last executing test programs: 12.139201997s ago: executing program 3 (id=5629): mmap$auto(0xfffffffffffffffe, 0x40000a, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/time_for_children\x00') openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x28002, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x10001) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000240)={0x0, 0x7}, 0x2) sysfs$auto(0x2, 0x24, 0x0) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r3, 0x0, 0xaf0) mmap$auto(0x0, 0x80004, 0xe2, 0xeb1, 0x405, 0x8000) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000000c0)={0x7d, 0x6, 0x102, 0x6, 0x3, 0x6, 0x0}) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r5 = socket(0x15, 0x5, 0x0) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event_pid\x00', 0x22b01, 0x0) sendmsg$auto(r5, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) keyctl$auto(0x6, 0xfffffffffffffffd, 0xee01, 0x0, 0xfff) r6 = getpgid(0x0) r7 = pidfd_open$auto(r6, 0x0) setns(r7, 0x48000080) mprotect$auto(0x110c230000, 0x41, 0xc) unshare$auto(0x40000080) 10.667312528s ago: executing program 3 (id=5634): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb2, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x8, 0x1, 0x0, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x106) (async) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) ioctl$auto(0x4000000000000c8, 0x400454cc, 0x6f) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) bpf$auto(0x0, 0x0, 0x14) (async) bpf$auto(0x0, 0x0, 0x14) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) getsockname$auto(r1, 0x0, 0x0) socket(0x21, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) (async) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) setsockopt$auto(0x3, 0x0, 0x28, 0xfffffffffffffffc, 0x70) (async) setsockopt$auto(0x3, 0x0, 0x28, 0xfffffffffffffffc, 0x70) write$auto(0x3, 0x0, 0x1) write$auto(0x3, 0x0, 0xfffffdef) setresuid$auto(0x0, 0x0, 0xee01) (async) setresuid$auto(0x0, 0x0, 0xee01) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = fanotify_init$auto(0x5, 0x0) fanotify_mark$auto(r2, 0x205, 0xa, 0x4, 0x0) 6.390103761s ago: executing program 3 (id=5645): waitid$auto(0x5, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)={{0x8, 0x80}, {0x2, 0x6}, 0x4, 0x4, 0x1, 0x3, 0x0, 0x8000, 0x80000000, 0x7, 0xb7, 0x5d9, 0x5, 0x7ff, 0x2055}) pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/cpuidle/current_governor\x00', 0xa42, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), r1) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)={0x14, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {0x4, 0x0, 0x900}}, 0x14}, 0x1, 0x3000700, 0x0, 0x101}, 0x8010) sendfile$auto(r0, r0, 0x0, 0x4000000000001) 6.227197592s ago: executing program 3 (id=5648): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000680)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82902, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f00000028c0), 0x100, 0x0) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000000)={{0x3, 0x1002, 0xfffffffc, 0x5, 0x2}, "654c6dbc7a4d30983899a7e1325b6a29ba1e18441074052a3fa6c3ccf1bf00"}) readv$auto(r2, &(0x7f00000000c0)={0x0, 0x4c786f70}, 0x2) ioctl$auto(0x3, 0xae41, r0) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) 5.82416039s ago: executing program 3 (id=5651): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rxrpc/calls\x00', 0x101000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socket(0x2, 0x80802, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0xa, 0x3, 0x3b) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r0 = socket(0x2b, 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r1, 0x0, 0x3) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x2020008, 0xffffffffffffffff, 0xeb1, 0xfffffffffffffffa, 0x8000) connect$auto(0x3, 0x0, 0x54) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x400, 0x2f, 0x940, 0x1ffe0, 0x5a6, 0x3, 0x100002, 0x7f, 0x767, 0xfff, 0x7, 0xb2, 0x9, 0x4, 0x3, 0x1, 0x4, 0x20, 0x0, 0x1, 0x202, 0x62c, 0x40000000, 0x0, 0x9, 0x0, 0x0, 0x2, [0x251, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x200000, 0x1, 0x8000000000000000, 0x1, 0x0, 0x1, 0x0, 0x87ffd, 0x0, 0x6, 0xffffffffffffffff, 0x6, 0xb, 0x0, 0x0, 0x6, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1]}, 0x1fa, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 5.054836549s ago: executing program 3 (id=5654): mmap$auto(0x0, 0x6, 0x6, 0xeb1, 0xffffffffffffffff, 0x8003) r0 = prctl$auto(0x1000000003b, 0xfffffffffffffffe, 0x4, 0x9, 0x7) syz_clone(0x100211, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter$auto(0xffffffffffffffff, 0x9, 0x820e, 0x8b, 0x0, 0x18) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x3b9) prctl$auto(0x1e, 0x1, 0x0, 0x4, 0x3) write$auto(0xca, &(0x7f0000000240)='\x80\x1d\x00\x00\x05\x01$p\xe3\xfa', 0x0) ioctl$auto_TUNATTACHFILTER(r0, 0x401054d5, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000100)='9\x00;T\x16\b\x06\x00\n\x00\xecQ\xb4\xa2;\xfbj\x98\x05?\xe6\xf8i\x03\b\xfaP\x88\xaf\xae\xf1[c\xab\xdc\xe2\\\x98o\x0e\xf6\xe4\xcci>>\xf5\xf0w\xfc\xfb6h\x1c98\':Y<\xd4\xe9^\xcb.\x93\xcaQ\xdb\"P\xc0\xd8`\xbbqP\xb8\xc5\xd7\x18\xa1\xc4\xdf\xbe\xdb\x14\x18Y\xcb\x7f\xf4', 0x40000012) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv6/conf/default/stable_secret\x00', 0x40d02, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) r2 = socket(0x2b, 0x1, 0x0) getsockopt$auto(r2, 0x0, 0x60, 0x0, &(0x7f00000000c0)=0x44) write$auto_proc_sys_file_operations_proc_sysctl(r1, 0x0, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x202, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x5) fchdir$auto(0xffffffffffffffff) syz_clone(0x20011, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) bpf$auto(0x6, 0xffffffffffffffff, 0x0) 4.95812397s ago: executing program 2 (id=5655): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) setrlimit$auto(0xc, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto_PR_SET_TIMING(0xe, 0x3, 0x9, 0xc, 0x8) r1 = open(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x80400, 0xb5d1af1605322ddc) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000001c0), r2) sendmsg$auto_TIPC_NL_PUBL_GET(r2, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000003900)={&(0x7f0000000000)={0x20, r3, 0xf01, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@typed={0x7, 0x2, 0x0, 0x0, @str='@+\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x840) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) write$auto(0x3, 0x0, 0xfffffdef) r4 = open_by_handle_at$auto(r1, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6) sendfile$auto(r4, r1, 0x0, 0x2) syz_clone3(&(0x7f00000003c0)={0x383201180, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) io_uring_setup$auto(0x2, &(0x7f0000000180)={0x6, 0x5, 0x1, 0xfffff001, 0x8, 0xe, r1, [0x1, 0x5, 0x6], {0x76, 0x15, 0x6, 0x800, 0x375, 0x4, 0x6, 0x401, 0xe}, {0x316, 0x7fff, 0x800, 0x5, 0x4, 0x3, 0x0, 0xfffffe00, 0x2}}) 4.821157794s ago: executing program 1 (id=5656): mmap$auto(0xffffffffffffffff, 0x400009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0xffffffffffffffff, 0x8, 0xfffffffc) r0 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x8004, 0xdf, 0x9b72, 0x7, 0x28000) r1 = fsopen$auto(0x0, 0x1) mmap$auto(0xabb, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) mremap$auto(0x1ff000, 0xff, 0x843, 0x3, 0xfffff000) pipe$auto(0x0) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) fsconfig$auto_SHMEM_HUGE_NEVER(r0, 0x9, &(0x7f0000000000)=',\x00', &(0x7f0000000040), 0x0) futimesat$auto(r1, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x6, 0x40}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x8000, 0x0) read$auto(r3, 0x0, 0x7) writev$auto(r2, &(0x7f0000000200)={0x0, 0xb}, 0x200000003) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) 4.636331883s ago: executing program 0 (id=5657): mmap$auto(0xfffffffffffffffe, 0x40000a, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x401, 0x2020007, 0x3, 0xeb4, 0xfffffffffffffffa, 0x3ff) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x4, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_enter$auto(0x3, 0x0, 0x1, 0x3, 0x0, 0x2) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) io_uring_enter$auto(0x3, 0x1, 0x2688, 0x5, 0x0, 0x7) 4.403411163s ago: executing program 2 (id=5658): mmap$auto(0xffffffffffffffff, 0x400009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0xffffffffffffffff, 0x8, 0xfffffffc) r0 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x8004, 0xdf, 0x9b72, 0x7, 0x28000) r1 = fsopen$auto(0x0, 0x1) mmap$auto(0xabb, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) mremap$auto(0x1ff000, 0xff, 0x843, 0x3, 0xfffff000) pipe$auto(0x0) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) fsconfig$auto_SHMEM_HUGE_NEVER(r0, 0x9, &(0x7f0000000000)=',\x00', &(0x7f0000000040), 0x0) futimesat$auto(r1, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x6, 0x40}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x8000, 0x0) read$auto(r2, 0x0, 0x7) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) 4.196344371s ago: executing program 0 (id=5659): mmap$auto(0x0, 0x6, 0x6, 0xeb1, 0xffffffffffffffff, 0x8003) r0 = prctl$auto(0x1000000003b, 0xfffffffffffffffe, 0x4, 0x9, 0x7) syz_clone(0x100211, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter$auto(0xffffffffffffffff, 0x9, 0x820e, 0x8b, 0x0, 0x18) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x3b9) prctl$auto(0x1e, 0x1, 0x0, 0x4, 0x3) write$auto(0xca, &(0x7f0000000240)='\x80\x1d\x00\x00\x05\x01$p\xe3\xfa', 0x0) ioctl$auto_TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x8, 0x0}) write$auto(0xffffffffffffffff, &(0x7f0000000100)='9\x00;T\x16\b\x06\x00\n\x00\xecQ\xb4\xa2;\xfbj\x98\x05?\xe6\xf8i\x03\b\xfaP\x88\xaf\xae\xf1[c\xab\xdc\xe2\\\x98o\x0e\xf6\xe4\xcci>>\xf5\xf0w\xfc\xfb6h\x1c98\':Y<\xd4\xe9^\xcb.\x93\xcaQ\xdb\"P\xc0\xd8`\xbbqP\xb8\xc5\xd7\x18\xa1\xc4\xdf\xbe\xdb\x14\x18Y\xcb\x7f\xf4', 0x40000012) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv6/conf/default/stable_secret\x00', 0x40d02, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) r2 = socket(0x2b, 0x1, 0x0) getsockopt$auto(r2, 0x0, 0x60, 0x0, &(0x7f00000000c0)=0x44) write$auto_proc_sys_file_operations_proc_sysctl(r1, 0x0, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x202, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x5) fchdir$auto(0xffffffffffffffff) syz_clone(0x20011, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) bpf$auto(0x6, 0xffffffffffffffff, 0x0) 3.490830879s ago: executing program 1 (id=5660): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000680)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82902, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f00000028c0), 0x100, 0x0) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000000)={{0x3, 0x1002, 0xfffffffc, 0x5, 0x2}, "654c6dbc7a4d30983899a7e1325b6a29ba1e18441074052a3fa6c3ccf1bf00"}) readv$auto(r2, &(0x7f00000000c0)={0x0, 0x4c786f70}, 0x2) ioctl$auto(0x3, 0xae41, r0) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) 3.275312629s ago: executing program 2 (id=5661): r0 = openat$auto_nodes_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) msgctl$auto_MSG_STAT_ANY(0x1, 0xd, &(0x7f0000000200)={{0x1ff, 0xffffffffffffffff, 0xee00, 0xfffffff7, 0x2, 0x7, 0x2}, &(0x7f0000000180)=0x7, &(0x7f00000001c0)=0x6, 0x0, 0x1ff, 0xfffffffffffffe00, 0x8, 0xdcc, 0x8, 0x9, 0x8, @raw=0xfffffffc, @raw}) shmctl$auto_SHM_INFO(0x0, 0xe, &(0x7f0000001240)={{0xfff, 0xffffffffffffffff, 0xee01, 0xc6, 0xa, 0x7, 0x7}, 0x5, 0xad61, 0x219c, 0x2, @raw=0x4, @raw=0x5, 0x644, 0x0, &(0x7f00000001c0)="93dd9832761d7efb958d40cf71852aa9f850dd4ee013533facda51cc23668897ca66e0805fc9b3a5e003a943b3347c31cca6b8dc0899b486c12b21f4d978784a212e7910651b5825bc765b9fae99f38b96c0dbc29a24845941", &(0x7f0000000240)="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"}) r3 = setfsuid$auto(0xee00) shmctl$auto_IPC_RMID(0x0, 0x0, &(0x7f0000002900)={{0x3, r3, 0xee00, 0x9, 0x17, 0x6, 0x1}, 0x6, 0x4, 0x7, 0x2, @raw=0xfffffff8, @raw=0x5, 0x80, 0x0, 0x0, &(0x7f0000002800)="98184e760a0f452eb11ea06b99ff21207e3b8c3b220044babfe4265728b83289334ad0fe741aa5ca55a08562caac2a4250362d60e4fa7c638f6df5ce567f74be13b83c270559872f67c6a2b22bf7734c63c04d9ee81bc615e00b15ccc53a5b6ed9157d27379564431ff2b3f0b4fda06486a9c5a82249d257871870a1070a15c7beaadf0dc4213674015e96a424cd97bb46607a111c53e42e0b"}) r4 = getegid() fsconfig$auto(0xffffffffffffffff, 0x3, 0x0, 0x0, r4) keyctl$auto(0x200, r2, r3, r4, 0x5) ioctl$auto_XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, &(0x7f0000000280)={0x77e25a37, @inferred=r0, @raw=0x2e2, 0x3b, 0x6, '\x00', {0x3, 0x0, 0x0, r1, r4, 0x3, 0x6, 0x8, {0x1ff, 0x7}, {0x4, 0x4}, {0x8, 0x40}, 0x1, 0x7, 0x8, 0x1, 0xa, 0x0, 0x2, 0x2, 0xa45, 0x6, '\x00', 0x5, 0x7, 0x3, 0x7}}) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/ttyS0\x00', 0xa102, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyza\x00', 0x80, 0x0) ioctl$auto_TIOCSTI2(r5, 0x5412, &(0x7f0000000080)="21764cab6a2ece01c64a86dc52bce25e9aaa91f70e3346a000ef676bb80d5f36c04e73e640f56b1201fd478bb28be72a34bcef4cd663aa02bea849b8032dd761a6c2ba4c9b4a1fcc28c1774e52eaddaa136e07a4a93d743f550fd4fdded2dd639c29c80365617db4a6b31a67cb7f3af7d85284f56c3b356447c558197becd8007f08716cb2a91a7cffb5be01d03eebec") r6 = fanotify_init$auto(0x200, 0x200) ioctl$auto_PPPIOCSMRU(r6, 0x40047452, &(0x7f0000000000)=0x401) 3.150132733s ago: executing program 2 (id=5663): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rxrpc/calls\x00', 0x101000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socket(0x2, 0x80802, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0xa, 0x3, 0x3b) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r0 = socket(0x2b, 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r1, 0x0, 0x3) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x2020008, 0xffffffffffffffff, 0xeb1, 0xfffffffffffffffa, 0x8000) connect$auto(0x3, 0x0, 0x54) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x400, 0x2f, 0x940, 0x1ffe0, 0x5a6, 0x3, 0x100002, 0x7f, 0x767, 0xfff, 0x7, 0xb2, 0x9, 0x4, 0x3, 0x1, 0x4, 0x20, 0x0, 0x1, 0x202, 0x62c, 0x40000000, 0x0, 0x9, 0x0, 0x0, 0x2, [0x251, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x200000, 0x1, 0x8000000000000000, 0x1, 0x0, 0x1, 0x0, 0x87ffd, 0x0, 0x6, 0xffffffffffffffff, 0x6, 0xb, 0x0, 0x0, 0x6, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1]}, 0x1fa, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 3.031215862s ago: executing program 1 (id=5664): sendmsg$auto_NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x8840) r0 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=' .\x00\x00', @ANYRES16=r0, @ANYBLOB="01002ebd5100fbcbdf25010012ea03000180072e01"], 0x2e20}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x4000000) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kcore\x00', 0x200, 0x0) pread64$auto(r1, 0x0, 0x800003, 0x2e6c) mmap$auto(0x0, 0x4, 0x400002, 0x40eb1, 0x602, 0x2ffffffffffc) setresgid$auto(0x0, 0x6, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e1d, @empty}, 0xff) r2 = socket(0xa, 0x801, 0x84) socket(0xa, 0x5, 0x0) ioctl$auto_FS_IOC_GETFSUUID(r2, 0x80111500, 0xfffffffffffffff9) io_uring_setup$auto(0x6, 0x0) 2.720664275s ago: executing program 0 (id=5665): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.3/usb4/4-0:1.0/authorized\x00', 0x10b142, 0x0) write$auto(r0, &(0x7f00000007c0)='f\x00\xb9:\xaa\xc1\r\x02T\xf5\b\x00\x00\x00\x00\x00\x00\x00\xa1\xd0\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xcc!\"\xa6\"jH\xcd\x10&b/\x9a\xf1w\xddS\x87\xd1vi\xa9\xeaM\x1dY\xa6\x8d\xf2\\\xac\xe1\xcf\xf7\xff\xff\x148\t\xba\xa0Z\x00M\xbcHM{\xa9\xf1R3X\xdfMbe\t\t\x86\x11v\xa2W\x93m\xd9\x93\x98.7Z\xe7|\x9f\x88\x05\x9ej\xc5\xfaT\xa0\x9a\\i\xd1\xb3\x02\xfa\xfeaq\x8d\xf1\xba\xaf\xcc\xce\xb2\xd3~TR\xf1\xad\xd0\x90n\xb6\xd0\xfc(p\xa3\xabk\x19\xcb\xfda\xff&\xad1\x95\xc5\xa9Gb\xe3\xa4\xf1\xe2\x91\x0e\x91iy\xba%+=\xb7\xd3D,\x19\b\x00\x00\x00\x00\x00\x00\x00\xadG\x94\v\xff\xa4\xfc\x95\x00By\xe9\x80\xd3U\xcd9\xe0\xbc\x8cK\xf3\xfd\x89\xda\xaeH.\xe3\x95Xbw\x02\x99\x03\x00\x00\x00\x00\x00\x00\x00\xaf\xc3\x89\x91\x19\xfc+\xe9l\xd3\xf5\x00\x00\x00\x00\x00\x00\x00\x85%c\xa6\x0f\xcfI\xb4a\x1d\xc4\x8f\x12X\xdf\xc2\xd7\x8e\xf4\xb9_\xf6\x10\xfc\x9b\xce\xab\xcf\xa9_\x88\xf4\x1b\x12\x12N\f\x84\r\vsI\x86\xe9\xe6J\xb8\xe4\x8f\x02\x9e\xf45\xd9\xf1\xbd\xfd\x97\xd8OU\t\x9e2K\xe2*~\x9dIe\x00\x00\x00\x00\x00\x00\xce;E\x8c\x05~\x1f\xa5\xa4\x9d\xf6\'\xc4\xf7\xa3\xf2\xfb\x85z>\xd71\xb8\x83\x8e\xa9c6I\x8f\x00\xb2\x03\xfd3\xb8\xe9Xo\xaa\xaeg\xb3\x9e\x8fM:\xa5\x1c \xbe\xfe\"\xa1\x11\xf4~\xa1\x90D/e\xe1\xb1C:}\xd2\x9dT\xc1\xd6[Ld\x06\xee\xc6\xe4\x99uT\xfdl\x94\xe1:\'2aO\xf1\xfa8l\n\xe0l\x1c\x89\xd7U\x99\xe9d?\x04\xd8\xf3\x9c\xd8t\x88@\x89\x15p\x84\xad\xa3V=,U\xa4_\xb9\xa7\xd7O\x91\xb2\x03\xbe\xd5\xa8\x03o\x0e\xa7\x93\xabubg\x10\x19\x82D\xa7\xae9\xf1\xc0\n\xfe;n)OAV\xfe\x8fE-\xea\x7fzO0\xde\xc0WK\xe1\x9b\xfe\xbfR\x8c$p\xf0\xe4\xa5\xbe_\x8d:\xd6\xc5\xf5\x80+\xe6O', 0x181) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/cpuidle/current_governor\x00', 0xa42, 0x0) ioctl$auto_VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f00000000c0)=r0) syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000080), r2) sendfile$auto(r1, r1, 0x0, 0x4000000000001) 2.385118881s ago: executing program 0 (id=5666): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x11, 0x2, 0x300) rt_sigqueueinfo$auto(0x0, 0x4, &(0x7f0000000000)={@siginfo_0_0={0xf5, 0x14, 0x7e73, @_timer={0x0, 0x80000001, @sival_int=0x81, 0x1}}}) r1 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f00000004c0)="5959e7488ae60100000000000000ea8a549f1ce466a26be8b0b50eff40c66d6bf0c981a0db5edba528b493edda4a033655e89e1afc06676facc65afab54cda45f2ad3924d156aefe5c4440066fd4ff81c0775ed28c48a9c3320b51e47130f5ee7876acc93e3cbc4466a3c59d17c14b673b133ed7f9d375d958b67da4f8a518498bcf707df76d56b5ccdaa094c3928143aece640a3da7a02e370ba93d245db9", 0xe7}, 0x8, &(0x7f0000000180), 0x5, 0x2}, 0x5}, 0x2, 0x100) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb) ioctl$auto_SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000240)) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) preadv$auto(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000001c0)="522e68880b66e736e04b92f674ada7760ea80e37bb469357500e017f29e7eb2c5ebfee7548efd523ae6199e3f6caa510b91366e1748c71e2d79dbbb4e58f96d122c3685ce6b3fda30b6a3d7de0adf1b3094034bd55236900b4729261d5600a6434b9ba8948be7ac19251ce944fc54c9f7ac11b4e82d8291daf1f9f58cd41df5c0530fbcfcb3b56df2bf719c93f18577a1173804afe51a9d1dcac", 0xff}, 0x5, 0x0, 0x4) r2 = socket(0x2, 0x1, 0x106) setsockopt$auto(r2, 0x6, 0x6, &(0x7f0000000700)='\b\x00\x00\x00\xe4\x15\rq\tW\x9d=\x1e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe7\x9b\xdd\x1cp\x19\xa0\x9dHN\xb4\x7f\x7f\xa0\xeaI\xa1\x0f/\xfc\x8e\xf9\xa6x\xa0\xdeo\t\x826Xe(\x0e\xffr\r\x8d\xefh\xdbG\x8b\xde\xfd$\'\a ]\x91YP\x94\xd0\xd0\x02\x10\xb1_z\xa2Ql\x8c\x91\xca4\x118\xcd\xc3\x97\x03J:\x1e\xe5f\xcaq\xdf`\x01;\xf9{D2\xc9WV)\xa3JH\xf5\xf9\x16\xac\xa4\x155\x80\x01I\xd9\xa5\xd0\xf1\xbd\xa0\xa4\xa5q\xc6F\x940\x00\xf8\xef\xa4\xfd\xd2z\xf5\x91z<\x9f\xf0\x8f.\x81\x84\xed J&\x8f\xd9\xab-\xf8\xd0\xd3\xcea\x91pM0\xcd\x18\xb4\xe0u\x99\b\x19I\x87\xbb/1\xf9\x84\xbf\xcc\x0e5\xba\x9a\xba\xfb\xde\x16kU\x97\xec\xc6\xe15u\xd5\x94D\xab\xec.K\xfbD\x0f\xc16g\xf3`\x03O\xae]B@\x0e!n\x8dy\x97\xaa\xa7\x12\xbbyD\xd3\x82\xb3\x9a\x88L\x1b\x8b\xfb\xe7\xc8\xa8\xf66\x16\xe1\x04T\'/8a\xeb\xe6\xe6+!\x97\b\xc8;P\f~\x88\x02\x91 \xd3\x93\xa7.xCNA\xcax)\xb4\xdf\xfe/\xe40\xc6y\x13\x8d\bfJ\x85\x05\xf5\x9f\xea\x15\xe9{3\xcc\xac\x94w.