socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x5, 0x84) socket(0x10, 0x2, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) bpf$auto(0x1, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x8000, 0xf9c, 0x466, 0x9, 0x3, 0x4, 0x2, 0x4, 0x200, 0x1fd, 0xb6, 0x4, 0x6, 0x3}, 0xa3) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x7e) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) syz_clone(0x0, 0x0, 0xffffffffffffff87, 0x0, 0x0, 0x0) pidfd_getfd$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x100000000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0xc2f02, 0x0) preadv2$auto(r2, &(0x7f0000000080)={0x0, 0x80000003}, 0x7, 0xffffffffffffffff, 0x8000000000000, 0x2f) write$auto(r1, &(0x7f00000001c0)='\x80\xfb\xd8o`AG,>^\xd6e\xe1[\x8d\xb4\xfeQ\x06\x9b\x12\x90B\x1c\xeb/Y\xd1\xbc\x16v\t\xb4^\x9a\xa4z\xbb\xdd\n\xdbB\x1d\xbc\x06\x94\xaf\x91\x111\xf2\n\x84\xed\xab\x93~,\xd4\xfc\x97(\xa8\x1d\xdfb\xc2\xa2\x8aocpIr>\v\xeep,CfM\xf7\xee\x893&\xba^>,\xbc\x1a2\x91\x88\t\x18\a\xd6\x18\xbefW\xc0y\x8c\xc13W\xb1\xa9\xe1\'WS\xad0\x1e:\x1f\xa4X\x99\x94_\xb4=\x04C\xe5\x86l\x13\x88\x01\x9e\xad6 \xd2|\x88L\xde\x9dA\xcfL\xc5E\x1cz\xdc\x86\xc8\xff\xeb{\x1a\xaa\xad{\xdf.\x9b\xbd\a\xb6$\x82\xcc\x12\xac\xe2\xe4C\xa7\xdd\x82;\xa0\xc8Yw\x0f=', 0x100081) signalfd$auto(0xffffffffffffffff, 0x0, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20f01, 0x0) 13.130433684s ago: executing program 0 (id=1188): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r1 = io_uring_setup$auto(0x1, 0x0) write$auto_fops_init_pkru_pkeys(r1, 0x0, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) r2 = memfd_create$auto(&(0x7f0000000300)='/sys/kernel/debug/x86/boot_params/data\x00\"F\xb6\xcd\x06\xd6\x97\\L\xe1\xb2\xee\xb8\x8e\xd6O\xa1j\x90w\xc7\x94\xb7yi\x01&\x04b/\xaa\xfb#s\xc4\xa3\xa7\xacj\xc6\x8e\xf4L\x9a\xf8\xcc\xdcy\x9f\x93\xbc\xf6\xc8\xdb\x05w,|B\xfc\x04\x97\xd3\x0f\x8b\x81\xe8\xbc\x81\x0e\xd7o\xd2\xcd\x18z\xc2\xb7|\xe1\xa6\x9a~\x96\x10rnLnt\xdb\xdb-\x1b\x99\xd4\xed;\xf8\x13a\r\xf2\a\x85%\xef\xa7\x7f#\x96\xf2S\xb0\xf1Hq\x0f;\x83\xb7\x0fz\x9dN\xc9\x1e\x15r\x97|\xbfE\xce\"', 0x4) fallocate$auto(r2, 0x0, 0x10, 0xccbd5d) fallocate$auto(0x8000000000000003, 0x3, 0xf, 0x10) unshare$auto(0x40000080) r3 = socket(0x2, 0x5, 0x0) sendmmsg$auto(r3, &(0x7f00000001c0)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0x9}, 0xf}, 0xd, 0xffffffff) connect$auto(0x3, 0x0, 0x6) setsockopt$auto(0x3, 0x10000000084, 0x1, 0x0, 0x8) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x23, 0x0) r4 = socket(0xa, 0x3, 0x6) getsockopt$auto(r4, 0x40000000029, 0x50, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) 12.93731085s ago: executing program 1 (id=1189): unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r0 = fanotify_init$auto(0x3, 0x3) ioctl$auto_SNDRV_PCM_IOCTL_HW_FREE(r0, 0x4112, 0x0) madvise$auto(0x0, 0x200007, 0x19) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, &(0x7f0000000840)="13") read$auto_uinput_fops_uinput(0xffffffffffffffff, 0x0, 0x0) ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) adjtimex$auto(&(0x7f0000000400)={0xfff, 0x0, 0x7, 0x9e8, 0x7, 0xceb, 0x3605, 0x0, 0x9, 0x2, 0x2, {0x2, 0xfffffffffffffe01}, 0x6, 0x66, 0x100, 0x1, 0x0, 0x9, 0x639, 0x7fffffffffffffff, 0x4, 0xd, 0x9}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) 11.700763184s ago: executing program 3 (id=1190): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x22902, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, 0x0, 0x400c880) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) r2 = socketcall$auto(0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r2) statmount$auto(0x0, 0x0, 0x7, 0xb) ioctl$auto_KVM_GET_MSRS(r1, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/timer_source\x00', 0x8002, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) writev$auto(r4, 0x0, 0x9) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) r5 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/kvm/insn_emulation_fail\x00', 0xa2540, 0x0) read$auto_stat_fops_per_vm_kvm_main(r5, 0x0, 0x0) 11.654077228s ago: executing program 0 (id=1191): syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, 0x0, 0x0) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x4040) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) prctl$auto(0x0, 0x2, 0x4, 0x5, 0x7) unshare$auto(0x40000080) 11.325495686s ago: executing program 1 (id=1192): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/037/001\x00', 0x4a901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000100)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000000240)="2303", 0xc694, 0x3, 0x80005, @stream_id=0x7, 0x2004b, 0xc, 0x0}) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x1a) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) setfsuid$auto(0xee00) r1 = setfsgid$auto(0xee01) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r2) set_mempolicy$auto(0x8003, &(0x7f0000000280)=0x7b, 0x4) get_mempolicy$auto(0x0, 0x0, 0x400, 0x0, 0x1) sendmsg$auto_NET_SHAPER_CMD_GROUP(r2, 0x0, 0x14) mseal$auto(0x0, 0x7dda, 0x0) r3 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r3, 0x29, 0x20, 0x0, 0x8002) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r3) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) keyctl$auto(0x1f, 0x1, 0x6, r1, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 11.236260528s ago: executing program 3 (id=1193): io_submit$auto(0x10001, 0x1, &(0x7f0000000200)=&(0x7f0000000100)={0x5480, 0x5d0, 0x6, 0x1, 0x40, 0xffffffffffffffff, 0x8000000000000001, 0x0, 0x6, 0x0, 0xe, 0xffffffffffffffff}) r1 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/input/mouse0\x00', 0x1, 0x0) close_range$auto(r0, r1, 0xdf9b) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000001c00)=""/4111, 0x100f) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4000085) setrlimit$auto(0x7, 0x0) mq_open$auto(&(0x7f0000000400)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f{\x14S\xc4\xd1\x01gBV\x91\x8f_\xc0.\x84\xfe\x84\xd1s\x05\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9\xdc\x91<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5srQ', 0xa7c, 0xc, 0x0) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000000, 0xee01, 0xee01, 0xfff, 0xc, 0x40, 0x7}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x8, 0x7ff, 0x3ff, 0x5, 0xa, 0xf9eb, 0x4, 0x3, 0x3ff, @inferred=0xffffffffffffffff, @raw=0x7fffffff}) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram9\x00', 0x800, 0x0) ioctl$auto_BLKGETSIZE(r3, 0x1260, 0x0) setfsuid$auto(0xee00) r4 = socket(0x2, 0x3, 0x100) ioctl$auto_NVRAM_INIT(0xffffffffffffffff, 0x7040, 0x0) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x0, 0x6, 0x3, 0x3ff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r4, r2, 0x4c) 10.435719002s ago: executing program 2 (id=1195): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r1 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000080), 0x141501, 0x0) write$auto_split_huge_pages_fops_huge_memory(r1, &(0x7f00000000c0)='1', 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r2 = open(&(0x7f0000000140)='./cgroup\x00', 0xa000, 0x310) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/devices/virtual/block/nbd8/mq/0/cpu_list\x00', 0x0, 0x0) ioctl$auto_XFS_IOC_GOINGDOWN(0xffffffffffffffff, 0x8004587d, &(0x7f0000000180)=0x7fff) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) setreuid$auto(0x3, 0x7) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) r3 = io_uring_setup$auto(0x6, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r3) sendmsg$auto_NL80211_CMD_SET_FILS_AAD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000949e657c0fdde92a99628aafaf2de18bb2ecdd78ac105c1b8338ffed033c5d2bb3bc8190f3576e13a74ab39d21f0b97b974c4a49ef960c", @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) gettid() sendmsg$auto_NL80211_CMD_DEL_NAN_FUNCTION(r2, 0x0, 0x812) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = getpgid(0xffffffffffffffff) syz_open_procfs$namespace(r4, 0x0) 6.75914475s ago: executing program 2 (id=1196): r0 = openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/tracing/trace_marker\x00', 0x1, 0x0) writev$auto(r0, &(0x7f0000000680)={0x0, 0x622a}, 0x7) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x502, 0x0) ioctl$auto(0x3, 0xc0205647, r2) unshare$auto(0x40000080) r3 = openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) write$auto_cachefiles_daemon_fops_internal(r3, &(0x7f0000000080)="b030a5979fc84c8fb5c93b7cb984c4930699e926246cc0d71be7c7105f67c0ba9ca99801c0b02927061c639d1763a585c9b81a", 0x33) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) recvmmsg$auto(r1, 0x0, 0x3, 0x4, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, 0x0) socket(0x1d, 0x2, 0x9) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) mmap$auto(0xfffff000, 0x7, 0x200, 0x9b72, 0x2, 0x8000) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0xdec7) keyctl$auto(0x1f, 0x0, 0x6, 0x0, 0x401) 6.758507589s ago: executing program 3 (id=1197): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = setfsuid$auto(0xee00) r2 = io_uring_setup$auto(0x1, 0x0) r3 = fcntl$auto_F_GETOWN(r2, 0x9, 0x3f3) ptrace$auto_PTRACE_POKEDATA(0x5, r3, 0x5, 0x1) msgctl$auto_IPC_STAT(0x5f, 0x2, &(0x7f0000000180)={{0x1, r1, 0x0, 0x3, 0x100, 0x5, 0x2}, &(0x7f0000000040)=0x53, &(0x7f0000000080)=0x5, 0x8001, 0x8, 0x72, 0x4, 0x8, 0x3, 0x5, 0x7, @inferred=r3, @raw=0x9}) setresgid$auto(r4, r4, r4) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB, @ANYRES32=r7, @ANYBLOB="05000000"], 0x30}}, 0x14) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) setns(0xc9, 0x0) r8 = pidfd_open$auto(0x1, 0x0) setns(r8, 0x60020000) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000200), r9) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 6.757946861s ago: executing program 0 (id=1204): r0 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$auto(r1, 0x110, 0x2, 0x0, 0x1) madvise$auto(0x0, 0x2000040080000004, 0xe) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendto$auto(0x3, 0x0, 0x3c33c550, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x1c) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) sysfs$auto(0x2, 0x10000000000002d, 0x0) fsopen$auto(0x0, 0x1) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) setsockopt$auto(0xffffffffffffffff, 0xe, 0x12, 0x0, 0x52) unshare$auto(0x40000080) unshare$auto(0x40000080) madvise$auto(0x1, 0x54ea, 0xa) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000580)='/sys/devices/virtual/thermal/cooling_device0/max_state\x00', 0x500, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000005c0)=""/8, 0x8) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_TUNNEL_INFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x4000000) 6.757823476s ago: executing program 1 (id=1198): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x4891c0, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0x8, 0x45bd, 0x9b72, 0x2, 0x8000) clone$auto(0x9, 0x1, &(0x7f0000000080)=0x1113b849, &(0x7f0000000100)=0x3, 0x7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mtd0ro\x00', 0x80000, 0x0) ioctl$auto_MEMGETBADBLOCK(r1, 0x40084d0b, &(0x7f0000000040)=0xffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sched_rt_period_us\x00', 0x101202, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) pwrite64$auto(0xc8, 0x0, 0xfded, 0x3) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000200)='/dev/binderfs/binder0\x00', 0x80, 0x0) ioctl$auto_BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000000240)) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x48800, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 4.36856563s ago: executing program 0 (id=1199): syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) getsockopt$auto_SO_BUF_LOCK(r0, 0x3, 0x48, &(0x7f00000000c0)='-\\%.[:\x00', &(0x7f0000000100)=0x90) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r1, 0x900064b6, 0x6162) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r2, &(0x7f0000000280)={0x0, 0x80000700}, 0x6, 0x3, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) socket(0x15, 0x5, 0x0) prctl$auto(0x0, 0x1, 0x0, 0x5, 0x7f) unshare$auto(0x40000080) 4.284817799s ago: executing program 3 (id=1200): ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) setsockopt$auto(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x5) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fe02, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nbd5\x00', 0x26000, 0x0) ioctl$auto_BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d}) ioctl$auto_BLKTRACETEARDOWN(r3, 0x1276, 0x0) mmap$auto(0xffffffffffffffff, 0x5, 0x7, 0xbe, 0xffffffffffffffff, 0x7ffe) write$auto(0xffffffffffffffff, 0x0, 0x4) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r2, 0x8000) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) unshare$auto(0x40000080) close_range$auto(0x2, 0xa, 0x0) getcwd$auto(0x0, 0xff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0xffffffffffffff7f, 0x8, 0x416, r1, 0x8000) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/wlan1/forwarding\x00', 0x202, 0x0) sendfile$auto(r4, r4, 0x0, 0x7fffe000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) 4.250742932s ago: executing program 2 (id=1201): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x40380, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS2\x00', 0x101e81, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0c, 0x8, 0xffffffff, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x7fffffff, 0x291805d9]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) set_mempolicy$auto(0x4, &(0x7f0000000080)=0x1, 0x2) msync$auto(0x1ffff000, 0x17ffffffffffffc, 0x4) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r0, 0x40043d04, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:09/sun\x00', 0xa0200, 0x0) pread64$auto(r1, 0x0, 0x6, 0x40008) madvise$auto(0x0, 0xffffffffffff0005, 0x17) close_range$auto(0xffffffffffffffff, 0x8, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 4.171093695s ago: executing program 1 (id=1202): socket(0x2, 0x5, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) epoll_pwait$auto(0xffffffffffffffff, 0x0, 0x803, 0xffff1374, 0x0, 0x8) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$auto(r0, 0x110, 0x2, 0x0, 0x1) madvise$auto(0x0, 0x2000040080000004, 0xe) socket(0x2, 0x5, 0x0) setresgid$auto(0xa05, 0x0, 0x0) keyctl$auto(0x4, 0xfffffffe, 0xffffffffffffffff, 0x0, 0xe) migrate_pages$auto(0x0, 0x99, 0x0, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f00000001c0)) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @rand_addr=0x64010100}, 0x1c) setsockopt$auto(0xffffffffffffffff, 0xe, 0x12, 0x0, 0x52) unshare$auto(0x40000080) unshare$auto(0x40000080) madvise$auto(0x1, 0x54ea, 0xa) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r2 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x10a) open_by_handle_at$auto(r2, &(0x7f0000000040)={0x8, 0x2, "0600000000000000"}, 0x405459) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 2.258331903s ago: executing program 1 (id=1203): unshare$auto(0x40000080) quotactl$auto(0x100, &(0x7f0000000140)='/dev/ram7\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(0xc8, 0x0, 0x4f, 0x7) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3b) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0p/sub6/xrun_injection\x00', 0x1014a0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, 0x0, 0x0) r3 = socket(0x2, 0x80802, 0x0) getsockopt$auto_SO_OOBINLINE(r3, 0x11, 0xa, 0x0, 0x0) getsockopt$auto_SO_PEERPIDFD(r1, 0x0, 0x4d, &(0x7f0000000080)='/dev/ram7\x00', &(0x7f0000000240)=0xc32) ioperm$auto(0x7, 0x5ad2, 0x8) bpf$auto(0x0, 0x0, 0x6f4) rt_sigsuspend$auto(0x0, 0x4) io_uring_enter$auto(0xffffffffffffffff, 0x9, 0x820e, 0x8b, 0x0, 0x18) close_range$auto(0x2, 0x8, 0x0) r4 = setfsgid$auto(0xee01) keyctl$auto(0x1f, 0x1, 0x6, r4, 0x3ff) stat$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x800001, 0xc214, 0xdfc0, 0x705, 0x0, r4, 0x0, 0x2, 0x5, 0x808, 0x201, 0xfffffffffffffffe, 0xfffffffffffffffa, 0x4, 0x4, 0x6, 0xa4a3}) keyctl$auto(0x1f, 0x1, 0x6, r5, 0x80000000) 2.257648346s ago: executing program 3 (id=1205): syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) io_uring_register$auto(0x2, 0x5, &(0x7f0000000000), 0x5) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, 0x0, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) preadv2$auto(r1, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) getpid() ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) socket(0x15, 0x5, 0x0) prctl$auto(0x0, 0x2, 0x4, 0x5, 0x7) unshare$auto(0x40000080) 2.255791137s ago: executing program 0 (id=1212): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x15, 0x5, 0x0) ioctl$auto(r1, 0x5, 0xffffffffffffffff) r2 = setfsgid$auto(0x0) quotactl_fd$auto(0xffffffffffffffff, 0x7, r2, &(0x7f00000033c0)="c6e7ceafec467c07a9371614b896f9d1797dd49271f66699e24deaac5fcfe05cd1977860304976aafe7b369144b0b80eb948e6ac09a2f4cc54b7b707c95d92d9d642330363cd2c63b172de9bd00ab739f094a3b8e686d9663d37307a951d16fd4db1c9d5ccec9f52dacd5d4e85f580adde21957096bc72a1ce161ab279e027ac4065208f8e4a5b3003b627103a0b3168e1922b9cd44b4ab6344e35f338a7c24d562e0b185a3fed2e30ec113808c413bfd4b70a6bd3871a1215b217b9") shmctl$auto_SHM_STAT(0x200, 0xd, &(0x7f00000004c0)={{0x8, 0x0, r2, 0x2, 0x2, 0x0, 0x800}, 0x9, 0x80, 0xffffffffffffff81, 0x8d, @raw=0xfffffffa, @inferred=0xffffffffffffffff, 0x3ff, 0x0, &(0x7f0000000200)="cd3a0a40a6dd04a5a0810178f04eff5ef749150af724a6cd32f416d5bbf1fe4d94e0bc8ce27a34f6ad74f4865df0ec261e537f11fd92204280573be09d592b1ce8af2db95cda6e558e76b94c3ee9c07d4e1a3cf2f00c23a251e9651d223703f73794b0c5e5f0e0fdf8eabc0783d5a7a33bc417d5c47e83878cdf7f8fdf3ef8231cea7597baefe1c13936decb5e73b0035235919bff8902fd928cfacfcac55af6beb77ff991754affcac9d400305e4f0c13002ae925518a170325a6063ee76924ee229127a788986a1784d3479520267833593785fb88d8c3300a1d3225b8dba8bc8bd9068935c84e782dcd", &(0x7f00000003c0)="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"}) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4000085) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000100, 