last executing test programs: 9m19.287390811s ago: executing program 1 (id=2100): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2506, &(0x7f00000002c0)={0x0, 0xae}, 0x5, 0x0, 0x3, 0x3a32182}, 0x4}, 0x3, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) 9m18.120885033s ago: executing program 1 (id=2104): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x2, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) cachestat$auto(r0, 0x0, 0x0, 0x5e43d222) landlock_restrict_self$auto(0xffffffffffffffff, 0x4) 9m15.728565395s ago: executing program 1 (id=2116): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) pwritev$auto(r0, 0x0, 0x4, 0xcee, 0x18a) unshare$auto(0x40000080) 9m13.476887995s ago: executing program 1 (id=2134): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) mkdir$auto(0x0, 0x353) 9m12.936922615s ago: executing program 1 (id=2138): mmap$auto(0x0, 0x200009, 0x2, 0x48eb1, 0xffffffffffffffff, 0x300000000000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x1, 0x84) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) getsockopt$auto(r0, 0x0, 0xce, 0x0, 0x0) 9m11.842371136s ago: executing program 1 (id=2143): sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x5, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x40002, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 9m11.467895582s ago: executing program 32 (id=2143): sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x5, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x40002, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 9m1.802060106s ago: executing program 4 (id=2146): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) mkdir$auto(0x0, 0x353) 9m1.457320291s ago: executing program 4 (id=2202): mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) r0 = socket(0x11, 0x80003, 0x300) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f0000000240)='/\x00R\xa6\x00\xc8\xda\xdc\xb1\xb4#\xe4\xeb\xe1e/\x1b/\xb9L\xc6P\x82\xba\x90@\xb8\xb5\xb1\xe8\"\x88s\xdf\x15\xaa\x18\xa9\x86\xc7\x87g>8\xae\x99\xd4~\xc6\xa7\\\xcc\xfeV\x83\f\xdc\xdc~\x8e\xd5\x18\x13\x16\xc5\x93E\x10\xcb\x1c\x02\x00\xd2\xa4_\xa3\xdcS\xe2\xe2\xc6\x85p\xfa\xc3/G\x86\xea\x9f\xb0\x9a\xcc6\x1a\x06\x91\x9f\xcfC\xedU\x00f`\x02\x04\xef\xfe\x10\xec\x17\x83%K\x04\xd5s\x86\xe4\x9d\x15\f\x8c\xd9wj\xe5t\x82o7\xc05ul\xacU\xbf\xc0\xfe\xb4\xd7\t\xe0s]\xcd\xac\x87\xa5\xa6.t\xa9\xe8\xa6>\xf2\xd0\xb1\x83\x83\x91\a\xdc\xe9\xaa\x1dx\x06\xa77\xd6\xe1\xe9\x94\xb9Xi\xbbv_\x9a_bv%\xcb\xc7\xdd\xa3\xb4\tpr%\xdf\xc9\x06\xa2\xe7\xe1\xde\x16\xf7\x03x\xf8\v\v\x1a\xfcm\x87r\xc1\b\xca\x97\xb0\xeb\xd6F\x8f^\x94\xdf\x9ax\xf4\x03e[l\xa5Q\x1f\xff3O\xe67Y\xd0\xfe$\x1f\x82\x8e\x9d\xb2>\xf7\xa8#\xa7+\xaf\x18\x97\x7f\xe3N\x9a\xe1\x02o\xeb\x92\xfd\xd5\x9bU\xe0\xb5\xd2\x95\x92CY\xf9\x99Gi\xdb\xe0m\x0f\xddk\x83\x87\\\x03<\xc0kl\xf6s@0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x4, 0x401, r2, @relative_id=0x13, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r0, 0x0, 0x3}, 0xc) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x4}, 0xc) 9.978639002s ago: executing program 7 (id=5176): mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) io_uring_setup$auto(0xfffffffe, &(0x7f0000000080)={0x7fffffff, 0x3, 0x2000, 0x2, 0x7, 0x8, 0xffffffffffffffff, [], {0x4, 0x2, 0x8c48, 0x29f, 0x102, 0x7f, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x0, 0x76c5, 0x8, 0x100000000}}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x6a1, 0x2000000000002) socket(0x26, 0x80805, 0x0) socket(0x28, 0x1, 0x0) socket(0x1, 0x1, 0x1) open(&(0x7f0000000000)='./bus\x00', 0x22042, 0x45) fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) close_range$auto(0x2, 0x8, 0x0) readv$auto(0x0, &(0x7f0000000080)={0x0, 0x60}, 0x3) open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) close_range$auto(0x2, 0x8, 0x0) 9.962393136s ago: executing program 3 (id=5177): mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) r1 = socket(0x18, 0x5, 0x1) connect$auto(r1, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) 9.555821804s ago: executing program 7 (id=5178): mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x242e40, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS0\x00', 0x1, 0x0) ioctl$auto(r2, 0x540a, 0x0) unshare$auto(0x40000080) read$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffffff, 0x0, 0x0) r3 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r3, &(0x7f0000000040)=""/4096, 0xfffffe82) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, r1, 0xb01, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000084) inotify_add_watch$auto(r0, &(0x7f0000000000)='./cgroup/../file0\x00', 0x0) 7.667690409s ago: executing program 7 (id=5179): mmap$auto(0x0, 0x400006, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x100000000000029, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x10000, 0x4080000000db, 0xeb5, 0x2, 0x7ffc) open(0x0, 0x161342, 0x130) r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0x101, 0x103) read$auto_mon_fops_text_t_mon_text(r0, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) unshare$auto(0x40000080) 7.66719086s ago: executing program 3 (id=5181): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setresuid$auto(0x0, 0x7, 0x8080) setfsuid$auto(0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/kallsyms\x00', 0x20100, 0x0) pread64$auto(r0, 0x0, 0x8, 0x8000) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x3) mprotect$auto(0x110c238000, 0x1, 0x3) r1 = openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/error_log\x00', 0xb01, 0x0) write$auto(r1, 0x0, 0x1000) r2 = socket(0xa, 0x3, 0x87) getsockopt$auto_SO_ZEROCOPY(r2, 0xff, 0x3c, 0x0, &(0x7f0000000180)=0x1) madvise$auto(0x110c230000, 0x8031ca, 0x9) 6.73354486s ago: executing program 2 (id=5184): r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xfffffffffffff000, 0x2) eventfd$auto(0x4) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) setsockopt$auto(0x3, 0x10000000084, 0x7c, 0x0, 0x8) getsockopt$auto(r0, 0x84, 0x7c, 0x0, &(0x7f0000000000)=0x7ffe) 6.277421801s ago: executing program 3 (id=5185): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/erspan0/queues/tx-0/xps_cpus\x00', 0x8382, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mouse0\x00', 0x42000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x7, 0x400b, r0, [], {0x6, 0x6, 0x8c48, 0x29a, 0x9, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x101, 0x85, 0x2, 0x24, 0xfe000000, 0x8, 0x3}}) r1 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) read$auto_vhci_fops_hci_vhci(r1, &(0x7f0000000d40)=""/16, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1, 0x200948d, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x6, 0x8000001f, 0x8, 0x6d3e, 0xc, 0x2, 0x2]}, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 5.480668184s ago: executing program 2 (id=5187): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x5, 0x0) close_range$auto(0x2, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x69) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x4, 0x0, 0x7fff, 0x1}, 0x80000b}, 0x5, 0x20000000) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) 4.999697555s ago: executing program 2 (id=5189): mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) r1 = socket(0x18, 0x5, 0x1) connect$auto(r1, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) 4.458705946s ago: executing program 2 (id=5190): openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x2, 0x1, 0x0) socketpair$auto(0x3, 0x5, 0x7, 0x0) write$auto(0x3, 0x0, 0xfffffdef) 4.25066636s ago: executing program 2 (id=5191): socket(0xa, 0x801, 0x84) socket(0xa, 0x2, 0x0) clone$auto(0x1, 0x8, 0x0, 0x0, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x4) socket(0x11, 0x2, 0x6) socket(0xa, 0x3, 0x3b) r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x9000, 0x0) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x110) getdents64$auto(r2, 0x0, 0x400) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5) ioctl$auto(r1, 0x4028af11, r0) 4.228750147s ago: executing program 6 (id=5192): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000100)={{@raw=0xb, 0x3, 0xcf, 0x8, "16a0d89bf208384515b5375a677609aa1bc737276563c3d5a2fca999d5797ab7a10a4d2bc341c4bd369ae535"}, 0x1, @integer=@value=[0x6d, 0x7, 0x0, 0xbb, 0x4, 0x80000000, 0x1, 0x10001, 0x1, 0x9, 0xc4, 0x9bc, 0x6, 0x4, 0x3, 0x6, 0x1, 0x3, 0x5, 0x401, 0x4, 0x0, 0xa0, 0x5, 0x2, 0x9, 0x5, 0xa, 0x8, 0x1, 0x8, 0x7f, 0xffffffffffffdb78, 0x100000000, 0x3, 0x7, 0x7fffffffffffffff, 0x1, 0xd, 0x3, 0x71, 0x0, 0x8, 0x2, 0x3, 0xffffffffffffffbb, 0x2d7, 0x1, 0x5a, 0x6, 0x2, 0x800000000, 0x6, 0x7, 0x0, 0x6, 0x4, 0x3, 0x40a, 0x9, 0x3ff, 0x8, 0x7, 0xffff, 0x50ce0883, 0x3d9, 0x5, 0x2, 0xd8f, 0x80000000, 0x0, 0x7, 0x46e, 0xa5cf, 0x8, 0x7, 0xc16b, 0x6, 0x9, 0x6, 0x2, 0x6, 0x1, 0x3, 0x3, 0xfffffffffffff16a, 0x6, 0xffffffffffff0001, 0x100000000, 0x4, 0x6, 0x4, 0x2, 0x3, 0xfffffffffffffffe, 0x20007cf9, 0x40, 0x2, 0x7, 0x100, 0x2, 0x2, 0x45f3, 0x2e1, 0x0, 0x4, 0x0, 0x8001, 0x0, 0x1, 0x7, 0xcf4, 0x1, 0x3, 0x0, 0x4, 0x6, 0x9, 0x25e2, 0xc9a, 0xd09, 0x40, 0x2, 0xffffffffffffff00, 0x8, 0x9, 0xfffffffffffffffb, 0x40], "f3fadb90a56b67d92a5b28b4b23f332550b1e5454e2027fb1a37efe81bbc27deaf7c3100aab088cdb3b40dad335c9174f18934845ac3152fef1e0f42b42471efc0225a4ebe7e05ce3d4ab429805d5921633ffbce8f1a82ff9dec6c288f431cb7005b85ca8633c55d49bbdf4bd9cac1046064001bca7ba37e4b5eacf1940c9a78"}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) io_uring_setup$auto(0x8, &(0x7f0000000140)={0x0, 0x1, 0x9, 0x210001, 0xc, 0xc05, 0xffffffffffffffff, [0x7fd, 0x1001, 0x3], {0x9, 0x3, 0x6, 0x0, 0x4, 0x895, 0x3fdc, 0x6, 0x5}, {0x2, 0x1d11, 0x54ed, 0x0, 0x101, 0xff, 0x7, 0xa, 0xb}}) sendmsg$auto_NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="000329bd7000fedbdf250900000008000c000100008008000300", @ANYRES32, @ANYBLOB="08002c000001000008001d"], 0x3c}, 0x1, 0x0, 0x0, 0x20000828}, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) socket(0x10, 0x2, 0x0) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="7f000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040840}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x20004884) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x3}, 0x3ef3}, 0x3, 0x0) recvmmsg$auto(0x3, 0x0, 0xfffe, 0x10000, 0x0) 3.672560758s ago: executing program 7 (id=5193): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x120003b) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x1ff, 0x3, 0x8, 0xc, 0x2e, 0x0, 0x3}, 0x6f4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000002340), 0xffffffffffffffff) unshare$auto(0x40000080) mmap$auto(0xfffffffffffffffc, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x40e00, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000300), 0x8281, 0x0) ioctl$auto_PPPIOCATTACH(r1, 0x4004743d, 0x0) acct$auto(&(0x7f0000000280)='/sys/devices/virtual/mtd/mtd0/size\x00') close_range$auto(0x2, 0x8, 0x0) 3.625755527s ago: executing program 2 (id=5194): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x40) modify_ldt$auto(0x1, &(0x7f00000001c0), 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r1, r1, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x9, 0x0) landlock_restrict_self$auto(r1, 0x1) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/tracing/trace_marker\x00', 0x43, 0x0) 3.431184527s ago: executing program 6 (id=5195): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) write$auto(r0, &(0x7f0000000000)='/dev/loop6\x00', 0x6) write$auto_fops_init_pkru_pkeys(0xffffffffffffffff, &(0x7f0000000280), 0x0) seccomp$auto(0x1, 0x1, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_prog_fd=r1, 0x4007, @old_prog_fd=0x13b}, 0xa3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x400200, 0x0) 2.359251554s ago: executing program 6 (id=5196): openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000040), 0x48080, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x60d02, 0x0) write$auto(0x3, 0x0, 0xfdef) mknod$auto(&(0x7f0000000900)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x4, 0x407) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0x81, 0x0, &(0x7f0000000000)=0x9b) lstat$auto(&(0x7f0000000540)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) ioctl$auto(0x3, 0x5420, 0x38) read$auto(r0, 0x0, 0x73) 1.817875784s ago: executing program 6 (id=5197): r0 = bpf$auto(0x9, 0x0, 0x9) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) prctl$auto_PR_SET_SYSCALL_USER_DISPATCH(0x3b, 0xd6, 0x1, 0x2, 0x8001) getcwd$auto(0x0, 0xfffffffffffffffc) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fb\x00', 0x101000, 0x0) preadv$auto(r1, &(0x7f00000002c0)={0x0, 0x8010000}, 0x5, 0xfb, 0x8100000001) mount_setattr$auto(r0, 0x0, 0x3, &(0x7f00000000c0)={0x8, 0x2b, 0xad4d, @inferred=r1}, 0x7fffffff) shutdown$auto(0x200000003, 0x2) prctl$auto(0xfffffff9, 0x1, 0x0, 0x5, 0x7) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) 1.639864514s ago: executing program 7 (id=5198): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) fsopen$auto(&(0x7f0000000040)='[.(%#\']#:-l/(\x00', 0x5) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x80202, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) setresuid$auto(0x8, 0x8, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x57}, 0x1) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000003fc0)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20a02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000040), 0xffffffffffffffff) write$auto_ocfs2_control_fops_stack_user(r0, 0x0, 0x0) 1.334543876s ago: executing program 6 (id=5199): mmap$auto(0x0, 0x202000c, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x6) setsockopt$auto(r0, 0x104000000000010e, 0xb, 0x0, 0x400) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.271841158s ago: executing program 7 (id=5200): unshare$auto(0x40000080) listen$auto(0x3, 0xfffffffe) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x80002, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r2, 0x1, 0x70bd2d, 0x25dfdbf6, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3b}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x11e789c}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, r0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) 1.037508678s ago: executing program 6 (id=5201): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socket(0x2b, 0x1, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.3/usb4/4-0:1.0/bNumEndpoints\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) munmap$auto(0x1, 0x9) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x6, 0x50b301a, 0x2c, 0x2c, 0x0, 0x2}) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) 0s ago: executing program 3 (id=5202): socket(0x15, 0x5, 0x0) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xb32ef65f52c55674, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x7) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r0, &(0x7f0000000000)=@can={0x1d, r2}, 0x6a) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x940, 0x801ffde, 0x1, 0x2000000000000006, 0x3, 0x8, 0x5, 0x6, 0x7, 0x1, 0x9, 0x2, 0x3, 0x5, 0xffffffffffffffea, 0x0, 0x0, 0x0, 0x0, 0x3bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xffffffff00000000, 0x0, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x2000000000000002, 0x0, 0x5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc]}, 0x5, 0x2) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0xffffff9e}, 0x40000) kernel console output (not intermixed with test programs): 18038] madvise_vma_behavior+0x11f1/0x3050 [ 747.233729][T18038] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 747.233759][T18038] ? reacquire_held_locks+0xce/0x1e0 [ 747.233796][T18038] ? lock_vma_under_rcu+0x11d/0x590 [ 747.233836][T18038] ? lock_vma_under_rcu+0x17c/0x590 [ 747.233873][T18038] ? lock_vma_under_rcu+0x25/0x590 [ 747.233905][T18038] ? lock_vma_under_rcu+0x1f9/0x590 [ 747.233938][T18038] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 747.233980][T18038] ? __futex_wait+0x256/0x300 [ 747.234024][T18038] madvise_walk_vmas+0x71c/0xa90 [ 747.234058][T18038] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 747.234089][T18038] ? find_held_lock+0x2b/0x80 [ 747.234116][T18038] madvise_do_behavior+0x1ea/0x510 [ 747.234148][T18038] ? __pfx_madvise_do_behavior+0x10/0x10 [ 747.234177][T18038] ? futex_wait+0x125/0x380 [ 747.234222][T18038] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 747.234268][T18038] do_madvise+0x195/0x240 [ 747.234297][T18038] ? __pfx_do_madvise+0x10/0x10 [ 747.234325][T18038] ? do_futex+0x192/0x350 [ 747.234383][T18038] __x64_sys_madvise+0xa9/0x110 [ 747.234412][T18038] ? lockdep_hardirqs_on+0x78/0x100 [ 747.234449][T18038] do_syscall_64+0x106/0xf80 [ 747.234484][T18038] ? clear_bhb_loop+0x40/0x90 [ 747.234515][T18038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.234540][T18038] RIP: 0033:0x7fc2a039c799 [ 747.234560][T18038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 747.234585][T18038] RSP: 002b:00007fc2a120b028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 747.234608][T18038] RAX: ffffffffffffffda RBX: 00007fc2a0615fa0 RCX: 00007fc2a039c799 [ 747.234625][T18038] RDX: 0000000000000066 RSI: 0000000002021000 RDI: 0000000000000000 [ 747.234640][T18038] RBP: 00007fc2a0432c99 R08: 0000000000000000 R09: 0000000000000000 [ 747.234656][T18038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 747.234670][T18038] R13: 00007fc2a0616038 R14: 00007fc2a0615fa0 R15: 00007ffeef75cad8 [ 747.234702][T18038] [ 748.355550][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.362195][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.173973][T18020] kexec: Could not allocate control_code_buffer [ 750.453267][T18091] FAULT_INJECTION: forcing a failure. [ 750.453267][T18091] name