last executing test programs: 5.789527007s ago: executing program 1 (id=7420): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statx$auto(0xffffffffffffff9c, 0x0, 0x0, 0x4, &(0x7f0000000040)={0x1, 0xa, 0x0, 0x7ff, 0x0, 0x0, 0xfffb, 0x8000, 0x83, 0x0, 0x7c55, 0x34b, {0x0, 0xe}, {0x100, 0x9}, {0x81, 0x2}, {0xfff, 0xfff}, 0x1, 0x6, 0xb0, 0xfffffffb, 0x3, 0x76b3, 0x4, 0x8, 0x6, 0x20000000, 0x3, 0x4, [0x10, 0x4, 0x3, 0x523, 0x4, 0x8, 0xf, 0x1, 0x7]}) close_range$auto(0x2, 0xa, 0x0) socket(0x2, 0x1, 0x106) socket(0x10, 0x2, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200000005002a0001000000080017"], 0x24}, 0x1, 0x0, 0x0, 0xc045}, 0x4) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\a'], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 4.875445738s ago: executing program 1 (id=7423): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r0 = io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, r0, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) io_uring_enter$auto(r0, 0x4000007, 0x7ffffffb, 0x3, 0x0, 0x5) move_pages$auto(0x0, 0xa, 0x0, 0x0, 0x0, 0x2) io_uring_enter$auto(0x3, 0x5, 0x5f3, 0x3, 0x0, 0x2) 4.76014951s ago: executing program 2 (id=7424): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram10\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48004}, 0x4050) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) 4.547610297s ago: executing program 2 (id=7425): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80002, 0x73) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) semctl$auto(0x1ff, 0x2, 0x13, 0x4) ioctl$auto(r1, 0x401c5504, r1) 4.346637895s ago: executing program 2 (id=7426): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00', 0xfffe) mount$auto(0x0, &(0x7f0000000540)='}[,&*}\x00', &(0x7f0000000300)='[fsg\xd7\xb7\x13\xdc\xc0\x81/\xf4\x93\xb8\xb7\n\xbb\xed\xab6\xc9y[\fW\xc2l*{\xe6\xdb\xb6\x8d\nl?\xac\xfdfB\xcdPb`5\xbaNV\xcaP\x99\xd5\xdcf\x86\xc2A\x8e\x18\xdauD\x8dM1\x10\xa4\xb3\xf4t\x9e:\x13\xc4:\xda\xc3\xe4\x11\x12\xf6V\xe3\x876\xa0\xd873\xfeO]\xeb5\xa3\xbb\xc1\x80\x8cm\x1f\xbbA\xe6\xb8\x16\x0f\x89\x1d\x18mw\xd4\x88S\x18\xc1\xc0\xfc\x95.\xb1\xfbQ\\=\x15\x1a\xfa\xbe\x96@o\xc3\xc9\xb5b`\xc9\x92\xe7\xde\"\xa0\x97F\xce&\xe7\x98\x9at\x93I\xc6>\x81\x1fK_f\xf9\xe2\x1c\x17\xd8\xcc\x94+\xc3\xdf=l%c\xd3\xe3\x1f\xc5*zel\x93\xd6\xe3\xd5\xe9\xd8\xa38:*#@\xecs$\xa1\x06\x9bXU\xd4g0\xeb\x911\xca\xbar\xe9\xb5\x06\xb42\b\x15\xc5\x89\xcc\x1a\xd6\xc9\xfb\x98EDkl\xf8', 0x3, 0x0) sysfs$auto(0x2, 0x3b, 0x0) 3.797925625s ago: executing program 1 (id=7428): r0 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, 0xee00, 0x7fffffffffffffff, 0x99a7, 0xc) syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x3b) socket(0xa, 0x3, 0x3b) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) select$auto(0x10, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x4002008d, 0x1, 0x2, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001e, 0x7, 0xa, 0x9, 0x2, 0x6]}, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) 3.797356431s ago: executing program 0 (id=7436): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x10, 0x80002, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) timerfd_create$auto(0x0, 0x0) timerfd_settime$auto(r0, 0x3, 0x0, 0x0) adjtimex$auto(&(0x7f0000000380)={0x1ff, 0x0, 0xff, 0x7, 0x8, 0x0, 0x10, 0x0, 0x2, 0xbf, 0x1f6a, {}, 0x9, 0x1, 0x2, 0x80000001, 0x0, 0x8, 0x545, 0x1, 0x0, 0x8}) 3.628150458s ago: executing program 0 (id=7429): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x82001, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000100), 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socketcall$auto(0xa, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r3, &(0x7f0000000200)='7\x00\\\xa0\x04|\x03\'\x00\xc9\n\xbf\xb9\x12\xfa\x00\x00\xcfk', 0xb7f) ioctl$auto(0x3, 0xae41, r1) 2.88792052s ago: executing program 3 (id=7432): close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x7) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) ioctl$auto_SG_GET_REQUEST_TABLE(r0, 0x2286, 0x0) write$auto(r0, &(0x7f00000004c0)='/proc/asound/card1/pcm1c/sub7/hw_params\x00', 0x3) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) sendmsg$auto_TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, 0x0, 0x20000000) ioctl$auto_XFS_IOC_FREESP(0xffffffffffffffff, 0x4030580b, 0x0) ioctl$auto_BLKTRACESETUP2(r0, 0xc0481273, &(0x7f0000000800)={"e8b973f61f307252e9e4137cb0b8955cb15493cbc87d1c35dbd05b2452e6b7b1", 0xfff9, 0x3, 0x0, 0x40, 0x7fffffffffffffff}) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x1) sendmsg$auto_NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, 0x0, 0x4) 2.791839144s ago: executing program 3 (id=7433): close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) socket(0xa, 0x801, 0x106) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) lsm_list_modules$auto(0x0, 0x0, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x1b) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r0, 0x8, 0x1) fcntl$auto(r0, 0x11, 0x2) 2.758354269s ago: executing program 1 (id=7434): unshare$auto(0x40000080) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1b0026bd7000fddbdf2503000000040008000c00038008000c800400018012000100898771f1c19f17790485908286dd0000040002"], 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0xc800) sysfs$auto(0x2, 0x3b, 0x0) 2.733954764s ago: executing program 3 (id=7435): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x82002, 0x0) openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, 0x0, 0x40aa2, 0x0) write$auto(0x3, 0x0, 0xfdef) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)="fb", 0x1) close_range$auto(0x2, 0xffffffffffffffff, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/security/tomoyo/query\x00', 0x40803, 0x0) r1 = timerfd_create$auto_CLOCK_REALTIME(0x0, 0x8) getsockopt$auto_SO_SNDLOWAT(r1, 0x1, 0x13, &(0x7f0000000040)='\x00', 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/apparmor/parameters/hash_policy\x00', 0x60282, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x6) 2.398122959s ago: executing program 3 (id=7437): write$auto(0xca, &(0x7f0000000140)='\x04\x0e\x06\xd5\x89|d\v\x00\x00@\x00\x81\x00\x00\x00\xf6\xf5\x00\xdf\xff\x00', 0x10) mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) sysfs$auto(0x2, 0x3c, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x3, 0x0, &(0x7f0000000040), 0x0) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(0xffffffffffffffff, 0x0, 0x40) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x2000c840) 2.126213089s ago: executing program 0 (id=7438): mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/037/001\x00', 0x802, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101041, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) ioctl$auto(0x3, 0x402c542d, 0xffffffffffffffff) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x20, 0x3, 0x1, 0x1ff, 0x1, 0x4, &(0x7f0000000080)}) setregid$auto(0xffffffffffffffff, 0xfffe) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x3, 0x2, 0x4, 0xfb) 2.125435171s ago: executing program 2 (id=7446): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xed\xf8\xe1\xbc\x1d\x91D\xe7R\x12\xc4\xcd\xc6\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY2@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(', 0x100000a3dd) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) io_uring_setup$auto(0xf0, &(0x7f0000000180)={0x6, 0x18, 0xd64, 0xc852, 0x6, 0x7, 0xffffffffffffffff, [0x1, 0x401, 0x1000], {0x7, 0x5, 0x1, 0x4, 0x95, 0xf4c, 0x7fff, 0xfffffffb, 0x65f29f6d}, {0x3, 0xadc, 0x10000, 0x0, 0x5, 0xffffffff, 0x1000, 0x54f, 0x5}}) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='p\x00', @ANYRES16], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xb, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='*'], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x1, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa509}, 0x800}, 0x7, 0x4008) 1.884402411s ago: executing program 0 (id=7439): ioctl$auto_TIOCGPTPEER2(0xffffffffffffffff, 0x5441, 0x0) mkdir$auto(&(0x7f00000000c0)='./file0\x00', 0x0) rename$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./cgroup\x00') unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x49402, 0x0) read$auto(r0, 0x0, 0x9a28) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000100)={0x0, 0x7}, 0x4000000000007) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup.cpu/memory.stat\x00', 0x80200, 0x0) 1.167383361s ago: executing program 3 (id=7440): mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) lstat$auto(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x4, 0x8000000a041000a, 0x40000402, 0x10000, 0xa, 0xffffffff80000000, 0xe0, 0x400006, 0x240000100103}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r0 = socket(0x10, 0x2, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x0, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.097130984s ago: executing program 3 (id=7441): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x6, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) io_uring_setup$auto(0x5, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x7990, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0x1, 0x29f, 0x2, 0x83, 0x4, 0x17f, 0x2}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x71ea, 0x100000004}}) sysfs$auto(0x2, 0x3b, 0x0) 572.628722ms ago: executing program 0 (id=7442): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = getpid() close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(0x8000000000000001, 0x26, 0x8) process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0x91f5}, 0x800000001, &(0x7f0000001080)={&(0x7f00000010c0)="837c43558323d5db424689e7e6cb5c40ad091e4374c10000000025", 0x1ffffffff}, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0x4040ae79, r1) 376.84784ms ago: executing program 2 (id=7443): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x110c230000, 0x1, 0xa) mprotect$auto(0x1ffffffff000, 0x100018, 0x4) msync$auto(0x110c230000, 0x200001, 0x6) 273.009256ms ago: executing program 1 (id=7444): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) gettimeofday$auto(0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mbind$auto(0x200000, 0x48e, 0x100000000, 0x0, 0x20000000000006, 0x2) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, r0, 0x0) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xfffe, 0x3, 0x3) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mtrr\x00', 0x0, 0x0) ioctl$auto_XFS_IOC_ERROR_INJECTION(0xffffffffffffffff, 0x40085874, &(0x7f0000000040)={r1, 0x3}) ioctl$auto(r1, 0xc0104d08, r1) 212.419978ms ago: executing program 0 (id=7445): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x103041, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff14, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x200440c0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfc7c, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40c0}, 0x48050) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x8001c01, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x7}, 0x3d55, 0x0) 128.1184ms ago: executing program 1 (id=7447): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket(0xa, 0x801, 0x84) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/misc/rdma_cm/abi_version\x00', 0x8800, 0x0) read$auto(r2, 0x0, 0x1) getsockopt$auto(r1, 0x84, 0x82, 0x0, 0x0) ioctl$auto(0x3, 0x80106f53, r0) 0s ago: executing program 2 (id=7448): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xe7, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x36242395, 0x7ff, 0x8, 0x8, 0x10002, 0x1, 0x81, 0x68198}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) io_uring_setup$auto(0x8, &(0x7f0000000140)={0x3ff, 0x3, 0x9, 0x10001, 0x12, 0xc05, r0, [0x7ff, 0xfff, 0x8], {0x9, 0x1, 0x5, 0x0, 0x400, 0x3, 0x3fe0, 0x26c, 0x1000000000e8}, {0x2, 0x2, 0x54f1, 0x0, 0x101, 0xff, 0x8d8, 0xa, 0x3}}) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) r1 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) kernel console output (not intermixed with test programs): 048] ? __pfx_afs_lookup_cell+0x10/0x10 [ 855.805179][T24048] ? __pfx___might_resched+0x10/0x10 [ 855.805213][T24048] afs_cell_init+0x17d/0x380 [ 855.805234][T24048] afs_proc_rootcell_write+0x1c9/0x280 [ 855.805285][T24048] proc_simple_write+0x10e/0x1a0 [ 855.805305][T24048] ? __pfx_proc_simple_write+0x10/0x10 [ 855.805324][T24048] proc_reg_write+0x240/0x330 [ 855.805341][T24048] vfs_write+0x2aa/0x1050 [ 855.805356][T24048] ? __pfx_proc_reg_write+0x10/0x10 [ 855.805373][T24048] ? __pfx_vfs_write+0x10/0x10 [ 855.805387][T24048] ? __fget_files+0x215/0x3d0 [ 855.805407][T24048] ? __fget_files+0x21f/0x3d0 [ 855.805426][T24048] ksys_write+0x12a/0x250 [ 855.805441][T24048] ? __pfx_ksys_write+0x10/0x10 [ 855.805468][T24048] do_syscall_64+0x115/0x840 [ 855.805489][T24048] ? clear_bhb_loop+0x40/0x90 [ 855.805509][T24048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.805525][T24048] RIP: 0033:0x7f938639e019 [ 855.805540][T24048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 855.805555][T24048] RSP: 002b:00007f9387257028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 855.805571][T24048] RAX: ffffffffffffffda RBX: 00007f9386625fa0 RCX: 00007f938639e019 [ 855.805582][T24048] RDX: 0000000000000007 RSI: 00002000000000c0 RDI: 0000000000000003 [ 855.805592][T24048] RBP: 00007f938643500c R08: 0000000000000000 R09: 0000000000000000 [ 855.805601][T24048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 855.805610][T24048] R13: 00007f9386626038 R14: 00007f9386625fa0 R15: 00007ffe54edd0f8 [ 855.805632][T24048] [ 861.820151][T24116] Process accounting paused [ 870.252412][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.263560][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.013579][T24295] netlink: 'syz.3.6421': attribute type 5 has an invalid length. [ 872.055150][T24295] netlink: 314 bytes leftover after parsing attributes in process `syz.3.6421'. [ 879.918656][T24399] kvm_intel: kvm [24398]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x10000000000001 [ 881.321198][T24410] FAULT_INJECTION: forcing a failure. [ 881.321198][T24410] name failslab, interval 1, probability 0, space 0, times 0 [ 881.366890][T24410] CPU: 0 UID: 0 PID: 24410 Comm: syz.1.6453 Tainted: G L syzkaller #0 PREEMPT(full) [ 881.366919][T24410] Tainted: [L]=SOFTLOCKUP [ 881.366924][T24410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 881.366936][T24410] Call Trace: [ 881.366941][T24410] [ 881.366948][T24410] dump_stack_lvl+0x100/0x190 [ 881.366972][T24410] should_fail_ex.cold+0x5/0xa [ 881.366990][T24410] should_failslab+0xc2/0x120 [ 881.367013][T24410] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 881.367035][T24410] ? proc_alloc_inode+0x25/0x200 [ 881.367060][T24410] ? __pfx_proc_alloc_inode+0x10/0x10 [ 881.367084][T24410] proc_alloc_inode+0x25/0x200 [ 881.367106][T24410] alloc_inode+0x68/0x250 [ 881.367126][T24410] new_inode+0x22/0x1c0 [ 881.367147][T24410] proc_pid_make_inode+0x22/0x160 [ 881.367177][T24410] proc_pident_instantiate+0x85/0x310 [ 881.367204][T24410] proc_pident_lookup+0x1e3/0x270 [ 881.367229][T24410] ? __pfx_down_read+0x10/0x10 [ 881.367253][T24410] __lookup_slow+0x155/0x320 [ 881.367276][T24410] lookup_slow+0x50/0x70 [ 881.367296][T24410] link_path_walk+0x1377/0x1cc0 [ 881.367326][T24410] path_openat+0x1c9/0x4280 [ 881.367342][T24410] ? __kasan_slab_alloc+0x89/0x90 [ 881.367360][T24410] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 881.367378][T24410] ? do_getname+0x35/0x390 [ 881.367396][T24410] ? __x64_sys_openat+0x12d/0x210 [ 881.367424][T24410] ? __pfx_path_openat+0x10/0x10 [ 881.367446][T24410] do_file_open+0x20e/0x430 [ 881.367463][T24410] ? __pfx_do_file_open+0x10/0x10 [ 881.367486][T24410] ? __pfx_kfree_link+0x10/0x10 [ 881.367513][T24410] ? alloc_fd+0x471/0x7a0 [ 881.367530][T24410] ? do_getname+0x191/0x390 [ 881.367550][T24410] do_sys_openat2+0x10f/0x1e0 [ 881.367570][T24410] ? __pfx_do_sys_openat2+0x10/0x10 [ 881.367597][T24410] __x64_sys_openat+0x12d/0x210 [ 881.367618][T24410] ? __pfx___x64_sys_openat+0x10/0x10 [ 881.367646][T24410] do_syscall_64+0x115/0x840 [ 881.367665][T24410] ? clear_bhb_loop+0x40/0x90 [ 881.367684][T24410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.367700][T24410] RIP: 0033:0x7f6e3435e84e [ 881.367715][T24410] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 881.367730][T24410] RSP: 002b:00007f6e35318ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 881.367746][T24410] RAX: ffffffffffffffda RBX: 00007f6e353196c0 RCX: 00007f6e3435e84e [ 881.367757][T24410] RDX: 0000000000000002 RSI: 00007f6e35318f90 RDI: ffffffffffffff9c [ 881.367768][T24410] RBP: 00007f6e3443500c R08: 0000000000000000 R09: 0000000000000000 [ 881.367777][T24410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 881.367786][T24410] R13: 00007f6e34626038 R14: 00007f6e34625fa0 R15: 00007ffc355afa68 [ 881.367806][T24410] [ 893.589655][T24587] Process accounting resumed [ 896.990005][T24660] FAULT_INJECTION: forcing a failure. [ 896.990005][T24660] name failslab, interval 1, probability 0, space 0, times 0 [ 897.058691][T24660] CPU: 0 UID: 0 PID: 24660 Comm: syz.1.6502 Tainted: G L syzkaller #0 PREEMPT(full) [ 897.058720][T24660] Tainted: [L]=SOFTLOCKUP [ 897.058727][T24660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 897.058737][T24660] Call Trace: [ 897.058746][T24660] [ 897.058753][T24660] dump_stack_lvl+0x100/0x190 [ 897.058778][T24660] should_fail_ex.cold+0x5/0xa [ 897.058799][T24660] should_failslab+0xc2/0x120 [ 897.058821][T24660] __kmalloc_cache_noprof+0x91/0x6c0 [ 897.058839][T24660] ? landlock_restrict_sibling_threads+0x530/0x1490 [ 897.058868][T24660] landlock_restrict_sibling_threads+0x530/0x1490 [ 897.058896][T24660] ? __pfx_landlock_restrict_sibling_threads+0x10/0x10 [ 897.058939][T24660] ? __pfx___might_resched+0x10/0x10 [ 897.058963][T24660] ? landlock_merge_ruleset+0x213/0x8b0 [ 897.058986][T24660] __do_sys_landlock_restrict_self+0x5d2/0x9e0 [ 897.059008][T24660] do_syscall_64+0x115/0x840 [ 897.059029][T24660] ? clear_bhb_loop+0x40/0x90 [ 897.059051][T24660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.059068][T24660] RIP: 0033:0x7f6e3439e019 [ 897.059082][T24660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 897.059098][T24660] RSP: 002b:00007f6e35319028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 897.059122][T24660] RAX: ffffffffffffffda RBX: 00007f6e34625fa0 RCX: 00007f6e3439e019 [ 897.059133][T24660] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000000005 [ 897.059143][T24660] RBP: 00007f6e3443500c R08: 0000000000000000 R09: 0000000000000000 [ 897.059152][T24660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 897.059162][T24660] R13: 00007f6e34626038 R14: 00007f6e34625fa0 R15: 00007ffc355afa68 [ 897.059183][T24660] [ 898.701871][T24686] FAULT_INJECTION: forcing a failure. [ 898.701871][T24686] name failslab, interval 1, probability 0, space 0, times 0 [ 898.769099][T24686] CPU: 0 UID: 0 PID: 24686 Comm: syz.3.6510 Tainted: G L syzkaller #0 PREEMPT(full) [ 898.769128][T24686] Tainted: [L]=SOFTLOCKUP [ 898.769134][T24686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 898.769144][T24686] Call Trace: [ 898.769150][T24686] [ 898.769157][T24686] dump_stack_lvl+0x100/0x190 [ 898.769181][T24686] should_fail_ex.cold+0x5/0xa [ 898.769200][T24686] should_failslab+0xc2/0x120 [ 898.769223][T24686] __kmalloc_cache_noprof+0x91/0x6c0 [ 898.769242][T24686] ? create_filter_start.constprop.0+0x1c4/0x310 [ 898.769270][T24686] create_filter_start.constprop.0+0x1c4/0x310 [ 898.769294][T24686] apply_subsystem_event_filter+0x188/0x17a0 [ 898.769319][T24686] ? __might_fault+0xc5/0x140 [ 898.769337][T24686] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 898.769363][T24686] ? _copy_from_user+0x59/0xd0 [ 898.769390][T24686] subsystem_filter_write+0x95/0x120 [ 898.769413][T24686] vfs_write+0x2aa/0x1050 [ 898.769429][T24686] ? __pfx_subsystem_filter_write+0x10/0x10 [ 898.769453][T24686] ? __pfx_vfs_write+0x10/0x10 [ 898.769467][T24686] ? __fget_files+0x215/0x3d0 [ 898.769486][T24686] ? __fget_files+0x21f/0x3d0 [ 898.769506][T24686] ksys_write+0x12a/0x250 [ 898.769521][T24686] ? __pfx_ksys_write+0x10/0x10 [ 898.769541][T24686] do_syscall_64+0x115/0x840 [ 898.769562][T24686] ? clear_bhb_loop+0x40/0x90 [ 898.769580][T24686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.769596][T24686] RIP: 0033:0x7f1c7859e019 [ 898.769611][T24686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 898.769625][T24686] RSP: 002b:00007f1c79471028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 898.769641][T24686] RAX: ffffffffffffffda RBX: 00007f1c78825fa0 RCX: 00007f1c7859e019 [ 898.769651][T24686] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 898.769660][T24686] RBP: 00007f1c7863500c R08: 0000000000000000 R09: 0000000000000000 [ 898.769670][T24686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 898.769679][T24686] R13: 00007f1c78826038 R14: 00007f1c78825fa0 R15: 00007fff2a825618 [ 898.769701][T24686] [ 900.095983][T24708] FAULT_INJECTION: forcing a failure. [ 900.095983][T24708] name failslab, interval 1, probability 0, space 0, times 0 [ 900.190910][T24708] CPU: 0 UID: 0 PID: 24708 Comm: syz.1.6513 Tainted: G L syzkaller #0 PREEMPT(full) [ 900.190938][T24708] Tainted: [L]=SOFTLOCKUP [ 900.190944][T24708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 900.190955][T24708] Call Trace: [ 900.190961][T24708] [ 900.190968][T24708] dump_stack_lvl+0x100/0x190 [ 900.190991][T24708] should_fail_ex.cold+0x5/0xa [ 900.191018][T24708] should_failslab+0xc2/0x120 [ 900.191041][T24708] kmem_cache_alloc_noprof+0x91/0x6a0 [ 900.191061][T24708] ? __pmd_alloc+0xbf/0x950 [ 900.191088][T24708] __pmd_alloc+0xbf/0x950 [ 900.191111][T24708] __handle_mm_fault+0xa9c/0x2a00 [ 900.191130][T24708] ? mt_find+0x45e/0x8e0 [ 900.191154][T24708] ? __pfx___handle_mm_fault+0x10/0x10 [ 900.191169][T24708] ? __pfx_mt_find+0x10/0x10 [ 900.191201][T24708] ? find_vma+0xbf/0x140 [ 900.191220][T24708] ? __pfx_find_vma+0x10/0x10 [ 900.191242][T24708] handle_mm_fault+0x37b/0xa30 [ 900.191262][T24708] do_user_addr_fault+0x74c/0x12f0 [ 900.191289][T24708] exc_page_fault+0x6f/0xd0 [ 900.191309][T24708] asm_exc_page_fault+0x26/0x30 [ 900.191326][T24708] RIP: 0010:rep_movs_alternative+0xf/0xa0 [ 900.191343][T24708] Code: c4 10 c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 fd 9e 04 00 66 66 [ 900.191358][T24708] RSP: 0018:ffffc90003787bd0 EFLAGS: 00050202 [ 900.191371][T24708] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000004 [ 900.191381][T24708] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90003787cf0 [ 900.191390][T24708] RBP: 0000000000000004 R08: 0000000000000001 R09: fffff520006f0f9e [ 900.191399][T24708] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 900.191408][T24708] R13: ffffc90003787cf0 R14: 0000000000000000 R15: 0000000000000084 [ 900.191427][T24708] _copy_from_user+0x98/0xd0 [ 900.191452][T24708] copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 900.191473][T24708] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 900.191496][T24708] do_sock_getsockopt+0x530/0x6e0 [ 900.191511][T24708] ? __lock_acquire+0x49f/0x1a40 [ 900.191538][T24708] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 900.191554][T24708] ? rcu_read_lock_any_held+0x6a/0xa0 [ 900.191579][T24708] ? find_held_lock+0x2b/0x80 [ 900.191603][T24708] ? __fget_files+0x21f/0x3d0 [ 900.191622][T24708] __sys_getsockopt+0x133/0x1d0 [ 900.191649][T24708] ? __x64_sys_getsockopt+0xbd/0x160 [ 900.191669][T24708] __x64_sys_getsockopt+0xbd/0x160 [ 900.191689][T24708] ? do_syscall_64+0x90/0x840 [ 900.191708][T24708] ? lockdep_hardirqs_on+0x78/0x100 [ 900.191727][T24708] do_syscall_64+0x115/0x840 [ 900.191745][T24708] ? clear_bhb_loop+0x40/0x90 [ 900.191763][T24708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.191779][T24708] RIP: 0033:0x7f6e3439e019 [ 900.191792][T24708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 900.191806][T24708] RSP: 002b:00007f6e35319028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 900.191820][T24708] RAX: ffffffffffffffda RBX: 00007f6e34625fa0 RCX: 00007f6e3439e019 [ 900.191830][T24708] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003 [ 900.191839][T24708] RBP: 00007f6e3443500c R08: 0000000000000000 R09: 0000000000000000 [ 900.191848][T24708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 900.191857][T24708] R13: 00007f6e34626038 R14: 00007f6e34625fa0 R15: 00007ffc355afa68 [ 900.191877][T24708] [ 903.936853][T24742] netlink: 206 bytes leftover after parsing attributes in process `syz.2.6522'. [ 905.529558][T24769] FAULT_INJECTION: forcing a failure. [ 905.529558][T24769] name failslab, interval 1, probability 0, space 0, times 0 [ 905.582782][T24769] CPU: 0 UID: 0 PID: 24769 Comm: syz.1.6529 Tainted: G L syzkaller #0 PREEMPT(full) [ 905.582811][T24769] Tainted: [L]=SOFTLOCKUP [ 905.582817][T24769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 905.582827][T24769] Call Trace: [ 905.582833][T24769] [ 905.582840][T24769] dump_stack_lvl+0x100/0x190 [ 905.582865][T24769] should_fail_ex.cold+0x5/0xa [ 905.582884][T24769] should_failslab+0xc2/0x120 [ 905.582907][T24769] __kmalloc_cache_noprof+0x91/0x6c0 [ 905.582925][T24769] ? vicodec_open+0xe7/0xf70 [ 905.583046][T24769] vicodec_open+0xe7/0xf70 [ 905.583061][T24769] ? kobject_get_unless_zero+0x156/0x200 [ 905.583091][T24769] v4l2_open+0x1d2/0x490 [ 905.583115][T24769] ? __pfx_v4l2_open+0x10/0x10 [ 905.583139][T24769] chrdev_open+0x234/0x6a0 [ 905.583155][T24769] ? __pfx_apparmor_file_open+0x10/0x10 [ 905.583174][T24769] ? __pfx_chrdev_open+0x10/0x10 [ 905.583193][T24769] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 905.583217][T24769] do_dentry_open+0x6ab/0x14d0 [ 905.583233][T24769] ? __pfx_chrdev_open+0x10/0x10 [ 905.583253][T24769] vfs_open+0x82/0x3f0 [ 905.583274][T24769] path_openat+0x2873/0x4280 [ 905.583299][T24769] ? __pfx_path_openat+0x10/0x10 [ 905.583320][T24769] do_file_open+0x20e/0x430 [ 905.583337][T24769] ? __pfx_do_file_open+0x10/0x10 [ 905.583366][T24769] ? alloc_fd+0x471/0x7a0 [ 905.583384][T24769] ? do_getname+0x191/0x390 [ 905.583416][T24769] do_sys_openat2+0x10f/0x1e0 [ 905.583440][T24769] ? __pfx_do_sys_openat2+0x10/0x10 [ 905.583474][T24769] __x64_sys_openat+0x12d/0x210 [ 905.583495][T24769] ? __pfx___x64_sys_openat+0x10/0x10 [ 905.583523][T24769] do_syscall_64+0x115/0x840 [ 905.583542][T24769] ? clear_bhb_loop+0x40/0x90 [ 905.583566][T24769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.583583][T24769] RIP: 0033:0x7f6e3439e019 [ 905.583599][T24769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 905.583613][T24769] RSP: 002b:00007f6e35319028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 905.583629][T24769] RAX: ffffffffffffffda RBX: 00007f6e34625fa0 RCX: 00007f6e3439e019 [ 905.583646][T24769] RDX: 0000000000080000 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 905.583657][T24769] RBP: 00007f6e3443500c R08: 0000000000000000 R09: 0000000000000000 [ 905.583667][T24769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 905.583677][T24769] R13: 00007f6e34626038 R14: 00007f6e34625fa0 R15: 00007ffc355afa68 [ 905.583697][T24769] [ 908.145775][T24813] FAULT_INJECTION: forcing a failure. [ 908.145775][T24813] name failslab, interval 1, probability 0, space 0, times 0 [ 908.217353][T24813] CPU: 0 UID: 0 PID: 24813 Comm: syz.3.6538 Tainted: G L syzkaller #0 PREEMPT(full) [ 908.217381][T24813] Tainted: [L]=SOFTLOCKUP [ 908.217389][T24813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 908.217400][T24813] Call Trace: [ 908.217406][T24813] [ 908.217414][T24813] dump_stack_lvl+0x100/0x190 [ 908.217439][T24813] should_fail_ex.cold+0x5/0xa [ 908.217458][T24813] should_failslab+0xc2/0x120 [ 908.217481][T24813] __kmalloc_noprof+0xfc/0x820 [ 908.217501][T24813] ? ima_eventdigest_init_common+0x158/0x460 [ 908.217533][T24813] ? ima_write_template_field_data+0x59/0x1d0 [ 908.217563][T24813] ima_write_template_field_data+0x59/0x1d0 [ 908.217592][T24813] ima_eventname_init_common+0x1c6/0x2a0 [ 908.217620][T24813] ? __pfx_ima_eventname_init_common+0x10/0x10 [ 908.217648][T24813] ? __kmalloc_noprof+0x343/0x820 [ 908.217668][T24813] ? ima_alloc_init_template+0x19d/0x6d0 [ 908.217691][T24813] ima_alloc_init_template+0x399/0x6d0 [ 908.217716][T24813] ima_add_violation+0x128/0x3c0 [ 908.217738][T24813] ? __pfx_ima_add_violation+0x10/0x10 [ 908.217757][T24813] ? ima_d_path+0x137/0x260 [ 908.217777][T24813] ? __pfx_ima_d_path+0x10/0x10 [ 908.217800][T24813] ? lockdep_init_map_type+0x5c/0x250 [ 908.217816][T24813] ? ima_inode_get+0x39d/0x580 [ 908.217836][T24813] process_measurement+0x148f/0x2350 [ 908.217861][T24813] ? __pfx_process_measurement+0x10/0x10 [ 908.217885][T24813] ? find_held_lock+0x2b/0x80 [ 908.217921][T24813] ? __pfx_aa_file_perm+0x10/0x10 [ 908.217950][T24813] ima_file_mmap+0x1c4/0x1f0 [ 908.217969][T24813] ? __pfx_ima_file_mmap+0x10/0x10 [ 908.217992][T24813] security_mmap_file+0x278/0x9b0 [ 908.218015][T24813] vm_mmap_pgoff+0xec/0x470 [ 908.218038][T24813] ? find_held_lock+0x2b/0x80 [ 908.218056][T24813] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 908.218075][T24813] ? __fget_files+0x215/0x3d0 [ 908.218094][T24813] ? __fget_files+0x21f/0x3d0 [ 908.218113][T24813] ksys_mmap_pgoff+0x3cb/0x610 [ 908.218135][T24813] ? __x64_sys_futex+0x358/0x4d0 [ 908.218153][T24813] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 908.218173][T24813] ? xfd_validate_state+0x129/0x190 [ 908.218195][T24813] __x64_sys_mmap+0x125/0x190 [ 908.218216][T24813] do_syscall_64+0x115/0x840 [ 908.218237][T24813] ? clear_bhb_loop+0x40/0x90 [ 908.218257][T24813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.218274][T24813] RIP: 0033:0x7f1c7859e019 [ 908.218288][T24813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 908.218303][T24813] RSP: 002b:00007f1c79471028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 908.218319][T24813] RAX: ffffffffffffffda RBX: 00007f1c78825fa0 RCX: 00007f1c7859e019 [ 908.218330][T24813] RDX: 0000000000000fd5 RSI: 0000000000000001 RDI: 0000000000000000 [ 908.218340][T24813] RBP: 00007f1c7863500c R08: 0000000000000004 R09: 0000000040000000 [ 908.218350][T24813] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 908.218359][T24813] R13: 00007f1c78826038 R14: 00007f1c78825fa0 R15: 00007fff2a825618 [ 908.218381][T24813] [ 908.223474][ T30] audit: type=1804 audit(4294986274.739:23): pid=24813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.6538" name="/newroot/1592/file0" dev="tmpfs" ino=8128 res=0 errno=0 [ 913.557011][T24872] netlink: 'syz.0.6560': attribute type 1 has an invalid length. [ 913.591324][T24872] netlink: 'syz.0.6560': attribute type 6 has an invalid length. [ 913.831680][T24878] netlink: 266 bytes leftover after parsing attributes in process `syz.2.6552'. [ 914.362983][T24888] netlink: 206 bytes leftover after parsing attributes in process `syz.0.6551'. [ 914.891609][T24903] FAULT_INJECTION: forcing a failure. [ 914.891609][T24903] name failslab, interval 1, probability 0, space 0, times 0 [ 914.941348][T24903] CPU: 0 UID: 0 PID: 24903 Comm: syz.1.6562 Tainted: G L syzkaller #0 PREEMPT(full) [ 914.941377][T24903] Tainted: [L]=SOFTLOCKUP [ 914.941383][T24903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 914.941393][T24903] Call Trace: [ 914.941399][T24903] [ 914.941406][T24903] dump_stack_lvl+0x100/0x190 [ 914.941429][T24903] should_fail_ex.cold+0x5/0xa [ 914.941449][T24903] should_failslab+0xc2/0x120 [ 914.941470][T24903] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 914.941492][T24903] ? __alloc_skb+0x140/0x710 [ 914.941516][T24903] __alloc_skb+0x140/0x710 [ 914.941535][T24903] ? __alloc_skb+0x5b7/0x710 [ 914.941554][T24903] ? __pfx___alloc_skb+0x10/0x10 [ 914.941577][T24903] ? __local_bh_enable_ip+0x9e/0x120 [ 914.941597][T24903] kcm_sendmsg+0x2493/0x3120 [ 914.941691][T24903] ? aa_sk_perm+0x309/0xaa0 [ 914.941715][T24903] ? __pfx_aa_sk_perm+0x10/0x10 [ 914.941738][T24903] ? __pfx_kcm_sendmsg+0x10/0x10 [ 914.941759][T24903] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 914.941777][T24903] ? apparmor_socket_sendmsg+0x15b/0x270 [ 914.941797][T24903] sock_write_iter+0x53a/0x5b0 [ 914.941813][T24903] ? __pfx_kcm_sendmsg+0x10/0x10 [ 914.941832][T24903] ? __pfx_sock_write_iter+0x10/0x10 [ 914.941853][T24903] ? bpf_lsm_file_permission+0x9/0x10 [ 914.941868][T24903] ? security_file_permission+0x76/0x210 [ 914.941890][T24903] ? rw_verify_area+0xce/0x6d0 [ 914.941914][T24903] vfs_write+0x6ac/0x1050 [ 914.941929][T24903] ? __pfx_sock_write_iter+0x10/0x10 [ 914.941946][T24903] ? __pfx_vfs_write+0x10/0x10 [ 914.941967][T24903] ? find_held_lock+0x2b/0x80 [ 914.942001][T24903] ksys_write+0x1f8/0x250 [ 914.942016][T24903] ? __pfx_ksys_write+0x10/0x10 [ 914.942037][T24903] do_syscall_64+0x115/0x840 [ 914.942059][T24903] ? clear_bhb_loop+0x40/0x90 [ 914.942077][T24903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.942094][T24903] RIP: 0033:0x7f6e3439e019 [ 914.942109][T24903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 914.942124][T24903] RSP: 002b:00007f6e35319028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 914.942139][T24903] RAX: ffffffffffffffda RBX: 00007f6e34625fa0 RCX: 00007f6e3439e019 [ 914.942150][T24903] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000003 [ 914.942160][T24903] RBP: 00007f6e3443500c R08: 0000000000000000 R09: 0000000000000000 [ 914.942171][T24903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 914.942181][T24903] R13: 00007f6e34626038 R14: 00007f6e34625fa0 R15: 00007ffc355afa68 [ 914.942204][T24903] [ 916.482358][ T50] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 916.482397][ T50] Bluetooth: hci2: unexpected subevent 0x0e length: 725 > 15 [ 916.497588][ T50] Bluetooth: hci2: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 917.198746][T24939] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6571'. [ 918.082062][T24952] netlink: 342 bytes leftover after parsing attributes in process `syz.0.6575'. [ 918.130366][T24952] netlink: 342 bytes leftover after parsing attributes in process `syz.0.6575'. [ 918.175045][T24952] netlink: 302 bytes leftover after parsing attributes in process `syz.0.6575'. [ 918.611437][T24960] FAULT_INJECTION: forcing a failure. [ 918.611437][T24960] name failslab, interval 1, probability 0, space 0, times 0 [ 918.674295][T24960] CPU: 0 UID: 5 PID: 24960 Comm: syz.0.6584 Tainted: G L syzkaller #0 PREEMPT(full) [ 918.674324][T24960] Tainted: [L]=SOFTLOCKUP [ 918.674331][T24960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 918.674341][T24960] Call Trace: [ 918.674347][T24960] [ 918.674355][T24960] dump_stack_lvl+0x100/0x190 [ 918.674381][T24960] should_fail_ex.cold+0x5/0xa [ 918.674400][T24960] should_failslab+0xc2/0x120 [ 918.674422][T24960] kmem_cache_alloc_noprof+0x91/0x6a0 [ 918.674441][T24960] ? __proc_create+0xc1/0x8f0 [ 918.674457][T24960] ? __proc_create+0xc1/0x8f0 [ 918.674472][T24960] ? __proc_create+0x247/0x8f0 [ 918.674490][T24960] __proc_create+0x247/0x8f0 [ 918.674507][T24960] ? __pfx___proc_create+0x10/0x10 [ 918.674525][T24960] ? _raw_write_unlock+0x28/0x50 [ 918.674543][T24960] ? proc_register+0x56d/0x910 [ 918.674562][T24960] proc_create_reg+0x75/0x170 [ 918.674579][T24960] ? __pfx_fib_triestat_seq_show+0x10/0x10 [ 918.674677][T24960] proc_create_net_single+0x86/0x180 [ 918.674722][T24960] ? __pfx_proc_create_net_single+0x10/0x10 [ 918.674743][T24960] ? __pfx___netlink_kernel_create+0x10/0x10 [ 918.674767][T24960] fib_proc_init+0xa9/0x1d0 [ 918.674785][T24960] fib_net_init+0x2ed/0x440 [ 918.674802][T24960] ? is_module_address+0x69/0xf0 [ 918.674819][T24960] ? __pfx_fib_net_init+0x10/0x10 [ 918.674836][T24960] ? timer_init_key+0x150/0x310 [ 918.674857][T24960] ? __pfx_nl_fib_input+0x10/0x10 [ 918.674877][T24960] ? devinet_init_net+0x56c/0x8d0 [ 918.674898][T24960] ? __pfx_fib_net_init+0x10/0x10 [ 918.674914][T24960] ops_init+0x1e2/0x5f0 [ 918.674939][T24960] setup_net+0x118/0x3a0 [ 918.674962][T24960] ? __pfx_setup_net+0x10/0x10 [ 918.674983][T24960] ? mutex_init_lockdep+0xf1/0x120 [ 918.675002][T24960] copy_net_ns+0x46f/0x7c0 [ 918.675018][T24960] create_new_namespaces+0x3ea/0xac0 [ 918.675040][T24960] unshare_nsproxy_namespaces+0xf2/0x220 [ 918.675058][T24960] ksys_unshare+0x438/0xab0 [ 918.675079][T24960] ? __pfx_ksys_unshare+0x10/0x10 [ 918.675105][T24960] __x64_sys_unshare+0x31/0x40 [ 918.675124][T24960] do_syscall_64+0x115/0x840 [ 918.675144][T24960] ? clear_bhb_loop+0x40/0x90 [ 918.675163][T24960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.675179][T24960] RIP: 0033:0x7fdbc2b9e019 [ 918.675194][T24960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 918.675209][T24960] RSP: 002b:00007fdbc3abe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 918.675225][T24960] RAX: ffffffffffffffda RBX: 00007fdbc2e25fa0 RCX: 00007fdbc2b9e019 [ 918.675236][T24960] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 918.675245][T24960] RBP: 00007fdbc2c3500c R08: 0000000000000000 R09: 0000000000000000 [ 918.675255][T24960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 918.675264][T24960] R13: 00007fdbc2e26038 R14: 00007fdbc2e25fa0 R15: 00007fff8c05bbb8 [ 918.675284][T24960] [ 920.426763][T24998] vivid-007: ================= START STATUS ================= [ 920.479973][T24998] vivid-007: Generate PTS: true [ 920.495299][T24998] vivid-007: Generate SCR: true [ 920.514777][T24998] tpg source WxH: 320x240 (Y'CbCr) [ 920.534199][T24998] tpg field: 1 [ 920.548760][T24998] tpg crop: (0,0)/320x240 [ 920.563764][T24998] tpg compose: (0,0)/320x240 [ 920.580267][T24998] tpg colorspace: 8 [ 920.598362][T24998] tpg transfer function: 0/0 [ 920.616432][T24998] tpg Y'CbCr encoding: 0/0 [ 920.632792][T24998] tpg quantization: 0/0 [ 920.646999][T24998] tpg RGB range: 0/2 [ 920.661742][T24998] vivid-007: ================== END STATUS ================== [ 922.760389][T25035] zswap: compressor not available [ 923.622217][T25058] Process accounting paused [ 923.806596][T25062] FAULT_INJECTION: forcing a failure. [ 923.806596][T25062] name failslab, interval 1, probability 0, space 0, times 0 [ 923.880620][T25062] CPU: 0 UID: 8 PID: 25062 Comm: syz.3.6601 Tainted: G L syzkaller #0 PREEMPT(full) [ 923.880650][T25062] Tainted: [L]=SOFTLOCKUP [ 923.880656][T25062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 923.880666][T25062] Call Trace: [ 923.880673][T25062] [ 923.880680][T25062] dump_stack_lvl+0x100/0x190 [ 923.880704][T25062] should_fail_ex.cold+0x5/0xa [ 923.880723][T25062] should_failslab+0xc2/0x120 [ 923.880746][T25062] kmem_cache_alloc_noprof+0x91/0x6a0 [ 923.880766][T25062] ? cred_alloc_blank+0x1c/0xa0 [ 923.880935][T25062] cred_alloc_blank+0x1c/0xa0 [ 923.880968][T25062] keyctl_session_to_parent+0x55/0xae0 [ 923.880995][T25062] __do_sys_keyctl+0x2b1/0x5a0 [ 923.881017][T25062] do_syscall_64+0x115/0x840 [ 923.881045][T25062] ? clear_bhb_loop+0x40/0x90 [ 923.881068][T25062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.881087][T25062] RIP: 0033:0x7f1c7859e019 [ 923.881104][T25062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 923.881121][T25062] RSP: 002b:00007f1c79471028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 923.881138][T25062] RAX: ffffffffffffffda RBX: 00007f1c78825fa0 RCX: 00007f1c7859e019 [ 923.881150][T25062] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000012 [ 923.881161][T25062] RBP: 00007f1c7863500c R08: 0000000000000001 R09: 0000000000000000 [ 923.881172][T25062] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 923.881183][T25062] R13: 00007f1c78826038 R14: 00007f1c78825fa0 R15: 00007fff2a825618 [ 923.881204][T25062] [ 927.536605][T25131] No such timeout policy "" [ 927.550018][T25131] netlink: Failed to associated timeout policy '' [ 929.171695][ T50] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 929.171722][ T50] Bluetooth: hci1: unexpected subevent 0x0e length: 725 > 15 [ 929.188591][ T50] Bluetooth: hci1: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 929.345326][T25154] netlink: 17 bytes leftover after parsing attributes in process `syz.0.6626'. [ 930.754611][T25176] netlink: 'syz.3.6631': attribute type 27 has an invalid length. [ 930.804904][T25176] netlink: 'syz.3.6631': attribute type 28 has an invalid length. [ 930.833749][T25176] netlink: 'syz.3.6631': attribute type 29 has an invalid length. [ 930.870484][T25176] netlink: 'syz.3.6631': attribute type 30 has an invalid length. [ 930.899770][T25176] netlink: 'syz.3.6631': attribute type 31 has an invalid length. [ 930.926169][T25176] netlink: 'syz.3.6631': attribute type 32 has an invalid length. [ 930.969516][T25176] netlink: 'syz.3.6631': attribute type 33 has an invalid length. [ 931.001156][T25176] netlink: 'syz.3.6631': attribute type 35 has an invalid length. [ 931.032174][T25176] netlink: 'syz.3.6631': attribute type 37 has an invalid length. [ 931.059299][T25176] netlink: 18 bytes leftover after parsing attributes in process `syz.3.6631'. [ 931.241030][T25184] netlink: 306 bytes leftover after parsing attributes in process `syz.3.6632'. [ 931.688117][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.697888][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.393921][T25235] FAULT_INJECTION: forcing a failure. [ 934.393921][T25235] name failslab, interval 1, probability 0, space 0, times 0 [ 934.442812][T25235] CPU: 0 UID: 0 PID: 25235 Comm: syz.0.6656 Tainted: G L syzkaller #0 PREEMPT(full) [ 934.442841][T25235] Tainted: [L]=SOFTLOCKUP [ 934.442847][T25235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 934.442858][T25235] Call Trace: [ 934.442864][T25235] [ 934.442872][T25235] dump_stack_lvl+0x100/0x190 [ 934.442896][T25235] should_fail_ex.cold+0x5/0xa [ 934.442915][T25235] should_failslab+0xc2/0x120 [ 934.442939][T25235] kmem_cache_alloc_noprof+0x91/0x6a0 [ 934.442960][T25235] ? __kernfs_new_node+0xd2/0xa10 [ 934.442979][T25235] __kernfs_new_node+0xd2/0xa10 [ 934.442994][T25235] ? kernfs_add_one+0x611/0xaa0 [ 934.443010][T25235] ? __pfx___kernfs_new_node+0x10/0x10 [ 934.443030][T25235] ? find_held_lock+0x2b/0x80 [ 934.443049][T25235] ? kernfs_root+0xee/0x2a0 [ 934.443070][T25235] ? kernfs_root+0xee/0x2a0 [ 934.443096][T25235] kernfs_new_node+0x117/0x150 [ 934.443114][T25235] __kernfs_create_file+0x53/0x350 [ 934.443136][T25235] sysfs_add_file_mode_ns+0x207/0x3c0 [ 934.443162][T25235] sysfs_create_file_ns+0x145/0x1e0 [ 934.443182][T25235] ? rcu_is_watching+0x12/0xc0 [ 934.443206][T25235] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 934.443228][T25235] ? __pfx___up_read+0x10/0x10 [ 934.443244][T25235] ? acpi_device_notify+0x464/0x500 [ 934.443386][T25235] ? kobject_put+0xb9/0x640 [ 934.443414][T25235] device_create_file+0xf2/0x1d0 [ 934.443436][T25235] device_add+0x2cb/0x1970 [ 934.443453][T25235] ? __pfx_device_add+0x10/0x10 [ 934.443475][T25235] nfc_register_device+0x41/0x3e0 [ 934.443498][T25235] nci_register_device+0x7f1/0xb80 [ 934.443516][T25235] ? __pfx_nci_register_device+0x10/0x10 [ 934.443536][T25235] ? lockdep_init_map_type+0x5c/0x250 [ 934.443554][T25235] virtual_ncidev_open+0x141/0x220 [ 934.443581][T25235] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 934.443604][T25235] misc_open+0x26d/0x450 [ 934.443622][T25235] ? __pfx_misc_open+0x10/0x10 [ 934.443638][T25235] chrdev_open+0x234/0x6a0 [ 934.443654][T25235] ? __pfx_apparmor_file_open+0x10/0x10 [ 934.443679][T25235] ? __pfx_chrdev_open+0x10/0x10 [ 934.443697][T25235] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 934.443721][T25235] do_dentry_open+0x6ab/0x14d0 [ 934.443738][T25235] ? __pfx_chrdev_open+0x10/0x10 [ 934.443758][T25235] vfs_open+0x82/0x3f0 [ 934.443781][T25235] path_openat+0x2873/0x4280 [ 934.443805][T25235] ? __pfx_path_openat+0x10/0x10 [ 934.443826][T25235] do_file_open+0x20e/0x430 [ 934.443844][T25235] ? __pfx_do_file_open+0x10/0x10 [ 934.443874][T25235] ? alloc_fd+0x471/0x7a0 [ 934.443891][T25235] ? do_getname+0x191/0x390 [ 934.443911][T25235] do_sys_openat2+0x10f/0x1e0 [ 934.443931][T25235] ? __pfx_do_sys_openat2+0x10/0x10 [ 934.443958][T25235] __x64_sys_openat+0x12d/0x210 [ 934.443979][T25235] ? __pfx___x64_sys_openat+0x10/0x10 [ 934.444007][T25235] do_syscall_64+0x115/0x840 [ 934.444027][T25235] ? clear_bhb_loop+0x40/0x90 [ 934.444046][T25235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.444062][T25235] RIP: 0033:0x7fdbc2b9e019 [ 934.444076][T25235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 934.444091][T25235] RSP: 002b:00007fdbc3abe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 934.444107][T25235] RAX: ffffffffffffffda RBX: 00007fdbc2e25fa0 RCX: 00007fdbc2b9e019 [ 934.444118][T25235] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 934.444129][T25235] RBP: 00007fdbc2c3500c R08: 0000000000000000 R09: 0000000000000000 [ 934.444139][T25235] R10: 000000000000003e R11: 0000000000000246 R12: 0000000000000000 [ 934.444148][T25235] R13: 00007fdbc2e26038 R14: 00007fdbc2e25fa0 R15: 00007fff8c05bbb8 [ 934.444170][T25235] [ 935.365453][T25260] FAULT_INJECTION: forcing a failure. [ 935.365453][T25260] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 935.473101][T25260] CPU: 0 UID: 0 PID: 25260 Comm: syz.1.6653 Tainted: G L syzkaller #0 PREEMPT(full) [ 935.473130][T25260] Tainted: [L]=SOFTLOCKUP [ 935.473137][T25260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 935.473147][T25260] Call Trace: [ 935.473153][T25260] [ 935.473159][T25260] dump_stack_lvl+0x100/0x190 [ 935.473183][T25260] should_fail_ex.cold+0x5/0xa [ 935.473200][T25260] ? prepare_alloc_pages+0x16d/0x5f0 [ 935.473225][T25260] should_fail_alloc_page+0xeb/0x140 [ 935.473248][T25260] prepare_alloc_pages+0x1f0/0x5f0 [ 935.473273][T25260] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 935.473300][T25260] ? __lock_acquire+0x49f/0x1a40 [ 935.473323][T25260] ? __css_rstat_updated+0x1ce/0x5a0 [ 935.473348][T25260] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 935.473367][T25260] ? xas_create+0x1f4/0x14e0 [ 935.473392][T25260] ? rcu_is_watching+0x12/0xc0 [ 935.473411][T25260] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 935.473431][T25260] ? find_held_lock+0x2b/0x80 [ 935.473455][T25260] ? __lock_acquire+0x49f/0x1a40 [ 935.473479][T25260] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 935.473511][T25260] ? policy_nodemask+0xed/0x4f0 [ 935.473537][T25260] alloc_pages_mpol+0x1fb/0x540 [ 935.473560][T25260] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 935.473583][T25260] ? filemap_get_entry+0x22d/0x450 [ 935.473598][T25260] ? filemap_get_entry+0x22d/0x450 [ 935.473617][T25260] folio_alloc_noprof+0x22/0x250 [ 935.473633][T25260] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 935.473659][T25260] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 935.473681][T25260] ? rcu_is_watching+0x12/0xc0 [ 935.473698][T25260] ? trace_kmalloc+0xeb/0x110 [ 935.473718][T25260] ? __kmalloc_large_node_noprof+0x5d/0x70 [ 935.473742][T25260] __filemap_get_folio_mpol+0x653/0x1320 [ 935.473763][T25260] ioctx_alloc+0x7e1/0x21a0 [ 935.473789][T25260] ? __pfx_ioctx_alloc+0x10/0x10 [ 935.473810][T25260] __x64_sys_io_setup+0xc9/0x220 [ 935.473829][T25260] do_syscall_64+0x115/0x840 [ 935.473848][T25260] ? clear_bhb_loop+0x40/0x90 [ 935.473867][T25260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.473883][T25260] RIP: 0033:0x7f6e3439e019 [ 935.473898][T25260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 935.473912][T25260] RSP: 002b:00007f6e352f8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 935.473928][T25260] RAX: ffffffffffffffda RBX: 00007f6e34626090 RCX: 00007f6e3439e019 [ 935.473938][T25260] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 935.473949][T25260] RBP: 00007f6e3443500c R08: 0000000000000000 R09: 0000000000000000 [ 935.473958][T25260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 935.473968][T25260] R13: 00007f6e34626128 R14: 00007f6e34626090 R15: 00007ffc355afa68 [ 935.473989][T25260] [ 938.537860][T25300] netlink: 25 bytes leftover after parsing attributes in process `syz.2.6663'. [ 940.101765][T25336] netlink: 354 bytes leftover after parsing attributes in process `syz.0.6671'. [ 940.366181][T25345] FAULT_INJECTION: forcing a failure. [ 940.366181][T25345] name failslab, interval 1, probability 0, space 0, times 0 [ 940.443959][T25345] CPU: 0 UID: 0 PID: 25345 Comm: syz.0.6673 Tainted: G L syzkaller #0 PREEMPT(full) [ 940.443987][T25345] Tainted: [L]=SOFTLOCKUP [ 940.443993][T25345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 940.444003][T25345] Call Trace: [ 940.444011][T25345] [ 940.444019][T25345] dump_stack_lvl+0x100/0x190 [ 940.444043][T25345] should_fail_ex.cold+0x5/0xa [ 940.444062][T25345] should_failslab+0xc2/0x120 [ 940.444086][T25345] kmem_cache_alloc_noprof+0x91/0x6a0 [ 940.444106][T25345] ? do_raw_spin_unlock+0x145/0x1e0 [ 940.444124][T25345] ? copy_process+0x2e05/0x8030 [ 940.444145][T25345] copy_process+0x2e05/0x8030 [ 940.444162][T25345] ? futex_unqueue+0x133/0x2c0 [ 940.444190][T25345] ? __pfx_copy_process+0x10/0x10 [ 940.444213][T25345] ? _copy_from_user+0x59/0xd0 [ 940.444238][T25345] kernel_clone+0x176/0x9d0 [ 940.444258][T25345] ? __pfx_kernel_clone+0x10/0x10 [ 940.444286][T25345] __do_sys_clone3+0x214/0x290 [ 940.444305][T25345] ? __pfx___do_sys_clone3+0x10/0x10 [ 940.444322][T25345] ? __pfx_clockevents_program_event+0x10/0x10 [ 940.444365][T25345] do_syscall_64+0x115/0x840 [ 940.444387][T25345] ? clear_bhb_loop+0x40/0x90 [ 940.444406][T25345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.444423][T25345] RIP: 0033:0x7fdbc2b9e019 [ 940.444437][T25345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 940.444452][T25345] RSP: 002b:00007fdbc3abdef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 940.444467][T25345] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fdbc2b9e019 [ 940.444477][T25345] RDX: 00007fdbc3abdf10 RSI: 0000000000000058 RDI: 00007fdbc3abdf10 [ 940.444487][T25345] RBP: 00007fdbc2c3500c R08: 0000000000000000 R09: 0000000000000058 [ 940.444496][T25345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 940.444505][T25345] R13: 00007fdbc2e26038 R14: 00007fdbc2e25fa0 R15: 00007fff8c05bbb8 [ 940.444525][T25345] [ 940.756923][T25347] netlink: 186 bytes leftover after parsing attributes in process `syz.2.6676'. [ 941.590714][T25375] RDS: rds_bind could not find a transport for ::ffff:172.20.20.55, load rds_tcp or rds_rdma? [ 943.301475][T25408] netlink: 354 bytes leftover after parsing attributes in process `syz.1.6693'. [ 945.193462][T25453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6709'. [ 951.918203][T25587] netlink: 178 bytes leftover after parsing attributes in process `syz.2.6748'. [ 951.964459][T25587] netlink: 178 bytes leftover after parsing attributes in process `syz.2.6748'. [ 954.217107][T25573] Process accounting resumed [ 956.409763][T25660] FAULT_INJECTION: forcing a failure. [ 956.409763][T25660] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 956.492085][T25660] CPU: 0 UID: 0 PID: 25660 Comm: syz.2.6769 Tainted: G L syzkaller #0 PREEMPT(full) [ 956.492115][T25660] Tainted: [L]=SOFTLOCKUP [ 956.492121][T25660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 956.492131][T25660] Call Trace: [ 956.492137][T25660] [ 956.492145][T25660] dump_stack_lvl+0x100/0x190 [ 956.492171][T25660] should_fail_ex.cold+0x5/0xa [ 956.492199][T25660] ? prepare_alloc_pages+0x16d/0x5f0 [ 956.492224][T25660] should_fail_alloc_page+0xeb/0x140 [ 956.492248][T25660] prepare_alloc_pages+0x1f0/0x5f0 [ 956.492274][T25660] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 956.492296][T25660] ? do_raw_spin_unlock+0x145/0x1e0 [ 956.492316][T25660] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 956.492340][T25660] ? rcu_is_watching+0x12/0xc0 [ 956.492359][T25660] ? trace_hrtimer_start+0x77/0x220 [ 956.492378][T25660] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 956.492406][T25660] ? __asan_memcpy+0x3c/0x60 [ 956.492426][T25660] ? __pfx_interleave_nid+0x10/0x10 [ 956.492448][T25660] ? lock_acquire+0x1b9/0x370 [ 956.492473][T25660] ? policy_nodemask+0xed/0x4f0 [ 956.492496][T25660] alloc_pages_mpol+0x1fb/0x540 [ 956.492518][T25660] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 956.492544][T25660] folio_alloc_mpol_noprof+0x36/0x260 [ 956.492570][T25660] vma_alloc_folio_noprof+0xed/0x1d0 [ 956.492594][T25660] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 956.492624][T25660] do_anonymous_page+0xb2b/0x2080 [ 956.492640][T25660] ? rcu_read_unlock+0x2d/0xb0 [ 956.492661][T25660] __handle_mm_fault+0x1d2c/0x2a00 [ 956.492679][T25660] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 956.492698][T25660] ? __pfx___handle_mm_fault+0x10/0x10 [ 956.492715][T25660] ? pte_offset_map_lock+0x174/0x320 [ 956.492735][T25660] ? find_held_lock+0x2b/0x80 [ 956.492759][T25660] ? follow_page_pte+0x4d0/0x13f0 [ 956.492785][T25660] handle_mm_fault+0x37b/0xa30 [ 956.492804][T25660] __get_user_pages+0x1178/0x32a0 [ 