last executing test programs: 8.154544988s ago: executing program 3 (id=4409): openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon33\x00', 0x121200, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) r0 = syz_clone(0x5004000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x503083, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x40800) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00ab29dc931f0e02b7745be74fb8e8255f614f85f94bc5ef8facda4b1cb3e135ef23203752a9a06f5adc02fe10fd6059eb5ec860fbb39453d7ba92bd5a73e0e45ce2d585cccf203901d41ed36536bffcadc5fa27dbe72d209b4c922ee03aba35fb65731b21d405c9def0a3765c9b0ff8fbbff63336633bec215ead541e5766cb7e6a546c58ddbc3cbd84697b73ae", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001280)={&(0x7f0000001140)={0x100, r4, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_MLO_RECONF_REM_LINKS={0x6, 0x14f, 0x9}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x17, 0x13, "13c366f9244357d432f6e44cc4bf4e5878fe5d"}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x8}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x2}, @NL80211_ATTR_HT_CAPABILITY={0x45, 0x1f, "ff8ddbe0dca3a0c40b31575a0fc89a052ad1070f85525f215dde201061c7ecbce4e876ab8d9dd571ee3b51789e3654f47243f6e34471afffdadef51ab57ef583e9"}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x5c, 0x75, 0x0, 0x1, [@generic="ba6aeb15a3f761572ca4eb336e5dfaa39a4e112524144c26d5a6468d0f3a3919ee7a2bf863f683c121bc3b2170c49b100b274baaf7e35af6d0f2356f99129b14dfb3c040f557f81b", @typed={0x8, 0x138, 0x0, 0x0, @u32=0x400}, @typed={0x8, 0xe6, 0x0, 0x0, @fd=r1}]}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x8}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x7}]}, 0x100}, 0x1, 0x0, 0x0, 0x91}, 0x10) ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, 0x0) mlockall$auto(0x7) mprotect$auto(0x0, 0x806121, 0x6) bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) ptrace$auto(0x10, r0, 0x2, 0x1007ff) ptrace$auto_PTRACE_SETREGSET(0x4205, r0, 0x2, 0x9193) 8.059612524s ago: executing program 1 (id=4410): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/ptp/ptp0/max_adjustment\x00', 0x400, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r1 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_USB_RAW_IOCTL_RUN(r1, 0x5501, 0x97) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x1000000000009b72, 0x2, 0x800008000) socket(0xa, 0x5, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) io_uring_setup$auto(0x85, 0x0) ioctl$auto(r2, 0x4008af03, r2) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0x400df, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) madvise$auto(0x2, 0x5c61fa2c, 0xf) syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff) write$auto(0x3, 0x0, 0xffd8) getsockname$auto(r0, 0x0, 0x0) 6.725104722s ago: executing program 2 (id=4411): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) unshare$auto(0x40000080) r0 = socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x2101, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto_drm_edid_fops_drm_debugfs(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x84) r1 = io_uring_setup$auto(0x5, 0x0) mknod$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_', 0x1081, 0x9) acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x880c2, 0xb3) close_range$auto(0x2, r1, 0x0) acct$auto(&(0x7f0000000280)='/sys/devices/virtual/mtd/mtd0/size\x00') prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) futex_wake$auto(0x0, 0x7, 0xfffffffb, 0x2) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) r2 = syz_genetlink_get_family_id$auto_nl80211(0x0, r0) setresuid$auto(0x8000000000000001, 0x1, 0x200) mlockall$auto(0x7) sendmsg$auto_NL80211_CMD_LEAVE_IBSS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0xf8}, 0x1, 0x0, 0x0, 0x50}, 0x4000001) sendmsg$auto_NL80211_CMD_ADD_LINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="0400000000000600df"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) 6.166385345s ago: executing program 1 (id=4413): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x2, 0x2, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb) ioctl$auto_SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000240)) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000480)={{&(0x7f0000000200)="fb08879254c1c24169fb1eb914e3b7f221f2841c3d38cd87d0", 0x1, &(0x7f0000000380)={&(0x7f0000000280)="8346937e12ba00e330311a19e48a0a9a2e91b6de44b66b63f1596b3f9d5c9f510298d5522b2f135e98b99e6fac9035b3e0469f8d1a694f4c16c64bb3c27c1179a6c16599a273abe7a3569be34d93", 0x4}, 0x54, &(0x7f00000003c0)="58a887ce482f9847847a27203ddba921d454a6c86fce97592078366c4f6c8fee6e7fd116b574b538e1bad18ef1da26cba8642753abd3f8a96926c38339c11b133eef5aa66e23c098ba119eb39971e64edb18441af8d68649f32ada49d82cc34fcb6e9bdf708ee7abcdfb1c5b915d39c0be5f029d67b53f7afb0a133600981508423b6fa88476b25248297c7d3426dff1c875d16de47691fc61aafcae44ff57e63b2b25a7", 0xd8, 0x7fffffff}, 0x5fb}, 0x101, 0xc2d2, 0x0) write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, &(0x7f0000000000)=' ', 0x1) write$auto(r1, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9) r2 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev$auto(r2, &(0x7f0000000300)={0x0, 0x10001}, 0xc) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/arp\x00', 0x101000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000100)=""/92, 0x5c) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x8) mmap$auto(0x0, 0x20009, 0xdf, 0x1000eb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x5) memfd_create$auto(0x0, 0x40) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) 5.921726525s ago: executing program 3 (id=4414): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x1, 0xfffffffffffffff5, 0x0) mbind$auto(0x7ffffffc, 0x100000004, 0x100000000, 0x0, 0x8001, 0x2) read$auto_proc_pid_maps_operations_internal(r0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/free_buffer\x00', 0x20103, 0x0) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x4, 0x0) linkat$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x7fffffff) madvise$auto(0x1, 0xfffffffffffff001, 0xe) madvise$auto(0x0, 0x200007, 0x19) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000000), 0x480, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = mq_open$auto(&(0x7f00000000c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8000) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mtd0\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/vivid.0/video4linux/radio5/power/runtime_status\x00', 0x140, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/ip6_flowlabel\x00', 0x42000, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r2 = getpgrp(0xffffffffffffffff) r3 = socket(0x29, 0x5, 0x0) write$auto(r3, &(0x7f0000000080)='/de$-audio1\x00', 0x100000a3dc) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/ext4/sda1/mb_groups\x00', 0x109180, 0x0) pread64$auto(r4, 0x0, 0x682c3390, 0xcff) prctl$auto(0x1000000003b, 0x1, r2, 0x8000000000000001, 0x2d) statmount$auto(0x0, 0x0, 0x81, 0x968c) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x402240, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x4c0205, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) sysfs$auto(0x2, 0x810000000000003a, 0x0) 1.56922744s ago: executing program 2 (id=4427): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x1, 0xfffffffffffffff5, 0x0) mbind$auto(0x7ffffffc, 0x100000004, 0x100000000, 0x0, 0x8001, 0x2) read$auto_proc_pid_maps_operations_internal(r0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/free_buffer\x00', 0x20103, 0x0) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x4, 0x0) linkat$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x7fffffff) madvise$auto(0x1, 0xfffffffffffff001, 0xe) madvise$auto(0x0, 0x200007, 0x19) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000000), 0x480, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = mq_open$auto(&(0x7f00000000c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5 [ 676.379181][T14836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1758'. [ 677.897211][T14875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1765'. [ 677.918424][T14875] netlink: 354 bytes leftover after parsing attributes in process `syz.2.1765'. [ 679.013743][T14896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1770'. [ 681.268519][T14944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1781'. [ 681.370054][T14950] sctp: [Deprecated]: syz.1.1782 (pid 14950) Use of int in max_burst socket option deprecated. [ 681.370054][T14950] Use struct sctp_assoc_value instead [ 681.399818][T14946] zswap: compressor not available [ 685.912134][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.921568][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.519399][T15036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1799'. [ 687.998340][T15064] FAULT_INJECTION: forcing a failure. [ 687.998340][T15064] name failslab, interval 1, probability 0, space 0, times 0 [ 688.106210][T15064] CPU: 0 UID: 0 PID: 15064 Comm: syz.0.1798 Tainted: G L syzkaller #0 PREEMPT(full) [ 688.106284][T15064] Tainted: [L]=SOFTLOCKUP [ 688.106297][T15064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 688.106317][T15064] Call Trace: [ 688.106327][T15064] [ 688.106340][T15064] dump_stack_lvl+0x100/0x190 [ 688.106399][T15064] should_fail_ex.cold+0x5/0xa [ 688.106439][T15064] should_failslab+0xc2/0x120 [ 688.106472][T15064] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 688.106520][T15064] ? security_inode_alloc+0x3b/0x2c0 [ 688.106567][T15064] ? lockdep_init_map_type+0x5c/0x250 [ 688.106618][T15064] security_inode_alloc+0x3b/0x2c0 [ 688.106676][T15064] inode_init_always_gfp+0xced/0x1040 [ 688.106738][T15064] alloc_inode+0x8e/0x250 [ 688.106781][T15064] alloc_anon_inode+0x2a/0x3e0 [ 688.106838][T15064] ioctx_alloc+0x4dc/0x21d0 [ 688.106887][T15064] ? find_held_lock+0x2b/0x80 [ 688.106919][T15064] ? __pfx_ioctx_alloc+0x10/0x10 [ 688.106966][T15064] __x64_sys_io_setup+0xc9/0x220 [ 688.107004][T15064] do_syscall_64+0x106/0xf80 [ 688.107041][T15064] ? clear_bhb_loop+0x40/0x90 [ 688.107084][T15064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.107119][T15064] RIP: 0033:0x7f120139c629 [ 688.107146][T15064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 688.107180][T15064] RSP: 002b:00007f11fe98d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 688.107213][T15064] RAX: ffffffffffffffda RBX: 00007f1201616450 RCX: 00007f120139c629 [ 688.107235][T15064] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000e [ 688.107255][T15064] RBP: 00007f1201432b39 R08: 0000000000000000 R09: 0000000000000000 [ 688.107275][T15064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 688.107294][T15064] R13: 00007f12016164e8 R14: 00007f1201616450 R15: 00007ffd3dc812d8 [ 688.107339][T15064] [ 688.798122][T15066] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 697.741180][T15207] Setting dangerous option i915.mitigations - tainting kernel [ 699.709139][T15268] FAULT_INJECTION: forcing a failure. [ 699.709139][T15268] name failslab, interval 1, probability 0, space 0, times 0 [ 699.759880][T15268] CPU: 1 UID: 0 PID: 15268 Comm: syz.3.1841 Tainted: G U L syzkaller #0 PREEMPT(full) [ 699.759937][T15268] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 699.759949][T15268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 699.759968][T15268] Call Trace: [ 699.759980][T15268] [ 699.759993][T15268] dump_stack_lvl+0x100/0x190 [ 699.760048][T15268] should_fail_ex.cold+0x5/0xa [ 699.760087][T15268] ? xfrm_hash_alloc+0xcf/0x100 [ 699.760130][T15268] should_failslab+0xc2/0x120 [ 699.760163][T15268] __kmalloc_noprof+0xe0/0x850 [ 699.760219][T15268] xfrm_hash_alloc+0xcf/0x100 [ 699.760262][T15268] xfrm_net_init+0x35d/0xcc0 [ 699.760317][T15268] ? __pfx_xfrm_net_init+0x10/0x10 [ 699.760363][T15268] ops_init+0x1e2/0x5f0 [ 699.760407][T15268] setup_net+0x118/0x3a0 [ 699.760445][T15268] ? __pfx_setup_net+0x10/0x10 [ 699.760479][T15268] ? lockdep_init_map_type+0x5c/0x250 [ 699.760523][T15268] ? mutex_init_lockep+0x110/0x150 [ 699.760574][T15268] copy_net_ns+0x46f/0x7c0 [ 699.760618][T15268] create_new_namespaces+0x3ea/0xac0 [ 699.760659][T15268] copy_namespaces+0x468/0x5e0 [ 699.760695][T15268] copy_process+0x3226/0x7a10 [ 699.760763][T15268] ? __pfx_copy_process+0x10/0x10 [ 699.760823][T15268] kernel_clone+0xfc/0x9a0 [ 699.760858][T15268] ? __pfx_futex_wait+0x10/0x10 [ 699.760913][T15268] ? __pfx_kernel_clone+0x10/0x10 [ 699.760961][T15268] ? __pfx_sock_write_iter+0x10/0x10 [ 699.761019][T15268] __do_sys_clone+0xd9/0x120 [ 699.761056][T15268] ? __pfx___do_sys_clone+0x10/0x10 [ 699.761128][T15268] do_syscall_64+0x106/0xf80 [ 699.761162][T15268] ? clear_bhb_loop+0x40/0x90 [ 699.761202][T15268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.761234][T15268] RIP: 0033:0x7f145dd9c629 [ 699.761261][T15268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.761293][T15268] RSP: 002b:00007f145ebc9fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 699.761324][T15268] RAX: ffffffffffffffda RBX: 00007f145e016090 RCX: 00007f145dd9c629 [ 699.761345][T15268] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040180211 [ 699.761364][T15268] RBP: 00007f145de32b39 R08: 0000000000000000 R09: 0000000000000000 [ 699.761382][T15268] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 699.761400][T15268] R13: 00007f145e016128 R14: 00007f145e016090 R15: 00007ffc3cd4eed8 [ 699.761453][T15268] [ 704.899600][T15361] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 704.908440][T15361] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 704.921988][T15361] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 704.935516][T15361] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 706.319447][T15376] FAULT_INJECTION: forcing a failure. [ 706.319447][T15376] name failslab, interval 1, probability 0, space 0, times 0 [ 706.332529][T15376] CPU: 1 UID: 0 PID: 15376 Comm: syz.1.1861 Tainted: G U L syzkaller #0 PREEMPT(full) [ 706.332586][T15376] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 706.332599][T15376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 706.332618][T15376] Call Trace: [ 706.332629][T15376] [ 706.332640][T15376] dump_stack_lvl+0x100/0x190 [ 706.332694][T15376] should_fail_ex.cold+0x5/0xa [ 706.332732][T15376] should_failslab+0xc2/0x120 [ 706.332764][T15376] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 706.332809][T15376] ? security_inode_alloc+0x3b/0x2c0 [ 706.332858][T15376] ? lockdep_init_map_type+0x5c/0x250 [ 706.332907][T15376] security_inode_alloc+0x3b/0x2c0 [ 706.332955][T15376] inode_init_always_gfp+0xced/0x1040 [ 706.333013][T15376] alloc_inode+0x8e/0x250 [ 706.333052][T15376] alloc_anon_inode+0x2a/0x3e0 [ 706.333107][T15376] ioctx_alloc+0x4dc/0x21d0 [ 706.333154][T15376] ? find_held_lock+0x2b/0x80 [ 706.333206][T15376] ? __pfx_ioctx_alloc+0x10/0x10 [ 706.333248][T15376] __x64_sys_io_setup+0xc9/0x220 [ 706.333282][T15376] do_syscall_64+0x106/0xf80 [ 706.333315][T15376] ? clear_bhb_loop+0x40/0x90 [ 706.333352][T15376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.333383][T15376] RIP: 0033:0x7fa92959c629 [ 706.333408][T15376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 706.333438][T15376] RSP: 002b:00007fa92a50c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 706.333471][T15376] RAX: ffffffffffffffda RBX: 00007fa929816090 RCX: 00007fa92959c629 [ 706.333491][T15376] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000e [ 706.333508][T15376] RBP: 00007fa929632b39 R08: 0000000000000000 R09: 0000000000000000 [ 706.333526][T15376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 706.333543][T15376] R13: 00007fa929816128 R14: 00007fa929816090 R15: 00007ffcc45f1178 [ 706.333581][T15376] [ 706.547703][T14457] Bluetooth: hci1: command 0x0406 tx timeout [ 706.947410][T14457] Bluetooth: hci3: command 0x0406 tx timeout [ 706.949279][ T5831] Bluetooth: hci0: command 0x0406 tx timeout [ 