failslab, interval 1, probability 0, space 0, times 0 [ 750.503094][T18091] CPU: 0 UID: 0 PID: 18091 Comm: syz.2.4268 Tainted: G L syzkaller #0 PREEMPT(full) [ 750.503132][T18091] Tainted: [L]=SOFTLOCKUP [ 750.503141][T18091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 750.503156][T18091] Call Trace: [ 750.503164][T18091] [ 750.503173][T18091] dump_stack_lvl+0x100/0x190 [ 750.503213][T18091] should_fail_ex.cold+0x5/0xa [ 750.503239][T18091] should_failslab+0xc2/0x120 [ 750.503264][T18091] __kmalloc_cache_noprof+0x7a/0x6f0 [ 750.503295][T18091] ? snd_seq_timer_new+0x44/0x1b0 [ 750.503336][T18091] snd_seq_timer_new+0x44/0x1b0 [ 750.503372][T18091] snd_seq_queue_alloc+0x177/0x590 [ 750.503406][T18091] snd_seq_ioctl_create_queue+0xa9/0x370 [ 750.503452][T18091] call_seq_client_ctl+0xa3/0x130 [ 750.503493][T18091] snd_seq_kernel_client_ctl+0x77/0xd0 [ 750.503518][T18091] alloc_seq_queue+0xdb/0x180 [ 750.503543][T18091] ? __pfx_alloc_seq_queue+0x10/0x10 [ 750.503581][T18091] ? mark_held_locks+0x40/0x70 [ 750.503611][T18091] ? _raw_spin_unlock_irq+0x23/0x50 [ 750.503642][T18091] ? lockdep_hardirqs_on+0x78/0x100 [ 750.503679][T18091] snd_seq_oss_open+0x2b2/0xa10 [ 750.503708][T18091] odev_open+0x79/0xc0 [ 750.503728][T18091] ? __pfx_odev_open+0x10/0x10 [ 750.503750][T18091] soundcore_open+0x2e3/0x5a0 [ 750.503776][T18091] ? __pfx_soundcore_open+0x10/0x10 [ 750.503799][T18091] chrdev_open+0x234/0x6a0 [ 750.503822][T18091] ? __pfx_apparmor_file_open+0x10/0x10 [ 750.503845][T18091] ? __pfx_chrdev_open+0x10/0x10 [ 750.503870][T18091] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 750.503901][T18091] do_dentry_open+0x6d8/0x1660 [ 750.503923][T18091] ? __pfx_chrdev_open+0x10/0x10 [ 750.503953][T18091] vfs_open+0x82/0x3f0 [ 750.503987][T18091] path_openat+0x208c/0x31a0 [ 750.504020][T18091] ? __pfx_path_openat+0x10/0x10 [ 750.504054][T18091] do_file_open+0x20e/0x430 [ 750.504084][T18091] ? __pfx_do_file_open+0x10/0x10 [ 750.504127][T18091] ? alloc_fd+0x476/0x790 [ 750.504152][T18091] ? do_getname+0x191/0x390 [ 750.504184][T18091] do_sys_openat2+0x10d/0x1e0 [ 750.504214][T18091] ? __pfx_do_sys_openat2+0x10/0x10 [ 750.504248][T18091] ? __fget_files+0x21f/0x3d0 [ 750.504274][T18091] __x64_sys_openat+0x12d/0x210 [ 750.504306][T18091] ? __pfx___x64_sys_openat+0x10/0x10 [ 750.504348][T18091] do_syscall_64+0x106/0xf80 [ 750.504381][T18091] ? clear_bhb_loop+0x40/0x90 [ 750.504410][T18091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.504445][T18091] RIP: 0033:0x7fc2a039c799 [ 750.504464][T18091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 750.504486][T18091] RSP: 002b:00007fc2a120b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 750.504509][T18091] RAX: ffffffffffffffda RBX: 00007fc2a0615fa0 RCX: 00007fc2a039c799 [ 750.504524][T18091] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 750.504539][T18091] RBP: 00007fc2a0432c99 R08: 0000000000000000 R09: 0000000000000000 [ 750.504553][T18091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 750.504568][T18091] R13: 00007fc2a0616038 R14: 00007fc2a0615fa0 R15: 00007ffeef75cad8 [ 750.504597][T18091] [ 752.070549][T18122] FAULT_INJECTION: forcing a failure. [ 752.070549][T18122] name failslab, interval 1, probability 0, space 0, times 0 [ 752.140087][T18122] CPU: 0 UID: 0 PID: 18122 Comm: syz.2.4280 Tainted: G L syzkaller #0 PREEMPT(full) [ 752.140128][T18122] Tainted: [L]=SOFTLOCKUP [ 752.140138][T18122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 752.140154][T18122] Call Trace: [ 752.140162][T18122] [ 752.140172][T18122] dump_stack_lvl+0x100/0x190 [ 752.140214][T18122] should_fail_ex.cold+0x5/0xa [ 752.140245][T18122] should_failslab+0xc2/0x120 [ 752.140279][T18122] __kmalloc_cache_noprof+0x7a/0x6f0 [ 752.140314][T18122] ? acpi_ds_create_walk_state+0x95/0x300 [ 752.140343][T18122] ? acpi_ut_status_exit+0x111/0x1c0 [ 752.140403][T18122] acpi_ds_create_walk_state+0x95/0x300 [ 752.140434][T18122] acpi_ds_call_control_method+0x226/0xab0 [ 752.140477][T18122] acpi_ps_parse_aml+0xacd/0x1120 [ 752.140512][T18122] acpi_ps_execute_method+0x5c4/0xe90 [ 752.140548][T18122] acpi_ns_evaluate+0x640/0x1670 [ 752.140585][T18122] acpi_evaluate_object+0x420/0xe00 [ 752.140626][T18122] ? kasan_save_stack+0x30/0x50 [ 752.140665][T18122] ? kasan_save_track+0x14/0x30 [ 752.140737][T18122] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 752.140771][T18122] acpi_evaluate_integer+0xdf/0x220 [ 752.140808][T18122] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 752.140857][T18122] ? __pfx_status_show+0x10/0x10 [ 752.140881][T18122] status_show+0xa0/0x120 [ 752.140905][T18122] ? __pfx_status_show+0x10/0x10 [ 752.140936][T18122] dev_attr_show+0x52/0xa0 [ 752.140968][T18122] ? __pfx_dev_attr_show+0x10/0x10 [ 752.140998][T18122] sysfs_kf_seq_show+0x217/0x3a0 [ 752.141035][T18122] seq_read_iter+0x32f/0x1270 [ 752.141087][T18122] kernfs_fop_read_iter+0x46c/0x610 [ 752.141115][T18122] ? rw_verify_area+0xce/0x6d0 [ 752.141150][T18122] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 752.141180][T18122] vfs_read+0x825/0xb30 [ 752.141224][T18122] ? __pfx_vfs_read+0x10/0x10 [ 752.141322][T18122] ksys_read+0x12a/0x250 [ 752.141345][T18122] ? __pfx_ksys_read+0x10/0x10 [ 752.141377][T18122] do_syscall_64+0x106/0xf80 [ 752.141415][T18122] ? clear_bhb_loop+0x40/0x90 [ 752.141447][T18122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.141473][T18122] RIP: 0033:0x7fc2a039c799 [ 752.141494][T18122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 752.141519][T18122] RSP: 002b:00007fc2a120b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 752.141543][T18122] RAX: ffffffffffffffda RBX: 00007fc2a0615fa0 RCX: 00007fc2a039c799 [ 752.141561][T18122] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000004 [ 752.141576][T18122] RBP: 00007fc2a0432c99 R08: 0000000000000000 R09: 0000000000000000 [ 752.141592][T18122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 752.141608][T18122] R13: 00007fc2a0616038 R14: 00007fc2a0615fa0 R15: 00007ffeef75cad8 [ 752.141641][T18122] [ 752.144025][T18122] ACPI Error: [ 752.651119][T18129] netlink: 'syz.3.4283': attribute type 1 has an invalid length. [ 752.690245][T18129] netlink: 198 bytes leftover after parsing attributes in process `syz.3.4283'. [ 752.820582][T18131] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 753.211363][T18122] Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20251212/psparse-529) [ 753.887381][T18151] mkiss: ax0: crc mode is auto. [ 754.838535][T18166] FAULT_INJECTION: forcing a failure. [ 754.838535][T18166] name failslab, interval 1, probability 0, space 0, times 0 [ 754.927440][T18166] CPU: 0 UID: 0 PID: 18166 Comm: syz.5.4293 Tainted: G L syzkaller #0 PREEMPT(full) [ 754.927481][T18166] Tainted: [L]=SOFTLOCKUP [ 754.927490][T18166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 754.927506][T18166] Call Trace: [ 754.927515][T18166] [ 754.927524][T18166] dump_stack_lvl+0x100/0x190 [ 754.927565][T18166] should_fail_ex.cold+0x5/0xa [ 754.927594][T18166] should_failslab+0xc2/0x120 [ 754.927620][T18166] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 754.927658][T18166] ? acpi_ut_create_generic_state+0x61/0xc0 [ 754.927686][T18166] ? __pfx_acpi_ut_trace+0x10/0x10 [ 754.927720][T18166] acpi_ut_create_generic_state+0x61/0xc0 [ 754.927748][T18166] acpi_ps_init_scope+0x3a/0x240 [ 754.927780][T18166] acpi_ds_init_aml_walk+0x1f6/0x680 [ 754.927813][T18166] acpi_ds_call_control_method+0x3a2/0xab0 [ 754.927860][T18166] acpi_ps_parse_aml+0xacd/0x1120 [ 754.927894][T18166] acpi_ps_execute_method+0x5c4/0xe90 [ 754.927940][T18166] acpi_ns_evaluate+0x640/0x1670 [ 754.927981][T18166] acpi_evaluate_object+0x420/0xe00 [ 754.928005][T18166] ? kasan_save_stack+0x30/0x50 [ 754.928043][T18166] ? kasan_save_track+0x14/0x30 [ 754.928087][T18166] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 754.928122][T18166] acpi_evaluate_integer+0xdf/0x220 [ 754.928178][T18166] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 754.928229][T18166] ? __pfx_status_show+0x10/0x10 [ 754.928253][T18166] status_show+0xa0/0x120 [ 754.928278][T18166] ? __pfx_status_show+0x10/0x10 [ 754.928311][T18166] dev_attr_show+0x52/0xa0 [ 754.928343][T18166] ? __pfx_dev_attr_show+0x10/0x10 [ 754.928374][T18166] sysfs_kf_seq_show+0x217/0x3a0 [ 754.928413][T18166] seq_read_iter+0x32f/0x1270 [ 754.928466][T18166] kernfs_fop_read_iter+0x46c/0x610 [ 754.928496][T18166] ? rw_verify_area+0xce/0x6d0 [ 754.928533][T18166] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 754.928565][T18166] vfs_read+0x825/0xb30 [ 754.928610][T18166] ? __pfx_vfs_read+0x10/0x10 [ 754.928669][T18166] ksys_read+0x12a/0x250 [ 754.928692][T18166] ? __pfx_ksys_read+0x10/0x10 [ 754.928724][T18166] do_syscall_64+0x106/0xf80 [ 754.928761][T18166] ? clear_bhb_loop+0x40/0x90 [ 754.928793][T18166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.928820][T18166] RIP: 0033:0x7f788759c799 [ 754.928841][T18166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 754.928867][T18166] RSP: 002b:00007f788839a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 754.928890][T18166] RAX: ffffffffffffffda RBX: 00007f7887815fa0 RCX: 00007f788759c799 [ 754.928907][T18166] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000005 [ 754.928929][T18166] RBP: 00007f7887632c99 R08: 0000000000000000 R09: 0000000000000000 [ 754.928945][T18166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 754.928960][T18166] R13: 00007f7887816038 R14: 00007f7887815fa0 R15: 00007fff2edd9008 [ 754.928993][T18166] [ 754.929141][T18166] ACPI Error: [ 755.913396][T18177] netlink: 338 bytes leftover after parsing attributes in process `syz.0.4298'. [ 756.668488][T18166] Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20251212/psparse-529) [ 757.595803][T18202] FAULT_INJECTION: forcing a failure. [ 757.595803][T18202] name failslab, interval 1, probability 0, space 0, times 0 [ 757.660923][T18202] CPU: 0 UID: 0 PID: 18202 Comm: syz.5.4305 Tainted: G L syzkaller #0 PREEMPT(full) [ 757.660961][T18202] Tainted: [L]=SOFTLOCKUP [ 757.660970][T18202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 757.660984][T18202] Call Trace: [ 757.660991][T18202] [ 757.661000][T18202] dump_stack_lvl+0x100/0x190 [ 757.661040][T18202] should_fail_ex.cold+0x5/0xa [ 757.661066][T18202] should_failslab+0xc2/0x120 [ 757.661090][T18202] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 757.661127][T18202] ? __d_alloc+0x34/0xa80 [ 757.661158][T18202] __d_alloc+0x34/0xa80 [ 757.661186][T18202] d_alloc_pseudo+0x1c/0xc0 [ 757.661220][T18202] alloc_file_pseudo+0xcf/0x230 [ 757.661253][T18202] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 757.661301][T18202] ? alloc_fd+0x476/0x790 [ 757.661328][T18202] ? do_raw_spin_unlock+0x145/0x1e0 [ 757.661370][T18202] __anon_inode_getfile+0xe8/0x280 [ 757.661404][T18202] anon_inode_getfile_fmode+0x37/0xa0 [ 757.661437][T18202] __do_sys_fanotify_init+0xa79/0xe50 [ 757.661482][T18202] do_syscall_64+0x106/0xf80 [ 757.661519][T18202] ? clear_bhb_loop+0x40/0x90 [ 757.661550][T18202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.661577][T18202] RIP: 0033:0x7f788759c799 [ 757.661598][T18202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 757.661624][T18202] RSP: 002b:00007f788839a028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 757.661649][T18202] RAX: ffffffffffffffda RBX: 00007f7887815fa0 RCX: 00007f788759c799 [ 757.661666][T18202] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 757.661682][T18202] RBP: 00007f7887632c99 R08: 0000000000000000 R09: 0000000000000000 [ 757.661699][T18202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 757.661715][T18202] R13: 00007f7887816038 R14: 00007f7887815fa0 R15: 00007fff2edd9008 [ 757.661758][T18202] [ 758.226221][T18207] netlink: 186 bytes leftover after parsing attributes in process `syz.0.4307'. [ 758.320774][T18209] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 758.961853][T18220] netlink: 266 bytes leftover after parsing attributes in process `syz.3.4313'. [ 759.900000][T18241] kvm_intel: kvm [18240]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0xfffffffffffffffe [ 760.405623][T18253] netlink: 'syz.5.4326': attribute type 33 has an invalid length. [ 760.451458][T18253] netlink: 322 bytes leftover after parsing attributes in process `syz.5.4326'. [ 760.485966][T18256] netlink: 'syz.0.4325': attribute type 27 has an invalid length. [ 760.505546][T18256] netlink: 'syz.0.4325': attribute type 28 has an invalid length. [ 760.546603][T18256] netlink: 'syz.0.4325': attribute type 29 has an invalid length. [ 760.594561][T18256] netlink: 'syz.0.4325': attribute type 30 has an invalid length. [ 760.644967][T18256] netlink: 'syz.0.4325': attribute type 31 has an invalid length. [ 760.680406][T18256] netlink: 'syz.0.4325': attribute type 32 has an invalid length. [ 760.710865][T18256] netlink: 'syz.0.4325': attribute type 33 has an invalid length. [ 760.756025][T18256] netlink: 'syz.0.4325': attribute type 35 has an invalid length. [ 760.769506][T18256] netlink: 'syz.0.4325': attribute type 37 has an invalid length. [ 760.793162][T18256] netlink: 18 bytes leftover after parsing attributes in process `syz.0.4325'. [ 760.925575][T18264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4329'. [ 762.833418][T18311] netlink: 334 bytes leftover after parsing attributes in process `syz.2.4345'. [ 763.709268][T18328] netlink: 146 bytes leftover after parsing attributes in process `syz.5.4354'. [ 764.007580][T18334] netlink: 330 bytes leftover after parsing attributes in process `syz.3.4356'. [ 764.231887][T18332] Process accounting paused [ 764.583639][T18355] binder: 18354:18355 ioctl c0405665 34 returned -22 [ 764.603225][T18353] FAULT_INJECTION: forcing a failure. [ 764.603225][T18353] name failslab, interval 1, probability 0, space 0, times 0 [ 764.706633][T18353] CPU: 0 UID: 0 PID: 18353 Comm: syz.3.4361 Tainted: G L syzkaller #0 PREEMPT(full) [ 764.706669][T18353] Tainted: [L]=SOFTLOCKUP [ 764.706678][T18353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 764.706692][T18353] Call Trace: [ 764.706700][T18353] [ 764.706708][T18353] dump_stack_lvl+0x100/0x190 [ 764.706747][T18353] should_fail_ex.cold+0x5/0xa [ 764.706773][T18353] ? ima_alloc_init_template+0xb6/0x6d0 [ 764.706797][T18353] should_failslab+0xc2/0x120 [ 764.706821][T18353] __kmalloc_noprof+0xe0/0x850 [ 764.706855][T18353] ? find_held_lock+0x2b/0x80 [ 764.706876][T18353] ? take_dentry_name_snapshot+0x30b/0x7c0 [ 764.706919][T18353] ima_alloc_init_template+0xb6/0x6d0 [ 764.706945][T18353] ? take_dentry_name_snapshot+0x310/0x7c0 [ 764.706981][T18353] ima_store_measurement+0x1e3/0x5b0 [ 764.707008][T18353] ? __pfx_ima_store_measurement+0x10/0x10 [ 764.707043][T18353] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 764.707084][T18353] process_measurement+0x19cc/0x2350 [ 764.707129][T18353] ? stack_trace_save+0x8e/0xc0 [ 764.707152][T18353] ? __pfx_process_measurement+0x10/0x10 [ 764.707210][T18353] ? __lock_acquire+0x4a5/0x2630 [ 764.707249][T18353] ? __kasan_slab_alloc+0x89/0x90 [ 764.707281][T18353] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 764.707324][T18353] ? init_file+0x95/0x480 [ 764.707351][T18353] ? alloc_empty_file+0x73/0x1c0 [ 764.707380][T18353] ? alloc_file_pseudo+0x13a/0x230 [ 764.707410][T18353] ? ksys_mmap_pgoff+0x232/0x650 [ 764.707435][T18353] ? __x64_sys_mmap+0x125/0x190 [ 764.707470][T18353] ? do_syscall_64+0x106/0xf80 [ 764.707533][T18353] ? __pfx_aa_file_perm+0x10/0x10 [ 764.707586][T18353] ima_file_mmap+0x1c4/0x1f0 [ 764.707623][T18353] ? __pfx_ima_file_mmap+0x10/0x10 [ 764.707667][T18353] security_mmap_file+0x278/0x9b0 [ 764.707697][T18353] vm_mmap_pgoff+0xec/0x470 [ 764.707725][T18353] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 764.707749][T18353] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 764.707780][T18353] ? hugetlbfs_get_inode+0x36e/0x750 [ 764.707812][T18353] ksys_mmap_pgoff+0x273/0x650 [ 764.707837][T18353] ? __x64_sys_futex+0x358/0x4d0 [ 764.707869][T18353] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 764.707893][T18353] ? xfd_validate_state+0x129/0x190 [ 764.707937][T18353] __x64_sys_mmap+0x125/0x190 [ 764.707974][T18353] do_syscall_64+0x106/0xf80 [ 764.708007][T18353] ? clear_bhb_loop+0x40/0x90 [ 764.708035][T18353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.708059][T18353] RIP: 0033:0x7fb514d9c799 [ 764.708078][T18353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 764.708100][T18353] RSP: 002b:00007fb515c91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 764.708122][T18353] RAX: ffffffffffffffda RBX: 00007fb515016180 RCX: 00007fb514d9c799 [ 764.708138][T18353] RDX: 0000000000009c0f RSI: 000000000000000c RDI: 0000000000000000 [ 764.708152][T18353] RBP: 00007fb514e32c99 R08: ffffffffffffffff R09: 0000300000020000 [ 764.708168][T18353] R10: 0000000000044eb2 R11: 0000000000000246 R12: 0000000000000000 [ 764.708182][T18353] R13: 00007fb515016218 R14: 00007fb515016180 R15: 00007ffc638a8578 [ 764.708211][T18353] [ 764.712897][ T29] audit: type=1804 audit(1774064318.001:12): pid=18353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.3.4361" name="anon_hugepage" dev="hugetlbfs" ino=274765 res=0 errno=0 [ 768.081142][T18423] netlink: 'syz.5.4382': attribute type 1 has an invalid length. [ 768.126593][T18423] netlink: 330 bytes leftover after parsing attributes in process `syz.5.4382'. [ 768.838619][T18432] netlink: 54 bytes leftover after parsing attributes in process `syz.0.4385'. [ 769.033960][T18435] netlink: 342 bytes leftover after parsing attributes in process `syz.5.4387'. [ 769.817601][T18446] zram: Added device: zram0 [ 770.204704][T18453] netlink: 354 bytes leftover