956.492833][T25660] ? __pfx___get_user_pages+0x10/0x10 [ 956.492859][T25660] populate_vma_page_range+0x267/0x3f0 [ 956.492883][T25660] ? __pfx_populate_vma_page_range+0x10/0x10 [ 956.492908][T25660] ? __pfx_find_vma_intersection+0x10/0x10 [ 956.492930][T25660] ? do_mmap+0x93f/0x12f0 [ 956.492953][T25660] __mm_populate+0x107/0x3a0 [ 956.492978][T25660] ? __pfx___mm_populate+0x10/0x10 [ 956.493003][T25660] ? up_write+0x2e5/0x5c0 [ 956.493021][T25660] vm_mmap_pgoff+0x37f/0x470 [ 956.493044][T25660] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 956.493068][T25660] ? __pfx_do_futex+0x10/0x10 [ 956.493084][T25660] ? _raw_spin_unlock+0x28/0x50 [ 956.493104][T25660] ksys_mmap_pgoff+0xe4/0x610 [ 956.493125][T25660] ? __x64_sys_futex+0x358/0x4d0 [ 956.493142][T25660] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 956.493162][T25660] ? xfd_validate_state+0x129/0x190 [ 956.493196][T25660] __x64_sys_mmap+0x125/0x190 [ 956.493218][T25660] do_syscall_64+0x115/0x840 [ 956.493239][T25660] ? clear_bhb_loop+0x40/0x90 [ 956.493258][T25660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.493274][T25660] RIP: 0033:0x7f938639e019 [ 956.493288][T25660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 956.493303][T25660] RSP: 002b:00007f9387257028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 956.493318][T25660] RAX: ffffffffffffffda RBX: 00007f9386625fa0 RCX: 00007f938639e019 [ 956.493328][T25660] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 956.493338][T25660] RBP: 00007f938643500c R08: 0000000000000002 R09: 0000000000008000 [ 956.493348][T25660] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 956.493358][T25660] R13: 00007f9386626038 R14: 00007f9386625fa0 R15: 00007ffe54edd0f8 [ 956.493378][T25660] [ 956.892239][T25655] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 2412388448 out of range (51000000..2150000000) [ 957.230066][ T50] Bluetooth: hci0: ISO packet too small [ 961.483149][ T5635] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 962.470051][T25753] sysfs_service_op_show: Client not running :-5: [ 965.267964][T25785] netlink: 330 bytes leftover after parsing attributes in process `syz.0.6806'. [ 965.442676][T25785] gretap0: refused to change device tx_queue_len [ 966.231434][ T30] audit: type=1807 audit(4294986332.729:24): UNKNOWN=ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ [ 966.233209][ T30] audit: type=1802 audit(4294986332.749:25): pid=25807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.6803" res=0 errno=0 [ 966.360948][T25805] ima: policy update failed [ 966.371307][T25810] random: crng reseeded on system resumption [ 966.583109][T25815] netlink: 330 bytes leftover after parsing attributes in process `syz.1.6807'. [ 966.651713][T25814] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 966.992627][ T30] audit: type=1802 audit(4294986332.909:26): pid=25805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.6803" res=0 errno=0 [ 968.294266][T25853] FAULT_INJECTION: forcing a failure. [ 968.294266][T25853] name failslab, interval 1, probability 0, space 0, times 0 [ 968.349317][T25853] CPU: 0 UID: 0 PID: 25853 Comm: syz.0.6816 Tainted: G L syzkaller #0 PREEMPT(full) [ 968.349352][T25853] Tainted: [L]=SOFTLOCKUP [ 968.349358][T25853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 968.349370][T25853] Call Trace: [ 968.349376][T25853] [ 968.349383][T25853] dump_stack_lvl+0x100/0x190 [ 968.349407][T25853] should_fail_ex.cold+0x5/0xa [ 968.349427][T25853] should_failslab+0xc2/0x120 [ 968.349449][T25853] __kmalloc_cache_noprof+0x91/0x6c0 [ 968.349467][T25853] ? drm_atomic_commit_alloc+0xb8/0x120 [ 968.349609][T25853] drm_atomic_commit_alloc+0xb8/0x120 [ 968.349631][T25853] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 968.349715][T25853] ? trace_contention_end+0x126/0x160 [ 968.349733][T25853] ? __mutex_lock+0x26d/0x1bd0 [ 968.349756][T25853] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 968.349781][T25853] ? drm_master_internal_acquire+0x21/0x80 [ 968.349823][T25853] drm_client_modeset_commit_locked+0x14d/0x580 [ 968.349851][T25853] drm_client_modeset_commit+0x4f/0x80 [ 968.349874][T25853] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 968.349944][T25853] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 968.349970][T25853] drm_fbdev_client_restore+0x1b/0x30 [ 968.350012][T25853] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 968.350030][T25853] drm_client_dev_restore+0x205/0x2a0 [ 968.350059][T25853] drm_release+0x2c6/0x360 [ 968.350158][T25853] ? __pfx_drm_release+0x10/0x10 [ 968.350180][T25853] __fput+0x3ff/0xb50 [ 968.350204][T25853] task_work_run+0x150/0x240 [ 968.350228][T25853] ? __pfx_task_work_run+0x10/0x10 [ 968.350256][T25853] exit_to_user_mode_loop+0x1d8/0x6f0 [ 968.350272][T25853] ? rcu_is_watching+0x12/0xc0 [ 968.350292][T25853] do_syscall_64+0x652/0x840 [ 968.350311][T25853] ? clear_bhb_loop+0x40/0x90 [ 968.350338][T25853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.350355][T25853] RIP: 0033:0x7fdbc2b9e019 [ 968.350371][T25853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 968.350386][T25853] RSP: 002b:00007fdbc3abe028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 968.350404][T25853] RAX: 0000000000000000 RBX: 00007fdbc2e25fa0 RCX: 00007fdbc2b9e019 [ 968.350414][T25853] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 968.350424][T25853] RBP: 00007fdbc2c3500c R08: 0000000000000000 R09: 0000000000000000 [ 968.350434][T25853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 968.350444][T25853] R13: 00007fdbc2e26038 R14: 00007fdbc2e25fa0 R15: 00007fff8c05bbb8 [ 968.350465][T25853] [ 970.439993][T25883] netlink: 334 bytes leftover after parsing attributes in process `syz.3.6821'. [ 972.813664][T25924] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6833'. [ 973.723028][T25947] random: crng reseeded on system resumption [ 975.752513][T25979] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6850'. [ 976.881508][T25997] netlink: 342 bytes leftover after parsing attributes in process `syz.1.6846'. [ 979.966400][T26048] sysfs_service_op_show: Client not running :-5: [ 980.114315][ T30] audit: type=1807 audit(4294986346.629:27): UNKNOWN=ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ [ 980.114522][ T30] audit: type=1802 audit(4294986346.629:28): pid=26052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.6859" res=0 errno=0 [ 980.263767][T26046] ima: policy update failed [ 980.604131][ T30] audit: type=1802 audit(4294986346.809:29): pid=26046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.6859" res=0 errno=0 [ 983.518900][T26111] ima: policy update failed [ 983.547651][ T30] audit: type=1802 audit(4294986350.069:30): pid=26111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.6871" res=0 errno=0 [ 984.331680][T26096] Process accounting paused [ 985.842484][T26145] ima: policy update failed [ 985.861943][ T30] audit: type=1802 audit(4294986352.379:31): pid=26145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.6882" res=0 errno=0 [ 987.040606][T26183] FAULT_INJECTION: forcing a failure. [ 987.040606][T26183] name failslab, interval 1, probability 0, space 0, times 0 [ 987.210309][T26183] CPU: 0 UID: 0 PID: 26183 Comm: syz.1.6891 Tainted: G L syzkaller #0 PREEMPT(full) [ 987.210338][T26183] Tainted: [L]=SOFTLOCKUP [ 987.210344][T26183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 987.210354][T26183] Call Trace: [ 987.210360][T26183] [ 987.210367][T26183] dump_stack_lvl+0x100/0x190 [ 987.210392][T26183] should_fail_ex.cold+0x5/0xa [ 987.210411][T26183] should_failslab+0xc2/0x120 [ 987.210433][T26183] __kmalloc_cache_noprof+0x91/0x6c0 [ 987.210451][T26183] ? percpu_ref_init+0xec/0x3f0 [ 987.210474][T26183] ? __pfx_io_ring_ctx_ref_free+0x10/0x10 [ 987.210494][T26183] percpu_ref_init+0xec/0x3f0 [ 987.210518][T26183] io_uring_setup.cold+0x2be/0x1c2e [ 987.210541][T26183] ? ksys_write+0x190/0x250 [ 987.210556][T26183] ? ksys_write+0x190/0x250 [ 987.210570][T26183] ? __pfx_io_uring_setup+0x10/0x10 [ 987.210666][T26183] ? do_futex+0x190/0x440 [ 987.210684][T26183] ? __pfx_do_futex+0x10/0x10 [ 987.210711][T26183] ? xfd_validate_state+0x129/0x190 [ 987.210735][T26183] __x64_sys_io_uring_setup+0xc2/0x170 [ 987.210753][T26183] do_syscall_64+0x115/0x840 [ 987.210774][T26183] ? clear_bhb_loop+0x40/0x90 [ 987.210793][T26183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.210810][T26183] RIP: 0033:0x7f6e3439e019 [ 987.210824][T26183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 987.210839][T26183] RSP: 002b:00007f6e352f8028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 987.210854][T26183] RAX: ffffffffffffffda RBX: 00007f6e34626090 RCX: 00007f6e3439e019 [ 987.210865][T26183] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000086 [ 987.210874][T26183] RBP: 00007f6e3443500c R08: 0000000000000000 R09: 0000000000000000 [ 987.210884][T26183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 987.210894][T26183] R13: 00007f6e34626128 R14: 00007f6e34626090 R15: 00007ffc355afa68 [ 987.210914][T26183] [ 989.966298][T26228] ovs_: entered promiscuous mode [ 990.020235][T26232] HfR: entered promiscuous mode [ 991.252979][T26245] netlink: 330 bytes leftover after parsing attributes in process `syz.2.6905'. [ 991.517992][T26254] FAULT_INJECTION: forcing a failure. [ 991.517992][T26254] name failslab, interval 1, probability 0, space 0, times 0 [ 991.602095][T26254] CPU: 0 UID: 0 PID: 26254 Comm: syz.1.6909 Tainted: G L syzkaller #0 PREEMPT(full) [ 991.602123][T26254] Tainted: [L]=SOFTLOCKUP [ 991.602129][T26254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 991.602139][T26254] Call Trace: [ 991.602146][T26254] [ 991.602152][T26254] dump_stack_lvl+0x100/0x190 [ 991.602175][T26254] should_fail_ex.cold+0x5/0xa [ 991.602194][T26254] should_failslab+0xc2/0x120 [ 991.602217][T26254] kmem_cache_alloc_noprof+0x91/0x6a0 [ 991.602237][T26254] ? seq_open+0x55/0x170 [ 991.602280][T26254] seq_open+0x55/0x170 [ 991.602301][T26254] __seq_open_private+0x3e/0xd0 [ 991.602329][T26254] seq_open_net+0x1ab/0x2a0 [ 991.602346][T26254] ? __pfx_seq_open_net+0x10/0x10 [ 991.602364][T26254] proc_reg_open+0x2ab/0x5f0 [ 991.602381][T26254] do_dentry_open+0x6ab/0x14d0 [ 991.602396][T26254] ? __pfx_proc_reg_open+0x10/0x10 [ 991.602415][T26254] vfs_open+0x82/0x3f0 [ 991.602436][T26254] path_openat+0x2873/0x4280 [ 991.602460][T26254] ? __pfx_path_openat+0x10/0x10 [ 991.602481][T26254] do_file_open+0x20e/0x430 [ 991.602498][T26254] ? __pfx_do_file_open+0x10/0x10 [ 991.602520][T26254] ? __pfx_kfree_link+0x10/0x10 [ 991.602547][T26254] ? alloc_fd+0x471/0x7a0 [ 991.602563][T26254] ? do_getname+0x191/0x390 [ 991.602584][T26254] do_sys_openat2+0x10f/0x1e0 [ 991.602604][T26254] ? __pfx_do_sys_openat2+0x10/0x10 [ 991.602625][T26254] ? __fget_files+0x21f/0x3d0 [ 991.602643][T26254] __x64_sys_openat+0x12d/0x210 [ 991.602663][T26254] ? __pfx___x64_sys_openat+0x10/0x10 [ 991.602691][T26254] do_syscall_64+0x115/0x840 [ 991.602712][T26254] ? clear_bhb_loop+0x40/0x90 [ 991.602730][T26254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.602746][T26254] RIP: 0033:0x7f6e3439e019 [ 991.602760][T26254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 991.602776][T26254] RSP: 002b:00007f6e35319028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 991.602792][T26254] RAX: ffffffffffffffda RBX: 00007f6e34625fa0 RCX: 00007f6e3439e019 [ 991.602802][T26254] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 991.602812][T26254] RBP: 00007f6e3443500c R08: 0000000000000000 R09: 0000000000000000 [ 991.602821][T26254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 991.602830][T26254] R13: 00007f6e34626038 R14: 00007f6e34625fa0 R15: 00007ffc355afa68 [ 991.602850][T26254] [ 993.131725][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.141322][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.125990][T26315] FAULT_INJECTION: forcing a failure. [ 995.125990][T26315] name failslab, interval 1, probability 0, space 0, times 0 [ 995.190610][T26315] CPU: 0 UID: 0 PID: 26315 Comm: syz.1.6923 Tainted: G L syzkaller #0 PREEMPT(full) [ 995.190638][T26315] Tainted: [L]=SOFTLOCKUP [ 995.190644][T26315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 995.190654][T26315] Call Trace: [ 995.190660][T26315] [ 995.190667][T26315] dump_stack_lvl+0x100/0x190 [ 995.190692][T26315] should_fail_ex.cold+0x5/0xa [ 995.190711][T26315] should_failslab+0xc2/0x120 [ 995.190734][T26315] kmem_cache_alloc_noprof+0x91/0x6a0 [ 995.190757][T26315] ? __anon_vma_prepare+0x344/0x5e0 [ 995.190776][T26315] __anon_vma_prepare+0x344/0x5e0 [ 995.190791][T26315] ? rcu_read_unlock+0x2d/0xb0 [ 995.190809][T26315] __vmf_anon_prepare+0x11f/0x250 [ 995.190832][T26315] do_wp_page+0xc78/0x4350 [ 995.190859][T26315] ? __pfx_do_wp_page+0x10/0x10 [ 995.190883][T26315] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 995.190906][T26315] __handle_mm_fault+0x1ab6/0x2a00 [ 995.190924][T26315] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 995.190943][T26315] ? __pfx___handle_mm_fault+0x10/0x10 [ 995.190960][T26315] ? pte_offset_map_lock+0x174/0x320 [ 995.190981][T26315] ? find_held_lock+0x2b/0x80 [ 995.191005][T26315] ? follow_page_pte+0x4d0/0x13f0 [ 995.191030][T26315] handle_mm_fault+0x37b/0xa30 [ 995.191049][T26315] __get_user_pages+0x1178/0x32a0 [ 995.191075][T26315] ? down_read_killable+0x35e/0x520 [ 995.191100][T26315] ? __pfx___get_user_pages+0x10/0x10 [ 995.191127][T26315] __gup_longterm_locked+0x87d/0x16f0 [ 995.191152][T26315] ? kernel_text_address+0x8d/0x100 [ 995.191179][T26315] ? __pfx___gup_longterm_locked+0x10/0x10 [ 995.191205][T26315] ? find_held_lock+0x2b/0x80 [ 995.191224][T26315] ? gup_fast_fallback+0x7e8/0x2790 [ 995.191250][T26315] gup_fast_fallback+0x16dc/0x2790 [ 995.191285][T26315] ? __pfx_gup_fast_fallback+0x10/0x10 [ 995.191316][T26315] get_user_pages_fast+0xa7/0xf0 [ 995.191338][T26315] ? __pfx_get_user_pages_fast+0x10/0x10 [ 995.191365][T26315] get_futex_key+0x2c8/0x14f0 [ 995.191383][T26315] ? __pfx_get_futex_key+0x10/0x10 [ 995.191398][T26315] ? refill_pi_state_cache+0x91/0x260 [ 995.191423][T26315] futex_lock_pi+0x1eb/0x7f0 [ 995.191445][T26315] ? __pfx_futex_lock_pi+0x10/0x10 [ 995.191488][T26315] ? __pfx___futex_wait+0x10/0x10 [ 995.191533][T26315] ? __pfx_futex_wake_mark+0x10/0x10 [ 995.191559][T26315] ? rcu_read_lock_any_held+0x6a/0xa0 [ 995.191581][T26315] ? vfs_write+0x15d/0x1050 [ 995.191600][T26315] do_futex+0x371/0x440 [ 995.191619][T26315] ? __pfx_do_futex+0x10/0x10 [ 995.191635][T26315] ? __pfx_do_sys_openat2+0x10/0x10 [ 995.191660][T26315] __x64_sys_futex+0x34f/0x4d0 [ 995.191680][T26315] ? __pfx___x64_sys_futex+0x10/0x10 [ 995.191704][T26315] do_syscall_64+0x115/0x840 [ 995.191724][T26315] ? clear_bhb_loop+0x40/0x90 [ 995.191742][T26315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.191759][T26315] RIP: 0033:0x7f6e3439e019 [ 995.191773][T26315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 995.191789][T26315] RSP: 002b:00007f6e35319028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 995.191805][T26315] RAX: ffffffffffffffda RBX: 00007f6e34625fa0 RCX: 00007f6e3439e019 [ 995.191817][T26315] RDX: 0000000000000006 RSI: 0000000000000006 RDI: 0000000000000000 [ 995.191827][T26315] RBP: 00007f6e3443500c R08: 0000000000000000 R09: 000000008000fff7 [ 995.191837][T26315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 995.191847][T26315] R13: 00007f6e34626038 R14: 00007f6e34625fa0 R15: 00007ffc355afa68 [ 995.191867][T26315] [ 997.044074][T26338] netlink: 186 bytes leftover after parsing attributes in process `syz.2.6929'. [ 998.790708][T26353] netlink: 504 bytes leftover after parsing attributes in process `syz.3.6934'. [ 998.873754][T26353] netlink: 350 bytes leftover after parsing attributes in process `syz.3.6934'. [ 999.449371][T26369] lo: entered allmulticast mode [ 999.584137][T26369] lo: left allmulticast mode [ 1000.742953][T26384] sd 0:0:1:0: PR command failed: 1026 [ 1000.763607][T26384] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1000.794723][T26384] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1007.421594][T26503] FAULT_INJECTION: forcing a failure. [ 1007.421594][T26503] name failslab, interval 1, probability 0, space 0, times 0 [ 1007.445042][T26502] FAULT_INJECTION: forcing a failure. [ 1007.445042][T26502] name failslab, interval 1, probability 0, space 0, times 0 [ 1007.474800][T26503] CPU: 0 UID: 0 PID: 26503 Comm: syz.1.6970 Tainted: G L syzkaller #0 PREEMPT(full) [ 1007.474836][T26503] Tainted: [L]=SOFTLOCKUP [ 1007.474842][T26503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1007.474852][T26503] Call Trace: [ 1007.474859][T26503] [ 1007.474865][T26503] dump_stack_lvl+0x100/0x190 [ 1007.474889][T26503] should_fail_ex.cold+0x5/0xa [ 1007.474908][T26503] should_failslab+0xc2/0x120 [ 1007.474931][T26503] __kmalloc_cache_noprof+0x91/0x6c0 [ 1007.474947][T26503] ? kasan_save_track+0x14/0x30 [ 1007.474966][T26503] ? wakeup_source_device_create+0x46/0x2e0 [ 1007.475077][T26503] wakeup_source_device_create+0x46/0x2e0 [ 1007.475095][T26503] wakeup_source_sysfs_add+0x1c/0x90 [ 1007.475111][T26503] wakeup_source_register+0x154/0x3e0 [ 1007.475135][T26503] ep_create_wakeup_source+0x1df/0x2e0 [ 1007.475154][T26503] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 1007.475173][T26503] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 1007.475191][T26503] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 1007.475213][T26503] do_epoll_ctl_file+0x1e26/0x36e0 [ 1007.475237][T26503] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 1007.475259][T26503] ? __fget_files+0x215/0x3d0 [ 1007.475276][T26503] ? __fget_files+0x21f/0x3d0 [ 1007.475295][T26503] ? do_epoll_ctl+0xfd/0x1a0 [ 1007.475311][T26503] do_epoll_ctl+0xfd/0x1a0 [ 1007.475329][T26503] ? __pfx_do_epoll_ctl+0x10/0x10 [ 1007.475352][T26503] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 1007.475371][T26503] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 1007.475394][T26503] do_syscall_64+0x115/0x840 [ 1007.475415][T26503] ? clear_bhb_loop+0x40/0x90 [ 1007.475433][T26503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.475449][T26503] RIP: 0033:0x7f6e3439e019 [ 1007.475464][T26503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1007.475479][T26503] RSP: 002b:00007f6e35319028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1007.475495][T26503] RAX: ffffffffffffffda RBX: 00007f6e34625fa0 RCX: 00007f6e3439e019 [ 1007.475505][T26503] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 1007.475514][T26503] RBP: 00007f6e3443500c R08: 0000000000000000 R09: 0000000000000000 [ 1007.475523][T26503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1007.475532][T26503] R13: 00007f6e34626038 R14: 00007f6e34625fa0 R15: 00007ffc355afa68 [ 1007.475552][T26503] [ 1007.718021][T26502] CPU: 0 UID: 0 PID: 26502 Comm: syz.3.6969 Tainted: G L syzkaller #0 PREEMPT(full) [ 1007.718050][T26502] Tainted: [L]=SOFTLOCKUP [ 1007.718056][T26502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1007.718067][T26502] Call Trace: [ 1007.718073][T26502] [ 1007.718080][T26502] dump_stack_lvl+0x100/0x190 [ 1007.718105][T26502] should_fail_ex.cold+0x5/0xa [ 1007.718124][T26502] should_failslab+0xc2/0x120 [ 1007.718146][T26502] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1007.718167][T26502] ? __anon_vma_prepare+0x344/0x5e0 [ 1007.718186][T26502] __anon_vma_prepare+0x344/0x5e0 [ 1007.718202][T26502] ? rcu_read_unlock+0x2d/0xb0 [ 1007.718220][T26502] __vmf_anon_prepare+0x11f/0x250 [ 1007.718243][T26502] do_wp_page+0xc78/0x4350 [ 1007.718270][T26502] ? __pfx_do_wp_page+0x10/0x10 [ 1007.718294][T26502] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1007.718316][T26502] __handle_mm_fault+0x1ab6/0x2a00 [ 1007.718334][T26502] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1007.718353][T26502] ? __pfx___handle_mm_fault+0x10/0x10 [ 1007.718370][T26502] ? pte_offset_map_lock+0x174/0x320 [ 1007.718390][T26502] ? find_held_lock+0x2b/0x80 [ 1007.718415][T26502] ? follow_page_pte+0x4d0/0x13f0 [ 1007.718440][T26502] handle_mm_fault+0x37b/0xa30 [ 1007.718459][T26502] __get_user_pages+0x1178/0x32a0 [ 1007.718485][T26502] ? down_read_killable+0x35e/0x520 [ 1007.718510][T26502] ? __pfx___get_user_pages+0x10/0x10 [ 1007.718536][T26502] __gup_longterm_locked+0x87d/0x16f0 [ 1007.718558][T26502] ? kernel_text_address+0x8d/0x100 [ 1007.718585][T26502] ? __pfx___gup_longterm_locked+0x10/0x10 [ 1007.718610][T26502] ? find_held_lock+0x2b/0x80 [ 1007.718627][T26502] ? gup_fast_fallback+0x7e8/0x2790 [ 1007.718653][T26502] gup_fast_fallback+0x16dc/0x2790 [ 1007.718688][T26502] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1007.718719][T26502] get_user_pages_fast+0xa7/0xf0 [ 1007.718741][T26502] ? __pfx_get_user_pages_fast+0x10/0x10 [ 1007.718767][T26502] get_futex_key+0x2c8/0x14f0 [ 1007.718785][T26502] ? __pfx_get_futex_key+0x10/0x10 [ 1007.718809][T26502] ? refill_pi_state_cache+0x91/0x260 [ 1007.718835][T26502] futex_lock_pi+0x1eb/0x7f0 [ 1007.718859][T26502] ? __pfx_futex_lock_pi+0x10/0x10 [ 1007.718881][T26502] ? __pfx___futex_wait+0x10/0x10 [ 1007.718919][T26502] ? __pfx_futex_wake_mark+0x10/0x10 [ 1007.718945][T26502] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1007.718964][T26502] ? vfs_write+0x15d/0x1050 [ 1007.718983][T26502] do_futex+0x371/0x440 [ 1007.719001][T26502] ? __pfx_do_futex+0x10/0x10 [ 1007.719016][T26502] ? __pfx_do_sys_openat2+0x10/0x10 [ 1007.719042][T26502] __x64_sys_futex+0x34f/0x4d0 [ 1007.719064][T26502] ? __pfx___x64_sys_futex+0x10/0x10 [ 1007.719088][T26502] do_syscall_64+0x115/0x840 [ 1007.719108][T26502] ? clear_bhb_loop+0x40/0x90 [ 1007.719126][T26502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.719142][T26502] RIP: 0033:0x7f1c7859e019 [ 1007.719159][T26502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1007.719175][T26502] RSP: 002b:00007f1c79471028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1007.719191][T26502] RAX: ffffffffffffffda RBX: 00007f1c78825fa0 RCX: 00007f1c7859e019 [ 1007.719201][T26502] RDX: 0000000000000006 RSI: 0000000000000006 RDI: 0000000000000000 [ 1007.719211][T26502] RBP: 00007f1c7863500c R08: 0000000000000000 R09: 000000008000fff7 [ 1007.719221][T26502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1007.719231][T26502] R13: 00007f1c78826038 R14: 00007f1c78825fa0 R15: 00007fff2a825618 [ 1007.719252][T26502] [ 1008.282823][T26509] netlink: 330 bytes leftover after parsing attributes in process `syz.3.6973'. [ 1008.400911][T26516] FAULT_INJECTION: forcing a failure. [ 1008.400911][T26516] name failslab, interval 1, probability 0, space 0, times 0 [ 1008.449566][T26516] CPU: 0 UID: 0 PID: 26516 Comm: syz.0.6974 Tainted: G L syzkaller #0 PREEMPT(full) [ 1008.449595][T26516] Tainted: [L]=SOFTLOCKUP [ 1008.449601][T26516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1008.449611][T26516] Call Trace: [ 1008.449617][T26516] [ 1008.449624][T26516] dump_stack_lvl+0x100/0x190 [ 1008.449655][T26516] should_fail_ex.cold+0x5/0xa [ 1008.449673][T26516] should_failslab+0xc2/0x120 [ 1008.449696][T26516] __kmalloc_noprof+0xfc/0x820 [ 1008.449716][T26516] ? constrain_params_by_rules+0x175/0xd20 [ 1008.449740][T26516] constrain_params_by_rules+0x175/0xd20 [ 1008.449756][T26516] ? stack_depot_save_flags+0x27/0x9d0 [ 1008.449786][T26516] ? kasan_save_stack+0x3f/0x50 [ 1008.449806][T26516] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 1008.449821][T26516] ? snd_pcm_oss_change_params_locked+0x247/0x39f0 [ 1008.449840][T26516] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 1008.449856][T26516] ? do_select+0xd54/0x1850 [ 1008.449877][T26516] ? core_sys_select+0x55b/0xbb0 [ 1008.449899][T26516] ? kern_select+0x1d0/0x280 [ 1008.449921][T26516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.449947][T26516] ? rcu_is_watching+0x12/0xc0 [ 1008.449965][T26516] ? snd_interval_refine+0x2d0/0x580 [ 1008.449988][T26516] snd_pcm_hw_refine+0x82a/0xb40 [ 1008.450007][T26516] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1008.450026][T26516] ? __kasan_kmalloc+0xaa/0xb0 [ 1008.450048][T26516] ? __asan_memset+0x23/0x50 [ 1008.450064][T26516] ? _snd_pcm_hw_param_min+0x1ea/0x670 [ 1008.450083][T26516] snd_pcm_oss_change_params_locked+0x2594/0x39f0 [ 1008.450101][T26516] ? trace_contention_end+0x126/0x160 [ 1008.450121][T26516] ? rcu_is_watching+0x12/0xc0 [ 1008.450139][T26516] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1008.450156][T26516] ? __pfx___mutex_lock+0x10/0x10 [ 1008.450176][T26516] ? __mutex_lock+0x26d/0x1bd0 [ 1008.450196][T26516] ? find_held_lock+0x2b/0x80 [ 1008.450220][T26516] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1008.450244][T26516] snd_pcm_oss_make_ready+0xeb/0x1b0 [ 1008.450263][T26516] snd_pcm_oss_set_trigger.isra.0+0x331/0x6c0 [ 1008.450283][T26516] snd_pcm_oss_poll+0x404/0xae0 [ 1008.450299][T26516] ? __pfx___pollwait+0x10/0x10 [ 1008.450322][T26516] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 1008.450337][T26516] ? __fget_files+0x21f/0x3d0 [ 1008.450355][T26516] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 1008.450372][T26516] do_select+0xd54/0x1850 [ 1008.450394][T26516] ? do_raw_spin_lock+0x128/0x260 [ 1008.450425][T26516] ? __pfx_do_select+0x10/0x10 [ 1008.450447][T26516] ? __pfx_tcp_wfree+0x10/0x10 [ 1008.450548][T26516] ? audit_to_watch+0x110/0x2b0 [ 1008.450594][T26516] ? __pfx___pollwait+0x10/0x10 [ 1008.450620][T26516] ? __pfx_pollwake+0x10/0x10 [ 1008.450651][T26516] ? __pfx_pollwake+0x10/0x10 [ 1008.450701][T26516] ? find_held_lock+0x2b/0x80 [ 1008.450720][T26516] ? __might_fault+0xc5/0x140 [ 1008.450737][T26516] ? __might_fault+0xc5/0x140 [ 1008.450778][T26516] ? core_sys_select+0x55b/0xbb0 [ 1008.450800][T26516] core_sys_select+0x55b/0xbb0 [ 1008.450828][T26516] ? __pfx_core_sys_select+0x10/0x10 [ 1008.450851][T26516] ? xdp_do_check_flushed+0x2b7/0x4a0 [ 1008.450945][T26516] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1008.450972][T26516] kern_select+0x1d0/0x280 [ 1008.450998][T26516] ? __pfx_kern_select+0x10/0x10 [ 1008.451025][T26516] ? _raw_spin_unlock+0x28/0x50 [ 1008.451046][T26516] __x64_sys_select+0xbd/0x160 [ 1008.451059][T26516] ? do_syscall_64+0x90/0x840 [ 1008.451079][T26516] ? lockdep_hardirqs_on+0x78/0x100 [ 1008.451098][T26516] do_syscall_64+0x115/0x840 [ 1008.451117][T26516] ? clear_bhb_loop+0x40/0x90 [ 1008.451136][T26516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.451152][T26516] RIP: 0033:0x7fdbc2b9e019 [ 1008.451167][T26516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1008.451182][T26516] RSP: 002b:00007fdbc3a9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1008.451198][T26516] RAX: ffffffffffffffda RBX: 00007fdbc2e26090 RCX: 00007fdbc2b9e019 [ 1008.451209][T26516] RDX: 0000200000000080 RSI: 0000000000000000 RDI: 0000000000000007 [ 1008.451220][T26516] RBP: 00007fdbc2c3500c R08: 0000000000000000 R09: 0000000000000000 [ 1008.451229][T26516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1008.451238][T26516] R13: 00007fdbc2e26128 R14: 00007fdbc2e26090 R15: 00007fff8c05bbb8 [ 1008.451259][T26516] [ 1012.331986][T26577] netlink: 186 bytes leftover after parsing attributes in process `syz.2.6989'. [ 1012.378685][T26577] netlink: 186 bytes leftover after parsing attributes in process `syz.2.6989'. [ 1012.802879][T26594] netlink: 266 bytes leftover after parsing attributes in process `syz.2.6995'. [ 1013.588192][T26624] netlink: 330 bytes leftover after parsing attributes in process `syz.2.7002'. [ 1015.029005][T26614] Process accounting resumed [ 1016.472491][T26672] FAULT_INJECTION: forcing a failure. [ 1016.472491][T26672] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1016.510093][T26672] CPU: 0 UID: 0 PID: 26672 Comm: syz.2.7014 Tainted: G L syzkaller #0 PREEMPT(full) [ 1016.510122][T26672] Tainted: [L]=SOFTLOCKUP [ 1016.510136][T26672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1016.510146][T26672] Call Trace: [ 1016.510153][T26672] [ 1016.510160][T26672] dump_stack_lvl+0x100/0x190 [ 1016.510186][T26672] should_fail_ex.cold+0x5/0xa [ 1016.510206][T26672] get_futex_key+0x1d2/0x14f0 [ 1016.510225][T26672] ? __pfx_get_futex_key+0x10/0x10 [ 1016.510247][T26672] futex_wait_setup+0x91/0x540 [ 1016.510273][T26672] __futex_wait+0x19f/0x300 [ 1016.510295][T26672] ? __pfx___futex_wait+0x10/0x10 [ 1016.510315][T26672] ? futex_hash+0x311/0x400 [ 1016.510331][T26672] ? __pfx_futex_wake_mark+0x10/0x10 [ 1016.510356][T26672] ? __pfx_futex_hash+0x10/0x10 [ 1016.510371][T26672] ? __lock_acquire+0x49f/0x1a40 [ 1016.510398][T26672] futex_wait+0xe6/0x370 [ 1016.510418][T26672] ? __pfx_futex_wait+0x10/0x10 [ 1016.510448][T26672] do_futex+0x265/0x440 [ 1016.510466][T26672] ? __pfx_do_futex+0x10/0x10 [ 1016.510482][T26672] ? do_epoll_ctl+0x12e/0x1a0 [ 1016.510504][T26672] __x64_sys_futex+0x34f/0x4d0 [ 1016.510523][T26672] ? __pfx___x64_sys_futex+0x10/0x10 [ 1016.510541][T26672] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 1016.510565][T26672] do_syscall_64+0x115/0x840 [ 1016.510585][T26672] ? clear_bhb_loop+0x40/0x90 [ 1016.510604][T26672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.510620][T26672] RIP: 0033:0x7f938639e019 [ 1016.510635][T26672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1016.510650][T26672] RSP: 002b:00007f93872570e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1016.510666][T26672] RAX: ffffffffffffffda RBX: 00007f9386625fa8 RCX: 00007f938639e019 [ 1016.510683][T26672] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9386625fa8 [ 1016.510694][T26672] RBP: 00007f9386625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1016.510703][T26672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1016.510713][T26672] R13: 00007f9386626038 R14: 00007ffe54edd010 R15: 00007ffe54edd0f8 [ 1016.510733][T26672] [ 1017.171325][T26674] FAULT_INJECTION: forcing a failure. [ 1017.171325][T26674] name failslab, interval 1, probability 0, space 0, times 0 [ 1017.185887][T26674] CPU: 0 UID: 0 PID: 26674 Comm: syz.3.7015 Tainted: G L syzkaller #0 PREEMPT(full) [ 1017.185915][T26674] Tainted: [L]=SOFTLOCKUP [ 1017.185921][T26674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1017.185931][T26674] Call Trace: [ 1017.185938][T26674] [ 1017.185947][T26674] dump_stack_lvl+0x100/0x190 [ 1017.185970][T26674] should_fail_ex.cold+0x5/0xa [ 1017.185990][T26674] should_failslab+0xc2/0x120 [ 1017.186012][T26674] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1017.186032][T26674] ? inet_bind2_bucket_create+0x36/0x5f0 [ 1017.186061][T26674] inet_bind2_bucket_create+0x36/0x5f0 [ 1017.186086][T26674] __inet_hash_connect+0x1527/0x2000 [ 1017.186117][T26674] ? __pfx___inet_check_established+0x10/0x10 [ 1017.186143][T26674] ? __pfx___inet_hash_connect+0x10/0x10 [ 1017.186162][T26674] ? inet_init_ehash_secret+0xd/0x60 [ 1017.186185][T26674] ? inet_hash_connect+0x9f/0x340 [ 1017.186202][T26674] tcp_v4_connect+0xeb3/0x1b40 [ 1017.186309][T26674] ? __pfx_tcp_v4_connect+0x10/0x10 [ 1017.186332][T26674] ? __lock_acquire+0x49f/0x1a40 [ 1017.186360][T26674] __inet_stream_connect+0x208/0xfa0 [ 1017.186386][T26674] ? __pfx___inet_stream_connect+0x10/0x10 [ 1017.186406][T26674] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1017.186425][T26674] ? __pfx_inet_stream_connect+0x10/0x10 [ 1017.186446][T26674] ? __local_bh_enable_ip+0x9e/0x120 [ 1017.186467][T26674] ? __pfx_inet_stream_connect+0x10/0x10 [ 1017.186486][T26674] inet_stream_connect+0x57/0xa0 [ 1017.186508][T26674] __sys_connect_file+0x141/0x1a0 [ 1017.186531][T26674] __sys_connect+0x141/0x170 [ 1017.186550][T26674] ? __pfx___sys_connect+0x10/0x10 [ 1017.186581][T26674] __x64_sys_connect+0x72/0xb0 [ 1017.186599][T26674] ? lockdep_hardirqs_on+0x78/0x100 [ 1017.186620][T26674] do_syscall_64+0x115/0x840 [ 1017.186640][T26674] ? clear_bhb_loop+0x40/0x90 [ 1017.186660][T26674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.186677][T26674] RIP: 0033:0x7f1c7859e019 [ 1017.186692][T26674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1017.186708][T26674] RSP: 002b:00007f1c79471028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1017.186725][T26674] RAX: ffffffffffffffda RBX: 00007f1c78825fa0 RCX: 00007f1c7859e019 [ 1017.186735][T26674] RDX: 0000000000000051 RSI: 0000200000000080 RDI: 0000000000000003 [ 1017.186746][T26674] RBP: 00007f1c7863500c R08: 0000000000000000 R09: 0000000000000000 [ 1017.186756][T26674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1017.186766][T26674] R13: 00007f1c78826038 R14: 00007f1c78825fa0 R15: 00007fff2a825618 [ 1017.186787][T26674] [ 1018.398163][T26692] netlink: 504 bytes leftover after parsing attributes in process `syz.1.7022'. [ 1018.934877][T26708] netlink: 330 bytes leftover after parsing attributes in process `syz.3.7025'. [ 1018.989690][T26698] netlink: 326 bytes leftover after parsing attributes in process `syz.0.7031'. [ 1019.034390][T26708] netdevsim netdevsim3 ›: renamed from netdevsim0 (while UP) [ 1019.137599][T26708] netlink: 330 bytes leftover after parsing attributes in process `syz.3.7025'. [ 1019.588787][T26726] FAULT_INJECTION: forcing a failure. [ 1019.588787][T26726] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1019.616848][T26726] CPU: 0 UID: 0 PID: 26726 Comm: syz.0.7030 Tainted: G L syzkaller #0 PREEMPT(full) [ 1019.616876][T26726] Tainted: [L]=SOFTLOCKUP [ 1019.616882][T26726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1019.616892][T26726] Call Trace: [ 1019.616899][T26726] [ 1019.616906][T26726] dump_stack_lvl+0x100/0x190 [ 1019.616941][T26726] should_fail_ex.cold+0x5/0xa [ 1019.616960][T26726] get_futex_key+0x1d2/0x14f0 [ 1019.616980][T26726] ? __pfx_get_futex_key+0x10/0x10 [ 1019.617002][T26726] futex_wait_setup+0x91/0x540 [ 1019.617027][T26726] __futex_wait+0x19f/0x300 [ 1019.617049][T26726] ? __pfx___futex_wait+0x10/0x10 [ 1019.617069][T26726] ? futex_hash+0x311/0x400 [ 1019.617086][T26726] ? __pfx_futex_wake_mark+0x10/0x10 [ 1019.617109][T26726] ? __pfx_futex_hash+0x10/0x10 [ 1019.617123][T26726] ? __lock_acquire+0x49f/0x1a40 [ 1019.617151][T26726] futex_wait+0xe6/0x370 [ 1019.617171][T26726] ? __pfx_futex_wait+0x10/0x10 [ 1019.617195][T26726] ? inet_stream_connect+0x79/0xa0 [ 1019.617217][T26726] ? __local_bh_enable_ip+0x9e/0x120 [ 1019.617238][T26726] do_futex+0x265/0x440 [ 1019.617255][T26726] ? __pfx_do_futex+0x10/0x10 [ 1019.617274][T26726] ? __sys_connect+0xe4/0x170 [ 1019.617297][T26726] __x64_sys_futex+0x34f/0x4d0 [ 1019.617316][T26726] ? __pfx___x64_sys_futex+0x10/0x10 [ 1019.617340][T26726] do_syscall_64+0x115/0x840 [ 1019.617360][T26726] ? clear_bhb_loop+0x40/0x90 [ 1019.617378][T26726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.617394][T26726] RIP: 0033:0x7fdbc2b9e019 [ 1019.617409][T26726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1019.617424][T26726] RSP: 002b:00007fdbc3abe0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1019.617439][T26726] RAX: ffffffffffffffda RBX: 00007fdbc2e25fa8 RCX: 00007fdbc2b9e019 [ 1019.617450][T26726] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdbc2e25fa8 [ 1019.617460][T26726] RBP: 00007fdbc2e25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1019.617469][T26726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1019.617479][T26726] R13: 00007fdbc2e26038 R14: 00007fff8c05bad0 R15: 00007fff8c05bbb8 [ 