0xee01, 0xee01, 0xfff, 0x87, 0x40, 0x3}, 0x0, &(0x7f0000000080)=0x8, 0x7ff, 0x20003ff, 0x2000005, 0xa, 0x40, 0x4, 0x3, 0x3fb, @raw=0x7fff, @inferred=r3}) setfsuid$auto(0xee00) socket(0x2, 0x3, 0x100) socket(0x1d, 0x2, 0x7) bpf$auto(0x80000400, &(0x7f0000000000)=@bpf_attr_3={0x9, 0x9, 0xffffffffffff7fff, 0x5, 0x1fe, 0x2, 0x8, 0x884, 0x4007, "0108a5172d53c213b43038e1423b2178", 0x0, 0x9, 0xffffffffffffffff, 0x81, 0x7fffffffffffffff, 0x89, 0x9, 0xffff, 0x3ff, 0x7, @attach_btf_obj_fd, 0x440, 0xa, 0x7, 0x1ff, 0x9}, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r4}, 0x6a) close_range$auto(0x2, 0x8, 0x0) setresgid$auto(0x0, 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000040)='\\\x00', 0x2) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x402) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 2.255241071s ago: executing program 2 (id=1206): unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) getsockopt$auto_SO_BSDCOMPAT(r0, 0x3, 0xe, &(0x7f00000000c0)='*\\\x00', 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000040)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x8000000000000, 0x2f) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r1, 0x64c7, 0x1e2) listen$auto(r0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) close_range$auto(0xffffffffffffffff, 0xa, 0x0) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x1, 0x2) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r2, 0x1269, 0x0) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtd0\x00', 0x48002, 0x0) ioctl$auto_MEMERASE64(r3, 0x40104d14, &(0x7f0000000000)={0x2}) ioctl$auto_MEMGETINFO(r3, 0x80204d01, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x40200, 0x0) 111.872038ms ago: executing program 2 (id=1207): socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x200000a1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) prctl$auto_PR_SET_MM_START_STACK(0x8, 0x5, 0x0, 0x401, 0x100) ioctl$auto_RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000040)={0x3, 0x3, {0x5, 0x8, 0x9, 0x7, 0x3, 0x6b, 0xfffffffd, 0x10002, 0xfd}}) unshare$auto(0x40000080) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) quotactl_fd$auto(0xffffffffffffffff, 0x7, 0x0, &(0x7f00000033c0)) socket$nl_generic(0x10, 0x3, 0x10) mq_open$auto(&(0x7f0000000180)='IPVS\x00', 0x0, 0x4f1d, &(0x7f00000001c0)={0x101, 0x69c, 0x4, 0x100}) r4 = getpid() process_vm_readv$auto(r4, 0x0, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(0xffffffffffffffff, 0x0, 0x4000085) setresgid$auto(0x0, 0x0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x2) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002d0c0001000100000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x0) 34.516068ms ago: executing program 0 (id=1208): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/snd_hda_intel/parameters/power_save\x00', 0x80002, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r1 = socket(0xa, 0x5, 0x0) r2 = getsockopt$auto(r1, 0x84, 0x7a, 0x0, 0x0) close_range$auto(r2, r2, 0x8) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/sequencer2\x00', 0x1, 0x0) ioctl$auto_SNDCTL_MIDI_PRETIME(r5, 0xc0046d00, 0x0) ioctl$auto_BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d, 0x0}) r7 = wait4$auto(r6, &(0x7f00000001c0)=0x102, 0xcda, &(0x7f0000000380)={{0x1, 0x1}, {0xfffffffffffffffc, 0x4}, 0xc63e, 0x3, 0x4189, 0x8, 0x7fffffffffffffff, 0x40000000, 0x7ff, 0x2, 0x1, 0x80ac, 0x2, 0x6, 0x2, 0x9}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000829bd7000fcdbdf250100000008000200", @ANYRES32=r7, @ANYBLOB="39573480f074dc6d287348e3adaeea0944d94cec82e3af2b626e99adbdba91c728baacf839bbfe45fc2568f4db33ca5442b67c6f144e7c7a6c6ecb5850998e3a4fbb5e9a406395317106a0af4e5051d062022f2dc05eed9b0d1ec44c2ae5f0bb2db801fd3ad4651a000000000000ee236483ed84b8daaaa0d21570582f678823b7390a3a0ae893c09ebbe2dec1e4e4c5580c16df69e486404c45d707429d457ffe68b8d432bb6af15676104e632d23c03d6ee7ef07b7f8a3c19857f2aeaf523b63f631e5e55a3c59c732fa51570d843d384e3cd96f070da15feeb7e7fc5a537b91200d9191f293c5a67e14965b1cf7"], 0x1c}}, 0x8040) capget$auto(&(0x7f0000000440)={0x9, r7}, &(0x7f0000000480)={0x6, 0xffffffc0, 0xfffffffd}) prctl$auto_PR_SCHED_CORE_SHARE_TO(0x0, 0x2, r7, 0xc, 0x6) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x89\xe8^\x98#\x86\x92\x86w\xa9>\x0e\x8f}yX\xc5\x9c\xb88\xc0\x1c\xd1\xd9\x9e\x91\b\xfc=\x18\xf9\x92\b\xa3Rgu\xf5L\x1d', 0x3ff) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x2) ioctl$auto(r0, 0x921064a2, 0x20000000020000a) r8 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000000)={{0x3, 0xffffffff, 0x1, 0x4005, 0x6}, "654c18440000738236000000fdc4fc151014d9ac0200000000001000"}) readv$auto(r8, &(0x7f0000000180)={0x0, 0x4}, 0x4) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80003, 0x0) socket(0x2, 0x80002, 0x73) 0s ago: executing program 3 (id=1209): mmap$auto(0x0, 0x400108, 0x3, 0x9b72, 0xffffffffffffffff, 0x8000) socket(0x2c, 0x3, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x6a) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x84803, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/aud\xd8o1\x00\x0f\xa9\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z\x7f\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ac\xce\xa7tO\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z\xbd\x1c\x84\xc1\xcd5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8', 0x1) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(0xc8, &(0x7f0000000740)='\vX\xb5n\x91p\xe6\x1eRN8\x99\xd3\xd3\x1d\x03\x00bZ\xddL\'\x99\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ\xdf\x9c\x16\x11\x03\x9e7\x95A#\"{;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xb3\x9c2\xa2\xacyl\xb8\x00Y\xc8\'\xb6S(\xf2\xc2\xf2\x9dP\b\x88J\xae8\xf9>\xb6\xed\xb5/\xc9\xaa\xd8\xc4\xba\x94\xe6jv\x12Bp+\xb8\x16\x19kw\xbc\xbb5-i\xf0\xb9\xac\x9f&6\x89g\x9bh\x83D\xb3\x9fxe\x13\xd1\xb9\xe4\x7f|a\xf2\xdd\xa0\xfb\xfau-7\x94\x13\xa8\xec\xf6~\xacV\xa2S)\xc2\xce\x9b{+\x98D\t\xc5HP\xc4\xb7\x84\xda*\x82)\x01\xd1\f\x1e\xd4\x8d0K\xa8\xd6\xa1\xa7\xd8VP\xfd\x19\x1cd\x84\xe7\xc6#\x9c\xdd\x88\xf9\x128\x0e\xe2\n\xd3\xd33\x01\xda\x83]\xd6\xd5U\xb0^\xaf\x12\x91\x85\x86\xfd\x95\' [ 129.111044][ T6274] dump_stack_lvl+0x100/0x190 [ 129.111093][ T6274] should_fail_ex.cold+0x5/0xa [ 129.111134][ T6274] should_failslab+0xc2/0x120 [ 129.111183][ T6274] kmem_cache_alloc_noprof+0x91/0x6a0 [ 129.111224][ T6274] ? rcu_is_watching+0x12/0xc0 [ 129.111267][ T6274] ? anon_vma_clone+0x2ba/0xcd0 [ 129.111330][ T6274] anon_vma_clone+0x2ba/0xcd0 [ 129.111393][ T6274] copy_vma+0x6ed/0xac0 [ 129.111436][ T6274] ? __pfx_copy_vma+0x10/0x10 [ 129.111520][ T6274] copy_vma_and_data+0x1cf/0x7c0 [ 129.111563][ T6274] ? __pfx_copy_vma_and_data+0x10/0x10 [ 129.111619][ T6274] ? __vma_start_write+0x17f/0x280 [ 129.111650][ T6274] ? __pfx___vma_start_write+0x10/0x10 [ 129.111713][ T6274] move_vma+0x574/0x1920 [ 129.111759][ T6274] ? __pfx_move_vma+0x10/0x10 [ 129.111818][ T6274] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 129.111872][ T6274] ? cap_mmap_addr+0x4b/0x120 [ 129.111907][ T6274] ? bpf_lsm_mmap_addr+0x9/0x30 [ 129.111941][ T6274] ? security_mmap_addr+0x71/0x1e0 [ 129.111989][ T6274] ? __get_unmapped_area+0x255/0x3e0 [ 129.112044][ T6274] ? vrm_set_new_addr+0x204/0x290 [ 129.112086][ T6274] mremap_to+0x234/0x4c0 [ 129.112123][ T6274] ? mas_walk+0x6ef/0x9b0 [ 129.112167][ T6274] ? __pfx_mremap_to+0x10/0x10 [ 129.112204][ T6274] ? check_prep_vma+0x912/0xe60 [ 129.112247][ T6274] __do_sys_mremap+0x88c/0x1850 [ 129.112302][ T6274] ? __pfx___do_sys_mremap+0x10/0x10 [ 129.112351][ T6274] ? __pfx_do_futex+0x10/0x10 [ 129.112404][ T6274] ? __x64_sys_futex+0x34f/0x4d0 [ 129.112467][ T6274] do_syscall_64+0x115/0x840 [ 129.112509][ T6274] ? clear_bhb_loop+0x70/0xc0 [ 129.112552][ T6274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.112587][ T6274] RIP: 0033:0x7f66d9d9e0d9 [ 129.112626][ T6274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.112659][ T6274] RSP: 002b:00007f66d738d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 129.112692][ T6274] RAX: ffffffffffffffda RBX: 00007f66da026450 RCX: 00007f66d9d9e0d9 [ 129.112714][ T6274] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 129.112734][ T6274] RBP: 00007f66d9e35024 R08: 0000000100000000 R09: 0000000000000000 [ 129.112755][ T6274] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 129.112780][ T6274] R13: 00007f66da0264e8 R14: 00007f66da026450 R15: 00007ffe83510ee8 [ 129.112823][ T6274] [ 130.764452][ T6281] overlayfs: missing 'lowerdir' [ 130.987748][ T6286] zram0: detected capacity change from 0 to 16 [ 131.232322][ T29] audit: type=1800 audit(1786908664.577:2): pid=6286 uid=2 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.77" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 132.750977][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.758036][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.398127][ T6321] random: crng reseeded on system resumption [ 136.811307][ T6347] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 138.019759][ T6378] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 138.027797][ T6378] vhci_hcd vhci_hcd.2: invalid port number 0 [ 140.273679][ T6421] netlink: 354 bytes leftover after parsing attributes in process `syz.3.97'. [ 140.379427][ T6424] random: crng reseeded on system resumption [ 142.106325][ T6448] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 142.128439][ T6448] vhci_hcd vhci_hcd.2: invalid port number 0 [ 144.182369][ T6472] ======================================================= [ 144.182369][ T6472] WARNING: The mand mount option has been deprecated and [ 144.182369][ T6472] and is ignored by this kernel. Remove the mand [ 144.182369][ T6472] option from the mount to silence this warning. [ 144.182369][ T6472] ======================================================= [ 144.507172][ T6472] zswap: compressor not available [ 147.248260][ T6526] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 147.255984][ T6526] vhci_hcd vhci_hcd.2: invalid port number 0 [ 148.451366][ T6541] tipc: Started in network mode [ 148.461042][ T6541] tipc: Node identity ee00, cluster identity 4711 [ 148.471900][ T6541] tipc: Node number set to 60928 [ 148.802707][ T6545] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 152.832984][ T6592] syz.2.120 (6592) used greatest stack depth: 19744 bytes left [ 153.046475][ T6597] FAULT_INJECTION: forcing a failure. [ 153.046475][ T6597] name failslab, interval 1, probability 0, space 0, times 0 [ 153.122576][ T6597] CPU: 1 UID: 0 PID: 6597 Comm: syz.3.122 Not tainted syzkaller #0 PREEMPT(full) [ 153.122618][ T6597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 153.122637][ T6597] Call Trace: [ 153.122650][ T6597] [ 153.122662][ T6597] dump_stack_lvl+0x100/0x190 [ 153.122707][ T6597] should_fail_ex.cold+0x5/0xa [ 153.122746][ T6597] should_failslab+0xc2/0x120 [ 153.122797][ T6597] kmem_cache_alloc_noprof+0x91/0x6a0 [ 153.122844][ T6597] ? __kernfs_new_node+0xd2/0xa10 [ 153.122889][ T6597] __kernfs_new_node+0xd2/0xa10 [ 153.122932][ T6597] ? __pfx___kernfs_new_node+0x10/0x10 [ 153.122981][ T6597] ? find_held_lock+0x2b/0x80 [ 153.123024][ T6597] ? kernfs_root+0xee/0x2a0 [ 153.123054][ T6597] ? kernfs_root+0xee/0x2a0 [ 153.123094][ T6597] kernfs_new_node+0x117/0x150 [ 153.123140][ T6597] __kernfs_create_file+0x53/0x350 [ 153.123192][ T6597] sysfs_add_file_mode_ns+0x207/0x3c0 [ 153.123263][ T6597] internal_create_group+0x593/0xfb0 [ 153.123309][ T6597] ? __pfx_internal_create_group+0x10/0x10 [ 153.123351][ T6597] ? kernfs_create_link+0x1bd/0x240 [ 153.123405][ T6597] internal_create_groups+0x9d/0x150 [ 153.123469][ T6597] device_add+0x7c8/0x1970 [ 153.123512][ T6597] ? __pfx_device_add+0x10/0x10 [ 153.123547][ T6597] ? lockdep_init_map_type+0x5c/0x250 [ 153.123570][ T6597] ? __init_waitqueue_head+0xca/0x150 [ 153.123600][ T6597] netdev_register_kobject+0x1df/0x410 [ 153.123655][ T6597] register_netdevice+0x15b6/0x25a0 [ 153.123713][ T6597] ? __pfx_register_netdevice+0x10/0x10 [ 153.123759][ T6597] ? net_generic+0xea/0x2a0 [ 153.123804][ T6597] ppp_dev_configure+0x986/0xcb0 [ 153.123851][ T6597] ppp_ioctl+0x9ef/0x2860 [ 153.123893][ T6597] ? find_held_lock+0x2b/0x80 [ 153.123933][ T6597] ? __pfx_ppp_ioctl+0x10/0x10 [ 153.123979][ T6597] ? __fget_files+0x21f/0x3d0 [ 153.124016][ T6597] ? __pfx_ppp_ioctl+0x10/0x10 [ 153.124057][ T6597] __x64_sys_ioctl+0x18e/0x210 [ 153.124107][ T6597] do_syscall_64+0x115/0x840 [ 153.124145][ T6597] ? clear_bhb_loop+0x70/0xc0 [ 153.124183][ T6597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.124213][ T6597] RIP: 0033:0x7f66d9d9e0d9 [ 153.124237][ T6597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.124274][ T6597] RSP: 002b:00007f66dabaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 153.124301][ T6597] RAX: ffffffffffffffda RBX: 00007f66da025fa0 RCX: 00007f66d9d9e0d9 [ 153.124320][ T6597] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000008 [ 153.124339][ T6597] RBP: 00007f66d9e35024 R08: 0000000000000000 R09: 0000000000000000 [ 153.124358][ T6597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.124375][ T6597] R13: 00007f66da026038 R14: 00007f66da025fa0 R15: 00007ffe83510ee8 [ 153.124415][ T6597] [ 153.962156][ T6618] random: crng reseeded on system resumption [ 156.241502][ T6633] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [104] [ 157.425763][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 158.014345][ T6663] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 160.534132][ T6703] netlink: 'syz.0.137': attribute type 1 has an invalid length. [ 167.141283][ T6785] ubi0: attaching mtd0 [ 167.149546][ T6787] netlink: 25 bytes leftover after parsing attributes in process `syz.3.149'. [ 167.209835][ T6785] ubi0: scanning is finished [ 167.217811][ T6785] ubi0: empty MTD device detected [ 167.595372][ T6785] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 167.644933][ T6785] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 167.818769][ T6785] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 167.886263][ T6785] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 167.893788][ T6785] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 167.900782][ T6785] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 167.908993][ T6785] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3884606669 [ 167.919396][ T6785] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 167.930287][ T6806] ubi0: background thread "ubi_bgt0d" started, PID 6806 [ 167.947726][ T6792] ubi0: detaching mtd0 [ 168.242056][ T6792] ubi0: mtd0 is detached [ 173.124611][ T6857] mmap: syz.0.158 (6857) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 173.370964][ T4931] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 176.747061][ T4931] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 177.720645][ T6928] netlink: 28 bytes leftover after parsing attributes in process `syz.3.168'. [ 181.732858][ T6962] netlink: 12 bytes leftover after parsing attributes in process `syz.1.174'. [ 182.472943][ T6973] FAULT_INJECTION: forcing a failure. [ 182.472943][ T6973] name failslab, interval 1, probability 0, space 0, times 0 [ 182.487270][ T6973] CPU: 0 UID: 0 PID: 6973 Comm: syz.2.183 Not tainted syzkaller #0 PREEMPT(full) [ 182.487315][ T6973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 182.487337][ T6973] Call Trace: [ 182.487348][ T6973] [ 182.487369][ T6973] dump_stack_lvl+0x100/0x190 [ 182.487437][ T6973] should_fail_ex.cold+0x5/0xa [ 182.487493][ T6973] should_failslab+0xc2/0x120 [ 182.487554][ T6973] kmem_cache_alloc_noprof+0x91/0x6a0 [ 182.487641][ T6973] ? rcu_is_watching+0x12/0xc0 [ 182.487701][ T6973] ? anon_vma_clone+0x2ba/0xcd0 [ 182.487768][ T6973] anon_vma_clone+0x2ba/0xcd0 [ 182.487823][ T6973] copy_vma+0x6ed/0xac0 [ 182.487859][ T6973] ? __pfx_copy_vma+0x10/0x10 [ 182.487934][ T6973] copy_vma_and_data+0x1cf/0x7c0 [ 182.487971][ T6973] ? __pfx_copy_vma_and_data+0x10/0x10 [ 182.488018][ T6973] ? __vma_start_write+0x17f/0x280 [ 182.488046][ T6973] ? __pfx___vma_start_write+0x10/0x10 [ 182.488083][ T6973] move_vma+0x574/0x1920 [ 182.488120][ T6973] ? __pfx_move_vma+0x10/0x10 [ 182.488155][ T6973] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 182.488198][ T6973] ? cap_mmap_addr+0x4b/0x120 [ 182.488226][ T6973] ? bpf_lsm_mmap_addr+0x9/0x30 [ 182.488252][ T6973] ? security_mmap_addr+0x71/0x1e0 [ 182.488292][ T6973] ? __get_unmapped_area+0x255/0x3e0 [ 182.488336][ T6973] ? vrm_set_new_addr+0x204/0x290 [ 182.488384][ T6973] mremap_to+0x234/0x4c0 [ 182.488414][ T6973] ? mas_walk+0x6ef/0x9b0 [ 182.488450][ T6973] ? __pfx_mremap_to+0x10/0x10 [ 182.488487][ T6973] ? check_prep_vma+0x912/0xe60 [ 182.488526][ T6973] __do_sys_mremap+0x88c/0x1850 [ 182.488571][ T6973] ? __pfx___do_sys_mremap+0x10/0x10 [ 182.488623][ T6973] ? __pfx_do_futex+0x10/0x10 [ 182.488675][ T6973] ? __x64_sys_futex+0x34f/0x4d0 [ 182.488741][ T6973] do_syscall_64+0x115/0x840 [ 182.488781][ T6973] ? clear_bhb_loop+0x70/0xc0 [ 182.488816][ T6973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.488845][ T6973] RIP: 0033:0x7feb7a39e0d9 [ 182.488869][ T6973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.488897][ T6973] RSP: 002b:00007feb7b20e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 182.488925][ T6973] RAX: ffffffffffffffda RBX: 00007feb7a626450 RCX: 00007feb7a39e0d9 [ 182.488944][ T6973] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 182.488962][ T6973] RBP: 00007feb7a435024 R08: 0000000100000000 R09: 0000000000000000 [ 182.488980][ T6973] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 