706.958724][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 708.537944][T15436] FAULT_INJECTION: forcing a failure. [ 708.537944][T15436] name failslab, interval 1, probability 0, space 0, times 0 [ 708.566521][T15436] CPU: 1 UID: 0 PID: 15436 Comm: syz.2.1871 Tainted: G U L syzkaller #0 PREEMPT(full) [ 708.566572][T15436] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 708.566581][T15436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 708.566596][T15436] Call Trace: [ 708.566603][T15436] [ 708.566612][T15436] dump_stack_lvl+0x100/0x190 [ 708.566652][T15436] should_fail_ex.cold+0x5/0xa [ 708.566678][T15436] ? __register_sysctl_table+0xac/0x1650 [ 708.566715][T15436] should_failslab+0xc2/0x120 [ 708.566738][T15436] __kmalloc_noprof+0xe0/0x850 [ 708.566778][T15436] __register_sysctl_table+0xac/0x1650 [ 708.566814][T15436] ? is_module_address+0x5f/0xf0 [ 708.566876][T15436] ? __pfx___register_sysctl_table+0x10/0x10 [ 708.566928][T15436] ? is_module_address+0x69/0xf0 [ 708.566970][T15436] ? register_net_sysctl_sz+0x222/0x430 [ 708.567017][T15436] ? __asan_memcpy+0x3c/0x60 [ 708.567068][T15436] mptcp_net_init+0x499/0x620 [ 708.567136][T15436] ? __pfx_mptcp_net_init+0x10/0x10 [ 708.567173][T15436] ops_init+0x1e2/0x5f0 [ 708.567204][T15436] setup_net+0x118/0x3a0 [ 708.567232][T15436] ? __pfx_setup_net+0x10/0x10 [ 708.567258][T15436] ? lockdep_init_map_type+0x5c/0x250 [ 708.567290][T15436] ? mutex_init_lockep+0x110/0x150 [ 708.567326][T15436] copy_net_ns+0x46f/0x7c0 [ 708.567359][T15436] create_new_namespaces+0x3ea/0xac0 [ 708.567402][T15436] copy_namespaces+0x468/0x5e0 [ 708.567424][T15436] copy_process+0x3226/0x7a10 [ 708.567459][T15436] ? __pfx_copy_process+0x10/0x10 [ 708.567482][T15436] ? find_held_lock+0x2b/0x80 [ 708.567510][T15436] kernel_clone+0xfc/0x9a0 [ 708.567553][T15436] ? __pfx_futex_wait+0x10/0x10 [ 708.567600][T15436] ? __pfx_kernel_clone+0x10/0x10 [ 708.567638][T15436] ? __pfx_sock_write_iter+0x10/0x10 [ 708.567672][T15436] __do_sys_clone+0xd9/0x120 [ 708.567696][T15436] ? __pfx___do_sys_clone+0x10/0x10 [ 708.567729][T15436] ? ksys_write+0x1ac/0x250 [ 708.567786][T15436] ? __pfx_ksys_write+0x10/0x10 [ 708.567840][T15436] do_syscall_64+0x106/0xf80 [ 708.567870][T15436] ? clear_bhb_loop+0x40/0x90 [ 708.567904][T15436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.567934][T15436] RIP: 0033:0x7fb36e39c629 [ 708.567958][T15436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.567985][T15436] RSP: 002b:00007fb36c5d4fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 708.568013][T15436] RAX: ffffffffffffffda RBX: 00007fb36e616090 RCX: 00007fb36e39c629 [ 708.568032][T15436] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040180211 [ 708.568048][T15436] RBP: 00007fb36e432b39 R08: 0000000000000000 R09: 0000000000000000 [ 708.568065][T15436] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 708.568081][T15436] R13: 00007fb36e616128 R14: 00007fb36e616090 R15: 00007ffcdd65c3c8 [ 708.568125][T15436] [ 708.942835][T15439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1873'. [ 708.955601][T15439] netlink: 354 bytes leftover after parsing attributes in process `syz.1.1873'. [ 709.817492][T15454] Invalid ELF header magic: != ELF [ 710.426101][T15480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1883'. [ 710.481197][T15480] netlink: 354 bytes leftover after parsing attributes in process `syz.3.1883'. [ 711.997535][T15507] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 712.011067][T15507] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 712.017226][T15507] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 712.023438][T15507] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 713.911562][T14457] Bluetooth: hci1: command 0x0406 tx timeout [ 714.072325][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 714.072333][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 714.085318][T14457] Bluetooth: hci3: command 0x0406 tx timeout [ 716.440436][T15590] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 716.447190][T15590] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 716.472474][T15590] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 716.499133][T15590] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 718.395559][T14457] Bluetooth: hci1: command 0x0406 tx timeout [ 718.486948][T14457] Bluetooth: hci2: command 0x0406 tx timeout [ 718.560613][T14457] Bluetooth: hci3: command 0x0406 tx timeout [ 718.566800][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 718.978706][T15636] Invalid ELF header magic: != ELF [ 724.120999][T15704] FAULT_INJECTION: forcing a failure. [ 724.120999][T15704] name failslab, interval 1, probability 0, space 0, times 0 [ 724.527269][T15704] CPU: 1 UID: 0 PID: 15704 Comm: syz.3.1925 Tainted: G U L syzkaller #0 PREEMPT(full) [ 724.527327][T15704] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 724.527341][T15704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 724.527373][T15704] Call Trace: [ 724.527383][T15704] [ 724.527395][T15704] dump_stack_lvl+0x100/0x190 [ 724.527460][T15704] should_fail_ex.cold+0x5/0xa [ 724.527497][T15704] should_failslab+0xc2/0x120 [ 724.527528][T15704] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 724.527573][T15704] ? security_inode_alloc+0x3b/0x2c0 [ 724.527616][T15704] ? lockdep_init_map_type+0x5c/0x250 [ 724.527661][T15704] security_inode_alloc+0x3b/0x2c0 [ 724.527707][T15704] inode_init_always_gfp+0xced/0x1040 [ 724.527761][T15704] alloc_inode+0x8e/0x250 [ 724.527800][T15704] alloc_anon_inode+0x2a/0x3e0 [ 724.527851][T15704] ioctx_alloc+0x4dc/0x21d0 [ 724.527895][T15704] ? find_held_lock+0x2b/0x80 [ 724.527924][T15704] ? __pfx_ioctx_alloc+0x10/0x10 [ 724.527965][T15704] __x64_sys_io_setup+0xc9/0x220 [ 724.527999][T15704] do_syscall_64+0x106/0xf80 [ 724.528042][T15704] ? clear_bhb_loop+0x40/0x90 [ 724.528091][T15704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.528120][T15704] RIP: 0033:0x7f145dd9c629 [ 724.528144][T15704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 724.528173][T15704] RSP: 002b:00007f145ebca028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 724.528201][T15704] RAX: ffffffffffffffda RBX: 00007f145e016090 RCX: 00007f145dd9c629 [ 724.528220][T15704] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000e [ 724.528237][T15704] RBP: 00007f145de32b39 R08: 0000000000000000 R09: 0000000000000000 [ 724.528254][T15704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 724.528270][T15704] R13: 00007f145e016128 R14: 00007f145e016090 R15: 00007ffc3cd4eed8 [ 724.528312][T15704] [ 726.633982][T15769] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 726.705111][T15769] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 726.731559][T15769] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 726.765171][T15769] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 728.397626][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 728.540092][T15802] FAULT_INJECTION: forcing a failure. [ 728.540092][T15802] name failslab, interval 1, probability 0, space 0, times 0 [ 728.557761][T15802] CPU: 0 UID: 0 PID: 15802 Comm: syz.2.1943 Tainted: G U L syzkaller #0 PREEMPT(full) [ 728.557811][T15802] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 728.557827][T15802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 728.557841][T15802] Call Trace: [ 728.557848][T15802] [ 728.557856][T15802] dump_stack_lvl+0x100/0x190 [ 728.557893][T15802] should_fail_ex.cold+0x5/0xa [ 728.557918][T15802] should_failslab+0xc2/0x120 [ 728.557939][T15802] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 728.557969][T15802] ? security_inode_alloc+0x3b/0x2c0 [ 728.558000][T15802] ? lockdep_init_map_type+0x5c/0x250 [ 728.558031][T15802] security_inode_alloc+0x3b/0x2c0 [ 728.558062][T15802] inode_init_always_gfp+0xced/0x1040 [ 728.558101][T15802] alloc_inode+0x8e/0x250 [ 728.558127][T15802] alloc_anon_inode+0x2a/0x3e0 [ 728.558163][T15802] ioctx_alloc+0x4dc/0x21d0 [ 728.558193][T15802] ? find_held_lock+0x2b/0x80 [ 728.558212][T15802] ? __pfx_ioctx_alloc+0x10/0x10 [ 728.558241][T15802] __x64_sys_io_setup+0xc9/0x220 [ 728.558264][T15802] do_syscall_64+0x106/0xf80 [ 728.558287][T15802] ? clear_bhb_loop+0x40/0x90 [ 728.558313][T15802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.558335][T15802] RIP: 0033:0x7fb36e39c629 [ 728.558352][T15802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 728.558374][T15802] RSP: 002b:00007fb36c5f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 728.558394][T15802] RAX: ffffffffffffffda RBX: 00007fb36e615fa0 RCX: 00007fb36e39c629 [ 728.558408][T15802] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000e [ 728.558421][T15802] RBP: 00007fb36e432b39 R08: 0000000000000000 R09: 0000000000000000 [ 728.558439][T15802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 728.558452][T15802] R13: 00007fb36e616038 R14: 00007fb36e615fa0 R15: 00007ffcdd65c3c8 [ 728.558480][T15802] [ 728.767191][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 728.809188][T14457] Bluetooth: hci0: command 0x0406 tx timeout [ 728.819879][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 732.760097][T15867] FAULT_INJECTION: forcing a failure. [ 732.760097][T15867] name failslab, interval 1, probability 0, space 0, times 0 [ 732.824744][T15867] CPU: 1 UID: 0 PID: 15867 Comm: syz.1.1956 Tainted: G U L syzkaller #0 PREEMPT(full) [ 732.824801][T15867] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 732.824813][T15867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 732.824832][T15867] Call Trace: [ 732.824843][T15867] [ 732.824855][T15867] dump_stack_lvl+0x100/0x190 [ 732.824910][T15867] should_fail_ex.cold+0x5/0xa [ 732.824950][T15867] should_failslab+0xc2/0x120 [ 732.824982][T15867] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 732.825030][T15867] ? security_inode_alloc+0x3b/0x2c0 [ 732.825077][T15867] ? lockdep_init_map_type+0x5c/0x250 [ 732.825129][T15867] security_inode_alloc+0x3b/0x2c0 [ 732.825178][T15867] inode_init_always_gfp+0xced/0x1040 [ 732.825248][T15867] alloc_inode+0x8e/0x250 [ 732.825286][T15867] alloc_anon_inode+0x2a/0x3e0 [ 732.825338][T15867] ioctx_alloc+0x4dc/0x21d0 [ 732.825390][T15867] ? find_held_lock+0x2b/0x80 [ 732.825418][T15867] ? __pfx_ioctx_alloc+0x10/0x10 [ 732.825458][T15867] __x64_sys_io_setup+0xc9/0x220 [ 732.825492][T15867] do_syscall_64+0x106/0xf80 [ 732.825524][T15867] ? clear_bhb_loop+0x40/0x90 [ 732.825563][T15867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.825594][T15867] RIP: 0033:0x7fa92959c629 [ 732.825619][T15867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 732.825648][T15867] RSP: 002b:00007fa92a4eb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 732.825677][T15867] RAX: ffffffffffffffda RBX: 00007fa929816180 RCX: 00007fa92959c629 [ 732.825696][T15867] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000e [ 732.825713][T15867] RBP: 00007fa929632b39 R08: 0000000000000000 R09: 0000000000000000 [ 732.825731][T15867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 732.825748][T15867] R13: 00007fa929816218 R14: 00007fa929816180 R15: 00007ffcc45f1178 [ 732.825792][T15867] [ 742.034598][T16024] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input8 [ 747.078667][T16109] FAULT_INJECTION: forcing a failure. [ 747.078667][T16109] name failslab, interval 1, probability 0, space 0, times 0 [ 747.306210][T16109] CPU: 0 UID: 0 PID: 16109 Comm: syz.3.2003 Tainted: G U L syzkaller #0 PREEMPT(full) [ 747.306252][T16109] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 747.306261][T16109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 747.306275][T16109] Call Trace: [ 747.306283][T16109] [ 747.306292][T16109] dump_stack_lvl+0x100/0x190 [ 747.306333][T16109] should_fail_ex.cold+0x5/0xa [ 747.306361][T16109] should_failslab+0xc2/0x120 [ 747.306384][T16109] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 747.306420][T16109] ? __d_alloc+0x34/0xa80 [ 747.306443][T16109] ? ktime_get_coarse_real_ts64_mg+0x1e0/0x300 [ 747.306479][T16109] __d_alloc+0x34/0xa80 [ 747.306501][T16109] ? inode_set_ctime_current+0x283/0x8a0 [ 747.306528][T16109] d_alloc_pseudo+0x1c/0xc0 [ 747.306560][T16109] alloc_file_pseudo+0xcf/0x230 [ 747.306591][T16109] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 747.306628][T16109] ioctx_alloc+0x5d9/0x21d0 [ 747.306661][T16109] ? find_held_lock+0x2b/0x80 [ 747.306683][T16109] ? __pfx_ioctx_alloc+0x10/0x10 [ 747.306714][T16109] __x64_sys_io_setup+0xc9/0x220 [ 747.306741][T16109] do_syscall_64+0x106/0xf80 [ 747.306766][T16109] ? clear_bhb_loop+0x40/0x90 [ 747.306795][T16109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.306820][T16109] RIP: 0033:0x7f145dd9c629 [ 747.306839][T16109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 747.306862][T16109] RSP: 002b:00007f145eb88028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 747.306925][T16109] RAX: ffffffffffffffda RBX: 00007f145e016270 RCX: 00007f145dd9c629 [ 747.306949][T16109] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000e [ 747.306969][T16109] RBP: 00007f145de32b39 R08: 0000000000000000 R09: 0000000000000000 [ 747.306995][T16109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 747.307011][T16109] R13: 00007f145e016308 R14: 00007f145e016270 R15: 00007ffc3cd4eed8 [ 747.307042][T16109] [ 747.511296][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.517664][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.518155][T16212] FAULT_INJECTION: forcing a failure. [ 752.518155][T16212] name failslab, interval 1, probability 0, space 0, times 0 [ 752.671469][T16212] CPU: 1 UID: 0 PID: 16212 Comm: syz.3.2020 Tainted: G U L syzkaller #0 PREEMPT(full) [ 752.671547][T16212] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 752.671561][T16212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 752.671580][T16212] Call Trace: [ 752.671593][T16212] [ 752.671601][T16212] dump_stack_lvl+0x100/0x190 [ 752.671638][T16212] should_fail_ex.cold+0x5/0xa [ 752.671664][T16212] should_failslab+0xc2/0x120 [ 752.671685][T16212] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 752.671734][T16212] ? security_inode_alloc+0x3b/0x2c0 [ 752.671769][T16212] ? lockdep_init_map_type+0x5c/0x250 [ 752.671804][T16212] security_inode_alloc+0x3b/0x2c0 [ 752.671838][T16212] inode_init_always_gfp+0xced/0x1040 [ 752.671880][T16212] alloc_inode+0x8e/0x250 [ 752.671908][T16212] alloc_anon_inode+0x2a/0x3e0 [ 752.671948][T16212] ioctx_alloc+0x4dc/0x21d0 [ 752.671980][T16212] ? find_held_lock+0x2b/0x80 [ 752.672001][T16212] ? __pfx_ioctx_alloc+0x10/0x10 [ 752.672032][T16212] __x64_sys_io_setup+0xc9/0x220 [ 752.672058][T16212] do_syscall_64+0x106/0xf80 [ 752.672082][T16212] ? clear_bhb_loop+0x40/0x90 [ 752.672110][T16212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.672134][T16212] RIP: 0033:0x7f145dd9c629 [ 752.672152][T16212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 752.672175][T16212] RSP: 002b:00007f145eb88028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 752.672197][T16212] RAX: ffffffffffffffda RBX: 00007f145e016270 RCX: 00007f145dd9c629 [ 752.672212][T16212] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000e [ 752.672226][T16212] RBP: 00007f145de32b39 R08: 0000000000000000 R09: 0000000000000000 [ 752.672241][T16212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 752.672254][T16212] R13: 00007f145e016308 R14: 00007f145e016270 R15: 00007ffc3cd4eed8 [ 752.672284][T16212] [ 778.601064][T16650] FAULT_INJECTION: forcing a failure. [ 778.601064][T16650] name failslab, interval 1, probability 0, space 0, times 0 [ 778.627482][T16650] CPU: 1 UID: 0 PID: 16650 Comm: syz.3.2100 Tainted: G U L syzkaller #0 PREEMPT(full) [ 778.627535][T16650] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 778.627566][T16650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 778.627587][T16650] Call Trace: [ 778.627597][T16650] [ 778.627609][T16650] dump_stack_lvl+0x100/0x190 [ 