last executing test programs: 1m2.063367659s ago: executing program 0 (id=856): r0 = socket(0xa, 0x802, 0x3a) setsockopt$auto(r0, 0x29, 0x21, &(0x7f0000000880)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\xff\x1b\x01\x1e\xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\xf2Vw\xbe\x1c$\xddm\x8a\x9d\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5h\xae\xec%\xf9\x94>\xd6,\xf3\x98\'\xb0\t~~\xb4\x98\xbb3=A\x9c\x17\xaa\xce\fh-M\xdb-\x15VX\xfe\xca+\xb5\x95\xb3JL\x0fl\xe84\xbd\xa3nO\x9f\xfa\xb1\x06$\b$i3\x83\xd7\x06\xd6\x1e\xdbB\x9bb\x1cXC\x8c\x8b\xd9\xff\xf2Bf\x99!Z\x13\xff\xca\xf3e\x015\x9b\x86\xd6$\x1a\r3\x91\xb7\x942\xeb\xadVA\xfc\x1f\xbf1\xb7T\xc1\xbf\xc0\xc2\xfc\xe8w\xd33\xb2,\xb0\x9fA3\xc2\xa2\x1cM\x825\x94U\xbbNeb\xd2\xa9\x0f\xed\x8b\xea\xfa\x8a\x04.\xffMIw\x0f\xd6\xae^\xd2\xf1j\xcb\r\xa4\x1d0d\xca\x81\x9c\x80GL\x0e\xe6\x19\x8au\x1a7\xc5|\xf6\x1e\xe00\xc6\"\x83\x1c\xa2\x9e\a\x1c\xea\xa3\x9c\xe1BF\x05b\xf6\xdcf\x04\xd9B\xb9\x98\x9cq\xbd\xfb\xb5~\xf2\x8d\x9f`\xec\xd0\xafY\xcf\x84', 0x18000113) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) (async) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) 1m1.894605007s ago: executing program 0 (id=857): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0x28, 0x1, 0x0) r0 = epoll_create$auto(0x3e) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x103040, 0x0) msync$auto(0x4, 0x7, 0x8) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, r1, 0x8000) r2 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r2) sendmsg$auto_NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_MLO_RECONF_REM_LINKS={0x6, 0x14f, 0x7}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfffe}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x7}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x3bf79800}, @NL80211_ATTR_COLOR_CHANGE_COUNT={0x5, 0x12f, 0x86}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x4cac8d027733f7f) pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL2\x01\x88\v\xae\xa9i8W\xe5\x00W\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\x90\x13\xd5\x84\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x95\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x13#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xbf\xa6\x11YTz\xf3\xdd\xe7i~:\x1a\xd0\xb0R\xb4J}\x00\x00\x00\x00\x00\x00\xa3\x05\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xd5\xc1\"\xact\xff\xc9\x00'/242, 0xfded, 0x4) 1m0.249967207s ago: executing program 0 (id=863): r0 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x403, 0x0) ioctl$auto(r0, 0x1, r0) r1 = bpf$auto_BPF_TOKEN_CREATE(0x24, &(0x7f0000000040)=@token_create={0x7d1, r0}, 0x4b7) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000100)={0x5, r3}) r5 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000180), r4) sendmsg$auto_GTP_CMD_GETPDP(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r5, 0x9, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @local}, @GTPA_LINK={0x8, 0x1, 0x9c4}]}, 0x30}, 0x1, 0x0, 0x0, 0x44040}, 0x80) r6 = io_uring_setup$auto(0xa3, &(0x7f0000000280)={0x7fff, 0x65, 0x1, 0x24395c2e, 0x71, 0x3, r4, [0x3, 0x8000, 0x9], {0x7ff, 0x1, 0xf02, 0x4, 0x0, 0x4, 0x85a9, 0x401, 0x7}, {0x5, 0x9, 0xffff, 0x0, 0x8000, 0x8, 0x1, 0xd8f, 0x40}}) r8 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000340), r4) sendmsg$auto_WG_CMD_GET_DEVICE(r6, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r8, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}]}, 0x1c}}, 0x4040810) r9 = syz_clone(0x20000, &(0x7f0000000440)="1d5f3580b09da0296a284c0c8e877e61a8125e67a6383a0875d5e6649f1ca45303741b49279781b6dcf35e55d7f2473250b7bd65771e6cbc39a003ddc8f3f76bebd3df2a8c9812cdf2c504756b132974c0ddfe2e5c6bb841b0ac80fa2f9136443685848c33d4574948bddbffc8465a7dbbf45257eaed7c55dad58f50abaafebf3444ae2a79ba5eabaf361ee91bd4d4b648084f12e3b19e01b5afb20f5ec1772abd1ff2e617e323fa3adabdad59f9c636c53b26aee26607fabdbd61f9b1604af8bbb5ad10ff5a", 0xc6, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="99ce24ebf6f0d6260f7030661d673398e5f2e257f5b8abf371d072811e6d76dd134be0b1952d93e67f323685e671c0299405408a783198e62f1c4d8976586e49ee04d143554cec1d3106177d833c04322d93c05bd1aa96e801ef738ecd1e79784b77d81859a6f953950f7e95d628fd4915be20847919ab3a06f2466109d968f9e55911c390b77a8d8a07a007804e4b03b8d3e31d588bcbf49f677a43586ae87d4ae67f0a19677664f93f74325471605202e37cf01331629c56cccd59aaf6f1f1f383e4fab15655ca80608216b630be10bc873e00c977cddbd8d832fee8a311125aab5258d50f4eee0bbf9c95") sendmsg$auto_SEG6_CMD_SETHMAC(r6, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0xc20}, 0xc0d0) r10 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000800), r3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000840)={'virt_wifi0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000880)={'dummy0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r7, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x7c, r10, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_TUNNEL_INFO_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @ETHTOOL_A_TUNNEL_INFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @ETHTOOL_A_TUNNEL_INFO_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x400}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x800) setsockopt$auto(r7, 0xb, 0xa, &(0x7f00000009c0)='[{!\x00', 0xf6) mbind$auto(0x1d, 0x87, 0x5, &(0x7f0000000a00)=0x200, 0xb76d, 0x9) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$auto_IEEE802154_LLSEC_SETPARAMS(r13, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x300000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x40, r14, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEST_HW_ADDR={0xc, 0xf, 0x7}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x70}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x7}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000084}, 0x20000800) r15 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000b80), 0x20000, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0) r16 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000c40), r3) sendmsg$auto_SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x30, r16, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x10}, @SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080000}, 0x1) ioctl$auto_VHOST_SET_VRING_CALL(r6, 0x4008af21, &(0x7f0000000d40)={0xffffffff, r1}) r17 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000dc0), r13) sendmsg$auto_NETDEV_CMD_NAPI_GET2(r15, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x44, r17, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NETDEV_A_NAPI_IFINDEX={0x8, 0x1, r12}, @NETDEV_A_NAPI_IFINDEX={0x8, 0x1, r12}, @NETDEV_A_NAPI_IFINDEX={0x8, 0x1, r11}, @NETDEV_A_NAPI_IFINDEX={0x8, 0x1, r11}, @NETDEV_A_NAPI_IFINDEX={0x8, 0x1, r12}, @NETDEV_A_NAPI_IFINDEX={0x8, 0x1, r11}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x48000) ptrace$auto_PTRACE_GETEVENTMSG(0x4201, r9, 0x4000000000000000, 0x100000000) sendmsg$auto_NL80211_CMD_JOIN_MESH(r7, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x28, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_SAR_SPEC={0xc, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x89d4}]}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x800) 59.677740298s ago: executing program 0 (id=865): read$auto_proc_pid_maps_operations_internal(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x0, 0x1, 0xffffffffffffffff, 0x0, 0x4000002) seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0x8, &(0x7f0000000080)="c20c") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), r0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) ioctl$auto(r2, 0x4b4d, 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c0000001d27b414a1ecb4d897d9ff569149675c5f384bc3553bb97b26be", @ANYRES16=r1, @ANYBLOB="010026bd7000f8dbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200", @ANYRES32=0x9, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0109080000000000002502"], 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x6041, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x7, 0xffff, 0x6, 0x81, 0x68198}, 0x6f3) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700201000000000000000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) open(0x0, 0x22040, 0x75) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000440)='nfsd\x00+\xb1\x911\xbb\x88>\x8b\x8f\xd1\xab![\xda`F\"\xed\xd3\x0e\xc9n7\x8b\x01>\x8aY\x12\xf4\x8d\x967c\x8aR\xd1\xd9\x05\xb7\xf9\xe1\x9b_\xea\x8c-F\xd8+\xfd\xc5?B8\xc0\xe7\r\fk\x1b\xeb\xeb}\x11-\x89\x809v1sI\xa4\f\x87YT\xda\xa2\xbc\xe9)J=\xeb\xb8\x11?\xc4n\x87\x91Re\xbb\xbc\xb4\xa0\x86\x02\x9c\xa7\x9c\x1e99Ne\x96\xfer\xd0VA>y\x8c\xff3n\x97\x88sl\xdd\xff\xf4\x10A\xf4\xaf\xbdS\x1b\x82\x85/-\xcd\xc6\xb53\xcardg6\x89vM\xa4\xc6}T\xca\xf8\xc2`C\x93\xbd\x90\x8b\x83\xa13\xd3\xe0\x89~\xfa\xdb.\xce\x04\xd3W\xf8r\xf6\xad\x8c\x8a.\"\xea\xa1T\x1aB1\x0f\xc2VG9U \x030f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x3f000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop15\x00', 0x6600, 0x0) migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) write$auto(0x3, 0x0, 0xffd6) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x8500, 0x0) 4.149703975s ago: executing program 2 (id=1099): mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getrlimit$auto(0x3, 0x0) fdatasync$auto(r0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r1, 0x127f, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0x1102, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xc8d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\xc6\x00\x89\te\x8d\a\xfb\\n\x89C:\x84D\x10u\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ea182, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r2, 0xffffffffffdffe00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r3, r3, 0x0) close_range$auto(0x2, r1, 0x6) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video52\x00', 0x6aa01, 0x0) ioctl$auto(r5, 0xc058560f, r4) pselect6$auto(0x9, &(0x7f0000000300)={[0x9, 0x4, 0x9, 0x6, 0x8001, 0x4000000000002bc8, 0xffd, 0x9, 0x3, 0xffffffff, 0x8000000000000001, 0x5, 0x2f, 0x2, 0x8, 0xfffffffffffffffe]}, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) 3.512257517s ago: executing program 4 (id=1100): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), r0) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r0, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, r1, 0x23, 0x70bd2b, 0x25dfdbfe, {}, [@MACSEC_ATTR_SA_CONFIG={0xc, 0x3, 0x0, 0x1, [@nested={0x5, 0x1, 0x0, 0x1, [@generic="03"]}]}, @MACSEC_ATTR_RXSC_CONFIG={0x4}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008008}, 0x80) 2.960861698s ago: executing program 1 (id=1101): rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) 2.714351668s ago: executing program 4 (id=1102): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x84c, 0x0, 0x9, 0x0, 0x3, 0x10b}, 0x800008}, 0x1, 0x20000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x8001, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x11, 0x3, 0xfffff958) r1 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) fremovexattr$auto(r1, &(0x7f0000000040)='s}stem.\xa5\x1aE\x8d\x9e\xb9\x81\xf0\x01\xc2\xa9\xe9\x8d\x87/\xe7') ioctl$auto_PROCMAP_QUERY(0xffffffffffffffff, 0xc0686611, &(0x7f0000000080)={0x101, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x800, 0x101, 0x5, 0x7f93, 0xfffffffe, 0x7ffffffd, 0x3, 0x7, 0x9}) truncate$auto(&(0x7f00000000c0)='./file0\x00', 0x6) io_uring_register$auto_IORING_REGISTER_SEND_MSG_RING(r0, 0x1f, &(0x7f0000000100), 0x2) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) renameat2$auto(r1, &(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000180)='./file0/../file0\x00', 0xd0dc) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48442, 0x0) prctl$auto(0x23, 0x20000000000000b, 0x7fffffffefff, 0x0, 0x0) clone$auto(0x1, 0x0, 0x0, 0x0, 0x42) 2.578498311s ago: executing program 1 (id=1103): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x400300, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0x14, 0xffffffffffffffff, 0x8000) fcntl$auto(0x3, 0x4, 0xa553) swapon$auto(0x0, 0x4) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x24) 2.401701012s ago: executing program 4 (id=1104): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000006380), 0x101101, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000ffdbdf250100000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) read$auto(r0, &(0x7f00000002c0)=':\x00\x00\nx\x18*\xad\x1fa$\xdc\xcf\x96L\x12\xa5\x1c\xdfR\xbf\xd0\xa6D?