after parsing attributes in process `syz.0.4392'. [ 770.284072][T18456] ubi0: attaching mtd0 [ 770.320767][T18456] FAULT_INJECTION: forcing a failure. [ 770.320767][T18456] name failslab, interval 1, probability 0, space 0, times 0 [ 770.461058][T18456] CPU: 0 UID: 0 PID: 18456 Comm: syz.5.4394 Tainted: G L syzkaller #0 PREEMPT(full) [ 770.461100][T18456] Tainted: [L]=SOFTLOCKUP [ 770.461109][T18456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 770.461125][T18456] Call Trace: [ 770.461134][T18456] [ 770.461144][T18456] dump_stack_lvl+0x100/0x190 [ 770.461188][T18456] should_fail_ex.cold+0x5/0xa [ 770.461218][T18456] should_failslab+0xc2/0x120 [ 770.461252][T18456] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 770.461292][T18456] ? add_to_list+0xcb/0x600 [ 770.461337][T18456] add_to_list+0xcb/0x600 [ 770.461379][T18456] ubi_attach+0x2044/0x4d30 [ 770.461430][T18456] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 770.461464][T18456] ? ubi_msg+0x114/0x159 [ 770.461502][T18456] ? __pfx_ubi_msg+0x10/0x10 [ 770.461543][T18456] ? __pfx_ubi_attach+0x10/0x10 [ 770.461583][T18456] ? lockdep_init_map_type+0x5c/0x250 [ 770.461621][T18456] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 770.461646][T18456] ? __vmalloc_node_noprof+0xad/0xf0 [ 770.461678][T18456] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 770.461706][T18456] ubi_attach_mtd_dev+0x139f/0x32a0 [ 770.461745][T18456] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 770.461770][T18456] ? __pfx_get_mtd_device+0x10/0x10 [ 770.461811][T18456] ctrl_cdev_ioctl+0x36a/0x400 [ 770.461838][T18456] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 770.461871][T18456] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 770.461899][T18456] __x64_sys_ioctl+0x18e/0x210 [ 770.461939][T18456] do_syscall_64+0x106/0xf80 [ 770.461977][T18456] ? clear_bhb_loop+0x40/0x90 [ 770.462008][T18456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.462035][T18456] RIP: 0033:0x7f788759c799 [ 770.462056][T18456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 770.462081][T18456] RSP: 002b:00007f788839a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 770.462105][T18456] RAX: ffffffffffffffda RBX: 00007f7887815fa0 RCX: 00007f788759c799 [ 770.462123][T18456] RDX: 0000000000000000 RSI: 0000000040186f40 RDI: 0000000000000005 [ 770.462138][T18456] RBP: 00007f7887632c99 R08: 0000000000000000 R09: 0000000000000000 [ 770.462154][T18456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 770.462170][T18456] R13: 00007f7887816038 R14: 00007f7887815fa0 R15: 00007fff2edd9008 [ 770.462203][T18456] [ 771.014061][T18458] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4393'. [ 771.589710][T18467] block nbd0: NBD_DISCONNECT [ 771.594776][T18467] block nbd0: Send disconnect failed -32 [ 771.660651][T18456] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -12 [ 771.916885][T18473] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4399'. [ 771.994476][T18473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 772.218530][T18473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 773.083154][T18489] zram: Added device: zram1 [ 773.822955][T12249] Bluetooth: hci0: unexpected event 0x07 length: 435 > 255 [ 774.690793][T18518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4412'. [ 774.848894][T18520] netlink: 'syz.3.4412': attribute type 1 has an invalid length. [ 774.890853][T18520] netlink: 13 bytes leftover after parsing attributes in process `syz.3.4412'. [ 776.394861][T18533] zram: Added device: zram2 [ 776.765571][T18538] mkiss: ax0: crc mode is auto. [ 777.014822][T18550] netlink: 330 bytes leftover after parsing attributes in process `syz.0.4421'. [ 777.593360][T18555] netlink: 54 bytes leftover after parsing attributes in process `syz.3.4424'. [ 779.071957][T18571] FAULT_INJECTION: forcing a failure. [ 779.071957][T18571] name failslab, interval 1, probability 0, space 0, times 0 [ 779.180998][T18571] CPU: 0 UID: 0 PID: 18571 Comm: syz.3.4430 Tainted: G L syzkaller #0 PREEMPT(full) [ 779.181050][T18571] Tainted: [L]=SOFTLOCKUP [ 779.181063][T18571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 779.181078][T18571] Call Trace: [ 779.181086][T18571] [ 779.181097][T18571] dump_stack_lvl+0x100/0x190 [ 779.181139][T18571] should_fail_ex.cold+0x5/0xa [ 779.181167][T18571] should_failslab+0xc2/0x120 [ 779.181194][T18571] __kmalloc_cache_node_noprof+0x7d/0x770 [ 779.181245][T18571] ? blk_mq_init_tags+0x8c/0x300 [ 779.181295][T18571] blk_mq_init_tags+0x8c/0x300 [ 779.181324][T18571] blk_mq_alloc_map_and_rqs+0x218/0xeb0 [ 779.181376][T18571] blk_mq_alloc_sched_tags+0x1de/0x350 [ 779.181419][T18571] blk_mq_alloc_sched_res+0x8e/0x250 [ 779.181458][T18571] elevator_change+0x136/0x530 [ 779.181494][T18571] elv_iosched_store+0x3be/0x460 [ 779.181529][T18571] ? __pfx_elv_iosched_store+0x10/0x10 [ 779.181561][T18571] ? kasan_save_track+0x14/0x30 [ 779.181615][T18571] ? __pfx_elv_iosched_store+0x10/0x10 [ 779.181650][T18571] queue_attr_store+0x25f/0x2f0 [ 779.181678][T18571] ? __pfx_queue_attr_store+0x10/0x10 [ 779.181706][T18571] ? __lock_acquire+0x4a5/0x2630 [ 779.181750][T18571] ? find_held_lock+0x2b/0x80 [ 779.181774][T18571] ? sysfs_file_kobj+0xe4/0x290 [ 779.181805][T18571] ? sysfs_file_kobj+0xe4/0x290 [ 779.181840][T18571] ? __pfx_queue_attr_store+0x10/0x10 [ 779.181866][T18571] sysfs_kf_write+0xf2/0x150 [ 779.181900][T18571] kernfs_fop_write_iter+0x3e0/0x5f0 [ 779.181927][T18571] ? __pfx_sysfs_kf_write+0x10/0x10 [ 779.181962][T18571] iter_file_splice_write+0x830/0x10a0 [ 779.182004][T18571] ? __pfx_iter_file_splice_write+0x10/0x10 [ 779.182036][T18571] ? __pfx_copy_splice_read+0x10/0x10 [ 779.182077][T18571] ? __pfx_iter_file_splice_write+0x10/0x10 [ 779.182105][T18571] direct_splice_actor+0x192/0x6c0 [ 779.182134][T18571] splice_direct_to_actor+0x345/0xa30 [ 779.182162][T18571] ? __pfx_direct_splice_actor+0x10/0x10 [ 779.182192][T18571] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 779.182228][T18571] do_splice_direct+0x174/0x240 [ 779.182300][T18571] ? __pfx_do_splice_direct+0x10/0x10 [ 779.182327][T18571] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 779.182374][T18571] ? rw_verify_area+0xce/0x6d0 [ 779.182415][T18571] do_sendfile+0xadc/0xe20 [ 779.182472][T18571] ? __pfx_do_sendfile+0x10/0x10 [ 779.182522][T18571] ? __x64_sys_futex+0x34f/0x4d0 [ 779.182550][T18571] ? __x64_sys_futex+0x358/0x4d0 [ 779.182581][T18571] __x64_sys_sendfile64+0x1d8/0x220 [ 779.182607][T18571] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 779.182640][T18571] do_syscall_64+0x106/0xf80 [ 779.182672][T18571] ? clear_bhb_loop+0x40/0x90 [ 779.182699][T18571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.182721][T18571] RIP: 0033:0x7fb514d9c799 [ 779.182739][T18571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 779.182761][T18571] RSP: 002b:00007fb515cd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 779.182782][T18571] RAX: ffffffffffffffda RBX: 00007fb515015fa0 RCX: 00007fb514d9c799 [ 779.182797][T18571] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 779.182810][T18571] RBP: 00007fb514e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 779.182823][T18571] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000000 [ 779.182837][T18571] R13: 00007fb515016038 R14: 00007fb515015fa0 R15: 00007ffc638a8578 [ 779.182865][T18571] [ 779.924447][T18580] netlink: 'syz.2.4432': attribute type 8 has an invalid length. [ 780.249398][T18583] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4434'. [ 781.630732][T18597] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4438'. [ 784.618680][T18634] netlink: 202 bytes leftover after parsing attributes in process `syz.3.4452'. [ 787.860038][T18660] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4463'. [ 788.339498][T18666] random: crng reseeded on system resumption [ 792.133728][T18709] FAULT_INJECTION: forcing a failure. [ 792.133728][T18709] name failslab, interval 1, probability 0, space 0, times 0 [ 792.220238][T18709] CPU: 0 UID: 0 PID: 18709 Comm: syz.2.4480 Tainted: G L syzkaller #0 PREEMPT(full) [ 792.220280][T18709] Tainted: [L]=SOFTLOCKUP [ 792.220289][T18709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 792.220306][T18709] Call Trace: [ 792.220314][T18709] [ 792.220324][T18709] dump_stack_lvl+0x100/0x190 [ 792.220367][T18709] should_fail_ex.cold+0x5/0xa [ 792.220396][T18709] should_failslab+0xc2/0x120 [ 792.220423][T18709] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 792.220462][T18709] ? mas_alloc_nodes+0x280/0x390 [ 792.220502][T18709] mas_alloc_nodes+0x280/0x390 [ 792.220538][T18709] mas_preallocate+0x39c/0xf10 [ 792.220578][T18709] ? __memcg_slab_post_alloc_hook+0x4a0/0x990 [ 792.220614][T18709] ? __pfx_mas_preallocate+0x10/0x10 [ 792.220663][T18709] ? anon_vma_name+0x5a/0x250 [ 792.220699][T18709] __split_vma+0x33d/0xd90 [ 792.220738][T18709] ? __pfx___split_vma+0x10/0x10 [ 792.220772][T18709] ? finish_task_switch.isra.0+0x200/0xb80 [ 792.220807][T18709] ? lockdep_hardirqs_on+0x78/0x100 [ 792.220859][T18709] vma_modify+0x1121/0x2250 [ 792.220902][T18709] ? __pfx_vma_modify+0x10/0x10 [ 792.220946][T18709] vma_modify_flags+0x257/0x3d0 [ 792.220984][T18709] ? __pfx_vma_modify_flags+0x10/0x10 [ 792.221034][T18709] ? mtree_range_walk+0x6ce/0xcd0 [ 792.221076][T18709] mlock_fixup+0x302/0xf00 [ 792.221117][T18709] ? __pfx_mlock_fixup+0x10/0x10 [ 792.221161][T18709] apply_vma_lock_flags+0x256/0x370 [ 792.221202][T18709] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 792.221240][T18709] ? __pfx___might_resched+0x10/0x10 [ 792.221293][T18709] ? __pfx_down_write_killable+0x10/0x10 [ 792.221321][T18709] ? do_futex+0x192/0x350 [ 792.221356][T18709] do_mlock+0x261/0x7f0 [ 792.221396][T18709] ? __pfx_do_mlock+0x10/0x10 [ 792.221432][T18709] ? __x64_sys_futex+0x34f/0x4d0 [ 792.221463][T18709] ? __x64_sys_futex+0x358/0x4d0 [ 792.221500][T18709] ? xfd_validate_state+0x129/0x190 [ 792.221546][T18709] __x64_sys_mlock+0x59/0x80 [ 792.221585][T18709] do_syscall_64+0x106/0xf80 [ 792.221622][T18709] ? clear_bhb_loop+0x40/0x90 [ 792.221653][T18709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.221680][T18709] RIP: 0033:0x7fc2a039c799 [ 792.221701][T18709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 792.221726][T18709] RSP: 002b:00007fc2a120b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 792.221750][T18709] RAX: ffffffffffffffda RBX: 00007fc2a0615fa0 RCX: 00007fc2a039c799 [ 792.221768][T18709] RDX: 0000000000000000 RSI: 0000000000080006 RDI: 0000000000000112 [ 792.221784][T18709] RBP: 00007fc2a0432c99 R08: 0000000000000000 R09: 0000000000000000 [ 792.221800][T18709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 792.221821][T18709] R13: 00007fc2a0616038 R14: 00007fc2a0615fa0 R15: 00007ffeef75cad8 [ 792.221856][T18709] [ 795.129396][T18730] Process accounting resumed [ 796.134360][T18743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4490'. [ 796.187920][T18743] netlink: 13 bytes leftover after parsing attributes in process `syz.3.4490'. [ 797.074349][T18756] netlink: 62 bytes leftover after parsing attributes in process `syz.5.4495'. [ 797.856001][T18772] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4501'. [ 798.504755][T12249] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 798.627322][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 798.648319][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 798.657376][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 798.666577][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 798.685606][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 799.931652][T18780] chnl_net:caif_netlink_parms(): no params data found [ 800.310011][T18780] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.356046][T18780] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.363292][T18780] bridge_slave_0: entered allmulticast mode [ 800.406052][T18799] netlink: 326 bytes leftover after parsing attributes in process `syz.2.4507'. [ 800.425579][T18780] bridge_slave_0: entered promiscuous mode [ 800.451694][T18780] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.492027][T18780] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.528194][T18780] bridge_slave_1: entered allmulticast mode [ 800.550300][T18780] bridge_slave_1: entered promiscuous mode [ 800.686658][T18780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 800.736303][ T5831] Bluetooth: hci4: command tx timeout [ 800.755695][T18780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 800.927338][T18780] team0: Port device team_slave_0 added [ 800.984902][T18780] team0: Port device team_slave_1 added [ 801.107894][T18780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 801.150841][T18780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.284591][T18780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 801.347787][T18780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 801.370039][T18780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.456295][T18780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 801.681225][T18780] hsr_slave_0: entered promiscuous mode [ 801.716117][T18780] hsr_slave_1: entered promiscuous mode [ 801.741647][T18780] debugfs: 'hsr0' already exists in 'hsr' [ 801.764550][T18780] Cannot create hsr debugfs directory [ 802.493260][T18780] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 802.588067][T18780] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 802.644300][T18780] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 802.801608][T18780] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 802.815251][ T5831] Bluetooth: hci4: command tx timeout [ 803.240323][T18840] netlink: 338 bytes leftover after parsing attributes in process `syz.5.4517'. [ 803.254495][T18780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 803.333159][T18780] 8021q: adding VLAN 0 to HW filter on device team0 [ 803.414970][ T132] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.422210][ T132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 803.503366][ T132] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.510571][ T132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 803.875891][T18846] FAULT_INJECTION: forcing a failure. [ 803.875891][T18846] name failslab, interval 1, probability 0, space 0, times 0 [ 804.022411][T18846] CPU: 0 UID: 0 PID: 18846 Comm: syz.2.4519 Tainted: G L syzkaller #0 PREEMPT(full) [ 804.022464][T18846] Tainted: [L]=SOFTLOCKUP [ 804.022473][T18846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 804.022487][T18846] Call Trace: [ 804.022502][T18846] [ 804.022511][T18846] dump_stack_lvl+0x100/0x190 [ 804.022550][T18846] should_fail_ex.cold+0x5/0xa [ 804.022577][T18846] should_failslab+0xc2/0x120 [ 804.022602][T18846] __kmalloc_cache_noprof+0x7a/0x6f0 [ 804.022643][T18846] ? tipc_sub_subscribe+0x15c/0x730 [ 804.022675][T18846] ? find_held_lock+0x2b/0x80 [ 804.022698][T18846] tipc_sub_subscribe+0x15c/0x730 [ 804.022733][T18846] tipc_conn_rcv_sub+0x21e/0x3d0 [ 804.022764][T18846] tipc_topsrv_kern_subscr+0x20b/0x3c0 [ 804.022795][T18846] ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10 [ 804.022828][T18846] ? net_generic+0xea/0x2a0 [ 804.022862][T18846] tipc_group_create+0x4ab/0x660 [ 804.022896][T18846] tipc_setsockopt+0x611/0xe30 [ 804.022919][T18846] ? __pfx_tipc_setsockopt+0x10/0x10 [ 804.022950][T18846] ? __pfx_tipc_setsockopt+0x10/0x10 [ 804.022973][T18846] do_sock_setsockopt+0xf3/0x1d0 [ 804.022998][T18846] __sys_setsockopt+0x119/0x190 [ 804.023033][T18846] __x64_sys_setsockopt+0xbd/0x160 [ 804.023063][T18846] ? do_syscall_64+0x95/0xf80 [ 804.023094][T18846] ? lockdep_hardirqs_on+0x78/0x100 [ 804.023126][T18846] do_syscall_64+0x106/0xf80 [ 804.023157][T18846] ? clear_bhb_loop+0x40/0x90 [ 804.023184][T18846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.023206][T18846] RIP: 0033:0x7fc2a039c799 [ 804.023224][T18846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 804.023246][T18846] RSP: 002b:00007fc2a120b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 804.023286][T18846] RAX: ffffffffffffffda RBX: 00007fc2a0615fa0 RCX: 00007fc2a039c799 [ 804.023301][T18846] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 804.023316][T18846] RBP: 00007fc2a0432c99 R08: 0000000000000014 R09: 0000000000000000 [ 804.023331][T18846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 804.023345][T18846] R13: 00007fc2a0616038 R14: 00007fc2a0615fa0 R15: 00007ffeef75cad8 [ 804.023374][T18846] [ 804.023397][T18846] tipc: Subscription rejected, no memory [ 804.938343][T18780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 804.966706][ T5831] Bluetooth: hci4: command tx timeout [ 805.232168][T18862] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16 [ 806.012006][T18780] veth0_vlan: entered promiscuous mode [ 806.057603][T18780] veth1_vlan: entered promiscuous mode [ 806.187152][T18780] veth0_macvtap: entered promiscuous mode [ 806.245476][T18780] veth1_macvtap: entered promiscuous mode [ 806.329236][T18780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 806.391414][T18780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 806.445132][ T1317] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.446581][ T1317] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.446626][ T1317] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.446666][ T1317] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.901585][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.926807][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.978802][ T5831] Bluetooth: hci4: command tx timeout [ 807.032760][ T132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.065888][ T132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.462005][T18881] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4534'. [ 807.818941][T18891] block nbd0: NBD_DISCONNECT [ 807.845502][T18891] block nbd0: Send disconnect failed -32 [ 808.828365][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.834681][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.459355][T18921] netlink: 266 bytes leftover after parsing attributes in process `syz.2.4542'. [ 811.037267][T18930] sp0: Synchronizing with TNC [ 812.301001][T18949] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4553'. [ 812.917695][T18960] netlink: 338 bytes leftover after parsing attributes in process `syz.6.4558'. [ 812.970400][T18960] team_slave_0: entered allmulticast mode [ 817.707019][T19024] netlink: 330 bytes leftover after parsing attributes in process `syz.2.4578'. [ 819.736310][T19057] HfR: entered promiscuous mode [ 819.790102][T19057] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4589'. [ 819.823933][T19057] HfR: left promiscuous mode [ 820.181966][T19062] FAULT_INJECTION: forcing a failure. [ 820.181966][T19062] name fail_futex, interval 1, probability 0, space 0, times 0 [ 820.227920][T19062] CPU: 0 UID: 0 PID: 19062 Comm: syz.2.4591 Tainted: G L syzkaller #0 PREEMPT(full) [ 820.227961][T19062] Tainted: [L]=SOFTLOCKUP [ 820.227970][T19062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 820.227985][T19062] Call Trace: [ 820.227993][T19062] [ 820.228003][T19062] dump_stack_lvl+0x100/0x190 [ 820.228043][T19062] should_fail_ex.cold+0x5/0xa [ 820.228071][T19062] get_futex_key+0x1d2/0x1620 [ 820.228105][T19062] ? __pfx_get_futex_key+0x10/0x10 [ 820.228135][T19062] ? do_mmap+0x93f/0x12f0 [ 820.228162][T19062] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 820.228211][T19062] futex_wake+0xea/0x530 [ 820.228261][T19062] ? __pfx_futex_wake+0x10/0x10 [ 820.228307][T19062] do_futex+0x32b/0x350 [ 820.228337][T19062] ? __pfx_do_futex+0x10/0x10 [ 820.228365][T19062] ? __pfx_do_sys_openat2+0x10/0x10 [ 820.228403][T19062] __x64_sys_futex+0x34f/0x4d0 [ 820.228435][T19062] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 820.228459][T19062] ? __pfx___x64_sys_futex+0x10/0x10 [ 820.228491][T19062] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 820.228522][T19062] ? syscall_user_dispatch+0x76/0x130 [ 820.228558][T19062] do_syscall_64+0x106/0xf80 [ 820.228600][T19062] ? clear_bhb_loop+0x40/0x90 [ 820.228630][T19062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.228654][T19062] RIP: 0033:0x7fc2a039c799 [ 820.228673][T19062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 820.228703][T19062] RSP: 002b:00007fc2a120b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 820.228748][T19062] RAX: ffffffffffffffda RBX: 00007fc2a0615fa8 RCX: 00007fc2a039c799 [ 820.228765][T19062] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc2a0615fac [ 820.228782][T19062] RBP: 00007fc2a0615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 820.228797][T19062] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 820.228813][T19062] R13: 00007fc2a0616038 R14: 00007ffeef75c9f0 R15: 00007ffeef75cad8 [ 820.228844][T19062] [ 821.179700][T19073] mkiss: ax0: crc mode is auto. [ 821.421940][T19079] netlink: 330 bytes leftover after parsing attributes in process `syz.2.4597'. [ 821.768721][T19085] HfR: entered promiscuous mode [ 821.808829][T19085] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4600'. [ 821.845834][T19085] HfR: left promiscuous mode [ 822.126886][T19095] netlink: 'syz.6.4604': attribute type 1 has an invalid length. [ 822.154930][T19095] netlink: 'syz.6.4604': attribute type 6 has an invalid length. [ 822.759566][T19102] FAULT_INJECTION: forcing a failure. [ 822.759566][T19102] name failslab, interval 1, probability 0, space 0, times 0 [ 822.910362][T19102] CPU: 0 UID: 0 PID: 19102 Comm: syz.3.4606 Tainted: G L syzkaller #0 PREEMPT(full) [ 822.910409][T19102] Tainted: [L]=SOFTLOCKUP [ 822.910419][T19102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 822.910435][T19102] Call Trace: [ 822.910443][T19102] [ 822.910454][T19102] dump_stack_lvl+0x100/0x190 [ 822.910496][T19102] should_fail_ex.cold+0x5/0xa [ 822.910526][T19102] should_failslab+0xc2/0x120 [ 822.910553][T19102] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 822.910592][T19102] ? __kernfs_new_node+0xd2/0x960 [ 822.910635][T19102] __kernfs_new_node+0xd2/0x960 [ 822.910675][T19102] ? __pfx___kernfs_new_node+0x10/0x10 [ 822.910719][T19102] ? find_held_lock+0x2b/0x80 [ 822.910743][T19102] ? kernfs_root+0xee/0x2a0 [ 822.910777][T19102] ? kernfs_root+0xee/0x2a0 [ 822.910820][T19102] kernfs_new_node+0x11b/0x1a0 [ 822.910865][T19102] __kernfs_create_file+0x53/0x350 [ 822.910899][T19102] sysfs_add_file_mode_ns+0x207/0x3c0 [ 822.910940][T19102] internal_create_group+0x593/0xf40 [ 822.910985][T19102] ? __pfx_internal_create_group+0x10/0x10 [ 822.911028][T19102] ? kernfs_create_link+0x1bd/0x240 [ 822.911062][T19102] internal_create_groups+0x9d/0x150 [ 822.911103][T19102] device_add+0x71a/0x1950 [ 822.911135][T19102] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 822.911178][T19102] ? __pfx_device_add+0x10/0x10 [ 822.911209][T19102] ? lockdep_init_map_type+0x5c/0x250 [ 822.911244][T19102] ? __init_waitqueue_head+0xca/0x150 [ 822.911306][T19102] netdev_register_kobject+0x1a9/0x3d0 [ 822.911337][T19102] register_netdevice+0x12e0/0x2210 [ 822.911392][T19102] ? __pfx_register_netdevice+0x10/0x10 [ 822.911444][T19102] ? __pfx_loopback_net_init+0x10/0x10 [ 822.911473][T19102] register_netdev+0x34/0x50 [ 822.911513][T19102] loopback_net_init+0x7a/0x170 [ 822.911541][T19102] ? __pfx_loopback_net_init+0x10/0x10 [ 822.911568][T19102] ops_init+0x1e2/0x5f0 [ 822.911610][T19102] setup_net+0x118/0x3a0 [ 822.911651][T19102] ? __pfx_setup_net+0x10/0x10 [ 822.911688][T19102] ? lockdep_init_map_type+0x5c/0x250 [ 822.911723][T19102] ? mutex_init_lockep+0x110/0x150 [ 822.911763][T19102] copy_net_ns+0x46f/0x7c0 [ 822.911790][T19102] create_new_namespaces+0x3ea/0xac0 [ 822.911824][T19102] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 822.911855][T19102] ksys_unshare+0x473/0xad0 [ 822.911889][T19102] ? __pfx_ksys_unshare+0x10/0x10 [ 822.911932][T19102] __x64_sys_unshare+0x31/0x40 [ 822.911965][T19102] do_syscall_64+0x106/0xf80 [ 822.912002][T19102] ? clear_bhb_loop+0x40/0x90 [ 822.912035][T19102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.912062][T19102] RIP: 0033:0x7fb514d9c799 [ 822.912083][T19102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 822.912109][T19102] RSP: 002b:00007fb515cd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 822.912134][T19102] RAX: ffffffffffffffda RBX: 00007fb515015fa0 RCX: 00007fb514d9c799 [ 822.912152][T19102] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 822.912168][T19102] RBP: 00007fb514e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 822.912184][T19102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 822.912200][T19102] R13: 00007fb515016038 R14: 00007fb515015fa0 R15: 00007ffc638a8578 [ 822.912233][T19102] [ 824.529917][T12249] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 824.554856][T12249] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 824.565573][T12249] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 824.574608][T12249] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 824.582793][T12249] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 825.421917][T19104] chnl_net:caif_netlink_parms(): no params data found [ 825.851667][T19104] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.906897][T19104] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.928898][T19104] bridge_slave_0: entered allmulticast mode [ 825.967252][T19104] bridge_slave_0: entered promiscuous mode [ 826.009103][T19104] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.062714][T19104] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.096124][T19114] Process accounting paused [ 826.103514][T19104] bridge_slave_1: entered allmulticast mode [ 826.156966][T19104] bridge_slave_1: entered promiscuous mode [ 826.281561][T19104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 826.345278][T19104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 826.475788][T19104] team0: Port device team_slave_0 added [ 826.533508][T19104] team0: Port device team_slave_1 added [ 826.661469][T19104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 826.668642][ T5831] Bluetooth: hci5: command tx timeout [ 826.708162][T19104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 826.820450][T19104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 826.869882][T19104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 826.893585][T19104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 827.010462][T19104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 827.380918][T19104] hsr_slave_0: entered promiscuous mode [ 827.435656][T19104] hsr_slave_1: entered promiscuous mode [ 827.468591][T19104] debugfs: 'hsr0' already exists in 'hsr' [ 827.499253][T19104] Cannot create hsr debugfs directory [ 828.649647][T19167] FAULT_INJECTION: forcing a failure. [ 828.649647][T19167] name failslab, interval 1, probability 0, space 0, times 0 [ 828.717869][T19167] CPU: 0 UID: 0 PID: 19167 Comm: syz.6.4621 Tainted: G L syzkaller #0 PREEMPT(full) [ 828.717906][T19167] Tainted: [L]=SOFTLOCKUP [ 828.717915][T19167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 828.717929][T19167] Call Trace: [ 828.717937][T19167] [ 828.717945][T19167] dump_stack_lvl+0x100/0x190 [ 828.717984][T19167] should_fail_ex.cold+0x5/0xa [ 828.718011][T19167] should_failslab+0xc2/0x120 [ 828.718035][T19167] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 828.718073][T19167] ? copy_process+0x74b1/0x7a40 [ 828.718101][T19167] ? __raw_spin_lock_init+0x3a/0x110 [ 828.718140][T19167] copy_process+0x74b1/0x7a40 [ 828.718180][T19167] ? __pfx_copy_process+0x10/0x10 [ 828.718219][T19167] kernel_clone+0xfc/0x9a0 [ 828.718244][T19167] ? __pfx_futex_wait+0x10/0x10 [ 828.718287][T19167] ? __pfx_kernel_clone+0x10/0x10 [ 828.718329][T19167] __do_sys_clone+0xd9/0x120 [ 828.718356][T19167] ? __pfx___do_sys_clone+0x10/0x10 [ 828.718384][T19167] ? __fget_files+0x21f/0x3d0 [ 828.718425][T19167] do_syscall_64+0x106/0xf80 [ 828.718459][T19167] ? clear_bhb_loop+0x40/0x90 [ 828.718487][T19167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.718511][T19167] RIP: 0033:0x7f705119c799 [ 828.718529][T19167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 828.718552][T19167] RSP: 002b:00007f7051f79fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 828.718574][T19167] RAX: ffffffffffffffda RBX: 00007f7051415fa0 RCX: 00007f705119c799 [ 828.718589][T19167] RDX: 0000000000000000 RSI: 0000000000000300 RDI: 0000000000000011 [ 828.718603][T19167] RBP: 00007f7051232c99 R08: 0000000000000000 R09: 0000000000000000 [ 828.718617][T19167] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 828.718631][T19167] R13: 00007f7051416038 R14: 00007f7051415fa0 R15: 00007ffe3796e678 [ 828.718660][T19167] [ 828.748167][ T5831] Bluetooth: hci5: command tx timeout [ 829.044444][T19104] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 829.168717][T19104] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 829.184974][T19104] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 829.240831][T19104] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 829.661370][T19104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 829.734327][T19104] 8021q: adding VLAN 0 to HW filter on device team0 [ 829.777344][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.777462][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 829.818102][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.818184][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 829.986854][T19104] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 830.035369][T19190] FAULT_INJECTION: forcing a failure. [ 830.035369][T19190] name failslab, interval 1, probability 0, space 0, times 0 [ 830.035410][T19190] CPU: 0 UID: 0 PID: 19190 Comm: syz.2.4623 Tainted: G L syzkaller #0 PREEMPT(full) [ 830.035444][T19190] Tainted: [L]=SOFTLOCKUP [ 830.035453][T19190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 830.035469][T19190] Call Trace: [ 830.035477][T19190] [ 830.035487][T19190] dump_stack_lvl+0x100/0x190 [ 830.035529][T19190] should_fail_ex.cold+0x5/0xa [ 830.035557][T19190] should_failslab+0xc2/0x120 [ 830.035584][T19190] __kmalloc_cache_noprof+0x7a/0x6f0 [ 830.035624][T19190] ? cec_open+0xdb/0x690 [ 830.035658][T19190] ? __lock_acquire+0x4a5/0x2630 [ 830.035693][T19190] cec_open+0xdb/0x690 [ 830.035729][T19190] ? __pfx_cec_open+0x10/0x10 [ 830.035767][T19190] ? kobject_get_unless_zero+0x156/0x200 [ 830.035802][T19190] ? find_held_lock+0x2b/0x80 [ 830.035841][T19190] ? chrdev_open+0x10b/0x6a0 [ 830.035866][T19190] ? chrdev_open+0x10b/0x6a0 [ 830.035894][T19190] ? __pfx_cec_open+0x10/0x10 [ 830.035929][T19190] chrdev_open+0x234/0x6a0 [ 830.035953][T19190] ? __pfx_apparmor_file_open+0x10/0x10 [ 830.035978][T19190] ? __pfx_chrdev_open+0x10/0x10 [ 830.036005][T19190] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 830.036037][T19190] do_dentry_open+0x6d8/0x1660 [ 830.036061][T19190] ? __pfx_chrdev_open+0x10/0x10 [ 830.036093][T19190] vfs_open+0x82/0x3f0 [ 830.036127][T19190] path_openat+0x208c/0x31a0 [ 830.036162][T19190] ? __pfx_path_openat+0x10/0x10 [ 830.036197][T19190] do_file_open+0x20e/0x430 [ 830.036224][T19190] ? __pfx_do_file_open+0x10/0x10 [ 830.036269][T19190] ? alloc_fd+0x476/0x790 [ 830.036296][T19190] ? do_getname+0x191/0x390 [ 830.036329][T19190] do_sys_openat2+0x10d/0x1e0 [ 830.036362][T19190] ? __pfx_do_sys_openat2+0x10/0x10 [ 830.036396][T19190] ? __fget_files+0x21f/0x3d0 [ 830.036425][T19190] __x64_sys_openat+0x12d/0x210 [ 830.036459][T19190] ? __pfx___x64_sys_openat+0x10/0x10 [ 830.036503][T19190] do_syscall_64+0x106/0xf80 [ 830.036538][T19190] ? clear_bhb_loop+0x40/0x90 [ 830.036568][T19190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.036599][T19190] RIP: 0033:0x7fc2a039c799 [ 830.036619][T19190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 830.036643][T19190] RSP: 002b:00007fc2a120b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 830.036667][T19190] RAX: ffffffffffffffda RBX: 00007fc2a0615fa0 RCX: 00007fc2a039c799 [ 830.036683][T19190] RDX: 0000000000101901 RSI: 0000200000002c00 RDI: ffffffffffffff9c [ 830.036699][T19190] RBP: 00007fc2a0432c99 R08: 0000000000000000 R09: 0000000000000000 [ 830.036715][T19190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 830.036730][T19190] R13: 00007fc2a0616038 R14: 00007fc2a0615fa0 R15: 00007ffeef75cad8 [ 830.036761][T19190] [ 830.692674][T19104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 830.838102][ T5831] Bluetooth: hci5: command tx timeout [ 831.636483][T19104] veth0_vlan: entered promiscuous mode [ 831.694256][T19104] veth1_vlan: entered promiscuous mode [ 831.778969][T19104] veth0_macvtap: entered promiscuous mode [ 831.803392][T19104] veth1_macvtap: entered promiscuous mode [ 831.861381][T19104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 831.888651][T19104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 831.925048][ T1317] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.925101][ T1317] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.925139][ T1317] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.925174][ T1317] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.183886][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 832.183908][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 832.336055][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 832.336076][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 832.913664][ T5831] Bluetooth: hci5: command tx timeout [ 834.582422][T19241] FAULT_INJECTION: forcing a failure. [ 834.582422][T19241] name failslab, interval 1, probability 0, space 0, times 0 [ 834.657837][T19241] CPU: 0 UID: 0 PID: 19241 Comm: syz.2.4628 Tainted: G L syzkaller #0 PREEMPT(full) [ 834.657895][T19241] Tainted: [L]=SOFTLOCKUP [ 834.657905][T19241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 834.657921][T19241] Call Trace: [ 834.657929][T19241] [ 834.657939][T19241] dump_stack_lvl+0x100/0x190 [ 834.657981][T19241] should_fail_ex.cold+0x5/0xa [ 834.658009][T19241] should_failslab+0xc2/0x120 [ 834.658035][T19241] __kmalloc_cache_noprof+0x7a/0x6f0 [ 834.658075][T19241] ? resv_map_alloc+0x7e/0x400 [ 834.658120][T19241] resv_map_alloc+0x7e/0x400 [ 834.658160][T19241] hugetlbfs_get_inode+0x2fe/0x750 [ 834.658186][T19241] ? do_raw_spin_lock+0x128/0x260 [ 834.658226][T19241] hugetlb_file_setup+0x15b/0x5b0 [ 834.658257][T19241] memfd_alloc_file+0xc2/0x620 [ 834.658291][T19241] ? _raw_spin_unlock+0x28/0x50 [ 834.658324][T19241] ? __pfx_memfd_alloc_file+0x10/0x10 [ 834.658366][T19241] __do_sys_memfd_create+0x236/0x3d0 [ 834.658403][T19241] do_syscall_64+0x106/0xf80 [ 834.658440][T19241] ? clear_bhb_loop+0x40/0x90 [ 834.658469][T19241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.658495][T19241] RIP: 0033:0x7fc2a039c799 [ 834.658515][T19241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 834.658539][T19241] RSP: 002b:00007fc2a120b028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 834.658563][T19241] RAX: ffffffffffffffda RBX: 00007fc2a0615fa0 RCX: 00007fc2a039c799 [ 834.658580][T19241] RDX: 0000000000000000 RSI: 000000000000000d RDI: 0000000000000000 [ 834.658595][T19241] RBP: 00007fc2a0432c99 R08: 0000000000000000 R09: 0000000000000000 [ 834.658611][T19241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 834.658626][T19241] R13: 00007fc2a0616038 R14: 00007fc2a0615fa0 R15: 