182.488997][ T6973] R13: 00007feb7a6264e8 R14: 00007feb7a626450 R15: 00007ffd7d148778 [ 182.489035][ T6973] [ 188.469304][ T7067] FAULT_INJECTION: forcing a failure. [ 188.469304][ T7067] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 188.500898][ T7067] CPU: 0 UID: 0 PID: 7067 Comm: syz.0.188 Not tainted syzkaller #0 PREEMPT(full) [ 188.500941][ T7067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 188.500960][ T7067] Call Trace: [ 188.500971][ T7067] [ 188.500984][ T7067] dump_stack_lvl+0x100/0x190 [ 188.501028][ T7067] should_fail_ex.cold+0x5/0xa [ 188.501072][ T7067] _copy_to_iter+0x1f3/0x1720 [ 188.501147][ T7067] ? __lock_acquire+0x49f/0x1a40 [ 188.501183][ T7067] ? __pfx__copy_to_iter+0x10/0x10 [ 188.501241][ T7067] ? __lock_acquire+0x49f/0x1a40 [ 188.501282][ T7067] simple_copy_to_iter+0x46/0x90 [ 188.501325][ T7067] __skb_datagram_iter+0x5c8/0x900 [ 188.501364][ T7067] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 188.501420][ T7067] skb_copy_datagram_iter+0xa1/0x250 [ 188.501500][ T7067] tcp_recvmsg_locked+0x1b74/0x2a30 [ 188.501551][ T7067] ? __pfx_tcp_recvmsg_locked+0x10/0x10 [ 188.501591][ T7067] ? __local_bh_enable_ip+0x9e/0x120 [ 188.501634][ T7067] tcp_recvmsg+0x141/0x630 [ 188.501668][ T7067] ? __pfx_tcp_recvmsg+0x10/0x10 [ 188.501717][ T7067] ? __pfx_tcp_recvmsg+0x10/0x10 [ 188.501746][ T7067] inet_recvmsg+0xd5/0x4c0 [ 188.501795][ T7067] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 188.501847][ T7067] ? __pfx_inet_recvmsg+0x10/0x10 [ 188.501904][ T7067] sock_recvmsg+0x1b8/0x220 [ 188.501944][ T7067] sock_read_iter+0x2b0/0x3a0 [ 188.501981][ T7067] ? __pfx_sock_read_iter+0x10/0x10 [ 188.502043][ T7067] do_iter_readv_writev+0x616/0x930 [ 188.502102][ T7067] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 188.502165][ T7067] ? bpf_lsm_file_permission+0x9/0x10 [ 188.502199][ T7067] ? security_file_permission+0x76/0x210 [ 188.502253][ T7067] ? rw_verify_area+0xce/0x6d0 [ 188.502308][ T7067] vfs_readv+0x4d3/0x8d0 [ 188.502368][ T7067] ? __pfx_vfs_readv+0x10/0x10 [ 188.502435][ T7067] ? __fget_files+0x21f/0x3d0 [ 188.502470][ T7067] ? do_readv+0x28a/0x340 [ 188.502522][ T7067] do_readv+0x28a/0x340 [ 188.502574][ T7067] ? __pfx_do_readv+0x10/0x10 [ 188.502639][ T7067] do_syscall_64+0x115/0x840 [ 188.502683][ T7067] ? clear_bhb_loop+0x70/0xc0 [ 188.502727][ T7067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.502763][ T7067] RIP: 0033:0x7f676ed9e0d9 [ 188.502790][ T7067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.502818][ T7067] RSP: 002b:00007f676fbbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 188.502846][ T7067] RAX: ffffffffffffffda RBX: 00007f676f026180 RCX: 00007f676ed9e0d9 [ 188.502864][ T7067] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000003 [ 188.502881][ T7067] RBP: 00007f676ee35024 R08: 0000000000000000 R09: 0000000000000000 [ 188.502898][ T7067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.502914][ T7067] R13: 00007f676f026218 R14: 00007f676f026180 R15: 00007ffc23249bc8 [ 188.502952][ T7067] [ 190.509638][ T7095] FAULT_INJECTION: forcing a failure. [ 190.509638][ T7095] name failslab, interval 1, probability 0, space 0, times 0 [ 190.524913][ T7095] CPU: 0 UID: 0 PID: 7095 Comm: syz.1.190 Not tainted syzkaller #0 PREEMPT(full) [ 190.524957][ T7095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 190.524977][ T7095] Call Trace: [ 190.524987][ T7095] [ 190.525000][ T7095] dump_stack_lvl+0x100/0x190 [ 190.525045][ T7095] should_fail_ex.cold+0x5/0xa [ 190.525084][ T7095] should_failslab+0xc2/0x120 [ 190.525135][ T7095] kmem_cache_alloc_noprof+0x91/0x6a0 [ 190.525178][ T7095] ? rcu_is_watching+0x12/0xc0 [ 190.525222][ T7095] ? anon_vma_clone+0x2ba/0xcd0 [ 190.525291][ T7095] anon_vma_clone+0x2ba/0xcd0 [ 190.525359][ T7095] copy_vma+0x6ed/0xac0 [ 190.525405][ T7095] ? __pfx_copy_vma+0x10/0x10 [ 190.525493][ T7095] copy_vma_and_data+0x1cf/0x7c0 [ 190.525537][ T7095] ? __pfx_copy_vma_and_data+0x10/0x10 [ 190.525599][ T7095] ? __vma_start_write+0x17f/0x280 [ 190.525631][ T7095] ? __pfx___vma_start_write+0x10/0x10 [ 190.525682][ T7095] move_vma+0x574/0x1920 [ 190.525738][ T7095] ? __pfx_move_vma+0x10/0x10 [ 190.525780][ T7095] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 190.525834][ T7095] ? cap_mmap_addr+0x4b/0x120 [ 190.525869][ T7095] ? bpf_lsm_mmap_addr+0x9/0x30 [ 190.525904][ T7095] ? security_mmap_addr+0x71/0x1e0 [ 190.525952][ T7095] ? __get_unmapped_area+0x255/0x3e0 [ 190.526008][ T7095] ? vrm_set_new_addr+0x204/0x290 [ 190.526050][ T7095] mremap_to+0x234/0x4c0 [ 190.526086][ T7095] ? mas_walk+0x6ef/0x9b0 [ 190.526129][ T7095] ? __pfx_mremap_to+0x10/0x10 [ 190.526167][ T7095] ? check_prep_vma+0x912/0xe60 [ 190.526214][ T7095] __do_sys_mremap+0x88c/0x1850 [ 190.526269][ T7095] ? __pfx___do_sys_mremap+0x10/0x10 [ 190.526329][ T7095] ? __pfx_do_futex+0x10/0x10 [ 190.526383][ T7095] ? __x64_sys_futex+0x34f/0x4d0 [ 190.526447][ T7095] do_syscall_64+0x115/0x840 [ 190.526490][ T7095] ? clear_bhb_loop+0x70/0xc0 [ 190.526532][ T7095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.526569][ T7095] RIP: 0033:0x7f537e59e0d9 [ 190.526596][ T7095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.526628][ T7095] RSP: 002b:00007f537bbae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 190.526660][ T7095] RAX: ffffffffffffffda RBX: 00007f537e826450 RCX: 00007f537e59e0d9 [ 190.526682][ T7095] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 190.526703][ T7095] RBP: 00007f537e635024 R08: 0000000100000000 R09: 0000000000000000 [ 190.526725][ T7095] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 190.526745][ T7095] R13: 00007f537e8264e8 R14: 00007f537e826450 R15: 00007fff21fcb038 [ 190.526791][ T7095] [ 193.704508][ T7136] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 193.713435][ T7136] vhci_hcd vhci_hcd.2: invalid port number 0 [ 194.188668][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.199328][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.665418][ T7147] FAULT_INJECTION: forcing a failure. [ 194.665418][ T7147] name failslab, interval 1, probability 0, space 0, times 0 [ 194.686274][ T7147] CPU: 0 UID: 0 PID: 7147 Comm: syz.0.200 Not tainted syzkaller #0 PREEMPT(full) [ 194.686307][ T7147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 194.686322][ T7147] Call Trace: [ 194.686336][ T7147] [ 194.686346][ T7147] dump_stack_lvl+0x100/0x190 [ 194.686378][ T7147] should_fail_ex.cold+0x5/0xa [ 194.686406][ T7147] should_failslab+0xc2/0x120 [ 194.686443][ T7147] kmem_cache_alloc_noprof+0x91/0x6a0 [ 194.686477][ T7147] ? __kernfs_new_node+0xd2/0xa10 [ 194.686510][ T7147] __kernfs_new_node+0xd2/0xa10 [ 194.686540][ T7147] ? __pfx___kernfs_new_node+0x10/0x10 [ 194.686575][ T7147] ? find_held_lock+0x2b/0x80 [ 194.686606][ T7147] ? kernfs_root+0xee/0x2a0 [ 194.686627][ T7147] ? kernfs_root+0xee/0x2a0 [ 194.686656][ T7147] kernfs_new_node+0x117/0x150 [ 194.686688][ T7147] __kernfs_create_file+0x53/0x350 [ 194.686727][ T7147] sysfs_add_file_mode_ns+0x207/0x3c0 [ 194.686773][ T7147] internal_create_group+0x593/0xfb0 [ 194.686805][ T7147] ? __pfx_internal_create_group+0x10/0x10 [ 194.686837][ T7147] ? kernfs_create_link+0x1bd/0x240 [ 194.686876][ T7147] internal_create_groups+0x9d/0x150 [ 194.686903][ T7147] device_add+0x7c8/0x1970 [ 194.686930][ T7147] ? __pfx_device_add+0x10/0x10 [ 194.686954][ T7147] ? lockdep_init_map_type+0x5c/0x250 [ 194.687004][ T7147] ? __init_waitqueue_head+0xca/0x150 [ 194.687050][ T7147] netdev_register_kobject+0x1df/0x410 [ 194.687095][ T7147] register_netdevice+0x15b6/0x25a0 [ 194.687162][ T7147] ? __pfx_register_netdevice+0x10/0x10 [ 194.687212][ T7147] ? net_generic+0xea/0x2a0 [ 194.687260][ T7147] ppp_dev_configure+0x986/0xcb0 [ 194.687310][ T7147] ppp_ioctl+0x9ef/0x2860 [ 194.687363][ T7147] ? find_held_lock+0x2b/0x80 [ 194.687409][ T7147] ? __pfx_ppp_ioctl+0x10/0x10 [ 194.687468][ T7147] ? __fget_files+0x21f/0x3d0 [ 194.687505][ T7147] ? __pfx_ppp_ioctl+0x10/0x10 [ 194.687548][ T7147] __x64_sys_ioctl+0x18e/0x210 [ 194.687599][ T7147] do_syscall_64+0x115/0x840 [ 194.687637][ T7147] ? clear_bhb_loop+0x70/0xc0 [ 194.687678][ T7147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.687712][ T7147] RIP: 0033:0x7f676ed9e0d9 [ 194.687737][ T7147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.687767][ T7147] RSP: 002b:00007f676fc01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 194.687797][ T7147] RAX: ffffffffffffffda RBX: 00007f676f025fa0 RCX: 00007f676ed9e0d9 [ 194.687818][ T7147] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000008 [ 194.687837][ T7147] RBP: 00007f676ee35024 R08: 0000000000000000 R09: 0000000000000000 [ 194.687856][ T7147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.687874][ T7147] R13: 00007f676f026038 R14: 00007f676f025fa0 R15: 00007ffc23249bc8 [ 194.687916][ T7147] [ 200.409896][ T7226] FAULT_INJECTION: forcing a failure. [ 200.409896][ T7226] name failslab, interval 1, probability 0, space 0, times 0 [ 200.445853][ T7226] CPU: 0 UID: 0 PID: 7226 Comm: syz.0.207 Not tainted syzkaller #0 PREEMPT(full) [ 200.445895][ T7226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 200.445913][ T7226] Call Trace: [ 200.445931][ T7226] [ 200.445942][ T7226] dump_stack_lvl+0x100/0x190 [ 200.445984][ T7226] should_fail_ex.cold+0x5/0xa [ 200.446017][ T7226] should_failslab+0xc2/0x120 [ 200.446058][ T7226] kmem_cache_alloc_noprof+0x91/0x6a0 [ 200.446095][ T7226] ? mas_preallocate+0x1105/0x14a0 [ 200.446144][ T7226] mas_preallocate+0x1105/0x14a0 [ 200.446193][ T7226] ? __pfx_mas_preallocate+0x10/0x10 [ 200.446256][ T7226] vma_link+0x14a/0x8d0 [ 200.446285][ T7226] ? find_held_lock+0x2b/0x80 [ 200.446321][ T7226] ? __pfx_vma_link+0x10/0x10 [ 200.446361][ T7226] ? anon_vma_clone+0x675/0xcd0 [ 200.446415][ T7226] copy_vma+0x7e6/0xac0 [ 200.446453][ T7226] ? __pfx_copy_vma+0x10/0x10 [ 200.446530][ T7226] copy_vma_and_data+0x1cf/0x7c0 [ 200.446573][ T7226] ? __pfx_copy_vma_and_data+0x10/0x10 [ 200.446628][ T7226] ? __vma_start_write+0x17f/0x280 [ 200.446660][ T7226] ? __pfx___vma_start_write+0x10/0x10 [ 200.446703][ T7226] move_vma+0x574/0x1920 [ 200.446748][ T7226] ? __pfx_move_vma+0x10/0x10 [ 200.446789][ T7226] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 200.446841][ T7226] ? cap_mmap_addr+0x4b/0x120 [ 200.446873][ T7226] ? bpf_lsm_mmap_addr+0x9/0x30 [ 200.446906][ T7226] ? security_mmap_addr+0x71/0x1e0 [ 200.446967][ T7226] ? __get_unmapped_area+0x255/0x3e0 [ 200.447020][ T7226] ? vrm_set_new_addr+0x204/0x290 [ 200.447061][ T7226] mremap_to+0x234/0x4c0 [ 200.447096][ T7226] ? mas_walk+0x6ef/0x9b0 [ 200.447147][ T7226] ? __pfx_mremap_to+0x10/0x10 [ 200.447182][ T7226] ? check_prep_vma+0x912/0xe60 [ 200.447226][ T7226] __do_sys_mremap+0x88c/0x1850 [ 200.447273][ T7226] ? __pfx___do_sys_mremap+0x10/0x10 [ 200.447318][ T7226] ? __pfx_do_futex+0x10/0x10 [ 200.447369][ T7226] ? __x64_sys_futex+0x34f/0x4d0 [ 200.447430][ T7226] do_syscall_64+0x115/0x840 [ 200.447469][ T7226] ? clear_bhb_loop+0x70/0xc0 [ 200.447509][ T7226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.447543][ T7226] RIP: 0033:0x7f676ed9e0d9 [ 200.447571][ T7226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.447607][ T7226] RSP: 002b:00007f676c3cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 200.447638][ T7226] RAX: ffffffffffffffda RBX: 00007f676f026450 RCX: 00007f676ed9e0d9 [ 200.447676][ T7226] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 200.447696][ T7226] RBP: 00007f676ee35024 R08: 0000000100000000 R09: 0000000000000000 [ 200.447716][ T7226] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 200.447735][ T7226] R13: 00007f676f0264e8 R14: 00007f676f026450 R15: 00007ffc23249bc8 [ 200.447779][ T7226] [ 202.677977][ T7249] netlink: 354 bytes leftover after parsing attributes in process `syz.1.211'. [ 206.187101][ T7299] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 206.194866][ T7299] vhci_hcd vhci_hcd.2: invalid port number 0 [ 208.281767][ T7319] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 209.363322][ T7334] FAULT_INJECTION: forcing a failure. [ 209.363322][ T7334] name failslab, interval 1, probability 0, space 0, times 0 [ 209.415887][ T7334] CPU: 0 UID: 0 PID: 7334 Comm: syz.1.223 Not tainted syzkaller #0 PREEMPT(full) [ 209.415921][ T7334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 209.415935][ T7334] Call Trace: [ 209.415944][ T7334] [ 209.415953][ T7334] dump_stack_lvl+0x100/0x190 [ 209.415986][ T7334] should_fail_ex.cold+0x5/0xa [ 209.416015][ T7334] should_failslab+0xc2/0x120 [ 209.416051][ T7334] kmem_cache_alloc_noprof+0x91/0x6a0 [ 209.416083][ T7334] ? rcu_is_watching+0x12/0xc0 [ 209.416117][ T7334] ? anon_vma_clone+0x2ba/0xcd0 [ 209.416161][ T7334] anon_vma_clone+0x2ba/0xcd0 [ 209.416222][ T7334] copy_vma+0x6ed/0xac0 [ 209.416254][ T7334] ? __pfx_copy_vma+0x10/0x10 [ 209.416323][ T7334] copy_vma_and_data+0x1cf/0x7c0 [ 209.416352][ T7334] ? __pfx_copy_vma_and_data+0x10/0x10 [ 209.416389][ T7334] ? __vma_start_write+0x17f/0x280 [ 209.416410][ T7334] ? __pfx___vma_start_write+0x10/0x10 [ 209.416439][ T7334] move_vma+0x574/0x1920 [ 209.416468][ T7334] ? __pfx_move_vma+0x10/0x10 [ 209.416496][ T7334] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 209.416531][ T7334] ? cap_mmap_addr+0x4b/0x120 [ 209.416552][ T7334] ? bpf_lsm_mmap_addr+0x9/0x30 [ 209.416574][ T7334] ? security_mmap_addr+0x71/0x1e0 [ 209.416612][ T7334] ? __get_unmapped_area+0x255/0x3e0 [ 209.416649][ T7334] ? vrm_set_new_addr+0x204/0x290 [ 209.416676][ T7334] mremap_to+0x234/0x4c0 [ 209.416699][ T7334] ? mas_walk+0x6ef/0x9b0 [ 209.416727][ T7334] ? __pfx_mremap_to+0x10/0x10 [ 209.416751][ T7334] ? check_prep_vma+0x912/0xe60 [ 209.416780][ T7334] __do_sys_mremap+0x88c/0x1850 [ 209.416832][ T7334] ? __pfx___do_sys_mremap+0x10/0x10 [ 209.416873][ T7334] ? __pfx_do_futex+0x10/0x10 [ 209.416926][ T7334] ? __x64_sys_futex+0x34f/0x4d0 [ 209.416974][ T7334] do_syscall_64+0x115/0x840 [ 209.417005][ T7334] ? clear_bhb_loop+0x70/0xc0 [ 209.417063][ T7334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.417100][ T7334] RIP: 0033:0x7f537e59e0d9 [ 209.417125][ T7334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.417149][ T7334] RSP: 002b:00007f537bbae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 209.417172][ T7334] RAX: ffffffffffffffda RBX: 00007f537e826450 RCX: 00007f537e59e0d9 [ 209.417188][ T7334] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 209.417203][ T7334] RBP: 00007f537e635024 R08: 0000000100000000 R09: 0000000000000000 [ 209.417218][ T7334] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 209.417233][ T7334] R13: 00007f537e8264e8 R14: 00007f537e826450 R15: 00007fff21fcb038 [ 209.417264][ T7334] [ 211.529875][ T7353] random: crng reseeded on system resumption [ 212.037642][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 212.037673][ T4931] Bluetooth: hci2: command 0x0406 tx timeout [ 212.049995][ T5624] Bluetooth: hci3: command 0x0406 tx timeout [ 212.052303][ T5615] Bluetooth: hci1: command 0x0406 tx timeout [ 217.256588][ T7422] netlink: 28 bytes leftover after parsing attributes in process `syz.2.241'. [ 223.094407][ T7467] syz.0.254 uses obsolete (PF_INET,SOCK_PACKET) [ 224.193875][ T7478] random: crng reseeded on system resumption [ 226.945405][ T7518] vivid-007: ================= START STATUS ================= [ 226.953714][ T7518] vivid-007: Enable Output Cropping: true grabbed [ 226.963857][ T7518] vivid-007: Enable Output Composing: true grabbed [ 226.970906][ T7518] vivid-007: Enable Output Scaler: true grabbed [ 226.977672][ T7518] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 227.005292][ T7518] vivid-007: Transmit Mode: HDMI grabbed [ 227.015093][ T7518] vivid-007: Hotplug Present: 0x00000000 [ 227.021028][ T7518] vivid-007: RxSense Present: 0x00000000 [ 227.030408][ T7518] vivid-007: EDID Present: 0x00000000 [ 227.040008][ T7518] vivid-007: ================== END STATUS ================== [ 227.592595][ T7530] netlink: 12 bytes leftover after parsing attributes in process `syz.3.256'. [ 234.136250][ T5629] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 236.184746][ T7654] ubi0: attaching mtd0 [ 236.207854][ T7654] ubi0: scanning is finished [ 236.506788][ T7662] netlink: 12 bytes leftover after parsing attributes in process `syz.2.276'. [ 236.698158][ T7654] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 236.800371][ T7654] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 236.840723][ T7654] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 236.948454][ T7654] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 236.995708][ T7654] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 237.003438][ T7654] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 237.012108][ T7654] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3884606669 [ 237.039106][ T7654] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 237.251491][ T7667] ubi0: background thread "ubi_bgt0d" started, PID 7667 [ 237.258668][ T7661] ubi0: detaching mtd0 [ 237.486793][ T7661] ubi0: mtd0 is detached [ 239.093350][ T7691] FAULT_INJECTION: forcing a failure. [ 239.093350][ T7691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.115842][ T7691] CPU: 1 UID: 0 PID: 7691 Comm: syz.2.280 Not tainted syzkaller #0 PREEMPT(full) [ 239.115887][ T7691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 239.115912][ T7691] Call Trace: [ 239.115924][ T7691] [ 239.115936][ T7691] dump_stack_lvl+0x100/0x190 [ 239.115983][ T7691] should_fail_ex.cold+0x5/0xa [ 239.116024][ T7691] _copy_to_iter+0x1f3/0x1720 [ 239.116083][ T7691] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 239.116144][ T7691] ? __pfx__copy_to_iter+0x10/0x10 [ 239.116215][ T7691] ? rcu_is_watching+0x12/0xc0 [ 239.116260][ T7691] ? trace_sched_exit_tp+0x120/0x160 [ 239.116329][ T7691] simple_copy_to_iter+0x46/0x90 [ 239.116372][ T7691] __skb_datagram_iter+0x5c8/0x900 [ 239.116412][ T7691] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 239.116468][ T7691] skb_copy_datagram_iter+0xa1/0x250 [ 239.116515][ T7691] tcp_recvmsg_locked+0x1b74/0x2a30 [ 239.116567][ T7691] ? __pfx_tcp_recvmsg_locked+0x10/0x10 [ 239.116609][ T7691] ? __local_bh_enable_ip+0x9e/0x120 [ 239.116655][ T7691] tcp_recvmsg+0x141/0x630 [ 239.116691][ T7691] ? __pfx_tcp_recvmsg+0x10/0x10 [ 239.116740][ T7691] ? __pfx_tcp_recvmsg+0x10/0x10 [ 239.116773][ T7691] inet_recvmsg+0xd5/0x4c0 [ 239.116823][ T7691] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 239.116878][ T7691] ? __pfx_inet_recvmsg+0x10/0x10 [ 239.116934][ T7691] sock_recvmsg+0x1b8/0x220 [ 239.116973][ T7691] sock_read_iter+0x2b0/0x3a0 [ 239.117011][ T7691] ? __pfx_sock_read_iter+0x10/0x10 [ 239.117071][ T7691] do_iter_readv_writev+0x616/0x930 [ 239.117129][ T7691] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 239.117215][ T7691] ? bpf_lsm_file_permission+0x9/0x10 [ 239.117251][ T7691] ? security_file_permission+0x76/0x210 [ 239.117300][ T7691] ? rw_verify_area+0xce/0x6d0 [ 239.117355][ T7691] vfs_readv+0x4d3/0x8d0 [ 239.117419][ T7691] ? __pfx_vfs_readv+0x10/0x10 [ 239.117501][ T7691] ? __fget_files+0x21f/0x3d0 [ 239.117545][ T7691] ? do_readv+0x28a/0x340 [ 239.117595][ T7691] do_readv+0x28a/0x340 [ 239.117647][ T7691] ? __pfx_do_readv+0x10/0x10 [ 239.117712][ T7691] do_syscall_64+0x115/0x840 [ 239.117753][ T7691] ? clear_bhb_loop+0x70/0xc0 [ 239.117794][ T7691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.117830][ T7691] RIP: 0033:0x7feb7a39e0d9 [ 239.117857][ T7691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.117890][ T7691] RSP: 002b:00007feb7b271028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 239.117930][ T7691] RAX: ffffffffffffffda RBX: 00007feb7a626180 RCX: 00007feb7a39e0d9 [ 239.117953][ T7691] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000003 [ 239.117973][ T7691] RBP: 00007feb7a435024 R08: 0000000000000000 R09: 0000000000000000 [ 239.117992][ T7691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.118013][ T7691] R13: 00007feb7a626218 R14: 00007feb7a626180 R15: 00007ffd7d148778 [ 239.118057][ T7691] [ 242.332503][ T7721] vivid-007: ================= START STATUS ================= [ 242.345720][ T7721] vivid-007: Enable Output Cropping: true grabbed [ 242.367563][ T7721] vivid-007: Enable Output Composing: true grabbed [ 242.447890][ T7721] vivid-007: Enable Output Scaler: true grabbed [ 242.480819][ T7721] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 242.507459][ T7721] vivid-007: Transmit Mode: HDMI grabbed [ 242.618637][ T7721] vivid-007: Hotplug Present: 0x00000000 [ 242.659353][ T7721] vivid-007: RxSense Present: 0x00000000 [ 242.749577][ T7721] vivid-007: EDID Present: 0x00000000 [ 242.778321][ T7721] vivid-007: ================== END STATUS ================== [ 245.774222][ T7769] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 248.681850][ T7795] FAULT_INJECTION: forcing a failure. [ 248.681850][ T7795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.731511][ T7795] CPU: 1 UID: 0 PID: 7795 Comm: syz.1.303 Not tainted syzkaller #0 PREEMPT(full) [ 248.731556][ T7795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 248.731574][ T7795] Call Trace: [ 248.731586][ T7795] [ 248.731598][ T7795] dump_stack_lvl+0x100/0x190 [ 248.731645][ T7795] should_fail_ex.cold+0x5/0xa [ 248.731684][ T7795] _copy_to_iter+0x1f3/0x1720 [ 248.731742][ T7795] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 248.731782][ T7795] ? lockdep_hardirqs_on+0x78/0x100 [ 248.731825][ T7795] ? __pfx__copy_to_iter+0x10/0x10 [ 248.731879][ T7795] ? rcu_is_watching+0x12/0xc0 [ 248.731923][ T7795] ? trace_sched_exit_tp+0x120/0x160 [ 248.731978][ T7795] simple_copy_to_iter+0x46/0x90 [ 248.732020][ T7795] __skb_datagram_iter+0x5c8/0x900 [ 248.732059][ T7795] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 248.732113][ T7795] skb_copy_datagram_iter+0xa1/0x250 [ 248.732159][ T7795] tcp_recvmsg_locked+0x1b74/0x2a30 [ 248.732212][ T7795] ? __pfx_tcp_recvmsg_locked+0x10/0x10 [ 248.732255][ T7795] ? __local_bh_enable_ip+0x9e/0x120 [ 248.732300][ T7795] tcp_recvmsg+0x141/0x630 [ 248.732337][ T7795] ? __pfx_tcp_recvmsg+0x10/0x10 [ 248.732387][ T7795] ? __pfx_tcp_recvmsg+0x10/0x10 [ 248.732420][ T7795] inet_recvmsg+0xd5/0x4c0 [ 248.732479][ T7795] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 248.732532][ T7795] ? __pfx_inet_recvmsg+0x10/0x10 [ 248.732586][ T7795] sock_recvmsg+0x1b8/0x220 [ 248.732626][ T7795] sock_read_iter+0x2b0/0x3a0 [ 248.732672][ T7795] ? __pfx_sock_read_iter+0x10/0x10 [ 248.732727][ T7795] do_iter_readv_writev+0x616/0x930 [ 248.732780][ T7795] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 248.732835][ T7795] ? bpf_lsm_file_permission+0x9/0x10 [ 248.732867][ T7795] ? security_file_permission+0x76/0x210 [ 248.732913][ T7795] ? rw_verify_area+0xce/0x6d0 [ 248.732963][ T7795] vfs_readv+0x4d3/0x8d0 [ 248.733042][ T7795] ? __pfx_vfs_readv+0x10/0x10 [ 248.733123][ T7795] ? __fget_files+0x21f/0x3d0 [ 248.733166][ T7795] ? do_readv+0x28a/0x340 [ 248.733215][ T7795] do_readv+0x28a/0x340 [ 248.733269][ T7795] ? __pfx_do_readv+0x10/0x10 [ 248.733331][ T7795] do_syscall_64+0x115/0x840 [ 248.733373][ T7795] ? clear_bhb_loop+0x70/0xc0 [ 248.733416][ T7795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.733464][ T7795] RIP: 0033:0x7f537e59e0d9 [ 248.733491][ T7795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.733539][ T7795] RSP: 002b:00007f537f383028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 248.733582][ T7795] RAX: ffffffffffffffda RBX: 00007f537e826180 RCX: 00007f537e59e0d9 [ 248.733605][ T7795] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000003 [ 248.733626][ T7795] RBP: 00007f537e635024 R08: 0000000000000000 R09: 0000000000000000 [ 248.733646][ T7795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.733667][ T7795] R13: 00007f537e826218 R14: 00007f537e826180 R15: 00007fff21fcb038 [ 248.733711][ T7795] [ 253.498397][ T7852] netlink: 12 bytes leftover after parsing attributes in process `syz.1.300'. [ 255.628666][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.635267][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.169378][ T7887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.305'. [ 258.324772][ T7934] netlink: 28 bytes leftover after parsing attributes in process `syz.1.311'. [ 259.953629][ T7948] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 260.032937][ T7952] ubi0: attaching mtd0 [ 260.083445][ T7952] ubi0: scanning is finished [ 260.466871][ T7952] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 260.525532][ T7952] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 260.647746][ T7952] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 260.663562][ T7952] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 260.906928][ T7952] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 260.937196][ T7952] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 260.947212][ T7952] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3884606669 [ 260.967071][ T7952] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 260.981553][ T7967] ubi0: background thread "ubi_bgt0d" started, PID 7967 [ 260.997460][ T7960] ubi0: detaching mtd0 [ 261.088016][ T7960] ubi0: mtd0 is detached [ 262.068280][ T7982] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 262.094862][ T7982] vhci_hcd vhci_hcd.2: invalid port number 0 [ 270.281217][ T8071] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 270.301710][ T8071] vhci_hcd vhci_hcd.2: invalid port number 0 [ 273.076774][ T8110] binder: 8093:8110 ioctl c00c620f 200000000c40 returned -22 [ 281.024182][ T8203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.353'. [ 289.113807][ T8299] netlink: 28 bytes leftover after parsing attributes in process `syz.0.365'. [ 289.487999][ T8302] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 291.784886][ T8331] NFSD: Failed to start, no listeners configured. [ 292.240639][ T8334] NFSD: Failed to start, no listeners configured. [ 292.949935][ T29] audit: type=1800 audit(1843104665.340:3): pid=8352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.373" name="version" dev="configfs" ino=31164 res=0 errno=0 [ 295.296417][ T8381] netlink: 28 bytes leftover after parsing attributes in process `syz.3.377'. [ 298.136933][ T8429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.395'. [ 301.145530][ T8473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.391'. [ 302.593565][ T8493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.394'. [ 305.055783][ T8529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.400'. [ 309.461443][ T8595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.408'. [ 311.708371][ T8636] netlink: 28 bytes leftover after parsing attributes in process `syz.3.414'. [ 316.338589][ T8705] netlink: 12 bytes leftover after parsing attributes in process `syz.1.422'. [ 317.068405][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.074846][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.073625][ T8721] random: crng reseeded on system resumption [ 319.111510][ T8733] NFSD: Failed to start, no listeners configured. [ 319.445203][ T8737] NFSD: Failed to start, no listeners configured. [ 320.484571][ T8756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.439'. [ 320.501956][ T8756] netlink: 354 bytes leftover after parsing attributes in process `syz.1.439'. [ 320.915158][ T8772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.433'. [ 322.658386][ T8788] i2c i2c-0: delete_device: Can't find device in list [ 327.939313][ T8845] Process accounting resumed [ 328.176764][ T8872] netlink: 25 bytes leftover after parsing attributes in process `syz.3.452'. [ 330.665805][ T8914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.458'. [ 331.927278][ T8934] netlink: 12 bytes leftover after parsing attributes in process `syz.3.460'. [ 335.896084][ T8997] netlink: 'syz.1.468': attribute type 1 has an invalid length. [ 339.768612][ T9043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.476'. [ 340.303527][ T9053] netlink: 'syz.1.479': attribute type 1 has an invalid length. [ 340.330379][ T9053] netlink: 9 bytes leftover after parsing attributes in process `syz.1.479'. [ 340.534774][ T9056] ubi0: attaching mtd0 [ 340.554087][ T9056] ubi0: scanning is finished [ 340.883211][ T9056] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 340.914343][ T9056] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 340.965316][ T9056] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 340.975638][ T9056] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 341.011454][ T9056] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 341.074943][ T9056] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 341.131868][ T9056] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3884606669 [ 341.215592][ T9056] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 341.227970][ T9062] ubi0: background thread "ubi_bgt0d" started, PID 9062 [ 341.240055][ T9059] ubi0: detaching mtd0 [ 341.313294][ T9059] ubi0: mtd0 is detached [ 345.504035][ T9105] NFSD: Failed to start, no listeners configured. [ 345.511579][ T29] audit: type=1800 audit(1843104717.890:4): pid=9111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.485" name="version" dev="configfs" ino=38975 res=0 errno=0 [ 345.893645][ T9110] NFSD: Failed to start, no listeners configured. [ 350.889893][ T9186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.497'. [ 352.061265][ T9197] zswap: compressor not available [ 353.633788][ T9226] zram: Cannot change disksize for initialized device [ 353.883932][ T29] audit: type=1800 audit(1843104726.270:5): pid=9226 uid=2 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.506" name="SYSVffffffff" dev="tmpfs" ino=0 res=0 errno=0 [ 359.159488][ T9302] Process accounting paused [ 359.320211][ T9313] ubi0: attaching mtd0 [ 359.329534][ T9313] ubi0: scanning is finished [ 359.505218][ T9322] random: crng reseeded on system resumption [ 359.552408][ T9313] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 359.594606][ T9313] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 359.626534][ T9313] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 359.666264][ T9313] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 359.708939][ T9313] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 359.761961][ T9313] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 359.817222][ T9313] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3884606669 [ 359.838296][ T9313] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 359.851957][ T9320] ubi0: detaching mtd0 [ 359.856105][ T9326] ubi0: background thread "ubi_bgt0d" started, PID 9326 [ 359.924699][ T9320] ubi0: mtd0 is detached [ 360.935980][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 361.833727][ T9340] Process accounting resumed [ 365.150201][ T9413] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 367.783304][ T9457] zram: Cannot change disksize for initialized device [ 367.985135][ T29] audit: type=1800 audit(1843104740.370:6): pid=9457 uid=2 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.544" name="SYSVffffffff" dev="tmpfs" ino=0 res=0 errno=0 [ 369.023633][ T9475] random: crng reseeded on system resumption [ 371.957304][ T9511] zram: Cannot change disksize for initialized device [ 372.110594][ T29] audit: type=1800 audit(1843104744.490:7): pid=9511 uid=2 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.554" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 375.888595][ T9561] zswap: compressor not available [ 378.509586][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.516048][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.513997][ T9635] Process accounting resumed [ 382.409758][ T9672] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 387.257771][ T9723] i2c i2c-0: delete_device: Can't find device in list [ 387.305812][ T5629] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 388.204126][ T9725] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [2] [ 389.823042][ T9738] zswap: compressor not available [ 390.883538][ T9764] zswap: compressor not available [ 391.369287][ T9753] Process accounting resumed [ 392.093156][ T9785] Process accounting paused [ 392.908086][ T9806] random: crng reseeded on system resumption [ 393.718682][ T9815] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 396.351932][ T9831] Process accounting resumed [ 396.460736][ T9857] futex_wake_op: syz.3.605 tries to shift op by -2048; fix this program [ 396.499796][ T9857] futex_wake_op: syz.3.605 tries to shift op by -2048; fix this program [ 398.349251][ T5629] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 405.094186][ T9969] i2c i2c-0: delete_device: Can't find device in list [ 410.933056][T10036] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [2] [ 412.046014][T10049] ubi0: attaching mtd0 [ 412.078432][T10049] ubi0: scanning is finished [ 412.087505][T10035] Process accounting paused [ 412.439100][T10049] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 412.460215][T10049] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 412.510945][T10049] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 412.552018][T10049] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 412.567038][T10049] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 412.574100][T10049] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 412.591392][T10049] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3884606669 [ 412.613317][T10049] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 412.632143][T10058] ubi0: detaching mtd0 [ 412.633079][T10064] ubi0: background thread "ubi_bgt0d" started, PID 10064 [ 412.673496][T10058] ubi0: mtd0 is detached [ 418.964728][T10132] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 424.447338][T10169] Process accounting paused [ 424.663129][T10179] Process accounting resumed [ 427.938678][T10212] Process accounting paused [ 432.416193][T10269] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 432.433746][T10269] vhci_hcd vhci_hcd.2: invalid port number 0 [ 434.660785][T10317] netlink: 2468 bytes leftover after parsing attributes in process `syz.1.669'. [ 437.749421][T10360] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 439.947409][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.954977][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.593385][T10396] Process accounting resumed [ 447.101136][T10464] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 448.433569][T10458] blktrace: Concurrent blktraces are not allowed on nbd5 [ 450.872738][T10510] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 450.908134][T10510] vhci_hcd vhci_hcd.2: invalid port number 0 [ 454.463924][T10537] Process accounting resumed [ 457.121634][T10546] Process accounting paused [ 457.938026][T10604] random: crng reseeded on system resumption [ 460.317050][T10596] Process accounting resumed [ 469.088069][T10724] FAULT_INJECTION: forcing a failure. [ 469.088069][T10724] name failslab, interval 1, probability 0, space 0, times 0 [ 469.142174][T10724] CPU: 0 UID: 0 PID: 10724 Comm: syz.2.727 Not tainted syzkaller #0 PREEMPT(full) [ 469.142214][T10724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 469.142233][T10724] Call Trace: [ 469.142244][T10724] [ 469.142255][T10724] dump_stack_lvl+0x100/0x190 [ 469.142300][T10724] should_fail_ex.cold+0x5/0xa [ 469.142339][T10724] should_failslab+0xc2/0x120 [ 469.142388][T10724] kmem_cache_alloc_noprof+0x91/0x6a0 [ 469.142430][T10724] ? rcu_is_watching+0x12/0xc0 [ 