%\x11_\xd3\xe2\xe9\x8c\x9c\xb1\xfb\xf9o\xf4\xc9\x88\xbd\x90p\xae\x8ap\xb9\xa4\xb7\xadv&\x999\xdf\x83\xae\xff\xa5\xfc\xd3\xc0!\xdc\xc4\xa0\xce8:\xeb~\x9b_F\x8f\xcaY\xa9\x89@\x99)\x1c\x8b\xc5\xb7\x10\xd1\xc8`\xb6\x8f\x136\xc3\x1e\xbd\x8e$\"\xbfJ\n\xd6\x0f\x9d\xcbr\xb7\xa8\xed\r+$\x94\x9b\xfe8\x8ao\xf8\xba\'i\xf1\xd3\x9c7P\xe3\x14\xa2\x1b-\xbb\xae\xe3P#:$\xaf\aB\xd2\x95\x18\\r\xd1\x80\x9fD\xd5\xaba\xc8\xd4\xd1\xb6\xf5\xb9\x16\xbb\xbc\xd6\xb3+\xdf\xfc\x89\x1f\xe9M|\x0e?g\x18\v\"', 0x4000007) getsockopt$auto(r2, 0x6, 0x6, &(0x7f0000000000)='\b\x00\x00\x00\xe4\x15\rq\tW\x9d=\x1e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe7\x9b\xdd\x1cp\x19\xa0\x9dHN\xb4\x7f\x7f\xa0\xeaI\xa1\x0f/\xfc\x8e\xf9\xa6x\xa0\xdeo\t\x826Xe(\x0e\xffr\r\x8d\xefh\xdbG\x8b\xde\xfd$\'\a ]\x91YP\x94\xd0\xd0\x02\x10\xb1_z\xa2Ql\x8c\x91\xca4\x118\xcd\xc3\x97\xdaJ:\x1e\xe5f\xcaq\xdf`\x01;\xf9{D2\xc9WV)\xa3JH\xf5\xf9\x16\xac\xa4\x155\x80\x01I\xd9\xa5\xd0\xf1\xbd\xa0\xa4\xa5q\xc6F\x940\x00\xf8\xef\xa4\xfd\xd2z\xf5\x91z<\x9f\xf0\x8f/\x81\x84\xed J&\x8f\xd9\xab-\xf8\xd0\xd3\xcea\x91pM0\xcd\x18\xb4\xe0u\x99\b', &(0x7f00000000c0)=0x800) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0xffffffffffffffff, 0x4008550d, 0xffffffffffffffff) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) r4 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r4, &(0x7f0000000000)=' ', 0x1) settimeofday$auto(&(0x7f0000000180)={0x6ddb8b07, 0x9}, 0x0) write$auto(r3, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00', 0x9) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/arp\x00', 0x101000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 2.12534817s ago: executing program 2 (id=5667): mmap$auto(0xfffffffffffffffe, 0x40000a, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/time_for_children\x00') mmap$auto(0x0, 0x80004, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = socket(0x15, 0x5, 0x0) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x22b01, 0x0) sendmsg$auto(r1, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) r2 = getpgid(0x0) r3 = pidfd_open$auto(r2, 0x0) setns(r3, 0x48000080) mprotect$auto(0x110c230000, 0x41, 0xc) unshare$auto(0x40000080) mremap$auto(0x0, 0xbfffffffffffffff, 0x401, 0x0, 0x7fffffffb000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) unshare$auto(0x40000080) 1.470888971s ago: executing program 1 (id=5668): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x400000f5, 0x402, 0xc0}]}) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_RELEASE_PORT(r2, 0x80045519, &(0x7f0000000000)=0xfffffffe) ioctl$auto_USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000000c0)={0x2, 0x8, 0x8000004, 0x81, &(0x7f0000000040)="a006", 0x100400, 0x2d, 0x9, @number_of_packets=0xfffffff7, 0x456, 0x0, 0x0}) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x1e, 0x5, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) (async) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r1) (async) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x400000f5, 0x402, 0xc0}]}) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) (async) ioctl$auto_USBDEVFS_RELEASE_PORT(r2, 0x80045519, &(0x7f0000000000)=0xfffffffe) (async) ioctl$auto_USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000000c0)={0x2, 0x8, 0x8000004, 0x81, &(0x7f0000000040)="a006", 0x100400, 0x2d, 0x9, @number_of_packets=0xfffffff7, 0x456, 0x0, 0x0}) (async) 1.033354085s ago: executing program 1 (id=5669): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) write$auto(r1, &(0x7f0000000200)='7\x00\\\xb4\x04|\x03\xff\x00\x00\x00\x00\x00\x00\x00\xa4\x1e\xb6U\"\x01h\x9b\x00\x00\x00\x00\x1c\xc7k', 0x81) r2 = prctl$auto(0x42, 0x0, 0x0, 0x1, 0x0) ioctl$auto_BLKROSET(r2, 0x125d, 0x0) timer_create$auto(0x3, 0x0, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x1081, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x6) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x2002, 0x400008, 0xdb, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4000000040, 0x0, 0x3, 0x2) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r5 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fff7fff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) io_uring_register$auto(r5, 0x11, 0x0, 0x56d) socket(0x2, 0x1, 0x106) socket(0x2b, 0x1, 0xa) setsockopt$auto(0x4, 0x0, 0x3, &(0x7f0000000000)='!/*:(*\'\x00', 0x800000e) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) 1.027615378s ago: executing program 0 (id=5670): mmap$auto(0xfffffffffffffffe, 0x40000a, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$auto_VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x100000200000000) mmap$auto(0x0, 0x3, 0x403, 0xeb4, 0xfffffffffffffffa, 0x7) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x4, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_enter$auto(0x3, 0x0, 0x1, 0x3, 0x0, 0x2) socket(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) io_uring_enter$auto(0x3, 0x1, 0x2688, 0x5, 0x0, 0x7) 545.447322ms ago: executing program 0 (id=5671): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) (async) mmap$auto(0x0, 0x202000a, 0x100000003, 0x8000000000eb2, r0, 0x8000) (async) socketpair$auto(0x9, 0x2, 0x8000000000000000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async, rerun: 32) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) unshare$auto(0x40000080) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x13, 0x2003ff57696, 0x9b70, 0x2, 0xa6) semctl$auto(0x4000001ff, 0xffffffffffffffff, 0x13, 0x3) (async) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0) timer_settime$auto(0x0, 0xd80, 0x0, 0x0) (async, rerun: 32) mmap$auto(0x4, 0x2, 0xeffffffffffffffc, 0x400000000eb1, 0xfffffffffffffffa, 0x5) (async, rerun: 32) mmap$auto(0x8000000000000000, 0x7, 0xdf, 0xeb4, r1, 0x8000) (async) openat$auto_u32_array_fops_file(0xffffffffffffff9c, 0x0, 0x100, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x103e81, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async, rerun: 64) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/time_for_children\x00') mmap$auto(0xa61c, 0x80008, 0x0, 0xeb1, 0x405, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) r3 = socket(0x15, 0x5, 0x0) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) (async) sendmsg$auto(r3, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) (async) keyctl$auto(0x6, 0xfffffffffffffffd, 0xee01, 0x0, 0xfff) (async) mprotect$auto(0x110c230000, 0x41, 0xc) 56.87958ms ago: executing program 1 (id=5672): mmap$auto(0xfffffffffffffffe, 0x40000a, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x4, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_enter$auto(0x3, 0x0, 0x1, 0x3, 0x0, 0x2) socket(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) io_uring_enter$auto(0x3, 0x1, 0x2688, 0x5, 0x0, 0x7) (fail_nth: 3) 0s ago: executing program 2 (id=5673): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f00000028c0), 0x100, 0x0) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000000)={{0x3, 0x1002, 0xfffffffc, 0x5, 0x2}, "654c6dbc7a4d30983899a7e1325b6a29ba1e18441074052a3fa6c3ccf1bf00"}) readv$auto(r2, &(0x7f00000000c0)={0x0, 0x4c786f70}, 0x2) ioctl$auto(0x3, 0xae41, r0) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) kernel console output (not intermixed with test programs): ? kasan_save_track+0x14/0x30 [ 1424.658645][T29305] ? __kasan_slab_alloc+0x89/0x90 [ 1424.658671][T29305] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1424.658708][T29305] ? do_getname+0x35/0x390 [ 1424.658740][T29305] ? do_sys_openat2+0xc5/0x1e0 [ 1424.658775][T29305] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1424.658803][T29305] ? __pfx_path_openat+0x10/0x10 [ 1424.658845][T29305] do_file_open+0x20e/0x430 [ 1424.658877][T29305] ? __pfx_do_file_open+0x10/0x10 [ 1424.658927][T29305] ? alloc_fd+0x476/0x790 [ 1424.658958][T29305] ? do_getname+0x191/0x390 [ 1424.658995][T29305] do_sys_openat2+0x10d/0x1e0 [ 1424.659031][T29305] ? __pfx_do_sys_openat2+0x10/0x10 [ 1424.659068][T29305] ? find_held_lock+0x2b/0x80 [ 1424.659106][T29305] __x64_sys_openat+0x12d/0x210 [ 1424.659143][T29305] ? __pfx___x64_sys_openat+0x10/0x10 [ 1424.659185][T29305] ? rcu_is_watching+0x12/0xc0 [ 1424.659217][T29305] do_syscall_64+0x10b/0xf80 [ 1424.659254][T29305] ? clear_bhb_loop+0x40/0x90 [ 1424.659282][T29305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1424.659307][T29305] RIP: 0033:0x7f282819c819 [ 1424.659326][T29305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1424.659350][T29305] RSP: 002b:00007f28290d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1424.659373][T29305] RAX: ffffffffffffffda RBX: 00007f2828416090 RCX: 00007f282819c819 [ 1424.659389][T29305] RDX: 0000000000000102 RSI: 0000200000000800 RDI: ffffffffffffff9c [ 1424.659404][T29305] RBP: 00007f2828232c91 R08: 0000000000000000 R09: 0000000000000000 [ 1424.659418][T29305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1424.659432][T29305] R13: 00007f2828416128 R14: 00007f2828416090 R15: 00007ffd0089f068 [ 1424.659463][T29305] [ 1426.794267][T29134] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1426.898292][T29134] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1426.937050][T29134] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1427.024612][T29134] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1427.079279][T29134] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1427.134995][T29134] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1427.176757][T29134] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1427.239315][T29134] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1427.710841][T29134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1427.818638][T29134] 8021q: adding VLAN 0 to HW filter on device team0 [ 1427.884546][T28542] bridge0: port 1(bridge_slave_0) entered blocking state [ 1427.891845][T28542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1427.983472][T28555] bridge0: port 2(bridge_slave_1) entered blocking state [ 1427.990714][T28555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1429.382430][T29134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1429.674547][T29134] veth0_vlan: entered promiscuous mode [ 1429.766283][T29134] veth1_vlan: entered promiscuous mode [ 1429.938272][T29134] veth0_macvtap: entered promiscuous mode [ 1430.001368][T29134] veth1_macvtap: entered promiscuous mode [ 1430.122354][T29134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1430.191251][T29134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1430.280676][T28549] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1430.340121][T28549] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1430.400820][T28549] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1430.517761][T28549] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.684880][T29409] misc userio: Invalid payload size [ 1432.016848][T28542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1432.065867][T28542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1432.581434][T28549] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1432.627491][T28549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1434.246698][ T30] audit: type=1800 audit(1843104521.630:32): pid=29448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5058" name="discovery_nqn" dev="configfs" ino=135490 res=0 errno=0 [ 1434.775055][T29453] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1435.920690][T29482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5064'. [ 1436.859643][T29491] misc userio: Invalid payload size [ 1439.142160][T29531] netlink: 13896 bytes leftover after parsing attributes in process `syz.2.5075'. [ 1439.253667][T29531] netlink: 4528 bytes leftover after parsing attributes in process `syz.2.5075'. [ 1440.352470][T29527] kexec: Could not allocate control_code_buffer [ 1441.348646][T29576] netlink: 13 bytes leftover after parsing attributes in process `syz.3.5083'. [ 1441.706026][T29585] misc userio: Invalid payload size [ 1441.819536][T29589] can: request_module (can-proto-5) failed. [ 1447.127923][T29627] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1935892845.25445.67108862), cmd(13) [ 1447.230327][T29641] netlink: 504 bytes leftover after parsing attributes in process `syz.3.5091'. [ 1453.755762][T29707] netlink: 13896 bytes leftover after parsing attributes in process `syz.1.5108'. [ 1453.811841][T29707] netlink: 4528 bytes leftover after parsing attributes in process `syz.1.5108'. [ 1455.926021][T29734] can: request_module (can-proto-0) failed. [ 1456.983290][T29765] netlink: 13896 bytes leftover after parsing attributes in process `syz.0.5119'. [ 1457.024396][T29765] netlink: 4528 bytes leftover after parsing attributes in process `syz.0.5119'. [ 1461.321090][T29829] misc userio: Invalid payload size [ 1464.833493][T29870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5141'. [ 1468.296565][T29911] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5149'. [ 1470.716177][T29943] FAULT_INJECTION: forcing a failure. [ 1470.716177][T29943] name failslab, interval 1, probability 0, space 0, times 0 [ 1470.838634][T29943] CPU: 0 UID: 0 PID: 29943 Comm: syz.1.5156 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1470.838683][T29943] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1470.838694][T29943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1470.838710][T29943] Call Trace: [ 1470.838719][T29943] [ 1470.838728][T29943] dump_stack_lvl+0x100/0x190 [ 1470.838778][T29943] should_fail_ex.cold+0x5/0xa [ 1470.838811][T29943] ? constrain_params_by_rules+0x175/0xcc0 [ 1470.838851][T29943] should_failslab+0xc2/0x120 [ 1470.838880][T29943] __kmalloc_noprof+0xe0/0x850 [ 1470.838920][T29943] ? unwind_get_return_address+0x59/0xa0 [ 1470.838961][T29943] constrain_params_by_rules+0x175/0xcc0 [ 1470.839008][T29943] ? stack_trace_save+0x8e/0xc0 [ 1470.839046][T29943] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 1470.839094][T29943] ? __kasan_kmalloc+0xaa/0xb0 [ 1470.839116][T29943] ? snd_pcm_oss_change_params_locked+0x247/0x39f0 [ 1470.839154][T29943] ? snd_pcm_oss_make_ready+0xeb/0x1b0 [ 1470.839189][T29943] ? snd_pcm_oss_sync+0x1de/0x840 [ 1470.839232][T29943] ? rcu_is_watching+0x12/0xc0 [ 1470.839263][T29943] ? snd_interval_refine+0x2d0/0x580 [ 1470.839295][T29943] snd_pcm_hw_refine+0x7e7/0xad0 [ 1470.839340][T29943] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1470.839390][T29943] ? __asan_memset+0x23/0x50 [ 1470.839427][T29943] ? _snd_pcm_hw_param_min+0x1ea/0x670 [ 1470.839466][T29943] snd_pcm_oss_change_params_locked+0x2594/0x39f0 [ 1470.839504][T29943] ? trace_contention_end+0x60/0x170 [ 1470.839535][T29943] ? snd_pcm_oss_make_ready+0xcb/0x1b0 [ 1470.839583][T29943] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1470.839621][T29943] ? __pfx___mutex_lock+0x10/0x10 [ 1470.839683][T29943] snd_pcm_oss_make_ready+0xeb/0x1b0 [ 1470.839722][T29943] snd_pcm_oss_sync+0x1de/0x840 [ 1470.839764][T29943] snd_pcm_oss_release+0x238/0x300 [ 1470.839801][T29943] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1470.839840][T29943] __fput+0x3ff/0xb50 [ 1470.839881][T29943] task_work_run+0x150/0x240 [ 1470.839908][T29943] ? __pfx_task_work_run+0x10/0x10 [ 1470.839936][T29943] ? rcu_is_watching+0x12/0xc0 [ 1470.839969][T29943] exit_to_user_mode_loop+0x100/0x4a0 [ 1470.839994][T29943] ? do_syscall_64+0x519/0xf80 [ 1470.840035][T29943] do_syscall_64+0x6f2/0xf80 [ 1470.840072][T29943] ? clear_bhb_loop+0x40/0x90 [ 1470.840103][T29943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1470.840129][T29943] RIP: 0033:0x7f74a739c819 [ 1470.840156][T29943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1470.840181][T29943] RSP: 002b:00007f74a82b5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1470.840205][T29943] RAX: 0000000000000000 RBX: 00007f74a7615fa0 RCX: 00007f74a739c819 [ 1470.840222][T29943] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1470.840237][T29943] RBP: 00007f74a7432c91 R08: 0000000000000000 R09: 0000000000000000 [ 1470.840254][T29943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1470.840269][T29943] R13: 00007f74a7616038 R14: 00007f74a7615fa0 R15: 00007fffde53edc8 [ 1470.840300][T29943] [ 1472.161851][T29957] misc userio: Invalid payload size [ 1473.783708][T29969] netlink: 13896 bytes leftover after parsing attributes in process `syz.3.5161'. [ 1473.855820][T29969] netlink: 4528 bytes leftover after parsing attributes in process `syz.3.5161'. [ 1473.928481][T29971] ecryptfs_miscdev_response: (sizeof(*msg) + msg->data_len) = [1067213646]; data_size = [146]. Invalid packet. [ 1473.999370][T29971] ecryptfs_miscdev_write: Failed to deliver miscdev response to requesting operation; rc = [-22] [ 1476.921398][T30012] netlink: 13896 bytes leftover after parsing attributes in process `syz.3.5172'. [ 1476.943876][T30012] netlink: 4528 bytes leftover after parsing attributes in process `syz.3.5172'. [ 1477.261420][T30020] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 1478.840615][T30045] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1478.865218][T30045] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1478.897024][T30045] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1478.936083][T30045] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1478.972913][T30045] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1479.062068][T30045] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1479.472096][T30052] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5181'. [ 1479.975749][T30063] misc userio: Invalid payload size [ 1480.750436][T29050] Bluetooth: hci2: command 0x0406 tx timeout [ 1480.908927][T29050] Bluetooth: hci4: command 0x0c1a tx timeout [ 1480.916161][T28547] Bluetooth: hci1: command 0x0c1a tx timeout [ 1480.989088][T28547] Bluetooth: hci3: command 0x0c1a tx timeout [ 1483.069809][T28547] Bluetooth: hci3: command 0x0c1a tx timeout [ 1483.598221][T30111] FAULT_INJECTION: forcing a failure. [ 1483.598221][T30111] name failslab, interval 1, probability 0, space 0, times 0 [ 1483.736739][T30111] CPU: 0 UID: 0 PID: 30111 Comm: syz.2.5192 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1483.736783][T30111] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1483.736796][T30111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1483.736812][T30111] Call Trace: [ 1483.736821][T30111] [ 1483.736831][T30111] dump_stack_lvl+0x100/0x190 [ 1483.736866][T30111] should_fail_ex.cold+0x5/0xa [ 1483.736899][T30111] ? tracepoint_add_func+0x3a8/0x1150 [ 1483.736937][T30111] should_failslab+0xc2/0x120 [ 1483.736966][T30111] __kmalloc_noprof+0xe0/0x850 [ 1483.737011][T30111] ? __pfx_trace_event_raw_event_nfsd_file_insert_err+0x10/0x10 [ 1483.737044][T30111] tracepoint_add_func+0x3a8/0x1150 [ 1483.737080][T30111] ? __pfx_trace_event_raw_event_nfsd_file_insert_err+0x10/0x10 [ 1483.737118][T30111] ? __pfx_trace_event_raw_event_nfsd_file_insert_err+0x10/0x10 [ 1483.737149][T30111] tracepoint_probe_register+0xc4/0x110 [ 1483.737190][T30111] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 1483.737229][T30111] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1483.737271][T30111] ? __pfx_trace_event_raw_event_nfsd_file_insert_err+0x10/0x10 [ 1483.737305][T30111] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 1483.737352][T30111] trace_event_reg+0x209/0x350 [ 1483.737388][T30111] __ftrace_event_enable_disable+0x211/0x6f0 [ 1483.737433][T30111] __ftrace_set_clr_event_nolock+0x390/0xc30 [ 1483.737491][T30111] ftrace_set_clr_event+0x1b7/0x3f0 [ 1483.737524][T30111] ? __pfx_ftrace_set_clr_event+0x10/0x10 [ 