00007ffeef75cad8 [ 834.658657][T19241] [ 835.430210][T19254] netlink: 252 bytes leftover after parsing attributes in process `syz.2.4633'. [ 835.489584][T19255] netlink: 252 bytes leftover after parsing attributes in process `syz.2.4633'. [ 836.645703][ T5831] Bluetooth: hci3: unexpected subevent 0x18 length: 123 > 19 [ 836.654988][ T5831] Bluetooth: hci3: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 836.681912][T19281] binder: 19280:19281 ioctl c0306201 200000000000 returned -11 [ 837.231168][T19294] FAULT_INJECTION: forcing a failure. [ 837.231168][T19294] name failslab, interval 1, probability 0, space 0, times 0 [ 837.328617][T19294] CPU: 0 UID: 0 PID: 19294 Comm: syz.7.4646 Tainted: G L syzkaller #0 PREEMPT(full) [ 837.328658][T19294] Tainted: [L]=SOFTLOCKUP [ 837.328668][T19294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 837.328683][T19294] Call Trace: [ 837.328692][T19294] [ 837.328702][T19294] dump_stack_lvl+0x100/0x190 [ 837.328743][T19294] should_fail_ex.cold+0x5/0xa [ 837.328776][T19294] should_failslab+0xc2/0x120 [ 837.328803][T19294] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 837.328841][T19294] ? ptlock_alloc+0x1f/0x70 [ 837.328879][T19294] ptlock_alloc+0x1f/0x70 [ 837.328911][T19294] pte_alloc_one+0x82/0x3d0 [ 837.328939][T19294] do_fault+0x88e/0x1990 [ 837.328972][T19294] __handle_mm_fault+0x180f/0x2b60 [ 837.329010][T19294] ? mt_find+0x45e/0x8e0 [ 837.329050][T19294] ? __pfx___handle_mm_fault+0x10/0x10 [ 837.329082][T19294] ? __pfx_mt_find+0x10/0x10 [ 837.329143][T19294] handle_mm_fault+0x36d/0xa20 [ 837.329182][T19294] __get_user_pages+0xf9c/0x34d0 [ 837.329221][T19294] ? __pfx___get_user_pages+0x10/0x10 [ 837.329257][T19294] populate_vma_page_range+0x267/0x3f0 [ 837.329288][T19294] ? __pfx_populate_vma_page_range+0x10/0x10 [ 837.329319][T19294] ? __pfx_find_vma_intersection+0x10/0x10 [ 837.329347][T19294] ? do_mmap+0x93f/0x12f0 [ 837.329377][T19294] __mm_populate+0x107/0x3a0 [ 837.329407][T19294] ? __pfx___mm_populate+0x10/0x10 [ 837.329439][T19294] ? up_write+0x290/0x4f0 [ 837.329477][T19294] vm_mmap_pgoff+0x37f/0x470 [ 837.329509][T19294] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 837.329534][T19294] ? __fget_files+0x215/0x3d0 [ 837.329563][T19294] ? __fget_files+0x21f/0x3d0 [ 837.329590][T19294] ksys_mmap_pgoff+0x3c8/0x650 [ 837.329617][T19294] ? __x64_sys_futex+0x34f/0x4d0 [ 837.329665][T19294] ? __x64_sys_futex+0x358/0x4d0 [ 837.329717][T19294] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 837.329745][T19294] ? xfd_validate_state+0x129/0x190 [ 837.329793][T19294] __x64_sys_mmap+0x125/0x190 [ 837.329834][T19294] do_syscall_64+0x106/0xf80 [ 837.329871][T19294] ? clear_bhb_loop+0x40/0x90 [ 837.329903][T19294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.329929][T19294] RIP: 0033:0x7f28e8f9c799 [ 837.329950][T19294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 837.329976][T19294] RSP: 002b:00007f28e9de3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 837.330000][T19294] RAX: ffffffffffffffda RBX: 00007f28e9215fa0 RCX: 00007f28e8f9c799 [ 837.330018][T19294] RDX: 0000000000000ffb RSI: 0000000000810006 RDI: 0000000000000000 [ 837.330034][T19294] RBP: 00007f28e9032c99 R08: 0000000000000003 R09: 0000000000000000 [ 837.330049][T19294] R10: 0008000000008011 R11: 0000000000000246 R12: 0000000000000000 [ 837.330065][T19294] R13: 00007f28e9216038 R14: 00007f28e9215fa0 R15: 00007fff95d51438 [ 837.330098][T19294] [ 839.608708][T19314] GUP no longer grows the stack in syz.7.4653 (19314): 14000-18000 (4000) [ 839.660375][T19314] CPU: 0 UID: 0 PID: 19314 Comm: syz.7.4653 Tainted: G L syzkaller #0 PREEMPT(full) [ 839.660411][T19314] Tainted: [L]=SOFTLOCKUP [ 839.660420][T19314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 839.660434][T19314] Call Trace: [ 839.660442][T19314] [ 839.660451][T19314] dump_stack_lvl+0x100/0x190 [ 839.660490][T19314] gup_vma_lookup.cold+0x83/0x96 [ 839.660533][T19314] __get_user_pages+0x241/0x34d0 [ 839.660568][T19314] ? find_held_lock+0x2b/0x80 [ 839.660590][T19314] ? mtree_load+0x311/0xa40 [ 839.660624][T19314] ? __pfx___get_user_pages+0x10/0x10 [ 839.660658][T19314] get_user_pages_remote+0x3d2/0xb10 [ 839.660690][T19314] ? __pfx_get_user_pages_remote+0x10/0x10 [ 839.660738][T19314] ? noop_dirty_folio+0x98/0x160 [ 839.660771][T19314] __access_remote_vm+0x3ba/0xa70 [ 839.660819][T19314] ? __pfx___access_remote_vm+0x10/0x10 [ 839.660867][T19314] mem_rw+0x20a/0x640 [ 839.660898][T19314] vfs_write+0x2aa/0x1070 [ 839.660922][T19314] ? __pfx_mem_write+0x10/0x10 [ 839.660950][T19314] ? __pfx_vfs_write+0x10/0x10 [ 839.660972][T19314] ? __fget_files+0x215/0x3d0 [ 839.661001][T19314] ? __fget_files+0x21f/0x3d0 [ 839.661032][T19314] ksys_write+0x12a/0x250 [ 839.661054][T19314] ? __pfx_ksys_write+0x10/0x10 [ 839.661085][T19314] do_syscall_64+0x106/0xf80 [ 839.661120][T19314] ? clear_bhb_loop+0x40/0x90 [ 839.661151][T19314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.661176][T19314] RIP: 0033:0x7f28e8f9c799 [ 839.661196][T19314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 839.661220][T19314] RSP: 002b:00007f28e9de3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 839.661243][T19314] RAX: ffffffffffffffda RBX: 00007f28e9215fa0 RCX: 00007f28e8f9c799 [ 839.661264][T19314] RDX: 000000000000ffd8 RSI: 0000000000000000 RDI: 0000000000000003 [ 839.661279][T19314] RBP: 00007f28e9032c99 R08: 0000000000000000 R09: 0000000000000000 [ 839.661294][T19314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 839.661328][T19314] R13: 00007f28e9216038 R14: 00007f28e9215fa0 R15: 00007fff95d51438 [ 839.661361][T19314] [ 840.849580][T19335] netlink: 334 bytes leftover after parsing attributes in process `syz.7.4661'. [ 841.067654][T19338] netlink: 306 bytes leftover after parsing attributes in process `syz.6.4662'. [ 842.149837][T19356] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4668'. [ 842.461764][T19356] team0 (unregistering): Port device team_slave_0 removed [ 842.509059][T19356] team0 (unregistering): Port device team_slave_1 removed [ 842.980274][T19369] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4673'. [ 843.074123][T19372] HfR: entered promiscuous mode [ 843.113228][T19372] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4674'. [ 843.146422][T19372] openvswitch: HfR: Dropping previously announced user features [ 844.291516][T19395] netlink: 'syz.7.4681': attribute type 19 has an invalid length. [ 844.320118][T19395] netlink: 226 bytes leftover after parsing attributes in process `syz.7.4681'. [ 846.900245][T19440] sp0: Synchronizing with TNC [ 847.672776][T19449] sp0: Synchronizing with TNC [ 848.106295][T19462] netlink: 330 bytes leftover after parsing attributes in process `syz.3.4703'. [ 850.120240][T19493] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 850.127660][T19493] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 850.709548][T19501] can: request_module (can-proto-0) failed. [ 851.005764][T19501] netlink: 342 bytes leftover after parsing attributes in process `syz.7.4714'. [ 851.433565][T19515] FAULT_INJECTION: forcing a failure. [ 851.433565][T19515] name failslab, interval 1, probability 0, space 0, times 0 [ 851.587118][T19515] CPU: 0 UID: 0 PID: 19515 Comm: syz.6.4717 Tainted: G L syzkaller #0 PREEMPT(full) [ 851.587158][T19515] Tainted: [L]=SOFTLOCKUP [ 851.587167][T19515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 851.587183][T19515] Call Trace: [ 851.587191][T19515] [ 851.587201][T19515] dump_stack_lvl+0x100/0x190 [ 851.587250][T19515] should_fail_ex.cold+0x5/0xa [ 851.587279][T19515] should_failslab+0xc2/0x120 [ 851.587305][T19515] __kmalloc_cache_noprof+0x7a/0x6f0 [ 851.587338][T19515] ? copy_net_ns+0x135/0x7c0 [ 851.587367][T19515] copy_net_ns+0x135/0x7c0 [ 851.587388][T19515] ? copy_cgroup_ns+0x71/0x970 [ 851.587420][T19515] create_new_namespaces+0x3ea/0xac0 [ 851.587452][T19515] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 851.587484][T19515] ksys_unshare+0x473/0xad0 [ 851.587517][T19515] ? __pfx_ksys_unshare+0x10/0x10 [ 851.587558][T19515] __x64_sys_unshare+0x31/0x40 [ 851.587589][T19515] do_syscall_64+0x106/0xf80 [ 851.587646][T19515] ? clear_bhb_loop+0x40/0x90 [ 851.587677][T19515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.587703][T19515] RIP: 0033:0x7f705119c799 [ 851.587724][T19515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 851.587749][T19515] RSP: 002b:00007f704f3d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 851.587774][T19515] RAX: ffffffffffffffda RBX: 00007f7051416180 RCX: 00007f705119c799 [ 851.587791][T19515] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 851.587807][T19515] RBP: 00007f7051232c99 R08: 0000000000000000 R09: 0000000000000000 [ 851.587823][T19515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 851.587839][T19515] R13: 00007f7051416218 R14: 00007f7051416180 R15: 00007ffe3796e678 [ 851.587870][T19515] [ 854.972189][T19551] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 855.446979][T19561] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4736'. [ 856.253376][T19575] Process accounting resumed [ 856.813037][T19592] netlink: 252 bytes leftover after parsing attributes in process `syz.3.4745'. [ 856.858834][T19592] netlink: 252 bytes leftover after parsing attributes in process `syz.3.4745'. [ 857.712281][T19600] netlink: 'syz.3.4749': attribute type 10 has an invalid length. [ 857.732845][T19600] netlink: 230 bytes leftover after parsing attributes in process `syz.3.4749'. [ 857.795548][T19600] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 858.580443][T19616] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4752'. [ 858.678583][T19620] netlink: 'syz.6.4752': attribute type 1 has an invalid length. [ 858.749463][T19620] netlink: 13 bytes leftover after parsing attributes in process `syz.6.4752'. [ 859.297415][T19633] netlink: 46 bytes leftover after parsing attributes in process `syz.6.4759'. [ 863.091846][T19668] netlink: 'syz.6.4770': attribute type 28 has an invalid length. [ 863.147419][T19668] netlink: 'syz.6.4770': attribute type 3 has an invalid length. [ 863.228337][T19668] netlink: 306 bytes leftover after parsing attributes in process `syz.6.4770'. [ 863.979122][T19683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4775'. [ 864.875910][T19701] netlink: 330 bytes leftover after parsing attributes in process `syz.7.4781'. [ 866.261088][T19725] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 868.880692][T19757] netlink: 'syz.6.4799': attribute type 15 has an invalid length. [ 868.932155][T19757] netlink: 'syz.6.4799': attribute type 16 has an invalid length. [ 868.956900][T19757] netlink: 194 bytes leftover after parsing attributes in process `syz.6.4799'. [ 869.280295][T19762] FAULT_INJECTION: forcing a failure. [ 869.280295][T19762] name failslab, interval 1, probability 0, space 0, times 0 [ 869.409836][T19762] CPU: 0 UID: 0 PID: 19762 Comm: syz.2.4800 Tainted: G L syzkaller #0 PREEMPT(full) [ 869.409874][T19762] Tainted: [L]=SOFTLOCKUP [ 869.409883][T19762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 869.409897][T19762] Call Trace: [ 869.409905][T19762] [ 869.409914][T19762] dump_stack_lvl+0x100/0x190 [ 869.409954][T19762] should_fail_ex.cold+0x5/0xa [ 869.409981][T19762] should_failslab+0xc2/0x120 [ 869.410007][T19762] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 869.410046][T19762] ? kvasprintf_const+0x66/0x1a0 [ 869.410080][T19762] kvasprintf+0xbc/0x150 [ 869.410107][T19762] ? __pfx_kvasprintf+0x10/0x10 [ 869.410140][T19762] ? mark_held_locks+0x40/0x70 [ 869.410173][T19762] kvasprintf_const+0x66/0x1a0 [ 869.410202][T19762] kobject_set_name_vargs+0x5a/0x140 [ 869.410228][T19762] kobject_init_and_add+0xe7/0x180 [ 869.410259][T19762] ? __pfx_kobject_init_and_add+0x10/0x10 [ 869.410283][T19762] ? ops_init+0x1e2/0x5f0 [ 869.410319][T19762] ? unshare_nsproxy_namespaces+0xc3/0x1f0 [ 869.410343][T19762] ? ksys_unshare+0x473/0xad0 [ 869.410371][T19762] ? __x64_sys_unshare+0x31/0x40 [ 869.410399][T19762] ? do_syscall_64+0x106/0xf80 [ 869.410432][T19762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.410457][T19762] ? dev_uevent_filter+0x3e/0xd0 [ 869.410492][T19762] ? kobject_uevent_env+0x2e7/0x18b0 [ 869.410523][T19762] net_rx_queue_update_kobjects+0x37e/0x760 [ 869.410566][T19762] ? kset_register+0x1bb/0x290 [ 869.410591][T19762] netdev_register_kobject+0x290/0x3d0 [ 869.410617][T19762] register_netdevice+0x12e0/0x2210 [ 869.410658][T19762] ? __pfx_register_netdevice+0x10/0x10 [ 869.410701][T19762] ? __pfx_loopback_net_init+0x10/0x10 [ 869.410727][T19762] register_netdev+0x34/0x50 [ 869.410762][T19762] loopback_net_init+0x7a/0x170 [ 869.410787][T19762] ? __pfx_loopback_net_init+0x10/0x10 [ 869.410811][T19762] ops_init+0x1e2/0x5f0 [ 869.410849][T19762] setup_net+0x118/0x3a0 [ 869.410889][T19762] ? __pfx_setup_net+0x10/0x10 [ 869.410923][T19762] ? lockdep_init_map_type+0x5c/0x250 [ 869.410954][T19762] ? mutex_init_lockep+0x110/0x150 [ 869.410990][T19762] copy_net_ns+0x46f/0x7c0 [ 869.411014][T19762] create_new_namespaces+0x3ea/0xac0 [ 869.411045][T19762] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 869.411072][T19762] ksys_unshare+0x473/0xad0 [ 869.411102][T19762] ? __pfx_ksys_unshare+0x10/0x10 [ 869.411141][T19762] __x64_sys_unshare+0x31/0x40 [ 869.411170][T19762] do_syscall_64+0x106/0xf80 [ 869.411203][T19762] ? clear_bhb_loop+0x40/0x90 [ 869.411231][T19762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.411260][T19762] RIP: 0033:0x7fc2a039c799 [ 869.411282][T19762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 869.411305][T19762] RSP: 002b:00007fc2a120b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 869.411345][T19762] RAX: ffffffffffffffda RBX: 00007fc2a0615fa0 RCX: 00007fc2a039c799 [ 869.411362][T19762] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 869.411377][T19762] RBP: 00007fc2a0432c99 R08: 0000000000000000 R09: 0000000000000000 [ 869.411393][T19762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 869.411408][T19762] R13: 00007fc2a0616038 R14: 00007fc2a0615fa0 R15: 00007ffeef75cad8 [ 869.411459][T19762] [ 870.091071][T19762] kobject: can not set name properly! [ 870.380933][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.387255][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.644194][T19814] netlink: 504 bytes leftover after parsing attributes in process `syz.3.4814'. [ 875.547895][T19835] bond0: option all_slaves_active: invalid value () [ 875.777850][T19845] binder: 19844:19845 ioctl c0306201 0 returned -14 [ 876.488110][T19853] netlink: 330 bytes leftover after parsing attributes in process `syz.2.4826'. [ 876.959858][T19864] ubi3: attaching mtd1 [ 877.804994][T19877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4834'. [ 877.854937][T19877] netlink: 25 bytes leftover after parsing attributes in process `syz.2.4834'. [ 878.071567][T19879] vcan0: tx drop: invalid sa for name 0x00000000000000fd [ 878.540094][T19895] sg_write: data in/out 131052/209 bytes for SCSI command 0x67-- guessing data in; [ 878.540094][T19895] program syz.6.4839 not setting count and/or reply_len properly [ 878.767213][T19898] netlink: 25 bytes leftover after parsing attributes in process `syz.3.4841'. [ 879.002780][T19901] vivid-007: ================= START STATUS ================= [ 879.028873][T19901] vivid-007: Enable Output Cropping: true grabbed [ 879.064298][T19901] vivid-007: Enable Output Composing: true grabbed [ 879.132415][T19901] vivid-007: Enable Output Scaler: true grabbed [ 879.166514][T19901] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 879.225731][T19901] vivid-007: Transmit Mode: HDMI grabbed [ 879.256087][T19901] vivid-007: Hotplug Present: 0x00000000 [ 879.281077][T19901] vivid-007: RxSense Present: 0x00000000 [ 879.311405][T19901] vivid-007: EDID Present: 0x00000000 [ 879.355664][T19901] vivid-007: ================== END STATUS ================== [ 879.656736][T19912] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4852'. [ 879.924597][T19914] size and base must be multiples of 4 kiB [ 879.976750][T19914] CPU: 0 UID: 0 PID: 19914 Comm: syz.2.4845 Tainted: G L syzkaller #0 PREEMPT(full) [ 879.976787][T19914] Tainted: [L]=SOFTLOCKUP [ 879.976796][T19914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 879.976810][T19914] Call Trace: [ 879.976817][T19914] [ 879.976826][T19914] dump_stack_lvl+0x100/0x190 [ 879.976865][T19914] mtrr_add.cold+0x74/0x87 [ 879.976891][T19914] mtrr_ioctl+0x25a/0xcf0 [ 879.976924][T19914] ? __pfx_mtrr_ioctl+0x10/0x10 [ 879.976960][T19914] ? find_held_lock+0x2b/0x80 [ 879.976989][T19914] ? __fget_files+0x21f/0x3d0 [ 879.977011][T19914] ? __pfx_mtrr_ioctl+0x10/0x10 [ 879.977043][T19914] proc_reg_unlocked_ioctl+0x229/0x320 [ 879.977093][T19914] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 879.977132][T19914] __x64_sys_ioctl+0x18e/0x210 [ 879.977168][T19914] do_syscall_64+0x106/0xf80 [ 879.977202][T19914] ? clear_bhb_loop+0x40/0x90 [ 879.977230][T19914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.977255][T19914] RIP: 0033:0x7fc2a039c799 [ 879.977273][T19914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 879.977296][T19914] RSP: 002b:00007fc2a11ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 879.977318][T19914] RAX: ffffffffffffffda RBX: 00007fc2a0616090 RCX: 00007fc2a039c799 [ 879.977333][T19914] RDX: 000000000000000b RSI: 00000000400c4d01 RDI: 000000000000000b [ 879.977347][T19914] RBP: 00007fc2a0432c99 R08: 0000000000000000 R09: 0000000000000000 [ 879.977361][T19914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 879.977375][T19914] R13: 00007fc2a0616128 R14: 00007fc2a0616090 R15: 00007ffeef75cad8 [ 879.977404][T19914] [ 