1019.617499][T26726] [ 1020.731497][ T30] audit: type=1800 audit(4294986387.249:32): pid=26736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7033" name="trace_marker" dev="tracefs" ino=1902 res=0 errno=0 [ 1021.326868][T26760] netlink: 330 bytes leftover after parsing attributes in process `syz.1.7039'. [ 1021.474038][T26760] netdevsim netdevsim1 ›: renamed from netdevsim0 (while UP) [ 1021.620791][T26760] netlink: 330 bytes leftover after parsing attributes in process `syz.1.7039'. [ 1026.539995][T26817] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1029.502630][T26873] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1031.067264][T26916] futex_wake_op: syz.2.7077 tries to shift op by -2048; fix this program [ 1031.095688][T26916] futex_wake_op: syz.2.7077 tries to shift op by -2048; fix this program [ 1032.340013][T26928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7081'. [ 1033.230851][T26944] FAULT_INJECTION: forcing a failure. [ 1033.230851][T26944] name failslab, interval 1, probability 0, space 0, times 0 [ 1033.282676][T26944] CPU: 0 UID: 0 PID: 26944 Comm: syz.0.7084 Tainted: G L syzkaller #0 PREEMPT(full) [ 1033.282713][T26944] Tainted: [L]=SOFTLOCKUP [ 1033.282724][T26944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1033.282736][T26944] Call Trace: [ 1033.282742][T26944] [ 1033.282750][T26944] dump_stack_lvl+0x100/0x190 [ 1033.282774][T26944] should_fail_ex.cold+0x5/0xa [ 1033.282793][T26944] should_failslab+0xc2/0x120 [ 1033.282816][T26944] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1033.282835][T26944] ? __lock_acquire+0x49f/0x1a40 [ 1033.282865][T26944] ? ep_ptable_queue_proc+0x5b/0x280 [ 1033.282890][T26944] ep_ptable_queue_proc+0x5b/0x280 [ 1033.282907][T26944] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 1033.282922][T26944] snd_seq_oss_readq_poll+0x56/0xa0 [ 1033.283036][T26944] snd_seq_oss_poll+0x122/0x1d0 [ 1033.283054][T26944] ? __pfx_odev_poll+0x10/0x10 [ 1033.283105][T26944] odev_poll+0x4a/0x90 [ 1033.283137][T26944] ep_item_poll+0x141/0x1f0 [ 1033.283155][T26944] do_epoll_ctl_file+0x1e6e/0x36e0 [ 1033.283180][T26944] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 1033.283200][T26944] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 1033.283216][T26944] ? __fget_files+0x215/0x3d0 [ 1033.283233][T26944] ? __fget_files+0x21f/0x3d0 [ 1033.283252][T26944] ? do_epoll_ctl+0xfd/0x1a0 [ 1033.283268][T26944] do_epoll_ctl+0xfd/0x1a0 [ 1033.283286][T26944] ? __pfx_do_epoll_ctl+0x10/0x10 [ 1033.283309][T26944] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 1033.283328][T26944] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 1033.283352][T26944] do_syscall_64+0x115/0x840 [ 1033.283373][T26944] ? clear_bhb_loop+0x40/0x90 [ 1033.283392][T26944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.283409][T26944] RIP: 0033:0x7fdbc2b9e019 [ 1033.283425][T26944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1033.283440][T26944] RSP: 002b:00007fdbc3abe028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1033.283461][T26944] RAX: ffffffffffffffda RBX: 00007fdbc2e25fa0 RCX: 00007fdbc2b9e019 [ 1033.283473][T26944] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 1033.283483][T26944] RBP: 00007fdbc2c3500c R08: 0000000000000000 R09: 0000000000000000 [ 1033.283492][T26944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1033.283502][T26944] R13: 00007fdbc2e26038 R14: 00007fdbc2e25fa0 R15: 00007fff8c05bbb8 [ 1033.283523][T26944] [ 1036.542080][T26995] FAULT_INJECTION: forcing a failure. [ 1036.542080][T26995] name failslab, interval 1, probability 0, space 0, times 0 [ 1036.821539][T26995] CPU: 0 UID: 0 PID: 26995 Comm: syz.3.7095 Tainted: G L syzkaller #0 PREEMPT(full) [ 1036.821568][T26995] Tainted: [L]=SOFTLOCKUP [ 1036.821574][T26995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1036.821584][T26995] Call Trace: [ 1036.821590][T26995] [ 1036.821597][T26995] dump_stack_lvl+0x100/0x190 [ 1036.821622][T26995] should_fail_ex.cold+0x5/0xa [ 1036.821641][T26995] should_failslab+0xc2/0x120 [ 1036.821664][T26995] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1036.821685][T26995] ? do_epoll_ctl_file+0x237d/0x36e0 [ 1036.821720][T26995] do_epoll_ctl_file+0x237d/0x36e0 [ 1036.821745][T26995] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 1036.821768][T26995] ? __fget_files+0x215/0x3d0 [ 1036.821787][T26995] ? __fget_files+0x21f/0x3d0 [ 1036.821806][T26995] ? do_epoll_ctl+0xfd/0x1a0 [ 1036.821823][T26995] do_epoll_ctl+0xfd/0x1a0 [ 1036.821841][T26995] ? __pfx_do_epoll_ctl+0x10/0x10 [ 1036.821864][T26995] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 1036.821883][T26995] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 1036.821907][T26995] do_syscall_64+0x115/0x840 [ 1036.821927][T26995] ? clear_bhb_loop+0x40/0x90 [ 1036.821946][T26995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.821962][T26995] RIP: 0033:0x7f1c7859e019 [ 1036.821975][T26995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1036.821991][T26995] RSP: 002b:00007f1c79471028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1036.822007][T26995] RAX: ffffffffffffffda RBX: 00007f1c78825fa0 RCX: 00007f1c7859e019 [ 1036.822018][T26995] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 1036.822027][T26995] RBP: 00007f1c7863500c R08: 0000000000000000 R09: 0000000000000000 [ 1036.822036][T26995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1036.822045][T26995] R13: 00007f1c78826038 R14: 00007f1c78825fa0 R15: 00007fff2a825618 [ 1036.822069][T26995] [ 1038.201009][T27020] netlink: 342 bytes leftover after parsing attributes in process `syz.1.7100'. [ 1038.249609][T27020] netlink: 302 bytes leftover after parsing attributes in process `syz.1.7100'. [ 1039.481078][T27047] netlink: 334 bytes leftover after parsing attributes in process `syz.1.7107'. [ 1044.950195][T27152] netlink: 334 bytes leftover after parsing attributes in process `syz.2.7132'. [ 1045.105106][T27154] netlink: 82 bytes leftover after parsing attributes in process `syz.1.7134'. [ 1045.978569][T27128] Process accounting paused [ 1047.551937][T27197] hub 27-0:1.0: USB hub found [ 1047.595008][T27197] hub 27-0:1.0: 1 port detected [ 1047.728673][T27198] usb usb27: usbfs: interface 0 claimed by hub while 'syz.1.7143' sets config #2103451803 [ 1048.316625][T27214] FAULT_INJECTION: forcing a failure. [ 1048.316625][T27214] name failslab, interval 1, probability 0, space 0, times 0 [ 1048.372292][T27214] CPU: 0 UID: 0 PID: 27214 Comm: syz.3.7150 Tainted: G L syzkaller #0 PREEMPT(full) [ 1048.372321][T27214] Tainted: [L]=SOFTLOCKUP [ 1048.372327][T27214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1048.372337][T27214] Call Trace: [ 1048.372345][T27214] [ 1048.372353][T27214] dump_stack_lvl+0x100/0x190 [ 1048.372376][T27214] should_fail_ex.cold+0x5/0xa [ 1048.372396][T27214] should_failslab+0xc2/0x120 [ 1048.372419][T27214] __kmalloc_cache_noprof+0x91/0x6c0 [ 1048.372435][T27214] ? kstrdup_quotable_cmdline+0xa0/0x210 [ 1048.372454][T27214] ? kstrdup_quotable_cmdline+0x132/0x210 [ 1048.372470][T27214] ? kstrdup_quotable_cmdline+0x52/0x210 [ 1048.372490][T27214] kstrdup_quotable_cmdline+0x52/0x210 [ 1048.372510][T27214] __report_access+0x77/0x230 [ 1048.372534][T27214] ? _raw_spin_unlock_irq+0x23/0x50 [ 1048.372555][T27214] task_work_run+0x150/0x240 [ 1048.372578][T27214] ? __pfx_task_work_run+0x10/0x10 [ 1048.372607][T27214] exit_to_user_mode_loop+0x1d8/0x6f0 [ 1048.372623][T27214] ? rcu_is_watching+0x12/0xc0 [ 1048.372643][T27214] do_syscall_64+0x652/0x840 [ 1048.372662][T27214] ? clear_bhb_loop+0x40/0x90 [ 1048.372681][T27214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.372697][T27214] RIP: 0033:0x7f1c7859e019 [ 1048.372711][T27214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1048.372726][T27214] RSP: 002b:00007f1c79471028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 1048.372742][T27214] RAX: ffffffffffffffff RBX: 00007f1c78825fa0 RCX: 00007f1c7859e019 [ 1048.372753][T27214] RDX: 0000000000000003 RSI: 0000200000002980 RDI: 0000000000000001 [ 1048.372762][T27214] RBP: 00007f1c7863500c R08: 0000000000000004 R09: 0000000000000000 [ 1048.372771][T27214] R10: 0000200000002a40 R11: 0000000000000246 R12: 0000000000000000 [ 1048.372781][T27214] R13: 00007f1c78826038 R14: 00007f1c78825fa0 R15: 00007fff2a825618 [ 1048.372800][T27214] [ 1048.372810][T27214] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5629] was attempted by "(null)"[27214] [ 1048.712114][T27212] FAULT_INJECTION: forcing a failure. [ 1048.712114][T27212] name failslab, interval 1, probability 0, space 0, times 0 [ 1048.763698][T27212] CPU: 0 UID: 0 PID: 27212 Comm: syz.1.7148 Tainted: G L syzkaller #0 PREEMPT(full) [ 1048.763726][T27212] Tainted: [L]=SOFTLOCKUP [ 1048.763732][T27212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1048.763742][T27212] Call Trace: [ 1048.763748][T27212] [ 1048.763755][T27212] dump_stack_lvl+0x100/0x190 [ 1048.763779][T27212] should_fail_ex.cold+0x5/0xa [ 1048.763798][T27212] should_failslab+0xc2/0x120 [ 1048.763821][T27212] __kvmalloc_node_noprof+0x116/0x970 [ 1048.763842][T27212] ? __pfx___might_resched+0x10/0x10 [ 1048.763866][T27212] ? seq_read_iter+0x819/0x1270 [ 1048.763893][T27212] seq_read_iter+0x819/0x1270 [ 1048.763931][T27212] ? __pfx_seq_read_iter+0x10/0x10 [ 1048.763956][T27212] vfs_read+0x82e/0xb40 [ 1048.763974][T27212] ? __pfx_vfs_read+0x10/0x10 [ 1048.764001][T27212] ksys_read+0x12a/0x250 [ 1048.764015][T27212] ? __pfx_ksys_read+0x10/0x10 [ 1048.764035][T27212] do_syscall_64+0x115/0x840 [ 1048.764056][T27212] ? clear_bhb_loop+0x40/0x90 [ 1048.764074][T27212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.764091][T27212] RIP: 0033:0x7f6e3439e019 [ 1048.764104][T27212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1048.764119][T27212] RSP: 002b:00007f6e352f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1048.764134][T27212] RAX: ffffffffffffffda RBX: 00007f6e34626090 RCX: 00007f6e3439e019 [ 1048.764145][T27212] RDX: 0000000000001036 RSI: 0000200000000040 RDI: 0000000000000003 [ 1048.764155][T27212] RBP: 00007f6e3443500c R08: 0000000000000000 R09: 0000000000000000 [ 1048.764164][T27212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1048.764173][T27212] R13: 00007f6e34626128 R14: 00007f6e34626090 R15: 00007ffc355afa68 [ 1048.764196][T27212] [ 1053.134816][T27293] RDS: rds_bind could not find a transport for ::ffff:172.20.20.55, load rds_tcp or rds_rdma? [ 1053.273241][T27295] FAULT_INJECTION: forcing a failure. [ 1053.273241][T27295] name failslab, interval 1, probability 0, space 0, times 0 [ 1053.313622][T27295] CPU: 0 UID: 0 PID: 27295 Comm: syz.1.7169 Tainted: G L syzkaller #0 PREEMPT(full) [ 1053.313651][T27295] Tainted: [L]=SOFTLOCKUP [ 1053.313657][T27295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1053.313667][T27295] Call Trace: [ 1053.313674][T27295] [ 1053.313681][T27295] dump_stack_lvl+0x100/0x190 [ 1053.313707][T27295] should_fail_ex.cold+0x5/0xa [ 1053.313726][T27295] should_failslab+0xc2/0x120 [ 1053.313748][T27295] __kmalloc_cache_noprof+0x91/0x6c0 [ 1053.313765][T27295] ? vkms_plane_duplicate_state+0x87/0x130 [ 1053.313889][T27295] vkms_plane_duplicate_state+0x87/0x130 [ 1053.313911][T27295] drm_atomic_get_plane_state+0x279/0x7d0 [ 1053.313934][T27295] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 1053.313963][T27295] ? __mutex_lock+0x26d/0x1bd0 [ 1053.313988][T27295] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 1053.314012][T27295] ? drm_master_internal_acquire+0x21/0x80 [ 1053.314053][T27295] drm_client_modeset_commit_locked+0x14d/0x580 [ 1053.314081][T27295] drm_client_modeset_commit+0x4f/0x80 [ 1053.314104][T27295] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 1053.314130][T27295] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 1053.314154][T27295] drm_fbdev_client_restore+0x1b/0x30 [ 1053.314173][T27295] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 1053.314191][T27295] drm_client_dev_restore+0x205/0x2a0 [ 1053.314218][T27295] drm_release+0x2c6/0x360 [ 1053.314240][T27295] ? __pfx_drm_release+0x10/0x10 [ 1053.314261][T27295] __fput+0x3ff/0xb50 [ 1053.314284][T27295] task_work_run+0x150/0x240 [ 1053.314308][T27295] ? __pfx_task_work_run+0x10/0x10 [ 1053.314336][T27295] exit_to_user_mode_loop+0x1d8/0x6f0 [ 1053.314352][T27295] ? rcu_is_watching+0x12/0xc0 [ 1053.314372][T27295] do_syscall_64+0x652/0x840 [ 1053.314392][T27295] ? clear_bhb_loop+0x40/0x90 [ 1053.314411][T27295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.314427][T27295] RIP: 0033:0x7f6e3439e019 [ 1053.314442][T27295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1053.314457][T27295] RSP: 002b:00007f6e35319028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1053.314472][T27295] RAX: 0000000000000000 RBX: 00007f6e34625fa0 RCX: 00007f6e3439e019 [ 1053.314483][T27295] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1053.314492][T27295] RBP: 00007f6e3443500c R08: 0000000000000000 R09: 0000000000000000 [ 1053.314502][T27295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1053.314511][T27295] R13: 00007f6e34626038 R14: 00007f6e34625fa0 R15: 00007ffc355afa68 [ 1053.314533][T27295] [ 1054.571322][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.581053][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.713656][T27307] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7171'. [ 1054.802792][T27307] team0: Port device team_slave_0 removed [ 1056.880715][T27341] netlink: 244 bytes leftover after parsing attributes in process `syz.2.7180'. [ 1056.920392][T27344] netlink: 'syz.0.7182': attribute type 21 has an invalid length. [ 1056.963359][T27344] netlink: 326 bytes leftover after parsing attributes in process `syz.0.7182'. [ 1057.165997][ T5635] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 1057.166022][ T5635] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 1057.182394][ T5635] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 1057.182441][ T5635] Bluetooth: hci0: Unknown advertising packet type: 0x5c [ 1057.192406][ T5635] Bluetooth: hci0: adv larger than maximum supported [ 1057.199740][ T5635] Bluetooth: hci0: adv larger than maximum supported [ 1057.207302][ T5635] Bluetooth: hci0: Unknown advertising packet type: 0x7e [ 1057.215208][ T5635] Bluetooth: hci0: Malformed LE Event: 0x0d [ 1060.105830][T27409] netlink: 326 bytes leftover after parsing attributes in process `syz.3.7200'. [ 1060.163654][T27410] netlink: 326 bytes leftover after parsing attributes in process `syz.3.7200'. [ 1060.243877][T27409] netlink: 170 bytes leftover after parsing attributes in process `syz.3.7200'. [ 1060.450339][T27415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7202'. [ 1063.517054][T27489] netlink: 334 bytes leftover after parsing attributes in process `syz.1.7219'. [ 1069.408064][T27590] netlink: 146 bytes leftover after parsing attributes in process `syz.1.7244'. [ 1070.842352][T27608] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7247'. [ 1071.143051][T27608] team0: Port device team_slave_0 removed [ 1072.810485][T27648] [U] [ 1074.681320][T27686] netlink: 'syz.1.7266': attribute type 21 has an invalid length. [ 1074.716591][T27686] netlink: 334 bytes leftover after parsing attributes in process `syz.1.7266'. [ 1075.709113][T27713] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7272'. [ 1075.886768][T27713] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.953513][T27713] bridge_slave_0 (unregistering): left allmulticast mode [ 1075.991941][T27713] bridge_slave_0 (unregistering): left promiscuous mode [ 1076.023328][T27713] bridge0: port 1(bridge_slave_0) entered disabled state [ 1076.153617][T27717] Process accounting resumed [ 1076.364123][T27722] FAULT_INJECTION: forcing a failure. [ 1076.364123][T27722] name failslab, interval 1, probability 0, space 0, times 0 [ 1076.430633][T27722] CPU: 0 UID: 0 PID: 27722 Comm: syz.3.7274 Tainted: G L syzkaller #0 PREEMPT(full) [ 1076.430661][T27722] Tainted: [L]=SOFTLOCKUP [ 1076.430668][T27722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1076.430678][T27722] Call Trace: [ 1076.430685][T27722] [ 1076.430692][T27722] dump_stack_lvl+0x100/0x190 [ 1076.430721][T27722] should_fail_ex.cold+0x5/0xa [ 1076.430744][T27722] should_failslab+0xc2/0x120 [ 1076.430767][T27722] __kmalloc_cache_noprof+0x91/0x6c0 [ 1076.430786][T27722] ? vhost_task_create+0xee/0x370 [ 1076.430812][T27722] ? __pfx_vhost_worker_killed+0x10/0x10 [ 1076.430847][T27722] ? __pfx_vhost_run_work_list+0x10/0x10 [ 1076.430865][T27722] vhost_task_create+0xee/0x370 [ 1076.430888][T27722] ? __pfx_vhost_task_create+0x10/0x10 [ 1076.430917][T27722] ? __pfx_vhost_task_fn+0x10/0x10 [ 1076.430945][T27722] ? snprintf+0xc7/0x100 [ 1076.430968][T27722] vhost_task_worker_create+0x8d/0x260 [ 1076.430987][T27722] ? __pfx_vhost_task_worker_create+0x10/0x10 [ 1076.431004][T27722] ? lockdep_init_map_type+0x5c/0x250 [ 1076.431021][T27722] ? lockdep_init_map_type+0x5c/0x250 [ 1076.431038][T27722] vhost_worker_create+0x240/0x300 [ 1076.431055][T27722] ? __pfx_vhost_worker_create+0x10/0x10 [ 1076.431073][T27722] ? vhost_dev_set_owner+0x190/0xa30 [ 1076.431094][T27722] vhost_dev_set_owner+0x719/0xa30 [ 1076.431118][T27722] vhost_net_ioctl+0xfa3/0x1910 [ 1076.431139][T27722] ? do_vfs_ioctl+0x226/0x13e0 [ 1076.431162][T27722] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1076.431182][T27722] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 1076.431210][T27722] ? find_held_lock+0x2b/0x80 [ 1076.431230][T27722] ? __fget_files+0x215/0x3d0 [ 1076.431244][T27722] ? hook_file_ioctl_common+0x140/0x440 [ 