469.142474][T10724] ? anon_vma_clone+0x2ba/0xcd0 [ 469.142533][T10724] anon_vma_clone+0x2ba/0xcd0 [ 469.142597][T10724] copy_vma+0x6ed/0xac0 [ 469.142641][T10724] ? __pfx_copy_vma+0x10/0x10 [ 469.142728][T10724] copy_vma_and_data+0x1cf/0x7c0 [ 469.142776][T10724] ? __pfx_copy_vma_and_data+0x10/0x10 [ 469.142842][T10724] ? __vma_start_write+0x17f/0x280 [ 469.142876][T10724] ? __pfx___vma_start_write+0x10/0x10 [ 469.142940][T10724] move_vma+0x574/0x1920 [ 469.142988][T10724] ? __pfx_move_vma+0x10/0x10 [ 469.143031][T10724] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 469.143084][T10724] ? cap_mmap_addr+0x4b/0x120 [ 469.143120][T10724] ? bpf_lsm_mmap_addr+0x9/0x30 [ 469.143156][T10724] ? security_mmap_addr+0x71/0x1e0 [ 469.143206][T10724] ? __get_unmapped_area+0x255/0x3e0 [ 469.143263][T10724] ? vrm_set_new_addr+0x204/0x290 [ 469.143306][T10724] mremap_to+0x234/0x4c0 [ 469.143343][T10724] ? mas_walk+0x6ef/0x9b0 [ 469.143387][T10724] ? __pfx_mremap_to+0x10/0x10 [ 469.143425][T10724] ? check_prep_vma+0x912/0xe60 [ 469.143472][T10724] __do_sys_mremap+0x88c/0x1850 [ 469.143528][T10724] ? __pfx___do_sys_mremap+0x10/0x10 [ 469.143580][T10724] ? __pfx_do_futex+0x10/0x10 [ 469.143632][T10724] ? __x64_sys_futex+0x34f/0x4d0 [ 469.143697][T10724] do_syscall_64+0x115/0x840 [ 469.143741][T10724] ? clear_bhb_loop+0x70/0xc0 [ 469.143784][T10724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.143828][T10724] RIP: 0033:0x7feb7a39e0d9 [ 469.143857][T10724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.143903][T10724] RSP: 002b:00007feb7b20e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 469.143969][T10724] RAX: ffffffffffffffda RBX: 00007feb7a626450 RCX: 00007feb7a39e0d9 [ 469.143991][T10724] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 469.144010][T10724] RBP: 00007feb7a435024 R08: 0000000100000000 R09: 0000000000000000 [ 469.144030][T10724] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 469.144049][T10724] R13: 00007feb7a6264e8 R14: 00007feb7a626450 R15: 00007ffd7d148778 [ 469.144092][T10724] [ 470.878128][T10740] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 471.954203][T10757] random: crng reseeded on system resumption [ 473.139452][T10764] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 473.169078][T10764] vhci_hcd vhci_hcd.2: invalid port number 0 [ 475.410964][T10767] Process accounting paused [ 485.949659][T10881] Process accounting paused [ 487.641285][T10890] Process accounting resumed [ 490.385640][T10941] Process accounting paused [ 491.078516][T10960] binder: 10957:10960 ioctl c0306201 2000000000c0 returned -14 [ 500.503878][T11056] binder: 11048:11056 ioctl c0306201 2000000000c0 returned -14 [ 501.388069][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.397896][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.590045][T11069] FAULT_INJECTION: forcing a failure. [ 501.590045][T11069] name failslab, interval 1, probability 0, space 0, times 0 [ 501.676441][T11069] CPU: 1 UID: 0 PID: 11069 Comm: syz.3.773 Not tainted syzkaller #0 PREEMPT(full) [ 501.676482][T11069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 501.676509][T11069] Call Trace: [ 501.676549][T11069] [ 501.676562][T11069] dump_stack_lvl+0x100/0x190 [ 501.676706][T11069] should_fail_ex.cold+0x5/0xa [ 501.676764][T11069] should_failslab+0xc2/0x120 [ 501.676839][T11069] kmem_cache_alloc_noprof+0x91/0x6a0 [ 501.676892][T11069] ? rcu_is_watching+0x12/0xc0 [ 501.676958][T11069] ? anon_vma_clone+0x2ba/0xcd0 [ 501.677019][T11069] anon_vma_clone+0x2ba/0xcd0 [ 501.677084][T11069] copy_vma+0x6ed/0xac0 [ 501.677128][T11069] ? __pfx_copy_vma+0x10/0x10 [ 501.677211][T11069] copy_vma_and_data+0x1cf/0x7c0 [ 501.677255][T11069] ? __pfx_copy_vma_and_data+0x10/0x10 [ 501.677309][T11069] ? __vma_start_write+0x17f/0x280 [ 501.677359][T11069] ? __pfx___vma_start_write+0x10/0x10 [ 501.677403][T11069] move_vma+0x574/0x1920 [ 501.677448][T11069] ? __pfx_move_vma+0x10/0x10 [ 501.677489][T11069] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 501.677542][T11069] ? cap_mmap_addr+0x4b/0x120 [ 501.677655][T11069] ? bpf_lsm_mmap_addr+0x9/0x30 [ 501.677699][T11069] ? security_mmap_addr+0x71/0x1e0 [ 501.677769][T11069] ? __get_unmapped_area+0x255/0x3e0 [ 501.677824][T11069] ? vrm_set_new_addr+0x204/0x290 [ 501.677865][T11069] mremap_to+0x234/0x4c0 [ 501.677899][T11069] ? mas_walk+0x6ef/0x9b0 [ 501.678016][T11069] ? __pfx_mremap_to+0x10/0x10 [ 501.678052][T11069] ? check_prep_vma+0x912/0xe60 [ 501.678098][T11069] __do_sys_mremap+0x88c/0x1850 [ 501.678150][T11069] ? __pfx___do_sys_mremap+0x10/0x10 [ 501.678199][T11069] ? __pfx_do_futex+0x10/0x10 [ 501.678265][T11069] ? __x64_sys_futex+0x34f/0x4d0 [ 501.678328][T11069] do_syscall_64+0x115/0x840 [ 501.678396][T11069] ? clear_bhb_loop+0x70/0xc0 [ 501.678448][T11069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.678483][T11069] RIP: 0033:0x7f66d9d9e0d9 [ 501.678509][T11069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 501.678540][T11069] RSP: 002b:00007f66d738d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 501.678636][T11069] RAX: ffffffffffffffda RBX: 00007f66da026450 RCX: 00007f66d9d9e0d9 [ 501.678656][T11069] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 501.678674][T11069] RBP: 00007f66d9e35024 R08: 0000000100000000 R09: 0000000000000000 [ 501.678692][T11069] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 501.678710][T11069] R13: 00007f66da0264e8 R14: 00007f66da026450 R15: 00007ffe83510ee8 [ 501.678750][T11069] [ 503.537952][T11080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.574457][T11080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.115191][T11101] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 505.163634][T11101] vhci_hcd vhci_hcd.2: invalid port number 0 [ 505.418748][T11090] Process accounting resumed [ 509.515308][ T5629] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 511.562616][T11187] i2c i2c-0: delete_device: Can't parse I2C address [ 512.886215][T11190] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 512.903219][T11190] vhci_hcd vhci_hcd.2: invalid port number 0 [ 512.962440][T11194] random: crng reseeded on system resumption [ 518.366980][T11230] Process accounting resumed [ 518.422835][T11236] Process accounting paused [ 520.620832][T11288] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 520.635676][T11288] vhci_hcd vhci_hcd.2: invalid port number 0 [ 522.384311][T11294] Process accounting resumed [ 523.084124][T11323] FAULT_INJECTION: forcing a failure. [ 523.084124][T11323] name failslab, interval 1, probability 0, space 0, times 0 [ 523.125583][T11323] CPU: 1 UID: 0 PID: 11323 Comm: syz.0.808 Not tainted syzkaller #0 PREEMPT(full) [ 523.125625][T11323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 523.125644][T11323] Call Trace: [ 523.125655][T11323] [ 523.125667][T11323] dump_stack_lvl+0x100/0x190 [ 523.125712][T11323] should_fail_ex.cold+0x5/0xa [ 523.125755][T11323] should_failslab+0xc2/0x120 [ 523.125823][T11323] kmem_cache_alloc_noprof+0x91/0x6a0 [ 523.125865][T11323] ? rcu_is_watching+0x12/0xc0 [ 523.125918][T11323] ? anon_vma_clone+0x2ba/0xcd0 [ 523.125980][T11323] anon_vma_clone+0x2ba/0xcd0 [ 523.126046][T11323] copy_vma+0x6ed/0xac0 [ 523.126091][T11323] ? __pfx_copy_vma+0x10/0x10 [ 523.126180][T11323] copy_vma_and_data+0x1cf/0x7c0 [ 523.126221][T11323] ? __pfx_copy_vma_and_data+0x10/0x10 [ 523.126277][T11323] ? __vma_start_write+0x17f/0x280 [ 523.126309][T11323] ? __pfx___vma_start_write+0x10/0x10 [ 523.126354][T11323] move_vma+0x574/0x1920 [ 523.126400][T11323] ? __pfx_move_vma+0x10/0x10 [ 523.126444][T11323] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 523.126498][T11323] ? cap_mmap_addr+0x4b/0x120 [ 523.126533][T11323] ? bpf_lsm_mmap_addr+0x9/0x30 [ 523.126566][T11323] ? security_mmap_addr+0x71/0x1e0 [ 523.126615][T11323] ? __get_unmapped_area+0x255/0x3e0 [ 523.126672][T11323] ? vrm_set_new_addr+0x204/0x290 [ 523.126715][T11323] mremap_to+0x234/0x4c0 [ 523.126752][T11323] ? mas_walk+0x6ef/0x9b0 [ 523.126796][T11323] ? __pfx_mremap_to+0x10/0x10 [ 523.126833][T11323] ? check_prep_vma+0x912/0xe60 [ 523.126888][T11323] __do_sys_mremap+0x88c/0x1850 [ 523.126942][T11323] ? __pfx___do_sys_mremap+0x10/0x10 [ 523.127015][T11323] ? __pfx_do_futex+0x10/0x10 [ 523.127060][T11323] ? __x64_sys_futex+0x34f/0x4d0 [ 523.127120][T11323] do_syscall_64+0x115/0x840 [ 523.127159][T11323] ? clear_bhb_loop+0x70/0xc0 [ 523.127199][T11323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.127231][T11323] RIP: 0033:0x7f676ed9e0d9 [ 523.127256][T11323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.127286][T11323] RSP: 002b:00007f676c3cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 523.127316][T11323] RAX: ffffffffffffffda RBX: 00007f676f026450 RCX: 00007f676ed9e0d9 [ 523.127336][T11323] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 523.127355][T11323] RBP: 00007f676ee35024 R08: 0000000100000000 R09: 0000000000000000 [ 523.127374][T11323] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 523.127392][T11323] R13: 00007f676f0264e8 R14: 00007f676f026450 R15: 00007ffc23249bc8 [ 523.127432][T11323] [ 526.475642][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 527.357301][T11364] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 527.416179][T11364] vhci_hcd vhci_hcd.2: invalid port number 0 [ 530.767114][ T29] audit: type=1800 audit(1843104523.530:8): pid=11416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.827" name="dbroot" dev="configfs" ino=56980 res=0 errno=0 [ 539.340060][T11486] Process accounting paused [ 539.534568][T11518] Invalid ELF header magic: != ELF [ 542.728614][T11551] vivid-007: ================= START STATUS ================= [ 542.737386][T11551] vivid-007: Generate PTS: true [ 542.742700][T11551] vivid-007: Generate SCR: true [ 542.751534][T11551] tpg source WxH: 320x240 (Y'CbCr) [ 542.758064][T11551] tpg field: 1 [ 542.761689][T11551] tpg crop: (0,0)/320x240 [ 542.766553][T11551] tpg compose: (0,0)/320x240 [ 542.776200][T11551] tpg colorspace: 8 [ 542.780102][T11551] tpg transfer function: 0/0 [ 542.784850][T11551] tpg Y'CbCr encoding: 0/0 [ 542.791646][T11551] tpg quantization: 0/0 [ 542.796553][T11551] tpg RGB range: 0/2 [ 542.800550][T11551] vivid-007: ================== END STATUS ================== [ 545.265003][T11582] random: crng reseeded on system resumption [ 548.542440][T11590] Process accounting paused [ 548.894929][T11614] Process accounting resumed [ 550.105602][ T29] audit: type=1800 audit(1843104535.910:9): pid=11629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.855" name="dbroot" dev="configfs" ino=59863 res=0 errno=0 [ 551.005288][T11640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.858'. [ 552.420204][T11629] Process accounting paused [ 553.117508][T11663] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 553.174755][T11663] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 553.272366][T11663] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 553.300394][T11663] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 553.314636][T11663] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 553.357924][T11663] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 553.393469][T11663] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 553.406632][T11663] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 553.443697][T11663] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 553.462439][T11663] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 554.538957][T11683] Invalid ELF header magic: != ELF [ 554.985522][ T5629] Bluetooth: hci1: command 0x0406 tx timeout [ 555.306938][ T5629] Bluetooth: hci3: command 0x0406 tx timeout [ 555.465647][ T5629] Bluetooth: hci0: command 0x0406 tx timeout [ 555.471871][ T5629] Bluetooth: hci2: command 0x0406 tx timeout [ 557.065670][T11705] Bluetooth: hci1: command 0x0406 tx timeout [ 557.320236][T11712] Process accounting resumed [ 557.385756][T11705] Bluetooth: hci3: command 0x0406 tx timeout [ 557.555557][T11705] Bluetooth: hci2: command 0x0406 tx timeout [ 557.563015][ T5627] Bluetooth: hci0: command 0x0406 tx timeout [ 559.145688][ T5627] Bluetooth: hci1: command 0x0406 tx timeout [ 559.467273][ T5627] Bluetooth: hci3: command 0x0406 tx timeout [ 561.007819][T11765] random: crng reseeded on system resumption [ 562.828464][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.835240][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.090351][T11770] Process accounting resumed [ 570.473964][T11831] Process accounting resumed [ 576.053079][T11939] netlink: Conntrack attr has 347 unknown bytes [ 576.109123][T11937] netlink: 12 bytes leftover after parsing attributes in process `syz.1.904'. [ 582.523599][ T5715] Process accounting resumed [ 582.893754][T12002] Process accounting resumed [ 587.617059][T12054] Process accounting paused [ 590.587688][T12100] FAULT_INJECTION: forcing a failure. [ 590.587688][T12100] name failslab, interval 1, probability 0, space 0, times 0 [ 590.670916][T12100] CPU: 0 UID: 0 PID: 12100 Comm: syz.0.936 Not tainted syzkaller #0 PREEMPT(full) [ 590.670947][T12100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 590.670960][T12100] Call Trace: [ 590.670968][T12100] [ 590.670976][T12100] dump_stack_lvl+0x100/0x190 [ 590.671007][T12100] should_fail_ex.cold+0x5/0xa [ 590.671038][T12100] should_failslab+0xc2/0x120 [ 590.671071][T12100] __kmalloc_noprof+0xfc/0x820 [ 590.671101][T12100] ? acpi_ns_internalize_name+0x161/0x2e0 [ 590.671238][T12100] acpi_ns_internalize_name+0x161/0x2e0 [ 590.671276][T12100] ? __pfx_acpi_ns_internalize_name+0x10/0x10 [ 590.671312][T12100] ? acpi_ut_trace_ptr+0x1d2/0x2a0 [ 590.671383][T12100] acpi_ns_get_node_unlocked+0x18c/0x500 [ 590.671423][T12100] ? __pfx_acpi_ns_get_node_unlocked+0x10/0x10 [ 590.671462][T12100] ? mark_held_locks+0x40/0x70 [ 590.671511][T12100] ? acpi_os_wait_semaphore+0x21e/0x3b0 [ 590.671560][T12100] ? acpi_ns_get_node+0x6c/0xf0 [ 590.671594][T12100] acpi_ns_get_node+0x6c/0xf0 [ 590.671632][T12100] acpi_ns_evaluate+0xb01/0x1670 [ 590.671662][T12100] ? acpi_evaluate_object+0xf5/0xe00 [ 590.671688][T12100] acpi_evaluate_object+0x420/0xe00 [ 590.671709][T12100] ? __kvmalloc_node_noprof+0x34f/0x970 [ 590.671737][T12100] ? seq_read_iter+0x819/0x1270 [ 590.671786][T12100] ? vfs_read+0x82e/0xb40 [ 590.671813][T12100] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 590.671834][T12100] ? lock_acquire+0x1b9/0x370 [ 590.671861][T12100] acpi_evaluate_integer+0xdf/0x220 [ 590.671898][T12100] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 590.671930][T12100] ? __lock_acquire+0x49f/0x1a40 [ 590.671959][T12100] ? __pfx_status_show+0x10/0x10 [ 590.671979][T12100] status_show+0xa0/0x120 [ 590.671999][T12100] ? __pfx_status_show+0x10/0x10 [ 590.672025][T12100] dev_attr_show+0x52/0xa0 [ 590.672093][T12100] ? __pfx_dev_attr_show+0x10/0x10 [ 590.672114][T12100] sysfs_kf_seq_show+0x217/0x3f0 [ 590.672204][T12100] seq_read_iter+0x32f/0x1270 [ 590.672237][T12100] ? lock_acquire+0x1b9/0x370 [ 590.672266][T12100] kernfs_fop_read_iter+0x46c/0x610 [ 590.672296][T12100] ? rw_verify_area+0xce/0x6d0 [ 590.672327][T12100] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 590.672357][T12100] vfs_read+0x82e/0xb40 [ 590.672385][T12100] ? __pfx_vfs_read+0x10/0x10 [ 590.672421][T12100] ksys_read+0x12a/0x250 [ 590.672441][T12100] ? __pfx_ksys_read+0x10/0x10 [ 590.672468][T12100] do_syscall_64+0x115/0x840 [ 590.672495][T12100] ? clear_bhb_loop+0x70/0xc0 [ 590.672521][T12100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.672543][T12100] RIP: 0033:0x7f676ed9e0d9 [ 590.672560][T12100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 590.672581][T12100] RSP: 002b:00007f676fc01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 590.672600][T12100] RAX: ffffffffffffffda RBX: 00007f676f025fa0 RCX: 00007f676ed9e0d9 [ 590.672614][T12100] RDX: 000000000000002e RSI: 0000200000000000 RDI: 0000000000000009 [ 590.672627][T12100] RBP: 00007f676ee35024 R08: 0000000000000000 R09: 0000000000000000 [ 590.672640][T12100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 590.672652][T12100] R13: 00007f676f026038 R14: 00007f676f025fa0 R15: 00007ffc23249bc8 [ 590.672680][T12100] [ 592.290726][T12122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.929'. [ 594.397568][T12123] Process accounting paused [ 597.115120][T12162] Process accounting resumed [ 598.205194][T12182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.232486][T12182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.265524][T12194] vivid-007: ================= START STATUS ================= [ 598.298627][T12194] vivid-007: Generate PTS: true [ 598.325549][T12194] vivid-007: Generate SCR: true [ 598.355515][T12194] tpg source WxH: 320x240 (Y'CbCr) [ 598.368894][T12194] tpg field: 1 [ 598.381535][T12194] tpg crop: (0,0)/320x240 [ 598.394326][T12194] tpg compose: (0,0)/320x240 [ 598.419512][T12194] tpg colorspace: 8 [ 598.435514][T12194] tpg transfer function: 0/0 [ 598.440275][T12194] tpg Y'CbCr encoding: 0/0 [ 598.444794][T12194] tpg quantization: 0/0 [ 598.449054][T12194] tpg RGB range: 0/2 [ 598.453089][T12194] vivid-007: ================== END STATUS ================== [ 598.686656][ T29] audit: type=1800 audit(1843104584.490:10): pid=12205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.945" name="members" dev="configfs" ino=64939 res=0 errno=0 [ 599.138176][T12217] usb usb39: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 600.045012][ T29] audit: type=1800 audit(1843104519.870:11): pid=12226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.948" name="version" dev="configfs" ino=65051 res=0 errno=0 [ 603.334231][T12275] futex_wake_op: syz.2.956 tries to shift op by -1; fix this program [ 608.636987][T12303] FAULT_INJECTION: forcing a failure. [ 