880.831746][T19934] netlink: 13 bytes leftover after parsing attributes in process `syz.7.4854'. [ 881.521486][T19941] zswap: compressor not available [ 884.994054][T19996] zswap: compressor not available [ 887.191033][T20029] zswap: compressor not available [ 887.534327][T20018] Process accounting paused [ 887.678638][T20042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4883'. [ 887.704890][T20039] FAULT_INJECTION: forcing a failure. [ 887.704890][T20039] name failslab, interval 1, probability 0, space 0, times 0 [ 887.722937][T20042] netlink: 'syz.2.4883': attribute type 1 has an invalid length. [ 887.738078][T20042] netlink: 13 bytes leftover after parsing attributes in process `syz.2.4883'. [ 887.752815][T20039] CPU: 0 UID: 0 PID: 20039 Comm: syz.3.4882 Tainted: G L syzkaller #0 PREEMPT(full) [ 887.752853][T20039] Tainted: [L]=SOFTLOCKUP [ 887.752863][T20039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 887.752878][T20039] Call Trace: [ 887.752886][T20039] [ 887.752896][T20039] dump_stack_lvl+0x100/0x190 [ 887.752937][T20039] should_fail_ex.cold+0x5/0xa [ 887.752966][T20039] should_failslab+0xc2/0x120 [ 887.752992][T20039] __kmalloc_cache_noprof+0x7a/0x6f0 [ 887.753025][T20039] ? alloc_fs_context+0x57/0xf40 [ 887.753069][T20039] alloc_fs_context+0x57/0xf40 [ 887.753100][T20039] mq_init_ns+0x16e/0x820 [ 887.753126][T20039] copy_ipcs+0x3dd/0x7e0 [ 887.753152][T20039] create_new_namespaces+0x20a/0xac0 [ 887.753183][T20039] ? security_capable+0x80/0x260 [ 887.753223][T20039] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 887.753251][T20039] ksys_unshare+0x473/0xad0 [ 887.753282][T20039] ? __pfx_ksys_unshare+0x10/0x10 [ 887.753321][T20039] __x64_sys_unshare+0x31/0x40 [ 887.753350][T20039] do_syscall_64+0x106/0xf80 [ 887.753384][T20039] ? clear_bhb_loop+0x40/0x90 [ 887.753412][T20039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.753436][T20039] RIP: 0033:0x7fb514d9c799 [ 887.753455][T20039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 887.753479][T20039] RSP: 002b:00007fb515cd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 887.753501][T20039] RAX: ffffffffffffffda RBX: 00007fb515015fa0 RCX: 00007fb514d9c799 [ 887.753517][T20039] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 887.753531][T20039] RBP: 00007fb514e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 887.753546][T20039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 887.753561][T20039] R13: 00007fb515016038 R14: 00007fb515015fa0 R15: 00007ffc638a8578 [ 887.753590][T20039] [ 888.336533][T20051] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4892'. [ 888.430438][T20052] FAULT_INJECTION: forcing a failure. [ 888.430438][T20052] name failslab, interval 1, probability 0, space 0, times 0 [ 888.503291][T20052] CPU: 0 UID: 0 PID: 20052 Comm: syz.3.4884 Tainted: G L syzkaller #0 PREEMPT(full) [ 888.503332][T20052] Tainted: [L]=SOFTLOCKUP [ 888.503341][T20052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 888.503358][T20052] Call Trace: [ 888.503366][T20052] [ 888.503377][T20052] dump_stack_lvl+0x100/0x190 [ 888.503419][T20052] should_fail_ex.cold+0x5/0xa [ 888.503449][T20052] should_failslab+0xc2/0x120 [ 888.503477][T20052] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 888.503517][T20052] ? __d_alloc+0x34/0xa80 [ 888.503552][T20052] __d_alloc+0x34/0xa80 [ 888.503584][T20052] d_alloc+0x4a/0x1e0 [ 888.503613][T20052] lookup_one_qstr_excl+0x175/0x250 [ 888.503650][T20052] start_dirop+0x59/0xb0 [ 888.503692][T20052] simple_start_creating+0xf9/0x110 [ 888.503734][T20052] ? __pfx_simple_start_creating+0x10/0x10 [ 888.503776][T20052] ? mntput+0x70/0xa0 [ 888.503814][T20052] ? simple_pin_fs+0xa3/0x190 [ 888.503864][T20052] debugfs_start_creating.part.0+0x82/0x170 [ 888.503892][T20052] __debugfs_create_file+0xb3/0x4f0 [ 888.503922][T20052] debugfs_create_file_full+0x41/0x60 [ 888.503951][T20052] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 888.504001][T20052] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 888.504058][T20052] ? lockdep_init_map_type+0x5c/0x250 [ 888.504097][T20052] preinit_net.part.0+0x24e/0x8f0 [ 888.504152][T20052] copy_net_ns+0x339/0x7c0 [ 888.504178][T20052] create_new_namespaces+0x3ea/0xac0 [ 888.504211][T20052] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 888.504241][T20052] ksys_unshare+0x473/0xad0 [ 888.504274][T20052] ? __pfx_ksys_unshare+0x10/0x10 [ 888.504316][T20052] __x64_sys_unshare+0x31/0x40 [ 888.504346][T20052] do_syscall_64+0x106/0xf80 [ 888.504383][T20052] ? clear_bhb_loop+0x40/0x90 [ 888.504413][T20052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.504439][T20052] RIP: 0033:0x7fb514d9c799 [ 888.504459][T20052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 888.504483][T20052] RSP: 002b:00007fb515cb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 888.504506][T20052] RAX: ffffffffffffffda RBX: 00007fb515016090 RCX: 00007fb514d9c799 [ 888.504523][T20052] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 888.504538][T20052] RBP: 00007fb514e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 888.504554][T20052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 888.504572][T20052] R13: 00007fb515016128 R14: 00007fb515016090 R15: 00007ffc638a8578 [ 888.504603][T20052] [ 891.010169][T20096] FAULT_INJECTION: forcing a failure. [ 891.010169][T20096] name failslab, interval 1, probability 0, space 0, times 0 [ 891.023436][T20096] CPU: 0 UID: 0 PID: 20096 Comm: syz.7.4898 Tainted: G L syzkaller #0 PREEMPT(full) [ 891.023473][T20096] Tainted: [L]=SOFTLOCKUP [ 891.023482][T20096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 891.023498][T20096] Call Trace: [ 891.023506][T20096] [ 891.023516][T20096] dump_stack_lvl+0x100/0x190 [ 891.023557][T20096] should_fail_ex.cold+0x5/0xa [ 891.023586][T20096] should_failslab+0xc2/0x120 [ 891.023612][T20096] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 891.023650][T20096] ? sctp_get_port_local+0x828/0x1630 [ 891.023704][T20096] sctp_get_port_local+0x828/0x1630 [ 891.023765][T20096] ? find_held_lock+0x2b/0x80 [ 891.023791][T20096] ? __pfx_sctp_get_port_local+0x10/0x10 [ 891.023840][T20096] ? sctp_bind_addr_match+0x19d/0x300 [ 891.023879][T20096] sctp_do_bind+0x2b9/0x760 [ 891.023911][T20096] sctp_bind+0xac/0x130 [ 891.023936][T20096] ? __pfx_sctp_bind+0x10/0x10 [ 891.023961][T20096] inet6_bind+0x9a/0x120 [ 891.024001][T20096] __sys_bind+0x1a9/0x260 [ 891.024032][T20096] ? __pfx___sys_bind+0x10/0x10 [ 891.024081][T20096] __x64_sys_bind+0x72/0xb0 [ 891.024110][T20096] ? lockdep_hardirqs_on+0x78/0x100 [ 891.024149][T20096] do_syscall_64+0x106/0xf80 [ 891.024186][T20096] ? clear_bhb_loop+0x40/0x90 [ 891.024217][T20096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.024244][T20096] RIP: 0033:0x7f28e8f9c799 [ 891.024265][T20096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 891.024291][T20096] RSP: 002b:00007f28e9de3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 891.024315][T20096] RAX: ffffffffffffffda RBX: 00007f28e9215fa0 RCX: 00007f28e8f9c799 [ 891.024333][T20096] RDX: 000000000000006a RSI: 0000200000000040 RDI: 0000000000000003 [ 891.024350][T20096] RBP: 00007f28e9032c99 R08: 0000000000000000 R09: 0000000000000000 [ 891.024366][T20096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 891.024381][T20096] R13: 00007f28e9216038 R14: 00007f28e9215fa0 R15: 00007fff95d51438 [ 891.024414][T20096] [ 891.722366][T20109] sp0: Synchronizing with TNC [ 892.904843][T20131] sysfs_service_op_store: Client not running :-5: [ 893.040790][T20134] FAULT_INJECTION: forcing a failure. [ 893.040790][T20134] name failslab, interval 1, probability 0, space 0, times 0 [ 893.184642][T20134] CPU: 0 UID: 0 PID: 20134 Comm: syz.6.4910 Tainted: G L syzkaller #0 PREEMPT(full) [ 893.184683][T20134] Tainted: [L]=SOFTLOCKUP [ 893.184693][T20134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 893.184708][T20134] Call Trace: [ 893.184717][T20134] [ 893.184727][T20134] dump_stack_lvl+0x100/0x190 [ 893.184769][T20134] should_fail_ex.cold+0x5/0xa [ 893.184798][T20134] should_failslab+0xc2/0x120 [ 893.184826][T20134] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 893.184864][T20134] ? posix_lock_inode+0x427/0x2440 [ 893.184899][T20134] ? locks_get_lock_context+0x34f/0x640 [ 893.184942][T20134] posix_lock_inode+0x427/0x2440 [ 893.184992][T20134] ? __pfx_posix_lock_inode+0x10/0x10 [ 893.185025][T20134] vfs_lock_file+0xfb/0x150 [ 893.185051][T20134] fcntl_setlk+0x782/0xe40 [ 893.185094][T20134] ? __pfx_fcntl_setlk+0x10/0x10 [ 893.185134][T20134] ? rep_movs_alternative+0x30/0x90 [ 893.185165][T20134] do_fcntl+0xf39/0x1670 [ 893.185196][T20134] ? __pfx_do_fcntl+0x10/0x10 [ 893.185224][T20134] ? __fget_files+0x215/0x3d0 [ 893.185254][T20134] ? tomoyo_file_fcntl+0x6c/0xc0 [ 893.185294][T20134] __x64_sys_fcntl+0x163/0x200 [ 893.185327][T20134] do_syscall_64+0x106/0xf80 [ 893.185360][T20134] ? clear_bhb_loop+0x40/0x90 [ 893.185388][T20134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.185412][T20134] RIP: 0033:0x7f705119c799 [ 893.185430][T20134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 893.185453][T20134] RSP: 002b:00007f704f3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 893.185475][T20134] RAX: ffffffffffffffda RBX: 00007f7051416090 RCX: 00007f705119c799 [ 893.185491][T20134] RDX: 0000000000001298 RSI: 0000000000000026 RDI: 0000000000000006 [ 893.185506][T20134] RBP: 00007f7051232c99 R08: 0000000000000000 R09: 0000000000000000 [ 893.185520][T20134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 893.185534][T20134] R13: 00007f7051416128 R14: 00007f7051416090 R15: 00007ffe3796e678 [ 893.185562][T20134] [ 894.074383][T20143] netlink: 186 bytes leftover after parsing attributes in process `syz.7.4914'. [ 894.130242][T20143] netlink: 186 bytes leftover after parsing attributes in process `syz.7.4914'. [ 895.005474][T20157] netlink: 50 bytes leftover after parsing attributes in process `syz.3.4920'. [ 895.120566][T20162] FAULT_INJECTION: forcing a failure. [ 895.120566][T20162] name failslab, interval 1, probability 0, space 0, times 0 [ 895.140478][T20162] CPU: 0 UID: 0 PID: 20162 Comm: syz.3.4922 Tainted: G L syzkaller #0 PREEMPT(full) [ 895.140518][T20162] Tainted: [L]=SOFTLOCKUP [ 895.140527][T20162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 895.140543][T20162] Call Trace: [ 895.140551][T20162] [ 895.140561][T20162] dump_stack_lvl+0x100/0x190 [ 895.140602][T20162] should_fail_ex.cold+0x5/0xa [ 895.140630][T20162] ? lsm_blob_alloc+0x68/0x90 [ 895.140671][T20162] should_failslab+0xc2/0x120 [ 895.140698][T20162] __kmalloc_noprof+0xe0/0x850 [ 895.140736][T20162] ? trace_kmem_cache_alloc+0xf3/0x120 [ 895.140767][T20162] lsm_blob_alloc+0x68/0x90 [ 895.140803][T20162] security_prepare_creds+0x2d/0x290 [ 895.140838][T20162] prepare_creds+0x5d6/0x950 [ 895.140878][T20162] lookup_user_key+0xfb2/0x1300 [ 895.140908][T20162] ? __pfx_lookup_user_key+0x10/0x10 [ 895.140939][T20162] ? do_raw_spin_lock+0x128/0x260 [ 895.140978][T20162] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 895.141010][T20162] ? _raw_spin_unlock_irq+0x2e/0x50 [ 895.141042][T20162] ? do_sigaltstack.constprop.0+0x4c0/0x670 [ 895.141083][T20162] keyctl_restrict_keyring+0x99/0x250 [ 895.141108][T20162] ? __pfx_keyctl_restrict_keyring+0x10/0x10 [ 895.141144][T20162] __do_sys_keyctl+0x2e8/0x5a0 [ 895.141170][T20162] do_syscall_64+0x106/0xf80 [ 895.141205][T20162] ? clear_bhb_loop+0x40/0x90 [ 895.141239][T20162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.141264][T20162] RIP: 0033:0x7fb514d9c799 [ 895.141285][T20162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 895.141313][T20162] RSP: 002b:00007fb515cd3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 895.141355][T20162] RAX: ffffffffffffffda RBX: 00007fb515015fa0 RCX: 00007fb514d9c799 [ 895.141372][T20162] RDX: 0000000000000002 RSI: fffffffffffffffd RDI: 000000000000001d [ 895.141389][T20162] RBP: 00007fb514e32c99 R08: fffffffffffffffd R09: 0000000000000000 [ 895.141405][T20162] R10: 0000000000000628 R11: 0000000000000246 R12: 0000000000000000 [ 895.141421][T20162] R13: 00007fb515016038 R14: 00007fb515015fa0 R15: 00007ffc638a8578 [ 895.141453][T20162] [ 899.492325][T20225] binder: 20224:20225 ioctl c0306201 0 returned -14 [ 899.605439][T20223] netlink: 18 bytes leftover after parsing attributes in process `syz.7.4940'. [ 901.023113][T20231] zswap: compressor  not available [ 901.053345][T20241] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 902.150346][T20253] netlink: 186 bytes leftover after parsing attributes in process `syz.7.4954'. [ 902.498868][T20256] sp0: Synchronizing with TNC [ 902.546953][T20255] [U] è` [ 902.866947][T20261] netlink: 226 bytes leftover after parsing attributes in process `syz.7.4948'. [ 902.909842][T20261] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4948'. [ 902.979861][T20261] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 903.085651][T20266] FAULT_INJECTION: forcing a failure. [ 903.085651][T20266] name failslab, interval 1, probability 0, space 0, times 0 [ 903.145402][T20266] CPU: 0 UID: 0 PID: 20266 Comm: syz.6.4949 Tainted: G L syzkaller #0 PREEMPT(full) [ 903.145440][T20266] Tainted: [L]=SOFTLOCKUP [ 903.145449][T20266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 903.145472][T20266] Call Trace: [ 903.145479][T20266] [ 903.145489][T20266] dump_stack_lvl+0x100/0x190 [ 903.145528][T20266] should_fail_ex.cold+0x5/0xa [ 903.145555][T20266] should_failslab+0xc2/0x120 [ 903.145580][T20266] __kmalloc_cache_noprof+0x7a/0x6f0 [ 903.145611][T20266] ? sync_file_alloc+0x3c/0x160 [ 903.145634][T20266] ? find_held_lock+0x2b/0x80 [ 903.145660][T20266] sync_file_alloc+0x3c/0x160 [ 903.145683][T20266] sync_file_create+0x17/0xf0 [ 903.145707][T20266] sw_sync_ioctl+0x849/0xf80 [ 903.145737][T20266] ? find_held_lock+0x2b/0x80 [ 903.145758][T20266] ? __pfx_sw_sync_ioctl+0x10/0x10 [ 903.145795][T20266] ? __pfx_sw_sync_ioctl+0x10/0x10 [ 903.145822][T20266] __x64_sys_ioctl+0x18e/0x210 [ 903.145858][T20266] do_syscall_64+0x106/0xf80 [ 903.145892][T20266] ? clear_bhb_loop+0x40/0x90 [ 903.145920][T20266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.145944][T20266] RIP: 0033:0x7f705119c799 [ 903.145962][T20266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 903.145984][T20266] RSP: 002b:00007f7051f7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 903.146007][T20266] RAX: ffffffffffffffda RBX: 00007f7051415fa0 RCX: 00007f705119c799 [ 903.146022][T20266] RDX: 0000000000000000 RSI: 00000000c0285700 RDI: 0000000000000005 [ 903.146037][T20266] RBP: 00007f7051232c99 R08: 0000000000000000 R09: 0000000000000000 [ 903.146051][T20266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 903.146065][T20266] R13: 00007f7051416038 R14: 00007f7051415fa0 R15: 00007ffe3796e678 [ 903.146094][T20266] [ 904.103675][T20274] netlink: 54 bytes leftover after parsing attributes in process `syz.6.4952'. [ 904.366768][T20276] zswap: compressor not available [ 904.406131][T20280] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 904.889241][T20288] FAULT_INJECTION: forcing a failure. [ 904.889241][T20288] name failslab, interval 1, probability 0, space 0, times 0 [ 904.969654][T20288] CPU: 0 UID: 0 PID: 20288 Comm: syz.6.4956 Tainted: G L syzkaller #0 PREEMPT(full) [ 904.969692][T20288] Tainted: [L]=SOFTLOCKUP [ 904.969702][T20288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 904.969716][T20288] Call Trace: [ 904.969723][T20288] [ 904.969732][T20288] dump_stack_lvl+0x100/0x190 [ 904.969770][T20288] should_fail_ex.cold+0x5/0xa [ 904.969797][T20288] should_failslab+0xc2/0x120 [ 904.969821][T20288] __kmalloc_cache_noprof+0x7a/0x6f0 [ 904.969852][T20288] ? ima_d_path+0xc9/0x260 [ 904.969875][T20288] ? xattr_resolve_name+0x27d/0x3f0 [ 904.969935][T20288] ima_d_path+0xc9/0x260 [ 904.969962][T20288] ? __pfx_ima_d_path+0x10/0x10 [ 904.969992][T20288] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 904.970036][T20288] process_measurement+0x1b25/0x2350 [ 904.970083][T20288] ? stack_trace_save+0x8e/0xc0 [ 904.970107][T20288] ? __pfx_process_measurement+0x10/0x10 [ 904.970148][T20288] ? __lock_acquire+0x4a5/0x2630 [ 904.970187][T20288] ? __kasan_slab_alloc+0x89/0x90 [ 904.970210][T20288] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 904.970252][T20288] ? init_file+0x95/0x480 [ 904.970283][T20288] ? alloc_empty_file+0x73/0x1c0 [ 904.970313][T20288] ? alloc_file_pseudo+0x13a/0x230 [ 904.970343][T20288] ? ksys_mmap_pgoff+0x232/0x650 [ 904.970368][T20288] ? __x64_sys_mmap+0x125/0x190 [ 904.970403][T20288] ? do_syscall_64+0x106/0xf80 [ 904.970466][T20288] ? __pfx_aa_file_perm+0x10/0x10 [ 904.970519][T20288] ima_file_mmap+0x1c4/0x1f0 [ 904.970558][T20288] ? __pfx_ima_file_mmap+0x10/0x10 [ 904.970601][T20288] security_mmap_file+0x278/0x9b0 [ 904.970632][T20288] vm_mmap_pgoff+0xec/0x470 [ 904.970661][T20288] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 904.970686][T20288] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 904.970717][T20288] ? hugetlbfs_get_inode+0x36e/0x750 [ 904.970750][T20288] ksys_mmap_pgoff+0x273/0x650 [ 904.970775][T20288] ? __x64_sys_futex+0x358/0x4d0 [ 904.970807][T20288] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 904.970832][T20288] ? xfd_validate_state+0x129/0x190 [ 904.970870][T20288] __x64_sys_mmap+0x125/0x190 [ 904.970907][T20288] do_syscall_64+0x106/0xf80 [ 904.970941][T20288] ? clear_bhb_loop+0x40/0x90 [ 904.970969][T20288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.970993][T20288] RIP: 0033:0x7f705119c799 [ 904.971012][T20288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 904.971035][T20288] RSP: 002b:00007f704f3d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 