1483.737553][T30111] ? trace_get_user+0x3ae/0xa70 [ 1483.737599][T30111] ftrace_event_write+0x259/0x2c0 [ 1483.737629][T30111] ? __pfx_ftrace_event_write+0x10/0x10 [ 1483.737670][T30111] vfs_write+0x2aa/0x1070 [ 1483.737699][T30111] ? __pfx_ftrace_event_write+0x10/0x10 [ 1483.737731][T30111] ? __pfx_vfs_write+0x10/0x10 [ 1483.737758][T30111] ? __fget_files+0x215/0x3d0 [ 1483.737794][T30111] ? __fget_files+0x21f/0x3d0 [ 1483.737831][T30111] ksys_write+0x12a/0x250 [ 1483.737859][T30111] ? __pfx_ksys_write+0x10/0x10 [ 1483.737890][T30111] ? rcu_is_watching+0x12/0xc0 [ 1483.737925][T30111] do_syscall_64+0x10b/0xf80 [ 1483.737962][T30111] ? clear_bhb_loop+0x40/0x90 [ 1483.737994][T30111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1483.738020][T30111] RIP: 0033:0x7f282819c819 [ 1483.738041][T30111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1483.738066][T30111] RSP: 002b:00007f28290f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1483.738090][T30111] RAX: ffffffffffffffda RBX: 00007f2828415fa0 RCX: 00007f282819c819 [ 1483.738107][T30111] RDX: 0000000000000af0 RSI: 0000000000000000 RDI: 0000000000000006 [ 1483.738123][T30111] RBP: 00007f2828232c91 R08: 0000000000000000 R09: 0000000000000000 [ 1483.738138][T30111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1483.738154][T30111] R13: 00007f2828416038 R14: 00007f2828415fa0 R15: 00007ffd0089f068 [ 1483.738186][T30111] [ 1484.150932][T30114] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5193'. [ 1484.349311][T30111] event trace: Could not enable event nfsd_file_insert_err [ 1484.800822][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.809162][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.150225][T28547] Bluetooth: hci3: command 0x0c1a tx timeout [ 1485.351950][T30133] misc userio: Invalid payload size [ 1487.201127][T30140] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5198'. [ 1489.176135][T30184] netlink: 13896 bytes leftover after parsing attributes in process `syz.3.5206'. [ 1489.231627][T30184] netlink: 4528 bytes leftover after parsing attributes in process `syz.3.5206'. [ 1490.460429][T30199] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1490.519436][T30199] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1490.551639][T30199] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1490.581899][T30199] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1492.311044][T30232] misc userio: Invalid payload size [ 1492.349226][T28547] Bluetooth: hci2: command 0x0406 tx timeout [ 1492.590298][T28547] Bluetooth: hci3: command 0x0c1a tx timeout [ 1492.598423][T29050] Bluetooth: hci4: command 0x0c1a tx timeout [ 1492.604621][T29050] Bluetooth: hci1: command 0x0c1a tx timeout [ 1492.712868][T30234] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5216'. [ 1494.469249][T30259] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1494.496859][T30259] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1494.529566][T30259] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1494.562802][T30259] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1496.109736][T30235] Bluetooth: hci2: command 0x0406 tx timeout [ 1496.325641][T30287] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5228'. [ 1496.512395][T30235] Bluetooth: hci1: command 0x0c1a tx timeout [ 1496.596315][T28535] Bluetooth: hci4: command 0x0c1a tx timeout [ 1496.602710][T30235] Bluetooth: hci3: command 0x0c1a tx timeout [ 1497.012013][T30299] input: fs as /devices/virtual/input/input17 [ 1498.166555][T30297] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5232'. [ 1498.351577][T30297] hsr_slave_1 (unregistering): left promiscuous mode [ 1498.379793][T30316] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1498.400427][T30316] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1498.433405][T30316] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1498.513198][T30316] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1499.842223][T30349] misc userio: Invalid payload size [ 1499.981796][T30357] netlink: 13896 bytes leftover after parsing attributes in process `syz.1.5245'. [ 1500.044120][T30357] netlink: 4528 bytes leftover after parsing attributes in process `syz.1.5245'. [ 1500.188938][T30235] Bluetooth: hci2: command 0x0406 tx timeout [ 1500.429055][T30235] Bluetooth: hci1: command 0x0c1a tx timeout [ 1500.509345][T30235] Bluetooth: hci4: command 0x0c1a tx timeout [ 1500.588944][T30235] Bluetooth: hci3: command 0x0c1a tx timeout [ 1500.783281][T30368] FAULT_INJECTION: forcing a failure. [ 1500.783281][T30368] name failslab, interval 1, probability 0, space 0, times 0 [ 1500.853845][T30368] CPU: 0 UID: 0 PID: 30368 Comm: syz.3.5248 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1500.853889][T30368] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1500.853901][T30368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1500.853917][T30368] Call Trace: [ 1500.853926][T30368] [ 1500.853936][T30368] dump_stack_lvl+0x100/0x190 [ 1500.853969][T30368] should_fail_ex.cold+0x5/0xa [ 1500.854001][T30368] ? tracepoint_add_func+0x3a8/0x1150 [ 1500.854049][T30368] should_failslab+0xc2/0x120 [ 1500.854079][T30368] __kmalloc_noprof+0xe0/0x850 [ 1500.854128][T30368] ? __pfx_trace_event_raw_event_nfsd_file_cons_err+0x10/0x10 [ 1500.854160][T30368] tracepoint_add_func+0x3a8/0x1150 [ 1500.854197][T30368] ? __pfx_trace_event_raw_event_nfsd_file_cons_err+0x10/0x10 [ 1500.854234][T30368] ? __pfx_trace_event_raw_event_nfsd_file_cons_err+0x10/0x10 [ 1500.854264][T30368] tracepoint_probe_register+0xc4/0x110 [ 1500.854304][T30368] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 1500.854344][T30368] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1500.854386][T30368] ? __pfx_trace_event_raw_event_nfsd_file_cons_err+0x10/0x10 [ 1500.854417][T30368] ? __pfx_probe_sched_switch+0x10/0x10 [ 1500.854463][T30368] trace_event_reg+0x209/0x350 [ 1500.854498][T30368] __ftrace_event_enable_disable+0x211/0x6f0 [ 1500.854543][T30368] __ftrace_set_clr_event_nolock+0x390/0xc30 [ 1500.854579][T30368] ftrace_set_clr_event+0x1b7/0x3f0 [ 1500.854610][T30368] ? __pfx_ftrace_set_clr_event+0x10/0x10 [ 1500.854639][T30368] ? trace_get_user+0x3ae/0xa70 [ 1500.854685][T30368] ftrace_event_write+0x259/0x2c0 [ 1500.854715][T30368] ? __pfx_ftrace_event_write+0x10/0x10 [ 1500.854756][T30368] vfs_write+0x2aa/0x1070 [ 1500.854785][T30368] ? __pfx_ftrace_event_write+0x10/0x10 [ 1500.854817][T30368] ? __pfx_vfs_write+0x10/0x10 [ 1500.854844][T30368] ? __fget_files+0x215/0x3d0 [ 1500.854879][T30368] ? __fget_files+0x21f/0x3d0 [ 1500.854916][T30368] ksys_write+0x12a/0x250 [ 1500.854944][T30368] ? __pfx_ksys_write+0x10/0x10 [ 1500.854975][T30368] ? rcu_is_watching+0x12/0xc0 [ 1500.855010][T30368] do_syscall_64+0x10b/0xf80 [ 1500.855054][T30368] ? clear_bhb_loop+0x40/0x90 [ 1500.855087][T30368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1500.855114][T30368] RIP: 0033:0x7fef0d59c819 [ 1500.855135][T30368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1500.855160][T30368] RSP: 002b:00007fef0e4a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1500.855184][T30368] RAX: ffffffffffffffda RBX: 00007fef0d815fa0 RCX: 00007fef0d59c819 [ 1500.855202][T30368] RDX: 0000000000000af0 RSI: 0000000000000000 RDI: 0000000000000006 [ 1500.855218][T30368] RBP: 00007fef0d632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1500.855233][T30368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1500.855250][T30368] R13: 00007fef0d816038 R14: 00007fef0d815fa0 R15: 00007fff4a7c6b88 [ 1500.855282][T30368] [ 1501.201145][T30368] event trace: Could not enable event nfsd_file_cons_err [ 1501.739968][T30383] vivid-007: ================= START STATUS ================= [ 1501.772948][T30383] vivid-007: Generate PTS: true [ 1501.785786][T30383] vivid-007: Generate SCR: true [ 1501.794208][T30383] tpg source WxH: 320x240 (Y'CbCr) [ 1501.808907][T30383] tpg field: 1 [ 1501.819515][T30383] tpg crop: (0,0)/320x240 [ 1501.834204][T30383] tpg compose: (0,0)/320x240 [ 1501.842294][T30383] tpg colorspace: 8 [ 1501.850266][T30383] tpg transfer function: 0/0 [ 1501.861856][T30383] tpg Y'CbCr encoding: 0/0 [ 1501.885253][T30383] tpg quantization: 0/0 [ 1501.898227][T30383] tpg RGB range: 0/2 [ 1502.006964][T30383] vivid-007: ================== END STATUS ================== [ 1502.899701][T30411] misc userio: Invalid payload size [ 1503.313475][T30417] netlink: 13896 bytes leftover after parsing attributes in process `syz.3.5258'. [ 1503.354429][T30417] netlink: 4528 bytes leftover after parsing attributes in process `syz.3.5258'. [ 1503.995620][T30427] warning: `syz.3.5260' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1504.113097][T30428] FAULT_INJECTION: forcing a failure. [ 1504.113097][T30428] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1504.181059][T30428] CPU: 0 UID: 0 PID: 30428 Comm: syz.1.5262 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1504.181103][T30428] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1504.181114][T30428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1504.181130][T30428] Call Trace: [ 1504.181139][T30428] [ 1504.181148][T30428] dump_stack_lvl+0x100/0x190 [ 1504.181179][T30428] should_fail_ex.cold+0x5/0xa [ 1504.181207][T30428] ? prepare_alloc_pages+0x16d/0x5f0 [ 1504.181243][T30428] should_fail_alloc_page+0xeb/0x140 [ 1504.181274][T30428] prepare_alloc_pages+0x1f0/0x5f0 [ 1504.181311][T30428] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 1504.181356][T30428] ? lru_gen_add_folio+0x20f/0x13d0 [ 1504.181392][T30428] ? folios_put_refs+0x716/0xa90 [ 1504.181438][T30428] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1504.181494][T30428] ? __lock_acquire+0x4a5/0x2630 [ 1504.181519][T30428] ? css_rstat_updated+0x1ce/0x5a0 [ 1504.181568][T30428] ? lock_acquire+0x1b1/0x370 [ 1504.181590][T30428] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1504.181630][T30428] ? policy_nodemask+0xed/0x4f0 [ 1504.181662][T30428] alloc_pages_mpol+0x1fb/0x540 [ 1504.181692][T30428] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1504.181724][T30428] ? __lock_acquire+0x4a5/0x2630 [ 1504.181751][T30428] folio_alloc_mpol_noprof+0x36/0x260 [ 1504.181787][T30428] vma_alloc_folio_noprof+0xed/0x1d0 [ 1504.181821][T30428] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1504.181872][T30428] do_anonymous_page+0xb46/0x2050 [ 1504.181912][T30428] ? rcu_read_unlock+0x2d/0xb0 [ 1504.181959][T30428] __handle_mm_fault+0x1d2c/0x2a00 [ 1504.182001][T30428] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1504.182034][T30428] ? __pfx___handle_mm_fault+0x10/0x10 [ 1504.182075][T30428] ? pte_offset_map_lock+0x174/0x320 [ 1504.182103][T30428] ? find_held_lock+0x2b/0x80 [ 1504.182145][T30428] ? follow_page_pte+0x4d0/0x13f0 [ 1504.182181][T30428] handle_mm_fault+0x36d/0xa20 [ 1504.182224][T30428] __get_user_pages+0x1178/0x32a0 [ 1504.182266][T30428] ? __pfx___get_user_pages+0x10/0x10 [ 1504.182305][T30428] populate_vma_page_range+0x267/0x3f0 [ 1504.182341][T30428] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1504.182375][T30428] ? __pfx_find_vma_intersection+0x10/0x10 [ 1504.182406][T30428] ? do_mmap+0x93f/0x12f0 [ 1504.182440][T30428] __mm_populate+0x107/0x3a0 [ 1504.182473][T30428] ? __pfx___mm_populate+0x10/0x10 [ 1504.182508][T30428] ? up_write+0x28c/0x4f0 [ 1504.182539][T30428] vm_mmap_pgoff+0x37f/0x470 [ 1504.182608][T30428] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1504.182642][T30428] ? do_futex+0x192/0x350 [ 1504.182669][T30428] ? __pfx_do_futex+0x10/0x10 [ 1504.182701][T30428] ksys_mmap_pgoff+0xe4/0x610 [ 1504.182731][T30428] ? __x64_sys_futex+0x358/0x4d0 [ 1504.182760][T30428] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1504.182789][T30428] ? xfd_validate_state+0x129/0x190 [ 1504.182822][T30428] __x64_sys_mmap+0x125/0x190 [ 1504.182857][T30428] do_syscall_64+0x10b/0xf80 [ 1504.182897][T30428] ? clear_bhb_loop+0x40/0x90 [ 1504.182928][T30428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1504.182955][T30428] RIP: 0033:0x7f74a739c819 [ 1504.182977][T30428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1504.183002][T30428] RSP: 002b:00007f74a82b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1504.183027][T30428] RAX: ffffffffffffffda RBX: 00007f74a7615fa0 RCX: 00007f74a739c819 [ 1504.183044][T30428] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000 [ 1504.183060][T30428] RBP: 00007f74a7432c91 R08: 0000000000000007 R09: 0000000000028000 [ 1504.183076][T30428] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1504.183092][T30428] R13: 00007f74a7616038 R14: 00007f74a7615fa0 R15: 00007fffde53edc8 [ 1504.183124][T30428] [ 1504.724654][T30421] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5259'. [ 1505.731136][T30421] hsr_slave_1 (unregistering): left promiscuous mode [ 1509.560441][T30492] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5273'. [ 1509.631133][T30494] kvm: vcpu 4: requested lapic timer restore with starting count register 0x390=4294967104 (137438947328 ns) > initial count (6624 ns). Using initial count to start timer. [ 1510.139031][T30500] FAULT_INJECTION: forcing a failure. [ 1510.139031][T30500] name failslab, interval 1, probability 0, space 0, times 0 [ 1510.230699][T30500] CPU: 0 UID: 0 PID: 30500 Comm: syz.1.5275 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1510.230744][T30500] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1510.230759][T30500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1510.230776][T30500] Call Trace: [ 1510.230785][T30500] [ 1510.230794][T30500] dump_stack_lvl+0x100/0x190 [ 1510.230826][T30500] should_fail_ex.cold+0x5/0xa [ 1510.230859][T30500] ? tracepoint_add_func+0x3a8/0x1150 [ 1510.230897][T30500] should_failslab+0xc2/0x120 [ 1510.230926][T30500] __kmalloc_noprof+0xe0/0x850 [ 1510.230971][T30500] ? __pfx_trace_event_raw_event_nfsd_file_insert_err+0x10/0x10 [ 1510.231003][T30500] tracepoint_add_func+0x3a8/0x1150 [ 1510.231040][T30500] ? __pfx_trace_event_raw_event_nfsd_file_insert_err+0x10/0x10 [ 1510.231078][T30500] ? __pfx_trace_event_raw_event_nfsd_file_insert_err+0x10/0x10 [ 1510.231110][T30500] tracepoint_probe_register+0xc4/0x110 [ 1510.231150][T30500] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 1510.231189][T30500] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1510.231231][T30500] ? __pfx_trace_event_raw_event_nfsd_file_insert_err+0x10/0x10 [ 1510.231263][T30500] ? __pfx_probe_sched_switch+0x10/0x10 [ 1510.231310][T30500] trace_event_reg+0x209/0x350 [ 1510.231345][T30500] __ftrace_event_enable_disable+0x211/0x6f0 [ 1510.231390][T30500] __ftrace_set_clr_event_nolock+0x390/0xc30 [ 1510.231425][T30500] ftrace_set_clr_event+0x1b7/0x3f0 [ 1510.231456][T30500] ? __pfx_ftrace_set_clr_event+0x10/0x10 [ 1510.231485][T30500] ? trace_get_user+0x3ae/0xa70 [ 1510.231537][T30500] ftrace_event_write+0x259/0x2c0 [ 1510.231567][T30500] ? __pfx_ftrace_event_write+0x10/0x10 [ 1510.231608][T30500] vfs_write+0x2aa/0x1070 [ 1510.231637][T30500] ? __pfx_ftrace_event_write+0x10/0x10 [ 1510.231669][T30500] ? __pfx_vfs_write+0x10/0x10 [ 1510.231696][T30500] ? __fget_files+0x215/0x3d0 [ 1510.231732][T30500] ? __fget_files+0x21f/0x3d0 [ 1510.231769][T30500] ksys_write+0x12a/0x250 [ 1510.231796][T30500] ? __pfx_ksys_write+0x10/0x10 [ 1510.231827][T30500] ? rcu_is_watching+0x12/0xc0 [ 1510.231861][T30500] do_syscall_64+0x10b/0xf80 [ 1510.231900][T30500] ? clear_bhb_loop+0x40/0x90 [ 1510.231931][T30500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1510.231957][T30500] RIP: 0033:0x7f74a739c819 [ 1510.231978][T30500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1510.232003][T30500] RSP: 002b:00007f74a82b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1510.232027][T30500] RAX: ffffffffffffffda RBX: 00007f74a7615fa0 RCX: 00007f74a739c819 [ 1510.232044][T30500] RDX: 0000000000000af0 RSI: 0000000000000000 RDI: 0000000000000006 [ 1510.232060][T30500] RBP: 00007f74a7432c91 R08: 0000000000000000 R09: 0000000000000000 [ 1510.232075][T30500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1510.232091][T30500] R13: 00007f74a7616038 R14: 00007f74a7615fa0 R15: 00007fffde53edc8 [ 1510.232123][T30500] [ 1510.532968][T30500] event trace: Could not enable event nfsd_file_insert_err [ 1510.559302][T30511] ubi0: attaching mtd0 [ 1510.564675][T30511] ubi0 error: validate_ec_hdr: bad VID header offset 514, expected 64 [ 1510.574398][T30511] ubi0 error: validate_ec_hdr: bad EC header [ 1510.580737][T30511] Erase counter header dump: [ 1510.585434][T30511] magic 0x55424923 [ 1510.590168][T30511] version 1 [ 1510.594451][T30511] ec 1 [ 1510.598404][T30511] vid_hdr_offset 514 [ 1510.602500][T30511] data_offset 578 [ 1510.606509][T30511] image_seq -807552385 [ 1510.611394][T30511] hdr_crc 0xf6a0206d [ 1510.616022][T30511] erase counter header hexdump: [ 1510.621578][T30511] CPU: 0 UID: 0 PID: 30511 Comm: syz.0.5277 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1510.621615][T30511] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1510.621625][T30511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1510.621641][T30511] Call Trace: [ 1510.621649][T30511] [ 1510.621658][T30511] dump_stack_lvl+0x100/0x190 [ 1510.621688][T30511] validate_ec_hdr+0x2d0/0x330 [ 1510.621724][T30511] ubi_io_read_ec_hdr+0x656/0x6d0 [ 1510.621761][T30511] ubi_attach+0x601/0x4d30 [ 1510.621794][T30511] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1510.621827][T30511] ? ubi_msg+0x114/0x159 [ 1510.621851][T30511] ? __pfx_ubi_msg+0x10/0x10 [ 1510.621876][T30511] ? __pfx_ubi_attach+0x10/0x10 [ 1510.621899][T30511] ? lockdep_init_map_type+0x5c/0x250 [ 1510.621927][T30511] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 1510.621953][T30511] ? __vmalloc_node_noprof+0xad/0xf0 [ 1510.621985][T30511] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 1510.622014][T30511] ubi_attach_mtd_dev+0x139f/0x32a0 [ 1510.622053][T30511] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 1510.622079][T30511] ? __pfx_get_mtd_device+0x10/0x10 [ 1510.622121][T30511] ctrl_cdev_ioctl+0x36a/0x400 [ 1510.622148][T30511] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 1510.622182][T30511] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 1510.622218][T30511] __x64_sys_ioctl+0x18e/0x210 [ 1510.622243][T30511] do_syscall_64+0x10b/0xf80 [ 1510.622280][T30511] ? clear_bhb_loop+0x40/0x90 [ 1510.622310][T30511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1510.622334][T30511] RIP: 0033:0x7f79adb9c819 [ 1510.622353][T30511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1510.622377][T30511] RSP: 002b:00007f79aea32028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1510.622399][T30511] RAX: ffffffffffffffda RBX: 00007f79ade16360 RCX: 00007f79adb9c819 [ 1510.622415][T30511] RDX: 0000000000000000 RSI: 0000000040186f40 RDI: 0000000000000009 [ 1510.622429][T30511] RBP: 00007f79adc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1510.622443][T30511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1510.622457][T30511] R13: 00007f79ade163f8 R14: 00007f79ade16360 R15: 00007ffe998a2938 [ 1510.622487][T30511] [ 1510.622502][T30511] ubi0 error: ubi_io_read_ec_hdr: validation failed for PEB 0 [ 1510.970309][T30511] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1511.311958][T30525] vivid-007: ================= START STATUS ================= [ 1511.345664][T30525] vivid-007: Generate PTS: true [ 1511.345712][T30525] vivid-007: Generate SCR: true [ 1511.345740][T30525] tpg source WxH: 320x240 (Y'CbCr) [ 1511.345761][T30525] tpg