778.627662][T16650] should_fail_ex.cold+0x5/0xa [ 778.627712][T16650] should_failslab+0xc2/0x120 [ 778.627742][T16650] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 778.627787][T16650] ? security_inode_alloc+0x3b/0x2c0 [ 778.627831][T16650] ? lockdep_init_map_type+0x5c/0x250 [ 778.627896][T16650] security_inode_alloc+0x3b/0x2c0 [ 778.627942][T16650] inode_init_always_gfp+0xced/0x1040 [ 778.628003][T16650] alloc_inode+0x8e/0x250 [ 778.628044][T16650] alloc_anon_inode+0x2a/0x3e0 [ 778.628102][T16650] ioctx_alloc+0x4dc/0x21d0 [ 778.628149][T16650] ? find_held_lock+0x2b/0x80 [ 778.628180][T16650] ? __pfx_ioctx_alloc+0x10/0x10 [ 778.628227][T16650] __x64_sys_io_setup+0xc9/0x220 [ 778.628265][T16650] do_syscall_64+0x106/0xf80 [ 778.628301][T16650] ? clear_bhb_loop+0x40/0x90 [ 778.628343][T16650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.628377][T16650] RIP: 0033:0x7f145dd9c629 [ 778.628404][T16650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 778.628447][T16650] RSP: 002b:00007f145ebca028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 778.628481][T16650] RAX: ffffffffffffffda RBX: 00007f145e016090 RCX: 00007f145dd9c629 [ 778.628505][T16650] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000e [ 778.628524][T16650] RBP: 00007f145de32b39 R08: 0000000000000000 R09: 0000000000000000 [ 778.628544][T16650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 778.628563][T16650] R13: 00007f145e016128 R14: 00007f145e016090 R15: 00007ffc3cd4eed8 [ 778.628606][T16650] [ 807.913895][T17195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2195'. [ 807.923440][T17195] netlink: 354 bytes leftover after parsing attributes in process `syz.3.2195'. [ 808.364915][T17204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2197'. [ 808.393810][T17204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2197'. [ 808.841230][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.849194][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.659954][T17241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2204'. [ 810.723361][T17241] netlink: 354 bytes leftover after parsing attributes in process `syz.0.2204'. [ 830.268294][T17618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2265'. [ 830.290239][T17618] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2265'. [ 836.217197][T17739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2284'. [ 839.579691][T17795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2294'. [ 842.189969][T17848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2305'. [ 859.978081][T18212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2366'. [ 862.772785][T18268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2375'. [ 864.910475][T18313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2383'. [ 867.846459][T18367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2392'. [ 870.311070][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.318015][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.639841][T18456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2408'. [ 896.435874][T18904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2484'. [ 899.283293][T18955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2493'. [ 902.847027][T19022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2503'. [ 906.512767][T19089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2514'. [ 931.804953][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.812259][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 947.189350][T19897] bridge0: port 4(team0) entered blocking state [ 947.195793][T19897] bridge0: port 4(team0) entered disabled state [ 947.202923][T19897] team0: entered allmulticast mode [ 947.208503][T19897] team_slave_0: entered allmulticast mode [ 947.273653][T19897] team_slave_1: entered allmulticast mode [ 947.376977][T19897] team0: entered promiscuous mode [ 947.412956][T19897] team_slave_0: entered promiscuous mode [ 947.423345][T19897] team_slave_1: entered promiscuous mode [ 947.467778][T19897] bridge0: port 4(team0) entered blocking state [ 947.474223][T19897] bridge0: port 4(team0) entered forwarding state [ 958.882379][T20113] usb usb36: usbfs: process 20113 (syz.3.2676) did not claim interface 0 before use [ 961.953792][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 967.389060][T20301] FAULT_INJECTION: forcing a failure. [ 967.389060][T20301] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 967.487044][T20301] CPU: 0 UID: 0 PID: 20301 Comm: syz.0.2707 Tainted: G U L syzkaller #0 PREEMPT(full) [ 967.487103][T20301] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 967.487116][T20301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 967.487137][T20301] Call Trace: [ 967.487149][T20301] [ 967.487162][T20301] dump_stack_lvl+0x100/0x190 [ 967.487220][T20301] should_fail_ex.cold+0x5/0xa [ 967.487253][T20301] ? prepare_alloc_pages+0x16d/0x5f0 [ 967.487292][T20301] should_fail_alloc_page+0xeb/0x140 [ 967.487326][T20301] prepare_alloc_pages+0x1f0/0x5f0 [ 967.487368][T20301] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 967.487447][T20301] ? stack_trace_save+0x8e/0xc0 [ 967.487492][T20301] ? __pfx_stack_trace_save+0x10/0x10 [ 967.487523][T20301] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 967.487568][T20301] ? stack_depot_save_flags+0x27/0x9d0 [ 967.487627][T20301] ? kasan_save_stack+0x3f/0x50 [ 967.487681][T20301] ? kasan_save_stack+0x30/0x50 [ 967.487723][T20301] ? kasan_save_track+0x14/0x30 [ 967.487765][T20301] ? __kasan_kmalloc+0xaa/0xb0 [ 967.487810][T20301] ? do_file_open+0x20e/0x430 [ 967.487835][T20301] ? do_sys_openat2+0x10d/0x1e0 [ 967.487869][T20301] ? __x64_sys_openat+0x12d/0x210 [ 967.487903][T20301] ? do_syscall_64+0x106/0xf80 [ 967.487935][T20301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.487973][T20301] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 967.488026][T20301] ? policy_nodemask+0xed/0x4f0 [ 967.488057][T20301] alloc_pages_mpol+0x1fb/0x550 [ 967.488088][T20301] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 967.488128][T20301] alloc_pages_noprof+0x131/0x390 [ 967.488159][T20301] get_zeroed_page_noprof+0x18/0xb0 [ 967.488189][T20301] mon_alloc_buff+0xce/0x1b0 [ 967.488232][T20301] ? kasan_save_track+0x14/0x30 [ 967.488280][T20301] mon_bin_open+0x207/0x470 [ 967.488327][T20301] ? __pfx_mon_bin_open+0x10/0x10 [ 967.488371][T20301] chrdev_open+0x234/0x6a0 [ 967.488406][T20301] ? __pfx_apparmor_file_open+0x10/0x10 [ 967.488447][T20301] ? __pfx_chrdev_open+0x10/0x10 [ 967.488478][T20301] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 967.488537][T20301] do_dentry_open+0x6d8/0x1660 [ 967.488583][T20301] ? __pfx_chrdev_open+0x10/0x10 [ 967.488621][T20301] vfs_open+0x82/0x3f0 [ 967.488660][T20301] path_openat+0x208c/0x31a0 [ 967.488702][T20301] ? __pfx_path_openat+0x10/0x10 [ 967.488744][T20301] do_file_open+0x20e/0x430 [ 967.488776][T20301] ? __pfx_do_file_open+0x10/0x10 [ 967.488832][T20301] ? alloc_fd+0x476/0x790 [ 967.488884][T20301] ? do_getname+0x191/0x390 [ 967.488922][T20301] do_sys_openat2+0x10d/0x1e0 [ 967.488968][T20301] ? __pfx_do_sys_openat2+0x10/0x10 [ 967.489017][T20301] __x64_sys_openat+0x12d/0x210 [ 967.489054][T20301] ? __pfx___x64_sys_openat+0x10/0x10 [ 967.489103][T20301] do_syscall_64+0x106/0xf80 [ 967.489133][T20301] ? clear_bhb_loop+0x40/0x90 [ 967.489169][T20301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.489197][T20301] RIP: 0033:0x7f120139c629 [ 967.489222][T20301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 967.489251][T20301] RSP: 002b:00007f120217b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 967.489279][T20301] RAX: ffffffffffffffda RBX: 00007f1201616090 RCX: 00007f120139c629 [ 967.489298][T20301] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 967.489315][T20301] RBP: 00007f1201432b39 R08: 0000000000000000 R09: 0000000000000000 [ 967.489333][T20301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 967.489349][T20301] R13: 00007f1201616128 R14: 00007f1201616090 R15: 00007ffd3dc812d8 [ 967.489392][T20301] [ 970.470674][T20360] tipc: Started in network mode [ 970.475723][T20360] tipc: Node identity ee00, cluster identity 4711 [ 970.487785][T20360] tipc: Node number set to 60928 [ 982.374654][T20609] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2762'. [ 990.121606][T20753] [U] [ 990.124432][T20753] [U] [ 990.127144][T20753] [U] [ 990.129867][T20753] [U] [ 990.181876][T20753] [U] [ 990.184613][T20753] [U] [ 990.187343][T20753] [U] [ 990.190069][T20753] [U] [ 990.195996][T20753] [U] [ 990.198772][T20753] [U] [ 990.201527][T20753] [U] [ 990.204279][T20753] [U] [ 990.300954][T20753] [U] [ 990.303687][T20753] [U] [ 990.306411][T20753] [U] [ 990.309145][T20753] [U] [ 990.377119][T20753] [U] [ 990.379861][T20753] [U] [ 990.382601][T20753] [U] [ 990.385349][T20753] [U] [ 990.459216][T20753] [U] [ 993.253798][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.261697][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1000.383993][T20972] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2822'. [ 1006.991715][ T30] audit: type=1807 audit(1771902461.622:12): UNKNOWN= [ 1006.997516][ T30] audit: type=1802 audit(1771902461.622:13): pid=21101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.2842" res=0 errno=0 [ 1007.755685][T21095] ima: policy update failed [ 1007.864315][ T30] audit: type=1802 audit(1771902462.491:14): pid=21095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2842" res=0 errno=0 [ 1012.903821][ T51] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 1012.912755][ T51] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 1015.257844][T21263] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2868'. [ 1031.576474][ T51] Bluetooth: hci3: unexpected event 0x18 length: 440 > 23 [ 1039.277139][T21702] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 1041.649701][T21736] misc userio: Invalid payload size [ 1046.926391][ T30] audit: type=1807 audit(1771903524.531:15): UNKNOWN= [ 1046.931849][ T30] audit: type=1802 audit(1771903524.541:16): pid=21830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.2956" res=0 errno=0 [ 1047.582222][T21818] ima: policy update failed [ 1047.636591][ T30] audit: type=1802 audit(1771903525.251:17): pid=21818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2956" res=0 errno=0 [ 1048.151993][T21849] Invalid ELF header magic: != ELF [ 1054.765944][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.773001][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.582797][T21984] ksmbd: Unknown IPC event: 14, ignore. [ 1055.662813][T21984] FAULT_INJECTION: forcing a failure. [ 1055.662813][T21984] name failslab, interval 1, probability 0, space 0, times 0 [ 1055.700570][T21984] CPU: 1 UID: 0 PID: 21984 Comm: syz.3.2983 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1055.700626][T21984] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1055.700638][T21984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1055.700663][T21984] Call Trace: [ 1055.700672][T21984] [ 1055.700682][T21984] dump_stack_lvl+0x100/0x190 [ 1055.700723][T21984] should_fail_ex.cold+0x5/0xa [ 1055.700750][T21984] ? ima_alloc_init_template+0x19d/0x6d0 [ 1055.700784][T21984] should_failslab+0xc2/0x120 [ 1055.700807][T21984] __kmalloc_noprof+0xe0/0x850 [ 1055.700848][T21984] ima_alloc_init_template+0x19d/0x6d0 [ 1055.700890][T21984] ima_store_measurement+0x1e3/0x5b0 [ 1055.700927][T21984] ? __pfx_ima_store_measurement+0x10/0x10 [ 1055.700973][T21984] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 1055.701007][T21984] process_measurement+0x19cc/0x2350 [ 1055.701049][T21984] ? __pfx_process_measurement+0x10/0x10 [ 1055.701081][T21984] ? trace_contention_end+0x140/0x180 [ 1055.701118][T21984] ? find_held_lock+0x2b/0x80 [ 1055.701139][T21984] ? trace_array_get+0xd8/0x100 [ 1055.701160][T21984] ? trace_array_get+0xd8/0x100 [ 1055.701205][T21984] ? bpf_lsm_locked_down+0x9/0x10 [ 1055.701227][T21984] ? security_locked_down+0x70/0x1e0 [ 1055.701253][T21984] ? tracing_open_generic+0x94/0xc0 [ 1055.701288][T21984] ? subsystem_open+0x1bc/0x4b0 [ 1055.701311][T21984] ? inode_to_bdi+0x9e/0x160 [ 1055.701352][T21984] ima_file_check+0xcc/0x120 [ 1055.701383][T21984] ? __pfx_ima_file_check+0x10/0x10 [ 1055.701421][T21984] security_file_post_open+0xc4/0x210 [ 1055.701458][T21984] path_openat+0x1418/0x31a0 [ 1055.701491][T21984] ? __pfx_path_openat+0x10/0x10 [ 1055.701531][T21984] do_file_open+0x20e/0x430 [ 1055.701555][T21984] ? __pfx_do_file_open+0x10/0x10 [ 1055.701599][T21984] ? alloc_fd+0x476/0x790 [ 1055.701640][T21984] ? do_getname+0x191/0x390 [ 1055.701671][T21984] do_sys_openat2+0x10d/0x1e0 [ 1055.701701][T21984] ? __pfx_do_sys_openat2+0x10/0x10 [ 1055.701741][T21984] __x64_sys_openat+0x12d/0x210 [ 1055.701772][T21984] ? __pfx___x64_sys_openat+0x10/0x10 [ 1055.701813][T21984] do_syscall_64+0x106/0xf80 [ 1055.701838][T21984] ? clear_bhb_loop+0x40/0x90 [ 1055.701868][T21984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.701892][T21984] RIP: 0033:0x7f145dd9c629 [ 1055.701912][T21984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1055.701936][T21984] RSP: 002b:00007f145ebeb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1055.701959][T21984] RAX: ffffffffffffffda RBX: 00007f145e015fa0 RCX: 00007f145dd9c629 [ 1055.701975][T21984] RDX: 0000000000000400 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 1055.701991][T21984] RBP: 00007f145de32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1055.702005][T21984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1055.702019][T21984] R13: 00007f145e016038 R14: 00007f145e015fa0 R15: 00007ffc3cd4eed8 [ 1055.702050][T21984] [ 1055.703522][ T30] audit: type=1804 audit(1771903533.307:18): pid=21984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.3.2983" name="/newroot/sys/kernel/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=0 errno=0 [ 1056.260706][ T51] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 1056.270159][ T51] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 1064.282988][ T30] audit: type=1807 audit(1771903541.873:19): UNKNOWN= [ 1064.283614][ T30] audit: type=1802 audit(1771903541.873:20): pid=22109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.3003" res=0 errno=0 [ 1064.736333][T22108] ima: policy update failed [ 1064.742160][ T30] audit: type=1802 audit(1771903542.333:21): pid=22108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.3003" res=0 errno=0 [ 1069.671357][T22206] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1069.684961][T22206] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1069.703900][T22206] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1069.717198][T22206] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1071.048036][T21990] Bluetooth: hci1: command 0x0406 tx timeout [ 1071.703238][T21990] Bluetooth: hci2: command 0x0406 tx timeout [ 1071.768472][T14457] Bluetooth: hci0: command 0x0406 tx timeout [ 1071.774881][T21990] Bluetooth: hci3: command 0x0406 tx timeout [ 1075.405131][ T30] audit: type=1807 audit(1771903552.997:22): UNKNOWN= [ 1075.407254][ T30] audit: type=1802 audit(1771903552.997:23): pid=22299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.3035" res=0 errno=0 [ 1075.664897][T22297] ima: policy update failed [ 1075.706055][ T30] audit: type=1802 audit(1771903553.267:24): pid=22297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.3035" res=0 errno=0 [ 1077.233012][T22353] usb usb24: usbfs: process 22353 (syz.0.3044) did not claim interface 0 before use [ 1080.493822][T22392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3052'. [ 1080.553481][T22393] netlink: 'syz.0.3052': attribute type 1 has an invalid length. [ 1080.578687][T22393] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3052'. [ 1083.659053][T22433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3060'. [ 1083.698592][T22433] HfR: entered promiscuous mode [ 