\x8d\x04\x19\xc9@\xa3\x0e\t\x94wn\x92C\xf9}\xe3]\xa2y\xa7\xf6\x101\x9d\x06e\x1cI\x8c\x80\xf63)3O\xa0,\x93\xf8@\xcd\xcb\xda\xadv\xa5_\xe1<\xa8\x03\xab[\xfa\xf4H\x1em\n\x14\x12u$\xe8\x81L\x18\x83\x0eY\xa1\x8a\x00}\\\xa3\xe7\xa7!J\xa0\xb2\xcf\xbb\xb9A\xb7T\xeb$\x05\x8f\xfbr\bL\x8a\xfd\xe3\xbe\x8b\x87u\xad\x0f\x98\xd1\xfe>\xcc\xed`~<\aI\x10?o\x13\xbbgL>r\xdckfM\x10\x04\xb77\xee\x90\x87\x88B\xddBlH\xe6\'\b\xdd\t\x1fl\xc5l\xedb\x99\xe1tudt+\x1b\xf9\x83:\x159P\x92\xd9yT\x9e\xe7!(p\x82\xb71\xa3\xf0gHc\xa5\x178=[\vtd\xfb\nO\xce\x85n\xd3\xb5\x1c*\xc0y\xb6\xaed\x86\x9c\x85a\x90\xa4?jZ{\x8b\xce\vO\x0f\x8f\xd3\xab\xfd33\x95rj\xf4\"z|\x8c?0\xb11]\x8c\xf3-H\xe7\x00\x97\xef\xd3\\\x9e\xe8\xc38\x0fX\xc1M\xdb\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe7#\xd1\xe3\xcb\x8f\xc8KG\xbe\x89\xeb\xa5\x1a\xe0\x85M\x10\xebT\b\xf0T^\xda\x00th{\xe5@\x16e\xe8\x8bN\x87\xa9\xb69\x8a\xc7\x11t\x8e\x99<\xc1\xc72\xa9\xdd|{\x1c\x18|\x80-\xbf\xf4^\xfa\x7f\xb2\x10^\x8a\xd7%8\x05\x1a\xd5\xf6\xc1\'A\x88\x9dN4\xe1\xff\xb7OG:u\xa2\xe0U\xf8b\xb6A\xa5P!Z\x82\xcfuo\xfc\xee\x11J^r\xd7_\x11\x1aZ\xb3\x86\xdb\x89L\x86Yq\xb5\x9d*\x02(\x06\xf6\x99|\x10\xa7\x04\xf3AlEo\x02\xf7\n\xac\x9f\x814V\x1f\xca)\xee\xb5Uq\xe5\xcb\xd2\xbe}\xc3\xaf\xfbr=\x04\xfb\xe67\xad\xa5N-\x18c49\xbd\xb1\xb1\xa1\xb3+\x87B\xe2/\x94\xe4R\xf3\xdf\x97\x9bOoNv\x97Y\xa2\xa3.\xfb\xb5\xeb\x9f\xbf\xf7\xcf\ba\x04YyA\ak\x96\'', 0x1) 2.217329268s ago: executing program 4 (id=1105): r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5) mmap$auto(0x6, 0x4, 0x4000000000dd, 0x40eb1, 0xffffffffffffffff, 0x300000000000) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x103041, 0x0) write$auto(r2, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,\x14\n\x1c!o\x9e\xb0\xadT\xfbR\xa1Y\x94\x9b\x86\xc3\xdcf\t\x9f}V[8\x04\x13\x8f\xea#\xf8F\xbbOO]e[\xabxo\xd9\x90\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xed\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98j\xe3}\x10\xab\x04_\xcdd\x17\xe4\xcbA\xa5[\b\xb8T\x02tcfD\x91\xcaG\xdaag\xc9\x80\f\xc6P\xa4\xfb:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xa5\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0]V\x11\xcb\xdd\x81\xbe\xdeL~\xa2(\x1d\xa5Y\a\xc1\xe9(\x85R\x96\xe4\x86\\\x13\xa9\x1a&\x19\x8a9\x82\xf0\x83\f\xf7\xeb\x00\x00\x00\x00\x00\x00\x00\x00v\x921\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x200000005, 0x400008, 0x9, 0x4000000000009b72, 0x2, 0x8000) sched_getattr$auto(0x0, &(0x7f0000000000)={0xc786, 0x86, 0x6, 0x200, 0x7, 0xb, 0x6, 0xfffffffffffffff8, 0x8, 0x4}, 0x68, 0x0) madvise$auto(0x0, 0x80000000ff0f0000, 0x15) mmap$auto_kernfs_file_fops_kernfs_internal(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, r0, 0x1) brk$auto(0x40008000) brk$auto(0x8) 1.555683069s ago: executing program 3 (id=1108): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x0, 0xfffffffffffff001, 0x2) r0 = socket(0xa, 0x2, 0x0) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x80000002, 0x1d, 0x3000, 0xfffffff8, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x6, 0x29c, 0x1, 0x7f, 0x0, 0x6, 0x1}, {0x10100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) socket(0xa, 0x1, 0x7) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0x5}, 0x5, 0x80000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x240202, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r0) ioctl$auto_KVM_CREATE_VM(r1, 0x4048aecb, 0x0) io_uring_register$auto(0x2, 0x24, 0x0, 0x83) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) 1.14436462s ago: executing program 3 (id=1109): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/dummy_hcd.2/usb3/authorized\x00', 0x81, 0x0) mmap$auto(0x8, 0x8004, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) futex_wait$auto(0x0, 0x4002, 0xb, 0x2, &(0x7f0000000080)={0x80000000005, 0x8000007fff}, 0x1) unshare$auto(0x8000000) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/bond0/bonding/slaves\x00', 0x80002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/cpuidle/current_governor\x00', 0xa42, 0x0) mmap$auto(0x0, 0x2020005, 0x203, 0xeb1, 0xffffffffffffffff, 0x8000) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) semget$auto(0x0, 0x2e4a, 0x8000) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x9, 0x36ec}, 0x1f4, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x0, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r2, 0x4c04, 0x0) write$auto(r0, &(0x7f0000000080)='0\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0x48da548d) 967.249915ms ago: executing program 3 (id=1110): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x101, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@qipcrtr={0x2a, 0x4, 0x7fff}, 0x6a) socket(0x2, 0x3, 0x100) socket(0x2, 0x2, 0x1) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xffeb}, 0x1, 0x0, 0x5, 0x7}, 0x8}, 0xffffffff, 0xb00) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x8, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x10, 0x80002, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) timerfd_create$auto(0x0, 0x0) timerfd_settime$auto(r0, 0x3, 0x0, 0x0) read$auto(0x3, 0x0, 0x80) settimeofday$auto(&(0x7f0000000180)={0x10000001f, 0x1}, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 816.243275ms ago: executing program 2 (id=1111): rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) 785.266847ms ago: executing program 3 (id=1112): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) r1 = socket(0x18, 0x5, 0x1) connect$auto(r1, &(0x7f0000000000)=@in={0x2, 0x100, @rand_addr=0x4000000}, 0x3a) connect$auto(r1, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x60042, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r2 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x50106000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x4) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip6erspan0\x00'}) read$auto_proc_pid_maps_operations_internal(r3, &(0x7f0000000480)=""/4083, 0xff3) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) r4 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) close_range$auto(0x2, 0x8, 0x0) clock_settime$auto(0xb7, &(0x7f0000000040)={0x6465, 0x9}) mbind$auto(0x8, 0x7, 0x1, &(0x7f0000000000)=0x7, 0x6, 0xe) madvise$auto(0x0, 0x8000000000000000, 0x15) 662.633467ms ago: executing program 2 (id=1113): socket(0x2, 0x3, 0x100) unshare$auto(0x40000080) r0 = socket(0xa, 0x5, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/cifs/mount_params\x00', 0x802, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES64=r4, @ANYBLOB="130026bd7000ffffffff0200000008000300", @ANYRES32=r4, @ANYBLOB="08000c01", @ANYRES8=r0], 0x24}, 0x1, 0x0, 0x0, 0x440c0}, 0x20040894) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="381ea2a654be903a2a6398fb3431e800f9964f6c0952c7", @ANYRES16=r7, @ANYBLOB="010025bd7000fcdbdf2501000000050005000700000008000300ff0300000b000400ef20bbf0b6e731000500060001000000"], 0x38}, 0x1, 0x0, 0x0, 0x80040}, 0x44000) write$auto(r5, &(0x7f0000000040)='\x00', 0xca7) r8 = prctl$auto(0x3e, 0x40, 0x0, 0x20009, 0x0) getsockopt$auto_SO_MARK(r2, 0xc, 0x24, &(0x7f0000000380)=')%\x00', &(0x7f0000000400)=0x8) write$auto(r1, &(0x7f0000000640)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\xff\x7f\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc:\xfa\x01\xd1\xa3\xb5\xc2B\xa5\xac:woR^a\xb9}\xe7\xbd\xe1\xf77.\xa3\xd8\xc2T\x95\x13\x91\xb6p\xf3\xb2w\xe6\xd7\x94DW\x97\x90a\xe6c\xfb\x88x\xd5L\xa9\xe4\x82\x04\xb1\x8b\r\xcaP\\\x1aVP\xc9\xa4`\xfd\v\x94\f\xc1\x0fQ\xc9\xdcL\x03\x9c\xbfk\xa6\xb1\xb0\xa1\xeeJ\xd8\xef\xc8t\x9d\x1e=J\x91W\xc6AuJ\xb9Q\xed\xd1\a\x05\x9d\x85\xb7b#r\xcd\xaf\xb7\x9f\xf7\xd2\xae\x0f\x98\xa9&\xb6~\xd4\xbd\xbbr\xb9\xc3\xacH!\xc1\x90K2\x05K@\xee\xac\xe8\xc7\t\xab\xbf\xa3\xedb\xd7\xb5\xd7\x83&\x95\xb2?\x0e\x85\xaaIGu\xd6$\xeb\xb6\xdd\a\x121\a\xac\x1bx#\x87\xa9\x10\x9b\xf8YD\x04ZL\xca\x99]\x8f[\x90[\xa8\xbf\x98\xa6\xe50(zC\xe84*w\x13\x96\xd5\xd0\x877\x12\xbc\xa1\xd0h@|\xf9\xfa\x9b\x17\x94\xb9\xe7\xf3\x15\x05\x91\xe8\x98p\x7f:\xd7s\xd9wo\x82\xda\xec\x91\xb7\xd9;H\x8a\b\x00\x00\x00\x00\x00\x00\x00\x8aZ\x94\x14$X7\xaeW6=^I\x9fQ\r5c\x81\xca]\x97m\x89o\x8f\xd8}P>I\xd0\xb3\x88C\xd7', 0x100000a3d9) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0040, 0x0) r9 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20201, 0x0) write$auto(r9, 0x0, 0x4) write$auto(0x3, 0x0, 0xffd8) socket(0x2, 0x3, 0xa) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x6, 0x7, 0xd3e, 0xe8d2, 0x1000, 0x3, 0x95f4da0a, 0xb842, 0x3, 0x8062, 0x9, 0x800, 0x6d3f, 0x9, 0x62e, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) read$auto_stats_fops_(r8, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mincore$auto(0x1000, 0x8001, 0x0) r10 = socket(0x2, 0x801, 0x106) getsockopt$auto(r10, 0x11c, 0x4, 0x0, 0x0) 626.183456ms ago: executing program 1 (id=1114): mmap$auto(0xffffffffffffffff, 0x4020006, 0xdf, 0xeb1, 0x401, 0x7ffe) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$auto_F_OFD_GETLK(r0, 0x24, 0x10001) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs1\x00', 0x0, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) semctl$auto(0x2201, 0xfffffff8, 0x3, 0x1) socket(0x2, 0x80002, 0x73) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket(0x10, 0x2, 0x4) io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0xfe, 0x6fb3, 0x8a, 0x9, 0xffffffffffffffff, [0x100, 0x9, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0x4, 0xf08a2b3}, {0x0, 0xfc, 0x6, 0x0, 0x0, 0xf89, 0x9, 0x837, 0x8}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb) 487.891011ms ago: executing program 3 (id=1115): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a1842, 0x0) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) socket(0x6, 0x3, 0x37) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x4) r0 = socket(0x26, 0x5, 0x8c68) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x101e41, 0x0) ioperm$auto(0xfffffffffffffff7, 0x5, 0x4000005) futex_waitv$auto(0x0, 0x7ff, 0x8, &(0x7f00000000c0)={0x1000000004, 0x10}, 0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2000, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/admmidi2\x00', 0x8e100, 0x0) read$auto_snd_rawmidi_f_ops_rawmidi(r4, &(0x7f00000002c0)=""/157, 0x9d) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x7, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r5 = ioctl$auto_TUNATTACHFILTER(r0, 0x401054d5, 0x0) ioctl$auto_virtual_ncidev_fops_virtual_ncidev(r5, 0x6, 0x0) futex_wake$auto(&(0x7f0000000140)="adf3e16812f6e5", 0x8, 0x6, 0x6) ioctl$auto_BLKRRPART(r5, 0x125f, 0x0) r6 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r6, 0x40146f2c, 0x0) unshare$auto(0x40000080) setsockopt$auto(r1, 0xd0, 0x800000e4, 0x0, 0x569) 23.992821ms ago: executing program 1 (id=1116): socket(0x2, 0x3, 0x100) unshare$auto(0x40000080) socket(0xa, 0x5, 0x0) prctl$auto(0x4, 0xfffffffffffffffd, 0x0, 0x400000001, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x7b) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x40440, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0)) readv$auto(r0, &(0x7f0000000200)={0x0, 0xfffc}, 0x3) (fail_nth: 8) unshare$auto(0x40000080) r1 = socket(0xa, 0x3, 0x3) ioctl$auto(r1, 0x8982, 0x1) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd5, 0x948b, 0x3, 0x15f4da0a, 0x4, 0x3, 0x62, 0x80000002, 0x7, 0x1, 0x9, 0x3, 0xfffffffffefffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x1000, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x8062, 0x9, 0x800, 0x6d3f, 0x9, 0x8, 0xfffffffffffffffe]}, 0x0) r2 = openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x20400, 0x0) ioctl$auto_TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000140)=0xbc) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) 