field: 1 [ 1511.345771][T30525] tpg crop: (0,0)/320x240 [ 1511.345787][T30525] tpg compose: (0,0)/320x240 [ 1511.345803][T30525] tpg colorspace: 8 [ 1511.345814][T30525] tpg transfer function: 0/0 [ 1511.345826][T30525] tpg Y'CbCr encoding: 0/0 [ 1511.345838][T30525] tpg quantization: 0/0 [ 1511.345850][T30525] tpg RGB range: 0/2 [ 1511.345866][T30525] vivid-007: ================== END STATUS ================== [ 1512.776319][T30547] can: request_module (can-proto-5) failed. [ 1512.970547][T30548] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5286'. [ 1513.124446][T30563] misc userio: Invalid payload size [ 1514.044914][T30578] vivid-007: ================= START STATUS ================= [ 1514.080060][T30578] vivid-007: Generate PTS: true [ 1514.113269][T30578] vivid-007: Generate SCR: true [ 1514.132768][T30578] tpg source WxH: 320x240 (Y'CbCr) [ 1514.150130][T30578] tpg field: 1 [ 1514.179857][T30578] tpg crop: (0,0)/320x240 [ 1514.215036][T30578] tpg compose: (0,0)/320x240 [ 1514.247136][T30578] tpg colorspace: 8 [ 1514.294269][T30578] tpg transfer function: 0/0 [ 1514.344881][T30578] tpg Y'CbCr encoding: 0/0 [ 1514.388022][T30578] tpg quantization: 0/0 [ 1514.420576][T30578] tpg RGB range: 0/2 [ 1514.442897][T30578] vivid-007: ================== END STATUS ================== [ 1515.157604][T30601] netlink: 'syz.1.5299': attribute type 8 has an invalid length. [ 1515.238592][T30604] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(56.2293804.7388455), cmd(13) [ 1515.642848][T30611] FAULT_INJECTION: forcing a failure. [ 1515.642848][T30611] name failslab, interval 1, probability 0, space 0, times 0 [ 1515.711528][T30611] CPU: 0 UID: 0 PID: 30611 Comm: syz.1.5302 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1515.711573][T30611] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1515.711585][T30611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1515.711604][T30611] Call Trace: [ 1515.711612][T30611] [ 1515.711622][T30611] dump_stack_lvl+0x100/0x190 [ 1515.711654][T30611] should_fail_ex.cold+0x5/0xa [ 1515.711686][T30611] ? tracepoint_add_func+0x3a8/0x1150 [ 1515.711724][T30611] should_failslab+0xc2/0x120 [ 1515.711752][T30611] __kmalloc_noprof+0xe0/0x850 [ 1515.711798][T30611] ? __pfx_trace_event_raw_event_nfsd_file_insert_err+0x10/0x10 [ 1515.711840][T30611] tracepoint_add_func+0x3a8/0x1150 [ 1515.711877][T30611] ? __pfx_trace_event_raw_event_nfsd_file_insert_err+0x10/0x10 [ 1515.711916][T30611] ? __pfx_trace_event_raw_event_nfsd_file_insert_err+0x10/0x10 [ 1515.711948][T30611] tracepoint_probe_register+0xc4/0x110 [ 1515.711989][T30611] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 1515.712028][T30611] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1515.712070][T30611] ? __pfx_trace_event_raw_event_nfsd_file_insert_err+0x10/0x10 [ 1515.712102][T30611] ? __pfx_probe_sched_switch+0x10/0x10 [ 1515.712143][T30611] ? __lock_acquire+0x4a5/0x2630 [ 1515.712172][T30611] trace_event_reg+0x209/0x350 [ 1515.712207][T30611] __ftrace_event_enable_disable+0x211/0x6f0 [ 1515.712252][T30611] __ftrace_set_clr_event_nolock+0x390/0xc30 [ 1515.712287][T30611] ftrace_set_clr_event+0x1b7/0x3f0 [ 1515.712319][T30611] ? __pfx_ftrace_set_clr_event+0x10/0x10 [ 1515.712347][T30611] ? trace_get_user+0x3ae/0xa70 [ 1515.712393][T30611] ftrace_event_write+0x259/0x2c0 [ 1515.712423][T30611] ? __pfx_ftrace_event_write+0x10/0x10 [ 1515.712464][T30611] vfs_write+0x2aa/0x1070 [ 1515.712493][T30611] ? __pfx_ftrace_event_write+0x10/0x10 [ 1515.712524][T30611] ? __pfx_vfs_write+0x10/0x10 [ 1515.712552][T30611] ? __fget_files+0x215/0x3d0 [ 1515.712587][T30611] ? __fget_files+0x21f/0x3d0 [ 1515.712624][T30611] ksys_write+0x12a/0x250 [ 1515.712651][T30611] ? __pfx_ksys_write+0x10/0x10 [ 1515.712682][T30611] ? rcu_is_watching+0x12/0xc0 [ 1515.712717][T30611] do_syscall_64+0x10b/0xf80 [ 1515.712756][T30611] ? clear_bhb_loop+0x40/0x90 [ 1515.712787][T30611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1515.712813][T30611] RIP: 0033:0x7f74a739c819 [ 1515.712841][T30611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1515.712866][T30611] RSP: 002b:00007f74a82b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1515.712890][T30611] RAX: ffffffffffffffda RBX: 00007f74a7615fa0 RCX: 00007f74a739c819 [ 1515.712908][T30611] RDX: 0000000000000af0 RSI: 0000000000000000 RDI: 0000000000000006 [ 1515.712923][T30611] RBP: 00007f74a7432c91 R08: 0000000000000000 R09: 0000000000000000 [ 1515.712939][T30611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1515.712955][T30611] R13: 00007f74a7616038 R14: 00007f74a7615fa0 R15: 00007fffde53edc8 [ 1515.712987][T30611] [ 1516.213749][T30610] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5300'. [ 1516.595944][T30611] event trace: Could not enable event nfsd_file_insert_err [ 1518.352549][T30648] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5309'. [ 1518.516106][T30653] netlink: 13896 bytes leftover after parsing attributes in process `syz.2.5310'. [ 1518.556274][T30653] netlink: 4528 bytes leftover after parsing attributes in process `syz.2.5310'. [ 1520.659222][T28535] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1520.676328][T28535] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1520.686516][T28535] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1520.703529][T28535] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1520.716813][T28535] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1521.699801][T28559] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.134282][T28559] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.323118][T30708] netlink: 13896 bytes leftover after parsing attributes in process `syz.1.5325'. [ 1522.347213][T30708] netlink: 4528 bytes leftover after parsing attributes in process `syz.1.5325'. [ 1522.369447][T28559] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.573516][T28559] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.673667][T30717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5329'. [ 1522.716930][T30717] netlink: 25 bytes leftover after parsing attributes in process `syz.3.5329'. [ 1522.828944][T28535] Bluetooth: hci0: command tx timeout [ 1523.477376][T30690] chnl_net:caif_netlink_parms(): no params data found [ 1523.905938][T30722] kexec: Could not allocate control_code_buffer [ 1524.122205][T28559] batadv0: left allmulticast mode [ 1524.135101][T28559] batadv0: left promiscuous mode [ 1524.152016][T28559] bridge0: port 3(batadv0) entered disabled state [ 1524.176014][T28559] bridge_slave_1: left allmulticast mode [ 1524.188509][T28559] bridge_slave_1: left promiscuous mode [ 1524.204003][T28559] bridge0: port 2(bridge_slave_1) entered disabled state [ 1524.223727][T28559] bridge_slave_0: left allmulticast mode [ 1524.236505][T28559] bridge_slave_0: left promiscuous mode [ 1524.252322][T28559] bridge0: port 1(bridge_slave_0) entered disabled state [ 1524.617644][T28559] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1524.633812][T28559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1524.653699][T28559] bond0 (unregistering): Released all slaves [ 1524.921386][T28535] Bluetooth: hci0: command tx timeout [ 1524.994255][T30690] bridge0: port 1(bridge_slave_0) entered blocking state [ 1525.027268][T30690] bridge0: port 1(bridge_slave_0) entered disabled state [ 1525.043720][T30690] bridge_slave_0: entered allmulticast mode [ 1525.074860][T30690] bridge_slave_0: entered promiscuous mode [ 1525.108594][T30690] bridge0: port 2(bridge_slave_1) entered blocking state [ 1525.139442][T30690] bridge0: port 2(bridge_slave_1) entered disabled state [ 1525.149704][T30690] bridge_slave_1: entered allmulticast mode [ 1525.181244][T30690] bridge_slave_1: entered promiscuous mode [ 1525.424237][T30690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1525.483320][T30690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1525.679555][T30690] team0: Port device team_slave_0 added [ 1525.817961][T30690] team0: Port device team_slave_1 added [ 1525.836981][ T30] audit: type=1804 audit(1843104520.000:33): pid=30754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5336" name="/newroot/80/file0" dev="tmpfs" ino=428 res=1 errno=0 [ 1526.160356][T30690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1526.201534][T30690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1526.352451][T30690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1526.553235][T30690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1526.588013][T30690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1526.726446][T30690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1526.952208][T28559] hsr_slave_0: left promiscuous mode [ 1526.984337][T28559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1526.993000][T28535] Bluetooth: hci0: command tx timeout [ 1527.034800][T28559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1527.146011][T28559] veth1_macvtap: left promiscuous mode [ 1527.171867][T28559] veth0_macvtap: left promiscuous mode [ 1527.194410][T28559] veth1_vlan: left promiscuous mode [ 1527.213200][T28559] veth0_vlan: left promiscuous mode [ 1527.807086][T28559] team0 (unregistering): Port device team_slave_1 removed [ 1527.829199][T28559] team0 (unregistering): Port device team_slave_0 removed [ 1528.022366][ T5508] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1528.215759][T30690] hsr_slave_0: entered promiscuous mode [ 1528.231559][T30690] hsr_slave_1: entered promiscuous mode [ 1529.068848][T28535] Bluetooth: hci0: command tx timeout [ 1530.893190][T30833] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5345'. [ 1532.651797][T30690] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1532.723796][T30690] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1532.765763][T30690] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1532.826167][T30690] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1532.892625][T30866] FAULT_INJECTION: forcing a failure. [ 1532.892625][T30866] name failslab, interval 1, probability 0, space 0, times 0 [ 1533.000228][T30690] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1533.054314][T30690] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1533.063366][T30866] CPU: 0 UID: 0 PID: 30866 Comm: syz.0.5353 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1533.063415][T30866] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1533.063426][T30866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1533.063446][T30866] Call Trace: [ 1533.063455][T30866] [ 1533.063465][T30866] dump_stack_lvl+0x100/0x190 [ 1533.063497][T30866] should_fail_ex.cold+0x5/0xa [ 1533.063530][T30866] should_failslab+0xc2/0x120 [ 1533.063560][T30866] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1533.063601][T30866] ? security_inode_alloc+0x3b/0x2c0 [ 1533.063643][T30866] ? lockdep_init_map_type+0x5c/0x250 [ 1533.063673][T30866] security_inode_alloc+0x3b/0x2c0 [ 1533.063711][T30866] inode_init_always_gfp+0xcc0/0x1000 [ 1533.063747][T30866] alloc_inode+0x8e/0x250 [ 1533.063786][T30866] create_pipe_files+0x4c/0x970 [ 1533.063822][T30866] do_pipe2+0xbd/0x1e0 [ 1533.063853][T30866] ? __pfx_do_pipe2+0x10/0x10 [ 1533.063895][T30866] __x64_sys_pipe2+0x54/0x80 [ 1533.063927][T30866] do_syscall_64+0x10b/0xf80 [ 1533.063965][T30866] ? clear_bhb_loop+0x40/0x90 [ 1533.063995][T30866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1533.064021][T30866] RIP: 0033:0x7f79adb9c819 [ 1533.064041][T30866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1533.064066][T30866] RSP: 002b:00007f79aea95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 1533.064091][T30866] RAX: ffffffffffffffda RBX: 00007f79ade16090 RCX: 00007f79adb9c819 [ 1533.064108][T30866] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1533.064123][T30866] RBP: 00007f79adc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1533.064139][T30866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1533.064155][T30866] R13: 00007f79ade16128 R14: 00007f79ade16090 R15: 00007ffe998a2938 [ 1533.064186][T30866] [ 1533.366607][T30690] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1533.401295][T30690] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1534.247728][T30690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1534.259783][T30891] netlink: 13896 bytes leftover after parsing attributes in process `syz.3.5355'. [ 1534.317527][T30891] netlink: 4528 bytes leftover after parsing attributes in process `syz.3.5355'. [ 1534.543906][T30690] 8021q: adding VLAN 0 to HW filter on device team0 [ 1534.694635][T28605] bridge0: port 1(bridge_slave_0) entered blocking state [ 1534.701897][T28605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1534.793835][T28605] bridge0: port 2(bridge_slave_1) entered blocking state [ 1534.801107][T28605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1536.417305][T30690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1537.179898][T30690] veth0_vlan: entered promiscuous mode [ 1537.448002][T30690] veth1_vlan: entered promiscuous mode [ 1537.644267][T30690] veth0_macvtap: entered promiscuous mode [ 1537.703722][T30690] veth1_macvtap: entered promiscuous mode [ 1538.001263][T30690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1538.096043][T30690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1538.280964][T28559] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1538.320136][T28559] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1538.364399][T28559] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1538.415866][T28559] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1538.629381][T30961] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input19 [ 1538.904894][T28555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1538.955788][T28555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1539.221337][T28555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1539.304361][T28555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1540.333774][T30984] misc userio: Invalid payload size [ 1540.766065][T30962] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20 [ 1542.511126][T31025] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5374'. [ 1542.854503][T31025] hsr_slave_1 (unregistering): left promiscuous mode [ 1543.806916][T31034] FAULT_INJECTION: forcing a failure. [ 1543.806916][T31034] name failslab, interval 1, probability 0, space 0, times 0 [ 1543.904374][T31034] CPU: 0 UID: 0 PID: 31034 Comm: syz.2.5384 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1543.904428][T31034] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1543.904439][T31034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1543.904456][T31034] Call Trace: [ 1543.904465][T31034] [ 1543.904474][T31034] dump_stack_lvl+0x100/0x190 [ 1543.904506][T31034] should_fail_ex.cold+0x5/0xa [ 1543.904539][T31034] ? tracepoint_add_func+0x3a8/0x1150 [ 1543.904576][T31034] should_failslab+0xc2/0x120 [ 1543.904606][T31034] __kmalloc_noprof+0xe0/0x850 [ 1543.904651][T31034] ? __pfx_trace_event_raw_event_nfsd_file_insert_err+0x10/0x10 [ 1543.904683][T31034] tracepoint_add_func+0x3a8/0x1150 [ 1543.904720][T31034] ? __pfx_trace_event_raw_event_nfsd_file_insert_err+0x10/0x10 [ 1543.904758][T31034] ? __pfx_trace_event_raw_event_nfsd_file_insert_err+0x10/0x10 [ 1543.904790][T31034] tracepoint_probe_register+0xc4/0x110 [ 1543.904830][T31034] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 1543.904869][T31034] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1543.904911][T31034] ? __pfx_trace_event_raw_event_nfsd_file_insert_err+0x10/0x10 [ 1543.904946][T31034] ? __pfx_probe_sched_switch+0x10/0x10 [ 1543.904993][T31034] trace_event_reg+0x209/0x350 [ 1543.905028][T31034] __ftrace_event_enable_disable+0x211/0x6f0 [ 1543.905073][T31034] __ftrace_set_clr_event_nolock+0x390/0xc30 [ 1543.905108][T31034] ftrace_set_clr_event+0x1b7/0x3f0 [ 1543.905139][T31034] ? __pfx_ftrace_set_clr_event+0x10/0x10 [ 1543.905168][T31034] ? trace_get_user+0x3ae/0xa70 [ 1543.905214][T31034] ftrace_event_write+0x259/0x2c0 [ 1543.905243][T31034] ? __pfx_ftrace_event_write+0x10/0x10 [ 1543.905284][T31034] vfs_write+0x2aa/0x1070 [ 1543.905314][T31034] ? __pfx_ftrace_event_write+0x10/0x10 [ 1543.905346][T31034] ? __pfx_vfs_write+0x10/0x10 [ 1543.905373][T31034] ? __fget_files+0x215/0x3d0 [ 1543.905416][T31034] ? __fget_files+0x21f/0x3d0 [ 1543.905454][T31034] ksys_write+0x12a/0x250 [ 1543.905483][T31034] ? __pfx_ksys_write+0x10/0x10 [ 1543.905514][T31034] ? rcu_is_watching+0x12/0xc0 [ 1543.905550][T31034] do_syscall_64+0x10b/0xf80 [ 1543.905587][T31034] ? clear_bhb_loop+0x40/0x90 [ 1543.905618][T31034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1543.905644][T31034] RIP: 0033:0x7fe5f859c819 [ 1543.905665][T31034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1543.905690][T31034] RSP: 002b:00007fe5f952c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1543.905714][T31034] RAX: ffffffffffffffda RBX: 00007fe5f8815fa0 RCX: 00007fe5f859c819 [ 1543.905731][T31034] RDX: 0000000000000af0 RSI: 0000000000000000 RDI: 0000000000000006 [ 1543.905746][T31034] RBP: 00007fe5f8632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1543.905762][T31034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1543.905778][T31034] R13: 00007fe5f8816038 R14: 00007fe5f8815fa0 R15: 00007ffe6bef2c68 [ 1543.905810][T31034] [ 1544.219875][T31034] event trace: Could not enable event nfsd_file_insert_err [ 1544.783224][T31051] misc userio: Invalid payload size [ 1545.616435][T31057] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5389'. [ 1546.199125][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.205683][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1549.165741][T31108] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5401'. [ 1550.747729][T31130] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1551.241734][T31138] misc userio: Invalid payload size [ 1555.744970][T31227] misc userio: Invalid payload size [ 1557.047708][T31243] netlink: 202 bytes leftover after parsing attributes in process `syz.0.5433'. [ 1559.071567][T31270] FAULT_INJECTION: forcing a failure. [ 1559.071567][T31270] name failslab, interval 1, probability 0, space 0, times 0 [ 1559.128170][T31270] CPU: 0 UID: 0 PID: 31270 Comm: syz.0.5440 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1559.128220][T31270] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1559.128232][T31270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1559.128248][T31270] Call Trace: [ 1559.128256][T31270] [ 1559.128266][T31270] dump_stack_lvl+0x100/0x190 [ 1559.128299][T31270] should_fail_ex.cold+0x5/0xa [ 1559.128331][T31270] ? tracepoint_add_func+0x3a8/0x1150 [ 1559.128368][T31270] should_failslab+0xc2/0x120 [ 1559.128397][T31270] __kmalloc_noprof+0xe0/0x850 [ 1559.128443][T31270] ? __pfx_trace_event_raw_event_nfsd_file_open_class+0x10/0x10 [ 1559.128489][T31270] tracepoint_add_func+0x3a8/0x1150 [ 1559.128526][T31270] ? __pfx_trace_event_raw_event_nfsd_file_open_class+0x10/0x10 [ 1559.128578][T31270] ? __pfx_trace_event_raw_event_nfsd_file_open_class+0x10/0x10 [ 1559.128627][T31270] tracepoint_probe_register+0xc4/0x110 [ 1559.128667][T31270] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 1559.128706][T31270] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1559.128748][T31270] ? __pfx_trace_event_raw_event_nfsd_file_open_class+0x10/0x10 [ 1559.128793][T31270] ? __pfx_probe_sched_switch+0x10/0x10 [ 1559.128835][T31270] ? __lock_acquire+0x4a5/0x2630 [ 1559.128863][T31270] trace_event_reg+0x209/0x350 [ 1559.128898][T31270] __ftrace_event_enable_disable+0x211/0x6f0 [ 1559.128942][T31270] __ftrace_set_clr_event_nolock+0x390/0xc30 [ 1559.128978][T31270] ftrace_set_clr_event+0x1b7/0x3f0 [ 1559.129009][T31270] ? __pfx_ftrace_set_clr_event+0x10/0x10 [ 1559.129038][T31270] ? trace_get_user+0x3ae/0xa70 [ 1559.129084][T31270] ftrace_event_write+0x259/0x2c0 [ 1559.129114][T31270] ? __pfx_ftrace_event_write+0x10/0x10 [ 1559.129154][T31270] vfs_write+0x2aa/0x1070 [ 1559.129184][T31270] ? __pfx_ftrace_event_write+0x10/0x10 [ 1559.129223][T31270] ? __pfx_vfs_write+0x10/0x10 [ 1559.129250][T31270] ? __fget_files+0x215/0x3d0 [ 1559.129285][T31270] ? __fget_files+0x21f/0x3d0 [ 1559.129323][T31270] ksys_write+0x12a/0x250 [ 1559.129352][T31270] ? __pfx_ksys_write+0x10/0x10 [ 1559.129383][T31270] ? rcu_is_watching+0x12/0xc0 [ 1559.129418][T31270] do_syscall_64+0x10b/0xf80 [ 1559.129456][T31270] ? clear_bhb_loop+0x40/0x90 [ 1559.129487][T31270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1559.129514][T31270] RIP: 0033:0x7f79adb9c819 [ 1559.129535][T31270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1559.129560][T31270] RSP: 002b:00007f79aeab6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1559.129585][T31270] RAX: ffffffffffffffda RBX: 00007f79ade15fa0 RCX: 00007f79adb9c819 [ 1559.129603][T31270] RDX: 0000000000000af0 RSI: 0000000000000000 RDI: 0000000000000006 [ 1559.129619][T31270] RBP: 00007f79adc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1559.129635][T31270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1559.129650][T31270] R13: 00007f79ade16038 R14: 00007f79ade15fa0 R15: 00007ffe998a2938 [ 1559.129684][T31270] [ 1560.302492][T31270] event trace: Could not enable event nfsd_file_open [ 1562.534671][T31325] ksmbd: Unknown IPC event: 14, ignore. [ 1563.698176][T31341] FAULT_INJECTION: forcing a failure. [ 1563.698176][T31341] name failslab, interval 1, probability 0, space 0, times 0 [ 1563.783551][T31341] CPU: 0 UID: 0 PID: 31341 Comm: syz.0.5456 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1563.783595][T31341] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1563.783607][T31341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1563.783623][T31341] Call Trace: [ 1563.783631][T31341] [ 1563.783641][T31341] dump_stack_lvl+0x100/0x190 [ 1563.783672][T31341] should_fail_ex.cold+0x5/0xa [ 1563.783704][T31341] ? tracepoint_add_func+0x3a8/0x1150 [ 1563.783742][T31341] should_failslab+0xc2/0x120 [ 1563.783781][T31341] __kmalloc_noprof+0xe0/0x850 [ 1563.783826][T31341] ? __pfx_trace_event_raw_event_nfsd_file_insert_err+0x10/0x10 [ 1563.783862][T31341] tracepoint_add_func+0x3a8/0x1150 [ 1563.783899][T31341] ? __pfx_trace_event_raw_event_nfsd_file_insert_err+0x10/0x10 [ 1563.783937][T31341] ? __pfx_trace_event_raw_event_nfsd_file_insert_err+0x10/0x10 [ 1563.783969][T31341] tracepoint_probe_register+0xc4/0x110 [ 1563.784008][T31341] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 1563.784047][T31341] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1563.784089][T31341] ? __pfx_trace_event_raw_event_nfsd_file_insert_err+0x10/0x10 [ 1563.784121][T31341] ? __pfx_probe_sched_switch+0x10/0x10 [ 1563.784161][T31341] ? __lock_acquire+0x4a5/0x2630 [ 1563.784190][T31341] trace_event_reg+0x209/0x350 [ 1563.784225][T31341] __ftrace_event_enable_disable+0x211/0x6f0 [ 1563.784270][T31341] __ftrace_set_clr_event_nolock+0x390/0xc30 [ 1563.784304][T31341] ftrace_set_clr_event+0x1b7/0x3f0 [ 1563.784336][T31341] ? __pfx_ftrace_set_clr_event+0x10/0x10 [ 1563.784364][T31341] ? trace_get_user+0x3ae/0xa70 [ 1563.784411][T31341] ftrace_event_write+0x259/0x2c0 [ 1563.784440][T31341] ? __pfx_ftrace_event_write+0x10/0x10 [ 1563.784481][T31341] vfs_write+0x2aa/0x1070 [ 1563.784510][T31341] ? __pfx_ftrace_event_write+0x10/0x10 [ 1563.784541][T31341] ? __pfx_vfs_write+0x10/0x10 [ 1563.784568][T31341] ? __fget_files+0x215/0x3d0 [ 1563.784603][T31341] ? __fget_files+0x21f/0x3d0 [ 1563.784640][T31341] ksys_write+0x12a/0x250 [ 1563.784668][T31341] ? __pfx_ksys_write+0x10/0x10 [ 1563.784699][T31341] ? rcu_is_watching+0x12/0xc0 [ 1563.784733][T31341] do_syscall_64+0x10b/0xf80 [ 1563.784777][T31341] ? clear_bhb_loop+0x40/0x90 [ 1563.784809][T31341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1563.784836][T31341] RIP: 0033:0x7f79adb9c819 [ 1563.784857][T31341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1563.784882][T31341] RSP: 002b:00007f79aeab6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1563.784906][T31341] RAX: ffffffffffffffda RBX: 00007f79ade15fa0 RCX: 00007f79adb9c819 [ 1563.784923][T31341] RDX: 0000000000000af0 RSI: 0000000000000000 RDI: 0000000000000006 [ 1563.784939][T31341] RBP: 00007f79adc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1563.784955][T31341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1563.784970][T31341] R13: 00007f79ade16038 R14: 00007f79ade15fa0 R15: 00007ffe998a2938 [ 1563.785002][T31341] [ 1564.097206][T31341] event trace: Could not enable event nfsd_file_insert_err [ 1565.639356][T31359] misc userio: Invalid payload size [ 1566.887827][T31372] netlink: 13896 bytes leftover after parsing attributes in process `syz.3.5463'. [ 1566.950002][T31372] netlink: 4528 bytes leftover after parsing attributes in process `syz.3.5463'. [ 1569.672505][T31393] FAULT_INJECTION: forcing a failure. [ 1569.672505][T31393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1569.915115][T31393] CPU: 0 UID: 0 PID: 31393 Comm: syz.2.5469 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1569.915159][T31393] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1569.915171][T31393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1569.915187][T31393] Call Trace: [ 1569.915196][T31393] [ 1569.915206][T31393] dump_stack_lvl+0x100/0x190 [ 1569.915244][T31393] should_fail_ex.cold+0x5/0xa [ 1569.915276][T31393] _copy_from_user+0x2e/0xd0 [ 1569.915316][T31393] copy_msghdr_from_user+0x9f/0x4f0 [ 1569.915355][T31393] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1569.915396][T31393] ? rcu_is_watching+0x12/0xc0 [ 1569.915426][T31393] ? ___sys_recvmsg+0x177/0x1a0 [ 1569.915460][T31393] ? kfree+0x1dd/0x6c0 [ 1569.915507][T31393] ___sys_recvmsg+0xdd/0x1a0 [ 1569.915544][T31393] ? __pfx____sys_recvmsg+0x10/0x10 [ 1569.915601][T31393] ? __pfx___might_resched+0x10/0x10 [ 1569.915635][T31393] do_recvmmsg+0x301/0x760 [ 1569.915676][T31393] ? __pfx_do_recvmmsg+0x10/0x10 [ 1569.915718][T31393] ? do_futex+0x192/0x350 [ 1569.915757][T31393] ? __x64_sys_futex+0x34f/0x4d0 [ 1569.915787][T31393] __x64_sys_recvmmsg+0x22a/0x280 [ 1569.915817][T31393] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1569.915849][T31393] ? rcu_is_watching+0x12/0xc0 [ 1569.915883][T31393] do_syscall_64+0x10b/0xf80 [ 1569.915931][T31393] ? clear_bhb_loop+0x40/0x90 [ 1569.915962][T31393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1569.915989][T31393] RIP: 0033:0x7fe5f859c819 [ 1569.916010][T31393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1569.916035][T31393] RSP: 002b:00007fe5f952c028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1569.916059][T31393] RAX: ffffffffffffffda RBX: 00007fe5f8815fa0 RCX: 00007fe5f859c819 [ 1569.916077][T31393] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1569.916092][T31393] RBP: 00007fe5f8632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1569.916109][T31393] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 1569.916125][T31393] R13: 00007fe5f8816038 R14: 00007fe5f8815fa0 R15: 00007ffe6bef2c68 [ 1569.916156][T31393] [ 1572.899534][ T30] audit: type=1800 audit(1843104526.310:34): pid=31434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5478" name="dbroot" dev="configfs" ino=147890 res=0 errno=0 [ 1573.327813][T31422] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5484'. [ 1574.203574][T31460] FAULT_INJECTION: forcing a failure. [ 1574.203574][T31460] name failslab, interval 1, probability 0, space 0, times 0 [ 1574.296090][T31460] CPU: 0 UID: 0 PID: 31460 Comm: syz.0.5485 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1574.296134][T31460] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1574.296146][T31460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1574.296163][T31460] Call Trace: [ 1574.296172][T31460] [ 1574.296181][T31460] dump_stack_lvl+0x100/0x190 [ 1574.296214][T31460] should_fail_ex.cold+0x5/0xa [ 1574.296247][T31460] ? tracepoint_add_func+0x3a8/0x1150 [ 1574.296285][T31460] should_failslab+0xc2/0x120 [ 1574.296314][T31460] __kmalloc_noprof+0xe0/0x850 [ 1574.296359][T31460] ? __pfx_trace_event_raw_event_nfsd_file_open_class+0x10/0x10 [ 1574.296406][T31460] tracepoint_add_func+0x3a8/0x1150 [ 1574.296443][T31460] ? __pfx_trace_event_raw_event_nfsd_file_open_class+0x10/0x10 [ 1574.296494][T31460] ? __pfx_trace_event_raw_event_nfsd_file_open_class+0x10/0x10 [ 1574.296540][T31460] tracepoint_probe_register+0xc4/0x110 [ 1574.296580][T31460] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 1574.296619][T31460] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1574.296661][T31460] ? __pfx_trace_event_raw_event_nfsd_file_open_class+0x10/0x10 [ 1574.296716][T31460] trace_event_reg+0x209/0x350 [ 1574.296752][T31460] __ftrace_event_enable_disable+0x211/0x6f0 [ 1574.296797][T31460] __ftrace_set_clr_event_nolock+0x390/0xc30 [ 1574.296833][T31460] ftrace_set_clr_event+0x1b7/0x3f0 [ 1574.296873][T31460] ? __pfx_ftrace_set_clr_event+0x10/0x10 [ 1574.296901][T31460] ? trace_get_user+0x3ae/0xa70 [ 1574.296948][T31460] ftrace_event_write+0x259/0x2c0 [ 1574.296978][T31460] ? __pfx_ftrace_event_write+0x10/0x10 [ 1574.297019][T31460] vfs_write+0x2aa/0x1070 [ 1574.297049][T31460] ? __pfx_ftrace_event_write+0x10/0x10 [ 1574.297081][T31460] ? __pfx_vfs_write+0x10/0x10 [ 1574.297108][T31460] ? __fget_files+0x215/0x3d0 [ 1574.297144][T31460] ? __fget_files+0x21f/0x3d0 [ 1574.297181][T31460] ksys_write+0x12a/0x250 [ 1574.297209][T31460] ? __pfx_ksys_write+0x10/0x10 [ 1574.297243][T31460] ? rcu_is_watching+0x12/0xc0 [ 1574.297277][T31460] do_syscall_64+0x10b/0xf80 [ 1574.297315][T31460] ? clear_bhb_loop+0x40/0x90 [ 1574.297347][T31460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1574.297373][T31460] RIP: 0033:0x7f79adb9c819 [ 1574.297394][T31460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1574.297419][T31460] RSP: 002b:00007f79aeab6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1574.297443][T31460] RAX: ffffffffffffffda RBX: 00007f79ade15fa0 RCX: 00007f79adb9c819 [ 1574.297460][T31460] RDX: 0000000000000af0 RSI: 0000000000000000 RDI: 0000000000000006 [ 1574.297476][T31460] RBP: 00007f79adc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1574.297492][T31460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1574.297508][T31460] R13: 00007f79ade16038 R14: 00007f79ade15fa0 R15: 00007ffe998a2938 [ 1574.297541][T31460] [ 1574.900083][T31460] event trace: Could not enable event nfsd_file_open [ 1576.393177][T31474] netlink: 13896 bytes leftover after parsing attributes in process `syz.0.5489'. [ 1576.447491][T31474] netlink: 4528 bytes leftover after parsing attributes in process `syz.0.5489'. [ 1577.555239][T31483] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5491'. [ 1577.732027][T31499] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 1577.937335][T31498] ima: policy update failed [ 1578.016135][ T30] audit: type=1802 audit(1843104531.430:35): pid=31498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.5497" res=0 errno=0 [ 1579.132548][T31525] misc userio: Invalid payload size [ 1579.762377][T31535] random: crng reseeded on system resumption [ 1580.938170][T31535] hub 1-0:1.0: USB hub found [ 1580.986400][T31535] hub 1-0:1.0: 1 port detected [ 1581.387922][T31564] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5511'. [ 1581.490992][T31564] bond0: (slave bond_slave_1): Releasing backup interface [ 1581.900803][T31578] misc userio: Invalid payload size [ 1583.478253][T31605] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1583.513419][T31605] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1583.546399][T31605] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1583.574521][T31605] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1583.600383][T31605] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1583.757192][T31605] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1585.472327][T28535] Bluetooth: hci1: command 0x0c1a tx timeout [ 1585.549380][T28535] Bluetooth: hci3: command 0x0c1a tx timeout [ 1585.555777][T30235] Bluetooth: hci4: command 0x0c1a tx timeout [ 1585.629310][T30235] Bluetooth: hci0: command 0x0c1a tx timeout [ 1585.799377][T31637] misc userio: Invalid payload size [ 1587.515948][T31657] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5531'. [ 1587.709940][T30235] Bluetooth: hci0: command 0x0c1a tx timeout [ 1588.352551][T31680] FAULT_INJECTION: forcing a failure. [ 1588.352551][T31680] name failslab, interval 1, probability 0, space 0, times 0 [ 1588.411490][T31680] CPU: 0 UID: 0 PID: 31680 Comm: syz.0.5538 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1588.411535][T31680] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1588.411546][T31680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1588.411562][T31680] Call Trace: [ 1588.411571][T31680] [ 1588.411581][T31680] dump_stack_lvl+0x100/0x190 [ 1588.411613][T31680] should_fail_ex.cold+0x5/0xa [ 1588.411645][T31680] ? tracepoint_add_func+0x3a8/0x1150 [ 1588.411684][T31680] should_failslab+0xc2/0x120 [ 1588.411713][T31680] __kmalloc_noprof+0xe0/0x850 [ 1588.411764][T31680] ? __pfx_trace_event_raw_event_nfsd_file_open_class+0x10/0x10 [ 1588.411811][T31680] tracepoint_add_func+0x3a8/0x1150 [ 1588.411852][T31680] ? __pfx_trace_event_raw_event_nfsd_file_open_class+0x10/0x10 [ 1588.411903][T31680] ? __pfx_trace_event_raw_event_nfsd_file_open_class+0x10/0x10 [ 1588.411949][T31680] tracepoint_probe_register+0xc4/0x110 [ 1588.411989][T31680] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 1588.412028][T31680] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1588.412070][T31680] ? __pfx_trace_event_raw_event_nfsd_file_open_class+0x10/0x10 [ 1588.412115][T31680] ? __pfx_probe_sched_switch+0x10/0x10 [ 1588.412155][T31680] ? __lock_acquire+0x4a5/0x2630 [ 1588.412183][T31680] trace_event_reg+0x209/0x350 [ 1588.412219][T31680] __ftrace_event_enable_disable+0x211/0x6f0 [ 1588.412262][T31680] __ftrace_set_clr_event_nolock+0x390/0xc30 [ 1588.412297][T31680] ftrace_set_clr_event+0x1b7/0x3f0 [ 1588.412328][T31680] ? __pfx_ftrace_set_clr_event+0x10/0x10 [ 1588.412357][T31680] ? trace_get_user+0x3ae/0xa70 [ 1588.412403][T31680] ftrace_event_write+0x259/0x2c0 [ 1588.412461][T31680] ? __pfx_ftrace_event_write+0x10/0x10 [ 1588.412502][T31680] vfs_write+0x2aa/0x1070 [ 1588.412531][T31680] ? __pfx_ftrace_event_write+0x10/0x10 [ 1588.412563][T31680] ? __pfx_vfs_write+0x10/0x10 [ 1588.412591][T31680] ? __fget_files+0x215/0x3d0 [ 1588.412626][T31680] ? __fget_files+0x21f/0x3d0 [ 1588.412664][T31680] ksys_write+0x12a/0x250 [ 1588.412691][T31680] ? __pfx_ksys_write+0x10/0x10 [ 1588.412722][T31680] ? rcu_is_watching+0x12/0xc0 [ 1588.412762][T31680] do_syscall_64+0x10b/0xf80 [ 1588.412800][T31680] ? clear_bhb_loop+0x40/0x90 [ 1588.412832][T31680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1588.412858][T31680] RIP: 0033:0x7f79adb9c819 [ 1588.412879][T31680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1588.412905][T31680] RSP: 002b:00007f79aeab6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1588.412929][T31680] RAX: ffffffffffffffda RBX: 00007f79ade15fa0 RCX: 00007f79adb9c819 [ 1588.412947][T31680] RDX: 0000000000000af0 RSI: 0000000000000000 RDI: 0000000000000006 [ 1588.412962][T31680] RBP: 00007f79adc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1588.412979][T31680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1588.412994][T31680] R13: 00007f79ade16038 R14: 00007f79ade15fa0 R15: 00007ffe998a2938 [ 1588.413026][T31680] [ 1588.735587][T31680] event trace: Could not enable event nfsd_file_open [ 1588.849223][T31686] FAULT_INJECTION: forcing a failure. [ 1588.849223][T31686] name failslab, interval 1, probability 0, space 0, times 0 [ 1588.862818][T31686] CPU: 0 UID: 0 PID: 31686 Comm: syz.3.5539 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1588.862861][T31686] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1588.862873][T31686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1588.862888][T31686] Call Trace: [ 1588.862897][T31686] [ 1588.862906][T31686] dump_stack_lvl+0x100/0x190 [ 1588.862938][T31686] should_fail_ex.cold+0x5/0xa [ 1588.862971][T31686] should_failslab+0xc2/0x120 [ 1588.863000][T31686] __kvmalloc_node_noprof+0xfa/0xa00 [ 1588.863024][T31686] ? v4l2_ctrl_new+0x4a6/0x23a0 [ 1588.863062][T31686] v4l2_ctrl_new+0x4a6/0x23a0 [ 1588.863102][T31686] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 1588.863131][T31686] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 1588.863175][T31686] v4l2_ctrl_new_std+0x1bb/0x290 [ 1588.863214][T31686] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 1588.863244][T31686] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 1588.863279][T31686] ? trace_kmalloc+0xe3/0x110 [ 1588.863311][T31686] ? v4l2_ctrl_handler_init_class+0x201/0x350 [ 1588.863341][T31686] ? lockdep_set_lock_cmp_fn+0xc0/0xe0 [ 1588.863370][T31686] ? media_request_object_init+0x105/0x180 [ 1588.863402][T31686] vim2m_open+0x164/0x830 [ 1588.863431][T31686] v4l2_open+0x1d2/0x490 [ 1588.863460][T31686] ? __pfx_v4l2_open+0x10/0x10 [ 1588.863489][T31686] chrdev_open+0x234/0x6a0 [ 1588.863519][T31686] ? __pfx_apparmor_file_open+0x10/0x10 [ 1588.863557][T31686] ? __pfx_chrdev_open+0x10/0x10 [ 1588.863590][T31686] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1588.863660][T31686] do_dentry_open+0x6d8/0x1660 [ 1588.863691][T31686] ? __pfx_chrdev_open+0x10/0x10 [ 1588.863729][T31686] vfs_open+0x82/0x3f0 [ 1588.863768][T31686] path_openat+0x208c/0x31a0 [ 1588.863810][T31686] ? __pfx_path_openat+0x10/0x10 [ 1588.863851][T31686] do_file_open+0x20e/0x430 [ 1588.863885][T31686] ? __pfx_do_file_open+0x10/0x10 [ 1588.863936][T31686] ? alloc_fd+0x476/0x790 [ 1588.863969][T31686] ? do_getname+0x191/0x390 [ 1588.864008][T31686] do_sys_openat2+0x10d/0x1e0 [ 1588.864047][T31686] ? __pfx_do_sys_openat2+0x10/0x10 [ 1588.864088][T31686] ? __fget_files+0x21f/0x3d0 [ 1588.864122][T31686] __x64_sys_openat+0x12d/0x210 [ 1588.864162][T31686] ? __pfx___x64_sys_openat+0x10/0x10 [ 1588.864207][T31686] ? rcu_is_watching+0x12/0xc0 [ 1588.864241][T31686] do_syscall_64+0x10b/0xf80 [ 1588.864280][T31686] ? clear_bhb_loop+0x40/0x90 [ 1588.864311][T31686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1588.864337][T31686] RIP: 0033:0x7fef0d59c819 [ 1588.864358][T31686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1588.864383][T31686] RSP: 002b:00007fef0e465028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1588.864408][T31686] RAX: ffffffffffffffda RBX: 00007fef0d816180 RCX: 00007fef0d59c819 [ 1588.864425][T31686] RDX: 000000000002aa01 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 1588.864443][T31686] RBP: 00007fef0d632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1588.864458][T31686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1588.864474][T31686] R13: 00007fef0d816218 R14: 00007fef0d816180 R15: 00007fff4a7c6b88 [ 1588.864506][T31686] [ 1589.546914][T31694] ima: policy update failed [ 1589.604374][ T30] audit: type=1804 