608.636987][T12303] name failslab, interval 1, probability 0, space 0, times 0 [ 608.711879][T12303] CPU: 1 UID: 0 PID: 12303 Comm: syz.3.959 Not tainted syzkaller #0 PREEMPT(full) [ 608.711930][T12303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 608.711946][T12303] Call Trace: [ 608.711954][T12303] [ 608.711963][T12303] dump_stack_lvl+0x100/0x190 [ 608.711997][T12303] should_fail_ex.cold+0x5/0xa [ 608.712025][T12303] should_failslab+0xc2/0x120 [ 608.712062][T12303] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 608.712095][T12303] ? start_dirop+0x79/0xb0 [ 608.712118][T12303] ? alloc_inode+0x68/0x250 [ 608.712153][T12303] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 608.712269][T12303] alloc_inode+0x68/0x250 [ 608.712303][T12303] new_inode+0x22/0x1c0 [ 608.712351][T12303] __debugfs_create_file+0x105/0x4f0 [ 608.712388][T12303] debugfs_create_file_full+0x41/0x60 [ 608.712426][T12303] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 608.712482][T12303] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 608.712526][T12303] ? kasan_save_track+0x14/0x30 [ 608.712558][T12303] ? __kasan_kmalloc+0xaa/0xb0 [ 608.712592][T12303] ? lockdep_init_map_type+0x5c/0x250 [ 608.712621][T12303] preinit_net.part.0+0x43b/0x920 [ 608.712723][T12303] copy_net_ns+0x339/0x7c0 [ 608.712749][T12303] create_new_namespaces+0x3ea/0xac0 [ 608.712791][T12303] unshare_nsproxy_namespaces+0xf2/0x220 [ 608.712855][T12303] ksys_unshare+0x438/0xab0 [ 608.712907][T12303] ? __pfx_ksys_unshare+0x10/0x10 [ 608.712955][T12303] __x64_sys_unshare+0x31/0x40 [ 608.712986][T12303] do_syscall_64+0x115/0x840 [ 608.713017][T12303] ? clear_bhb_loop+0x70/0xc0 [ 608.713046][T12303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.713071][T12303] RIP: 0033:0x7f66d9d9e0d9 [ 608.713089][T12303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 608.713112][T12303] RSP: 002b:00007f66dabaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 608.713134][T12303] RAX: ffffffffffffffda RBX: 00007f66da025fa0 RCX: 00007f66d9d9e0d9 [ 608.713149][T12303] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 608.713163][T12303] RBP: 00007f66d9e35024 R08: 0000000000000000 R09: 0000000000000000 [ 608.713178][T12303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 608.713192][T12303] R13: 00007f66da026038 R14: 00007f66da025fa0 R15: 00007ffe83510ee8 [ 608.713222][T12303] [ 608.713241][T12303] debugfs: out of free dentries, can not create file 'net_notrefcnt@ffff88803664aa38' [ 610.491237][T12317] netlink: 'syz.2.961': attribute type 1 has an invalid length. [ 610.514244][T12317] netlink: 9 bytes leftover after parsing attributes in process `syz.2.961'. [ 612.061851][T12353] [ 613.523909][T12368] netlink: 16 bytes leftover after parsing attributes in process `syz.0.967'. [ 614.285292][T12364] Process accounting resumed [ 614.624323][T12349] Process accounting paused [ 615.026348][T12382] ERROR: Out of memory at tomoyo_memory_ok. [ 616.639630][T12399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.973'. [ 616.651891][T12399] netlink: 354 bytes leftover after parsing attributes in process `syz.1.973'. [ 616.699710][T12400] FAULT_INJECTION: forcing a failure. [ 616.699710][T12400] name failslab, interval 1, probability 0, space 0, times 0 [ 616.726574][T12400] CPU: 1 UID: 0 PID: 12400 Comm: syz.2.981 Not tainted syzkaller #0 PREEMPT(full) [ 616.726617][T12400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 616.726635][T12400] Call Trace: [ 616.726645][T12400] [ 616.726657][T12400] dump_stack_lvl+0x100/0x190 [ 616.726705][T12400] should_fail_ex.cold+0x5/0xa [ 616.726753][T12400] should_failslab+0xc2/0x120 [ 616.726801][T12400] __kmalloc_cache_noprof+0x91/0x6c0 [ 616.726842][T12400] ? ima_add_digest_entry+0x53/0x5b0 [ 616.726999][T12400] ima_add_digest_entry+0x53/0x5b0 [ 616.727037][T12400] ima_add_template_entry+0x45e/0x8b0 [ 616.727079][T12400] ? __pfx_ima_add_template_entry+0x10/0x10 [ 616.727119][T12400] ? ima_calc_field_array_hash+0x378/0x440 [ 616.727170][T12400] ima_store_template+0xda/0x150 [ 616.727216][T12400] ima_store_measurement+0x21c/0x5b0 [ 616.727262][T12400] ? __pfx_ima_store_measurement+0x10/0x10 [ 616.727339][T12400] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 616.727426][T12400] process_measurement+0x19cc/0x2350 [ 616.727478][T12400] ? __pfx_process_measurement+0x10/0x10 [ 616.727586][T12400] ? __pfx_aa_file_perm+0x10/0x10 [ 616.727699][T12400] ima_file_mmap+0x1c4/0x1f0 [ 616.727746][T12400] ? __pfx_ima_file_mmap+0x10/0x10 [ 616.727798][T12400] security_mmap_file+0x278/0x9b0 [ 616.727849][T12400] __do_sys_remap_file_pages+0x2da/0xa10 [ 616.727910][T12400] ? find_held_lock+0x2b/0x80 [ 616.727957][T12400] ? __pfx___do_sys_remap_file_pages+0x10/0x10 [ 616.728009][T12400] ? __x64_sys_futex+0x34f/0x4d0 [ 616.728046][T12400] ? __x64_sys_futex+0x358/0x4d0 [ 616.728087][T12400] ? xfd_validate_state+0x129/0x190 [ 616.728163][T12400] do_syscall_64+0x115/0x840 [ 616.728206][T12400] ? clear_bhb_loop+0x70/0xc0 [ 616.728248][T12400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.728283][T12400] RIP: 0033:0x7feb7a39e0d9 [ 616.728309][T12400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 616.728340][T12400] RSP: 002b:00007feb7b292028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 616.728372][T12400] RAX: ffffffffffffffda RBX: 00007feb7a626090 RCX: 00007feb7a39e0d9 [ 616.728393][T12400] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000000006a27 [ 616.728413][T12400] RBP: 00007feb7a435024 R08: 0000000000000004 R09: 0000000000000000 [ 616.728432][T12400] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 616.728452][T12400] R13: 00007feb7a626128 R14: 00007feb7a626090 R15: 00007ffd7d148778 [ 616.728495][T12400] [ 616.730828][T12400] ima: OUT OF MEMORY ERROR creating queue entry [ 617.036581][ T29] audit: type=1804 audit(1843104536.860:12): pid=12400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.2.981" name="dev/zero" dev="tmpfs" ino=1390 res=0 errno=0 [ 618.911313][T12412] Process accounting resumed [ 619.925891][T12423] Process accounting resumed [ 621.844912][T12477] netlink: Conntrack attr has 347 unknown bytes [ 623.833635][T12498] warning: `syz.0.988' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 624.068876][T12502] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 624.111538][T12502] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 624.159245][T12502] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 624.230379][T12502] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 624.277303][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.286398][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.113771][ T5627] Bluetooth: hci1: command 0x0406 tx timeout [ 626.185950][ T5627] Bluetooth: hci0: command 0x0406 tx timeout [ 626.185958][T11705] Bluetooth: hci3: command 0x0406 tx timeout [ 626.277206][ T5627] Bluetooth: hci2: command 0x0406 tx timeout [ 628.355915][T12528] Process accounting paused [ 629.536376][T11705] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 629.550141][T11705] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 629.561596][T11705] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 629.575333][T11705] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 629.585672][T11705] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 629.662887][T11855] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.332939][T11855] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.568781][T11855] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.844680][T11855] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.262251][T11705] Bluetooth: hci1: unexpected event 0x10 length: 124 > 1 [ 631.263440][ T5627] Bluetooth: hci1: hardware error 0x00 [ 631.325046][T11705] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 631.432973][T11855] bridge_slave_1: left allmulticast mode [ 631.441490][T11855] bridge_slave_1: left promiscuous mode [ 631.449668][T11855] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.462896][T11855] bridge_slave_0: left allmulticast mode [ 631.472195][T11855] bridge_slave_0: left promiscuous mode [ 631.478415][T11855] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.706035][T11705] Bluetooth: hci3: command tx timeout [ 631.728068][T11855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 631.748293][T11855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 631.758864][T11855] bond0 (unregistering): Released all slaves [ 631.858760][T11855] tipc: Left network mode [ 632.443378][ T5276] 8021q: adding VLAN 0 to HW filter on device eth1 [ 632.569209][T12620] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 632.609663][T12620] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 632.643805][T12620] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 632.658109][T12620] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 632.719137][T12620] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 633.307055][ T5627] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 633.319413][T12626] Process accounting resumed [ 633.979908][T12567] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.993716][T12567] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.003231][T12567] bridge_slave_0: entered allmulticast mode [ 634.013338][T12567] bridge_slave_0: entered promiscuous mode [ 634.061918][T12567] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.078823][T12567] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.087255][T12567] bridge_slave_1: entered allmulticast mode [ 634.095150][T12567] bridge_slave_1: entered promiscuous mode [ 634.293564][T12567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 634.363580][T12567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 634.586380][ T5627] Bluetooth: hci0: command 0x0406 tx timeout [ 634.641263][T11855] hsr_slave_0: left promiscuous mode [ 634.656088][T11855] hsr_slave_1: left promiscuous mode [ 634.665919][T11705] Bluetooth: hci2: command 0x0406 tx timeout [ 634.674023][ T5627] Bluetooth: hci3: command 0x040f tx timeout [ 634.681208][T11855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 634.691479][T11855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 634.703311][T11855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 634.715304][T11855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 634.743093][T11855] veth1_macvtap: left promiscuous mode [ 634.749826][T11855] veth0_macvtap: left promiscuous mode [ 634.756654][T11855] veth1_vlan: left promiscuous mode [ 634.762182][T11855] veth0_vlan: left promiscuous mode [ 635.735233][ T5276] 8021q: adding VLAN 0 to HW filter on device eth2 [ 635.764898][T12567] team0: Port device team_slave_0 added [ 635.968703][T12567] team0: Port device team_slave_1 added [ 636.251680][T12567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 636.259574][T12567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 636.298364][T12567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 636.329130][T12567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 636.336208][T12567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 636.363743][T12567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 636.756496][ T5627] Bluetooth: hci3: command 0x040f tx timeout [ 637.069492][T12567] hsr_slave_0: entered promiscuous mode [ 637.080401][T12567] hsr_slave_1: entered promiscuous mode [ 637.099492][T12567] debugfs: 'hsr0' already exists in 'hsr' [ 637.114419][T12567] Cannot create hsr debugfs directory [ 638.088420][ T5276] 8021q: adding VLAN 0 to HW filter on device eth3 [ 638.289644][T12694] FAULT_INJECTION: forcing a failure. [ 638.289644][T12694] name failslab, interval 1, probability 0, space 0, times 0 [ 638.303419][T12694] CPU: 0 UID: 0 PID: 12694 Comm: syz.2.1010 Not tainted syzkaller #0 PREEMPT(full) [ 638.303470][T12694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 638.303490][T12694] Call Trace: [ 638.303500][T12694] [ 638.303513][T12694] dump_stack_lvl+0x100/0x190 [ 638.303558][T12694] should_fail_ex.cold+0x5/0xa [ 638.303598][T12694] should_failslab+0xc2/0x120 [ 638.303648][T12694] kmem_cache_alloc_noprof+0x91/0x6a0 [ 638.303693][T12694] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 638.303738][T12694] ? acpi_ut_create_generic_state+0x61/0xc0 [ 638.303882][T12694] acpi_ut_create_generic_state+0x61/0xc0 [ 638.303919][T12694] acpi_ds_scope_stack_push+0x70/0x790 [ 638.303991][T12694] acpi_ds_init_aml_walk+0x2d8/0x680 [ 638.304055][T12694] acpi_ps_execute_method+0x39d/0xe90 [ 638.304108][T12694] acpi_ns_evaluate+0x640/0x1670 [ 638.304161][T12694] acpi_evaluate_object+0x420/0xe00 [ 638.304191][T12694] ? __kvmalloc_node_noprof+0x34f/0x970 [ 638.304233][T12694] ? seq_read_iter+0x819/0x1270 [ 638.304285][T12694] ? vfs_read+0x82e/0xb40 [ 638.304320][T12694] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 638.304351][T12694] ? lock_acquire+0x1b9/0x370 [ 638.304393][T12694] acpi_evaluate_integer+0xdf/0x220 [ 638.304440][T12694] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 638.304495][T12694] ? __lock_acquire+0x49f/0x1a40 [ 638.304539][T12694] ? __pfx_status_show+0x10/0x10 [ 638.304568][T12694] status_show+0xa0/0x120 [ 638.304597][T12694] ? __pfx_status_show+0x10/0x10 [ 638.304638][T12694] dev_attr_show+0x52/0xa0 [ 638.304677][T12694] ? __pfx_dev_attr_show+0x10/0x10 [ 638.304725][T12694] sysfs_kf_seq_show+0x217/0x3f0 [ 638.304787][T12694] seq_read_iter+0x32f/0x1270 [ 638.304840][T12694] ? lock_acquire+0x1b9/0x370 [ 638.304891][T12694] kernfs_fop_read_iter+0x46c/0x610 [ 638.304940][T12694] ? rw_verify_area+0xce/0x6d0 [ 638.304992][T12694] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 638.305042][T12694] vfs_read+0x82e/0xb40 [ 638.305080][T12694] ? __pfx_vfs_read+0x10/0x10 [ 638.305142][T12694] ksys_read+0x12a/0x250 [ 638.305175][T12694] ? __pfx_ksys_read+0x10/0x10 [ 638.305220][T12694] do_syscall_64+0x115/0x840 [ 638.305263][T12694] ? clear_bhb_loop+0x70/0xc0 [ 638.305312][T12694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.305337][T12694] RIP: 0033:0x7feb7a39e0d9 [ 638.305357][T12694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 638.305381][T12694] RSP: 002b:00007feb7b2b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 638.305426][T12694] RAX: ffffffffffffffda RBX: 00007feb7a625fa0 RCX: 00007feb7a39e0d9 [ 638.305455][T12694] RDX: 000000000000002e RSI: 0000200000000000 RDI: 0000000000000009 [ 638.305475][T12694] RBP: 00007feb7a435024 R08: 0000000000000000 R09: 0000000000000000 [ 638.305495][T12694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 638.305514][T12694] R13: 00007feb7a626038 R14: 00007feb7a625fa0 R15: 00007ffd7d148778 [ 638.305559][T12694] [ 638.606017][T12694] ACPI Error: ffff888058f6c000 walk still has a scope list (20260408/dswstate-694) [ 638.825554][ T5627] Bluetooth: hci3: command 0x040f tx timeout [ 640.906012][ T5627] Bluetooth: hci3: command 0x040f tx timeout [ 642.044974][T12567] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 642.080375][T12567] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 642.158065][T12567] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 642.178456][T12567] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 642.187938][T12567] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 642.199477][T12567] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 642.340888][T12567] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 642.353120][T12567] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 642.573546][T12567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 642.603945][T12567] 8021q: adding VLAN 0 to HW filter on device team0 [ 642.619943][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.627161][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 642.644990][ T1016] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.652213][ T1016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 642.986679][T11705] Bluetooth: hci3: command 0x040f tx timeout [ 643.303031][T12567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 643.374832][T12567] veth0_vlan: entered promiscuous mode [ 643.391957][T12567] veth1_vlan: entered promiscuous mode [ 643.431525][T12567] veth0_macvtap: entered promiscuous mode [ 643.442781][T12567] veth1_macvtap: entered promiscuous mode [ 643.474660][T12567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 643.495005][T12567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 643.546796][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.566362][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.666160][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.690448][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.746454][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.758541][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.769966][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.796784][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.909343][T12845] FAULT_INJECTION: forcing a failure. [ 644.909343][T12845] name failslab, interval 1, probability 0, space 0, times 0 [ 644.955499][T12845] CPU: 0 UID: 0 PID: 12845 Comm: syz.3.1019 Not tainted syzkaller #0 PREEMPT(full) [ 644.955541][T12845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 644.955558][T12845] Call Trace: [ 644.955568][T12845] [ 644.955579][T12845] dump_stack_lvl+0x100/0x190 [ 644.955621][T12845] should_fail_ex.cold+0x5/0xa [ 644.955657][T12845] should_failslab+0xc2/0x120 [ 644.955703][T12845] __kmalloc_noprof+0xfc/0x820 [ 644.955743][T12845] ? tomoyo_profile+0x47/0x60 [ 644.955875][T12845] ? tomoyo_supervisor+0x65d/0x1340 [ 644.955916][T12845] tomoyo_supervisor+0x65d/0x1340 [ 644.955963][T12845] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 644.956021][T12845] ? tomoyo_check_path_acl+0x141/0x210 [ 