1076.431271][T27722] ? __fget_files+0x21f/0x3d0 [ 1076.431289][T27722] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 1076.431308][T27722] __x64_sys_ioctl+0x18e/0x210 [ 1076.431331][T27722] do_syscall_64+0x115/0x840 [ 1076.431352][T27722] ? clear_bhb_loop+0x40/0x90 [ 1076.431371][T27722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.431387][T27722] RIP: 0033:0x7f1c7859e019 [ 1076.431401][T27722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1076.431417][T27722] RSP: 002b:00007f1c79450028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1076.431432][T27722] RAX: ffffffffffffffda RBX: 00007f1c78826090 RCX: 00007f1c7859e019 [ 1076.431443][T27722] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000003 [ 1076.431453][T27722] RBP: 00007f1c7863500c R08: 0000000000000000 R09: 0000000000000000 [ 1076.431463][T27722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1076.431473][T27722] R13: 00007f1c78826128 R14: 00007f1c78826090 R15: 00007fff2a825618 [ 1076.431493][T27722] [ 1077.900486][T27736] FAULT_INJECTION: forcing a failure. [ 1077.900486][T27736] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1077.934700][T27736] CPU: 0 UID: 0 PID: 27736 Comm: syz.0.7278 Tainted: G L syzkaller #0 PREEMPT(full) [ 1077.934727][T27736] Tainted: [L]=SOFTLOCKUP [ 1077.934732][T27736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1077.934742][T27736] Call Trace: [ 1077.934748][T27736] [ 1077.934754][T27736] dump_stack_lvl+0x100/0x190 [ 1077.934776][T27736] should_fail_ex.cold+0x5/0xa [ 1077.934794][T27736] get_futex_key+0x295/0x14f0 [ 1077.934817][T27736] ? __pfx_get_futex_key+0x10/0x10 [ 1077.934832][T27736] ? lock_acquire+0x1b9/0x370 [ 1077.934860][T27736] futex_wake+0xf4/0x5e0 [ 1077.934882][T27736] ? __pfx_futex_wake+0x10/0x10 [ 1077.934901][T27736] ? find_held_lock+0x2b/0x80 [ 1077.934920][T27736] ? exit_mm_release+0x19/0x30 [ 1077.934943][T27736] do_futex+0x2b2/0x440 [ 1077.934961][T27736] ? __pfx_do_futex+0x10/0x10 [ 1077.934984][T27736] ? __might_fault+0xc5/0x140 [ 1077.935006][T27736] mm_release+0x24a/0x2f0 [ 1077.935022][T27736] do_exit+0x707/0x2ae0 [ 1077.935046][T27736] ? __pfx_do_exit+0x10/0x10 [ 1077.935066][T27736] ? do_raw_spin_lock+0x128/0x260 [ 1077.935082][T27736] ? find_held_lock+0x2b/0x80 [ 1077.935100][T27736] ? get_signal+0x7e0/0x21e0 [ 1077.935118][T27736] do_group_exit+0xd5/0x2a0 [ 1077.935141][T27736] get_signal+0x1ec7/0x21e0 [ 1077.935162][T27736] ? vfs_write+0x15d/0x1050 [ 1077.935177][T27736] ? __pfx_get_signal+0x10/0x10 [ 1077.935195][T27736] ? do_futex+0x190/0x440 [ 1077.935213][T27736] arch_do_signal_or_restart+0x91/0x7a0 [ 1077.935230][T27736] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1077.935260][T27736] ? fput+0x79/0x100 [ 1077.935281][T27736] exit_to_user_mode_loop+0x139/0x6f0 [ 1077.935297][T27736] ? rcu_is_watching+0x12/0xc0 [ 1077.935316][T27736] do_syscall_64+0x652/0x840 [ 1077.935337][T27736] ? clear_bhb_loop+0x40/0x90 [ 1077.935355][T27736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.935371][T27736] RIP: 0033:0x7fdbc2b9e019 [ 1077.935385][T27736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1077.935399][T27736] RSP: 002b:00007fdbc3a9d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1077.935414][T27736] RAX: fffffffffffffe00 RBX: 00007fdbc2e26098 RCX: 00007fdbc2b9e019 [ 1077.935424][T27736] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdbc2e26098 [ 1077.935434][T27736] RBP: 00007fdbc2e26090 R08: 0000000000000000 R09: 0000000000000000 [ 1077.935443][T27736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1077.935452][T27736] R13: 00007fdbc2e26128 R14: 00007fff8c05bad0 R15: 00007fff8c05bbb8 [ 1077.935471][T27736] [ 1078.843723][ T5635] Bluetooth: hci0: unexpected event 0x1c length: 725 > 5 [ 1078.852485][T27756] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1079.433142][T27772] netlink: zone id is out of range [ 1079.466829][T27772] FAULT_INJECTION: forcing a failure. [ 1079.466829][T27772] name failslab, interval 1, probability 0, space 0, times 0 [ 1079.550579][T27772] CPU: 0 UID: 0 PID: 27772 Comm: syz.0.7288 Tainted: G L syzkaller #0 PREEMPT(full) [ 1079.550607][T27772] Tainted: [L]=SOFTLOCKUP [ 1079.550614][T27772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1079.550625][T27772] Call Trace: [ 1079.550631][T27772] [ 1079.550639][T27772] dump_stack_lvl+0x100/0x190 [ 1079.550662][T27772] should_fail_ex.cold+0x5/0xa [ 1079.550681][T27772] should_failslab+0xc2/0x120 [ 1079.550703][T27772] __kmalloc_cache_noprof+0x91/0x6c0 [ 1079.550722][T27772] ? ovs_ct_limit_cmd_set+0x30a/0xa70 [ 1079.550826][T27772] ovs_ct_limit_cmd_set+0x30a/0xa70 [ 1079.550854][T27772] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 1079.550878][T27772] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 1079.550902][T27772] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 1079.550926][T27772] genl_family_rcv_msg_doit+0x214/0x300 [ 1079.550948][T27772] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1079.550968][T27772] ? genl_get_cmd+0x3e7/0x760 [ 1079.550991][T27772] ? bpf_lsm_capable+0x9/0x10 [ 1079.551008][T27772] ? security_capable+0x80/0x260 [ 1079.551028][T27772] ? ns_capable+0xd2/0xf0 [ 1079.551045][T27772] genl_rcv_msg+0x560/0x800 [ 1079.551067][T27772] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1079.551087][T27772] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 1079.551117][T27772] netlink_rcv_skb+0x159/0x420 [ 1079.551142][T27772] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1079.551163][T27772] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1079.551187][T27772] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1079.551207][T27772] genl_rcv+0x28/0x40 [ 1079.551229][T27772] netlink_unicast+0x585/0x850 [ 1079.551250][T27772] ? __pfx_netlink_unicast+0x10/0x10 [ 1079.551268][T27772] ? __build_skb_around+0x278/0x390 [ 1079.551288][T27772] ? is_vmalloc_addr+0x86/0xa0 [ 1079.551307][T27772] netlink_sendmsg+0x8b0/0xda0 [ 1079.551327][T27772] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1079.551347][T27772] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1079.551368][T27772] ____sys_sendmsg+0xa4d/0xbe0 [ 1079.551384][T27772] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1079.551402][T27772] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1079.551421][T27772] ? rcu_is_watching+0x12/0xc0 [ 1079.551439][T27772] ? ___sys_sendmsg+0x19d/0x1e0 [ 1079.551454][T27772] ? kfree+0x1e5/0x6c0 [ 1079.551471][T27772] ___sys_sendmsg+0x190/0x1e0 [ 1079.551490][T27772] ? __pfx____sys_sendmsg+0x10/0x10 [ 1079.551507][T27772] ? futex_hash+0x311/0x400 [ 1079.551544][T27772] ? __pfx___might_resched+0x10/0x10 [ 1079.551572][T27772] __sys_sendmmsg+0x20c/0x440 [ 1079.551597][T27772] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1079.551619][T27772] ? __fget_files+0x215/0x3d0 [ 1079.551639][T27772] ? __pfx_do_futex+0x10/0x10 [ 1079.551665][T27772] ? xfd_validate_state+0x129/0x190 [ 1079.551688][T27772] __x64_sys_sendmmsg+0x9c/0x100 [ 1079.551710][T27772] ? lockdep_hardirqs_on+0x78/0x100 [ 1079.551730][T27772] do_syscall_64+0x115/0x840 [ 1079.551750][T27772] ? clear_bhb_loop+0x40/0x90 [ 1079.551769][T27772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.551794][T27772] RIP: 0033:0x7fdbc2b9e019 [ 1079.551810][T27772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1079.551830][T27772] RSP: 002b:00007fdbc3abe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1079.551847][T27772] RAX: ffffffffffffffda RBX: 00007fdbc2e25fa0 RCX: 00007fdbc2b9e019 [ 1079.551858][T27772] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 1079.551868][T27772] RBP: 00007fdbc2c3500c R08: 0000000000000000 R09: 0000000000000000 [ 1079.551878][T27772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1079.551888][T27772] R13: 00007fdbc2e26038 R14: 00007fdbc2e25fa0 R15: 00007fff8c05bbb8 [ 1079.551909][T27772] [ 1091.974740][T27954] FAULT_INJECTION: forcing a failure. [ 1091.974740][T27954] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1092.067717][T27954] CPU: 0 UID: 0 PID: 27954 Comm: syz.1.7331 Tainted: G L syzkaller #0 PREEMPT(full) [ 1092.067745][T27954] Tainted: [L]=SOFTLOCKUP [ 1092.067751][T27954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1092.067762][T27954] Call Trace: [ 1092.067768][T27954] [ 1092.067775][T27954] dump_stack_lvl+0x100/0x190 [ 1092.067799][T27954] should_fail_ex.cold+0x5/0xa [ 1092.067817][T27954] get_futex_key+0x1d2/0x14f0 [ 1092.067837][T27954] ? __pfx_get_futex_key+0x10/0x10 [ 1092.067852][T27954] ? __pfx_futex_hash+0x10/0x10 [ 1092.067872][T27954] futex_wake+0xf4/0x5e0 [ 1092.067890][T27954] ? futex_wait+0x11e/0x370 [ 1092.067911][T27954] ? __pfx_futex_wake+0x10/0x10 [ 1092.067933][T27954] ? find_held_lock+0x2b/0x80 [ 1092.067956][T27954] do_futex+0x2b2/0x440 [ 1092.067973][T27954] ? __pfx_do_futex+0x10/0x10 [ 1092.067990][T27954] ? cap_task_prctl+0x104/0xa50 [ 1092.068011][T27954] __x64_sys_futex+0x34f/0x4d0 [ 1092.068037][T27954] ? __pfx___x64_sys_futex+0x10/0x10 [ 1092.068054][T27954] ? __pfx___do_sys_prctl+0x10/0x10 [ 1092.068077][T27954] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 1092.068101][T27954] ? syscall_user_dispatch+0x76/0x130 [ 1092.068121][T27954] do_syscall_64+0x115/0x840 [ 1092.068142][T27954] ? clear_bhb_loop+0x40/0x90 [ 1092.068162][T27954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.068179][T27954] RIP: 0033:0x7f6e3439e019 [ 1092.068193][T27954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1092.068208][T27954] RSP: 002b:00007f6e353190e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1092.068224][T27954] RAX: ffffffffffffffda RBX: 00007f6e34625fa8 RCX: 00007f6e3439e019 [ 1092.068237][T27954] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6e34625fac [ 1092.068247][T27954] RBP: 00007f6e34625fa0 R08: 0000000000000001 R09: 0000000000000000 [ 1092.068257][T27954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1092.068266][T27954] R13: 00007f6e34626038 R14: 00007ffc355af980 R15: 00007ffc355afa68 [ 1092.068287][T27954] [ 1096.142946][T28032] FAULT_INJECTION: forcing a failure. [ 1096.142946][T28032] name failslab, interval 1, probability 0, space 0, times 0 [ 1096.174158][T28032] CPU: 0 UID: 0 PID: 28032 Comm: syz.3.7348 Tainted: G L syzkaller #0 PREEMPT(full) [ 1096.174190][T28032] Tainted: [L]=SOFTLOCKUP [ 1096.174196][T28032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1096.174207][T28032] Call Trace: [ 1096.174213][T28032] [ 1096.174220][T28032] dump_stack_lvl+0x100/0x190 [ 1096.174243][T28032] should_fail_ex.cold+0x5/0xa [ 1096.174262][T28032] should_failslab+0xc2/0x120 [ 1096.174286][T28032] __kmalloc_cache_noprof+0x91/0x6c0 [ 1096.174304][T28032] ? vhost_net_open+0x128/0x8b0 [ 1096.174325][T28032] vhost_net_open+0x128/0x8b0 [ 1096.174342][T28032] ? __pfx_vhost_net_open+0x10/0x10 [ 1096.174360][T28032] misc_open+0x26d/0x450 [ 1096.174379][T28032] ? __pfx_misc_open+0x10/0x10 [ 1096.174396][T28032] chrdev_open+0x234/0x6a0 [ 1096.174411][T28032] ? __pfx_apparmor_file_open+0x10/0x10 [ 1096.174431][T28032] ? __pfx_chrdev_open+0x10/0x10 [ 1096.174447][T28032] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1096.174470][T28032] do_dentry_open+0x6ab/0x14d0 [ 1096.174486][T28032] ? __pfx_chrdev_open+0x10/0x10 [ 1096.174507][T28032] vfs_open+0x82/0x3f0 [ 1096.174528][T28032] path_openat+0x2873/0x4280 [ 1096.174553][T28032] ? __pfx_path_openat+0x10/0x10 [ 1096.174574][T28032] do_file_open+0x20e/0x430 [ 1096.174591][T28032] ? __pfx_do_file_open+0x10/0x10 [ 1096.174621][T28032] ? alloc_fd+0x471/0x7a0 [ 1096.174638][T28032] ? do_getname+0x191/0x390 [ 1096.174658][T28032] do_sys_openat2+0x10f/0x1e0 [ 1096.174679][T28032] ? __pfx_do_sys_openat2+0x10/0x10 [ 1096.174714][T28032] __x64_sys_openat+0x12d/0x210 [ 1096.174737][T28032] ? __pfx___x64_sys_openat+0x10/0x10 [ 1096.174765][T28032] do_syscall_64+0x115/0x840 [ 1096.174785][T28032] ? clear_bhb_loop+0x40/0x90 [ 1096.174804][T28032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.174820][T28032] RIP: 0033:0x7f1c7859e019 [ 1096.174835][T28032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1096.174850][T28032] RSP: 002b:00007f1c79471028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1096.174866][T28032] RAX: ffffffffffffffda RBX: 00007f1c78825fa0 RCX: 00007f1c7859e019 [ 1096.174876][T28032] RDX: 0000000000129000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1096.174887][T28032] RBP: 00007f1c7863500c R08: 0000000000000000 R09: 0000000000000000 [ 1096.174896][T28032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1096.174906][T28032] R13: 00007f1c78826038 R14: 00007f1c78825fa0 R15: 00007fff2a825618 [ 1096.174926][T28032] [ 1096.855362][T28037] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7349'. [ 1096.949057][T28037] bridge_slave_0 (unregistering): left allmulticast mode [ 1096.960483][T28037] bridge_slave_0 (unregistering): left promiscuous mode [ 1096.969427][T28037] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.478718][ T5635] Bluetooth: hci3: unexpected event 0x1c length: 725 > 5 [ 1098.486802][T28069] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1104.879861][T28145] FAULT_INJECTION: forcing a failure. [ 1104.879861][T28145] name failslab, interval 1, probability 0, space 0, times 0 [ 1105.024447][T28145] CPU: 0 UID: 0 PID: 28145 Comm: syz.2.7373 Tainted: G L syzkaller #0 PREEMPT(full) [ 1105.024476][T28145] Tainted: [L]=SOFTLOCKUP [ 1105.024482][T28145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1105.024493][T28145] Call Trace: [ 1105.024500][T28145] [ 1105.024507][T28145] dump_stack_lvl+0x100/0x190 [ 1105.024532][T28145] should_fail_ex.cold+0x5/0xa [ 1105.024552][T28145] should_failslab+0xc2/0x120 [ 1105.024573][T28145] __kmalloc_cache_noprof+0x91/0x6c0 [ 1105.024590][T28145] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1105.024612][T28145] ? cgroup_file_open+0x90/0x470 [ 1105.024639][T28145] cgroup_file_open+0x90/0x470 [ 1105.024661][T28145] ? __pfx_cgroup_file_open+0x10/0x10 [ 1105.024684][T28145] kernfs_fop_open+0x8bb/0xd50 [ 1105.024708][T28145] do_dentry_open+0x6ab/0x14d0 [ 1105.024724][T28145] ? __pfx_kernfs_fop_open+0x10/0x10 [ 1105.024746][T28145] vfs_open+0x82/0x3f0 [ 1105.024767][T28145] path_openat+0x2873/0x4280 [ 1105.024792][T28145] ? __pfx_path_openat+0x10/0x10 [ 1105.024814][T28145] do_file_open+0x20e/0x430 [ 1105.024832][T28145] ? __pfx_do_file_open+0x10/0x10 [ 1105.024862][T28145] ? alloc_fd+0x471/0x7a0 [ 1105.024879][T28145] ? do_getname+0x191/0x390 [ 1105.024899][T28145] do_sys_openat2+0x10f/0x1e0 [ 1105.024919][T28145] ? __pfx_do_sys_openat2+0x10/0x10 [ 1105.024941][T28145] ? __fget_files+0x21f/0x3d0 [ 1105.024959][T28145] __x64_sys_openat+0x12d/0x210 [ 1105.024980][T28145] ? __pfx___x64_sys_openat+0x10/0x10 [ 1105.025007][T28145] do_syscall_64+0x115/0x840 [ 1105.025027][T28145] ? clear_bhb_loop+0x40/0x90 [ 1105.025046][T28145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1105.025065][T28145] RIP: 0033:0x7f938639e019 [ 1105.025079][T28145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1105.025095][T28145] RSP: 002b:00007f9387236028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1105.025111][T28145] RAX: ffffffffffffffda RBX: 00007f9386626090 RCX: 00007f938639e019 [ 1105.025121][T28145] RDX: 0000000000080200 RSI: 0000200000000840 RDI: ffffffffffffff9c [ 1105.025131][T28145] RBP: 00007f938643500c R08: 0000000000000000 R09: 0000000000000000 [ 1105.025140][T28145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1105.025149][T28145] R13: 00007f9386626128 R14: 00007f9386626090 R15: 00007ffe54edd0f8 [ 1105.025170][T28145] [ 1106.476586][T28177] zswap: compressor not available [ 1107.474825][T28171] Process accounting paused [ 1109.311403][T28223] zswap: compressor not available [ 1109.419559][T28228] netlink: 142 bytes leftover after parsing attributes in process `syz.2.7393'. [ 1111.195437][T28256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7398'. [ 1111.224769][T28256] netlink: 13 bytes leftover after parsing attributes in process `syz.0.7398'. [ 1111.889983][T28266] netlink: 266 bytes leftover after parsing attributes in process `syz.0.7402'. [ 1113.950795][T28306] netlink: 'syz.1.7411': attribute type 29 has an invalid length. [ 1114.011505][T28306] netlink: 46 bytes leftover after parsing attributes in process `syz.1.7411'. [ 1114.590283][T28322] FAULT_INJECTION: forcing a failure. [ 1114.590283][T28322] name failslab, interval 1, probability 0, space 0, times 0 [ 1114.651483][T28322] CPU: 0 UID: 0 PID: 28322 Comm: syz.3.7418 Tainted: G L syzkaller #0 PREEMPT(full) [ 1114.651511][T28322] Tainted: [L]=SOFTLOCKUP [ 1114.651518][T28322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1114.651529][T28322] Call Trace: [ 1114.651535][T28322] [ 1114.651542][T28322] dump_stack_lvl+0x100/0x190 [ 1114.651567][T28322] should_fail_ex.cold+0x5/0xa [ 1114.651586][T28322] should_failslab+0xc2/0x120 [ 1114.651610][T28322] __kmalloc_noprof+0xfc/0x820 [ 1114.651629][T28322] ? __lock_acquire+0x49f/0x1a40 [ 1114.651653][T28322] ? sk_prot_alloc+0x10b/0x2a0 [ 1114.651674][T28322] sk_prot_alloc+0x10b/0x2a0 [ 1114.651692][T28322] sk_alloc+0x36/0xe80 [ 1114.651713][T28322] pppoe_create+0x32/0x360 [ 1114.651748][T28322] pppox_create+0x15c/0x2c0 [ 1114.651766][T28322] __sock_create+0x339/0x860 [ 1114.651787][T28322] __sys_socket+0x14d/0x260 [ 1114.651806][T28322] ? __pfx___sys_socket+0x10/0x10 [ 1114.651829][T28322] __x64_sys_socket+0x72/0xb0 [ 1114.651846][T28322] ? lockdep_hardirqs_on+0x78/0x100 [ 1114.651866][T28322] do_syscall_64+0x115/0x840 [ 1114.651885][T28322] ? clear_bhb_loop+0x40/0x90 [ 1114.651903][T28322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.651919][T28322] RIP: 