1088.734903][T22497] Invalid ELF header magic: != ELF [ 1088.762742][T22495] FAULT_INJECTION: forcing a failure. [ 1088.762742][T22495] name failslab, interval 1, probability 0, space 0, times 0 [ 1088.847249][T22495] CPU: 0 UID: 0 PID: 22495 Comm: syz.0.3071 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1088.847303][T22495] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1088.847317][T22495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1088.847336][T22495] Call Trace: [ 1088.847346][T22495] [ 1088.847360][T22495] dump_stack_lvl+0x100/0x190 [ 1088.847416][T22495] should_fail_ex.cold+0x5/0xa [ 1088.847455][T22495] ? __seq_open_private+0x22/0xd0 [ 1088.847501][T22495] should_failslab+0xc2/0x120 [ 1088.847533][T22495] __kmalloc_noprof+0xe0/0x850 [ 1088.847590][T22495] ? __pfx_stats_fop_open+0x10/0x10 [ 1088.847623][T22495] __seq_open_private+0x22/0xd0 [ 1088.847670][T22495] sc_common_open+0x6b/0x200 [ 1088.847705][T22495] full_proxy_open_regular+0x1b6/0x370 [ 1088.847751][T22495] do_dentry_open+0x6d8/0x1660 [ 1088.847803][T22495] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 1088.847863][T22495] vfs_open+0x82/0x3f0 [ 1088.847906][T22495] path_openat+0x208c/0x31a0 [ 1088.847953][T22495] ? __pfx_path_openat+0x10/0x10 [ 1088.848004][T22495] do_file_open+0x20e/0x430 [ 1088.848041][T22495] ? __pfx_do_file_open+0x10/0x10 [ 1088.848105][T22495] ? alloc_fd+0x476/0x790 [ 1088.848175][T22495] ? do_getname+0x191/0x390 [ 1088.848217][T22495] do_sys_openat2+0x10d/0x1e0 [ 1088.848256][T22495] ? __pfx_do_sys_openat2+0x10/0x10 [ 1088.848300][T22495] ? __fget_files+0x21f/0x3d0 [ 1088.848358][T22495] __x64_sys_openat+0x12d/0x210 [ 1088.848402][T22495] ? __pfx___x64_sys_openat+0x10/0x10 [ 1088.848461][T22495] do_syscall_64+0x106/0xf80 [ 1088.848497][T22495] ? clear_bhb_loop+0x40/0x90 [ 1088.848538][T22495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.848573][T22495] RIP: 0033:0x7f120139c629 [ 1088.848600][T22495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1088.848634][T22495] RSP: 002b:00007f120217b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1088.848666][T22495] RAX: ffffffffffffffda RBX: 00007f1201616090 RCX: 00007f120139c629 [ 1088.848687][T22495] RDX: 0000000000008382 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 1088.848707][T22495] RBP: 00007f1201432b39 R08: 0000000000000000 R09: 0000000000000000 [ 1088.848744][T22495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1088.848763][T22495] R13: 00007f1201616128 R14: 00007f1201616090 R15: 00007ffd3dc812d8 [ 1088.848808][T22495] [ 1091.773207][ T30] audit: type=1807 audit(1771903569.349:25): UNKNOWN= [ 1091.773546][ T30] audit: type=1802 audit(1771903569.359:26): pid=22534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.3078" res=0 errno=0 [ 1092.970692][T22527] ima: policy update failed [ 1092.989278][ T30] audit: type=1802 audit(1771903570.578:27): pid=22527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.3078" res=0 errno=0 [ 1094.813268][ T30] audit: type=1800 audit(1771903572.387:28): pid=22560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3085" name="dbroot" dev="configfs" ino=98305 res=0 errno=0 [ 1094.905230][T22560] tipc: Started in network mode [ 1094.910209][T22560] tipc: Node identity ffffffff, cluster identity 4711 [ 1094.917476][T22560] tipc: Node number set to 4294967295 [ 1101.532918][T22656] Invalid ELF header magic: != ELF [ 1106.719395][ T30] audit: type=1800 audit(1771903584.302:29): pid=22743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3114" name="dbroot" dev="configfs" ino=98662 res=0 errno=0 [ 1107.815837][T22759] Invalid ELF header magic: != ELF [ 1116.193692][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.208602][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.966315][T22954] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1118.973714][T22954] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1118.979966][T22954] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1118.986199][T22954] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1120.718428][ T30] audit: type=1800 audit(1771903598.285:30): pid=22987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3158" name="dbroot" dev="configfs" ino=99098 res=0 errno=0 [ 1121.073120][T14457] Bluetooth: hci3: command 0x0406 tx timeout [ 1121.073690][T21990] Bluetooth: hci0: command 0x0406 tx timeout [ 1121.085481][T14457] Bluetooth: hci2: command 0x0406 tx timeout [ 1121.085813][T21990] Bluetooth: hci1: command 0x0406 tx timeout [ 1123.954040][T23044] __vm_enough_memory: pid: 23044, comm: syz.3.3168, bytes: 4398046511104 not enough memory for the allocation [ 1134.694346][T23279] Invalid ELF header magic: != ELF [ 1139.244507][T23364] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1139.266704][T23364] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1139.294951][T23364] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1139.312930][T23364] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1140.943486][T23408] FAULT_INJECTION: forcing a failure. [ 1140.943486][T23408] name failslab, interval 1, probability 0, space 0, times 0 [ 1140.956987][T23408] CPU: 1 UID: 0 PID: 23408 Comm: syz.3.3222 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1140.957027][T23408] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1140.957036][T23408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1140.957052][T23408] Call Trace: [ 1140.957060][T23408] [ 1140.957069][T23408] dump_stack_lvl+0x100/0x190 [ 1140.957111][T23408] should_fail_ex.cold+0x5/0xa [ 1140.957139][T23408] should_failslab+0xc2/0x120 [ 1140.957162][T23408] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1140.957196][T23408] ? __kernfs_new_node+0xd2/0x960 [ 1140.957233][T23408] __kernfs_new_node+0xd2/0x960 [ 1140.957269][T23408] ? __pfx___kernfs_new_node+0x10/0x10 [ 1140.957308][T23408] ? find_held_lock+0x2b/0x80 [ 1140.957329][T23408] ? kernfs_root+0xee/0x2a0 [ 1140.957358][T23408] ? kernfs_root+0xee/0x2a0 [ 1140.957396][T23408] kernfs_new_node+0x11b/0x1a0 [ 1140.957445][T23408] __kernfs_create_file+0x53/0x350 [ 1140.957474][T23408] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1140.957512][T23408] internal_create_group+0x593/0xf40 [ 1140.957552][T23408] ? __pfx_internal_create_group+0x10/0x10 [ 1140.957603][T23408] ? kernfs_create_link+0x1bd/0x240 [ 1140.957644][T23408] internal_create_groups+0x9d/0x150 [ 1140.957676][T23408] device_add+0x7c8/0x1950 [ 1140.957713][T23408] ? __pfx_device_add+0x10/0x10 [ 1140.957746][T23408] ? lockdep_init_map_type+0x5c/0x250 [ 1140.957776][T23408] ? __init_waitqueue_head+0xca/0x150 [ 1140.957815][T23408] netdev_register_kobject+0x1a9/0x3d0 [ 1140.957848][T23408] register_netdevice+0x12e0/0x2210 [ 1140.957878][T23408] ? idr_alloc+0xdd/0x130 [ 1140.957900][T23408] ? __pfx_register_netdevice+0x10/0x10 [ 1140.957924][T23408] ? net_generic+0xea/0x2a0 [ 1140.957971][T23408] ppp_dev_configure+0x986/0xcb0 [ 1140.958002][T23408] ppp_ioctl+0x985/0x2800 [ 1140.958028][T23408] ? find_held_lock+0x2b/0x80 [ 1140.958049][T23408] ? __pfx_ppp_ioctl+0x10/0x10 [ 1140.958078][T23408] ? __fget_files+0x21f/0x3d0 [ 1140.958118][T23408] ? __pfx_ppp_ioctl+0x10/0x10 [ 1140.958143][T23408] __x64_sys_ioctl+0x18e/0x210 [ 1140.958176][T23408] do_syscall_64+0x106/0xf80 [ 1140.958200][T23408] ? clear_bhb_loop+0x40/0x90 [ 1140.958228][T23408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.958251][T23408] RIP: 0033:0x7f145dd9c629 [ 1140.958270][T23408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1140.958292][T23408] RSP: 002b:00007f145eba9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1140.958315][T23408] RAX: ffffffffffffffda RBX: 00007f145e016180 RCX: 00007f145dd9c629 [ 1140.958331][T23408] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 000000000000000d [ 1140.958345][T23408] RBP: 00007f145de32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1140.958360][T23408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1140.958373][T23408] R13: 00007f145e016218 R14: 00007f145e016180 R15: 00007ffc3cd4eed8 [ 1140.958424][T23408] [ 1141.323534][T22993] Bluetooth: hci3: command 0x0406 tx timeout [ 1141.327681][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 1141.329747][T22993] Bluetooth: hci2: command 0x0406 tx timeout [ 1141.335925][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 1147.867633][T23541] Invalid ELF header magic: != ELF [ 1154.350225][T23640] Invalid ELF header magic: != ELF [ 1156.689371][T23688] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1156.714472][T23688] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1156.728983][T23688] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1156.745951][T23688] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1157.294893][T23702] overlayfs: missing 'lowerdir' [ 1157.317360][T23702] FAULT_INJECTION: forcing a failure. [ 1157.317360][T23702] name failslab, interval 1, probability 0, space 0, times 0 [ 1157.333147][T23702] CPU: 1 UID: 0 PID: 23702 Comm: syz.1.3268 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1157.333198][T23702] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1157.333210][T23702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1157.333229][T23702] Call Trace: [ 1157.333240][T23702] [ 1157.333250][T23702] dump_stack_lvl+0x100/0x190 [ 1157.333304][T23702] should_fail_ex.cold+0x5/0xa [ 1157.333341][T23702] should_failslab+0xc2/0x120 [ 1157.333372][T23702] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1157.333410][T23702] ? drm_atomic_helper_connector_duplicate_state+0x72/0xd0 [ 1157.333463][T23702] drm_atomic_helper_connector_duplicate_state+0x72/0xd0 [ 1157.333505][T23702] drm_atomic_get_connector_state+0x401/0x8f0 [ 1157.333581][T23702] drm_atomic_add_affected_connectors+0x2e0/0x3f0 [ 1157.333652][T23702] ? __pfx_drm_atomic_add_affected_connectors+0x10/0x10 [ 1157.333701][T23702] ? ww_mutex_lock+0x37/0x160 [ 1157.333739][T23702] ? modeset_lock+0x114/0x6d0 [ 1157.333790][T23702] __drm_atomic_helper_set_config+0x5f6/0xee0 [ 1157.333841][T23702] ? __pfx___drm_atomic_helper_set_config+0x10/0x10 [ 1157.333882][T23702] ? drm_client_rotation+0x451/0x6a0 [ 1157.333909][T23702] drm_client_modeset_commit_atomic+0x53d/0x7e0 [ 1157.333941][T23702] ? __mutex_lock+0x26a/0x1b90 [ 1157.333965][T23702] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 1157.333991][T23702] ? drm_master_internal_acquire+0x21/0x80 [ 1157.334038][T23702] drm_client_modeset_commit_locked+0x14d/0x580 [ 1157.334068][T23702] drm_client_modeset_commit+0x4f/0x80 [ 1157.334093][T23702] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 1157.334142][T23702] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 1157.334170][T23702] drm_fbdev_client_restore+0x1b/0x30 [ 1157.334203][T23702] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 1157.334236][T23702] drm_client_dev_restore+0x205/0x2a0 [ 1157.334264][T23702] drm_release+0x2c6/0x360 [ 1157.334286][T23702] ? __pfx_drm_release+0x10/0x10 [ 1157.334306][T23702] __fput+0x3ff/0xb40 [ 1157.334336][T23702] task_work_run+0x150/0x240 [ 1157.334368][T23702] ? __pfx_task_work_run+0x10/0x10 [ 1157.334409][T23702] exit_to_user_mode_loop+0x100/0x4a0 [ 1157.334441][T23702] do_syscall_64+0x668/0xf80 [ 1157.334464][T23702] ? clear_bhb_loop+0x40/0x90 [ 1157.334491][T23702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.334513][T23702] RIP: 0033:0x7fa92959c629 [ 1157.334531][T23702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1157.334552][T23702] RSP: 002b:00007fa92a50c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1157.334572][T23702] RAX: 0000000000000000 RBX: 00007fa929816090 RCX: 00007fa92959c629 [ 1157.334586][T23702] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000002 [ 1157.334599][T23702] RBP: 00007fa929632b39 R08: 0000000000000000 R09: 0000000000000000 [ 1157.334612][T23702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1157.334625][T23702] R13: 00007fa929816128 R14: 00007fa929816090 R15: 00007ffcc45f1178 [ 1157.334654][T23702] [ 1158.110312][T23711] kvm: kvm [23707]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc1) = 0x2 [ 1158.782159][T21990] Bluetooth: hci3: command 0x0406 tx timeout [ 1158.788951][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 1158.788989][T22993] Bluetooth: hci2: command 0x0406 tx timeout [ 1158.795164][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 1158.861130][ T30] audit: type=1800 audit(1771904659.409:31): pid=23726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3273" name="dbroot" dev="configfs" ino=103613 res=0 errno=0 [ 1159.010231][T23726] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3273'. [ 1159.115900][T23726] team_slave_1 (unregistering): left promiscuous mode [ 1159.148993][T23726] team_slave_1 (unregistering): left allmulticast mode [ 1159.203229][T23726] team0: Port device team_slave_1 removed [ 1165.257933][T23872] kvm: kvm [23864]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc1) = 0x2 [ 1165.797693][T23880] overlayfs: missing 'lowerdir' [ 1165.842696][T23880] FAULT_INJECTION: forcing a failure. [ 1165.842696][T23880] name failslab, interval 1, probability 0, space 0, times 0 [ 1165.880820][T23880] CPU: 1 UID: 0 PID: 23880 Comm: syz.0.3296 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1165.880858][T23880] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1165.880866][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1165.880879][T23880] Call Trace: [ 1165.880886][T23880] [ 1165.880894][T23880] dump_stack_lvl+0x100/0x190 [ 1165.880931][T23880] should_fail_ex.cold+0x5/0xa [ 1165.880958][T23880] should_failslab+0xc2/0x120 [ 1165.880980][T23880] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1165.881027][T23880] ? drm_atomic_helper_setup_commit+0x56f/0x14f0 [ 1165.881052][T23880] ? drm_atomic_helper_check+0x10f/0x190 [ 1165.881096][T23880] drm_atomic_helper_setup_commit+0x56f/0x14f0 [ 1165.881132][T23880] drm_atomic_helper_commit+0xa9/0x380 [ 1165.881158][T23880] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 1165.881183][T23880] drm_atomic_commit+0x230/0x300 [ 1165.881221][T23880] ? __pfx_drm_atomic_commit+0x10/0x10 [ 1165.881256][T23880] ? __pfx___drm_printfn_info+0x10/0x10 [ 1165.881285][T23880] ? drm_client_rotation+0x451/0x6a0 [ 1165.881313][T23880] drm_client_modeset_commit_atomic+0x6a6/0x7e0 [ 1165.881346][T23880] ? __mutex_lock+0x26a/0x1b90 [ 1165.881374][T23880] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 1165.881401][T23880] ? drm_master_internal_acquire+0x21/0x80 [ 1165.881453][T23880] drm_client_modeset_commit_locked+0x14d/0x580 [ 1165.881485][T23880] drm_client_modeset_commit+0x4f/0x80 [ 1165.881511][T23880] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 1165.881569][T23880] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 1165.881597][T23880] drm_fbdev_client_restore+0x1b/0x30 [ 1165.881629][T23880] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 1165.881662][T23880] drm_client_dev_restore+0x205/0x2a0 [ 1165.881699][T23880] drm_release+0x2c6/0x360 [ 1165.881721][T23880] ? __pfx_drm_release+0x10/0x10 [ 1165.881741][T23880] __fput+0x3ff/0xb40 [ 1165.881775][T23880] task_work_run+0x150/0x240 [ 1165.881808][T23880] ? __pfx_task_work_run+0x10/0x10 [ 1165.881847][T23880] exit_to_user_mode_loop+0x100/0x4a0 [ 1165.881878][T23880] do_syscall_64+0x668/0xf80 [ 1165.881901][T23880] ? clear_bhb_loop+0x40/0x90 [ 1165.881928][T23880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1165.881950][T23880] RIP: 0033:0x7f120139c629 [ 1165.881968][T23880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1165.881989][T23880] RSP: 002b:00007f120217b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1165.882010][T23880] RAX: 0000000000000000 RBX: 00007f1201616090 RCX: 00007f120139c629 [ 1165.882024][T23880] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000002 [ 1165.882037][T23880] RBP: 00007f1201432b39 R08: 0000000000000000 R09: 0000000000000000 [ 1165.882050][T23880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1165.882063][T23880] R13: 00007f1201616128 R14: 00007f1201616090 R15: 00007ffd3dc812d8 [ 1165.882091][T23880] [ 1169.285988][ T30] audit: type=1804 audit(1771906715.818:32): pid=23937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3305" name="/newroot/826/file0" dev="tmpfs" ino=4247 res=1 errno=0 [ 1169.450216][ T30] audit: type=1804 audit(1771906715.998:33): pid=23927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3305" name="/newroot/826/file0" dev="tmpfs" ino=4247 res=1 errno=0 [ 1169.770040][ T30] audit: type=1800 audit(1771906716.318:34): pid=23943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3308" name="dbroot" dev="configfs" ino=104072 res=0 errno=0 [ 1169.779763][T23943] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3308'. [ 1169.827120][T23943] team_slave_1 (unregistering): left promiscuous mode [ 1169.837368][T23943] team_slave_1 (unregistering): left allmulticast mode [ 1169.859488][T23943] team0: Port device team_slave_1 removed [ 1177.665630][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.672106][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1181.290640][T24134] Invalid ELF header magic: != ELF [ 1187.135098][T24223] hub 1-0:1.0: USB hub found [ 1187.226813][T24223] hub 1-0:1.0: 1 port detected [ 1191.019420][T24260] futex_wake_op: syz.0.3357 tries to shift op by -2048; fix this program [ 1192.303418][T24310] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3363'. [ 1192.312617][ T30] audit: type=1800 audit(1771906738.837:35): pid=24310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3363" name="dbroot" dev="configfs" ino=104841 res=0 errno=0 [ 1192.568374][T24310] team_slave_1 (unregistering): left promiscuous mode [ 1192.598770][T24310] team_slave_1 (unregistering): left allmulticast mode [ 1192.646611][T24310] team0: Port device team_slave_1 removed [ 1194.094448][ T30] audit: type=1804 audit(1771906740.626:36): pid=24329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3365" name="/newroot/847/file0" dev="tmpfs" ino=4373 res=1 errno=0 [ 1194.191810][ T30] audit: type=1804 audit(1771906740.726:37): pid=24330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3365" name="/newroot/847/file0" dev="tmpfs" ino=4373 res=1 errno=0 [ 1199.903793][ T30] audit: type=1804 audit(1771906746.433:38): pid=24427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3381" name="/newroot/854/file0" dev="tmpfs" ino=4413 res=1 errno=0 [ 1200.031812][ T30] audit: type=1804 audit(1771906746.463:39): pid=24428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3381" name="/newroot/854/file0" dev="tmpfs" ino=4413 res=1 errno=0 [ 1205.378405][T24520] Invalid ELF header magic: != ELF [ 1209.800179][ T30] audit: type=1804 audit(1771906756.328:40): pid=24575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3407" name="/newroot/840/file0" dev="tmpfs" ino=4336 res=1 errno=0 [ 1209.873844][ T30] audit: type=1804 audit(1771906756.348:41): pid=24585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3407" name="/newroot/840/file0" dev="tmpfs" ino=4336 res=1 errno=0 [ 1210.964713][T24605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3412'. [ 1211.014985][T24594] FAULT_INJECTION: forcing a failure. [ 1211.014985][T24594] name failslab, interval 1, probability 0, space 0, times 0 [ 1211.030951][T24605] netlink: 354 bytes leftover after parsing attributes in process `syz.0.3412'. [ 1211.114791][T24594] CPU: 1 UID: 0 PID: 24594 Comm: syz.2.3410 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1211.114846][T24594] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1211.114859][T24594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1211.114880][T24594] Call Trace: [ 1211.114891][T24594] [ 1211.114903][T24594] dump_stack_lvl+0x100/0x190 [ 1211.114960][T24594] should_fail_ex.cold+0x5/0xa [ 1211.114999][T24594] ? cache_create_net+0xa2/0x1f0 [ 1211.115033][T24594] should_failslab+0xc2/0x120 [ 1211.115076][T24594] __kmalloc_noprof+0xe0/0x850 [ 1211.115135][T24594] cache_create_net+0xa2/0x1f0 [ 1211.115172][T24594] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 1211.115210][T24594] gss_svc_init_net+0x69/0x640 [ 1211.115241][T24594] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 1211.115284][T24594] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 1211.115322][T24594] ops_init+0x1e2/0x5f0 [ 1211.115364][T24594] setup_net+0x118/0x3a0 [ 1211.115405][T24594] ? __pfx_setup_net+0x10/0x10 [ 1211.115443][T24594] ? lockdep_init_map_type+0x5c/0x250 [ 1211.115488][T24594] ? mutex_init_lockep+0x110/0x150 [ 1211.115540][T24594] copy_net_ns+0x46f/0x7c0 [ 1211.115599][T24594] create_new_namespaces+0x3ea/0xac0 [ 1211.115642][T24594] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1211.115690][T24594] ksys_unshare+0x455/0xab0 [ 1211.115736][T24594] ? __pfx_ksys_unshare+0x10/0x10 [ 1211.115789][T24594] __x64_sys_unshare+0x31/0x40 [ 1211.115826][T24594] do_syscall_64+0x106/0xf80 [ 1211.115858][T24594] ? clear_bhb_loop+0x40/0x90 [ 1211.115897][T24594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1211.115928][T24594] RIP: 0033:0x7fb36e39c629 [ 1211.115953][T24594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1211.115984][T24594] RSP: 002b:00007fb36c5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1211.116015][T24594] RAX: ffffffffffffffda RBX: 00007fb36e615fa0 RCX: 00007fb36e39c629 [ 1211.116035][T24594] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1211.116061][T24594] RBP: 00007fb36e432b39 R08: 0000000000000000 R09: 0000000000000000 [ 1211.116080][T24594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1211.116097][T24594] R13: 00007fb36e616038 R14: 00007fb36e615fa0 R15: 00007ffcdd65c3c8 [ 1211.116138][T24594] [ 1211.683710][T24597] program syz.2.3410 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1211.717698][T24614] bond0: invalid ARP target specified [ 1211.773623][T24614] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3415'. [ 1211.784245][T24614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1211.793144][T24614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1211.846159][T24614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1211.879557][T24614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1211.939561][T24616] FAULT_INJECTION: forcing a failure. [ 1211.939561][T24616] name failslab, interval 1, probability 0, space 0, times 0 [ 1212.005427][T24616] CPU: 1 UID: 0 PID: 24616 Comm: syz.3.3415 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1212.005466][T24616] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1212.005475][T24616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1212.005489][T24616] Call Trace: [ 1212.005496][T24616] [ 1212.005504][T24616] dump_stack_lvl+0x100/0x190 [ 1212.005543][T24616] should_fail_ex.cold+0x5/0xa [ 1212.005570][T24616] should_failslab+0xc2/0x120 [ 1212.005592][T24616] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1212.005638][T24616] ? bpf_prog_store_orig_filter+0x7b/0x1d0 [ 1212.005669][T24616] bpf_prog_store_orig_filter+0x7b/0x1d0 [ 1212.005713][T24616] bpf_prog_create_from_user+0x1c3/0x2f0 [ 1212.005752][T24616] ? __pfx_seccomp_check_filter+0x10/0x10 [ 1212.005785][T24616] do_seccomp+0x7f7/0x2740 [ 1212.005822][T24616] ? __pfx_do_seccomp+0x10/0x10 [ 1212.005852][T24616] ? __x64_sys_openat+0x12d/0x210 [ 1212.005884][T24616] ? xfd_validate_state+0x129/0x190 [ 1212.005928][T24616] do_syscall_64+0x106/0xf80 [ 1212.005954][T24616] ? clear_bhb_loop+0x40/0x90 [ 1212.005983][T24616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1212.006009][T24616] RIP: 0033:0x7f145dd9c629 [ 1212.006030][T24616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1212.006053][T24616] RSP: 002b:00007f145ebca028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 1212.006075][T24616] RAX: ffffffffffffffda RBX: 00007f145e016090 RCX: 00007f145dd9c629 [ 1212.006091][T24616] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000000000000001 [ 1212.006105][T24616] RBP: 00007f145de32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1212.006119][T24616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1212.006133][T24616] R13: 00007f145e016128 R14: 00007f145e016090 R15: 00007ffc3cd4eed8 [ 1212.006163][T24616] [ 1217.415721][T24716] random: crng reseeded on system resumption [ 1219.694192][T24765] FAULT_INJECTION: forcing a failure. [ 1219.694192][T24765] name failslab, interval 1, probability 0, space 0, times 0 [ 1219.757655][T24765] CPU: 0 UID: 0 PID: 24765 Comm: syz.3.3439 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1219.757712][T24765] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1219.757721][T24765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1219.757735][T24765] Call Trace: [ 1219.757743][T24765] [ 1219.757751][T24765] dump_stack_lvl+0x100/0x190 [ 1219.757790][T24765] should_fail_ex.cold+0x5/0xa [ 1219.757817][T24765] should_failslab+0xc2/0x120 [ 1219.757839][T24765] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1219.757873][T24765] ? __proc_create+0x2cb/0x8c0 [ 1219.757914][T24765] __proc_create+0x2cb/0x8c0 [ 1219.757969][T24765] ? __pfx___proc_create+0x10/0x10 [ 1219.758009][T24765] ? _raw_write_unlock+0x28/0x50 [ 1219.758033][T24765] ? proc_register+0x559/0x8a0 [ 1219.758072][T24765] proc_create_reg+0x75/0x170 [ 1219.758113][T24765] proc_create_data+0x86/0x110 [ 1219.758156][T24765] ? __pfx_proc_create_data+0x10/0x10 [ 1219.758195][T24765] ? cache_register_net+0x137/0x5e0 [ 1219.758224][T24765] ? cache_register_net+0x137/0x5e0 [ 1219.758259][T24765] cache_register_net+0x25a/0x5e0 [ 1219.758291][T24765] gss_svc_init_net+0x14e/0x640 [ 1219.758313][T24765] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 1219.758342][T24765] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 1219.758367][T24765] ops_init+0x1e2/0x5f0 [ 1219.758398][T24765] setup_net+0x118/0x3a0 [ 1219.758427][T24765] ? __pfx_setup_net+0x10/0x10 [ 1219.758452][T24765] ? lockdep_init_map_type+0x5c/0x250 [ 1219.758485][T24765] ? mutex_init_lockep+0x110/0x150 [ 1219.758521][T24765] copy_net_ns+0x46f/0x7c0 [ 1219.758554][T24765] create_new_namespaces+0x3ea/0xac0 [ 1219.758586][T24765] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1219.758613][T24765] ksys_unshare+0x455/0xab0 [ 1219.758645][T24765] ? __pfx_ksys_unshare+0x10/0x10 [ 1219.758685][T24765] __x64_sys_unshare+0x31/0x40 [ 1219.758714][T24765] do_syscall_64+0x106/0xf80 [ 1219.758739][T24765] ? clear_bhb_loop+0x40/0x90 [ 1219.758767][T24765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.758792][T24765] RIP: 0033:0x7f145dd9c629 [ 1219.758811][T24765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1219.758835][T24765] RSP: 002b:00007f145ebeb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1219.758857][T24765] RAX: ffffffffffffffda RBX: 00007f145e015fa0 RCX: 00007f145dd9c629 [ 1219.758873][T24765] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1219.758887][T24765] RBP: 00007f145de32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1219.758902][T24765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1219.758916][T24765] R13: 00007f145e016038 R14: 00007f145e015fa0 R15: 00007ffc3cd4eed8 [ 1219.758947][T24765] [ 1220.478662][T24774] bond0: Unable to set up delay as MII monitoring is disabled [ 1220.688041][T24768] program syz.3.3439 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1220.876151][ T30] audit: type=1804 audit(1771906767.373:42): pid=24777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3440" name="/newroot/872/file0" dev="tmpfs" ino=4505 res=1 errno=0 [ 1220.988897][ T30] audit: type=1804 audit(1771906767.373:43): pid=24782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3440" name="/newroot/872/file0" dev="tmpfs" ino=4505 res=1 errno=0 [ 1222.514870][T24814] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3446'. [ 1222.761600][T24823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3448'. [ 1222.818200][T24823] netlink: 'syz.0.3448': attribute type 1 has an invalid length. [ 1222.883995][T24823] netlink: 51505 bytes leftover after parsing attributes in process `syz.0.3448'. [ 1223.484182][T24820] bond0: option slaves: interface - does not exist! [ 1228.297366][T24932] FAULT_INJECTION: forcing a failure. [ 1228.297366][T24932] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1228.314783][T24932] CPU: 0 UID: 0 PID: 24932 Comm: syz.3.3466 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1228.314833][T24932] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1228.314844][T24932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1228.314862][T24932] Call Trace: [ 1228.314872][T24932] [ 1228.314882][T24932] dump_stack_lvl+0x100/0x190 [ 1228.314933][T24932] should_fail_ex.cold+0x5/0xa [ 1228.314961][T24932] ? prepare_alloc_pages+0x16d/0x5f0 [ 1228.314997][T24932] should_fail_alloc_page+0xeb/0x140 [ 1228.315028][T24932] prepare_alloc_pages+0x1f0/0x5f0 [ 1228.315060][T24932] ? arch_stack_walk+0xa6/0xf0 [ 1228.315091][T24932] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1228.315143][T24932] ? stack_trace_save+0x8e/0xc0 [ 1228.315170][T24932] ? __pfx_stack_trace_save+0x10/0x10 [ 1228.315199][T24932] ? stack_depot_save_flags+0x27/0x9d0 [ 1228.315253][T24932] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1228.315295][T24932] ? kasan_save_stack+0x3f/0x50 [ 1228.315334][T24932] ? kasan_save_stack+0x30/0x50 [ 1228.315375][T24932] ? __kasan_slab_alloc+0x89/0x90 [ 1228.315419][T24932] ? __pmd_alloc+0xbf/0x9c0 [ 1228.315446][T24932] ? walk_pgd_range+0x896/0x1eb0 [ 1228.315493][T24932] ? __walk_page_range+0x163/0x820 [ 1228.315553][T24932] ? walk_page_range_mm_unsafe+0x563/0xa10 [ 1228.315606][T24932] ? madvise_guard_install+0x2f9/0x7c0 [ 1228.315644][T24932] ? madvise_vma_behavior+0x11f1/0x3050 [ 1228.315688][T24932] ? madvise_walk_vmas+0x2fe/0xa90 [ 1228.315723][T24932] ? madvise_do_behavior+0x1ea/0x510 [ 1228.315758][T24932] ? do_madvise+0x195/0x240 [ 1228.315810][T24932] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1228.315871][T24932] ? policy_nodemask+0xed/0x4f0 [ 1228.315907][T24932] alloc_pages_mpol+0x1fb/0x550 [ 1228.315941][T24932] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1228.315987][T24932] alloc_pages_noprof+0x131/0x390 [ 1228.316023][T24932] pte_alloc_one+0x1e/0x3e0 [ 1228.316061][T24932] __pte_alloc+0x6d/0x3f0 [ 1228.316092][T24932] ? __pfx___pte_alloc+0x10/0x10 [ 1228.316123][T24932] ? _raw_spin_unlock+0x28/0x50 [ 1228.316177][T24932] ? __pmd_alloc+0x6aa/0x9c0 [ 1228.316217][T24932] walk_pgd_range+0xb83/0x1eb0 [ 1228.316274][T24932] ? __pfx_guard_install_set_pte+0x10/0x10 [ 1228.316308][T24932] ? __pfx_guard_install_pte_entry+0x10/0x10 [ 1228.316347][T24932] ? __pfx_guard_install_set_pte+0x10/0x10 [ 1228.316386][T24932] ? __pfx_guard_install_set_pte+0x10/0x10 [ 1228.316427][T24932] ? __pfx_guard_install_set_pte+0x10/0x10 [ 1228.316463][T24932] ? __pfx_walk_pgd_range+0x10/0x10 [ 1228.316523][T24932] __walk_page_range+0x163/0x820 [ 1228.316575][T24932] ? find_vma+0xbf/0x140 [ 1228.316626][T24932] ? __pfx_find_vma+0x10/0x10 [ 1228.316691][T24932] ? walk_page_test+0x78/0x180 [ 1228.316743][T24932] walk_page_range_mm_unsafe+0x563/0xa10 [ 1228.316802][T24932] ? __pfx_walk_page_range_mm_unsafe+0x10/0x10 [ 1228.316867][T24932] ? __anon_vma_prepare+0x2e2/0x5e0 [ 1228.316917][T24932] madvise_guard_install+0x2f9/0x7c0 [ 1228.316963][T24932] ? __pfx_madvise_guard_install+0x10/0x10 [ 1228.317004][T24932] ? __pfx_guard_install_pud_entry+0x10/0x10 [ 1228.317036][T24932] ? __pfx_guard_install_pmd_entry+0x10/0x10 [ 1228.317069][T24932] ? __pfx_guard_install_pte_entry+0x10/0x10 [ 1228.317110][T24932] ? __pfx_guard_install_set_pte+0x10/0x10 [ 1228.317157][T24932] madvise_vma_behavior+0x11f1/0x3050 [ 1228.317202][T24932] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 1228.317239][T24932] ? mas_prev_setup.constprop.0+0xb6/0x9c0 [ 1228.317283][T24932] ? mas_prev+0x9b/0xf0 [ 