644.956065][T12845] ? tomoyo_check_acl+0x1f7/0x410 [ 644.956106][T12845] tomoyo_path_permission+0x270/0x3b0 [ 644.956151][T12845] tomoyo_check_open_permission+0x34d/0x3c0 [ 644.956195][T12845] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 644.956249][T12845] ? hook_file_open+0x24f/0x8f0 [ 644.956347][T12845] ? path_get+0x61/0x80 [ 644.956389][T12845] tomoyo_file_open+0x6b/0x90 [ 644.956448][T12845] security_file_open+0xb5/0x1e0 [ 644.956494][T12845] do_dentry_open+0x588/0x14d0 [ 644.956549][T12845] vfs_open+0x82/0x3f0 [ 644.956592][T12845] path_openat+0x2873/0x4280 [ 644.956639][T12845] ? __pfx_path_openat+0x10/0x10 [ 644.956681][T12845] do_file_open+0x20e/0x430 [ 644.956715][T12845] ? __pfx_do_file_open+0x10/0x10 [ 644.956774][T12845] ? alloc_fd+0x471/0x7a0 [ 644.956807][T12845] ? do_getname+0x191/0x390 [ 644.956849][T12845] do_sys_openat2+0x10f/0x1e0 [ 644.956890][T12845] ? __pfx_do_sys_openat2+0x10/0x10 [ 644.956941][T12845] ? __fget_files+0x21f/0x3d0 [ 644.956978][T12845] __x64_sys_openat+0x12d/0x210 [ 644.957021][T12845] ? __pfx___x64_sys_openat+0x10/0x10 [ 644.957099][T12845] do_syscall_64+0x115/0x840 [ 644.957138][T12845] ? clear_bhb_loop+0x70/0xc0 [ 644.957179][T12845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.957212][T12845] RIP: 0033:0x7f66d9d9e0d9 [ 644.957237][T12845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 644.957266][T12845] RSP: 002b:00007f66dab8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 644.957295][T12845] RAX: ffffffffffffffda RBX: 00007f66da026090 RCX: 00007f66d9d9e0d9 [ 644.957317][T12845] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 644.957337][T12845] RBP: 00007f66d9e35024 R08: 0000000000000000 R09: 0000000000000000 [ 644.957356][T12845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 644.957374][T12845] R13: 00007f66da026128 R14: 00007f66da026090 R15: 00007ffe83510ee8 [ 644.957412][T12845] [ 645.289653][T12850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1017'. [ 645.507007][T12851] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 645.555270][T12851] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 645.601253][T12851] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 646.712232][T12862] FAULT_INJECTION: forcing a failure. [ 646.712232][T12862] name failslab, interval 1, probability 0, space 0, times 0 [ 646.725559][T12862] CPU: 1 UID: 0 PID: 12862 Comm: syz.3.1020 Not tainted syzkaller #0 PREEMPT(full) [ 646.725598][T12862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 646.725615][T12862] Call Trace: [ 646.725624][T12862] [ 646.725635][T12862] dump_stack_lvl+0x100/0x190 [ 646.725676][T12862] should_fail_ex.cold+0x5/0xa [ 646.725711][T12862] should_failslab+0xc2/0x120 [ 646.725759][T12862] kmem_cache_alloc_noprof+0x91/0x6a0 [ 646.725815][T12862] ? acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 646.725877][T12862] acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 646.725929][T12862] acpi_ut_create_internal_object_dbg+0x51/0x260 [ 646.725986][T12862] acpi_ut_create_integer_object+0x46/0xe0 [ 646.726038][T12862] acpi_ps_execute_method+0x582/0xe90 [ 646.726087][T12862] acpi_ns_evaluate+0x640/0x1670 [ 646.726137][T12862] acpi_evaluate_object+0x420/0xe00 [ 646.726165][T12862] ? __kvmalloc_node_noprof+0x34f/0x970 [ 646.726204][T12862] ? seq_read_iter+0x819/0x1270 [ 646.726253][T12862] ? vfs_read+0x82e/0xb40 [ 646.726285][T12862] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 646.726314][T12862] ? lock_acquire+0x1b9/0x370 [ 646.726351][T12862] acpi_evaluate_integer+0xdf/0x220 [ 646.726395][T12862] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 646.726439][T12862] ? __lock_acquire+0x49f/0x1a40 [ 646.726479][T12862] ? __pfx_status_show+0x10/0x10 [ 646.726507][T12862] status_show+0xa0/0x120 [ 646.726535][T12862] ? __pfx_status_show+0x10/0x10 [ 646.726573][T12862] dev_attr_show+0x52/0xa0 [ 646.726603][T12862] ? __pfx_dev_attr_show+0x10/0x10 [ 646.726632][T12862] sysfs_kf_seq_show+0x217/0x3f0 [ 646.726686][T12862] seq_read_iter+0x32f/0x1270 [ 646.726734][T12862] ? lock_acquire+0x1b9/0x370 [ 646.726778][T12862] kernfs_fop_read_iter+0x46c/0x610 [ 646.726827][T12862] ? rw_verify_area+0xce/0x6d0 [ 646.726876][T12862] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 646.726921][T12862] vfs_read+0x82e/0xb40 [ 646.726956][T12862] ? __pfx_vfs_read+0x10/0x10 [ 646.727011][T12862] ksys_read+0x12a/0x250 [ 646.727040][T12862] ? __pfx_ksys_read+0x10/0x10 [ 646.727080][T12862] do_syscall_64+0x115/0x840 [ 646.727120][T12862] ? clear_bhb_loop+0x70/0xc0 [ 646.727159][T12862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.727191][T12862] RIP: 0033:0x7f66d9d9e0d9 [ 646.727216][T12862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.727245][T12862] RSP: 002b:00007f66dabaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 646.727274][T12862] RAX: ffffffffffffffda RBX: 00007f66da025fa0 RCX: 00007f66d9d9e0d9 [ 646.727295][T12862] RDX: 000000000000002e RSI: 0000200000000000 RDI: 0000000000000009 [ 646.727314][T12862] RBP: 00007f66d9e35024 R08: 0000000000000000 R09: 0000000000000000 [ 646.727330][T12862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 646.727347][T12862] R13: 00007f66da026038 R14: 00007f66da025fa0 R15: 00007ffe83510ee8 [ 646.727387][T12862] [ 646.728827][T12862] ACPI Error: Could not allocate an object descriptor (20260408/utobject-180) [ 647.044731][T12862] ACPI Error: ffff8880588ec000 walk still has a scope list (20260408/dswstate-694) [ 647.545627][T11705] Bluetooth: hci0: command 0x0406 tx timeout [ 647.626216][T11705] Bluetooth: hci3: command 0x040f tx timeout [ 647.628145][ T5627] Bluetooth: hci2: command 0x0406 tx timeout [ 647.895737][ T5627] Bluetooth: hci3: unexpected event 0x05 length: 6 > 4 [ 648.426091][T12883] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1023'. [ 649.963706][T12882] Process accounting paused [ 650.015215][T12879] Process accounting paused [ 654.661589][T12956] usb usb39: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 658.796580][T13000] vivid-007: ================= START STATUS ================= [ 658.849442][T13000] vivid-007: Generate PTS: true [ 658.882841][T13000] vivid-007: Generate SCR: true [ 658.917422][T13000] tpg source WxH: 320x240 (Y'CbCr) [ 658.933875][T13000] tpg field: 1 [ 658.950232][T13000] tpg crop: (0,0)/320x240 [ 658.973395][T13000] tpg compose: (0,0)/320x240 [ 659.006586][T13000] tpg colorspace: 8 [ 659.015597][T13000] tpg transfer function: 0/0 [ 659.031904][T13000] tpg Y'CbCr encoding: 0/0 [ 659.050438][T13000] tpg quantization: 0/0 [ 659.061966][T13000] tpg RGB range: 0/2 [ 659.112126][T13000] vivid-007: ================== END STATUS ================== [ 659.748874][T13003] Process accounting resumed [ 661.369811][T13039] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1048'. [ 661.543278][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880590e0400: rx timeout, send abort [ 661.554837][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880590e0400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 663.857474][T13058] Process accounting paused [ 666.624072][T13091] hub 1-0:1.0: USB hub found [ 666.647570][T13091] hub 1-0:1.0: 1 port detected [ 667.425011][T13116] ecryptfs_miscdev_response: (sizeof(*msg) + msg->data_len) = [1067213646]; data_size = [146]. Invalid packet. [ 667.459644][T13116] ecryptfs_miscdev_write: Failed to deliver miscdev response to requesting operation; rc = [-22] [ 668.082944][T13125] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 668.131929][T13125] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 668.153446][T13125] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 670.105485][ T5627] Bluetooth: hci0: command 0x0406 tx timeout [ 670.196368][ T5627] Bluetooth: hci3: command 0x040f tx timeout [ 670.196405][T11705] Bluetooth: hci2: command 0x0406 tx timeout [ 674.719703][T13212] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1083'. [ 676.924873][T13241] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1078'. [ 680.145973][T13291] futex_wake_op: syz.3.1086 tries to shift op by -2048; fix this program [ 680.157267][T13291] futex_wake_op: syz.3.1086 tries to shift op by -2048; fix this program [ 680.293820][T13270] Process accounting resumed [ 680.557412][T13278] Process accounting resumed [ 680.939619][T13304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1088'. [ 683.793256][T13348] ecryptfs_miscdev_response: (sizeof(*msg) + msg->data_len) = [1067213646]; data_size = [146]. Invalid packet. [ 683.829611][T13348] ecryptfs_miscdev_write: Failed to deliver miscdev response to requesting operation; rc = [-22] [ 685.709841][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.719393][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.670683][T13399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1104'. [ 689.327862][T11705] Bluetooth: hci0: unexpected event 0x05 length: 6 > 4 [ 689.440117][T13418] FAULT_INJECTION: forcing a failure. [ 689.440117][T13418] name failslab, interval 1, probability 0, space 0, times 0 [ 689.551403][T13418] CPU: 0 UID: 0 PID: 13418 Comm: syz.1.1109 Not tainted syzkaller #0 PREEMPT(full) [ 689.551450][T13418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 689.551477][T13418] Call Trace: [ 689.551486][T13418] [ 689.551498][T13418] dump_stack_lvl+0x100/0x190 [ 689.551539][T13418] should_fail_ex.cold+0x5/0xa [ 689.551564][T13418] should_failslab+0xc2/0x120 [ 689.551598][T13418] __kmalloc_cache_noprof+0x91/0x6c0 [ 689.551621][T13418] ? snd_pcm_hw_param_near.constprop.0+0x4c0/0x850 [ 689.551721][T13418] ? snd_pcm_hw_param_near.constprop.0+0x573/0x850 [ 689.551750][T13418] ? snd_pcm_hw_param_near.constprop.0+0xbc/0x850 [ 689.551780][T13418] snd_pcm_hw_param_near.constprop.0+0xbc/0x850 [ 689.551811][T13418] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 689.551838][T13418] ? calc_src_frames.isra.0+0x17c/0x1c0 [ 689.551883][T13418] ? calc_dst_frames.constprop.0.isra.0+0xed/0x120 [ 689.551917][T13418] snd_pcm_oss_change_params_locked+0x193a/0x39f0 [ 689.551959][T13418] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 689.551986][T13418] ? __pfx___mutex_lock+0x10/0x10 [ 689.552086][T13418] ? snd_pcm_oss_ioctl+0x1a0a/0x3790 [ 689.552111][T13418] ? snd_pcm_oss_ioctl+0x1a0a/0x3790 [ 689.552147][T13418] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 689.552183][T13418] snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 689.552214][T13418] snd_pcm_oss_ioctl+0x25aa/0x3790 [ 689.552248][T13418] ? __fget_files+0x215/0x3d0 [ 689.552268][T13418] ? hook_file_ioctl_common+0x140/0x440 [ 689.552299][T13418] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 689.552329][T13418] ? __fget_files+0x21f/0x3d0 [ 689.552354][T13418] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 689.552382][T13418] __x64_sys_ioctl+0x18e/0x210 [ 689.552418][T13418] do_syscall_64+0x115/0x840 [ 689.552446][T13418] ? clear_bhb_loop+0x70/0xc0 [ 689.552474][T13418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.552497][T13418] RIP: 0033:0x7f537e59e0d9 [ 689.552515][T13418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 689.552537][T13418] RSP: 002b:00007f537f3a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 689.552559][T13418] RAX: ffffffffffffffda RBX: 00007f537e826090 RCX: 00007f537e59e0d9 [ 689.552573][T13418] RDX: 0000000000000000 RSI: 00000000c0045005 RDI: 0000000000000007 [ 689.552587][T13418] RBP: 00007f537e635024 R08: 0000000000000000 R09: 0000000000000000 [ 689.552601][T13418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 689.552614][T13418] R13: 00007f537e826128 R14: 00007f537e826090 R15: 00007fff21fcb038 [ 689.552643][T13418] [ 690.264145][T13421] Process accounting paused [ 690.545029][T13435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 694.109140][T13460] Process accounting resumed [ 694.291963][T13479] sg_write: data in/out 124/2 bytes for SCSI command 0x61-- guessing data in; [ 694.291963][T13479] program syz.1.1118 not setting count and/or reply_len properly [ 697.713660][T13510] FAULT_INJECTION: forcing a failure. [ 697.713660][T13510] name failslab, interval 1, probability 0, space 0, times 0 [ 697.740511][T13510] CPU: 0 UID: 0 PID: 13510 Comm: syz.0.1130 Not tainted syzkaller #0 PREEMPT(full) [ 697.740558][T13510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 697.740576][T13510] Call Trace: [ 697.740585][T13510] [ 697.740595][T13510] dump_stack_lvl+0x100/0x190 [ 697.740628][T13510] should_fail_ex.cold+0x5/0xa [ 697.740656][T13510] should_failslab+0xc2/0x120 [ 697.740691][T13510] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 697.740724][T13510] ? start_dirop+0x79/0xb0 [ 697.740745][T13510] ? alloc_inode+0x68/0x250 [ 697.740780][T13510] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 697.740814][T13510] alloc_inode+0x68/0x250 [ 697.740847][T13510] new_inode+0x22/0x1c0 [ 697.740901][T13510] debugfs_create_symlink+0xd1/0x220 [ 697.740938][T13510] ref_tracker_dir_symlink+0x257/0x3b0 [ 697.740967][T13510] ? __pfx_ref_tracker_dir_symlink+0x10/0x10 [ 697.741033][T13510] ? __pfx_net_ns_net_init+0x10/0x10 [ 697.741074][T13510] net_ns_net_init+0xd2/0x120 [ 697.741120][T13510] ops_init+0x1e2/0x5f0 [ 697.741162][T13510] setup_net+0x118/0x3a0 [ 697.741202][T13510] ? __pfx_setup_net+0x10/0x10 [ 697.741242][T13510] ? mutex_init_lockdep+0xf1/0x120 [ 697.741273][T13510] copy_net_ns+0x46f/0x7c0 [ 697.741300][T13510] create_new_namespaces+0x3ea/0xac0 [ 697.741335][T13510] unshare_nsproxy_namespaces+0xf2/0x220 [ 697.741366][T13510] ksys_unshare+0x438/0xab0 [ 697.741401][T13510] ? __pfx_ksys_unshare+0x10/0x10 [ 697.741446][T13510] __x64_sys_unshare+0x31/0x40 [ 697.741479][T13510] do_syscall_64+0x115/0x840 [ 697.741510][T13510] ? clear_bhb_loop+0x70/0xc0 [ 697.741541][T13510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.741566][T13510] RIP: 0033:0x7f0d60b9e0d9 [ 697.741586][T13510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.741611][T13510] RSP: 002b:00007f0d61ab1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 697.741634][T13510] RAX: ffffffffffffffda RBX: 00007f0d60e25fa0 RCX: 00007f0d60b9e0d9 [ 697.741650][T13510] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 697.741666][T13510] RBP: 00007f0d60c35024 R08: 0000000000000000 R09: 0000000000000000 [ 697.741681][T13510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 697.741700][T13510] R13: 00007f0d60e26038 R14: 00007f0d60e25fa0 R15: 00007ffd2c099698 [ 697.741732][T13510] [ 697.741752][T13510] debugfs: out of free dentries, can not create symlink 'netns-9c4-4026534248-notrefcnt' [ 698.464051][T13537] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 708.542520][T13641] input: jJǸ-9%vJ86 as /devices/virtual/input/input12 [ 711.438118][T13649] Process accounting paused [ 713.002070][T13647] Process accounting paused [ 713.952360][T13696] FAULT_INJECTION: forcing a failure. [ 713.952360][T13696] name failslab, interval 1, probability 0, space 0, times 0 [ 713.967906][T13696] CPU: 1 UID: 0 PID: 13696 Comm: syz.2.1149 Not tainted syzkaller #0 PREEMPT(full) [ 713.967944][T13696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 713.967958][T13696] Call Trace: [ 713.967965][T13696] [ 713.967973][T13696] dump_stack_lvl+0x100/0x190 [ 713.968005][T13696] should_fail_ex.cold+0x5/0xa [ 713.968030][T13696] should_failslab+0xc2/0x120 [ 713.968064][T13696] kmem_cache_alloc_noprof+0x91/0x6a0 [ 713.968093][T13696] ? __pfx_map_id_range_down+0x10/0x10 [ 713.968151][T13696] ? security_inode_alloc+0x3b/0x2c0 [ 713.968224][T13696] security_inode_alloc+0x3b/0x2c0 [ 713.968262][T13696] inode_init_always_gfp+0xc77/0xfb0 [ 713.968307][T13696] alloc_inode+0x8e/0x250 [ 713.968350][T13696] new_inode+0x22/0x1c0 [ 713.968395][T13696] __debugfs_create_file+0x105/0x4f0 [ 713.968441][T13696] debugfs_create_file_full+0x41/0x60 [ 713.968486][T13696] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 713.968518][T13696] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 713.968574][T13696] ? kasan_save_track+0x14/0x30 [ 713.968614][T13696] ? __kasan_kmalloc+0xaa/0xb0 [ 713.968650][T13696] ? lockdep_init_map_type+0x5c/0x250 [ 713.968677][T13696] preinit_net.part.0+0x43b/0x920 [ 713.968716][T13696] copy_net_ns+0x339/0x7c0 [ 713.968741][T13696] create_new_namespaces+0x3ea/0xac0 [ 713.968771][T13696] unshare_nsproxy_namespaces+0xf2/0x220 [ 713.968801][T13696] ksys_unshare+0x438/0xab0 [ 713.968833][T13696] ? __pfx_ksys_unshare+0x10/0x10 [ 713.968873][T13696] __x64_sys_unshare+0x31/0x40 [ 713.968902][T13696] do_syscall_64+0x115/0x840 [ 713.968932][T13696] ? clear_bhb_loop+0x70/0xc0 [ 713.968959][T13696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.968983][T13696] RIP: 0033:0x7feb7a39e0d9 [ 713.969001][T13696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 713.969023][T13696] RSP: 002b:00007feb7b2b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 713.969045][T13696] RAX: ffffffffffffffda RBX: 00007feb7a625fa0 RCX: 00007feb7a39e0d9 [ 713.969059][T13696] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 713.969073][T13696] RBP: 00007feb7a435024 R08: 0000000000000000 R09: 0000000000000000 [ 713.969086][T13696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 713.969099][T13696] R13: 00007feb7a626038 R14: 00007feb7a625fa0 R15: 00007ffd7d148778 [ 713.969128][T13696] [ 714.246827][T13696] debugfs: out of free dentries, can not create file 'net_notrefcnt@ffff888078842a38' [ 714.596110][T13718] FAULT_INJECTION: forcing a failure. [ 714.596110][T13718] name failslab, interval 1, probability 0, space 0, times 0 [ 714.615630][T13718] CPU: 1 UID: 0 PID: 13718 Comm: syz.0.1153 Not tainted syzkaller #0 PREEMPT(full) [ 714.615662][T13718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 714.615679][T13718] Call Trace: [ 714.615686][T13718] [ 714.615695][T13718] dump_stack_lvl+0x100/0x190 [ 714.615753][T13718] should_fail_ex.cold+0x5/0xa [ 714.615794][T13718] should_failslab+0xc2/0x120 [ 714.615832][T13718] __kmalloc_noprof+0xfc/0x820 [ 714.615865][T13718] ? constrain_params_by_rules+0x175/0xd20 [ 714.615967][T13718] constrain_params_by_rules+0x175/0xd20 [ 714.615993][T13718] ? kfree+0x22b/0x6c0 [ 714.616021][T13718] ? constrain_params_by_rules+0xa88/0xd20 [ 714.616053][T13718] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 714.616086][T13718] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 714.616113][T13718] ? __x64_sys_ioctl+0x18e/0x210 [ 714.616166][T13718] ? do_syscall_64+0x115/0x840 [ 714.616203][T13718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.616239][T13718] ? snd_interval_refine+0x2d0/0x580 [ 714.616303][T13718] snd_pcm_hw_refine+0x82a/0xb40 [ 714.616334][T13718] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 714.616359][T13718] ? snd_pcm_hw_refine+0x35c/0xb40 [ 714.616390][T13718] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 714.616422][T13718] ? __kasan_kmalloc+0xaa/0xb0 [ 714.616458][T13718] snd_pcm_hw_param_first+0x2b0/0x680 [ 714.616493][T13718] snd_pcm_hw_param_near.constprop.0+0x739/0x850 [ 714.616527][T13718] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 714.616557][T13718] ? calc_src_frames.isra.0+0x17c/0x1c0 [ 714.616588][T13718] ? calc_dst_frames.constprop.0.isra.0+0xed/0x120 [ 714.616626][T13718] snd_pcm_oss_change_params_locked+0x18d9/0x39f0 [ 714.616668][T13718] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 714.616701][T13718] ? __pfx___mutex_lock+0x10/0x10 [ 714.616732][T13718] ? snd_pcm_oss_ioctl+0x1a0a/0x3790 [ 714.616760][T13718] ? snd_pcm_oss_ioctl+0x1a0a/0x3790 [ 714.616800][T13718] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 714.616839][T13718] snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 714.616873][T13718] snd_pcm_oss_ioctl+0x25aa/0x3790 [ 714.616904][T13718] ? __fget_files+0x215/0x3d0 [ 714.616926][T13718] ? hook_file_ioctl_common+0x140/0x440 [ 714.616961][T13718] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 714.616993][T13718] ? __fget_files+0x21f/0x3d0 [ 714.617047][T13718] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 714.617092][T13718] __x64_sys_ioctl+0x18e/0x210 [ 714.617133][T13718] do_syscall_64+0x115/0x840 [ 714.617163][T13718] ? clear_bhb_loop+0x70/0xc0 [ 714.617200][T13718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.617226][T13718] RIP: 0033:0x7f0d60b9e0d9 [ 714.617246][T13718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 714.617270][T13718] RSP: 002b:00007f0d61a6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 714.617293][T13718] RAX: ffffffffffffffda RBX: 00007f0d60e26180 RCX: 00007f0d60b9e0d9 [ 714.617310][T13718] RDX: 0000000000000000 RSI: 00000000c0045005 RDI: 0000000000000007 [ 714.617325][T13718] RBP: 00007f0d60c35024 R08: 0000000000000000 R09: 0000000000000000 [ 714.617355][T13718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 714.617369][T13718] R13: 00007f0d60e26218 R14: 00007f0d60e26180 R15: 00007ffd2c099698 [ 714.617400][T13718] [ 721.280886][T13790] FAULT_INJECTION: forcing a failure. [ 721.280886][T13790] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 721.353588][T13795] sg_write: data in/out 124/2 bytes for SCSI command 0x61-- guessing data in; [ 721.353588][T13795] program syz.3.1161 not setting count and/or reply_len properly [ 721.372194][T13790] CPU: 1 UID: 0 PID: 13790 Comm: syz.1.1170 Not tainted syzkaller #0 PREEMPT(full) [ 721.372235][T13790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 721.372255][T13790] Call Trace: [ 721.372267][T13790] [ 721.372280][T13790] dump_stack_lvl+0x100/0x190 [ 721.372327][T13790] should_fail_ex.cold+0x5/0xa [ 721.372360][T13790] ? fs_reclaim_acquire+0x70/0x100 [ 721.372413][T13790] should_fail_alloc_page+0xeb/0x140 [ 721.372468][T13790] prepare_alloc_pages+0x1f0/0x5f0 [ 721.372526][T13790] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 721.372572][T13790] ? __schedule+0x126e/0x6730 [ 721.372609][T13790] ? finish_task_switch.isra.0+0x3b6/0x10c0 [ 721.372661][T13790] ? __kasan_kmalloc+0xaa/0xb0 [ 721.372702][T13790] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 721.372736][T13790] ? relay_open_buf.part.0+0x91/0xb70 [ 721.372813][T13790] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 721.372858][T13790] ? __pfx___schedule+0x10/0x10 [ 721.372906][T13790] ? irqentry_exit+0x24d/0xa00 [ 721.373024][T13790] ? lockdep_hardirqs_on+0x78/0x100 [ 721.373086][T13790] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 721.373144][T13790] ? policy_nodemask+0xed/0x4f0 [ 721.373214][T13790] alloc_pages_mpol+0x1fb/0x540 [ 721.373270][T13790] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 721.373320][T13790] ? alloc_frozen_pages_noprof+0xa1/0x160 [ 721.373355][T13790] ? __sanitizer_cov_trace_pc+0x54/0x70 [ 721.373424][T13790] alloc_pages_noprof+0x1a/0x160 [ 721.373460][T13790] relay_open_buf.part.0+0x261/0xb70 [ 721.373520][T13790] relay_open+0x7b9/0xa00 [ 721.373570][T13790] blk_trace_setup_prepare+0x35c/0x6c0 [ 721.373640][T13790] blk_trace_setup+0x217/0x440 [ 721.373692][T13790] ? __pfx_blk_trace_setup+0x10/0x10 [ 721.373734][T13790] ? local_clock_noinstr+0xf6/0x100 [ 721.373788][T13790] ? __pfx_vsnprintf+0x10/0x10 [ 721.373893][T13790] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 721.373950][T13790] ? do_vfs_ioctl+0x226/0x13e0 [ 721.374008][T13790] blk_trace_ioctl+0x245/0x320 [ 721.374055][T13790] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 721.374109][T13790] ? find_held_lock+0x2b/0x80 [ 721.374152][T13790] ? __fget_files+0x215/0x3d0 [ 721.374194][T13790] ? hook_file_ioctl_common+0x140/0x440 [ 721.374247][T13790] blkdev_ioctl+0x17c/0x6f0 [ 721.374332][T13790] ? __pfx_blkdev_ioctl+0x10/0x10 [ 721.374374][T13790] ? __pfx_blkdev_ioctl+0x10/0x10 [ 721.374400][T13790] __x64_sys_ioctl+0x18e/0x210 [ 721.374438][T13790] do_syscall_64+0x115/0x840 [ 721.374468][T13790] ? clear_bhb_loop+0x70/0xc0 [ 721.374498][T13790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.374523][T13790] RIP: 0033:0x7f537e59e0d9 [ 721.374541][T13790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 721.374566][T13790] RSP: 002b:00007f537f3a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 721.374589][T13790] RAX: ffffffffffffffda RBX: 00007f537e826090 RCX: 00007f537e59e0d9 [ 721.374605][T13790] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000006 [ 721.374619][T13790] RBP: 00007f537e635024 R08: 0000000000000000 R09: 0000000000000000 [ 721.374634][T13790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 721.374648][T13790] R13: 00007f537e826128 R14: 00007f537e826090 R15: 00007fff21fcb038 [ 721.374680][T13790] [ 721.940792][T13781] Process accounting resumed [ 725.667615][T13815] Process accounting paused [ 732.127412][T13934] binder: 13918:13934 ioctl 400c620e 200000000240 returned -22 [ 735.960676][T11705] Bluetooth: hci2: unexpected event 0x05 length: 6 > 4 [ 737.052753][T13978] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 737.137924][T13978] vhci_hcd vhci_hcd.2: invalid port number 0 [ 741.964189][T14032] binder: 14008:14032 ioctl 400c620e 200000000240 returned -22 [ 743.543321][T14013] Process accounting resumed [ 743.833463][T14022] Process accounting resumed [ 743.941924][T14039] blktrace: Concurrent blktraces are not allowed on nbd5 [ 746.081558][T14074] futex_wake_op: syz.2.1206 tries to shift op by -2048; fix this program [ 746.106997][T14074] futex_wake_op: syz.2.1206 tries to shift op by -2048; fix this program [ 747.147307][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.155254][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.319304][T14099] FAULT_INJECTION: forcing a failure. [ 748.319304][T14099] name failslab, interval 1, probability 0, space 0, times 0 [ 748.354852][T14099] CPU: 0 UID: 0 PID: 14099 Comm: syz.0.1208 Not tainted syzkaller #0 PREEMPT(full) [ 748.354893][T14099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 748.354913][T14099] Call Trace: [ 748.354923][T14099] [ 748.354934][T14099] dump_stack_lvl+0x100/0x190 [ 748.354979][T14099] should_fail_ex.cold+0x5/0xa [ 748.355016][T14099] should_failslab+0xc2/0x120 [ 748.355064][T14099] __kmalloc_noprof+0xfc/0x820 [ 748.355103][T14099] ? tracepoint_add_func+0x3a8/0x1150 [ 748.355153][T14099] ? __pfx_blk_add_trace_rq_merge+0x10/0x10 [ 748.355198][T14099] tracepoint_add_func+0x3a8/0x1150 [ 748.355247][T14099] ? __pfx_blk_add_trace_rq_merge+0x10/0x10 [ 748.355298][T14099] ? __pfx_blk_add_trace_rq_merge+0x10/0x10 [ 748.355342][T14099] tracepoint_probe_register+0xc4/0x110 [ 748.355407][T14099] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 748.355460][T14099] ? __pfx_blk_add_trace_rq_merge+0x10/0x10 [ 748.355508][T14099] ? relay_open+0x793/0xa00 [ 748.355555][T14099] blk_register_tracepoints+0x75/0x440 [ 748.355590][T14099] blk_trace_setup_finalize+0x320/0x3a0 [ 748.355630][T14099] blk_trace_setup+0x254/0x440 [ 748.355676][T14099] ? __pfx_blk_trace_setup+0x10/0x10 [ 748.355715][T14099] ? local_clock_noinstr+0xf6/0x100 [ 748.355766][T14099] ? __pfx_vsnprintf+0x10/0x10 [ 748.355827][T14099] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 748.355877][T14099] ? do_vfs_ioctl+0x226/0x13e0 [ 748.355929][T14099] blk_trace_ioctl+0x245/0x320 [ 748.355973][T14099] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 748.356022][T14099] ? find_held_lock+0x2b/0x80 [ 748.356063][T14099] ? __fget_files+0x215/0x3d0 [ 748.356092][T14099] ? hook_file_ioctl_common+0x140/0x440 [ 748.356141][T14099] blkdev_ioctl+0x17c/0x6f0 [ 748.356174][T14099] ? __pfx_blkdev_ioctl+0x10/0x10 [ 748.356212][T14099] ? __pfx_blkdev_ioctl+0x10/0x10 [ 748.356246][T14099] __x64_sys_ioctl+0x18e/0x210 [ 748.356297][T14099] do_syscall_64+0x115/0x840 [ 748.356336][T14099] ? clear_bhb_loop+0x70/0xc0 [ 748.356376][T14099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.356415][T14099] RIP: 0033:0x7f0d60b9e0d9 [ 748.356442][T14099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 748.356474][T14099] RSP: 002b:00007f0d61a90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 748.356506][T14099] RAX: ffffffffffffffda RBX: 00007f0d60e26090 RCX: 00007f0d60b9e0d9 [ 748.356526][T14099] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000006 [ 748.356545][T14099] RBP: 00007f0d60c35024 R08: 0000000000000000 R09: 0000000000000000 [ 748.356564][T14099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 748.356582][T14099] R13: 00007f0d60e26128 R14: 00007f0d60e26090 R15: 00007ffd2c099698 [ 748.356624][T14099] [ 748.689483][T14099] ------------[ cut here ]------------ [ 748.695328][T14099] ret [ 748.695476][T14099] WARNING: kernel/trace/blktrace.c:1336 at blk_register_tracepoints+0x358/0x440, CPU#1: syz.0.1208/14099 [ 748.710956][T14099] Modules linked in: [ 748.715930][T14099] CPU: 1 UID: 0 PID: 14099 Comm: syz.0.1208 Not tainted syzkaller #0 PREEMPT(full) [ 748.725436][T14099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 748.735584][T14099] RIP: 0010:blk_register_tracepoints+0x358/0x440 [ 748.742227][T14099] Code: f7 ff 5b e9 ca d2 aa 09 e8 45 8e f7 ff 90 0f 0b 90 e9 ea fc ff ff e8 37 8e f7 ff 90 0f 0b 90 e9 09 fd ff ff e8 29 8e f7 ff 90 <0f> 0b 90 e9 28 fd ff ff e8 1b 8e f7 ff 90 0f 0b 90 e9 47 fd ff ff [ 748.762249][T14099] RSP: 0018:ffffc900044efaf8 EFLAGS: 00010283 [ 748.768431][T14099] RAX: 000000000006548a RBX: 00000000fffffff4 RCX: ffffc9001a1a3000 [ 748.776601][T14099] RDX: 0000000000080000 RSI: ffffffff821241b7 RDI: ffff88802957dd00 [ 748.785729][T14099] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 748.794692][T14099] R10: 00000000fffffff4 R11: 0000000000000001 R12: 200000000040000d [ 748.802837][T14099] R13: ffff8880270aa540 R14: ffffc900044efd98 R15: 0000000000000001 [ 748.810927][T14099] FS: 00007f0d61a906c0(0000) GS:ffff888123ee7000(0000) knlGS:0000000000000000 [ 748.819996][T14099] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 748.826671][T14099] CR2: 000020000041c000 CR3: 000000007b658000 CR4: 00000000003526f0 [ 748.834690][T14099] Call Trace: [ 748.838058][T14099] [ 748.841032][T14099] blk_trace_setup_finalize+0x320/0x3a0 [ 748.846724][T14099] blk_trace_setup+0x254/0x440 [ 748.851651][T14099] ? __pfx_blk_trace_setup+0x10/0x10 [ 748.857057][T14099] ? local_clock_noinstr+0xf6/0x100 [ 748.862316][T14099] ? __pfx_vsnprintf+0x10/0x10 [ 748.867230][T14099] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 748.873191][T14099] ? do_vfs_ioctl+0x226/0x13e0 [ 748.878107][T14099] blk_trace_ioctl+0x245/0x320 [ 748.882972][T14099] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 748.889468][T14099] ? find_held_lock+0x2b/0x80 [ 748.894231][T14099] ? __fget_files+0x215/0x3d0 [ 748.899709][T14099] ? hook_file_ioctl_common+0x140/0x440 [ 748.905423][T14099] blkdev_ioctl+0x17c/0x6f0 [ 748.909981][T14099] ? __pfx_blkdev_ioctl+0x10/0x10 [ 748.915128][T14099] ? __pfx_blkdev_ioctl+0x10/0x10 [ 748.920282][T14099] __x64_sys_ioctl+0x18e/0x210 [ 748.925138][T14099] do_syscall_64+0x115/0x840 [ 748.929817][T14099] ? clear_bhb_loop+0x70/0xc0 [ 748.934542][T14099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.940550][T14099] RIP: 0033:0x7f0d60b9e0d9 [ 748.945008][T14099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 748.964732][T14099] RSP: 002b:00007f0d61a90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 748.973414][T14099] RAX: ffffffffffffffda RBX: 00007f0d60e26090 RCX: 00007f0d60b9e0d9 [ 748.981482][T14099] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000006 [ 748.990626][T14099] RBP: 00007f0d60c35024 R08: 0000000000000000 R09: 0000000000000000 [ 748.999289][T14099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 749.007365][T14099] R13: 00007f0d60e26128 R14: 00007f0d60e26090 R15: 00007ffd2c099698 [ 749.015456][T14099] [ 749.018547][T14099] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 749.025855][T14099] CPU: 1 UID: 0 PID: 14099 Comm: syz.0.1208 Not tainted syzkaller #0 PREEMPT(full) [ 749.035270][T14099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 749.045364][T14099] Call Trace: [ 749.048686][T14099] [ 749.051649][T14099] dump_stack_lvl+0x100/0x190 [ 749.056391][T14099] vpanic+0x552/0x970 [ 749.060413][T14099] ? __pfx_vpanic+0x10/0x10 [ 749.064965][T14099] panic+0xd1/0xe0 [ 749.068739][T14099] ? __pfx_panic+0x10/0x10 [ 749.073226][T14099] check_panic_on_warn.cold+0x19/0x34 [ 749.078640][T14099] ? blk_register_tracepoints+0x358/0x440 [ 749.084387][T14099] __warn.cold+0x191/0x318 [ 749.088847][T14099] __report_bug+0x30f/0x440 [ 749.093492][T14099] ? blk_register_tracepoints+0x358/0x440 [ 749.099251][T14099] ? __pfx___report_bug+0x10/0x10 [ 749.104302][T14099] ? tracepoint_probe_register+0xd2/0x110 [ 749.110086][T14099] ? __kasan_kmalloc+0x8a/0xb0 [ 749.114894][T14099] ? __mutex_unlock_slowpath+0x35d/0x930 [ 749.120570][T14099] ? blk_register_tracepoints+0x358/0x440 [ 749.126337][T14099] report_bug+0xb2/0x220 [ 749.130637][T14099] ? blk_register_tracepoints+0x358/0x440 [ 749.136398][T14099] handle_bug+0x16a/0x2a0 [ 749.140769][T14099] exc_invalid_op+0x17/0x50 [ 749.145312][T14099] asm_exc_invalid_op+0x1a/0x20 [ 749.150193][T14099] RIP: 0010:blk_register_tracepoints+0x358/0x440 [ 749.156552][T14099] Code: f7 ff 5b e9 ca d2 aa 09 e8 45 8e f7 ff 90 0f 0b 90 e9 ea fc ff ff e8 37 8e f7 ff 90 0f 0b 90 e9 09 fd ff ff e8 29 8e f7 ff 90 <0f> 0b 90 e9 28 fd ff ff e8 1b 8e f7 ff 90 0f 0b 90 e9 47 fd ff ff [ 749.176182][T14099] RSP: 0018:ffffc900044efaf8 EFLAGS: 00010283 [ 749.182284][T14099] RAX: 000000000006548a RBX: 00000000fffffff4 RCX: ffffc9001a1a3000 [ 749.190279][T14099] RDX: 0000000000080000 RSI: ffffffff821241b7 RDI: ffff88802957dd00 [ 749.198310][T14099] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 749.206305][T14099] R10: 00000000fffffff4 R11: 0000000000000001 R12: 200000000040000d [ 749.214300][T14099] R13: ffff8880270aa540 R14: ffffc900044efd98 R15: 0000000000000001 [ 749.222326][T14099] ? blk_register_tracepoints+0x357/0x440 [ 749.228102][T14099] ? blk_register_tracepoints+0x357/0x440 [ 749.233849][T14099] blk_trace_setup_finalize+0x320/0x3a0 [ 749.239426][T14099] blk_trace_setup+0x254/0x440 [ 749.244235][T14099] ? __pfx_blk_trace_setup+0x10/0x10 [ 749.249578][T14099] ? local_clock_noinstr+0xf6/0x100 [ 749.254830][T14099] ? __pfx_vsnprintf+0x10/0x10 [ 749.259643][T14099] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 749.265573][T14099] ? do_vfs_ioctl+0x226/0x13e0 [ 749.270377][T14099] blk_trace_ioctl+0x245/0x320 [ 749.275180][T14099] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 749.280501][T14099] ? find_held_lock+0x2b/0x80 [ 749.285207][T14099] ? __fget_files+0x215/0x3d0 [ 749.289935][T14099] ? hook_file_ioctl_common+0x140/0x440 [ 749.295530][T14099] blkdev_ioctl+0x17c/0x6f0 [ 749.300058][T14099] ? __pfx_blkdev_ioctl+0x10/0x10 [ 749.305132][T14099] ? __pfx_blkdev_ioctl+0x10/0x10 [ 749.310185][T14099] __x64_sys_ioctl+0x18e/0x210 [ 749.314994][T14099] do_syscall_64+0x115/0x840 [ 749.319611][T14099] ? clear_bhb_loop+0x70/0xc0 [ 749.324333][T14099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.330253][T14099] RIP: 0033:0x7f0d60b9e0d9 [ 749.334694][T14099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 749.354357][T14099] RSP: 002b:00007f0d61a90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 749.362807][T14099] RAX: ffffffffffffffda RBX: 00007f0d60e26090 RCX: 00007f0d60b9e0d9 [ 749.370821][T14099] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000006 [ 749.378821][T14099] RBP: 00007f0d60c35024 R08: 0000000000000000 R09: 0000000000000000 [ 749.386810][T14099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 749.394815][T14099] R13: 00007f0d60e26128 R14: 00007f0d60e26090 R15: 00007ffd2c099698 [ 749.402825][T14099] [ 749.406571][T14099] Kernel Offset: disabled [ 749.410906][T14099] Rebooting in 86400 seconds..