0033:0x7f1c7859e019 [ 1114.651934][T28322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1114.651948][T28322] RSP: 002b:00007f1c79471028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1114.651964][T28322] RAX: ffffffffffffffda RBX: 00007f1c78825fa0 RCX: 00007f1c7859e019 [ 1114.651974][T28322] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000018 [ 1114.651984][T28322] RBP: 00007f1c7863500c R08: 0000000000000000 R09: 0000000000000000 [ 1114.651994][T28322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1114.652003][T28322] R13: 00007f1c78826038 R14: 00007f1c78825fa0 R15: 00007fff2a825618 [ 1114.652024][T28322] [ 1115.202489][T28333] ovs_: entered promiscuous mode [ 1115.236748][T28335] HfR: entered promiscuous mode [ 1115.430348][T28341] netlink: 334 bytes leftover after parsing attributes in process `syz.1.7420'. [ 1116.013123][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.021738][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.922753][T28369] FAULT_INJECTION: forcing a failure. [ 1116.922753][T28369] name failslab, interval 1, probability 0, space 0, times 0 [ 1116.981815][T28367] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 1116.992605][T28369] CPU: 0 UID: 0 PID: 28369 Comm: syz.0.7429 Tainted: G L syzkaller #0 PREEMPT(full) [ 1116.992633][T28369] Tainted: [L]=SOFTLOCKUP [ 1116.992640][T28369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1116.992650][T28369] Call Trace: [ 1116.992656][T28369] [ 1116.992663][T28369] dump_stack_lvl+0x100/0x190 [ 1116.992686][T28369] should_fail_ex.cold+0x5/0xa [ 1116.992705][T28369] should_failslab+0xc2/0x120 [ 1116.992727][T28369] __kmalloc_cache_noprof+0x91/0x6c0 [ 1116.992744][T28369] ? lockdep_init_map_type+0x5c/0x250 [ 1116.992759][T28369] ? kvm_create_lapic+0xa9/0x440 [ 1116.992824][T28369] kvm_create_lapic+0xa9/0x440 [ 1116.992848][T28369] kvm_arch_vcpu_create+0x273/0xab0 [ 1116.992874][T28369] kvm_vm_ioctl+0x752/0x4180 [ 1116.992898][T28369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.992922][T28369] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1116.992956][T28369] ? kasan_quarantine_put+0x104/0x240 [ 1116.992974][T28369] ? lockdep_hardirqs_on+0x78/0x100 [ 1116.992995][T28369] ? find_held_lock+0x2b/0x80 [ 1116.993014][T28369] ? tomoyo_path_number_perm+0x28f/0x580 [ 1116.993036][T28369] ? tomoyo_path_number_perm+0x28f/0x580 [ 1116.993059][T28369] ? tomoyo_path_number_perm+0x188/0x580 [ 1116.993080][T28369] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1116.993101][T28369] ? __pfx_futex_wait+0x10/0x10 [ 1116.993126][T28369] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1116.993150][T28369] ? do_vfs_ioctl+0x226/0x13e0 [ 1116.993172][T28369] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1116.993202][T28369] ? find_held_lock+0x2b/0x80 [ 1116.993219][T28369] ? __fget_files+0x215/0x3d0 [ 1116.993233][T28369] ? hook_file_ioctl_common+0x140/0x440 [ 1116.993258][T28369] ? __fget_files+0x21f/0x3d0 [ 1116.993275][T28369] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1116.993296][T28369] __x64_sys_ioctl+0x18e/0x210 [ 1116.993319][T28369] do_syscall_64+0x115/0x840 [ 1116.993338][T28369] ? clear_bhb_loop+0x40/0x90 [ 1116.993357][T28369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.993372][T28369] RIP: 0033:0x7fdbc2b9e019 [ 1116.993395][T28369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1116.993411][T28369] RSP: 002b:00007fdbc3abe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1116.993428][T28369] RAX: ffffffffffffffda RBX: 00007fdbc2e25fa0 RCX: 00007fdbc2b9e019 [ 1116.993439][T28369] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000003 [ 1116.993449][T28369] RBP: 00007fdbc2c3500c R08: 0000000000000000 R09: 0000000000000000 [ 1116.993462][T28369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1116.993471][T28369] R13: 00007fdbc2e26038 R14: 00007fdbc2e25fa0 R15: 00007fff8c05bbb8 [ 1116.993491][T28369] [ 1117.959175][T28384] zswap: compressor û not available [ 1117.974883][ T10] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1118.103714][ T5635] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 1118.427330][T28400] vhci_hcd vhci_hcd.2: invalid port number 255 [ 1118.727140][T28405] FAULT_INJECTION: forcing a failure. [ 1118.727140][T28405] name failslab, interval 1, probability 0, space 0, times 0 [ 1118.770415][T28405] CPU: 0 UID: 0 PID: 28405 Comm: syz.0.7439 Tainted: G L syzkaller #0 PREEMPT(full) [ 1118.770443][T28405] Tainted: [L]=SOFTLOCKUP [ 1118.770449][T28405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1118.770459][T28405] Call Trace: [ 1118.770465][T28405] [ 1118.770472][T28405] dump_stack_lvl+0x100/0x190 [ 1118.770496][T28405] should_fail_ex.cold+0x5/0xa [ 1118.770516][T28405] should_failslab+0xc2/0x120 [ 1118.770540][T28405] __kmalloc_cache_noprof+0x91/0x6c0 [ 1118.770557][T28405] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1118.770579][T28405] ? cgroup_file_open+0x90/0x470 [ 1118.770609][T28405] cgroup_file_open+0x90/0x470 [ 1118.770630][T28405] ? __pfx_cgroup_file_open+0x10/0x10 [ 1118.770654][T28405] kernfs_fop_open+0x8bb/0xd50 [ 1118.770677][T28405] do_dentry_open+0x6ab/0x14d0 [ 1118.770693][T28405] ? __pfx_kernfs_fop_open+0x10/0x10 [ 1118.770715][T28405] vfs_open+0x82/0x3f0 [ 1118.770737][T28405] path_openat+0x2873/0x4280 [ 1118.770761][T28405] ? __pfx_path_openat+0x10/0x10 [ 1118.770782][T28405] do_file_open+0x20e/0x430 [ 1118.770800][T28405] ? __pfx_do_file_open+0x10/0x10 [ 1118.770830][T28405] ? alloc_fd+0x471/0x7a0 [ 1118.770847][T28405] ? do_getname+0x191/0x390 [ 1118.770868][T28405] do_sys_openat2+0x10f/0x1e0 [ 1118.770889][T28405] ? __pfx_do_sys_openat2+0x10/0x10 [ 1118.770910][T28405] ? __fget_files+0x21f/0x3d0 [ 1118.770929][T28405] __x64_sys_openat+0x12d/0x210 [ 1118.770949][T28405] ? __pfx___x64_sys_openat+0x10/0x10 [ 1118.770977][T28405] do_syscall_64+0x115/0x840 [ 1118.770997][T28405] ? clear_bhb_loop+0x40/0x90 [ 1118.771015][T28405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1118.771031][T28405] RIP: 0033:0x7fdbc2b9e019 [ 1118.771046][T28405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1118.771061][T28405] RSP: 002b:00007fdbc3a9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1118.771077][T28405] RAX: ffffffffffffffda RBX: 00007fdbc2e26090 RCX: 00007fdbc2b9e019 [ 1118.771087][T28405] RDX: 0000000000080200 RSI: 0000200000000840 RDI: ffffffffffffff9c [ 1118.771097][T28405] RBP: 00007fdbc2c3500c R08: 0000000000000000 R09: 0000000000000000 [ 1118.771106][T28405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1118.771115][T28405] R13: 00007fdbc2e26128 R14: 00007fdbc2e26090 R15: 00007fff8c05bbb8 [ 1118.771136][T28405] [ 1119.281313][T28411] netlink: 186 bytes leftover after parsing attributes in process `syz.3.7440'. [ 1119.292730][T28411] netlink: 186 bytes leftover after parsing attributes in process `syz.3.7440'. [ 1119.975703][ T10] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1120.520687][T28429] ================================================================== [ 1120.528889][T28429] BUG: KASAN: slab-use-after-free in dvb_device_open+0x33f/0x3b0 [ 1120.536737][T28429] Read of size 8 at addr ffff88802c217218 by task syz.1.7447/28429 [ 1120.544642][T28429] [ 1120.547058][T28429] CPU: 0 UID: 0 PID: 28429 Comm: syz.1.7447 Tainted: G L syzkaller #0 PREEMPT(full) [ 1120.547085][T28429] Tainted: [L]=SOFTLOCKUP [ 1120.547092][T28429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1120.547102][T28429] Call Trace: [ 1120.547111][T28429] [ 1120.547119][T28429] dump_stack_lvl+0x100/0x190 [ 1120.547142][T28429] print_report+0x13d/0x4b0 [ 1120.547179][T28429] ? __virt_addr_valid+0x239/0x430 [ 1120.547197][T28429] ? dvb_device_open+0x33f/0x3b0 [ 1120.547226][T28429] kasan_report+0xdf/0x1c0 [ 1120.547250][T28429] ? dvb_device_open+0x33f/0x3b0 [ 1120.547277][T28429] ? __pfx_dvb_device_open+0x10/0x10 [ 1120.547300][T28429] dvb_device_open+0x33f/0x3b0 [ 1120.547323][T28429] ? __pfx_dvb_device_open+0x10/0x10 [ 1120.547346][T28429] chrdev_open+0x234/0x6a0 [ 1120.547362][T28429] ? __pfx_apparmor_file_open+0x10/0x10 [ 1120.547380][T28429] ? __pfx_chrdev_open+0x10/0x10 [ 1120.547396][T28429] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1120.547416][T28429] do_dentry_open+0x6ab/0x14d0 [ 1120.547431][T28429] ? __pfx_chrdev_open+0x10/0x10 [ 1120.547449][T28429] vfs_open+0x82/0x3f0 [ 1120.547470][T28429] path_openat+0x2873/0x4280 [ 1120.547490][T28429] ? __pfx_path_openat+0x10/0x10 [ 1120.547507][T28429] do_file_open+0x20e/0x430 [ 1120.547523][T28429] ? __pfx_do_file_open+0x10/0x10 [ 1120.547544][T28429] ? alloc_fd+0x471/0x7a0 [ 1120.547560][T28429] ? do_getname+0x191/0x390 [ 1120.547580][T28429] do_sys_openat2+0x10f/0x1e0 [ 1120.547600][T28429] ? __pfx_do_sys_openat2+0x10/0x10 [ 1120.547622][T28429] __x64_sys_openat+0x12d/0x210 [ 1120.547643][T28429] ? __pfx___x64_sys_openat+0x10/0x10 [ 1120.547671][T28429] do_syscall_64+0x115/0x840 [ 1120.547692][T28429] ? clear_bhb_loop+0x40/0x90 [ 1120.547709][T28429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.547726][T28429] RIP: 0033:0x7f6e3439e019 [ 1120.547741][T28429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1120.547758][T28429] RSP: 002b:00007f6e35319028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1120.547776][T28429] RAX: ffffffffffffffda RBX: 00007f6e34625fa0 RCX: 00007f6e3439e019 [ 1120.547788][T28429] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1120.547799][T28429] RBP: 00007f6e3443500c R08: 0000000000000000 R09: 0000000000000000 [ 1120.547811][T28429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1120.547822][T28429] R13: 00007f6e34626038 R14: 00007f6e34625fa0 R15: 00007ffc355afa68 [ 1120.547838][T28429] [ 1120.547844][T28429] [ 1120.798147][T28429] Allocated by task 28389: [ 1120.802616][T28429] kasan_save_stack+0x30/0x50 [ 1120.807302][T28429] kasan_save_track+0x14/0x30 [ 1120.811984][T28429] __kasan_kmalloc+0xaa/0xb0 [ 1120.816573][T28429] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 1120.821935][T28429] csum_init_net+0x56/0x270 [ 1120.826511][T28429] ops_init+0x1e2/0x5f0 [ 1120.830662][T28429] setup_net+0x118/0x3a0 [ 1120.834911][T28429] copy_net_ns+0x46f/0x7c0 [ 1120.839345][T28429] create_new_namespaces+0x3ea/0xac0 [ 1120.844620][T28429] unshare_nsproxy_namespaces+0xf2/0x220 [ 1120.850257][T28429] ksys_unshare+0x438/0xab0 [ 1120.854786][T28429] __x64_sys_unshare+0x31/0x40 [ 1120.859572][T28429] do_syscall_64+0x115/0x840 [ 1120.864167][T28429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.870068][T28429] [ 1120.872428][T28429] Freed by task 28389: [ 1120.876485][T28429] kasan_save_stack+0x30/0x50 [ 1120.881169][T28429] kasan_save_track+0x14/0x30 [ 1120.885835][T28429] kasan_save_free_info+0x3b/0x70 [ 1120.890863][T28429] __kasan_slab_free+0x5f/0x80 [ 1120.895634][T28429] kfree+0x22b/0x6c0 [ 1120.899656][T28429] csum_exit_net+0x100/0x3b0 [ 1120.904274][T28429] ops_undo_list+0x363/0xab0 [ 1120.908888][T28429] setup_net+0x1fa/0x3a0 [ 1120.913195][T28429] copy_net_ns+0x46f/0x7c0 [ 1120.917619][T28429] create_new_namespaces+0x3ea/0xac0 [ 1120.922922][T28429] unshare_nsproxy_namespaces+0xf2/0x220 [ 1120.928585][T28429] ksys_unshare+0x438/0xab0 [ 1120.933083][T28429] __x64_sys_unshare+0x31/0x40 [ 1120.937836][T28429] do_syscall_64+0x115/0x840 [ 1120.942415][T28429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.948435][T28429] [ 1120.950746][T28429] The buggy address belongs to the object at ffff88802c217200 [ 1120.950746][T28429] which belongs to the cache kmalloc-256 of size 256 [ 1120.965055][T28429] The buggy address is located 24 bytes inside of [ 1120.965055][T28429] freed 256-byte region [ffff88802c217200, ffff88802c217300) [ 1120.978760][T28429] [ 1120.981068][T28429] The buggy address belongs to the physical page: [ 1120.987483][T28429] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2c216 [ 1120.996239][T28429] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1121.004748][T28429] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1121.012279][T28429] page_type: f5(slab) [ 1121.016245][T28429] raw: 00fff00000000040 ffff88813fe21b40 dead000000000100 dead000000000122 [ 1121.024850][T28429] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 1121.033424][T28429] head: 00fff00000000040 ffff88813fe21b40 dead000000000100 dead000000000122 [ 1121.042078][T28429] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 1121.050738][T28429] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 1121.059392][T28429] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 1121.068042][T28429] page dumped because: kasan: bad access detected [ 1121.074516][T28429] page_owner tracks the page as allocated [ 1121.080218][T28429] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 18961254639, free_ts 0 [ 1121.099915][T28429] post_alloc_hook+0xfd/0x120 [ 1121.104587][T28429] get_page_from_freelist+0xf48/0x3530 [ 1121.110033][T28429] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 1121.115915][T28429] new_slab+0xa2/0x640 [ 1121.119972][T28429] refill_objects+0xe3/0x410 [ 1121.124554][T28429] __pcs_replace_empty_main+0x376/0x680 [ 1121.130091][T28429] __kmalloc_cache_noprof+0x479/0x6c0 [ 1121.135447][T28429] bus_add_driver+0x92/0x5b0 [ 1121.140044][T28429] driver_register+0x1e2/0x360 [ 1121.144800][T28429] usb_register_driver+0x21c/0x3e0 [ 1121.149930][T28429] do_one_initcall+0x11d/0x700 [ 1121.154689][T28429] kernel_init_freeable+0x6ea/0x7b0 [ 1121.159885][T28429] kernel_init+0x1f/0x1e0 [ 1121.164317][T28429] ret_from_fork+0x72b/0xd50 [ 1121.168918][T28429] ret_from_fork_asm+0x1a/0x30 [ 1121.173674][T28429] page_owner free stack trace missing [ 1121.179027][T28429] [ 1121.181337][T28429] Memory state around the buggy address: [ 1121.186950][T28429] ffff88802c217100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1121.195002][T28429] ffff88802c217180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1121.203051][T28429] >ffff88802c217200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1121.211094][T28429] ^ [ 1121.215926][T28429] ffff88802c217280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1121.223973][T28429] ffff88802c217300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1121.232044][T28429] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1122.004888][ T10] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1122.854974][ T65] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.975577][ T5711] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1123.064287][T11186] syz_tun (unregistering): left allmulticast mode [ 1123.091749][T11186] syz_tun (unregistering): left promiscuous mode [ 1123.099477][T28429] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1123.106683][T28429] CPU: 0 UID: 0 PID: 28429 Comm: syz.1.7447 Tainted: G L syzkaller #0 PREEMPT(full) [ 1123.117609][T28429] Tainted: [L]=SOFTLOCKUP [ 1123.121921][T28429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1123.131964][T28429] Call Trace: [ 1123.135235][T28429] [ 1123.138180][T28429] dump_stack_lvl+0x100/0x190 [ 1123.142879][T28429] vpanic+0x552/0x970 [ 1123.146884][T28429] ? __pfx_vpanic+0x10/0x10 [ 1123.151399][T28429] ? mark_held_locks+0x40/0x70 [ 1123.156161][T28429] ? dvb_device_open+0x33f/0x3b0 [ 1123.161093][T28429] panic+0xd1/0xe0 [ 1123.164817][T28429] ? __pfx_panic+0x10/0x10 [ 1123.169238][T28429] ? dvb_device_open+0x33f/0x3b0 [ 1123.174227][T28429] ? preempt_schedule_common+0x42/0xc0 [ 1123.179682][T28429] check_panic_on_warn.cold+0x19/0x34 [ 1123.185094][T28429] end_report.part.0+0x3a/0x90 [ 1123.189870][T28429] kasan_report.cold+0xe/0x18 [ 1123.194550][T28429] ? dvb_device_open+0x33f/0x3b0 [ 1123.199509][T28429] ? __pfx_dvb_device_open+0x10/0x10 [ 1123.204828][T28429] dvb_device_open+0x33f/0x3b0 [ 1123.209613][T28429] ? __pfx_dvb_device_open+0x10/0x10 [ 1123.214897][T28429] chrdev_open+0x234/0x6a0 [ 1123.219303][T28429] ? __pfx_apparmor_file_open+0x10/0x10 [ 1123.224871][T28429] ? __pfx_chrdev_open+0x10/0x10 [ 1123.229835][T28429] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1123.236174][T28429] do_dentry_open+0x6ab/0x14d0 [ 1123.240935][T28429] ? __pfx_chrdev_open+0x10/0x10 [ 1123.245880][T28429] vfs_open+0x82/0x3f0 [ 1123.249944][T28429] path_openat+0x2873/0x4280 [ 1123.254529][T28429] ? __pfx_path_openat+0x10/0x10 [ 1123.259460][T28429] do_file_open+0x20e/0x430 [ 1123.263953][T28429] ? __pfx_do_file_open+0x10/0x10 [ 1123.268981][T28429] ? alloc_fd+0x471/0x7a0 [ 1123.273305][T28429] ? do_getname+0x191/0x390 [ 1123.277825][T28429] do_sys_openat2+0x10f/0x1e0 [ 1123.282689][T28429] ? __pfx_do_sys_openat2+0x10/0x10 [ 1123.287913][T28429] __x64_sys_openat+0x12d/0x210 [ 1123.292794][T28429] ? __pfx___x64_sys_openat+0x10/0x10 [ 1123.298184][T28429] do_syscall_64+0x115/0x840 [ 1123.302927][T28429] ? clear_bhb_loop+0x40/0x90 [ 1123.307643][T28429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1123.313614][T28429] RIP: 0033:0x7f6e3439e019 [ 1123.318016][T28429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1123.337787][T28429] RSP: 002b:00007f6e35319028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1123.346272][T28429] RAX: ffffffffffffffda RBX: 00007f6e34625fa0 RCX: 00007f6e3439e019 [ 1123.354289][T28429] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1123.362258][T28429] RBP: 00007f6e3443500c R08: 0000000000000000 R09: 0000000000000000 [ 1123.370238][T28429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1123.378217][T28429] R13: 00007f6e34626038 R14: 00007f6e34625fa0 R15: 00007ffc355afa68 [ 1123.386194][T28429] [ 1123.389279][T28429] Kernel Offset: disabled [ 1123.393624][T28429] Rebooting in 86400 seconds..