0s ago: executing program 4 (id=1117): mmap$auto(0x0, 0x2020006, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x22, 0x2, 0x1) r0 = socket(0x10, 0x3, 0x6) socket(0x10, 0x2, 0x4) r1 = prctl$auto_PR_SET_MM_BRK(0x400007, 0x7, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2da, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/net/bond0/queues/rx-4/rps_cpus\x00', 0xa0666, 0x0) write$auto(r2, &(0x7f00000000c0)='1\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1dS\xf2~>\xb1\xc6\xd1\xee\xc8\x19e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}\xfcD', 0x85) pread64$auto(0xffffffffffffffff, &(0x7f0000000040)='uete1\x00', 0x200000000006, 0x7) r3 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/tracing/trace_options\x00', 0x2, 0x0) write$auto(r3, 0x0, 0x6) r4 = socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8) setsockopt$auto(r4, 0x107, 0x2, 0x0, 0x28) ioctl$auto_FS_IOC_UNRESVSP64(r0, 0x4030582b, 0x400007) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/net/rose15/statistics/rx_dropped\x00', 0x185d02, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, 0x0, 0x4b) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), r1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="01002abd7400fcdbdf25140000000c00018008000100", @ANYRES32=r7, @ANYBLOB="08000700050000000500190001000000"], 0x30}, 0x1, 0x0, 0x0, 0x48c1}, 0x20000000) r8 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0xa0080, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r8, 0x0, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x400401, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) kernel console output (not intermixed with test programs): 246 ORIG_RAX: 0000000000000000 [ 214.898023][ T7816] RAX: ffffffffffffffda RBX: 00007f9164e15fa0 RCX: 00007f9164b9c799 [ 214.898040][ T7816] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000006 [ 214.898056][ T7816] RBP: 00007f9164c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 214.898072][ T7816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.898090][ T7816] R13: 00007f9164e16038 R14: 00007f9164e15fa0 R15: 00007fffc1dc5388 [ 214.898130][ T7816] [ 214.898154][ T7816] ACPI Error: Aborting method \_SB.IQST due to previous error (AE_NO_MEMORY) (20251212/psparse-529) [ 215.250869][ T7816] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20251212/psparse-529) [ 218.575211][ T5838] Bluetooth: hci0: Malformed LE Event: 0x0b [ 219.275127][ T7904] netlink: 342 bytes leftover after parsing attributes in process `syz.2.449'. [ 220.961335][ T7927] FAULT_INJECTION: forcing a failure. [ 220.961335][ T7927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.162874][ T7927] CPU: 1 UID: 0 PID: 7927 Comm: syz.2.451 Tainted: G U L syzkaller #0 PREEMPT(full) [ 221.162905][ T7927] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 221.162911][ T7927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 221.162920][ T7927] Call Trace: [ 221.162925][ T7927] [ 221.162931][ T7927] dump_stack_lvl+0x100/0x190 [ 221.162958][ T7927] should_fail_ex.cold+0x5/0xa [ 221.162977][ T7927] _copy_from_user+0x2e/0xd0 [ 221.162996][ T7927] move_addr_to_kernel+0x65/0x170 [ 221.163016][ T7927] __sys_connect+0xb5/0x170 [ 221.163035][ T7927] ? __pfx___sys_connect+0x10/0x10 [ 221.163053][ T7927] ? __fget_files+0x21f/0x3d0 [ 221.163075][ T7927] ? __pfx_ksys_write+0x10/0x10 [ 221.163093][ T7927] __x64_sys_connect+0x72/0xb0 [ 221.163114][ T7927] ? lockdep_hardirqs_on+0x78/0x100 [ 221.163137][ T7927] do_syscall_64+0x106/0xf80 [ 221.163159][ T7927] ? clear_bhb_loop+0x40/0x90 [ 221.163178][ T7927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.163193][ T7927] RIP: 0033:0x7f245299c799 [ 221.163206][ T7927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.163220][ T7927] RSP: 002b:00007f2450bd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 221.163234][ T7927] RAX: ffffffffffffffda RBX: 00007f2452c16180 RCX: 00007f245299c799 [ 221.163243][ T7927] RDX: 0000000000000055 RSI: 00002000000018c0 RDI: 0000000000000003 [ 221.163252][ T7927] RBP: 00007f2450bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 221.163260][ T7927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.163269][ T7927] R13: 00007f2452c16218 R14: 00007f2452c16180 R15: 00007ffd3dd6a848 [ 221.163287][ T7927] [ 221.696917][ T7940] FAULT_INJECTION: forcing a failure. [ 221.696917][ T7940] name failslab, interval 1, probability 0, space 0, times 0 [ 221.726726][ T7940] CPU: 1 UID: 0 PID: 7940 Comm: syz.3.458 Tainted: G U L syzkaller #0 PREEMPT(full) [ 221.726770][ T7940] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 221.726778][ T7940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 221.726792][ T7940] Call Trace: [ 221.726799][ T7940] [ 221.726808][ T7940] dump_stack_lvl+0x100/0x190 [ 221.726852][ T7940] should_fail_ex.cold+0x5/0xa [ 221.726881][ T7940] ? iovec_from_user+0x8d/0x140 [ 221.726912][ T7940] should_failslab+0xc2/0x120 [ 221.726938][ T7940] __kmalloc_noprof+0xe0/0x850 [ 221.726973][ T7940] iovec_from_user+0x8d/0x140 [ 221.727002][ T7940] __import_iovec+0x81/0x640 [ 221.727029][ T7940] ? __might_fault+0xc5/0x140 [ 221.727074][ T7940] import_iovec+0x82/0xb0 [ 221.727106][ T7940] copy_msghdr_from_user+0x2ed/0x4f0 [ 221.727139][ T7940] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 221.727169][ T7940] ? rcu_is_watching+0x12/0xc0 [ 221.727200][ T7940] ? ___sys_sendmsg+0x19d/0x1e0 [ 221.727221][ T7940] ? kfree+0x2ec/0x6b0 [ 221.727252][ T7940] ___sys_sendmsg+0x106/0x1e0 [ 221.727277][ T7940] ? __pfx____sys_sendmsg+0x10/0x10 [ 221.727326][ T7940] ? __pfx___might_resched+0x10/0x10 [ 221.727367][ T7940] __sys_sendmmsg+0x205/0x430 [ 221.727403][ T7940] ? __pfx___sys_sendmmsg+0x10/0x10 [ 221.727451][ T7940] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 221.727505][ T7940] ? fput+0x79/0x100 [ 221.727534][ T7940] ? ksys_write+0x1ac/0x250 [ 221.727556][ T7940] ? __pfx_ksys_write+0x10/0x10 [ 221.727583][ T7940] __x64_sys_sendmmsg+0x9c/0x100 [ 221.727616][ T7940] ? lockdep_hardirqs_on+0x78/0x100 [ 221.727651][ T7940] do_syscall_64+0x106/0xf80 [ 221.727686][ T7940] ? clear_bhb_loop+0x40/0x90 [ 221.727715][ T7940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.727740][ T7940] RIP: 0033:0x7f9164b9c799 [ 221.727762][ T7940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.727783][ T7940] RSP: 002b:00007f9165a79028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 221.727805][ T7940] RAX: ffffffffffffffda RBX: 00007f9164e15fa0 RCX: 00007f9164b9c799 [ 221.727820][ T7940] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 221.727832][ T7940] RBP: 00007f9165a79090 R08: 0000000000000000 R09: 0000000000000000 [ 221.727845][ T7940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.727859][ T7940] R13: 00007f9164e16038 R14: 00007f9164e15fa0 R15: 00007fffc1dc5388 [ 221.727888][ T7940] [ 224.829718][ T8012] FAULT_INJECTION: forcing a failure. [ 224.829718][ T8012] name failslab, interval 1, probability 0, space 0, times 0 [ 224.842821][ T8012] CPU: 0 UID: 0 PID: 8012 Comm: syz.2.476 Tainted: G U L syzkaller #0 PREEMPT(full) [ 224.842870][ T8012] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 224.842883][ T8012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 224.842901][ T8012] Call Trace: [ 224.842909][ T8012] [ 224.842919][ T8012] dump_stack_lvl+0x100/0x190 [ 224.842971][ T8012] should_fail_ex.cold+0x5/0xa [ 224.843005][ T8012] should_failslab+0xc2/0x120 [ 224.843036][ T8012] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 224.843080][ T8012] ? __d_alloc+0x34/0xa80 [ 224.843112][ T8012] ? lockdep_init_map_type+0x5c/0x250 [ 224.843156][ T8012] __d_alloc+0x34/0xa80 [ 224.843187][ T8012] d_alloc_pseudo+0x1c/0xc0 [ 224.843236][ T8012] alloc_file_pseudo+0xcf/0x230 [ 224.843274][ T8012] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 224.843315][ T8012] ? alloc_fd+0x476/0x790 [ 224.843348][ T8012] sock_alloc_file+0x50/0x210 [ 224.843394][ T8012] __sys_socket+0x1c0/0x260 [ 224.843428][ T8012] ? __pfx___sys_socket+0x10/0x10 [ 224.843473][ T8012] __x64_sys_socket+0x72/0xb0 [ 224.843502][ T8012] ? lockdep_hardirqs_on+0x78/0x100 [ 224.843542][ T8012] do_syscall_64+0x106/0xf80 [ 224.843582][ T8012] ? clear_bhb_loop+0x40/0x90 [ 224.843616][ T8012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.843643][ T8012] RIP: 0033:0x7f245299c799 [ 224.843668][ T8012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.843694][ T8012] RSP: 002b:00007f2453789028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 224.843721][ T8012] RAX: ffffffffffffffda RBX: 00007f2452c15fa0 RCX: 00007f245299c799 [ 224.843739][ T8012] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 224.843757][ T8012] RBP: 00007f2452a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 224.843774][ T8012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.843791][ T8012] R13: 00007f2452c16038 R14: 00007f2452c15fa0 R15: 00007ffd3dd6a848 [ 224.843829][ T8012] [ 225.252329][ T8015] FAULT_INJECTION: forcing a failure. [ 225.252329][ T8015] name failslab, interval 1, probability 0, space 0, times 0 [ 225.312396][ T8015] CPU: 1 UID: 0 PID: 8015 Comm: syz.1.477 Tainted: G U L syzkaller #0 PREEMPT(full) [ 225.312451][ T8015] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 225.312463][ T8015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 225.312480][ T8015] Call Trace: [ 225.312489][ T8015] [ 225.312500][ T8015] dump_stack_lvl+0x100/0x190 [ 225.312552][ T8015] should_fail_ex.cold+0x5/0xa [ 225.312588][ T8015] ? lsm_blob_alloc+0x68/0x90 [ 225.312628][ T8015] should_failslab+0xc2/0x120 [ 225.312660][ T8015] __kmalloc_noprof+0xe0/0x850 [ 225.312704][ T8015] ? trace_kmalloc+0x101/0x130 [ 225.312741][ T8015] lsm_blob_alloc+0x68/0x90 [ 225.312783][ T8015] security_sk_alloc+0x2d/0x290 [ 225.312823][ T8015] sk_prot_alloc+0x12a/0x2a0 [ 225.312860][ T8015] sk_alloc+0x36/0xe80 [ 225.312902][ T8015] __netlink_create+0x5e/0x2c0 [ 225.312940][ T8015] ? __wake_up+0x3f/0x60 [ 225.312974][ T8015] netlink_create+0x293/0x610 [ 225.313014][ T8015] ? __pfx_rtnetlink_bind+0x10/0x10 [ 225.313056][ T8015] __sock_create+0x339/0x860 [ 225.313096][ T8015] __sys_socket+0x14d/0x260 [ 225.313131][ T8015] ? __pfx___sys_socket+0x10/0x10 [ 225.313177][ T8015] __x64_sys_socket+0x72/0xb0 [ 225.313210][ T8015] ? lockdep_hardirqs_on+0x78/0x100 [ 225.313254][ T8015] do_syscall_64+0x106/0xf80 [ 225.313296][ T8015] ? clear_bhb_loop+0x40/0x90 [ 225.313330][ T8015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.313359][ T8015] RIP: 0033:0x7fc9ffb9c799 [ 225.313384][ T8015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.313413][ T8015] RSP: 002b:00007fc9fddf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 225.313440][ T8015] RAX: ffffffffffffffda RBX: 00007fc9ffe15fa0 RCX: 00007fc9ffb9c799 [ 225.313459][ T8015] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000010 [ 225.313476][ T8015] RBP: 00007fc9ffc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 225.313493][ T8015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.313510][ T8015] R13: 00007fc9ffe16038 R14: 00007fc9ffe15fa0 R15: 00007fffe295b0e8 [ 225.313549][ T8015] [ 228.090150][ T8086] FAULT_INJECTION: forcing a failure. [ 228.090150][ T8086] name failslab, interval 1, probability 0, space 0, times 0 [ 228.116722][ T8086] CPU: 1 UID: 0 PID: 8086 Comm: syz.3.498 Tainted: G U L syzkaller #0 PREEMPT(full) [ 228.116775][ T8086] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 228.116785][ T8086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 228.116802][ T8086] Call Trace: [ 228.116812][ T8086] [ 228.116823][ T8086] dump_stack_lvl+0x100/0x190 [ 228.116873][ T8086] should_fail_ex.cold+0x5/0xa [ 228.116917][ T8086] should_failslab+0xc2/0x120 [ 228.116951][ T8086] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 228.117000][ T8086] ? cache_create_net+0x2b/0x1f0 [ 228.117048][ T8086] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 228.117090][ T8086] kmemdup_noprof+0x29/0x60 [ 228.117119][ T8086] cache_create_net+0x2b/0x1f0 [ 228.117161][ T8086] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 228.117203][ T8086] gss_svc_init_net+0x69/0x640 [ 228.117244][ T8086] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 228.117291][ T8086] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 228.117334][ T8086] ops_init+0x1e2/0x5f0 [ 228.117382][ T8086] setup_net+0x118/0x3a0 [ 228.117424][ T8086] ? __pfx_setup_net+0x10/0x10 [ 228.117465][ T8086] ? lockdep_init_map_type+0x5c/0x250 [ 228.117506][ T8086] ? mutex_init_lockep+0x110/0x150 [ 228.117551][ T8086] copy_net_ns+0x46f/0x7c0 [ 228.117581][ T8086] create_new_namespaces+0x3ea/0xac0 [ 228.117620][ T8086] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 228.117651][ T8086] ksys_unshare+0x473/0xad0 [ 228.117689][ T8086] ? __pfx_ksys_unshare+0x10/0x10 [ 228.117741][ T8086] __x64_sys_unshare+0x31/0x40 [ 228.117775][ T8086] do_syscall_64+0x106/0xf80 [ 228.117815][ T8086] ? clear_bhb_loop+0x40/0x90 [ 228.117850][ T8086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.117880][ T8086] RIP: 0033:0x7f9164b9c799 [ 228.117915][ T8086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.117944][ T8086] RSP: 002b:00007f9165a79028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 228.117972][ T8086] RAX: ffffffffffffffda RBX: 00007f9164e15fa0 RCX: 00007f9164b9c799 [ 228.117993][ T8086] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 228.118009][ T8086] RBP: 00007f9164c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 228.118026][ T8086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.118042][ T8086] R13: 00007f9164e16038 R14: 00007f9164e15fa0 R15: 00007fffc1dc5388 [ 228.118080][ T8086] [ 229.896960][ T8129] [U] [ 229.899934][ T8129] [U] [ 229.902661][ T8129] [U] [ 229.905385][ T8129] [U] [ 229.923763][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880640ca000: rx timeout, send abort [ 229.932773][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880640cbc00: rx timeout, send abort [ 229.941695][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880640ca000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 229.957470][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880640cbc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 230.020946][ T8129] [U] [ 230.021018][ T8129] [U] [ 230.021066][ T8129] [U] [ 230.021114][ T8129] [U] [ 230.056015][ T8129] [U] [ 233.229459][ T8174] random: crng reseeded on system resumption [ 233.261238][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033303c00: rx timeout, send abort [ 233.770588][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033303c00: abort rx timeout. Force session deactivation [ 233.845413][ T8191] input: jJǼ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input15 [ 235.746596][ T8229] FAULT_INJECTION: forcing a failure. [ 235.746596][ T8229] name failslab, interval 1, probability 0, space 0, times 0 [ 235.746659][ T8229] CPU: 1 UID: 0 PID: 8229 Comm: syz.1.537 Tainted: G U L syzkaller #0 PREEMPT(full) [ 235.746684][ T8229] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 235.746694][ T8229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 235.746703][ T8229] Call Trace: [ 235.746710][ T8229] [ 235.746716][ T8229] dump_stack_lvl+0x100/0x190 [ 235.746745][ T8229] should_fail_ex.cold+0x5/0xa [ 235.746764][ T8229] ? ring_buffer_read_start+0x1b9/0x460 [ 235.746787][ T8229] should_failslab+0xc2/0x120 [ 235.746803][ T8229] __kmalloc_noprof+0xe0/0x850 [ 235.746832][ T8229] ring_buffer_read_start+0x1b9/0x460 [ 235.746855][ T8229] ? __pfx_ring_buffer_read_start+0x10/0x10 [ 235.746877][ T8229] ? lockdep_init_map_type+0x5c/0x250 [ 235.746898][ T8229] ? ring_buffer_overruns+0x14e/0x1a0 [ 235.746919][ T8229] tracing_open+0x9cd/0xef0 [ 235.746941][ T8229] do_dentry_open+0x6d8/0x1660 [ 235.746956][ T8229] ? __pfx_tracing_open+0x10/0x10 [ 235.746979][ T8229] vfs_open+0x82/0x3f0 [ 235.747000][ T8229] path_openat+0x208c/0x31a0 [ 235.747025][ T8229] ? __pfx_path_openat+0x10/0x10 [ 235.747052][ T8229] do_file_open+0x20e/0x430 [ 235.747070][ T8229] ? __pfx_do_file_open+0x10/0x10 [ 235.747100][ T8229] ? alloc_fd+0x476/0x790 [ 235.747118][ T8229] ? do_getname+0x191/0x390 [ 235.747138][ T8229] do_sys_openat2+0x10d/0x1e0 [ 235.747170][ T8229] ? __pfx_do_sys_openat2+0x10/0x10 [ 235.747198][ T8229] __x64_sys_openat+0x12d/0x210 [ 235.747219][ T8229] ? __pfx___x64_sys_openat+0x10/0x10 [ 235.747248][ T8229] do_syscall_64+0x106/0xf80 [ 235.747270][ T8229] ? clear_bhb_loop+0x40/0x90 [ 235.747288][ T8229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.747305][ T8229] RIP: 0033:0x7fc9ffb9c799 [ 235.747318][ T8229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.747333][ T8229] RSP: 002b:00007fc9fddd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 235.747348][ T8229] RAX: ffffffffffffffda RBX: 00007fc9ffe16090 RCX: 00007fc9ffb9c799 [ 235.747359][ T8229] RDX: 1a6b75d638929210 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 235.747369][ T8229] RBP: 00007fc9ffc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 235.747379][ T8229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.747388][ T8229] R13: 00007fc9ffe16128 R14: 00007fc9ffe16090 R15: 00007fffe295b0e8 [ 235.747409][ T8229] [ 236.809078][ T8240] nvme_fabrics: unknown parameter or missing value 'û@è' in ctrl creation request [ 238.130919][ T8256] random: crng reseeded on system resumption [ 238.803243][ T8275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.552'. [ 239.266684][ T8288] FAULT_INJECTION: forcing a failure. [ 239.266684][ T8288] name failslab, interval 1, probability 0, space 0, times 0 [ 239.280113][ T8288] CPU: 1 UID: 0 PID: 8288 Comm: syz.2.558 Tainted: G U L syzkaller #0 PREEMPT(full) [ 239.280165][ T8288] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 239.280176][ T8288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 239.280193][ T8288] Call Trace: [ 239.280203][ T8288] [ 239.280212][ T8288] dump_stack_lvl+0x100/0x190 [ 239.280265][ T8288] should_fail_ex.cold+0x5/0xa [ 239.280320][ T8288] should_failslab+0xc2/0x120 [ 239.280353][ T8288] __kmalloc_cache_noprof+0x7a/0x6f0 [ 239.280392][ T8288] ? landlock_init_hierarchy_log+0xa9/0x820 [ 239.280442][ T8288] landlock_init_hierarchy_log+0xa9/0x820 [ 239.280483][ T8288] ? inherit_tree+0x197/0x2d0 [ 239.280517][ T8288] landlock_merge_ruleset+0x67b/0x830 [ 239.280555][ T8288] __do_sys_landlock_restrict_self+0x2a6/0x9e0 [ 239.280593][ T8288] do_syscall_64+0x106/0xf80 [ 239.280635][ T8288] ? clear_bhb_loop+0x40/0x90 [ 239.280670][ T8288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.280701][ T8288] RIP: 0033:0x7f245299c799 [ 239.280734][ T8288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.280765][ T8288] RSP: 002b:00007f2453789028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 239.280794][ T8288] RAX: ffffffffffffffda RBX: 00007f2452c15fa0 RCX: 00007f245299c799 [ 239.280815][ T8288] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000005 [ 239.280834][ T8288] RBP: 00007f2452a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 239.280852][ T8288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.280869][ T8288] R13: 00007f2452c16038 R14: 00007f2452c15fa0 R15: 00007ffd3dd6a848 [ 239.280907][ T8288] [ 241.058459][ T8343] FAULT_INJECTION: forcing a failure. [ 241.058459][ T8343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.077137][ T8343] CPU: 1 UID: 0 PID: 8343 Comm: syz.1.570 Tainted: G U L syzkaller #0 PREEMPT(full) [ 241.077184][ T8343] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 241.077193][ T8343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 241.077205][ T8343] Call Trace: [ 241.077213][ T8343] [ 241.077222][ T8343] dump_stack_lvl+0x100/0x190 [ 241.077267][ T8343] should_fail_ex.cold+0x5/0xa [ 241.077298][ T8343] _copy_from_iter+0x1f4/0x1690 [ 241.077333][ T8343] ? __asan_memset+0x23/0x50 [ 241.077369][ T8343] ? __pfx__copy_from_iter+0x10/0x10 [ 241.077398][ T8343] ? __pfx___alloc_skb+0x10/0x10 [ 241.077450][ T8343] netlink_sendmsg+0x808/0xda0 [ 241.077481][ T8343] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.077503][ T8343] ? __import_iovec+0x1d2/0x640 [ 241.077535][ T8343] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 241.077576][ T8343] ____sys_sendmsg+0x9e1/0xb70 [ 241.077601][ T8343] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.077628][ T8343] ? __pfx_____sys_sendmsg+0x10/0x10 [ 241.077673][ T8343] ___sys_sendmsg+0x190/0x1e0 [ 241.077705][ T8343] ? __pfx____sys_sendmsg+0x10/0x10 [ 241.077777][ T8343] __sys_sendmsg+0x170/0x220 [ 241.077814][ T8343] ? __pfx___sys_sendmsg+0x10/0x10 [ 241.077848][ T8343] do_syscall_64+0x106/0xf80 [ 241.077871][ T8343] ? clear_bhb_loop+0x40/0x90 [ 241.077890][ T8343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.077905][ T8343] RIP: 0033:0x7fc9ffb9c799 [ 241.077918][ T8343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.077933][ T8343] RSP: 002b:00007fc9fddf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.077947][ T8343] RAX: ffffffffffffffda RBX: 00007fc9ffe15fa0 RCX: 00007fc9ffb9c799 [ 241.077957][ T8343] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 241.077966][ T8343] RBP: 00007fc9fddf6090 R08: 0000000000000000 R09: 0000000000000000 [ 241.077975][ T8343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.077983][ T8343] R13: 00007fc9ffe16038 R14: 00007fc9ffe15fa0 R15: 00007fffe295b0e8 [ 241.078011][ T8343] [ 243.105045][ T8383] FAULT_INJECTION: forcing a failure. [ 243.105045][ T8383] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 243.154241][ T8383] CPU: 0 UID: 0 PID: 8383 Comm: syz.1.583 Tainted: G U L syzkaller #0 PREEMPT(full) [ 243.154289][ T8383] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 243.154299][ T8383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 243.154319][ T8383] Call Trace: [ 243.154329][ T8383] [ 243.154338][ T8383] dump_stack_lvl+0x100/0x190 [ 243.154385][ T8383] should_fail_ex.cold+0x5/0xa [ 243.154413][ T8383] ? prepare_alloc_pages+0x16d/0x5f0 [ 243.154449][ T8383] should_fail_alloc_page+0xeb/0x140 [ 243.154482][ T8383] prepare_alloc_pages+0x1f0/0x5f0 [ 243.154515][ T8383] ? unwind_get_return_address+0x59/0xa0 [ 243.154551][ T8383] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 243.154601][ T8383] ? stack_trace_save+0x8e/0xc0 [ 243.154630][ T8383] ? __pfx_stack_trace_save+0x10/0x10 [ 243.154660][ T8383] ? stack_depot_save_flags+0x27/0x9d0 [ 243.154700][ T8383] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 243.154744][ T8383] ? kasan_save_stack+0x30/0x50 [ 243.154766][ T8383] ? __kasan_slab_alloc+0x89/0x90 [ 243.154790][ T8383] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 243.154827][ T8383] ? __pmd_alloc+0xbf/0x950 [ 243.154864][ T8383] ? __handle_mm_fault+0xa99/0x2b60 [ 243.154900][ T8383] ? handle_mm_fault+0x36d/0xa20 [ 243.154929][ T8383] ? do_user_addr_fault+0x74c/0x12f0 [ 243.154952][ T8383] ? exc_page_fault+0x6f/0xd0 [ 243.154984][ T8383] ? asm_exc_page_fault+0x26/0x30 [ 243.155009][ T8383] ? rep_movs_alternative+0x4a/0x90 [ 243.155043][ T8383] ? do_syscall_64+0x106/0xf80 [ 243.155075][ T8383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.155111][ T8383] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 243.155142][ T8383] ? policy_nodemask+0xed/0x4f0 [ 243.155175][ T8383] alloc_pages_mpol+0x1fb/0x550 [ 243.155206][ T8383] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 243.155244][ T8383] ? __pfx_filemap_map_pages+0x10/0x10 [ 243.155283][ T8383] alloc_pages_noprof+0x131/0x390 [ 243.155315][ T8383] pte_alloc_one+0x1c/0x3d0 [ 243.155345][ T8383] __do_fault+0x359/0x550 [ 243.155376][ T8383] ? __pfx_filemap_map_pages+0x10/0x10 [ 243.155414][ T8383] do_fault+0x2db/0x1990 [ 243.155445][ T8383] ? __pmd_alloc+0x3fb/0x950 [ 243.155481][ T8383] __handle_mm_fault+0x180f/0x2b60 [ 243.155524][ T8383] ? mt_find+0x45e/0x8e0 [ 243.155551][ T8383] ? __pfx___handle_mm_fault+0x10/0x10 [ 243.155586][ T8383] ? __pfx_mt_find+0x10/0x10 [ 243.155633][ T8383] ? find_vma+0xbf/0x140 [ 243.155661][ T8383] ? __pfx_find_vma+0x10/0x10 [ 243.155692][ T8383] handle_mm_fault+0x36d/0xa20 [ 243.155735][ T8383] do_user_addr_fault+0x74c/0x12f0 [ 243.155769][ T8383] exc_page_fault+0x6f/0xd0 [ 243.155805][ T8383] asm_exc_page_fault+0x26/0x30 [ 243.155830][ T8383] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 243.155870][ T8383] Code: 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 cf 93 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 243.155894][ T8383] RSP: 0018:ffffc90003dc7af8 EFLAGS: 00050206 [ 243.155923][ T8383] RAX: 0000000000000001 RBX: 000000000000ff9c RCX: 000000000000ff9c [ 243.155938][ T8383] RDX: 0000000000000001 RSI: ffff88804ad50000 RDI: 0000000000000000 [ 243.155953][ T8383] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffed10095abff3 [ 243.155969][ T8383] R10: 0000000000000003 R11: 0000000000000000 R12: ffff88804ad50000 [ 243.155983][ T8383] R13: 000000000000ff9c R14: 00007ffffffff000 R15: 0000000000000000 [ 243.156017][ T8383] _copy_to_user+0xa4/0xd0 [ 243.156052][ T8383] snd_pcm_oss_read2+0x294/0x400 [ 243.156089][ T8383] ? __pfx_snd_pcm_oss_read2+0x10/0x10 [ 243.156120][ T8383] ? snd_pcm_kernel_ioctl+0x14a/0x2e0 [ 243.156161][ T8383] ? snd_pcm_oss_prepare+0x11e/0x240 [ 243.156197][ T8383] snd_pcm_oss_read+0x5aa/0x730 [ 243.156239][ T8383] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 243.156272][ T8383] vfs_readv+0x5d8/0x8d0 [ 243.156322][ T8383] ? __pfx_vfs_readv+0x10/0x10 [ 243.156364][ T8383] ? find_held_lock+0x2b/0x80 [ 243.156413][ T8383] ? __fget_files+0x21f/0x3d0 [ 243.156450][ T8383] ? do_readv+0x13e/0x340 [ 243.156487][ T8383] do_readv+0x13e/0x340 [ 243.156527][ T8383] ? __pfx_do_readv+0x10/0x10 [ 243.156578][ T8383] do_syscall_64+0x106/0xf80 [ 243.156612][ T8383] ? clear_bhb_loop+0x40/0x90 [ 243.156644][ T8383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.156670][ T8383] RIP: 0033:0x7fc9ffb9c799 [ 243.156692][ T8383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.156717][ T8383] RSP: 002b:00007fc9fddf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 243.156741][ T8383] RAX: ffffffffffffffda RBX: 00007fc9ffe15fa0 RCX: 00007fc9ffb9c799 [ 243.156757][ T8383] RDX: 0000000000000003 RSI: 0000200000000200 RDI: 0000000000000006 [ 243.156772][ T8383] RBP: 00007fc9fddf6090 R08: 0000000000000000 R09: 0000000000000000 [ 243.156788][ T8383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.156803][ T8383] R13: 00007fc9ffe16038 R14: 00007fc9ffe15fa0 R15: 00007fffe295b0e8 [ 243.156848][ T8383] [ 244.219672][ T8408] FAULT_INJECTION: forcing a failure. [ 244.219672][ T8408] name failslab, interval 1, probability 0, space 0, times 0 [ 244.243098][ T8408] CPU: 1 UID: 0 PID: 8408 Comm: syz.2.586 Tainted: G U L syzkaller #0 PREEMPT(full) [ 244.243125][ T8408] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 244.243131][ T8408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 244.243140][ T8408] Call Trace: [ 244.243145][ T8408] [ 244.243150][ T8408] dump_stack_lvl+0x100/0x190 [ 244.243177][ T8408] should_fail_ex.cold+0x5/0xa [ 244.243196][ T8408] should_failslab+0xc2/0x120 [ 244.243212][ T8408] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 244.243237][ T8408] ? xas_split_alloc+0x11c/0x4a0 [ 244.243264][ T8408] xas_split_alloc+0x11c/0x4a0 [ 244.243291][ T8408] __folio_split+0x739/0x1b60 [ 244.243323][ T8408] ? __pfx___folio_split+0x10/0x10 [ 244.243343][ T8408] ? folio_alloc_swap+0xbb0/0x1aa0 [ 244.243358][ T8408] ? folio_alloc_swap+0xbb0/0x1aa0 [ 244.243375][ T8408] ? folio_alloc_swap+0x1238/0x1aa0 [ 244.243394][ T8408] shmem_writeout+0x798/0x1a00 [ 244.243421][ T8408] ? __pfx_shmem_writeout+0x10/0x10 [ 244.243442][ T8408] ? __pfx_try_to_unmap+0x10/0x10 [ 244.243462][ T8408] ? find_held_lock+0x2b/0x80 [ 244.243478][ T8408] ? inode_to_bdi+0x9e/0x160 [ 244.243494][ T8408] ? folio_clear_dirty_for_io+0x178/0x820 [ 244.243514][ T8408] shrink_folio_list+0x3af8/0x6000 [ 244.243543][ T8408] ? is_bpf_text_address+0x8a/0x1a0 [ 244.243580][ T8408] ? __pfx_shrink_folio_list+0x10/0x10 [ 244.243616][ T8408] ? __lock_acquire+0x4a5/0x2630 [ 244.243649][ T8408] ? lock_acquire+0x1cf/0x380 [ 244.243683][ T8408] ? lock_acquire+0x1cf/0x380 [ 244.243703][ T8408] ? find_held_lock+0x2b/0x80 [ 244.243716][ T8408] ? is_bpf_text_address+0x8a/0x1a0 [ 244.243739][ T8408] ? is_bpf_text_address+0x8a/0x1a0 [ 244.243782][ T8408] reclaim_folio_list+0xdc/0x600 [ 244.243803][ T8408] ? __lock_acquire+0x4a5/0x2630 [ 244.243830][ T8408] ? __pfx_reclaim_folio_list+0x10/0x10 [ 244.243859][ T8408] ? lru_gen_update_size+0x431/0xe40 [ 244.243883][ T8408] ? lru_gen_del_folio+0x382/0x5f0 [ 244.243904][ T8408] reclaim_pages+0x428/0x5e0 [ 244.243927][ T8408] ? __pfx_reclaim_pages+0x10/0x10 [ 244.243948][ T8408] ? madvise_cold_or_pageout_pte_range+0x2247/0x2720 [ 244.243968][ T8408] ? folio_isolate_lru+0xd5/0xaa0 [ 244.243992][ T8408] madvise_cold_or_pageout_pte_range+0x14e2/0x2720 [ 244.244019][ T8408] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 244.244044][ T8408] ? stack_trace_save+0x8e/0xc0 [ 244.244060][ T8408] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 244.244080][ T8408] walk_pgd_range+0xc04/0x1eb0 [ 244.244116][ T8408] ? __pfx_walk_pgd_range+0x10/0x10 [ 244.244145][ T8408] __walk_page_range+0x163/0x820 [ 244.244169][ T8408] ? process_measurement+0x4c8/0x2350 [ 244.244193][ T8408] ? process_measurement+0x4c8/0x2350 [ 244.244223][ T8408] walk_page_range_vma_unsafe+0x209/0x8f0 [ 244.244241][ T8408] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 244.244259][ T8408] ? find_held_lock+0x2b/0x80 [ 244.244273][ T8408] ? mlock_drain_local+0x254/0x4e0 [ 244.244296][ T8408] ? mlock_drain_local+0x254/0x4e0 [ 244.244323][ T8408] walk_page_range_vma+0x63/0x90 [ 244.244339][ T8408] madvise_pageout+0x259/0x540 [ 244.244358][ T8408] ? __pfx_madvise_pageout+0x10/0x10 [ 244.244382][ T8408] ? is_bpf_text_address+0x8a/0x1a0 [ 244.244405][ T8408] ? is_bpf_text_address+0x8a/0x1a0 [ 244.244431][ T8408] madvise_vma_behavior+0x3e6/0x3050 [ 244.244453][ T8408] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 244.244471][ T8408] ? mas_prev_setup.constprop.0+0xb6/0x9c0 [ 244.244497][ T8408] ? mas_prev+0x9b/0xf0 [ 244.244510][ T8408] ? __pfx_mas_prev+0x10/0x10 [ 244.244528][ T8408] ? find_vma_prev+0xd8/0x150 [ 244.244543][ T8408] ? _kstrtoull+0x13c/0x1f0 [ 244.244564][ T8408] ? __pfx_find_vma_prev+0x10/0x10 [ 244.244592][ T8408] madvise_walk_vmas+0x2fe/0xa90 [ 244.244613][ T8408] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 244.244636][ T8408] madvise_do_behavior+0x1ea/0x510 [ 244.244657][ T8408] ? __pfx_madvise_do_behavior+0x10/0x10 [ 244.244675][ T8408] ? down_read+0x13b/0x460 [ 244.244699][ T8408] do_madvise+0x195/0x240 [ 244.244716][ T8408] ? __pfx_do_madvise+0x10/0x10 [ 244.244733][ T8408] ? __mutex_unlock_slowpath+0x15c/0x790 [ 244.244770][ T8408] ? ksys_write+0x1ac/0x250 [ 244.244784][ T8408] ? __pfx_ksys_write+0x10/0x10 [ 244.244797][ T8408] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 244.244824][ T8408] __x64_sys_madvise+0xa9/0x110 [ 244.244842][ T8408] ? lockdep_hardirqs_on+0x78/0x100 [ 244.244865][ T8408] do_syscall_64+0x106/0xf80 [ 244.244886][ T8408] ? clear_bhb_loop+0x40/0x90 [ 244.244915][ T8408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.244940][ T8408] RIP: 0033:0x7f245299c799 [ 244.244958][ T8408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.244972][ T8408] RSP: 002b:00007f2450bd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 244.244986][ T8408] RAX: ffffffffffffffda RBX: 00007f2452c16180 RCX: 00007f245299c799 [ 244.244996][ T8408] RDX: 0000000000000015 RSI: 00000000002003f2 RDI: 0000000000000000 [ 244.245005][ T8408] RBP: 00007f2450bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 244.245013][ T8408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.245022][ T8408] R13: 00007f2452c16218 R14: 00007f2452c16180 R15: 00007ffd3dd6a848 [ 244.245041][ T8408] [ 246.736395][ T8452] netlink: 16 bytes leftover after parsing attributes in process `syz.2.595'. [ 246.928792][ T8444] random: crng reseeded on system resumption [ 246.943311][ T8456] FAULT_INJECTION: forcing a failure. [ 246.943311][ T8456] name failslab, interval 1, probability 0, space 0, times 0 [ 247.005387][ T8456] CPU: 1 UID: 0 PID: 8456 Comm: syz.2.595 Tainted: G U L syzkaller #0 PREEMPT(full) [ 247.005435][ T8456] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 247.005445][ T8456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 247.005460][ T8456] Call Trace: [ 247.005469][ T8456] [ 247.005480][ T8456] dump_stack_lvl+0x100/0x190 [ 247.005525][ T8456] should_fail_ex.cold+0x5/0xa [ 247.005559][ T8456] should_failslab+0xc2/0x120 [ 247.005589][ T8456] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 247.005634][ T8456] ? mas_alloc_nodes+0x280/0x390 [ 247.005679][ T8456] mas_alloc_nodes+0x280/0x390 [ 247.005721][ T8456] mas_preallocate+0x39c/0xf10 [ 247.005765][ T8456] ? __memcg_slab_post_alloc_hook+0x460/0x990 [ 247.005807][ T8456] ? __pfx_mas_preallocate+0x10/0x10 [ 247.005863][ T8456] ? anon_vma_name+0x5a/0x250 [ 247.005904][ T8456] __split_vma+0x33d/0xd90 [ 247.005964][ T8456] ? __pfx___split_vma+0x10/0x10 [ 247.006014][ T8456] ? __pfx_mas_prev+0x10/0x10 [ 247.006040][ T8456] ? ima_match_policy+0x8c4/0x2350 [ 247.006081][ T8456] vms_gather_munmap_vmas+0x39f/0x1500 [ 247.006131][ T8456] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 247.006179][ T8456] ? mas_walk+0x6ef/0x9b0 [ 247.006230][ T8456] __mmap_region+0x492/0x29e0 [ 247.006278][ T8456] ? __pfx___mmap_region+0x10/0x10 [ 247.006317][ T8456] ? process_measurement+0x1f4/0x2350 [ 247.006363][ T8456] ? css_rstat_updated+0x1ce/0x5a0 [ 247.006399][ T8456] ? __pfx_css_rstat_updated+0x10/0x10 [ 247.006428][ T8456] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 247.006475][ T8456] ? __lock_acquire+0x4a5/0x2630 [ 247.006512][ T8456] ? update_cfs_rq_load_avg+0x51/0x550 [ 247.006558][ T8456] ? lock_acquire+0x1cf/0x380 [ 247.006594][ T8456] ? find_held_lock+0x2b/0x80 [ 247.006621][ T8456] ? finish_task_switch.isra.0+0x200/0xb80 [ 247.006653][ T8456] ? finish_task_switch.isra.0+0x200/0xb80 [ 247.006699][ T8456] ? trace_sched_exit_tp+0x13a/0x180 [ 247.006736][ T8456] ? __schedule+0x1000/0x6120 [ 247.006822][ T8456] ? rcu_is_watching+0x12/0xc0 [ 247.006866][ T8456] ? cap_capable+0x107/0x460 [ 247.006927][ T8456] mmap_region+0x180/0x3e0 [ 247.006979][ T8456] do_mmap+0xc63/0x12f0 [ 247.007021][ T8456] ? __pfx_do_mmap+0x10/0x10 [ 247.007054][ T8456] ? __pfx_down_write_killable+0x10/0x10 [ 247.007092][ T8456] vm_mmap_pgoff+0x29e/0x470 [ 247.007132][ T8456] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 247.007168][ T8456] ? do_futex+0x192/0x350 [ 247.007202][ T8456] ? __pfx_do_futex+0x10/0x10 [ 247.007246][ T8456] ksys_mmap_pgoff+0xe1/0x650 [ 247.007277][ T8456] ? __x64_sys_futex+0x34f/0x4d0 [ 247.007312][ T8456] ? __x64_sys_futex+0x358/0x4d0 [ 247.007351][ T8456] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 247.007384][ T8456] ? xfd_validate_state+0x129/0x190 [ 247.007435][ T8456] __x64_sys_mmap+0x125/0x190 [ 247.007483][ T8456] do_syscall_64+0x106/0xf80 [ 247.007525][ T8456] ? clear_bhb_loop+0x40/0x90 [ 247.007561][ T8456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.007591][ T8456] RIP: 0033:0x7f245299c799 [ 247.007615][ T8456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.007642][ T8456] RSP: 002b:00007f2450bd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 247.007669][ T8456] RAX: ffffffffffffffda RBX: 00007f2452c16180 RCX: 00007f245299c799 [ 247.007687][ T8456] RDX: 0000000000000003 RSI: 0000000002000009 RDI: 0000000000000000 [ 247.007704][ T8456] RBP: 00007f2452a32c99 R08: fffffffffffffffa R09: 0000000000008000 [ 247.007722][ T8456] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 247.007739][ T8456] R13: 00007f2452c16218 R14: 00007f2452c16180 R15: 00007ffd3dd6a848 [ 247.007777][ T8456] [ 248.238660][ T8454] random: crng reseeded on system resumption [ 251.857369][ T29] audit: type=1806 audit(4294967328.590:4): res=-14 [ 253.125684][ T8560] netlink: 