1228.317322][T24932] ? __pfx_mas_prev+0x10/0x10 [ 1228.317373][T24932] ? find_vma_prev+0xd8/0x150 [ 1228.317404][T24932] ? lock_vma_under_rcu+0x1f9/0x590 [ 1228.317447][T24932] ? __pfx_find_vma_prev+0x10/0x10 [ 1228.317491][T24932] ? find_held_lock+0x2b/0x80 [ 1228.317521][T24932] ? madvise_do_behavior+0x1ea/0x510 [ 1228.317556][T24932] ? madvise_do_behavior+0x1ea/0x510 [ 1228.317612][T24932] madvise_walk_vmas+0x2fe/0xa90 [ 1228.317653][T24932] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 1228.317697][T24932] ? futex_hash+0x2c5/0x380 [ 1228.317739][T24932] madvise_do_behavior+0x1ea/0x510 [ 1228.317776][T24932] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1228.317809][T24932] ? futex_wait+0x125/0x380 [ 1228.317866][T24932] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1228.317923][T24932] do_madvise+0x195/0x240 [ 1228.317954][T24932] ? __pfx_do_madvise+0x10/0x10 [ 1228.317986][T24932] ? do_futex+0x192/0x350 [ 1228.318060][T24932] __x64_sys_madvise+0xa9/0x110 [ 1228.318094][T24932] ? lockdep_hardirqs_on+0x78/0x100 [ 1228.318126][T24932] do_syscall_64+0x106/0xf80 [ 1228.318159][T24932] ? clear_bhb_loop+0x40/0x90 [ 1228.318196][T24932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.318237][T24932] RIP: 0033:0x7f145dd9c629 [ 1228.318262][T24932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1228.318291][T24932] RSP: 002b:00007f145ebca028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1228.318320][T24932] RAX: ffffffffffffffda RBX: 00007f145e016090 RCX: 00007f145dd9c629 [ 1228.318339][T24932] RDX: 0000000000000066 RSI: 0000000002021000 RDI: 0000000000000000 [ 1228.318356][T24932] RBP: 00007f145de32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1228.318373][T24932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1228.318389][T24932] R13: 00007f145e016128 R14: 00007f145e016090 R15: 00007ffc3cd4eed8 [ 1228.318426][T24932] [ 1230.613744][T24961] bond0: Unable to set up delay as MII monitoring is disabled [ 1230.625242][T24963] Invalid ELF header magic: != ELF [ 1235.841500][T25032] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3483'. [ 1238.156552][T25080] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3490'. [ 1239.147101][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.160166][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1242.358444][T25157] vhci_hcd vhci_hcd.0: default hub control req: 0000 v0000 i0000 l0 [ 1245.390435][T25211] netlink: 504 bytes leftover after parsing attributes in process `syz.1.3513'. [ 1245.457509][T25211] netlink: 350 bytes leftover after parsing attributes in process `syz.1.3513'. [ 1248.245795][T25265] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3522'. [ 1250.685781][T25319] FAULT_INJECTION: forcing a failure. [ 1250.685781][T25319] name failslab, interval 1, probability 0, space 0, times 0 [ 1250.797302][T25319] CPU: 1 UID: 0 PID: 25319 Comm: syz.1.3529 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1250.797343][T25319] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1250.797352][T25319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1250.797367][T25319] Call Trace: [ 1250.797374][T25319] [ 1250.797384][T25319] dump_stack_lvl+0x100/0x190 [ 1250.797426][T25319] should_fail_ex.cold+0x5/0xa [ 1250.797453][T25319] ? __register_sysctl_table+0xac/0x1650 [ 1250.797495][T25319] should_failslab+0xc2/0x120 [ 1250.797518][T25319] __kmalloc_noprof+0xe0/0x850 [ 1250.797559][T25319] __register_sysctl_table+0xac/0x1650 [ 1250.797596][T25319] ? is_module_address+0x5f/0xf0 [ 1250.797662][T25319] ? __pfx___register_sysctl_table+0x10/0x10 [ 1250.797713][T25319] ? is_module_address+0x69/0xf0 [ 1250.797753][T25319] ? register_net_sysctl_sz+0x222/0x430 [ 1250.797801][T25319] ? __asan_memcpy+0x3c/0x60 [ 1250.797849][T25319] sctp_sysctl_net_register+0x15e/0x200 [ 1250.797891][T25319] ? __pfx_sctp_defaults_init+0x10/0x10 [ 1250.797939][T25319] sctp_defaults_init+0x6d2/0xd90 [ 1250.797978][T25319] ? __pfx_sctp_defaults_init+0x10/0x10 [ 1250.798016][T25319] ops_init+0x1e2/0x5f0 [ 1250.798060][T25319] setup_net+0x118/0x3a0 [ 1250.798100][T25319] ? __pfx_setup_net+0x10/0x10 [ 1250.798138][T25319] ? lockdep_init_map_type+0x5c/0x250 [ 1250.798170][T25319] ? mutex_init_lockep+0x110/0x150 [ 1250.798212][T25319] copy_net_ns+0x46f/0x7c0 [ 1250.798246][T25319] create_new_namespaces+0x3ea/0xac0 [ 1250.798278][T25319] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1250.798306][T25319] ksys_unshare+0x455/0xab0 [ 1250.798337][T25319] ? __pfx_ksys_unshare+0x10/0x10 [ 1250.798378][T25319] __x64_sys_unshare+0x31/0x40 [ 1250.798407][T25319] do_syscall_64+0x106/0xf80 [ 1250.798436][T25319] ? clear_bhb_loop+0x40/0x90 [ 1250.798466][T25319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1250.798497][T25319] RIP: 0033:0x7fa92959c629 [ 1250.798516][T25319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1250.798540][T25319] RSP: 002b:00007fa92a52d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1250.798563][T25319] RAX: ffffffffffffffda RBX: 00007fa929815fa0 RCX: 00007fa92959c629 [ 1250.798579][T25319] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1250.798594][T25319] RBP: 00007fa929632b39 R08: 0000000000000000 R09: 0000000000000000 [ 1250.798608][T25319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1250.798622][T25319] R13: 00007fa929816038 R14: 00007fa929815fa0 R15: 00007ffcc45f1178 [ 1250.798655][T25319] [ 1251.982667][T25319] program syz.1.3529 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1255.187713][T25391] random: crng reseeded on system resumption [ 1262.358167][T25516] nbd: must specify at least one socket [ 1275.985688][T25761] FAULT_INJECTION: forcing a failure. [ 1275.985688][T25761] name failslab, interval 1, probability 0, space 0, times 0 [ 1276.074585][T25761] CPU: 1 UID: 0 PID: 25761 Comm: syz.0.3607 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1276.074627][T25761] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1276.074635][T25761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1276.074650][T25761] Call Trace: [ 1276.074658][T25761] [ 1276.074672][T25761] dump_stack_lvl+0x100/0x190 [ 1276.074713][T25761] should_fail_ex.cold+0x5/0xa [ 1276.074741][T25761] should_failslab+0xc2/0x120 [ 1276.074765][T25761] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1276.074799][T25761] ? __proc_create+0x2cb/0x8c0 [ 1276.074841][T25761] __proc_create+0x2cb/0x8c0 [ 1276.074878][T25761] ? __pfx___proc_create+0x10/0x10 [ 1276.074919][T25761] ? _raw_write_unlock+0x28/0x50 [ 1276.074945][T25761] ? proc_register+0x559/0x8a0 [ 1276.074984][T25761] proc_create_reg+0x75/0x170 [ 1276.075024][T25761] proc_create_net_data+0x8e/0x1c0 [ 1276.075068][T25761] ? __pfx_proc_create_net_data+0x10/0x10 [ 1276.075105][T25761] ? net_generic+0xea/0x2a0 [ 1276.075159][T25761] ? __pfx_vlan_init_net+0x10/0x10 [ 1276.075185][T25761] vlan_proc_init+0xe6/0x160 [ 1276.075225][T25761] ops_init+0x1e2/0x5f0 [ 1276.075256][T25761] setup_net+0x118/0x3a0 [ 1276.075285][T25761] ? __pfx_setup_net+0x10/0x10 [ 1276.075313][T25761] ? lockdep_init_map_type+0x5c/0x250 [ 1276.075345][T25761] ? mutex_init_lockep+0x110/0x150 [ 1276.075381][T25761] copy_net_ns+0x46f/0x7c0 [ 1276.075414][T25761] create_new_namespaces+0x3ea/0xac0 [ 1276.075445][T25761] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1276.075473][T25761] ksys_unshare+0x455/0xab0 [ 1276.075504][T25761] ? __pfx_ksys_unshare+0x10/0x10 [ 1276.075548][T25761] __x64_sys_unshare+0x31/0x40 [ 1276.075618][T25761] do_syscall_64+0x106/0xf80 [ 1276.075655][T25761] ? clear_bhb_loop+0x40/0x90 [ 1276.075706][T25761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1276.075739][T25761] RIP: 0033:0x7f120139c629 [ 1276.075766][T25761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1276.075804][T25761] RSP: 002b:00007f120219c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1276.075837][T25761] RAX: ffffffffffffffda RBX: 00007f1201615fa0 RCX: 00007f120139c629 [ 1276.075859][T25761] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1276.075880][T25761] RBP: 00007f1201432b39 R08: 0000000000000000 R09: 0000000000000000 [ 1276.075901][T25761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1276.075920][T25761] R13: 00007f1201616038 R14: 00007f1201615fa0 R15: 00007ffd3dc812d8 [ 1276.075965][T25761] [ 1276.079289][T25761] 8021q: can't create entry in proc filesystem! [ 1277.112230][T25761] program syz.0.3607 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1280.075409][T25832] FAULT_INJECTION: forcing a failure. [ 1280.075409][T25832] name failslab, interval 1, probability 0, space 0, times 0 [ 1280.095858][T25832] CPU: 0 UID: 0 PID: 25832 Comm: syz.3.3623 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1280.095914][T25832] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1280.095927][T25832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1280.095948][T25832] Call Trace: [ 1280.095959][T25832] [ 1280.095971][T25832] dump_stack_lvl+0x100/0x190 [ 1280.096028][T25832] should_fail_ex.cold+0x5/0xa [ 1280.096068][T25832] should_failslab+0xc2/0x120 [ 1280.096101][T25832] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1280.096148][T25832] ? __proc_create+0x2cb/0x8c0 [ 1280.096206][T25832] __proc_create+0x2cb/0x8c0 [ 1280.096259][T25832] ? __pfx___proc_create+0x10/0x10 [ 1280.096315][T25832] ? _raw_write_unlock+0x28/0x50 [ 1280.096348][T25832] ? proc_register+0x559/0x8a0 [ 1280.096414][T25832] proc_create_reg+0x75/0x170 [ 1280.096475][T25832] proc_create_net_data+0x8e/0x1c0 [ 1280.096530][T25832] ? __pfx_proc_create_net_data+0x10/0x10 [ 1280.096581][T25832] ? net_generic+0xea/0x2a0 [ 1280.096642][T25832] ? __pfx_vlan_init_net+0x10/0x10 [ 1280.096681][T25832] vlan_proc_init+0xe6/0x160 [ 1280.096735][T25832] ops_init+0x1e2/0x5f0 [ 1280.096778][T25832] setup_net+0x118/0x3a0 [ 1280.096817][T25832] ? __pfx_setup_net+0x10/0x10 [ 1280.096853][T25832] ? lockdep_init_map_type+0x5c/0x250 [ 1280.096897][T25832] ? mutex_init_lockep+0x110/0x150 [ 1280.096949][T25832] copy_net_ns+0x46f/0x7c0 [ 1280.096994][T25832] create_new_namespaces+0x3ea/0xac0 [ 1280.097038][T25832] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1280.097078][T25832] ksys_unshare+0x455/0xab0 [ 1280.097121][T25832] ? __pfx_ksys_unshare+0x10/0x10 [ 1280.097176][T25832] __x64_sys_unshare+0x31/0x40 [ 1280.097213][T25832] do_syscall_64+0x106/0xf80 [ 1280.097248][T25832] ? clear_bhb_loop+0x40/0x90 [ 1280.097287][T25832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1280.097321][T25832] RIP: 0033:0x7f145dd9c629 [ 1280.097348][T25832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1280.097388][T25832] RSP: 002b:00007f145ebeb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1280.097418][T25832] RAX: ffffffffffffffda RBX: 00007f145e015fa0 RCX: 00007f145dd9c629 [ 1280.097441][T25832] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1280.097461][T25832] RBP: 00007f145de32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1280.097481][T25832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1280.097500][T25832] R13: 00007f145e016038 R14: 00007f145e015fa0 R15: 00007ffc3cd4eed8 [ 1280.097545][T25832] [ 1280.097558][T25832] 8021q: can't create entry in proc filesystem! [ 1281.164474][T25832] program syz.3.3623 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1286.585152][T25946] Invalid ELF header magic: != ELF [ 1288.883442][T25988] bond0: option slaves: interface - does not exist! [ 1291.699548][T26039] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 1299.786417][T26176] binder: 26174:26176 ioctl c018620c 0 returned -1 [ 1300.605642][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.612015][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.754839][ T30] audit: type=1400 audit(1771906853.220:44): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=26288 comm="syz.1.3701" [ 1313.464355][T26411] bond0: invalid ARP target specified [ 1313.493822][T26411] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3723'. [ 1316.557807][T26456] bond0: option slaves: interface - does not exist! [ 1320.321440][T26527] Invalid ELF header magic: != ELF [ 1320.798710][T26537] kvm: kvm [26536]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000085) [ 1323.840221][T26598] capability: warning: `syz.0.3757' uses 32-bit capabilities (legacy support in use) [ 1326.288933][T26634] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 1326.720544][T26637] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 1326.996823][T26634] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 1327.679344][T26663] input: jJǸ-9%vJ86 as /devices/virtual/input/input14 [ 1328.590304][T26671] bond0: option slaves: interface - does not exist! [ 1330.673478][T26701] FAULT_INJECTION: forcing a failure. [ 1330.673478][T26701] name failslab, interval 1, probability 0, space 0, times 0 [ 1330.690285][T26701] CPU: 1 UID: 0 PID: 26701 Comm: syz.2.3775 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1330.690341][T26701] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1330.690353][T26701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1330.690373][T26701] Call Trace: [ 1330.690385][T26701] [ 1330.690397][T26701] dump_stack_lvl+0x100/0x190 [ 1330.690453][T26701] should_fail_ex.cold+0x5/0xa [ 1330.690495][T26701] should_failslab+0xc2/0x120 [ 1330.690530][T26701] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1330.690571][T26701] ? kobject_uevent_env+0x263/0x18b0 [ 1330.690626][T26701] kobject_uevent_env+0x263/0x18b0 [ 1330.690676][T26701] ? kvm_uevent_notify_change.part.0+0x321/0x450 [ 1330.690719][T26701] ? kfree+0x1f6/0x6b0 [ 1330.690764][T26701] kvm_uevent_notify_change.part.0+0x3a6/0x450 [ 1330.690810][T26701] ? __pfx_kvm_vm_release+0x10/0x10 [ 1330.690846][T26701] kvm_put_kvm+0xe4/0xb10 [ 1330.690882][T26701] ? lockdep_hardirqs_on+0x78/0x100 [ 1330.690917][T26701] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1330.690949][T26701] ? __pfx_kvm_vm_release+0x10/0x10 [ 1330.690986][T26701] kvm_vm_release+0x3c/0x50 [ 1330.691019][T26701] __fput+0x3ff/0xb40 [ 1330.691063][T26701] task_work_run+0x150/0x240 [ 1330.691110][T26701] ? __pfx_task_work_run+0x10/0x10 [ 1330.691168][T26701] exit_to_user_mode_loop+0x100/0x4a0 [ 1330.691213][T26701] do_syscall_64+0x668/0xf80 [ 1330.691246][T26701] ? clear_bhb_loop+0x40/0x90 [ 1330.691299][T26701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1330.691335][T26701] RIP: 0033:0x7fb36e39c629 [ 1330.691362][T26701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1330.691397][T26701] RSP: 002b:00007fb36c5d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1330.691432][T26701] RAX: 0000000000000000 RBX: 00007fb36e616090 RCX: 00007fb36e39c629 [ 1330.691453][T26701] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000002 [ 1330.691472][T26701] RBP: 00007fb36e432b39 R08: 0000000000000000 R09: 0000000000000000 [ 1330.691493][T26701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1330.691512][T26701] R13: 00007fb36e616128 R14: 00007fb36e616090 R15: 00007ffcdd65c3c8 [ 1330.691555][T26701] [ 1331.650311][T26712] FAULT_INJECTION: forcing a failure. [ 1331.650311][T26712] name failslab, interval 1, probability 0, space 0, times 0 [ 1331.664142][T26712] CPU: 1 UID: 0 PID: 26712 Comm: syz.3.3777 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1331.664197][T26712] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1331.664227][T26712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1331.664247][T26712] Call Trace: [ 1331.664258][T26712] [ 1331.664270][T26712] dump_stack_lvl+0x100/0x190 [ 1331.664324][T26712] should_fail_ex.cold+0x5/0xa [ 1331.664365][T26712] should_failslab+0xc2/0x120 [ 1331.664397][T26712] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1331.664445][T26712] ? trace_pid_list_alloc+0x232/0x480 [ 1331.664505][T26712] trace_pid_list_alloc+0x232/0x480 [ 1331.664561][T26712] trace_pid_write+0x110/0x460 [ 1331.664615][T26712] ? __pfx_trace_pid_write+0x10/0x10 [ 1331.664694][T26712] event_pid_write.isra.0+0x1e4/0x800 [ 1331.664751][T26712] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 1331.664816][T26712] vfs_write+0x2aa/0x1070 [ 1331.664867][T26712] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 1331.664920][T26712] ? __pfx_vfs_write+0x10/0x10 [ 1331.664955][T26712] ? __fget_files+0x215/0x3d0 [ 1331.664998][T26712] ? __fget_files+0x21f/0x3d0 [ 1331.665042][T26712] ksys_write+0x12a/0x250 [ 1331.665078][T26712] ? __pfx_ksys_write+0x10/0x10 [ 1331.665125][T26712] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 1331.665156][T26712] ? syscall_user_dispatch+0x76/0x130 [ 1331.665195][T26712] do_syscall_64+0x106/0xf80 [ 1331.665219][T26712] ? clear_bhb_loop+0x40/0x90 [ 1331.665248][T26712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1331.665272][T26712] RIP: 0033:0x7f145dd9c629 [ 1331.665291][T26712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1331.665314][T26712] RSP: 002b:00007f145ebeb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1331.665335][T26712] RAX: ffffffffffffffda RBX: 00007f145e015fa0 RCX: 00007f145dd9c629 [ 1331.665350][T26712] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 1331.665364][T26712] RBP: 00007f145de32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1331.665378][T26712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1331.665392][T26712] R13: 00007f145e016038 R14: 00007f145e015fa0 R15: 00007ffc3cd4eed8 [ 1331.665428][T26712] [ 1334.830026][T26758] kvm: kvm [26756]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000085) [ 1335.324882][T26769] kstrtoul() returned -22 for lu_gp_id [ 1335.336416][ T30] audit: type=1800 audit(1771906881.785:45): pid=26769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3785" name="lu_gp_id" dev="configfs" ino=115224 res=0 errno=0 [ 1335.594636][T26765] zswap: compressor not available [ 1337.115116][T26806] usbip-vudc usbip-vudc.0: gadget not bound [ 1338.344948][T26837] FAULT_INJECTION: forcing a failure. [ 1338.344948][T26837] name failslab, interval 1, probability 0, space 0, times 0 [ 1338.471618][T26837] CPU: 0 UID: 0 PID: 26837 Comm: syz.2.3798 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1338.471675][T26837] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1338.471698][T26837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1338.471717][T26837] Call Trace: [ 1338.471728][T26837] [ 1338.471739][T26837] dump_stack_lvl+0x100/0x190 [ 1338.471795][T26837] should_fail_ex.cold+0x5/0xa [ 1338.471834][T26837] should_failslab+0xc2/0x120 [ 1338.471866][T26837] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1338.471913][T26837] ? alloc_inode+0x183/0x250 [ 1338.471950][T26837] ? stashed_dentry_get+0x10a/0x2c0 [ 1338.471981][T26837] ? stashed_dentry_get+0x10a/0x2c0 [ 1338.472020][T26837] alloc_inode+0x183/0x250 [ 1338.472060][T26837] path_from_stashed+0x25b/0x750 [ 1338.472100][T26837] pidfs_alloc_file+0xf8/0x290 [ 1338.472143][T26837] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 1338.472196][T26837] pidfd_prepare+0x123/0x200 [ 1338.472230][T26837] __x64_sys_pidfd_open+0x105/0x1a0 [ 1338.472271][T26837] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 1338.472318][T26837] do_syscall_64+0x106/0xf80 [ 1338.472347][T26837] ? clear_bhb_loop+0x40/0x90 [ 1338.472385][T26837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1338.472413][T26837] RIP: 0033:0x7fb36e39c629 [ 1338.472435][T26837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1338.472462][T26837] RSP: 002b:00007fb36c5f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 1338.472488][T26837] RAX: ffffffffffffffda RBX: 00007fb36e615fa0 RCX: 00007fb36e39c629 [ 1338.472506][T26837] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1338.472522][T26837] RBP: 00007fb36e432b39 R08: 0000000000000000 R09: 0000000000000000 [ 1338.472539][T26837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1338.472554][T26837] R13: 00007fb36e616038 R14: 00007fb36e615fa0 R15: 00007ffcdd65c3c8 [ 1338.472588][T26837] [ 1339.079298][T26844] ======================================================= [ 1339.079298][T26844] WARNING: The mand mount option has been deprecated and [ 1339.079298][T26844] and is ignored by this kernel. Remove the mand [ 1339.079298][T26844] option from the mount to silence this warning. [ 1339.079298][T26844] ======================================================= [ 1339.977144][T26844] kexec: Could not allocate control_code_buffer [ 1345.124603][T26936] bond0: option slaves: interface - does not exist! [ 1347.034399][T26983] Invalid ELF header magic: != ELF [ 1349.475606][T27008] bond0: option slaves: interface - does not exist! [ 1349.831329][T27017] Invalid ELF header magic: != ELF [ 1352.403027][T27073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3836'. [ 1352.424333][T27075] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 1353.453131][T27084] bond0: option slaves: interface - does not exist! [ 1353.720357][ T30] audit: type=1800 audit(1771906900.176:46): pid=27104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3842" name="dbroot" dev="configfs" ino=117768 res=0 errno=0 [ 1353.795220][T27104] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3842'. [ 1353.992900][T27104] team0: Port device team_slave_1 removed [ 1356.037930][T27138] hub 1-0:1.0: USB hub found [ 1356.063488][T27138] hub 1-0:1.0: 1 port detected [ 1357.154690][T27156] bond0: option slaves: interface - does not exist! [ 1357.457946][T27166] Invalid ELF header magic: != ELF [ 1357.867135][T27184] kstrtoul() returned -22 for lu_gp_id [ 1357.874852][ T30] audit: type=1800 audit(1771906904.304:47): pid=27184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3852" name="lu_gp_id" dev="configfs" ino=117117 res=0 errno=0 [ 1358.055346][T27177] zswap: compressor not available [ 1361.491433][T27238] zswap: compressor 000 not available [ 1361.755290][T22993] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1361.859942][ T30] audit: type=1800 audit(1771906908.312:48): pid=27246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3864" name="lu_gp_id" dev="configfs" ino=118031 res=0 errno=0 [ 1361.895270][T27246] kstrtoul() returned -22 for lu_gp_id [ 1362.078837][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.086179][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.107281][T27250] zswap: compressor not available [ 1363.105227][T27274] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16 [ 1363.566922][T27277] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17 [ 1365.833226][T27324] nvme_fcloop: unknown parameter or missing value '7' [ 1368.280934][T27368] bond0: option slaves: interface - does not exist! [ 1369.348078][T27372] hub 1-0:1.0: USB hub found [ 1369.353140][T27372] hub 1-0:1.0: 1 port detected [ 1373.291435][T27473] blktrace: Concurrent blktraces are not allowed on loop2 [ 1373.810247][T27467] hub 1-0:1.0: USB hub found [ 1373.842863][T27467] hub 1-0:1.0: 1 port detected [ 1376.111587][T27520] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1376.158826][T27520] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1376.208266][T27520] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1376.397685][T27535] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3911'. [ 1376.415958][T27535] netlink: 354 bytes leftover after parsing attributes in process `syz.3.3911'. [ 1380.514596][T27606] FAULT_INJECTION: forcing a failure. [ 1380.514596][T27606] name failslab, interval 1, probability 0, space 0, times 0 [ 1380.556164][T27606] CPU: 1 UID: 0 PID: 27606 Comm: syz.1.3923 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1380.556217][T27606] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1380.556226][T27606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1380.556241][T27606] Call Trace: [ 1380.556248][T27606] [ 1380.556258][T27606] dump_stack_lvl+0x100/0x190 [ 1380.556303][T27606] should_fail_ex.cold+0x5/0xa [ 1380.556330][T27606] should_failslab+0xc2/0x120 [ 1380.556353][T27606] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1380.556388][T27606] ? alloc_inode+0x183/0x250 [ 1380.556416][T27606] ? stashed_dentry_get+0x10a/0x2c0 [ 1380.556439][T27606] ? stashed_dentry_get+0x10a/0x2c0 [ 1380.556466][T27606] alloc_inode+0x183/0x250 [ 1380.556500][T27606] path_from_stashed+0x25b/0x750 [ 1380.556535][T27606] pidfs_alloc_file+0xf8/0x290 [ 1380.556572][T27606] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 1380.556616][T27606] pidfd_prepare+0x123/0x200 [ 1380.556646][T27606] __x64_sys_pidfd_open+0x105/0x1a0 [ 1380.556680][T27606] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 1380.556721][T27606] do_syscall_64+0x106/0xf80 [ 1380.556747][T27606] ? clear_bhb_loop+0x40/0x90 [ 1380.556776][T27606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1380.556800][T27606] RIP: 0033:0x7fa92959c629 [ 1380.556819][T27606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1380.556843][T27606] RSP: 002b:00007fa92a52d028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 1380.556866][T27606] RAX: ffffffffffffffda RBX: 00007fa929815fa0 RCX: 00007fa92959c629 [ 1380.556882][T27606] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1380.556896][T27606] RBP: 00007fa929632b39 R08: 0000000000000000 R09: 0000000000000000 [ 1380.556910][T27606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1380.556924][T27606] R13: 00007fa929816038 R14: 00007fa929815fa0 R15: 00007ffcc45f1178 [ 1380.556955][T27606] [ 1381.025200][T27576] zswap: compressor not available [ 1381.925513][T27614] kexec: Could not allocate control_code_buffer [ 1383.864409][T27654] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18 [ 1384.422113][T27656] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input19 [ 1384.746544][T27671] ima: policy update failed [ 1384.749213][ T30] audit: type=1807 audit(1771906931.191:49): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 1384.750973][ T30] audit: type=1802 audit(1771906931.191:50): pid=27671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.3935" res=0 errno=0 [ 1384.753614][ T30] audit: type=1802 audit(1771906931.191:51): pid=27671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.3935" res=0 errno=0 [ 1393.861124][T27798] FAULT_INJECTION: forcing a failure. [ 1393.861124][T27798] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1393.907348][T27802] nvme_fcloop: unknown parameter or missing value '7' [ 1393.972716][T27798] CPU: 0 UID: 0 PID: 27798 Comm: syz.2.3957 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1393.972756][T27798] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1393.972764][T27798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1393.972796][T27798] Call Trace: [ 1393.972803][T27798] [ 1393.972812][T27798] dump_stack_lvl+0x100/0x190 [ 1393.972850][T27798] should_fail_ex.cold+0x5/0xa [ 1393.972876][T27798] should_fail_futex+0x4c/0x60 [ 1393.972904][T27798] __x64_sys_futex+0x1f0/0x4d0 [ 1393.972937][T27798] ? __pfx___x64_sys_futex+0x10/0x10 [ 1393.972978][T27798] do_syscall_64+0x106/0xf80 [ 1393.973002][T27798] ? clear_bhb_loop+0x40/0x90 [ 1393.973030][T27798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1393.973053][T27798] RIP: 0033:0x7fb36e39c629 [ 1393.973072][T27798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1393.973095][T27798] RSP: 002b:00007ffcdd65c528 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1393.973116][T27798] RAX: ffffffffffffffda RBX: 00000000001542b4 RCX: 00007fb36e39c629 [ 1393.973131][T27798] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb36e615fac [ 1393.973145][T27798] RBP: 0000000000000032 R08: 0000000000000000 R09: 0000000000000000 [ 1393.973159][T27798] R10: 00007ffcdd65c630 R11: 0000000000000246 R12: 00007ffcdd65c650 [ 1393.973173][T27798] R13: 00007fb36e615fac R14: 00000000001542e6 R15: 00007ffcdd65c630 [ 1393.973204][T27798] [ 1394.488726][T27812] netlink: 93 bytes leftover after parsing attributes in process `syz.2.3957'. [ 1398.189317][T27871] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20 [ 1399.481533][T27874] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input21 [ 1406.067735][T28028] FAULT_INJECTION: forcing a failure. [ 1406.067735][T28028] name failslab, interval 1, probability 0, space 0, times 0 [ 1406.082353][T28028] CPU: 1 UID: 0 PID: 28028 Comm: syz.3.3999 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1406.082411][T28028] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1406.082425][T28028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1406.082445][T28028] Call Trace: [ 1406.082456][T28028] [ 1406.082477][T28028] dump_stack_lvl+0x100/0x190 [ 1406.082534][T28028] should_fail_ex.cold+0x5/0xa [ 1406.082574][T28028] should_failslab+0xc2/0x120 [ 1406.082608][T28028] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1406.082656][T28028] ? security_inode_alloc+0x3b/0x2c0 [ 1406.082704][T28028] ? lockdep_init_map_type+0x5c/0x250 [ 1406.082753][T28028] security_inode_alloc+0x3b/0x2c0 [ 1406.082801][T28028] inode_init_always_gfp+0xced/0x1040 [ 1406.082861][T28028] alloc_inode+0x8e/0x250 [ 1406.082902][T28028] new_inode+0x22/0x1c0 [ 1406.082946][T28028] debugfs_create_symlink+0xd1/0x220 [ 1406.082999][T28028] ref_tracker_dir_symlink+0x257/0x3b0 [ 1406.083036][T28028] ? __pfx_ref_tracker_dir_symlink+0x10/0x10 [ 1406.083074][T28028] ? __lock_acquire+0x4a5/0x2630 [ 1406.083149][T28028] ? lockdep_hardirqs_on+0x78/0x100 [ 1406.083187][T28028] ? crng_make_state+0x2b0/0x6c0 [ 1406.083247][T28028] ? __pfx_net_ns_net_init+0x10/0x10 [ 1406.083288][T28028] net_ns_net_init+0xd2/0x120 [ 1406.083328][T28028] ops_init+0x1e2/0x5f0 [ 1406.083371][T28028] setup_net+0x118/0x3a0 [ 1406.083412][T28028] ? __pfx_setup_net+0x10/0x10 [ 1406.083448][T28028] ? lockdep_init_map_type+0x5c/0x250 [ 1406.083507][T28028] ? mutex_init_lockep+0x110/0x150 [ 1406.083560][T28028] copy_net_ns+0x46f/0x7c0 [ 1406.083609][T28028] create_new_namespaces+0x3ea/0xac0 [ 1406.083654][T28028] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1406.083693][T28028] ksys_unshare+0x455/0xab0 [ 1406.083736][T28028] ? __pfx_ksys_unshare+0x10/0x10 [ 1406.083776][T28028] ? ksys_read+0x1ac/0x250 [ 1406.083840][T28028] __x64_sys_unshare+0x31/0x40 [ 1406.083880][T28028] do_syscall_64+0x106/0xf80 [ 1406.083915][T28028] ? clear_bhb_loop+0x40/0x90 [ 1406.083956][T28028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1406.083990][T28028] RIP: 0033:0x7f145dd9c629 [ 1406.084019][T28028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1406.084053][T28028] RSP: 002b:00007f145ebeb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1406.084086][T28028] RAX: ffffffffffffffda RBX: 00007f145e015fa0 RCX: 00007f145dd9c629 [ 1406.084108][T28028] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1406.084128][T28028] RBP: 00007f145de32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1406.084147][T28028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1406.084166][T28028] R13: 00007f145e016038 R14: 00007f145e015fa0 R15: 00007ffc3cd4eed8 [ 1406.084210][T28028] [ 1406.084309][T28028] debugfs: out of free dentries, can not create symlink 'netns-c54-4026533828-notrefcnt' [ 1409.759526][T28079] netlink: 4128 bytes leftover after parsing attributes in process `syz.3.4007'. [ 1413.089928][ T30] audit: type=1807 audit(1771906959.517:52): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 1413.103229][T28148] ima: policy update failed [ 1413.175367][ T30] audit: type=1802 audit(1771906959.527:53): pid=28148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.4017" res=0 errno=0 [ 1413.196252][ T30] audit: type=1802 audit(1771906959.527:54): pid=28148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.4017" res=0 errno=0 [ 1415.674993][T28195] bond0: no command found in slaves file - use +ifname or -ifname [ 1420.781323][T28275] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22 [ 1421.306169][T28278] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 