904.971059][T20288] RAX: ffffffffffffffda RBX: 00007f7051416180 RCX: 00007f705119c799 [ 904.971074][T20288] RDX: 0000000000009c0f RSI: 000000000000000c RDI: 0000000000000000 [ 904.971089][T20288] RBP: 00007f7051232c99 R08: ffffffffffffffff R09: 0000300000020000 [ 904.971105][T20288] R10: 0000000000044eb2 R11: 0000000000000246 R12: 0000000000000000 [ 904.971119][T20288] R13: 00007f7051416218 R14: 00007f7051416180 R15: 00007ffe3796e678 [ 904.971148][T20288] [ 905.709284][T20294] netlink: 25 bytes leftover after parsing attributes in process `syz.3.4958'. [ 908.019596][T20318] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4964'. [ 908.539537][T20324] netlink: 'syz.7.4967': attribute type 10 has an invalid length. [ 908.588539][T20324] netlink: 'syz.7.4967': attribute type 13 has an invalid length. [ 908.778030][T20331] netlink: 93 bytes leftover after parsing attributes in process `syz.2.4966'. [ 908.887212][T20327] netlink: 93 bytes leftover after parsing attributes in process `syz.2.4966'. [ 908.987575][T20334] sp0: Synchronizing with TNC getty: ttyS0: read error: Resource temporarily unavailable [ 911.613158][T20375] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78800 [ 911.663671][T20375] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 911.709428][T20375] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 911.739513][T20375] page_type: f5(slab) [ 911.747821][T20375] raw: 00fff00000000040 ffff88813fe3d140 dead000000000100 dead000000000122 [ 911.796326][T20375] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 911.841297][T20375] head: 00fff00000000040 ffff88813fe3d140 dead000000000100 dead000000000122 [ 911.894609][T20375] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 911.944244][T20375] head: 00fff00000000003 ffffea0001e20001 00000000ffffffff 00000000ffffffff [ 912.000266][T20375] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 912.035076][T20375] page dumped because: unmovable page [ 912.106768][T20375] page_owner tracks the page as allocated [ 912.127046][T20375] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1317, tgid 1317 (kworker/u8:9), ts 424180343762, free_ts 424159971764 [ 912.206830][T20375] post_alloc_hook+0x153/0x170 [ 912.221699][T20375] get_page_from_freelist+0x111d/0x3140 [ 912.240892][T20375] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 912.262107][T20375] new_slab+0xa6/0x6b0 [ 912.275080][T20375] refill_objects+0x26b/0x400 [ 912.339755][T20375] __pcs_replace_empty_main+0x1ab/0x660 [ 912.360007][T20375] __kmalloc_node_track_caller_noprof+0x694/0x850 [ 912.379830][T20375] kmalloc_reserve+0xe8/0x350 [ 912.386532][ T5831] Bluetooth: hci4: unexpected subevent 0x01 length: 3 < 18 [ 912.410893][T20375] __alloc_skb+0x185/0x710 [ 912.425512][T20375] nsim_dev_trap_report_work+0x2af/0xd10 [ 912.444791][T20375] process_one_work+0xa23/0x19a0 [ 912.462207][T20375] worker_thread+0x5ef/0xe50 [ 912.477574][T20375] kthread+0x370/0x450 [ 912.496896][T20375] ret_from_fork+0x754/0xd80 [ 912.516078][T20375] ret_from_fork_asm+0x1a/0x30 [ 912.531929][T20375] page last free pid 15 tgid 15 stack trace: [ 912.553159][T20375] __free_frozen_pages+0x7e1/0x10d0 [ 912.574377][T20375] rcu_core+0x5a2/0x10d0 [ 912.590024][T20375] handle_softirqs+0x1eb/0x9e0 [ 912.605286][T20375] run_ksoftirqd+0x38/0x60 [ 912.624885][T20375] smpboot_thread_fn+0x3d3/0xaa0 [ 912.642152][T20375] kthread+0x370/0x450 [ 912.654834][T20375] ret_from_fork+0x754/0xd80 [ 912.672873][T20375] ret_from_fork_asm+0x1a/0x30 [ 913.495051][T20401] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input18 [ 914.223190][T20409] netlink: 186 bytes leftover after parsing attributes in process `syz.6.4991'. [ 914.757263][T20418] netlink: 'syz.3.4995': attribute type 10 has an invalid length. [ 914.808697][T20418] netlink: 230 bytes leftover after parsing attributes in process `syz.3.4995'. [ 915.338835][T20429] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4997'. [ 915.896613][T20429] hsr_slave_0 (unregistering): left promiscuous mode [ 916.039708][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ca3e400: rx timeout, send abort [ 916.538919][T20457] random: crng reseeded on system resumption [ 916.548598][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ca3e400: abort rx timeout. Force session deactivation [ 916.684715][T20461] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5007'. [ 916.766094][T20461] netlink: 25 bytes leftover after parsing attributes in process `syz.6.5007'. [ 918.640056][T20492] zswap: compressor not available [ 918.826165][T20474] Process accounting resumed [ 919.549240][T20513] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5022'. [ 919.610508][T20513] bridge_slave_1: left allmulticast mode [ 919.616267][T20513] bridge_slave_1: left promiscuous mode [ 919.682655][T20513] bridge0: port 2(bridge_slave_1) entered disabled state [ 919.758701][T20513] bridge_slave_0: left allmulticast mode [ 919.778310][T20513] bridge_slave_0: left promiscuous mode [ 919.799391][T20513] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.887412][T20520] Invalid ELF header magic: != ELF [ 920.442903][T20531] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5027'. [ 920.561584][T20531] bridge_slave_1 (unregistering): left allmulticast mode [ 920.585551][T20531] bridge_slave_1 (unregistering): left promiscuous mode [ 920.617342][T20531] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.482260][T20548] FAULT_INJECTION: forcing a failure. [ 921.482260][T20548] name failslab, interval 1, probability 0, space 0, times 0 [ 921.559852][T20548] CPU: 0 UID: 0 PID: 20548 Comm: syz.6.5034 Tainted: G L syzkaller #0 PREEMPT(full) [ 921.559893][T20548] Tainted: [L]=SOFTLOCKUP [ 921.559902][T20548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 921.559918][T20548] Call Trace: [ 921.559926][T20548] [ 921.559936][T20548] dump_stack_lvl+0x100/0x190 [ 921.559977][T20548] should_fail_ex.cold+0x5/0xa [ 921.560006][T20548] should_failslab+0xc2/0x120 [ 921.560032][T20548] __kmalloc_cache_noprof+0x7a/0x6f0 [ 921.560065][T20548] ? trace_pid_list_alloc+0x232/0x480 [ 921.560109][T20548] trace_pid_list_alloc+0x232/0x480 [ 921.560152][T20548] trace_pid_write+0x110/0x460 [ 921.560211][T20548] ? __pfx_trace_pid_write+0x10/0x10 [ 921.560268][T20548] event_pid_write.isra.0+0x1e4/0x800 [ 921.560326][T20548] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 921.560378][T20548] vfs_write+0x2aa/0x1070 [ 921.560403][T20548] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 921.560455][T20548] ? __pfx_vfs_write+0x10/0x10 [ 921.560478][T20548] ? __fget_files+0x215/0x3d0 [ 921.560509][T20548] ? __fget_files+0x21f/0x3d0 [ 921.560541][T20548] ksys_write+0x12a/0x250 [ 921.560565][T20548] ? __pfx_ksys_write+0x10/0x10 [ 921.560597][T20548] do_syscall_64+0x106/0xf80 [ 921.560635][T20548] ? clear_bhb_loop+0x40/0x90 [ 921.560667][T20548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.560693][T20548] RIP: 0033:0x7f705119c799 [ 921.560713][T20548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 921.560739][T20548] RSP: 002b:00007f7051f7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 921.560763][T20548] RAX: ffffffffffffffda RBX: 00007f7051415fa0 RCX: 00007f705119c799 [ 921.560780][T20548] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 921.560796][T20548] RBP: 00007f7051232c99 R08: 0000000000000000 R09: 0000000000000000 [ 921.560812][T20548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 921.560827][T20548] R13: 00007f7051416038 R14: 00007f7051415fa0 R15: 00007ffe3796e678 [ 921.560860][T20548] [ 922.966515][T20567] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5039'. [ 923.060311][T20568] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 923.280295][T20565] zswap: compressor not available [ 923.498069][T20573] netlink: 354 bytes leftover after parsing attributes in process `syz.6.5040'. [ 923.589789][T20549] Bluetooth: hci4: command 0x0406 tx timeout [ 925.300646][T20604] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5048'. [ 925.415366][T20604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 925.437544][T20604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 925.457669][T20604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 925.475431][T20604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 926.870972][T20626] netlink: 'syz.7.5056': attribute type 10 has an invalid length. [ 926.905773][T20626] netlink: 230 bytes leftover after parsing attributes in process `syz.7.5056'. [ 928.030844][T20648] FAULT_INJECTION: forcing a failure. [ 928.030844][T20648] name failslab, interval 1, probability 0, space 0, times 0 [ 928.095233][T20648] CPU: 0 UID: 0 PID: 20648 Comm: syz.7.5063 Tainted: G L syzkaller #0 PREEMPT(full) [ 928.095274][T20648] Tainted: [L]=SOFTLOCKUP [ 928.095283][T20648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 928.095299][T20648] Call Trace: [ 928.095307][T20648] [ 928.095317][T20648] dump_stack_lvl+0x100/0x190 [ 928.095358][T20648] should_fail_ex.cold+0x5/0xa [ 928.095387][T20648] should_failslab+0xc2/0x120 [ 928.095413][T20648] __kmalloc_cache_noprof+0x7a/0x6f0 [ 928.095447][T20648] ? ima_d_path+0xc9/0x260 [ 928.095471][T20648] ? xattr_resolve_name+0x27d/0x3f0 [ 928.095516][T20648] ima_d_path+0xc9/0x260 [ 928.095542][T20648] ? __pfx_ima_d_path+0x10/0x10 [ 928.095573][T20648] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 928.095617][T20648] process_measurement+0x1b25/0x2350 [ 928.095664][T20648] ? stack_trace_save+0x8e/0xc0 [ 928.095689][T20648] ? __pfx_process_measurement+0x10/0x10 [ 928.095730][T20648] ? __lock_acquire+0x4a5/0x2630 [ 928.095767][T20648] ? __kasan_slab_alloc+0x89/0x90 [ 928.095790][T20648] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 928.095829][T20648] ? init_file+0x95/0x480 [ 928.095856][T20648] ? alloc_empty_file+0x73/0x1c0 [ 928.095886][T20648] ? alloc_file_pseudo+0x13a/0x230 [ 928.095916][T20648] ? ksys_mmap_pgoff+0x232/0x650 [ 928.095944][T20648] ? __x64_sys_mmap+0x125/0x190 [ 928.095979][T20648] ? do_syscall_64+0x106/0xf80 [ 928.096041][T20648] ? __pfx_aa_file_perm+0x10/0x10 [ 928.096084][T20648] ima_file_mmap+0x1c4/0x1f0 [ 928.096124][T20648] ? __pfx_ima_file_mmap+0x10/0x10 [ 928.096180][T20648] security_mmap_file+0x278/0x9b0 [ 928.096211][T20648] vm_mmap_pgoff+0xec/0x470 [ 928.096240][T20648] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 928.096264][T20648] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 928.096295][T20648] ? hugetlbfs_get_inode+0x36e/0x750 [ 928.096328][T20648] ksys_mmap_pgoff+0x273/0x650 [ 928.096353][T20648] ? __x64_sys_futex+0x358/0x4d0 [ 928.096384][T20648] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 928.096409][T20648] ? xfd_validate_state+0x129/0x190 [ 928.096446][T20648] __x64_sys_mmap+0x125/0x190 [ 928.096484][T20648] do_syscall_64+0x106/0xf80 [ 928.096517][T20648] ? clear_bhb_loop+0x40/0x90 [ 928.096545][T20648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.096569][T20648] RIP: 0033:0x7f28e8f9c799 [ 928.096588][T20648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 928.096612][T20648] RSP: 002b:00007f28e9da1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 928.096634][T20648] RAX: ffffffffffffffda RBX: 00007f28e9216180 RCX: 00007f28e8f9c799 [ 928.096650][T20648] RDX: 0000000000009c0f RSI: 000000000000000c RDI: 0000000000000000 [ 928.096665][T20648] RBP: 00007f28e9032c99 R08: ffffffffffffffff R09: 0000300000020000 [ 928.096680][T20648] R10: 0000000000044eb2 R11: 0000000000000246 R12: 0000000000000000 [ 928.096696][T20648] R13: 00007f28e9216218 R14: 00007f28e9216180 R15: 00007fff95d51438 [ 928.096725][T20648] [ 928.852022][T20658] netlink: 'syz.7.5065': attribute type 21 has an invalid length. [ 928.870124][T20658] netlink: 334 bytes leftover after parsing attributes in process `syz.7.5065'. [ 931.754832][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.761183][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.384128][T20705] vhci_hcd vhci_hcd.2: invalid port number 255 [ 933.589687][ T5831] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 934.127222][T20722] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 934.308783][T20722] File: /dev/nullb0 PID: 20722 Comm: syz.2.5079 [ 935.092226][ T5831] Bluetooth: hci4: unexpected event 0x3e length: 505 > 260 [ 935.092261][ T5831] Bluetooth: hci4: unexpected subevent 0x02 length: 504 > 260 [ 935.109547][ T5831] Bluetooth: hci4: Dropping invalid advertising data [ 935.124186][ T5831] Bluetooth: hci4: unknown advertising packet type: 0xe9 [ 936.432331][T20747] zswap: compressor not available [ 936.485515][T20761] netlink: 252 bytes leftover after parsing attributes in process `syz.7.5090'. [ 936.539041][T20761] netlink: 252 bytes leftover after parsing attributes in process `syz.7.5090'. [ 937.350044][T20773] FAULT_INJECTION: forcing a failure. [ 937.350044][T20773] name failslab, interval 1, probability 0, space 0, times 0 [ 937.520781][T20773] CPU: 0 UID: 0 PID: 20773 Comm: syz.2.5093 Tainted: G L syzkaller #0 PREEMPT(full) [ 937.520817][T20773] Tainted: [L]=SOFTLOCKUP [ 937.520825][T20773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 937.520839][T20773] Call Trace: [ 937.520847][T20773] [ 937.520855][T20773] dump_stack_lvl+0x100/0x190 [ 937.520893][T20773] should_fail_ex.cold+0x5/0xa [ 937.520919][T20773] should_failslab+0xc2/0x120 [ 937.520942][T20773] __kmalloc_cache_noprof+0x7a/0x6f0 [ 937.520970][T20773] ? ima_d_path+0xc9/0x260 [ 937.521011][T20773] ? xattr_resolve_name+0x27d/0x3f0 [ 937.521052][T20773] ima_d_path+0xc9/0x260 [ 937.521076][T20773] ? __pfx_ima_d_path+0x10/0x10 [ 937.521104][T20773] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 937.521146][T20773] process_measurement+0x1b25/0x2350 [ 937.521189][T20773] ? stack_trace_save+0x8e/0xc0 [ 937.521213][T20773] ? __pfx_process_measurement+0x10/0x10 [ 937.521251][T20773] ? __lock_acquire+0x4a5/0x2630 [ 937.521280][T20773] ? __kasan_slab_alloc+0x89/0x90 [ 937.521301][T20773] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 937.521340][T20773] ? init_file+0x95/0x480 [ 937.521385][T20773] ? alloc_empty_file+0x73/0x1c0 [ 937.521415][T20773] ? alloc_file_pseudo+0x13a/0x230 [ 937.521448][T20773] ? ksys_mmap_pgoff+0x232/0x650 [ 937.521473][T20773] ? __x64_sys_mmap+0x125/0x190 [ 937.521510][T20773] ? do_syscall_64+0x106/0xf80 [ 937.521575][T20773] ? __pfx_aa_file_perm+0x10/0x10 [ 937.521618][T20773] ima_file_mmap+0x1c4/0x1f0 [ 937.521666][T20773] ? __pfx_ima_file_mmap+0x10/0x10 [ 937.521715][T20773] security_mmap_file+0x278/0x9b0 [ 937.521749][T20773] vm_mmap_pgoff+0xec/0x470 [ 937.521786][T20773] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 937.521813][T20773] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 937.521848][T20773] ? hugetlbfs_get_inode+0x36e/0x750 [ 937.521884][T20773] ksys_mmap_pgoff+0x273/0x650 [ 937.521912][T20773] ? __x64_sys_futex+0x358/0x4d0 [ 937.521946][T20773] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 937.521974][T20773] ? xfd_validate_state+0x129/0x190 [ 937.522017][T20773] __x64_sys_mmap+0x125/0x190 [ 937.522059][T20773] do_syscall_64+0x106/0xf80 [ 937.522096][T20773] ? clear_bhb_loop+0x40/0x90 [ 937.522127][T20773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.522153][T20773] RIP: 0033:0x7fc2a039c799 [ 937.522174][T20773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 937.522199][T20773] RSP: 002b:00007fc2a11c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 937.522223][T20773] RAX: ffffffffffffffda RBX: 00007fc2a0616180 RCX: 00007fc2a039c799 [ 937.522240][T20773] RDX: 0000000000009c0f RSI: 000000000000000c RDI: 0000000000000000 [ 937.522256][T20773] RBP: 00007fc2a0432c99 R08: ffffffffffffffff R09: 0000300000020000 [ 937.522273][T20773] R10: 0000000000044eb2 R11: 0000000000000246 R12: 0000000000000000 [ 937.522289][T20773] R13: 00007fc2a0616218 R14: 00007fc2a0616180 R15: 00007ffeef75cad8 [ 937.522321][T20773] [ 937.975009][T20784] netlink: 354 bytes leftover after parsing attributes in process `syz.6.5097'. [ 939.166839][T20793] netlink: 266 bytes leftover after parsing attributes in process `syz.7.5108'. [ 939.234641][T20799] netlink: 13 bytes leftover after parsing attributes in process `syz.2.5101'. [ 939.574853][T20809] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5104'. [ 939.605359][T20809] bridge_slave_1: left allmulticast mode [ 939.638036][T20809] bridge_slave_1: left promiscuous mode [ 939.650912][T20809] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.684815][T20809] bridge_slave_0: left allmulticast mode [ 939.709488][T20809] bridge_slave_0: left promiscuous mode [ 939.733186][T20809] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.009080][T20813] zswap: compressor not available [ 940.639712][T20831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5111'. [ 940.711088][T20831] netlink: 'syz.3.5111': attribute type 1 has an invalid length. [ 940.750982][T20831] netlink: 13 bytes leftover after parsing attributes in process `syz.3.5111'. [ 941.716926][T20849] zswap: compressor not available [ 943.061141][T20877] netlink: 62 bytes leftover after parsing attributes in process `syz.7.5124'. [ 943.804951][ T5831] Bluetooth: hci5: ACL packet too small [ 944.536873][T20901] netlink: 186 bytes leftover after parsing attributes in process `syz.7.5130'. [ 947.706781][T20942] binder: BINDER_SET_CONTEXT_MGR already set [ 947.769285][T20942] binder: 20941:20942 ioctl 4018620d 2000000027c0 returned -16 [ 949.190650][T20549] Bluetooth: hci5: command 0x0406 tx timeout [ 949.233500][T20952] Process accounting paused [ 950.668901][T20976] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5151'. [ 950.939193][T20985] netlink: 330 bytes leftover after parsing attributes in process `syz.3.5152'. [ 951.246217][T20990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5153'. [ 951.298492][T20992] netlink: 25 bytes leftover after parsing attributes in process `syz.3.5153'. [ 951.569423][T20999] netlink: 202 bytes leftover after parsing attributes in process `syz.3.5156'. [ 954.660025][T21041] FAULT_INJECTION: forcing a failure. [ 954.660025][T21041] name failslab, interval 1, probability 0, space 0, times 0 [ 954.729951][T21041] CPU: 0 UID: 0 PID: 21041 Comm: syz.3.5168 Tainted: G L syzkaller #0 PREEMPT(full) [ 954.729988][T21041] Tainted: [L]=SOFTLOCKUP [ 954.729996][T21041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 954.730012][T21041] Call Trace: [ 954.730020][T21041] [ 954.730030][T21041] dump_stack_lvl+0x100/0x190 [ 954.730070][T21041] should_fail_ex.cold+0x5/0xa [ 954.730098][T21041] should_failslab+0xc2/0x120 [ 954.730123][T21041] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 954.730158][T21041] ? can_rx_register+0x582/0x6f0 [ 954.730194][T21041] can_rx_register+0x582/0x6f0 [ 954.730223][T21041] ? __pfx_raw_rcv+0x10/0x10 [ 954.730259][T21041] ? __pfx_can_rx_register+0x10/0x10 [ 954.730299][T21041] raw_enable_filters+0xe0/0x210 [ 954.730340][T21041] raw_enable_allfilters+0x8b/0x2b0 [ 954.730373][T21041] ? __local_bh_enable_ip+0x9e/0x120 [ 954.730402][T21041] raw_bind+0x1bd/0xdf0 [ 954.730434][T21041] ? apparmor_socket_bind+0x105/0x1e0 [ 954.730475][T21041] __sys_bind+0x1a9/0x260 [ 954.730504][T21041] ? __pfx___sys_bind+0x10/0x10 [ 954.730549][T21041] __x64_sys_bind+0x72/0xb0 [ 954.730575][T21041] ? lockdep_hardirqs_on+0x78/0x100 [ 954.730609][T21041] do_syscall_64+0x106/0xf80 [ 954.730643][T21041] ? clear_bhb_loop+0x40/0x90 [ 954.730671][T21041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.730695][T21041] RIP: 0033:0x7fb514d9c799 [ 954.730713][T21041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 954.730743][T21041] RSP: 002b:00007fb515cd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 954.730765][T21041] RAX: ffffffffffffffda RBX: 00007fb515015fa0 RCX: 00007fb514d9c799 [ 954.730781][T21041] RDX: 000000000000006a RSI: 0000200000000040 RDI: 0000000000000003 [ 954.730795][T21041] RBP: 00007fb514e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 954.730810][T21041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 954.730823][T21041] R13: 00007fb515016038 R14: 00007fb515015fa0 R15: 00007ffc638a8578 [ 954.730853][T21041] [ 955.756541][ T5831] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 955.813189][T21051] netlink: 'syz.6.5171': attribute type 5 has an invalid length. [ 955.868330][T21051] netlink: 'syz.6.5171': attribute type 1 has an invalid length. [ 955.907494][T21051] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5171'. [ 955.948902][T21054] netlink: 'syz.6.5171': attribute type 5 has an invalid length. [ 955.956695][T21054] netlink: 'syz.6.5171': attribute type 1 has an invalid length. [ 956.029719][T21054] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5171'. [ 957.917814][T21068] FAULT_INJECTION: forcing a failure. [ 957.917814][T21068] name failslab, interval 1, probability 0, space 0, times 0 [ 957.969507][T21068] CPU: 0 UID: 0 PID: 21068 Comm: syz.6.5175 Tainted: G L syzkaller #0 PREEMPT(full) [ 957.969544][T21068] Tainted: [L]=SOFTLOCKUP [ 957.969553][T21068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 957.969567][T21068] Call Trace: [ 957.969575][T21068] [ 957.969583][T21068] dump_stack_lvl+0x100/0x190 [ 957.969622][T21068] should_fail_ex.cold+0x5/0xa [ 957.969649][T21068] should_failslab+0xc2/0x120 [ 957.969673][T21068] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 957.969708][T21068] ? __mpol_dup+0x74/0x370 [ 957.969740][T21068] __mpol_dup+0x74/0x370 [ 957.969767][T21068] ? __pfx___mpol_dup+0x10/0x10 [ 957.969793][T21068] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 957.969828][T21068] ? sp_alloc+0x27/0x160 [ 957.969859][T21068] sp_alloc+0x4d/0x160 [ 957.969887][T21068] mpol_set_shared_policy+0xa5/0x8a0 [ 957.969921][T21068] ? __pfx_shmem_set_policy+0x10/0x10 [ 957.969947][T21068] mbind_range+0x339/0x550 [ 957.969978][T21068] do_mbind+0x7de/0xfd0 [ 957.970012][T21068] ? __might_fault+0xc5/0x140 [ 957.970044][T21068] ? __pfx_do_mbind+0x10/0x10 [ 957.970079][T21068] ? _copy_from_user+0x59/0xd0 [ 957.970112][T21068] ? __pfx_get_nodes+0x10/0x10 [ 957.970155][T21068] kernel_mbind+0x1b7/0x200 [ 957.970186][T21068] ? __pfx_kernel_mbind+0x10/0x10 [ 957.970222][T21068] do_syscall_64+0x106/0xf80 [ 957.970256][T21068] ? clear_bhb_loop+0x40/0x90 [ 957.970283][T21068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.970307][T21068] RIP: 0033:0x7f705119c799 [ 957.970326][T21068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 957.970348][T21068] RSP: 002b:00007f7051f7a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 957.970371][T21068] RAX: ffffffffffffffda RBX: 00007f7051415fa0 RCX: 00007f705119c799 [ 957.970394][T21068] RDX: 0000000000008003 RSI: 0000000000800605 RDI: 0000000000000000 [ 957.970408][T21068] RBP: 00007f7051232c99 R08: 0000000000000003 R09: 0000000000000003 [ 957.970423][T21068] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 957.970438][T21068] R13: 00007f7051416038 R14: 00007f7051415fa0 R15: 00007ffe3796e678 [ 957.970467][T21068] [ 963.312098][T21129] netlink: 62 bytes leftover after parsing attributes in process `syz.6.5192'. [ 963.366326][T21132] netlink: 62 bytes leftover after parsing attributes in process `syz.6.5192'. [ 963.408416][T21132] netlink: 62 bytes leftover after parsing attributes in process `syz.6.5192'. [ 963.453239][T21132] netlink: 62 bytes leftover after parsing attributes in process `syz.6.5192'. [ 963.504391][T21132] netlink: 62 bytes leftover after parsing attributes in process `syz.6.5192'. [ 963.549980][T21132] netlink: 62 bytes leftover after parsing attributes in process `syz.6.5192'. [ 963.598100][T21132] netlink: 62 bytes leftover after parsing attributes in process `syz.6.5192'. [ 963.634116][T21132] netlink: 62 bytes leftover after parsing attributes in process `syz.6.5192'. [ 963.697911][T21132] netlink: 62 bytes leftover after parsing attributes in process `syz.6.5192'. [ 963.749152][T21132] netlink: 62 bytes leftover after parsing attributes in process `syz.6.5192'. [ 963.973600][T21138] FAULT_INJECTION: forcing a failure. [ 963.973600][T21138] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 964.126844][T21138] CPU: 0 UID: 0 PID: 21138 Comm: syz.2.5194 Tainted: G L syzkaller #0 PREEMPT(full) [ 964.126885][T21138] Tainted: [L]=SOFTLOCKUP [ 964.126893][T21138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 964.126909][T21138] Call Trace: [ 964.126917][T21138] [ 964.126927][T21138] dump_stack_lvl+0x100/0x190 [ 964.126969][T21138] should_fail_ex.cold+0x5/0xa [ 964.127005][T21138] ? prepare_alloc_pages+0x16d/0x5f0 [ 964.127034][T21138] should_fail_alloc_page+0xeb/0x140 [ 964.127061][T21138] prepare_alloc_pages+0x1f0/0x5f0 [ 964.127087][T21138] ? rcu_is_watching+0x12/0xc0 [ 964.127125][T21138] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 964.127161][T21138] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 964.127198][T21138] ? __pfx_css_rstat_updated+0x10/0x10 [ 964.127232][T21138] ? find_held_lock+0x2b/0x80 [ 964.127253][T21138] ? rcu_read_unlock+0x17/0x60 [ 964.127279][T21138] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 964.127313][T21138] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 964.127349][T21138] ? page_counter_charge+0x1d2/0x240 [ 964.127380][T21138] ? rcu_is_watching+0x12/0xc0 [ 964.127418][T21138] ? trace_mm_page_alloc+0x17a/0x1d0 [ 964.127454][T21138] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 964.127494][T21138] ? policy_nodemask+0xed/0x4f0 [ 964.127532][T21138] alloc_pages_mpol+0x1fb/0x550 [ 964.127555][T21138] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 964.127579][T21138] ? do_raw_spin_lock+0x128/0x260 [ 964.127610][T21138] ? find_held_lock+0x2b/0x80 [ 964.127629][T21138] ? __pud_alloc+0x529/0x6e0 [ 964.127657][T21138] alloc_pages_noprof+0x131/0x390 [ 964.127681][T21138] __pmd_alloc+0x3b/0x950 [ 964.127728][T21138] ? __pud_alloc+0x52e/0x6e0 [ 964.127757][T21138] walk_to_pmd+0x3a3/0x4c0 [ 964.127786][T21138] get_locked_pte+0x25/0xc0 [ 964.127814][T21138] map_ldt_struct+0x3c1/0xa70 [ 964.127845][T21138] ? __pfx_map_ldt_struct+0x10/0x10 [ 964.127867][T21138] ? alloc_pages_noprof+0x233/0x390 [ 964.127897][T21138] write_ldt+0x6d3/0xd40 [ 964.127935][T21138] ? __pfx_write_ldt+0x10/0x10 [ 964.127957][T21138] ? xfd_validate_state+0x129/0x190 [ 964.128014][T21138] __x64_sys_modify_ldt+0xb1/0x170 [ 964.128039][T21138] do_syscall_64+0x106/0xf80 [ 964.128073][T21138] ? clear_bhb_loop+0x40/0x90 [ 964.128101][T21138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.128136][T21138] RIP: 0033:0x7fc2a039c799 [ 964.128154][T21138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 964.128175][T21138] RSP: 002b:00007fc2a120b028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 964.128196][T21138] RAX: ffffffffffffffda RBX: 00007fc2a0615fa0 RCX: 00007fc2a039c799 [ 964.128211][T21138] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000001 [ 964.128225][T21138] RBP: 00007fc2a0432c99 R08: 0000000000000000 R09: 0000000000000000 [ 964.128238][T21138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 964.128251][T21138] R13: 00007fc2a0616038 R14: 00007fc2a0615fa0 R15: 00007ffeef75cad8 [ 964.128279][T21138] [ 964.833647][ T5831] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 965.852252][T21152] sg_read: process 438 (syz.7.5198) changed security contexts after opening file descriptor, this is not allowed. [ 967.531609][ T29] audit: type=1800 audit(2147483683.300:13): pid=21141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5194" name="trace_marker" dev="tracefs" ino=408 res=0 errno=0 [ 967.589932][ T31] INFO: task syz-executor:11915 blocked for more than 143 seconds. [ 967.598736][ T31] Tainted: G L syzkaller #0 [ 967.605321][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 967.630607][T18617] NFSD: Failed to start, no listeners configured. [ 967.735298][ T31] task:syz-executor state:D stack:23688 pid:11915 tgid:11915 ppid:1 task_flags:0x400140 flags:0x00080002 [ 967.844817][ T31] Call Trace: [ 967.850122][ T31] [ 967.884236][ T31] __schedule+0xfee/0x6120 [ 967.896531][ T31] ? __lock_acquire+0x4a5/0x2630 [ 967.933988][ T31] ? __pfx___schedule+0x10/0x10 [ 967.963997][ T31] ? find_held_lock+0x2b/0x80 [ 967.991448][ T31] ? schedule+0x2bf/0x390 [ 967.995836][ T31] schedule+0xdd/0x390 [ 968.023994][ T31] schedule_preempt_disabled+0x13/0x30 [ 968.051943][ T31] __mutex_lock+0xc9a/0x1b90 [ 968.056595][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 968.100926][ T31] ? __lock_acquire+0x4a5/0x2630 [ 968.133086][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 968.150606][ T31] ? net_generic+0xea/0x2a0 [ 968.175454][ T31] ? net_generic+0xea/0x2a0 [ 968.195070][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 968.219702][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 968.245826][ T31] nfsd_umount+0x3b/0x60 [ 968.260417][ T31] deactivate_locked_super+0xc1/0x1b0 [ 968.305575][ T31] deactivate_super+0xe7/0x110 [ 968.388225][ T31] cleanup_mnt+0x21f/0x450 [ 968.427466][ T31] task_work_run+0x150/0x240 [ 968.484918][ T31] ? __pfx_task_work_run+0x10/0x10 [ 968.517476][ T31] exit_to_user_mode_loop+0x100/0x4a0 [ 968.522910][ T31] do_syscall_64+0x668/0xf80 [ 968.557951][ T31] ? clear_bhb_loop+0x40/0x90 [ 968.562730][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.611806][ T31] RIP: 0033:0x7f788759d9d7 [ 968.616270][ T31] RSP: 002b:00007fff2edd8278 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 968.667712][ T31] RAX: 0000000000000000 RBX: 00007f7887632050 RCX: 00007f788759d9d7 [ 968.703623][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff2edd8330 [ 968.757471][ T31] RBP: 00007fff2edd8330 R08: 00007fff2edd9330 R09: 00000000ffffffff [ 968.765486][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff2edd93c0 [ 968.805719][ T31] R13: 00007f7887632050 R14: 00000000000c5508 R15: 00007fff2edd9400 [ 968.847782][ T31] [ 968.853037][ T31] [ 968.853037][ T31] Showing all locks held in the system: [ 968.887715][ T31] 1 lock held by khungtaskd/31: [ 968.892599][ T31] #0: ffffffff8e7e7660 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 969.007644][ T31] 4 locks held by kworker/u8:5/83: [ 969.017455][ T31] #0: ffff88801c6ae948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 969.067516][ T31] #1: ffffc9000213fd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 969.098940][ T31] #2: ffffffff8e7f3140 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 969.127569][ T31] #3: ffff8880b843b2e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x140 [ 969.147487][ T31] 2 locks held by syz-executor/11915: [ 969.152912][ T31] #0: ffff88807bfa00e0 (&type->s_umount_key#54){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 969.177478][ T31] #1: ffffffff8ec583a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 969.207492][ T31] 3 locks held by syz.0.4448/18617: [ 969.212707][ T31] #0: ffffffff906c0910 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 969.237467][ T31] #1: ffffffff8ec583a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 969.257663][ T31] #2: ffffffff8e7f3140 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 969.277488][ T31] 5 locks held by syz-executor/18780: [ 969.282897][ T31] #0: ffff88802a480ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 969.317924][ T31] #1: ffff88802a4800c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 969.337897][ T31] #2: ffffffff908ad288 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 969.357673][ T31] #3: ffff88806bfbeaf8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x770 [ 969.367067][ T31] #4: ffffffff8e7f3278 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 969.413020][ T31] 2 locks held by syz-executor/19104: [ 969.420638][ T31] #0: ffff8880659720e0 (&type->s_umount_key#54){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 969.447718][ T31] #1: ffffffff8ec583a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 969.457368][ T31] 3 locks held by kworker/0:2/19222: [ 969.467486][ T31] #0: ffff88813fe63148 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 969.487482][ T31] #1: ffffc900037a7d08 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 969.525198][ T31] #2: ffffffff8e7f3140 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 969.547575][ T31] 2 locks held by syz.2.5191/21131: [ 969.552888][ T31] #0: ffff88802a0440e0 (&type->s_umount_key#54){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 969.577511][ T31] #1: ffffffff8ec583a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 969.587205][ T31] 1 lock held by syz.3.5202/21168: [ 969.607711][ T31] #0: ffffffff8e7f3140 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 969.663910][ T31] [ 969.666267][ T31] ============================================= [ 969.666267][ T31] [ 969.719076][ T31] NMI backtrace for cpu 0 [ 969.719098][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 969.719126][ T31] Tainted: [L]=SOFTLOCKUP [ 969.719134][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 969.719146][ T31] Call Trace: [ 969.719153][ T31] [ 969.719161][ T31] dump_stack_lvl+0x100/0x190 [ 969.719197][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 969.719231][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 969.719261][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 969.719288][ T31] sys_info+0x141/0x190 [ 969.719307][ T31] watchdog+0xd25/0x1050 [ 969.719339][ T31] ? __pfx_watchdog+0x10/0x10 [ 969.719360][ T31] ? __kthread_parkme+0x18c/0x230 [ 969.719385][ T31] ? kthread+0x13a/0x450 [ 969.719410][ T31] ? __pfx_watchdog+0x10/0x10 [ 969.719428][ T31] kthread+0x370/0x450 [ 969.719453][ T31] ? __pfx_kthread+0x10/0x10 [ 969.719499][ T31] ret_from_fork+0x754/0xd80 [ 969.719532][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 969.719567][ T31] ? __switch_to+0x7b4/0x1120 [ 969.719591][ T31] ? __pfx_kthread+0x10/0x10 [ 969.719632][ T31] ret_from_fork_asm+0x1a/0x30 [ 969.719665][ T31] [ 970.053905][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 970.060882][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 970.071565][ T31] Tainted: [L]=SOFTLOCKUP [ 970.075890][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 970.085951][ T31] Call Trace: [ 970.089319][ T31] [ 970.092252][ T31] dump_stack_lvl+0x100/0x190 [ 970.096956][ T31] vpanic+0x552/0x970 [ 970.100948][ T31] ? __pfx_vpanic+0x10/0x10 [ 970.105463][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 970.111651][ T31] panic+0xd1/0xe0 [ 970.115386][ T31] ? __pfx_panic+0x10/0x10 [ 970.119814][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 970.126125][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 970.132290][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 970.138478][ T31] ? watchdog.cold+0x198/0x1ca [ 970.143253][ T31] ? watchdog+0xd35/0x1050 [ 970.147673][ T31] watchdog.cold+0x1a9/0x1ca [ 970.152281][ T31] ? __pfx_watchdog+0x10/0x10 [ 970.156971][ T31] ? __kthread_parkme+0x18c/0x230 [ 970.162011][ T31] ? kthread+0x13a/0x450 [ 970.166271][ T31] ? __pfx_watchdog+0x10/0x10 [ 970.170954][ T31] kthread+0x370/0x450 [ 970.175047][ T31] ? __pfx_kthread+0x10/0x10 [ 970.179656][ T31] ret_from_fork+0x754/0xd80 [ 970.184384][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 970.189552][ T31] ? __switch_to+0x7b4/0x1120 [ 970.194237][ T31] ? __pfx_kthread+0x10/0x10 [ 970.198847][ T31] ret_from_fork_asm+0x1a/0x30 [ 970.203646][ T31] [ 970.206736][ T31] Kernel Offset: disabled [ 970.211070][ T31] Rebooting in 86400 seconds..