20 bytes leftover after parsing attributes in process `syz.1.617'. [ 253.267768][ T8558] zswap: compressor not available [ 253.578367][ T8574] openvswitch: netlink: Message has 12 unknown bytes. [ 254.183618][ T8576] random: crng reseeded on system resumption [ 254.434715][ T8585] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 254.465120][ T8585] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 254.896398][ T8590] binder: 8587:8590 ioctl c0405665 34 returned -22 [ 255.728428][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.734882][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.302197][ T8619] FAULT_INJECTION: forcing a failure. [ 256.302197][ T8619] name failslab, interval 1, probability 0, space 0, times 0 [ 256.316283][ T8619] CPU: 1 UID: 0 PID: 8619 Comm: syz.2.627 Tainted: G U L syzkaller #0 PREEMPT(full) [ 256.316310][ T8619] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 256.316315][ T8619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 256.316324][ T8619] Call Trace: [ 256.316329][ T8619] [ 256.316335][ T8619] dump_stack_lvl+0x100/0x190 [ 256.316362][ T8619] should_fail_ex.cold+0x5/0xa [ 256.316381][ T8619] should_failslab+0xc2/0x120 [ 256.316398][ T8619] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 256.316421][ T8619] ? sock_alloc_inode+0x25/0x1c0 [ 256.316439][ T8619] ? __pfx_sock_alloc_inode+0x10/0x10 [ 256.316455][ T8619] sock_alloc_inode+0x25/0x1c0 [ 256.316470][ T8619] alloc_inode+0x68/0x250 [ 256.316490][ T8619] sock_alloc+0x44/0x280 [ 256.316502][ T8619] ? security_socket_create+0x7f/0x250 [ 256.316529][ T8619] __sock_create+0xc2/0x860 [ 256.316549][ T8619] __sys_socket+0x14d/0x260 [ 256.316567][ T8619] ? __pfx___sys_socket+0x10/0x10 [ 256.316596][ T8619] __x64_sys_socket+0x72/0xb0 [ 256.316612][ T8619] ? lockdep_hardirqs_on+0x78/0x100 [ 256.316635][ T8619] do_syscall_64+0x106/0xf80 [ 256.316662][ T8619] ? clear_bhb_loop+0x40/0x90 [ 256.316680][ T8619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.316695][ T8619] RIP: 0033:0x7f245299c799 [ 256.316708][ T8619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.316723][ T8619] RSP: 002b:00007f2450bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 256.316737][ T8619] RAX: ffffffffffffffda RBX: 00007f2452c16090 RCX: 00007f245299c799 [ 256.316747][ T8619] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 256.316755][ T8619] RBP: 00007f2452a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 256.316764][ T8619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.316772][ T8619] R13: 00007f2452c16128 R14: 00007f2452c16090 R15: 00007ffd3dd6a848 [ 256.316791][ T8619] [ 256.316799][ T8619] socket: no more sockets [ 257.598438][ T8633] FAULT_INJECTION: forcing a failure. [ 257.598438][ T8633] name failslab, interval 1, probability 0, space 0, times 0 [ 257.613509][ T8633] CPU: 0 UID: 0 PID: 8633 Comm: syz.2.629 Tainted: G U L syzkaller #0 PREEMPT(full) [ 257.613552][ T8633] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 257.613562][ T8633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 257.613576][ T8633] Call Trace: [ 257.613584][ T8633] [ 257.613594][ T8633] dump_stack_lvl+0x100/0x190 [ 257.613639][ T8633] should_fail_ex.cold+0x5/0xa [ 257.613672][ T8633] should_failslab+0xc2/0x120 [ 257.613702][ T8633] __kmalloc_cache_noprof+0x7a/0x6f0 [ 257.613738][ T8633] ? blk_alloc_queue_stats+0x3f/0x110 [ 257.613770][ T8633] ? kmem_cache_alloc_node_noprof+0x2a9/0x6f0 [ 257.613812][ T8633] ? blk_alloc_queue+0x31/0x790 [ 257.613860][ T8633] blk_alloc_queue_stats+0x3f/0x110 [ 257.613893][ T8633] blk_alloc_queue+0xda/0x790 [ 257.613932][ T8633] __blk_alloc_disk+0xa0/0x170 [ 257.613961][ T8633] ? __pfx___blk_alloc_disk+0x10/0x10 [ 257.614010][ T8633] ? lockdep_init_map_type+0x5c/0x250 [ 257.614049][ T8633] ? lockdep_init_map_type+0x5c/0x250 [ 257.614090][ T8633] dm_create+0x5e8/0x15a0 [ 257.614132][ T8633] dev_create+0x121/0x2a0 [ 257.614172][ T8633] ? __pfx_dev_create+0x10/0x10 [ 257.614221][ T8633] ctl_ioctl+0x4db/0xcd0 [ 257.614260][ T8633] ? __pfx_dev_create+0x10/0x10 [ 257.614301][ T8633] ? __pfx_ctl_ioctl+0x10/0x10 [ 257.614373][ T8633] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 257.614418][ T8633] dm_ctl_ioctl+0x22/0x30 [ 257.614455][ T8633] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 257.614494][ T8633] __x64_sys_ioctl+0x18e/0x210 [ 257.614536][ T8633] do_syscall_64+0x106/0xf80 [ 257.614575][ T8633] ? clear_bhb_loop+0x40/0x90 [ 257.614608][ T8633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.614636][ T8633] RIP: 0033:0x7f245299c799 [ 257.614661][ T8633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.614686][ T8633] RSP: 002b:00007f2450bd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.614713][ T8633] RAX: ffffffffffffffda RBX: 00007f2452c16180 RCX: 00007f245299c799 [ 257.614732][ T8633] RDX: 00002000000001c0 RSI: fffffffffffffd03 RDI: 0000000000000002 [ 257.614749][ T8633] RBP: 00007f2450bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 257.614765][ T8633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.614781][ T8633] R13: 00007f2452c16218 R14: 00007f2452c16180 R15: 00007ffd3dd6a848 [ 257.614818][ T8633] [ 257.949364][ T8640] FAULT_INJECTION: forcing a failure. [ 257.949364][ T8640] name fail_futex, interval 1, probability 0, space 0, times 0 [ 257.962262][ T8640] CPU: 0 UID: 0 PID: 8640 Comm: syz.3.631 Tainted: G U L syzkaller #0 PREEMPT(full) [ 257.962292][ T8640] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 257.962299][ T8640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 257.962309][ T8640] Call Trace: [ 257.962315][ T8640] [ 257.962322][ T8640] dump_stack_lvl+0x100/0x190 [ 257.962353][ T8640] should_fail_ex.cold+0x5/0xa [ 257.962373][ T8640] get_futex_key+0x1d2/0x1620 [ 257.962395][ T8640] ? __pfx_get_futex_key+0x10/0x10 [ 257.962420][ T8640] futex_wake+0xea/0x530 [ 257.962445][ T8640] ? __pfx_futex_wake+0x10/0x10 [ 257.962467][ T8640] ? __call_rcu_common.constprop.0+0x3f0/0x9b0 [ 257.962495][ T8640] do_futex+0x32b/0x350 [ 257.962515][ T8640] ? __pfx_do_futex+0x10/0x10 [ 257.962536][ T8640] ? __pfx___might_resched+0x10/0x10 [ 257.962558][ T8640] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 257.962584][ T8640] __x64_sys_futex+0x34f/0x4d0 [ 257.962605][ T8640] ? __pfx_task_work_run+0x10/0x10 [ 257.962627][ T8640] ? __pfx___x64_sys_futex+0x10/0x10 [ 257.962647][ T8640] ? exit_to_user_mode_loop+0xdd/0x4a0 [ 257.962673][ T8640] do_syscall_64+0x106/0xf80 [ 257.962696][ T8640] ? clear_bhb_loop+0x40/0x90 [ 257.962714][ T8640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.962730][ T8640] RIP: 0033:0x7f9164b9c799 [ 257.962746][ T8640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.962761][ T8640] RSP: 002b:00007f9165a580e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 257.962776][ T8640] RAX: ffffffffffffffda RBX: 00007f9164e16098 RCX: 00007f9164b9c799 [ 257.962788][ T8640] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9164e1609c [ 257.962797][ T8640] RBP: 00007f9164e16090 R08: 0000000000000000 R09: 0000000000000000 [ 257.962806][ T8640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.962814][ T8640] R13: 00007f9164e16128 R14: 00007fffc1dc52a0 R15: 00007fffc1dc5388 [ 257.962853][ T8640] [ 259.457335][ T8667] FAULT_INJECTION: forcing a failure. [ 259.457335][ T8667] name failslab, interval 1, probability 0, space 0, times 0 [ 259.507668][ T8659] zswap: compressor not available [ 259.519585][ T8667] CPU: 0 UID: 0 PID: 8667 Comm: syz.2.637 Tainted: G U L syzkaller #0 PREEMPT(full) [ 259.519646][ T8667] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 259.519657][ T8667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 259.519675][ T8667] Call Trace: [ 259.519685][ T8667] [ 259.519696][ T8667] dump_stack_lvl+0x100/0x190 [ 259.519747][ T8667] should_fail_ex.cold+0x5/0xa [ 259.519783][ T8667] ? vhost_dev_set_owner+0x190/0xa30 [ 259.519825][ T8667] should_failslab+0xc2/0x120 [ 259.519858][ T8667] __kmalloc_noprof+0xe0/0x850 [ 259.519910][ T8667] vhost_dev_set_owner+0x190/0xa30 [ 259.519967][ T8667] vhost_net_ioctl+0xfa3/0x1910 [ 259.520010][ T8667] ? do_vfs_ioctl+0x226/0x13e0 [ 259.520053][ T8667] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 259.520095][ T8667] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 259.520148][ T8667] ? find_held_lock+0x2b/0x80 [ 259.520177][ T8667] ? __fget_files+0x215/0x3d0 [ 259.520203][ T8667] ? hook_file_ioctl_common+0x146/0x410 [ 259.520246][ T8667] ? __fget_files+0x21f/0x3d0 [ 259.520280][ T8667] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 259.520328][ T8667] __x64_sys_ioctl+0x18e/0x210 [ 259.520373][ T8667] do_syscall_64+0x106/0xf80 [ 259.520415][ T8667] ? clear_bhb_loop+0x40/0x90 [ 259.520452][ T8667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.520483][ T8667] RIP: 0033:0x7f245299c799 [ 259.520508][ T8667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.520537][ T8667] RSP: 002b:00007f2450bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 259.520568][ T8667] RAX: ffffffffffffffda RBX: 00007f2452c16090 RCX: 00007f245299c799 [ 259.520589][ T8667] RDX: 0000000000000005 RSI: 000000000000af01 RDI: 0000000000000008 [ 259.520637][ T8667] RBP: 00007f2452a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 259.520653][ T8667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.520670][ T8667] R13: 00007f2452c16128 R14: 00007f2452c16090 R15: 00007ffd3dd6a848 [ 259.520711][ T8667] [ 260.705549][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c38f400: rx timeout, send abort [ 260.735025][ T8676] netlink: 354 bytes leftover after parsing attributes in process `syz.3.640'. [ 261.213875][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c38f400: abort rx timeout. Force session deactivation [ 261.845737][ T8689] ubi0: attaching mtd0 [ 261.852002][ T8689] ubi0: scanning is finished [ 261.872009][ T8689] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 262.055827][ T8689] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 263.142824][ T8713] program syz.3.648 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 265.899873][ T8779] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 266.320421][ T8779] tc_dump_action: action bad kind [ 268.730505][ T8823] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18 [ 271.286135][ T8896] FAULT_INJECTION: forcing a failure. [ 271.286135][ T8896] name failslab, interval 1, probability 0, space 0, times 0 [ 271.307043][ T8896] CPU: 1 UID: 0 PID: 8896 Comm: syz.0.692 Tainted: G U L syzkaller #0 PREEMPT(full) [ 271.307079][ T8896] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 271.307085][ T8896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 271.307094][ T8896] Call Trace: [ 271.307100][ T8896] [ 271.307106][ T8896] dump_stack_lvl+0x100/0x190 [ 271.307135][ T8896] should_fail_ex.cold+0x5/0xa [ 271.307154][ T8896] should_failslab+0xc2/0x120 [ 271.307171][ T8896] __kmalloc_cache_noprof+0x7a/0x6f0 [ 271.307191][ T8896] ? snd_pcm_oss_change_params_locked+0x1db/0x39f0 [ 271.307215][ T8896] snd_pcm_oss_change_params_locked+0x1db/0x39f0 [ 271.307236][ T8896] ? __mutex_lock+0x26a/0x1b90 [ 271.307259][ T8896] ? tomoyo_path_number_perm+0x46d/0x580 [ 271.307278][ T8896] ? snd_pcm_oss_get_active_substream+0x153/0x1d0 [ 271.307298][ T8896] ? kasan_quarantine_put+0x104/0x240 [ 271.307322][ T8896] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 271.307340][ T8896] ? __pfx___mutex_lock+0x10/0x10 [ 271.307361][ T8896] ? find_held_lock+0x2b/0x80 [ 271.307376][ T8896] ? tomoyo_path_number_perm+0x28f/0x580 [ 271.307392][ T8896] ? tomoyo_path_number_perm+0x28f/0x580 [ 271.307415][ T8896] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 271.307432][ T8896] ? futex_wait+0x125/0x380 [ 271.307465][ T8896] snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 271.307487][ T8896] snd_pcm_oss_get_formats+0x7d/0x350 [ 271.307506][ T8896] ? do_vfs_ioctl+0x226/0x13e0 [ 271.307528][ T8896] ? __pfx_snd_pcm_oss_get_formats+0x10/0x10 [ 271.307553][ T8896] snd_pcm_oss_ioctl+0x1719/0x3720 [ 271.307571][ T8896] ? find_held_lock+0x2b/0x80 [ 271.307585][ T8896] ? __fget_files+0x215/0x3d0 [ 271.307599][ T8896] ? hook_file_ioctl_common+0x146/0x410 [ 271.307617][ T8896] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 271.307638][ T8896] ? __fget_files+0x21f/0x3d0 [ 271.307655][ T8896] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 271.307674][ T8896] __x64_sys_ioctl+0x18e/0x210 [ 271.307696][ T8896] do_syscall_64+0x106/0xf80 [ 271.307717][ T8896] ? clear_bhb_loop+0x40/0x90 [ 271.307736][ T8896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.307751][ T8896] RIP: 0033:0x7f3230b9c799 [ 271.307764][ T8896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.307778][ T8896] RSP: 002b:00007f3231b44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 271.307794][ T8896] RAX: ffffffffffffffda RBX: 00007f3230e15fa0 RCX: 00007f3230b9c799 [ 271.307804][ T8896] RDX: 0000000000000000 RSI: 000000008004500b RDI: 0000000000000003 [ 271.307813][ T8896] RBP: 00007f3230c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 271.307823][ T8896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.307832][ T8896] R13: 00007f3230e16038 R14: 00007f3230e15fa0 R15: 00007ffec83a59d8 [ 271.307852][ T8896] [ 271.940346][ T8903] netlink: 24 bytes leftover after parsing attributes in process `syz.1.693'. [ 272.777278][ T8923] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 276.431263][ T8997] aoe: can't write to that file. [ 277.802091][ T9036] FAULT_INJECTION: forcing a failure. [ 277.802091][ T9036] name fail_futex, interval 1, probability 0, space 0, times 0 [ 277.846746][ T9036] CPU: 0 UID: 0 PID: 9036 Comm: syz.2.720 Tainted: G U L syzkaller #0 PREEMPT(full) [ 277.846786][ T9036] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 277.846792][ T9036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 277.846801][ T9036] Call Trace: [ 277.846806][ T9036] [ 277.846812][ T9036] dump_stack_lvl+0x100/0x190 [ 277.846841][ T9036] should_fail_ex.cold+0x5/0xa [ 277.846860][ T9036] get_futex_key+0x295/0x1620 [ 277.846881][ T9036] ? __pfx_get_futex_key+0x10/0x10 [ 277.846898][ T9036] ? lock_acquire+0x1cf/0x380 [ 277.846924][ T9036] futex_wake+0xea/0x530 [ 277.846948][ T9036] ? __pfx_futex_wake+0x10/0x10 [ 277.846971][ T9036] ? exit_mm_release+0x19/0x30 [ 277.846995][ T9036] do_futex+0x32b/0x350 [ 277.847015][ T9036] ? __pfx_do_futex+0x10/0x10 [ 277.847033][ T9036] ? __might_fault+0xc5/0x140 [ 277.847059][ T9036] mm_release+0x24a/0x2f0 [ 277.847084][ T9036] do_exit+0x704/0x2b60 [ 277.847120][ T9036] ? __pfx_do_exit+0x10/0x10 [ 277.847142][ T9036] ? do_raw_spin_lock+0x128/0x260 [ 277.847164][ T9036] ? find_held_lock+0x2b/0x80 [ 277.847177][ T9036] ? get_signal+0x7e0/0x21e0 [ 277.847196][ T9036] do_group_exit+0xd5/0x2a0 [ 277.847224][ T9036] get_signal+0x1ec7/0x21e0 [ 277.847247][ T9036] ? __pfx_get_signal+0x10/0x10 [ 277.847264][ T9036] ? do_futex+0x192/0x350 [ 277.847286][ T9036] arch_do_signal_or_restart+0x91/0x770 [ 277.847306][ T9036] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 277.847330][ T9036] ? __pfx___x64_sys_futex+0x10/0x10 [ 277.847354][ T9036] exit_to_user_mode_loop+0x86/0x4a0 [ 277.847377][ T9036] do_syscall_64+0x668/0xf80 [ 277.847400][ T9036] ? clear_bhb_loop+0x40/0x90 [ 277.847418][ T9036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.847432][ T9036] RIP: 0033:0x7f245299c799 [ 277.847446][ T9036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.847460][ T9036] RSP: 002b:00007f24537890e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 277.847475][ T9036] RAX: fffffffffffffe00 RBX: 00007f2452c15fa8 RCX: 00007f245299c799 [ 277.847485][ T9036] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2452c15fa8 [ 277.847494][ T9036] RBP: 00007f2452c15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 277.847502][ T9036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.847510][ T9036] R13: 00007f2452c16038 R14: 00007ffd3dd6a760 R15: 00007ffd3dd6a848 [ 277.847529][ T9036] [ 279.086463][ T9065] FAULT_INJECTION: forcing a failure. [ 279.086463][ T9065] name failslab, interval 1, probability 0, space 0, times 0 [ 279.102166][ T9065] CPU: 1 UID: 0 PID: 9065 Comm: syz.2.728 Tainted: G U L syzkaller #0 PREEMPT(full) [ 279.102215][ T9065] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 279.102225][ T9065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 279.102241][ T9065] Call Trace: [ 279.102250][ T9065] [ 279.102260][ T9065] dump_stack_lvl+0x100/0x190 [ 279.102307][ T9065] should_fail_ex.cold+0x5/0xa [ 279.102341][ T9065] should_failslab+0xc2/0x120 [ 279.102371][ T9065] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 279.102411][ T9065] ? skb_clone+0x190/0x400 [ 279.102458][ T9065] skb_clone+0x190/0x400 [ 279.102498][ T9065] netlink_deliver_tap+0xaed/0xcc0 [ 279.102547][ T9065] netlink_unicast+0x650/0x870 [ 279.102579][ T9065] ? __pfx_netlink_unicast+0x10/0x10 [ 279.102620][ T9065] netlink_sendmsg+0x8b0/0xda0 [ 279.102660][ T9065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.102685][ T9065] ? __import_iovec+0x1d2/0x640 [ 279.102721][ T9065] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 279.102770][ T9065] ____sys_sendmsg+0x9e1/0xb70 [ 279.102798][ T9065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.102827][ T9065] ? __pfx_____sys_sendmsg+0x10/0x10 [ 279.102874][ T9065] ___sys_sendmsg+0x190/0x1e0 [ 279.102907][ T9065] ? __pfx____sys_sendmsg+0x10/0x10 [ 279.102982][ T9065] __sys_sendmsg+0x170/0x220 [ 279.103023][ T9065] ? __pfx___sys_sendmsg+0x10/0x10 [ 279.103086][ T9065] do_syscall_64+0x106/0xf80 [ 279.103125][ T9065] ? clear_bhb_loop+0x40/0x90 [ 279.103157][ T9065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.103186][ T9065] RIP: 0033:0x7f245299c799 [ 279.103210][ T9065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.103237][ T9065] RSP: 002b:00007f2453789028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.103264][ T9065] RAX: ffffffffffffffda RBX: 00007f2452c15fa0 RCX: 00007f245299c799 [ 279.103283][ T9065] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 279.103301][ T9065] RBP: 00007f2453789090 R08: 0000000000000000 R09: 0000000000000000 [ 279.103318][ T9065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.103335][ T9065] R13: 00007f2452c16038 R14: 00007f2452c15fa0 R15: 00007ffd3dd6a848 [ 279.103373][ T9065] [ 279.966980][ T9069] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 281.299892][ T9088] FAULT_INJECTION: forcing a failure. [ 281.299892][ T9088] name failslab, interval 1, probability 0, space 0, times 0 [ 281.325559][ T9088] CPU: 0 UID: 0 PID: 9088 Comm: syz.2.733 Tainted: G U L syzkaller #0 PREEMPT(full) [ 281.325603][ T9088] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 281.325613][ T9088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 281.325628][ T9088] Call Trace: [ 281.325637][ T9088] [ 281.325647][ T9088] dump_stack_lvl+0x100/0x190 [ 281.325694][ T9088] should_fail_ex.cold+0x5/0xa [ 281.325727][ T9088] should_failslab+0xc2/0x120 [ 281.325762][ T9088] __kvmalloc_node_noprof+0xfa/0xa00 [ 281.325804][ T9088] ? file_tty_write.isra.0+0x64e/0x890 [ 281.325858][ T9088] file_tty_write.isra.0+0x64e/0x890 [ 281.325908][ T9088] redirected_tty_write+0xd4/0x120 [ 281.325952][ T9088] vfs_write+0x6ac/0x1070 [ 281.326002][ T9088] ? __pfx_redirected_tty_write+0x10/0x10 [ 281.326046][ T9088] ? __pfx_vfs_write+0x10/0x10 [ 281.326075][ T9088] ? find_held_lock+0x2b/0x80 [ 281.326139][ T9088] ksys_write+0x12a/0x250 [ 281.326165][ T9088] ? __pfx_ksys_write+0x10/0x10 [ 281.326206][ T9088] do_syscall_64+0x106/0xf80 [ 281.326245][ T9088] ? clear_bhb_loop+0x40/0x90 [ 281.326282][ T9088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.326310][ T9088] RIP: 0033:0x7f245299c799 [ 281.326337][ T9088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.326363][ T9088] RSP: 002b:00007f2453789028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 281.326389][ T9088] RAX: ffffffffffffffda RBX: 00007f2452c15fa0 RCX: 00007f245299c799 [ 281.326411][ T9088] RDX: 0000000000000007 RSI: 0000200000000000 RDI: 0000000000000003 [ 281.326428][ T9088] RBP: 00007f2453789090 R08: 0000000000000000 R09: 0000000000000000 [ 281.326445][ T9088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.326461][ T9088] R13: 00007f2452c16038 R14: 00007f2452c15fa0 R15: 00007ffd3dd6a848 [ 281.326503][ T9088] [ 283.408177][ T9121] FAULT_INJECTION: forcing a failure. [ 283.408177][ T9121] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 283.480614][ T9121] CPU: 0 UID: 0 PID: 9121 Comm: syz.2.743 Tainted: G U L syzkaller #0 PREEMPT(full) [ 283.480641][ T9121] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 283.480647][ T9121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 283.480662][ T9121] Call Trace: [ 283.480667][ T9121] [ 283.480673][ T9121] dump_stack_lvl+0x100/0x190 [ 283.480701][ T9121] should_fail_ex.cold+0x5/0xa [ 283.480717][ T9121] ? prepare_alloc_pages+0x16d/0x5f0 [ 283.480737][ T9121] should_fail_alloc_page+0xeb/0x140 [ 283.480755][ T9121] prepare_alloc_pages+0x1f0/0x5f0 [ 283.480776][ T9121] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 283.480804][ T9121] ? __lock_acquire+0x4a5/0x2630 [ 283.480829][ T9121] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 283.480855][ T9121] ? do_raw_spin_lock+0x128/0x260 [ 283.480877][ T9121] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 283.480899][ T9121] ? find_held_lock+0x2b/0x80 [ 283.480920][ T9121] ? __lock_acquire+0x4a5/0x2630 [ 283.480939][ T9121] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 283.480955][ T9121] ? policy_nodemask+0xed/0x4f0 [ 283.480973][ T9121] alloc_pages_mpol+0x1fb/0x550 [ 283.480991][ T9121] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 283.481007][ T9121] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 283.481031][ T9121] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 283.481058][ T9121] folio_alloc_mpol_noprof+0x36/0x340 [ 283.481078][ T9121] shmem_alloc_folio+0x135/0x160 [ 283.481099][ T9121] shmem_alloc_and_add_folio+0x371/0xd40 [ 283.481126][ T9121] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 283.481151][ T9121] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 283.481178][ T9121] shmem_get_folio_gfp+0x6ab/0x1900 [ 283.481206][ T9121] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 283.481230][ T9121] ? ktime_get_coarse_real_ts64_mg+0x235/0x300 [ 283.481251][ T9121] ? lockdep_hardirqs_on+0x78/0x100 [ 283.481275][ T9121] shmem_fault+0x1f9/0xa20 [ 283.481298][ T9121] ? __lock_acquire+0x4a5/0x2630 [ 283.481317][ T9121] ? __pfx_shmem_fault+0x10/0x10 [ 283.481341][ T9121] ? __up_read+0x2c5/0x700 [ 283.481369][ T9121] ? __pfx_filemap_map_pages+0x10/0x10 [ 283.481392][ T9121] __do_fault+0x10d/0x550 [ 283.481409][ T9121] ? __pfx_filemap_map_pages+0x10/0x10 [ 283.481436][ T9121] do_fault+0x2db/0x1990 [ 283.481457][ T9121] __handle_mm_fault+0x180f/0x2b60 [ 283.481489][ T9121] ? mt_find+0x45e/0x8e0 [ 283.481505][ T9121] ? __pfx___handle_mm_fault+0x10/0x10 [ 283.481524][ T9121] ? __pfx_mt_find+0x10/0x10 [ 283.481548][ T9121] ? find_vma+0xbf/0x140 [ 283.481562][ T9121] ? __pfx_find_vma+0x10/0x10 [ 283.481579][ T9121] handle_mm_fault+0x36d/0xa20 [ 283.481603][ T9121] do_user_addr_fault+0x74c/0x12f0 [ 283.481624][ T9121] exc_page_fault+0x6f/0xd0 [ 283.481646][ T9121] asm_exc_page_fault+0x26/0x30 [ 283.481667][ T9121] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 283.481691][ T9121] Code: 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 cf 93 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 283.481704][ T9121] RSP: 0000:ffffc90004a87af8 EFLAGS: 00050206 [ 283.481717][ T9121] RAX: 0000000000000001 RBX: 000000000000ff9c RCX: 000000000000cf9c [ 283.481726][ T9121] RDX: 0000000000000001 RSI: ffff888046b03000 RDI: 0000000000003000 [ 283.481735][ T9121] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffed1008d61ff3 [ 283.481744][ T9121] R10: 0000000000000003 R11: 0000000000000000 R12: ffff888046b00000 [ 283.481752][ T9121] R13: 000000000000ff9c R14: 