1423.580225][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.586620][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.587794][T22993] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1430.328165][T28415] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1430.343622][T28415] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1430.375278][T28415] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1430.395906][T28415] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1432.358431][T22993] Bluetooth: hci2: command 0x0406 tx timeout [ 1432.364521][T14457] Bluetooth: hci1: command 0x0406 tx timeout [ 1432.428422][T22993] Bluetooth: hci3: command 0x0406 tx timeout [ 1432.434485][T22993] Bluetooth: hci0: command 0x0406 tx timeout [ 1433.330679][T28480] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24 [ 1434.259692][T28483] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input25 [ 1434.362953][T28492] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1434.370656][T28492] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1434.379567][T28492] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1434.388501][T28492] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1436.430482][T22993] Bluetooth: hci3: command 0x0406 tx timeout [ 1436.436549][T22993] Bluetooth: hci0: command 0x0406 tx timeout [ 1436.442694][T14457] Bluetooth: hci2: command 0x0406 tx timeout [ 1436.448720][T14457] Bluetooth: hci1: command 0x0406 tx timeout [ 1436.760152][T28529] bond0: option slaves: interface - does not exist! [ 1441.280142][T28596] futex_wake_op: syz.1.4095 tries to shift op by -2048; fix this program [ 1441.322935][T28596] futex_wake_op: syz.1.4095 tries to shift op by -2048; fix this program [ 1441.356353][T28597] 0x000000000001-0x000000020000 : "" [ 1441.430562][T28596] misc userio: No port type given on /dev/userio [ 1441.459589][T28597] ftl_cs: FTL header corrupt! [ 1441.884138][T28596] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1442.305809][T28594] : Can't lookup blockdev [ 1446.130020][T28668] netlink: 4128 bytes leftover after parsing attributes in process `syz.1.4104'. [ 1446.752344][T28675] zswap: compressor not available [ 1446.813325][T28675] Setting dangerous option i915.mitigations - tainting kernel [ 1447.169909][T28684] bond0: option slaves: interface - does not exist! [ 1450.910889][T28740] syz.3.4120(28740): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 1463.841281][T28949] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input26 [ 1464.808870][T28952] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input27 [ 1466.034578][T28972] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input28 [ 1471.739932][T29066] futex_wake_op: syz.3.4169 tries to shift op by -2048; fix this program [ 1471.769476][T29066] futex_wake_op: syz.3.4169 tries to shift op by -2048; fix this program [ 1471.789383][T29066] 0x000000000001-0x000000020000 : "" [ 1471.817001][T29066] ftl_cs: FTL header corrupt! [ 1471.874987][T29067] misc userio: No port type given on /dev/userio [ 1472.249059][T29069] : Can't lookup blockdev [ 1477.290966][T29153] random: crng reseeded on system resumption [ 1477.907354][T29166] FAULT_INJECTION: forcing a failure. [ 1477.907354][T29166] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1477.992774][T29166] CPU: 0 UID: 0 PID: 29166 Comm: syz.2.4187 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1477.992833][T29166] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1477.992846][T29166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1477.992865][T29166] Call Trace: [ 1477.992875][T29166] [ 1477.992887][T29166] dump_stack_lvl+0x100/0x190 [ 1477.992943][T29166] should_fail_ex.cold+0x5/0xa [ 1477.992983][T29166] strncpy_from_user+0x3b/0x2d0 [ 1477.993037][T29166] do_getname+0x78/0x390 [ 1477.993081][T29166] user_path_at+0x26/0x60 [ 1477.993131][T29166] __x64_sys_mount+0x1fb/0x310 [ 1477.993168][T29166] ? __pfx___x64_sys_mount+0x10/0x10 [ 1477.993216][T29166] do_syscall_64+0x106/0xf80 [ 1477.993250][T29166] ? clear_bhb_loop+0x40/0x90 [ 1477.993290][T29166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1477.993323][T29166] RIP: 0033:0x7fb36e39c629 [ 1477.993347][T29166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1477.993380][T29166] RSP: 002b:00007fb36c5d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1477.993411][T29166] RAX: ffffffffffffffda RBX: 00007fb36e616090 RCX: 00007fb36e39c629 [ 1477.993433][T29166] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 0000200000000180 [ 1477.993450][T29166] RBP: 00007fb36e432b39 R08: 0000200000000280 R09: 0000000000000000 [ 1477.993468][T29166] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 1477.993486][T29166] R13: 00007fb36e616128 R14: 00007fb36e616090 R15: 00007ffcdd65c3c8 [ 1477.993528][T29166] [ 1478.903922][T29182] ubi0: attaching mtd1 [ 1479.003250][T29182] ubi0: scanning is finished [ 1479.008005][T29182] ubi0: empty MTD device detected [ 1479.091793][T29182] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 1479.746962][T29182] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd1, error -22 [ 1480.112700][T29197] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input29 [ 1480.960693][T29197] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input30 [ 1482.113929][T29229] random: crng reseeded on system resumption [ 1485.019504][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.026706][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.135764][T29345] bond0: option slaves: interface - does not exist! [ 1493.237143][T22993] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1493.253818][T22993] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 1494.087786][T29402] bond0: no command found in slaves file - use +ifname or -ifname [ 1505.644353][T29552] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 1505.675579][T29552] File: /dev/nullb0 PID: 29552 Comm: syz.1.4256 [ 1513.883212][T29706] FAULT_INJECTION: forcing a failure. [ 1513.883212][T29706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1513.948196][T29706] CPU: 1 UID: 0 PID: 29706 Comm: syz.3.4284 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1513.948255][T29706] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1513.948269][T29706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1513.948289][T29706] Call Trace: [ 1513.948300][T29706] [ 1513.948312][T29706] dump_stack_lvl+0x100/0x190 [ 1513.948368][T29706] should_fail_ex.cold+0x5/0xa [ 1513.948409][T29706] _copy_from_user+0x2e/0xd0 [ 1513.948464][T29706] copy_mount_options+0x76/0x190 [ 1513.948511][T29706] __x64_sys_mount+0x1ab/0x310 [ 1513.948551][T29706] ? __pfx___x64_sys_mount+0x10/0x10 [ 1513.948611][T29706] do_syscall_64+0x106/0xf80 [ 1513.948647][T29706] ? clear_bhb_loop+0x40/0x90 [ 1513.948688][T29706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1513.948721][T29706] RIP: 0033:0x7f145dd9c629 [ 1513.948748][T29706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1513.948782][T29706] RSP: 002b:00007f145ebca028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1513.948813][T29706] RAX: ffffffffffffffda RBX: 00007f145e016090 RCX: 00007f145dd9c629 [ 1513.948836][T29706] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 0000200000000180 [ 1513.948856][T29706] RBP: 00007f145de32b39 R08: 0000200000000280 R09: 0000000000000000 [ 1513.948877][T29706] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 1513.948896][T29706] R13: 00007f145e016128 R14: 00007f145e016090 R15: 00007ffc3cd4eed8 [ 1513.948940][T29706] [ 1521.784765][T22993] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 1521.792362][T22993] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 1529.857958][T29961] bond0: option slaves: interface - does not exist! [ 1538.584966][T30075] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1546.491961][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.503408][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.710926][T30235] input: jJǸ-9%vJ86 as /devices/virtual/input/input31 [ 1557.406035][T30406] Invalid ELF header magic: != ELF [ 1559.766952][T30426] Process accounting resumed [ 1559.977046][T30442] misc userio: Invalid payload size [ 1564.370632][T30515] bridge0: port 3(team0) entered blocking state [ 1564.416443][T30515] bridge0: port 3(team0) entered disabled state [ 1564.453884][T30515] team0: entered allmulticast mode [ 1564.491984][T30515] team_slave_0: entered allmulticast mode [ 1564.550741][T30515] team0: entered promiscuous mode [ 1564.588701][T30515] team_slave_0: entered promiscuous mode [ 1564.632323][T30515] bridge0: port 3(team0) entered blocking state [ 1564.638857][T30515] bridge0: port 3(team0) entered forwarding state [ 1565.752542][T30542] FAULT_INJECTION: forcing a failure. [ 1565.752542][T30542] name failslab, interval 1, probability 0, space 0, times 0 [ 1565.818071][T30542] CPU: 1 UID: 0 PID: 30542 Comm: syz.2.4433 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1565.818130][T30542] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1565.818144][T30542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1565.818165][T30542] Call Trace: [ 1565.818176][T30542] [ 1565.818189][T30542] dump_stack_lvl+0x100/0x190 [ 1565.818247][T30542] should_fail_ex.cold+0x5/0xa [ 1565.818288][T30542] should_failslab+0xc2/0x120 [ 1565.818322][T30542] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1565.818364][T30542] ? vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 1565.818419][T30542] vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 1565.818480][T30542] vidtv_mux_init+0x8a6/0xbf0 [ 1565.818537][T30542] vidtv_start_feed+0x33e/0x4c0 [ 1565.818591][T30542] ? __pfx_vidtv_start_feed+0x10/0x10 [ 1565.818641][T30542] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 1565.818700][T30542] ? mark_held_locks+0x40/0x70 [ 1565.818748][T30542] ? __pfx_vidtv_start_feed+0x10/0x10 [ 1565.818797][T30542] dmx_ts_feed_start_filtering+0xf6/0x220 [ 1565.818856][T30542] dvb_dmxdev_start_feed+0x273/0x3f0 [ 1565.818906][T30542] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 1565.818959][T30542] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 1565.819011][T30542] dvb_demux_do_ioctl+0xe64/0x1200 [ 1565.819071][T30542] dvb_usercopy+0x167/0x340 [ 1565.819112][T30542] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1565.819162][T30542] ? __pfx_dvb_usercopy+0x10/0x10 [ 1565.819229][T30542] ? __fget_files+0x21f/0x3d0 [ 1565.819285][T30542] dvb_demux_ioctl+0x29/0x40 [ 1565.819323][T30542] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1565.819364][T30542] __x64_sys_ioctl+0x18e/0x210 [ 1565.819409][T30542] do_syscall_64+0x106/0xf80 [ 1565.819449][T30542] ? clear_bhb_loop+0x40/0x90 [ 1565.819507][T30542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1565.819541][T30542] RIP: 0033:0x7fb36e39c629 [ 1565.819568][T30542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1565.819600][T30542] RSP: 002b:00007fb36c5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1565.819634][T30542] RAX: ffffffffffffffda RBX: 00007fb36e615fa0 RCX: 00007fb36e39c629 [ 1565.819655][T30542] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000002 [ 1565.819674][T30542] RBP: 00007fb36e432b39 R08: 0000000000000000 R09: 0000000000000000 [ 1565.819692][T30542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1565.819711][T30542] R13: 00007fb36e616038 R14: 00007fb36e615fa0 R15: 00007ffcdd65c3c8 [ 1565.819754][T30542] [ 1566.190845][ T29] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 1566.202812][ T29] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1566.211235][ T29] CPU: 1 UID: 0 PID: 29 Comm: kworker/1:1 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1566.222084][ T29] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1566.227282][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1566.237356][ T29] Workqueue: events vidtv_mux_tick [ 1566.242586][ T29] RIP: 0010:vidtv_psi_ts_psi_write_into+0x54a/0xbc0 [ 1566.249197][ T29] Code: 3c c3 dc f9 4c 8d 63 20 4c 89 e0 48 c1 e8 03 80 3c 28 00 0f 85 e8 04 00 00 48 8b 43 20 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 <0f> b6 14 2a 38 ca 7f 08 84 d2 0f 85 19 05 00 00 0f b6 10 48 8b 7c [ 1566.268821][ T29] RSP: 0018:ffffc90000a473f8 EFLAGS: 00010202 [ 1566.274905][ T29] RAX: 0000000000000002 RBX: ffffc90000a47678 RCX: 0000000000000002 [ 1566.282889][ T29] RDX: 0000000000000000 RSI: ffffffff882b3804 RDI: ffff88801eefbc80 [ 1566.290873][ T29] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 1566.298863][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90000a47698 [ 1566.306873][ T29] R13: 0000000000000178 R14: 0000000000000000 R15: 0000000000000008 [ 1566.314871][ T29] FS: 0000000000000000(0000) GS:ffff888124451000(0000) knlGS:0000000000000000 [ 1566.323983][ T29] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1566.330574][ T29] CR2: 000000000000f000 CR3: 0000000089bee000 CR4: 00000000003526f0 [ 1566.338572][ T29] Call Trace: [ 1566.341863][ T29] [ 1566.344800][ T29] ? __pfx_vidtv_psi_ts_psi_write_into+0x10/0x10 [ 1566.351176][ T29] vidtv_psi_pmt_write_into+0x3b2/0xa70 [ 1566.356744][ T29] ? __pfx_vidtv_psi_pmt_write_into+0x10/0x10 [ 1566.362853][ T29] ? vidtv_psi_pat_write_into+0x56a/0x690 [ 1566.368635][ T29] ? __pfx_vidtv_psi_pat_write_into+0x10/0x10 [ 1566.374792][ T29] ? __lock_acquire+0x4a5/0x2630 [ 1566.379796][ T29] vidtv_mux_push_si+0x932/0xe80 [ 1566.384806][ T29] ? __pfx_vidtv_mux_push_si+0x10/0x10 [ 1566.390328][ T29] ? __pfx_vidtv_ts_pcr_write_into+0x10/0x10 [ 1566.396397][ T29] ? finish_task_switch.isra.0+0x205/0xb80 [ 1566.402256][ T29] vidtv_mux_tick+0xe9b/0x1480 [ 1566.407075][ T29] ? __lock_acquire+0x4a5/0x2630 [ 1566.412071][ T29] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 1566.417341][ T29] ? __lock_acquire+0x4a5/0x2630 [ 1566.422372][ T29] ? debug_object_deactivate+0x2e4/0x3b0 [ 1566.428061][ T29] ? finish_task_switch.isra.0+0x200/0xb80 [ 1566.433923][ T29] ? rcu_is_watching+0x12/0xc0 [ 1566.438778][ T29] process_one_work+0x9d7/0x1920 [ 1566.443775][ T29] ? __pfx_process_one_work+0x10/0x10 [ 1566.449217][ T29] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 1566.454471][ T29] worker_thread+0x5da/0xe40 [ 1566.459139][ T29] ? kthread+0x13a/0x450 [ 1566.463431][ T29] ? __pfx_worker_thread+0x10/0x10 [ 1566.468608][ T29] kthread+0x370/0x450 [ 1566.472826][ T29] ? __pfx_kthread+0x10/0x10 [ 1566.477482][ T29] ret_from_fork+0x754/0xd80 [ 1566.482136][ T29] ? __pfx_ret_from_fork+0x10/0x10 [ 1566.487327][ T29] ? __switch_to+0x7b4/0x1120 [ 1566.492061][ T29] ? __pfx_kthread+0x10/0x10 [ 1566.496697][ T29] ret_from_fork_asm+0x1a/0x30 [ 1566.501510][ T29] [ 1566.504553][ T29] Modules linked in: [ 1566.509381][ T29] ---[ end trace 0000000000000000 ]--- [ 1566.528158][ T29] RIP: 0010:vidtv_psi_ts_psi_write_into+0x54a/0xbc0 [ 1566.642816][ T29] Code: 3c c3 dc f9 4c 8d 63 20 4c 89 e0 48 c1 e8 03 80 3c 28 00 0f 85 e8 04 00 00 48 8b 43 20 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 <0f> b6 14 2a 38 ca 7f 08 84 d2 0f 85 19 05 00 00 0f b6 10 48 8b 7c [ 1566.695368][ T29] RSP: 0018:ffffc90000a473f8 EFLAGS: 00010202 [ 1566.701537][ T29] RAX: 0000000000000002 RBX: ffffc90000a47678 RCX: 0000000000000002 [ 1566.767101][ T29] RDX: 0000000000000000 RSI: ffffffff882b3804 RDI: ffff88801eefbc80 [ 1566.775247][ T29] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 1566.784050][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90000a47698 [ 1566.792174][ T29] R13: 0000000000000178 R14: 0000000000000000 R15: 0000000000000008 [ 1566.800300][ T29] FS: 0000000000000000(0000) GS:ffff888124451000(0000) knlGS:0000000000000000 [ 1566.809372][ T29] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1566.816107][ T29] CR2: 0000001b308deff8 CR3: 000000007b8a2000 CR4: 00000000003526f0 [ 1566.824210][ T29] Kernel panic - not syncing: Fatal exception [ 1566.830985][ T29] Kernel Offset: disabled [ 1566.835317][ T29] Rebooting in 86400 seconds..