audit(1843104521.100:36): pid=31695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5541" name="/newroot/sys/kernel/tracing/set_event" dev="tracefs" ino=1070 res=1 errno=0 [ 1589.691863][ T30] audit: type=1802 audit(1843104521.150:37): pid=31694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.5541" res=0 errno=0 [ 1589.809602][T30235] Bluetooth: hci0: command 0x0c1a tx timeout [ 1590.208889][T31693] FAULT_INJECTION: forcing a failure. [ 1590.208889][T31693] name failslab, interval 1, probability 0, space 0, times 0 [ 1590.421227][T31693] CPU: 0 UID: 0 PID: 31693 Comm: syz.0.5542 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1590.421273][T31693] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1590.421285][T31693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1590.421301][T31693] Call Trace: [ 1590.421310][T31693] [ 1590.421319][T31693] dump_stack_lvl+0x100/0x190 [ 1590.421351][T31693] should_fail_ex.cold+0x5/0xa [ 1590.421384][T31693] ? tracepoint_add_func+0x3a8/0x1150 [ 1590.421422][T31693] should_failslab+0xc2/0x120 [ 1590.421451][T31693] __kmalloc_noprof+0xe0/0x850 [ 1590.421496][T31693] ? __pfx_trace_event_raw_event_nfsd_file_is_cached+0x10/0x10 [ 1590.421528][T31693] tracepoint_add_func+0x3a8/0x1150 [ 1590.421566][T31693] ? __pfx_trace_event_raw_event_nfsd_file_is_cached+0x10/0x10 [ 1590.421611][T31693] ? __pfx_trace_event_raw_event_nfsd_file_is_cached+0x10/0x10 [ 1590.421643][T31693] tracepoint_probe_register+0xc4/0x110 [ 1590.421684][T31693] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 1590.421723][T31693] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1590.421765][T31693] ? __pfx_trace_event_raw_event_nfsd_file_is_cached+0x10/0x10 [ 1590.421797][T31693] ? __pfx_probe_sched_switch+0x10/0x10 [ 1590.421843][T31693] trace_event_reg+0x209/0x350 [ 1590.421878][T31693] __ftrace_event_enable_disable+0x211/0x6f0 [ 1590.421927][T31693] __ftrace_set_clr_event_nolock+0x390/0xc30 [ 1590.421962][T31693] ftrace_set_clr_event+0x1b7/0x3f0 [ 1590.421992][T31693] ? __pfx_ftrace_set_clr_event+0x10/0x10 [ 1590.422021][T31693] ? trace_get_user+0x3ae/0xa70 [ 1590.422067][T31693] ftrace_event_write+0x259/0x2c0 [ 1590.422097][T31693] ? __pfx_ftrace_event_write+0x10/0x10 [ 1590.422137][T31693] vfs_write+0x2aa/0x1070 [ 1590.422166][T31693] ? __pfx_ftrace_event_write+0x10/0x10 [ 1590.422198][T31693] ? __pfx_vfs_write+0x10/0x10 [ 1590.422226][T31693] ? __fget_files+0x215/0x3d0 [ 1590.422261][T31693] ? __fget_files+0x21f/0x3d0 [ 1590.422298][T31693] ksys_write+0x12a/0x250 [ 1590.422326][T31693] ? __pfx_ksys_write+0x10/0x10 [ 1590.422357][T31693] ? rcu_is_watching+0x12/0xc0 [ 1590.422392][T31693] do_syscall_64+0x10b/0xf80 [ 1590.422430][T31693] ? clear_bhb_loop+0x40/0x90 [ 1590.422461][T31693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1590.422488][T31693] RIP: 0033:0x7f79adb9c819 [ 1590.422509][T31693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1590.422534][T31693] RSP: 002b:00007f79aeab6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1590.422558][T31693] RAX: ffffffffffffffda RBX: 00007f79ade15fa0 RCX: 00007f79adb9c819 [ 1590.422575][T31693] RDX: 0000000000000af0 RSI: 0000000000000000 RDI: 0000000000000006 [ 1590.422598][T31693] RBP: 00007f79adc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1590.422614][T31693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1590.422630][T31693] R13: 00007f79ade16038 R14: 00007f79ade15fa0 R15: 00007ffe998a2938 [ 1590.422663][T31693] [ 1590.778922][T31693] event trace: Could not enable event nfsd_file_is_cached [ 1593.166575][T31748] misc userio: Invalid payload size [ 1594.753686][T31774] netlink: 342 bytes leftover after parsing attributes in process `syz.1.5559'. [ 1594.848279][T31774] netlink: 342 bytes leftover after parsing attributes in process `syz.1.5559'. [ 1595.348490][T31788] misc userio: Invalid payload size [ 1596.741042][T31805] netlink: 13896 bytes leftover after parsing attributes in process `syz.1.5564'. [ 1596.797117][T31805] netlink: 4528 bytes leftover after parsing attributes in process `syz.1.5564'. [ 1597.637476][T31824] FAULT_INJECTION: forcing a failure. [ 1597.637476][T31824] name failslab, interval 1, probability 0, space 0, times 0 [ 1597.748865][T31824] CPU: 0 UID: 0 PID: 31824 Comm: syz.1.5569 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1597.748909][T31824] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1597.748920][T31824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1597.748937][T31824] Call Trace: [ 1597.748945][T31824] [ 1597.748955][T31824] dump_stack_lvl+0x100/0x190 [ 1597.748995][T31824] should_fail_ex.cold+0x5/0xa [ 1597.749027][T31824] ? tracepoint_add_func+0x3a8/0x1150 [ 1597.749064][T31824] should_failslab+0xc2/0x120 [ 1597.749094][T31824] __kmalloc_noprof+0xe0/0x850 [ 1597.749138][T31824] ? __pfx_trace_event_raw_event_nfsd_file_cons_err+0x10/0x10 [ 1597.749170][T31824] tracepoint_add_func+0x3a8/0x1150 [ 1597.749207][T31824] ? __pfx_trace_event_raw_event_nfsd_file_cons_err+0x10/0x10 [ 1597.749243][T31824] ? __pfx_trace_event_raw_event_nfsd_file_cons_err+0x10/0x10 [ 1597.749274][T31824] tracepoint_probe_register+0xc4/0x110 [ 1597.749315][T31824] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 1597.749353][T31824] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1597.749394][T31824] ? __pfx_trace_event_raw_event_nfsd_file_cons_err+0x10/0x10 [ 1597.749424][T31824] ? __pfx_probe_sched_switch+0x10/0x10 [ 1597.749464][T31824] ? __lock_acquire+0x4a5/0x2630 [ 1597.749492][T31824] trace_event_reg+0x209/0x350 [ 1597.749528][T31824] __ftrace_event_enable_disable+0x211/0x6f0 [ 1597.749572][T31824] __ftrace_set_clr_event_nolock+0x390/0xc30 [ 1597.749607][T31824] ftrace_set_clr_event+0x1b7/0x3f0 [ 1597.749638][T31824] ? __pfx_ftrace_set_clr_event+0x10/0x10 [ 1597.749667][T31824] ? trace_get_user+0x3ae/0xa70 [ 1597.749713][T31824] ftrace_event_write+0x259/0x2c0 [ 1597.749743][T31824] ? __pfx_ftrace_event_write+0x10/0x10 [ 1597.749784][T31824] vfs_write+0x2aa/0x1070 [ 1597.749814][T31824] ? __pfx_ftrace_event_write+0x10/0x10 [ 1597.749846][T31824] ? __pfx_vfs_write+0x10/0x10 [ 1597.749873][T31824] ? __fget_files+0x215/0x3d0 [ 1597.749909][T31824] ? __fget_files+0x21f/0x3d0 [ 1597.749946][T31824] ksys_write+0x12a/0x250 [ 1597.749980][T31824] ? __pfx_ksys_write+0x10/0x10 [ 1597.750010][T31824] ? rcu_is_watching+0x12/0xc0 [ 1597.750046][T31824] do_syscall_64+0x10b/0xf80 [ 1597.750084][T31824] ? clear_bhb_loop+0x40/0x90 [ 1597.750115][T31824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1597.750142][T31824] RIP: 0033:0x7f74a739c819 [ 1597.750163][T31824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1597.750189][T31824] RSP: 002b:00007f74a82b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1597.750214][T31824] RAX: ffffffffffffffda RBX: 00007f74a7615fa0 RCX: 00007f74a739c819 [ 1597.750234][T31824] RDX: 0000000000000af0 RSI: 0000000000000000 RDI: 0000000000000006 [ 1597.750250][T31824] RBP: 00007f74a7432c91 R08: 0000000000000000 R09: 0000000000000000 [ 1597.750265][T31824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1597.750280][T31824] R13: 00007f74a7616038 R14: 00007f74a7615fa0 R15: 00007fffde53edc8 [ 1597.750319][T31824] [ 1597.757466][T31824] event trace: Could not enable event nfsd_file_cons_err [ 1599.651644][T31846] FAULT_INJECTION: forcing a failure. [ 1599.651644][T31846] name failslab, interval 1, probability 0, space 0, times 0 [ 1599.866743][T31846] CPU: 0 UID: 0 PID: 31846 Comm: syz.3.5572 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1599.866787][T31846] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1599.866799][T31846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1599.866815][T31846] Call Trace: [ 1599.866824][T31846] [ 1599.866833][T31846] dump_stack_lvl+0x100/0x190 [ 1599.866866][T31846] should_fail_ex.cold+0x5/0xa [ 1599.866898][T31846] should_failslab+0xc2/0x120 [ 1599.866928][T31846] __kmalloc_node_noprof+0xe6/0x850 [ 1599.866969][T31846] ? get_callchain_buffers+0x1e5/0x380 [ 1599.867009][T31846] get_callchain_buffers+0x1e5/0x380 [ 1599.867042][T31846] ? security_capable+0x80/0x260 [ 1599.867078][T31846] stack_map_alloc+0x316/0x610 [ 1599.867109][T31846] ? __pfx_stack_map_mem_usage+0x10/0x10 [ 1599.867140][T31846] map_create+0x84e/0x2bc0 [ 1599.867177][T31846] ? futex_unqueue+0x13d/0x2c0 [ 1599.867203][T31846] ? __futex_wait+0x256/0x300 [ 1599.867243][T31846] ? __pfx_map_create+0x10/0x10 [ 1599.867279][T31846] ? __might_fault+0xc5/0x140 [ 1599.867321][T31846] ? __might_fault+0xc5/0x140 [ 1599.867371][T31846] __sys_bpf+0x2091/0x4b90 [ 1599.867400][T31846] ? __pfx___sys_bpf+0x10/0x10 [ 1599.867424][T31846] ? __pfx_futex_wait+0x10/0x10 [ 1599.867464][T31846] ? ksys_write+0x190/0x250 [ 1599.867492][T31846] ? ksys_write+0x190/0x250 [ 1599.867526][T31846] ? do_futex+0x192/0x350 [ 1599.867568][T31846] ? xfd_validate_state+0x129/0x190 [ 1599.867594][T31846] ? ksys_write+0x1ac/0x250 [ 1599.867629][T31846] __x64_sys_bpf+0x7b/0xc0 [ 1599.867654][T31846] ? lockdep_hardirqs_on+0x78/0x100 [ 1599.867715][T31846] do_syscall_64+0x10b/0xf80 [ 1599.867754][T31846] ? clear_bhb_loop+0x40/0x90 [ 1599.867785][T31846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1599.867811][T31846] RIP: 0033:0x7fef0d59c819 [ 1599.867831][T31846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1599.867856][T31846] RSP: 002b:00007fef0e4a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1599.867881][T31846] RAX: ffffffffffffffda RBX: 00007fef0d815fa0 RCX: 00007fef0d59c819 [ 1599.867899][T31846] RDX: 00000000000006f4 RSI: 0000200000000580 RDI: 0000000000000000 [ 1599.867915][T31846] RBP: 00007fef0d632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1599.867931][T31846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1599.867947][T31846] R13: 00007fef0d816038 R14: 00007fef0d815fa0 R15: 00007fff4a7c6b88 [ 1599.867979][T31846] [ 1603.002147][T31888] FAULT_INJECTION: forcing a failure. [ 1603.002147][T31888] name failslab, interval 1, probability 0, space 0, times 0 [ 1603.046657][T31888] CPU: 0 UID: 0 PID: 31888 Comm: syz.0.5579 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1603.046701][T31888] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1603.046713][T31888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1603.046729][T31888] Call Trace: [ 1603.046738][T31888] [ 1603.046748][T31888] dump_stack_lvl+0x100/0x190 [ 1603.046780][T31888] should_fail_ex.cold+0x5/0xa [ 1603.046813][T31888] ? tracepoint_add_func+0x3a8/0x1150 [ 1603.046850][T31888] should_failslab+0xc2/0x120 [ 1603.046880][T31888] __kmalloc_noprof+0xe0/0x850 [ 1603.046925][T31888] ? __pfx_trace_event_raw_event_nfsd_file_open_class+0x10/0x10 [ 1603.046972][T31888] tracepoint_add_func+0x3a8/0x1150 [ 1603.047009][T31888] ? __pfx_trace_event_raw_event_nfsd_file_open_class+0x10/0x10 [ 1603.047061][T31888] ? __pfx_trace_event_raw_event_nfsd_file_open_class+0x10/0x10 [ 1603.047107][T31888] tracepoint_probe_register+0xc4/0x110 [ 1603.047147][T31888] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 1603.047186][T31888] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1603.047228][T31888] ? __pfx_trace_event_raw_event_nfsd_file_open_class+0x10/0x10 [ 1603.047273][T31888] ? __pfx_probe_sched_switch+0x10/0x10 [ 1603.047313][T31888] ? __lock_acquire+0x4a5/0x2630 [ 1603.047340][T31888] trace_event_reg+0x209/0x350 [ 1603.047375][T31888] __ftrace_event_enable_disable+0x211/0x6f0 [ 1603.047455][T31888] __ftrace_set_clr_event_nolock+0x390/0xc30 [ 1603.047492][T31888] ftrace_set_clr_event+0x1b7/0x3f0 [ 1603.047523][T31888] ? __pfx_ftrace_set_clr_event+0x10/0x10 [ 1603.047552][T31888] ? trace_get_user+0x3ae/0xa70 [ 1603.047598][T31888] ftrace_event_write+0x259/0x2c0 [ 1603.047628][T31888] ? __pfx_ftrace_event_write+0x10/0x10 [ 1603.047669][T31888] vfs_write+0x2aa/0x1070 [ 1603.047698][T31888] ? __pfx_ftrace_event_write+0x10/0x10 [ 1603.047730][T31888] ? __pfx_vfs_write+0x10/0x10 [ 1603.047757][T31888] ? __fget_files+0x215/0x3d0 [ 1603.047793][T31888] ? __fget_files+0x21f/0x3d0 [ 1603.047830][T31888] ksys_write+0x12a/0x250 [ 1603.047858][T31888] ? __pfx_ksys_write+0x10/0x10 [ 1603.047889][T31888] ? rcu_is_watching+0x12/0xc0 [ 1603.047924][T31888] do_syscall_64+0x10b/0xf80 [ 1603.047962][T31888] ? clear_bhb_loop+0x40/0x90 [ 1603.047993][T31888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1603.048027][T31888] RIP: 0033:0x7f79adb9c819 [ 1603.048048][T31888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1603.048073][T31888] RSP: 002b:00007f79aeab6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1603.048097][T31888] RAX: ffffffffffffffda RBX: 00007f79ade15fa0 RCX: 00007f79adb9c819 [ 1603.048115][T31888] RDX: 0000000000000af0 RSI: 0000000000000000 RDI: 0000000000000006 [ 1603.048131][T31888] RBP: 00007f79adc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1603.048147][T31888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1603.048163][T31888] R13: 00007f79ade16038 R14: 00007f79ade15fa0 R15: 00007ffe998a2938 [ 1603.048196][T31888] [ 1603.446452][T31888] event trace: Could not enable event nfsd_file_open [ 1604.224385][T31894] FAULT_INJECTION: forcing a failure. [ 1604.224385][T31894] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1604.310704][T31894] CPU: 0 UID: 0 PID: 31894 Comm: syz.3.5580 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1604.310749][T31894] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1604.310761][T31894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1604.310777][T31894] Call Trace: [ 1604.310785][T31894] [ 1604.310796][T31894] dump_stack_lvl+0x100/0x190 [ 1604.310827][T31894] should_fail_ex.cold+0x5/0xa [ 1604.310856][T31894] ? prepare_alloc_pages+0x16d/0x5f0 [ 1604.310896][T31894] should_fail_alloc_page+0xeb/0x140 [ 1604.310928][T31894] prepare_alloc_pages+0x1f0/0x5f0 [ 1604.310965][T31894] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 1604.311011][T31894] ? __pfx_stack_trace_save+0x10/0x10 [ 1604.311048][T31894] ? stack_depot_save_flags+0x27/0x9d0 [ 1604.311079][T31894] ? kasan_save_stack+0x3f/0x50 [ 1604.311107][T31894] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1604.311155][T31894] ? __lock_acquire+0x4a5/0x2630 [ 1604.311180][T31894] ? css_rstat_updated+0x1ce/0x5a0 [ 1604.311229][T31894] ? lock_acquire+0x1b1/0x370 [ 1604.311251][T31894] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1604.311290][T31894] ? policy_nodemask+0xed/0x4f0 [ 1604.311322][T31894] alloc_pages_mpol+0x1fb/0x540 [ 1604.311360][T31894] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1604.311392][T31894] ? __lock_acquire+0x4a5/0x2630 [ 1604.311418][T31894] folio_alloc_mpol_noprof+0x36/0x260 [ 1604.311454][T31894] vma_alloc_folio_noprof+0xed/0x1d0 [ 1604.311491][T31894] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1604.311535][T31894] do_anonymous_page+0xb46/0x2050 [ 1604.311574][T31894] ? rcu_read_unlock+0x2d/0xb0 [ 1604.311619][T31894] __handle_mm_fault+0x1d2c/0x2a00 [ 1604.311660][T31894] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1604.311693][T31894] ? __pfx___handle_mm_fault+0x10/0x10 [ 1604.311733][T31894] ? pte_offset_map_lock+0x174/0x320 [ 1604.311762][T31894] ? find_held_lock+0x2b/0x80 [ 1604.311804][T31894] ? follow_page_pte+0x4d0/0x13f0 [ 1604.311839][T31894] handle_mm_fault+0x36d/0xa20 [ 1604.311883][T31894] __get_user_pages+0x1178/0x32a0 [ 1604.311925][T31894] ? __pfx___get_user_pages+0x10/0x10 [ 1604.311966][T31894] populate_vma_page_range+0x267/0x3f0 [ 1604.312002][T31894] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1604.312037][T31894] ? __pfx_find_vma_intersection+0x10/0x10 [ 1604.312070][T31894] ? do_mmap+0x93f/0x12f0 [ 1604.312105][T31894] __mm_populate+0x107/0x3a0 [ 1604.312140][T31894] ? __pfx___mm_populate+0x10/0x10 [ 1604.312175][T31894] ? up_write+0x28c/0x4f0 [ 1604.312205][T31894] vm_mmap_pgoff+0x37f/0x470 [ 1604.312240][T31894] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1604.312274][T31894] ? do_futex+0x192/0x350 [ 1604.312302][T31894] ? __pfx_do_futex+0x10/0x10 [ 1604.312334][T31894] ksys_mmap_pgoff+0xe4/0x610 [ 1604.312372][T31894] ? __x64_sys_futex+0x358/0x4d0 [ 1604.312400][T31894] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1604.312431][T31894] ? xfd_validate_state+0x129/0x190 [ 1604.312464][T31894] __x64_sys_mmap+0x125/0x190 [ 1604.312495][T31894] do_syscall_64+0x10b/0xf80 [ 1604.312534][T31894] ? clear_bhb_loop+0x40/0x90 [ 1604.312565][T31894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1604.312591][T31894] RIP: 0033:0x7fef0d59c819 [ 1604.312612][T31894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1604.312638][T31894] RSP: 002b:00007fef0e4a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1604.312662][T31894] RAX: ffffffffffffffda RBX: 00007fef0d815fa0 RCX: 00007fef0d59c819 [ 1604.312680][T31894] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000 [ 1604.312695][T31894] RBP: 00007fef0d632c91 R08: 0000000000000007 R09: 0000000000028000 [ 1604.312712][T31894] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1604.312727][T31894] R13: 00007fef0d816038 R14: 00007fef0d815fa0 R15: 00007fff4a7c6b88 [ 1604.312759][T31894] [ 1605.826060][T31921] FAULT_INJECTION: forcing a failure. [ 1605.826060][T31921] name failslab, interval 1, probability 0, space 0, times 0 [ 1605.892462][T31921] CPU: 0 UID: 0 PID: 31921 Comm: syz.2.5585 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1605.892510][T31921] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1605.892522][T31921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1605.892537][T31921] Call Trace: [ 1605.892546][T31921] [ 1605.892556][T31921] dump_stack_lvl+0x100/0x190 [ 1605.892588][T31921] should_fail_ex.cold+0x5/0xa [ 1605.892619][T31921] ? handler_new_ref+0x1ab/0xc60 [ 1605.892649][T31921] should_failslab+0xc2/0x120 [ 1605.892678][T31921] __kmalloc_noprof+0xe0/0x850 [ 1605.892725][T31921] handler_new_ref+0x1ab/0xc60 [ 1605.892762][T31921] v4l2_ctrl_new+0xe67/0x23a0 [ 1605.892802][T31921] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 1605.892847][T31921] v4l2_ctrl_new_std+0x1bb/0x290 [ 1605.892886][T31921] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 1605.892920][T31921] ? trace_kmalloc+0xe3/0x110 [ 1605.892948][T31921] ? __kasan_kmalloc+0xaa/0xb0 [ 1605.892974][T31921] ? v4l2_ctrl_handler_init_class+0x201/0x350 [ 1605.893004][T31921] ? lockdep_set_lock_cmp_fn+0xc0/0xe0 [ 1605.893032][T31921] ? media_request_object_init+0x105/0x180 [ 1605.893064][T31921] vim2m_open+0x140/0x830 [ 1605.893092][T31921] v4l2_open+0x1d2/0x490 [ 1605.893121][T31921] ? __pfx_v4l2_open+0x10/0x10 [ 1605.893150][T31921] chrdev_open+0x234/0x6a0 [ 1605.893181][T31921] ? __pfx_apparmor_file_open+0x10/0x10 [ 1605.893219][T31921] ? __pfx_chrdev_open+0x10/0x10 [ 1605.893259][T31921] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1605.893299][T31921] do_dentry_open+0x6d8/0x1660 [ 1605.893330][T31921] ? __pfx_chrdev_open+0x10/0x10 [ 1605.893368][T31921] vfs_open+0x82/0x3f0 [ 1605.893408][T31921] path_openat+0x208c/0x31a0 [ 1605.893449][T31921] ? __pfx_path_openat+0x10/0x10 [ 1605.893491][T31921] do_file_open+0x20e/0x430 [ 1605.893524][T31921] ? __pfx_do_file_open+0x10/0x10 [ 1605.893577][T31921] ? alloc_fd+0x476/0x790 [ 1605.893609][T31921] ? do_getname+0x191/0x390 [ 1605.893649][T31921] do_sys_openat2+0x10d/0x1e0 [ 1605.893688][T31921] ? __pfx_do_sys_openat2+0x10/0x10 [ 1605.893729][T31921] ? __fget_files+0x21f/0x3d0 [ 1605.893764][T31921] __x64_sys_openat+0x12d/0x210 [ 1605.893803][T31921] ? __pfx___x64_sys_openat+0x10/0x10 [ 1605.893848][T31921] ? rcu_is_watching+0x12/0xc0 [ 1605.893882][T31921] do_syscall_64+0x10b/0xf80 [ 1605.893921][T31921] ? clear_bhb_loop+0x40/0x90 [ 1605.893952][T31921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1605.893979][T31921] RIP: 0033:0x7fe5f859c819 [ 1605.894000][T31921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1605.894025][T31921] RSP: 002b:00007fe5f94ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1605.894049][T31921] RAX: ffffffffffffffda RBX: 00007fe5f8816180 RCX: 00007fe5f859c819 [ 1605.894067][T31921] RDX: 000000000002aa01 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 1605.894084][T31921] RBP: 00007fe5f8632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1605.894100][T31921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1605.894116][T31921] R13: 00007fe5f8816218 R14: 00007fe5f8816180 R15: 00007ffe6bef2c68 [ 1605.894148][T31921] [ 1606.617117][T31932] FAULT_INJECTION: forcing a failure. [ 1606.617117][T31932] name failslab, interval 1, probability 0, space 0, times 0 [ 1606.630671][T31932] CPU: 0 UID: 0 PID: 31932 Comm: syz.0.5590 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1606.630714][T31932] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1606.630726][T31932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1606.630742][T31932] Call Trace: [ 1606.630750][T31932] [ 1606.630760][T31932] dump_stack_lvl+0x100/0x190 [ 1606.630791][T31932] should_fail_ex.cold+0x5/0xa [ 1606.630823][T31932] ? tracepoint_add_func+0x3a8/0x1150 [ 1606.630861][T31932] should_failslab+0xc2/0x120 [ 1606.630891][T31932] __kmalloc_noprof+0xe0/0x850 [ 1606.630935][T31932] ? __pfx_trace_event_raw_event_nfsd_file_cons_err+0x10/0x10 [ 1606.630966][T31932] tracepoint_add_func+0x3a8/0x1150 [ 1606.631003][T31932] ? __pfx_trace_event_raw_event_nfsd_file_cons_err+0x10/0x10 [ 1606.631039][T31932] ? __pfx_trace_event_raw_event_nfsd_file_cons_err+0x10/0x10 [ 1606.631069][T31932] tracepoint_probe_register+0xc4/0x110 [ 1606.631109][T31932] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 1606.631148][T31932] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1606.631190][T31932] ? __pfx_trace_event_raw_event_nfsd_file_cons_err+0x10/0x10 [ 1606.631230][T31932] ? __pfx_probe_sched_switch+0x10/0x10 [ 1606.631271][T31932] ? __lock_acquire+0x4a5/0x2630 [ 1606.631299][T31932] trace_event_reg+0x209/0x350 [ 1606.631334][T31932] __ftrace_event_enable_disable+0x211/0x6f0 [ 1606.631379][T31932] __ftrace_set_clr_event_nolock+0x390/0xc30 [ 1606.631414][T31932] ftrace_set_clr_event+0x1b7/0x3f0 [ 1606.631445][T31932] ? __pfx_ftrace_set_clr_event+0x10/0x10 [ 1606.631473][T31932] ? trace_get_user+0x3ae/0xa70 [ 1606.631520][T31932] ftrace_event_write+0x259/0x2c0 [ 1606.631549][T31932] ? __pfx_ftrace_event_write+0x10/0x10 [ 1606.631590][T31932] vfs_write+0x2aa/0x1070 [ 1606.631619][T31932] ? __pfx_ftrace_event_write+0x10/0x10 [ 1606.631651][T31932] ? __pfx_vfs_write+0x10/0x10 [ 1606.631678][T31932] ? __fget_files+0x215/0x3d0 [ 1606.631714][T31932] ? __fget_files+0x21f/0x3d0 [ 1606.631754][T31932] ksys_write+0x12a/0x250 [ 1606.631782][T31932] ? __pfx_ksys_write+0x10/0x10 [ 1606.631813][T31932] ? rcu_is_watching+0x12/0xc0 [ 1606.631847][T31932] do_syscall_64+0x10b/0xf80 [ 1606.631886][T31932] ? clear_bhb_loop+0x40/0x90 [ 1606.631917][T31932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1606.631943][T31932] RIP: 0033:0x7f79adb9c819 [ 1606.631965][T31932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1606.631991][T31932] RSP: 002b:00007f79aeab6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1606.632016][T31932] RAX: ffffffffffffffda RBX: 00007f79ade15fa0 RCX: 00007f79adb9c819 [ 1606.632034][T31932] RDX: 0000000000000af0 RSI: 0000000000000000 RDI: 0000000000000006 [ 1606.632050][T31932] RBP: 00007f79adc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1606.632066][T31932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1606.632081][T31932] R13: 00007f79ade16038 R14: 00007f79ade15fa0 R15: 00007ffe998a2938 [ 1606.632113][T31932] [ 1606.634258][T31932] event trace: Could not enable event nfsd_file_cons_err [ 1607.540491][T31936] FAULT_INJECTION: forcing a failure. [ 1607.540491][T31936] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1607.585378][T31936] CPU: 0 UID: 0 PID: 31936 Comm: syz.2.5591 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1607.585423][T31936] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1607.585434][T31936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1607.585450][T31936] Call Trace: [ 1607.585459][T31936] [ 1607.585470][T31936] dump_stack_lvl+0x100/0x190 [ 1607.585510][T31936] should_fail_ex.cold+0x5/0xa [ 1607.585539][T31936] ? prepare_alloc_pages+0x16d/0x5f0 [ 1607.585575][T31936] should_fail_alloc_page+0xeb/0x140 [ 1607.585606][T31936] prepare_alloc_pages+0x1f0/0x5f0 [ 1607.585643][T31936] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 1607.585688][T31936] ? lru_gen_add_folio+0x20f/0x13d0 [ 1607.585719][T31936] ? folios_put_refs+0x716/0xa90 [ 1607.585765][T31936] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1607.585813][T31936] ? __lock_acquire+0x4a5/0x2630 [ 1607.585837][T31936] ? css_rstat_updated+0x1ce/0x5a0 [ 1607.585886][T31936] ? lock_acquire+0x1b1/0x370 [ 1607.585912][T31936] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1607.585955][T31936] ? policy_nodemask+0xed/0x4f0 [ 1607.585986][T31936] alloc_pages_mpol+0x1fb/0x540 [ 1607.586016][T31936] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1607.586048][T31936] ? __lock_acquire+0x4a5/0x2630 [ 1607.586081][T31936] folio_alloc_mpol_noprof+0x36/0x260 [ 1607.586118][T31936] vma_alloc_folio_noprof+0xed/0x1d0 [ 1607.586152][T31936] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1607.586195][T31936] do_anonymous_page+0xb46/0x2050 [ 1607.586236][T31936] ? rcu_read_unlock+0x2d/0xb0 [ 1607.586281][T31936] __handle_mm_fault+0x1d2c/0x2a00 [ 1607.586323][T31936] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1607.586356][T31936] ? __pfx___handle_mm_fault+0x10/0x10 [ 1607.586396][T31936] ? pte_offset_map_lock+0x174/0x320 [ 1607.586425][T31936] ? find_held_lock+0x2b/0x80 [ 1607.586466][T31936] ? follow_page_pte+0x4d0/0x13f0 [ 1607.586502][T31936] handle_mm_fault+0x36d/0xa20 [ 1607.586545][T31936] __get_user_pages+0x1178/0x32a0 [ 1607.586587][T31936] ? __pfx___get_user_pages+0x10/0x10 [ 1607.586627][T31936] populate_vma_page_range+0x267/0x3f0 [ 1607.586662][T31936] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1607.586696][T31936] ? __pfx_find_vma_intersection+0x10/0x10 [ 1607.586727][T31936] ? do_mmap+0x93f/0x12f0 [ 1607.586761][T31936] __mm_populate+0x107/0x3a0 [ 1607.586794][T31936] ? __pfx___mm_populate+0x10/0x10 [ 1607.586829][T31936] ? up_write+0x28c/0x4f0 [ 1607.586860][T31936] vm_mmap_pgoff+0x37f/0x470 [ 1607.586895][T31936] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1607.586928][T31936] ? do_futex+0x192/0x350 [ 1607.586956][T31936] ? __pfx_do_futex+0x10/0x10 [ 1607.586981][T31936] ? __pfx_do_sys_openat2+0x10/0x10 [ 1607.587025][T31936] ksys_mmap_pgoff+0xe4/0x610 [ 1607.587080][T31936] ? __x64_sys_futex+0x358/0x4d0 [ 1607.587109][T31936] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1607.587140][T31936] ? xfd_validate_state+0x129/0x190 [ 1607.587174][T31936] __x64_sys_mmap+0x125/0x190 [ 1607.587206][T31936] do_syscall_64+0x10b/0xf80 [ 1607.587245][T31936] ? clear_bhb_loop+0x40/0x90 [ 1607.587276][T31936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1607.587303][T31936] RIP: 0033:0x7fe5f859c819 [ 1607.587331][T31936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1607.587357][T31936] RSP: 002b:00007fe5f952c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1607.587381][T31936] RAX: ffffffffffffffda RBX: 00007fe5f8815fa0 RCX: 00007fe5f859c819 [ 1607.587399][T31936] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000 [ 1607.587415][T31936] RBP: 00007fe5f8632c91 R08: 0000000000000007 R09: 0000000000028000 [ 1607.587431][T31936] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1607.587447][T31936] R13: 00007fe5f8816038 R14: 00007fe5f8815fa0 R15: 00007ffe6bef2c68 [ 1607.587479][T31936] [ 1607.977432][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.984005][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1610.193208][T31975] misc userio: Invalid payload size [ 1610.893038][T31982] FAULT_INJECTION: forcing a failure. [ 1610.893038][T31982] name failslab, interval 1, probability 0, space 0, times 0 [ 1610.931454][T31987] FAULT_INJECTION: forcing a failure. [ 1610.931454][T31987] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1610.967335][T31982] CPU: 0 UID: 0 PID: 31982 Comm: syz.0.5609 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1610.967379][T31982] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1610.967390][T31982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1610.967406][T31982] Call Trace: [ 1610.967414][T31982] [ 1610.967424][T31982] dump_stack_lvl+0x100/0x190 [ 1610.967455][T31982] should_fail_ex.cold+0x5/0xa [ 1610.967488][T31982] ? tracepoint_add_func+0x3a8/0x1150 [ 1610.967525][T31982] should_failslab+0xc2/0x120 [ 1610.967558][T31982] __kmalloc_noprof+0xe0/0x850 [ 1610.967602][T31982] ? __pfx_trace_event_raw_event_nfsd_file_open_class+0x10/0x10 [ 1610.967648][T31982] tracepoint_add_func+0x3a8/0x1150 [ 1610.967686][T31982] ? __pfx_trace_event_raw_event_nfsd_file_open_class+0x10/0x10 [ 1610.967737][T31982] ? __pfx_trace_event_raw_event_nfsd_file_open_class+0x10/0x10 [ 1610.967783][T31982] tracepoint_probe_register+0xc4/0x110 [ 1610.967830][T31982] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 1610.967869][T31982] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1610.967911][T31982] ? __pfx_trace_event_raw_event_nfsd_file_open_class+0x10/0x10 [ 1610.967956][T31982] ? __pfx_probe_sched_switch+0x10/0x10 [ 1610.967997][T31982] ? __lock_acquire+0x4a5/0x2630 [ 1610.968027][T31982] trace_event_reg+0x209/0x350 [ 1610.968063][T31982] __ftrace_event_enable_disable+0x211/0x6f0 [ 1610.968107][T31982] __ftrace_set_clr_event_nolock+0x390/0xc30 [ 1610.968142][T31982] ftrace_set_clr_event+0x1b7/0x3f0 [ 1610.968173][T31982] ? __pfx_ftrace_set_clr_event+0x10/0x10 [ 1610.968202][T31982] ? trace_get_user+0x3ae/0xa70 [ 1610.968248][T31982] ftrace_event_write+0x259/0x2c0 [ 1610.968278][T31982] ? __pfx_ftrace_event_write+0x10/0x10 [ 1610.968319][T31982] vfs_write+0x2aa/0x1070 [ 1610.968348][T31982] ? __pfx_ftrace_event_write+0x10/0x10 [ 1610.968380][T31982] ? __pfx_vfs_write+0x10/0x10 [ 1610.968408][T31982] ? __fget_files+0x215/0x3d0 [ 1610.968443][T31982] ? __fget_files+0x21f/0x3d0 [ 1610.968480][T31982] ksys_write+0x12a/0x250 [ 1610.968508][T31982] ? __pfx_ksys_write+0x10/0x10 [ 1610.968539][T31982] ? rcu_is_watching+0x12/0xc0 [ 1610.968573][T31982] do_syscall_64+0x10b/0xf80 [ 1610.968612][T31982] ? clear_bhb_loop+0x40/0x90 [ 1610.968644][T31982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1610.968670][T31982] RIP: 0033:0x7f79adb9c819 [ 1610.968690][T31982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1610.968716][T31982] RSP: 002b:00007f79aeab6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1610.968739][T31982] RAX: ffffffffffffffda RBX: 00007f79ade15fa0 RCX: 00007f79adb9c819 [ 1610.968757][T31982] RDX: 0000000000000af0 RSI: 0000000000000000 RDI: 0000000000000006 [ 1610.968772][T31982] RBP: 00007f79adc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1610.968794][T31982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1610.968811][T31982] R13: 00007f79ade16038 R14: 00007f79ade15fa0 R15: 00007ffe998a2938 [ 1610.968844][T31982] [ 1611.312293][T31989] synth uevent: /module/smsmdtv: unknown uevent action string [ 1611.394579][T31987] CPU: 0 UID: 0 PID: 31987 Comm: syz.1.5602 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1611.394621][T31987] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1611.394632][T31987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1611.394646][T31987] Call Trace: [ 1611.394654][T31987] [ 1611.394663][T31987] dump_stack_lvl+0x100/0x190 [ 1611.394693][T31987] should_fail_ex.cold+0x5/0xa [ 1611.394724][T31987] get_futex_key+0x1d2/0x1510 [ 1611.394760][T31987] ? __pfx_get_futex_key+0x10/0x10 [ 1611.394793][T31987] futex_wake+0xea/0x530 [ 1611.394826][T31987] ? __pfx_futex_wake+0x10/0x10 [ 1611.394869][T31987] do_futex+0x32b/0x350 [ 1611.394906][T31987] ? __pfx_do_futex+0x10/0x10 [ 1611.394938][T31987] __x64_sys_futex+0x34f/0x4d0 [ 1611.394986][T31987] ? __pfx___x64_sys_futex+0x10/0x10 [ 1611.395012][T31987] ? safesetid_task_fix_setuid+0x64/0x1e0 [ 1611.395044][T31987] ? rcu_is_watching+0x12/0xc0 [ 1611.395077][T31987] do_syscall_64+0x10b/0xf80 [ 1611.395113][T31987] ? clear_bhb_loop+0x40/0x90 [ 1611.395143][T31987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1611.395168][T31987] RIP: 0033:0x7f74a739c819 [ 1611.395187][T31987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1611.395210][T31987] RSP: 002b:00007f74a82b50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1611.395234][T31987] RAX: ffffffffffffffda RBX: 00007f74a7615fa8 RCX: 00007f74a739c819 [ 1611.395249][T31987] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f74a7615fac [ 1611.395264][T31987] RBP: 00007f74a7615fa0 R08: 0000000000000001 R09: 0000000000000000 [ 1611.395279][T31987] R10: 000000000000ee00 R11: 0000000000000246 R12: 0000000000000000 [ 1611.395293][T31987] R13: 00007f74a7616038 R14: 00007fffde53ece0 R15: 00007fffde53edc8 [ 1611.395322][T31987] [ 1612.298303][T31982] event trace: Could not enable event nfsd_file_open [ 1613.859704][T32037] FAULT_INJECTION: forcing a failure. [ 1613.859704][T32037] name failslab, interval 1, probability 0, space 0, times 0 [ 1613.937733][T32037] CPU: 0 UID: 0 PID: 32037 Comm: syz.3.5613 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1613.937776][T32037] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1613.937788][T32037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1613.937804][T32037] Call Trace: [ 1613.937813][T32037] [ 1613.937822][T32037] dump_stack_lvl+0x100/0x190 [ 1613.937854][T32037] should_fail_ex.cold+0x5/0xa [ 1613.937887][T32037] should_failslab+0xc2/0x120 [ 1613.937917][T32037] __kvmalloc_node_noprof+0xfa/0xa00 [ 1613.937941][T32037] ? v4l2_ctrl_new+0x4a6/0x23a0 [ 1613.937979][T32037] v4l2_ctrl_new+0x4a6/0x23a0 [ 1613.938020][T32037] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 1613.938049][T32037] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 1613.938092][T32037] v4l2_ctrl_new_std+0x1bb/0x290 [ 1613.938136][T32037] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 1613.938166][T32037] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 1613.938200][T32037] ? trace_kmalloc+0xe3/0x110 [ 1613.938233][T32037] ? v4l2_ctrl_handler_init_class+0x201/0x350 [ 1613.938263][T32037] ? lockdep_set_lock_cmp_fn+0xc0/0xe0 [ 1613.938292][T32037] ? media_request_object_init+0x105/0x180 [ 1613.938323][T32037] vim2m_open+0x164/0x830 [ 1613.938352][T32037] v4l2_open+0x1d2/0x490 [ 1613.938381][T32037] ? __pfx_v4l2_open+0x10/0x10 [ 1613.938411][T32037] chrdev_open+0x234/0x6a0 [ 1613.938441][T32037] ? __pfx_apparmor_file_open+0x10/0x10 [ 1613.938479][T32037] ? __pfx_chrdev_open+0x10/0x10 [ 1613.938512][T32037] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1613.938551][T32037] do_dentry_open+0x6d8/0x1660 [ 1613.938581][T32037] ? __pfx_chrdev_open+0x10/0x10 [ 1613.938626][T32037] vfs_open+0x82/0x3f0 [ 1613.938667][T32037] path_openat+0x208c/0x31a0 [ 1613.938708][T32037] ? __pfx_path_openat+0x10/0x10 [ 1613.938750][T32037] do_file_open+0x20e/0x430 [ 1613.938784][T32037] ? __pfx_do_file_open+0x10/0x10 [ 1613.938837][T32037] ? alloc_fd+0x476/0x790 [ 1613.938870][T32037] ? do_getname+0x191/0x390 [ 1613.938909][T32037] do_sys_openat2+0x10d/0x1e0 [ 1613.938948][T32037] ? __pfx_do_sys_openat2+0x10/0x10 [ 1613.938989][T32037] ? __fget_files+0x21f/0x3d0 [ 1613.939023][T32037] __x64_sys_openat+0x12d/0x210 [ 1613.939063][T32037] ? __pfx___x64_sys_openat+0x10/0x10 [ 1613.939108][T32037] ? rcu_is_watching+0x12/0xc0 [ 1613.939143][T32037] do_syscall_64+0x10b/0xf80 [ 1613.939182][T32037] ? clear_bhb_loop+0x40/0x90 [ 1613.939213][T32037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1613.939240][T32037] RIP: 0033:0x7fef0d59c819 [ 1613.939260][T32037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1613.939286][T32037] RSP: 002b:00007fef0e486028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1613.939310][T32037] RAX: ffffffffffffffda RBX: 00007fef0d816090 RCX: 00007fef0d59c819 [ 1613.939328][T32037] RDX: 000000000002aa01 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 1613.939345][T32037] RBP: 00007fef0d632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1613.939361][T32037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1613.939377][T32037] R13: 00007fef0d816128 R14: 00007fef0d816090 R15: 00007fff4a7c6b88 [ 1613.939409][T32037] [ 1614.551741][T32045] netlink: 13896 bytes leftover after parsing attributes in process `syz.0.5614'. [ 1614.561609][T32045] netlink: 4528 bytes leftover after parsing attributes in process `syz.0.5614'. [ 1615.506319][T32051] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5616'. [ 1616.821377][T32076] zswap: compressor û not available [ 1618.691736][T32111] FAULT_INJECTION: forcing a failure. [ 1618.691736][T32111] name failslab, interval 1, probability 0, space 0, times 0 [ 1618.766269][T32111] CPU: 0 UID: 0 PID: 32111 Comm: syz.3.5629 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1618.766313][T32111] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1618.766325][T32111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1618.766341][T32111] Call Trace: [ 1618.766350][T32111] [ 1618.766359][T32111] dump_stack_lvl+0x100/0x190 [ 1618.766392][T32111] should_fail_ex.cold+0x5/0xa [ 1618.766424][T32111] ? tracepoint_add_func+0x3a8/0x1150 [ 1618.766462][T32111] should_failslab+0xc2/0x120 [ 1618.766492][T32111] __kmalloc_noprof+0xe0/0x850 [ 1618.766537][T32111] ? __pfx_trace_event_raw_event_nfsd_file_open_class+0x10/0x10 [ 1618.766584][T32111] tracepoint_add_func+0x3a8/0x1150 [ 1618.766621][T32111] ? __pfx_trace_event_raw_event_nfsd_file_open_class+0x10/0x10 [ 1618.766673][T32111] ? __pfx_trace_event_raw_event_nfsd_file_open_class+0x10/0x10 [ 1618.766719][T32111] tracepoint_probe_register+0xc4/0x110 [ 1618.766759][T32111] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 1618.766798][T32111] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1618.766840][T32111] ? __pfx_trace_event_raw_event_nfsd_file_open_class+0x10/0x10 [ 1618.766886][T32111] ? __pfx_probe_sched_switch+0x10/0x10 [ 1618.766925][T32111] ? __lock_acquire+0x4a5/0x2630 [ 1618.766954][T32111] trace_event_reg+0x209/0x350 [ 1618.766989][T32111] __ftrace_event_enable_disable+0x211/0x6f0 [ 1618.767034][T32111] __ftrace_set_clr_event_nolock+0x390/0xc30 [ 1618.767070][T32111] ftrace_set_clr_event+0x1b7/0x3f0 [ 1618.767101][T32111] ? __pfx_ftrace_set_clr_event+0x10/0x10 [ 1618.767138][T32111] ? trace_get_user+0x3ae/0xa70 [ 1618.767185][T32111] ftrace_event_write+0x259/0x2c0 [ 1618.767215][T32111] ? __pfx_ftrace_event_write+0x10/0x10 [ 1618.767256][T32111] vfs_write+0x2aa/0x1070 [ 1618.767286][T32111] ? __pfx_ftrace_event_write+0x10/0x10 [ 1618.767318][T32111] ? __pfx_vfs_write+0x10/0x10 [ 1618.767346][T32111] ? __fget_files+0x215/0x3d0 [ 1618.767383][T32111] ? __fget_files+0x21f/0x3d0 [ 1618.767420][T32111] ksys_write+0x12a/0x250 [ 1618.767448][T32111] ? __pfx_ksys_write+0x10/0x10 [ 1618.767479][T32111] ? rcu_is_watching+0x12/0xc0 [ 1618.767514][T32111] do_syscall_64+0x10b/0xf80 [ 1618.767553][T32111] ? clear_bhb_loop+0x40/0x90 [ 1618.767585][T32111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1618.767611][T32111] RIP: 0033:0x7fef0d59c819 [ 1618.767633][T32111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1618.767659][T32111] RSP: 002b:00007fef0e4a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1618.767683][T32111] RAX: ffffffffffffffda RBX: 00007fef0d815fa0 RCX: 00007fef0d59c819 [ 1618.767700][T32111] RDX: 0000000000000af0 RSI: 0000000000000000 RDI: 0000000000000006 [ 1618.767721][T32111] RBP: 00007fef0d632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1618.767737][T32111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1618.767752][T32111] R13: 00007fef0d816038 R14: 00007fef0d815fa0 R15: 00007fff4a7c6b88 [ 1618.767785][T32111] [ 1619.100760][T32111] event trace: Could not enable event nfsd_file_open [ 1619.133663][T32117] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1620.028398][T32130] misc userio: Invalid payload size [ 1621.065237][T32148] FAULT_INJECTION: forcing a failure. [ 1621.065237][T32148] name failslab, interval 1, probability 0, space 0, times 0 [ 1621.112794][T32148] CPU: 0 UID: 0 PID: 32148 Comm: syz.1.5637 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1621.112836][T32148] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1621.112848][T32148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1621.112862][T32148] Call Trace: [ 1621.112870][T32148] [ 1621.112880][T32148] dump_stack_lvl+0x100/0x190 [ 1621.112911][T32148] should_fail_ex.cold+0x5/0xa [ 1621.112941][T32148] should_failslab+0xc2/0x120 [ 1621.112968][T32148] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1621.113002][T32148] ? io_uring_alloc_task_context+0xa7/0x51f [ 1621.113043][T32148] ? __lock_acquire+0x4a5/0x2630 [ 1621.113069][T32148] io_uring_alloc_task_context+0xa7/0x51f [ 1621.113112][T32148] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 1621.113160][T32148] __io_uring_add_tctx_node.cold+0x15/0x171 [ 1621.113193][T32148] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 1621.113228][T32148] ? __fget_files+0x21f/0x3d0 [ 1621.113261][T32148] __io_uring_add_tctx_node_from_submit+0x89/0x130 [ 1621.113299][T32148] __do_sys_io_uring_enter+0x1656/0x1b50 [ 1621.113328][T32148] ? __fget_files+0x21f/0x3d0 [ 1621.113355][T32148] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 1621.113383][T32148] ? fput+0x79/0x100 [ 1621.113416][T32148] ? ksys_write+0x1ac/0x250 [ 1621.113442][T32148] ? __pfx_ksys_write+0x10/0x10 [ 1621.113471][T32148] ? rcu_is_watching+0x12/0xc0 [ 1621.113504][T32148] do_syscall_64+0x10b/0xf80 [ 1621.113541][T32148] ? clear_bhb_loop+0x40/0x90 [ 1621.113570][T32148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1621.113595][T32148] RIP: 0033:0x7f74a739c819 [ 1621.113615][T32148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1621.113638][T32148] RSP: 002b:00007f74a8294028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1621.113661][T32148] RAX: ffffffffffffffda RBX: 00007f74a7616090 RCX: 00007f74a739c819 [ 1621.113677][T32148] RDX: 0000000000002688 RSI: 0000000000000001 RDI: 0000000000000003 [ 1621.113691][T32148] RBP: 00007f74a8294090 R08: 0000000000000000 R09: 0000000000000007 [ 1621.113706][T32148] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 1621.113721][T32148] R13: 00007f74a7616128 R14: 00007f74a7616090 R15: 00007fffde53edc8 [ 1621.113751][T32148] [ 1622.571688][T32162] netlink: 342 bytes leftover after parsing attributes in process `syz.2.5640'. [ 1624.726460][T32195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5649'. [ 1625.357224][T32201] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5651'. [ 1625.866390][T32221] netlink: 'syz.2.5655': attribute type 2 has an invalid length. [ 1625.994222][T32221] usbcore.quirks: string doesn't fit in 127 chars. [ 1626.377122][T32225] FAULT_INJECTION: forcing a failure. [ 1626.377122][T32225] name failslab, interval 1, probability 0, space 0, times 0 [ 1626.463497][T32225] CPU: 0 UID: 0 PID: 32225 Comm: syz.1.5656 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1626.463542][T32225] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1626.463554][T32225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1626.463570][T32225] Call Trace: [ 1626.463579][T32225] [ 1626.463589][T32225] dump_stack_lvl+0x100/0x190 [ 1626.463621][T32225] should_fail_ex.cold+0x5/0xa [ 1626.463654][T32225] should_failslab+0xc2/0x120 [ 1626.463683][T32225] __kvmalloc_node_noprof+0xfa/0xa00 [ 1626.463708][T32225] ? v4l2_ctrl_new+0x4a6/0x23a0 [ 1626.463746][T32225] v4l2_ctrl_new+0x4a6/0x23a0 [ 1626.463793][T32225] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 1626.463824][T32225] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 1626.463868][T32225] v4l2_ctrl_new_std+0x1bb/0x290 [ 1626.463907][T32225] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 1626.463938][T32225] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 1626.463972][T32225] ? trace_kmalloc+0xe3/0x110 [ 1626.464005][T32225] ? v4l2_ctrl_handler_init_class+0x201/0x350 [ 1626.464036][T32225] ? lockdep_set_lock_cmp_fn+0xc0/0xe0 [ 1626.464065][T32225] ? media_request_object_init+0x105/0x180 [ 1626.464096][T32225] vim2m_open+0x164/0x830 [ 1626.464124][T32225] v4l2_open+0x1d2/0x490 [ 1626.464154][T32225] ? __pfx_v4l2_open+0x10/0x10 [ 1626.464183][T32225] chrdev_open+0x234/0x6a0 [ 1626.464214][T32225] ? __pfx_apparmor_file_open+0x10/0x10 [ 1626.464260][T32225] ? __pfx_chrdev_open+0x10/0x10 [ 1626.464293][T32225] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1626.464333][T32225] do_dentry_open+0x6d8/0x1660 [ 1626.464363][T32225] ? __pfx_chrdev_open+0x10/0x10 [ 1626.464401][T32225] vfs_open+0x82/0x3f0 [ 1626.464441][T32225] path_openat+0x208c/0x31a0 [ 1626.464482][T32225] ? __pfx_path_openat+0x10/0x10 [ 1626.464527][T32225] do_file_open+0x20e/0x430 [ 1626.464561][T32225] ? __pfx_do_file_open+0x10/0x10 [ 1626.464613][T32225] ? alloc_fd+0x476/0x790 [ 1626.464646][T32225] ? do_getname+0x191/0x390 [ 1626.464685][T32225] do_sys_openat2+0x10d/0x1e0 [ 1626.464728][T32225] ? __pfx_do_sys_openat2+0x10/0x10 [ 1626.464776][T32225] ? __fget_files+0x21f/0x3d0 [ 1626.464819][T32225] __x64_sys_openat+0x12d/0x210 [ 1626.464859][T32225] ? __pfx___x64_sys_openat+0x10/0x10 [ 1626.464905][T32225] ? rcu_is_watching+0x12/0xc0 [ 1626.464939][T32225] do_syscall_64+0x10b/0xf80 [ 1626.464978][T32225] ? clear_bhb_loop+0x40/0x90 [ 1626.465009][T32225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1626.465036][T32225] RIP: 0033:0x7f74a739c819 [ 1626.465057][T32225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1626.465083][T32225] RSP: 002b:00007f74a82b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1626.465107][T32225] RAX: ffffffffffffffda RBX: 00007f74a7615fa0 RCX: 00007f74a739c819 [ 1626.465125][T32225] RDX: 000000000002aa01 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 1626.465141][T32225] RBP: 00007f74a7432c91 R08: 0000000000000000 R09: 0000000000000000 [ 1626.465157][T32225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1626.465173][T32225] R13: 00007f74a7616038 R14: 00007f74a7615fa0 R15: 00007fffde53edc8 [ 1626.465206][T32225] [ 1627.725039][T32259] netlink: zone id is out of range [ 1627.761971][T32259] netlink: zone id is out of range [ 1627.992704][T32259] netlink: set zone limit has 8 unknown bytes [ 1628.218369][T32261] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5663'. [ 1629.731056][T32284] FAULT_INJECTION: forcing a failure. [ 1629.731056][T32284] name failslab, interval 1, probability 0, space 0, times 0 [ 1629.800075][T32284] CPU: 0 UID: 0 PID: 32284 Comm: syz.1.5669 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1629.800121][T32284] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1629.800132][T32284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1629.800148][T32284] Call Trace: [ 1629.800156][T32284] [ 1629.800166][T32284] dump_stack_lvl+0x100/0x190 [ 1629.800203][T32284] should_fail_ex.cold+0x5/0xa [ 1629.800239][T32284] should_failslab+0xc2/0x120 [ 1629.800269][T32284] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1629.800309][T32284] ? do_timer_create+0x209/0x1480 [ 1629.800344][T32284] do_timer_create+0x209/0x1480 [ 1629.800377][T32284] ? do_futex+0x192/0x350 [ 1629.800403][T32284] ? __pfx_do_timer_create+0x10/0x10 [ 1629.800432][T32284] ? __pfx_do_futex+0x10/0x10 [ 1629.800467][T32284] ? find_held_lock+0x2b/0x80 [ 1629.800505][T32284] __x64_sys_timer_create+0x199/0x1d0 [ 1629.800537][T32284] ? __pfx___x64_sys_timer_create+0x10/0x10 [ 1629.800570][T32284] ? xfd_validate_state+0x129/0x190 [ 1629.800602][T32284] ? rcu_is_watching+0x12/0xc0 [ 1629.800636][T32284] do_syscall_64+0x10b/0xf80 [ 1629.800675][T32284] ? clear_bhb_loop+0x40/0x90 [ 1629.800706][T32284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1629.800732][T32284] RIP: 0033:0x7f74a739c819 [ 1629.800754][T32284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1629.800780][T32284] RSP: 002b:00007f74a82b5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 1629.800804][T32284] RAX: ffffffffffffffda RBX: 00007f74a7615fa0 RCX: 00007f74a739c819 [ 1629.800822][T32284] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1629.800837][T32284] RBP: 00007f74a7432c91 R08: 0000000000000000 R09: 0000000000000000 [ 1629.800853][T32284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1629.800868][T32284] R13: 00007f74a7616038 R14: 00007f74a7615fa0 R15: 00007fffde53edc8 [ 1629.800899][T32284] [ 1630.706169][T32287] zswap: compressor not available [ 1630.843395][T32306] FAULT_INJECTION: forcing a failure. [ 1630.843395][T32306] name failslab, interval 1, probability 0, space 0, times 0 [ 1630.895837][T32306] CPU: 0 UID: 0 PID: 32306 Comm: syz.1.5672 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1630.895877][T32306] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1630.895888][T32306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1630.895903][T32306] Call Trace: [ 1630.895911][T32306] [ 1630.895922][T32306] dump_stack_lvl+0x100/0x190 [ 1630.895953][T32306] should_fail_ex.cold+0x5/0xa [ 1630.895985][T32306] should_failslab+0xc2/0x120 [ 1630.896013][T32306] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1630.896048][T32306] ? __io_uring_add_tctx_node+0x1ac/0x4c0 [ 1630.896088][T32306] __io_uring_add_tctx_node+0x1ac/0x4c0 [ 1630.896127][T32306] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 1630.896169][T32306] ? __fget_files+0x21f/0x3d0 [ 1630.896202][T32306] __io_uring_add_tctx_node_from_submit+0x89/0x130 [ 1630.896239][T32306] __do_sys_io_uring_enter+0x1656/0x1b50 [ 1630.896276][T32306] ? __fget_files+0x21f/0x3d0 [ 1630.896302][T32306] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 1630.896330][T32306] ? fput+0x79/0x100 [ 1630.896362][T32306] ? ksys_write+0x1ac/0x250 [ 1630.896389][T32306] ? __pfx_ksys_write+0x10/0x10 [ 1630.896418][T32306] ? rcu_is_watching+0x12/0xc0 [ 1630.896451][T32306] do_syscall_64+0x10b/0xf80 [ 1630.896488][T32306] ? clear_bhb_loop+0x40/0x90 [ 1630.896518][T32306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1630.896543][T32306] RIP: 0033:0x7f74a739c819 [ 1630.896563][T32306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1630.896586][T32306] RSP: 002b:00007f74a8294028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1630.896609][T32306] RAX: ffffffffffffffda RBX: 00007f74a7616090 RCX: 00007f74a739c819 [ 1630.896625][T32306] RDX: 0000000000002688 RSI: 0000000000000001 RDI: 0000000000000003 [ 1630.896639][T32306] RBP: 00007f74a8294090 R08: 0000000000000000 R09: 0000000000000007 [ 1630.896654][T32306] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 1630.896668][T32306] R13: 00007f74a7616128 R14: 00007f74a7616090 R15: 00007fffde53edc8 [ 1630.896698][T32306] [ 1630.897493][T32306] ------------[ cut here ]------------ [ 1631.117894][T32306] !test_bit(IO_WQ_BIT_EXIT, &wq->state) [ 1631.117919][T32306] WARNING: io_uring/io-wq.c:1396 at io_wq_put_and_exit+0x8a7/0x9d0, CPU#0: syz.1.5672/32306 [ 1631.134337][T32306] Modules linked in: [ 1631.138258][T32306] CPU: 0 UID: 0 PID: 32306 Comm: syz.1.5672 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1631.149807][T32306] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1631.157202][T32306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1631.167346][T32306] RIP: 0010:io_wq_put_and_exit+0x8a7/0x9d0 [ 1631.173282][T32306] Code: ff e8 8d 73 16 fd 44 0f b6 74 24 78 31 ff 44 89 f6 e8 cd 6d 16 fd 45 84 f6 0f 85 1a fd ff ff e9 67 fd ff ff e8 6a 73 16 fd 90 <0f> 0b 90 e9 00 f8 ff ff e8 bc 36 83 fd e9 72 f8 ff ff 48 8b 3c 24 [ 1631.193173][T32306] RSP: 0018:ffffc90004d67bd0 EFLAGS: 00010293 [ 1631.200004][T32306] RAX: 0000000000000000 RBX: ffff888058179000 RCX: ffffffff84f24bb6 [ 1631.208345][T32306] RDX: ffff888034fa1ec0 RSI: ffffffff84f253b6 RDI: ffff888034fa1ec0 [ 1631.216440][T32306] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1631.225081][T32306] R10: 0000000000000000 R11: fffffffffffea890 R12: 1ffff920009acf9c [ 1631.233676][T32306] R13: 0000000000000000 R14: ffff888034fa2828 R15: ffff88807e1bc018 [ 1631.241781][T32306] FS: 00007f74a82946c0(0000) GS:ffff8881242e2000(0000) knlGS:0000000000000000 [ 1631.251098][T32306] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1631.257933][T32306] CR2: 00007f74a73e9f00 CR3: 000000003283e000 CR4: 00000000003526f0 [ 1631.266016][T32306] Call Trace: [ 1631.269419][T32306] [ 1631.272376][T32306] ? dump_stack_lvl+0x17c/0x190 [ 1631.277294][T32306] ? __pfx_io_wq_put_and_exit+0x10/0x10 [ 1631.282939][T32306] ? rcu_is_watching+0x12/0xc0 [ 1631.287736][T32306] ? trace_kmalloc+0xe3/0x110 [ 1631.292621][T32306] ? __kmalloc_cache_noprof+0x298/0x6f0 [ 1631.298305][T32306] ? __io_uring_add_tctx_node+0x1ac/0x4c0 [ 1631.304462][T32306] __io_uring_add_tctx_node+0x3e8/0x4c0 [ 1631.315051][T32306] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 1631.321563][T32306] ? __fget_files+0x21f/0x3d0 [ 1631.326759][T32306] __io_uring_add_tctx_node_from_submit+0x89/0x130 [ 1631.333568][T32306] __do_sys_io_uring_enter+0x1656/0x1b50 [ 1631.339399][T32306] ? __fget_files+0x21f/0x3d0 [ 1631.344106][T32306] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 1631.350517][T32306] ? fput+0x79/0x100 [ 1631.354464][T32306] ? ksys_write+0x1ac/0x250 [ 1631.359370][T32306] ? __pfx_ksys_write+0x10/0x10 [ 1631.364348][T32306] ? rcu_is_watching+0x12/0xc0 [ 1631.369241][T32306] do_syscall_64+0x10b/0xf80 [ 1631.373898][T32306] ? clear_bhb_loop+0x40/0x90 [ 1631.378638][T32306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1631.384572][T32306] RIP: 0033:0x7f74a739c819 [ 1631.389477][T32306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1631.409652][T32306] RSP: 002b:00007f74a8294028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1631.418128][T32306] RAX: ffffffffffffffda RBX: 00007f74a7616090 RCX: 00007f74a739c819 [ 1631.426956][T32306] RDX: 0000000000002688 RSI: 0000000000000001 RDI: 0000000000000003 [ 1631.435413][T32306] RBP: 00007f74a8294090 R08: 0000000000000000 R09: 0000000000000007 [ 1631.443500][T32306] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 1631.451843][T32306] R13: 00007f74a7616128 R14: 00007f74a7616090 R15: 00007fffde53edc8 [ 1631.460140][T32306] [ 1631.463194][T32306] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1631.470490][T32306] CPU: 0 UID: 0 PID: 32306 Comm: syz.1.5672 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1631.481470][T32306] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1631.487976][T32306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1631.498047][T32306] Call Trace: [ 1631.501392][T32306] [ 1631.504338][T32306] dump_stack_lvl+0x100/0x190 [ 1631.509039][T32306] vpanic+0x552/0x970 [ 1631.513041][T32306] ? __pfx_vpanic+0x10/0x10 [ 1631.517581][T32306] panic+0xd1/0xe0 [ 1631.521341][T32306] ? __pfx_panic+0x10/0x10 [ 1631.525788][T32306] ? check_panic_on_warn+0x1f/0x90 [ 1631.530934][T32306] check_panic_on_warn.cold+0x19/0x34 [ 1631.536339][T32306] ? io_wq_put_and_exit+0x8a7/0x9d0 [ 1631.541583][T32306] __warn.cold+0x191/0x328 [ 1631.546044][T32306] __report_bug+0x296/0x3d0 [ 1631.550585][T32306] ? io_wq_put_and_exit+0x8a7/0x9d0 [ 1631.555920][T32306] ? __pfx___report_bug+0x10/0x10 [ 1631.560973][T32306] ? __pfx_clockevents_program_event+0x10/0x10 [ 1631.567152][T32306] ? find_held_lock+0x2b/0x80 [ 1631.571853][T32306] ? __hrtimer_rearm_deferred+0x24d/0x740 [ 1631.577601][T32306] ? __hrtimer_rearm_deferred+0x24d/0x740 [ 1631.583356][T32306] ? io_wq_put_and_exit+0x8a7/0x9d0 [ 1631.588595][T32306] report_bug+0xb2/0x220 [ 1631.592871][T32306] ? io_wq_put_and_exit+0x8a7/0x9d0 [ 1631.598107][T32306] handle_bug+0x16a/0x2a0 [ 1631.602478][T32306] exc_invalid_op+0x17/0x50 [ 1631.607021][T32306] asm_exc_invalid_op+0x1a/0x20 [ 1631.611899][T32306] RIP: 0010:io_wq_put_and_exit+0x8a7/0x9d0 [ 1631.617740][T32306] Code: ff e8 8d 73 16 fd 44 0f b6 74 24 78 31 ff 44 89 f6 e8 cd 6d 16 fd 45 84 f6 0f 85 1a fd ff ff e9 67 fd ff ff e8 6a 73 16 fd 90 <0f> 0b 90 e9 00 f8 ff ff e8 bc 36 83 fd e9 72 f8 ff ff 48 8b 3c 24 [ 1631.637386][T32306] RSP: 0018:ffffc90004d67bd0 EFLAGS: 00010293 [ 1631.643478][T32306] RAX: 0000000000000000 RBX: ffff888058179000 RCX: ffffffff84f24bb6 [ 1631.651467][T32306] RDX: ffff888034fa1ec0 RSI: ffffffff84f253b6 RDI: ffff888034fa1ec0 [ 1631.659539][T32306] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1631.667527][T32306] R10: 0000000000000000 R11: fffffffffffea890 R12: 1ffff920009acf9c [ 1631.675544][T32306] R13: 0000000000000000 R14: ffff888034fa2828 R15: ffff88807e1bc018 [ 1631.683626][T32306] ? io_wq_put_and_exit+0xa6/0x9d0 [ 1631.688778][T32306] ? io_wq_put_and_exit+0x8a6/0x9d0 [ 1631.694026][T32306] ? dump_stack_lvl+0x17c/0x190 [ 1631.698898][T32306] ? __pfx_io_wq_put_and_exit+0x10/0x10 [ 1631.704480][T32306] ? rcu_is_watching+0x12/0xc0 [ 1631.709287][T32306] ? trace_kmalloc+0xe3/0x110 [ 1631.713988][T32306] ? __kmalloc_cache_noprof+0x298/0x6f0 [ 1631.719582][T32306] ? __io_uring_add_tctx_node+0x1ac/0x4c0 [ 1631.725339][T32306] __io_uring_add_tctx_node+0x3e8/0x4c0 [ 1631.730937][T32306] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 1631.737056][T32306] ? __fget_files+0x21f/0x3d0 [ 1631.741767][T32306] __io_uring_add_tctx_node_from_submit+0x89/0x130 [ 1631.748409][T32306] __do_sys_io_uring_enter+0x1656/0x1b50 [ 1631.754074][T32306] ? __fget_files+0x21f/0x3d0 [ 1631.758776][T32306] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 1631.764779][T32306] ? fput+0x79/0x100 [ 1631.768699][T32306] ? ksys_write+0x1ac/0x250 [ 1631.773229][T32306] ? __pfx_ksys_write+0x10/0x10 [ 1631.778103][T32306] ? rcu_is_watching+0x12/0xc0 [ 1631.782920][T32306] do_syscall_64+0x10b/0xf80 [ 1631.787565][T32306] ? clear_bhb_loop+0x40/0x90 [ 1631.792271][T32306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1631.798203][T32306] RIP: 0033:0x7f74a739c819 [ 1631.802641][T32306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1631.822353][T32306] RSP: 002b:00007f74a8294028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1631.830806][T32306] RAX: ffffffffffffffda RBX: 00007f74a7616090 RCX: 00007f74a739c819 [ 1631.838965][T32306] RDX: 0000000000002688 RSI: 0000000000000001 RDI: 0000000000000003 [ 1631.846951][T32306] RBP: 00007f74a8294090 R08: 0000000000000000 R09: 0000000000000007 [ 1631.854935][T32306] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 1631.862924][T32306] R13: 00007f74a7616128 R14: 00007f74a7616090 R15: 00007fffde53edc8 [ 1631.870940][T32306] [ 1631.874099][T32306] Kernel Offset: disabled [ 1631.878482][T32306] Rebooting in 86400 seconds..