00007ffffffff000 R15: 0000000000000000 [ 283.481771][ T9121] _copy_to_user+0xa4/0xd0 [ 283.481791][ T9121] snd_pcm_oss_read2+0x294/0x400 [ 283.481814][ T9121] ? __pfx_snd_pcm_oss_read2+0x10/0x10 [ 283.481831][ T9121] ? snd_pcm_kernel_ioctl+0x14a/0x2e0 [ 283.481855][ T9121] ? snd_pcm_oss_prepare+0x11e/0x240 [ 283.481874][ T9121] snd_pcm_oss_read+0x5aa/0x730 [ 283.481896][ T9121] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 283.481914][ T9121] vfs_readv+0x5d8/0x8d0 [ 283.481943][ T9121] ? __pfx_vfs_readv+0x10/0x10 [ 283.481966][ T9121] ? find_held_lock+0x2b/0x80 [ 283.481992][ T9121] ? __fget_files+0x21f/0x3d0 [ 283.482012][ T9121] ? do_readv+0x13e/0x340 [ 283.482033][ T9121] do_readv+0x13e/0x340 [ 283.482055][ T9121] ? __pfx_do_readv+0x10/0x10 [ 283.482083][ T9121] do_syscall_64+0x106/0xf80 [ 283.482104][ T9121] ? clear_bhb_loop+0x40/0x90 [ 283.482122][ T9121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.482137][ T9121] RIP: 0033:0x7f245299c799 [ 283.482149][ T9121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.482165][ T9121] RSP: 002b:00007f2450bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 283.482178][ T9121] RAX: ffffffffffffffda RBX: 00007f2452c16090 RCX: 00007f245299c799 [ 283.482188][ T9121] RDX: 0000000000000003 RSI: 0000200000000200 RDI: 0000000000000006 [ 283.482196][ T9121] RBP: 00007f2450bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 283.482205][ T9121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.482213][ T9121] R13: 00007f2452c16128 R14: 00007f2452c16090 R15: 00007ffd3dd6a848 [ 283.482232][ T9121] [ 285.328281][ T9169] FAULT_INJECTION: forcing a failure. [ 285.328281][ T9169] name failslab, interval 1, probability 0, space 0, times 0 [ 285.415934][ T9169] CPU: 1 UID: 0 PID: 9169 Comm: syz.0.749 Tainted: G U L syzkaller #0 PREEMPT(full) [ 285.415983][ T9169] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 285.415993][ T9169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 285.416009][ T9169] Call Trace: [ 285.416021][ T9169] [ 285.416033][ T9169] dump_stack_lvl+0x100/0x190 [ 285.416082][ T9169] should_fail_ex.cold+0x5/0xa [ 285.416112][ T9169] ? tomoyo_realpath_from_path+0xb6/0x690 [ 285.416149][ T9169] should_failslab+0xc2/0x120 [ 285.416181][ T9169] __kmalloc_noprof+0xe0/0x850 [ 285.416233][ T9169] tomoyo_realpath_from_path+0xb6/0x690 [ 285.416295][ T9169] tomoyo_check_open_permission+0x2af/0x3c0 [ 285.416333][ T9169] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 285.416412][ T9169] ? do_raw_spin_lock+0x128/0x260 [ 285.416491][ T9169] ? path_get+0x61/0x80 [ 285.416527][ T9169] tomoyo_file_open+0x6b/0x90 [ 285.416570][ T9169] security_file_open+0xb5/0x1e0 [ 285.416605][ T9169] do_dentry_open+0x5aa/0x1660 [ 285.416645][ T9169] ? security_inode_permission+0xbf/0x250 [ 285.416683][ T9169] vfs_open+0x82/0x3f0 [ 285.416723][ T9169] path_openat+0x208c/0x31a0 [ 285.416762][ T9169] ? __pfx_path_openat+0x10/0x10 [ 285.416801][ T9169] do_file_open+0x20e/0x430 [ 285.416834][ T9169] ? __pfx_do_file_open+0x10/0x10 [ 285.416884][ T9169] ? alloc_fd+0x476/0x790 [ 285.416912][ T9169] ? do_getname+0x191/0x390 [ 285.416946][ T9169] do_sys_openat2+0x10d/0x1e0 [ 285.416983][ T9169] ? __pfx_do_sys_openat2+0x10/0x10 [ 285.417029][ T9169] __x64_sys_openat+0x12d/0x210 [ 285.417067][ T9169] ? __pfx___x64_sys_openat+0x10/0x10 [ 285.417116][ T9169] do_syscall_64+0x106/0xf80 [ 285.417156][ T9169] ? clear_bhb_loop+0x40/0x90 [ 285.417195][ T9169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.417222][ T9169] RIP: 0033:0x7f3230b9c799 [ 285.417246][ T9169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.417272][ T9169] RSP: 002b:00007f3231b23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 285.417299][ T9169] RAX: ffffffffffffffda RBX: 00007f3230e16090 RCX: 00007f3230b9c799 [ 285.417319][ T9169] RDX: 0000000000121140 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 285.417338][ T9169] RBP: 00007f3230c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 285.417356][ T9169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.417372][ T9169] R13: 00007f3230e16128 R14: 00007f3230e16090 R15: 00007ffec83a59d8 [ 285.417419][ T9169] [ 285.494253][ T9169] ERROR: Out of memory at tomoyo_realpath_from_path. [ 290.796584][ T9236] netlink: 338 bytes leftover after parsing attributes in process `syz.0.763'. [ 292.572133][ T9244] random: crng reseeded on system resumption [ 292.643903][ T9267] FAULT_INJECTION: forcing a failure. [ 292.643903][ T9267] name fail_futex, interval 1, probability 0, space 0, times 0 [ 292.687352][ T9267] CPU: 1 UID: 0 PID: 9267 Comm: syz.3.772 Tainted: G U L syzkaller #0 PREEMPT(full) [ 292.687408][ T9267] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 292.687418][ T9267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 292.687434][ T9267] Call Trace: [ 292.687442][ T9267] [ 292.687453][ T9267] dump_stack_lvl+0x100/0x190 [ 292.687498][ T9267] should_fail_ex.cold+0x5/0xa [ 292.687531][ T9267] get_futex_key+0x1d2/0x1620 [ 292.687567][ T9267] ? __pfx_get_futex_key+0x10/0x10 [ 292.687600][ T9267] ? find_held_lock+0x2b/0x80 [ 292.687627][ T9267] ? futex_wake+0x456/0x530 [ 292.687689][ T9267] futex_wake+0xea/0x530 [ 292.687732][ T9267] ? __pfx_futex_wait+0x10/0x10 [ 292.687776][ T9267] ? __pfx_futex_wake+0x10/0x10 [ 292.687834][ T9267] do_futex+0x32b/0x350 [ 292.687870][ T9267] ? __pfx_do_futex+0x10/0x10 [ 292.687909][ T9267] ? __pfx___might_resched+0x10/0x10 [ 292.687950][ T9267] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 292.687999][ T9267] __x64_sys_futex+0x34f/0x4d0 [ 292.688038][ T9267] ? __pfx_task_work_run+0x10/0x10 [ 292.688080][ T9267] ? __pfx___x64_sys_futex+0x10/0x10 [ 292.688120][ T9267] ? exit_to_user_mode_loop+0xdd/0x4a0 [ 292.688169][ T9267] do_syscall_64+0x106/0xf80 [ 292.688208][ T9267] ? clear_bhb_loop+0x40/0x90 [ 292.688242][ T9267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.688270][ T9267] RIP: 0033:0x7f9164b9c799 [ 292.688295][ T9267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.688323][ T9267] RSP: 002b:00007f9165a790e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 292.688350][ T9267] RAX: ffffffffffffffda RBX: 00007f9164e15fa8 RCX: 00007f9164b9c799 [ 292.688375][ T9267] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9164e15fac [ 292.688392][ T9267] RBP: 00007f9164e15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 292.688408][ T9267] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 292.688426][ T9267] R13: 00007f9164e16038 R14: 00007fffc1dc52a0 R15: 00007fffc1dc5388 [ 292.688459][ T9267] [ 292.961566][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805db4e400: rx timeout, send abort [ 292.970033][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805db4dc00: rx timeout, send abort [ 292.985077][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805db4e400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 292.999551][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805db4dc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 293.831674][ T9286] bridge_slave_1: left allmulticast mode [ 293.837626][ T9286] bridge_slave_1: left promiscuous mode [ 293.848132][ T9286] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.556201][ T9486] binder: binder_mmap: 9485 0-1000 bad vm_flags failed -1 [ 301.949260][ T9466] futex_wake_op: syz.2.811 tries to shift op by -2048; fix this program [ 303.496942][ T9518] netlink: 25 bytes leftover after parsing attributes in process `syz.2.822'. [ 307.650274][ T9562] random: crng reseeded on system resumption [ 308.781302][ T9599] zswap: compressor û not available [ 309.175041][ T9617] FAULT_INJECTION: forcing a failure. [ 309.175041][ T9617] name fail_futex, interval 1, probability 0, space 0, times 0 [ 309.175103][ T9617] CPU: 0 UID: 0 PID: 9617 Comm: syz.3.844 Tainted: G U L syzkaller #0 PREEMPT(full) [ 309.175151][ T9617] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 309.175165][ T9617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 309.175179][ T9617] Call Trace: [ 309.175186][ T9617] [ 309.175195][ T9617] dump_stack_lvl+0x100/0x190 [ 309.175238][ T9617] should_fail_ex.cold+0x5/0xa [ 309.175268][ T9617] get_futex_key+0x295/0x1620 [ 309.175301][ T9617] ? __pfx_get_futex_key+0x10/0x10 [ 309.175328][ T9617] ? lock_acquire+0x1cf/0x380 [ 309.175373][ T9617] futex_wake+0xea/0x530 [ 309.175411][ T9617] ? __pfx_futex_wake+0x10/0x10 [ 309.175448][ T9617] ? exit_mm_release+0x19/0x30 [ 309.175493][ T9617] do_futex+0x32b/0x350 [ 309.175528][ T9617] ? __pfx_do_futex+0x10/0x10 [ 309.175561][ T9617] ? __might_fault+0xc5/0x140 [ 309.175609][ T9617] mm_release+0x24a/0x2f0 [ 309.175639][ T9617] do_exit+0x704/0x2b60 [ 309.175678][ T9617] ? __pfx_do_exit+0x10/0x10 [ 309.175713][ T9617] ? do_raw_spin_lock+0x128/0x260 [ 309.175752][ T9617] ? find_held_lock+0x2b/0x80 [ 309.175778][ T9617] ? get_signal+0x7e0/0x21e0 [ 309.175811][ T9617] do_group_exit+0xd5/0x2a0 [ 309.175850][ T9617] get_signal+0x1ec7/0x21e0 [ 309.175892][ T9617] ? __pfx_get_signal+0x10/0x10 [ 309.175923][ T9617] ? do_futex+0x192/0x350 [ 309.175962][ T9617] arch_do_signal_or_restart+0x91/0x770 [ 309.175998][ T9617] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 309.176043][ T9617] ? __pfx___x64_sys_futex+0x10/0x10 [ 309.176087][ T9617] exit_to_user_mode_loop+0x86/0x4a0 [ 309.176127][ T9617] do_syscall_64+0x668/0xf80 [ 309.176172][ T9617] ? clear_bhb_loop+0x40/0x90 [ 309.176205][ T9617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.176233][ T9617] RIP: 0033:0x7f9164b9c799 [ 309.176257][ T9617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.176284][ T9617] RSP: 002b:00007f9165a790e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 309.176310][ T9617] RAX: fffffffffffffe00 RBX: 00007f9164e15fa8 RCX: 00007f9164b9c799 [ 309.176328][ T9617] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9164e15fa8 [ 309.176345][ T9617] RBP: 00007f9164e15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 309.176362][ T9617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.176378][ T9617] R13: 00007f9164e16038 R14: 00007fffc1dc52a0 R15: 00007fffc1dc5388 [ 309.176415][ T9617] [ 309.354974][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 311.656157][ T9662] FAULT_INJECTION: forcing a failure. [ 311.656157][ T9662] name failslab, interval 1, probability 0, space 0, times 0 [ 311.671473][ T9662] CPU: 1 UID: 0 PID: 9662 Comm: syz.3.854 Tainted: G U L syzkaller #0 PREEMPT(full) [ 311.671519][ T9662] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 311.671527][ T9662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 311.671543][ T9662] Call Trace: [ 311.671551][ T9662] [ 311.671560][ T9662] dump_stack_lvl+0x100/0x190 [ 311.671606][ T9662] should_fail_ex.cold+0x5/0xa [ 311.671638][ T9662] should_failslab+0xc2/0x120 [ 311.671666][ T9662] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 311.671705][ T9662] ? xas_split_alloc+0x11c/0x4a0 [ 311.671753][ T9662] xas_split_alloc+0x11c/0x4a0 [ 311.671800][ T9662] __folio_split+0x739/0x1b60 [ 311.671849][ T9662] ? __pfx___folio_split+0x10/0x10 [ 311.671882][ T9662] ? folio_alloc_swap+0xbb0/0x1aa0 [ 311.671909][ T9662] ? folio_alloc_swap+0xbb0/0x1aa0 [ 311.671943][ T9662] ? folio_alloc_swap+0x1238/0x1aa0 [ 311.671979][ T9662] shmem_writeout+0x798/0x1a00 [ 311.672026][ T9662] ? __pfx_shmem_writeout+0x10/0x10 [ 311.672062][ T9662] ? __pfx_try_to_unmap+0x10/0x10 [ 311.672099][ T9662] ? find_held_lock+0x2b/0x80 [ 311.672128][ T9662] ? inode_to_bdi+0x9e/0x160 [ 311.672156][ T9662] ? folio_clear_dirty_for_io+0x178/0x820 [ 311.672193][ T9662] shrink_folio_list+0x3af8/0x6000 [ 311.672248][ T9662] ? __pfx_shrink_folio_list+0x10/0x10 [ 311.672287][ T9662] ? __lock_acquire+0x4a5/0x2630 [ 311.672325][ T9662] ? rcu_is_watching+0x12/0xc0 [ 311.672364][ T9662] ? trace_contention_end.constprop.0+0x15b/0x1b0 [ 311.672415][ T9662] ? __pv_queued_spin_lock_slowpath+0x284/0xc00 [ 311.672460][ T9662] ? rcu_is_watching+0x12/0xc0 [ 311.672498][ T9662] ? trace_contention_end.constprop.0+0x15b/0x1b0 [ 311.672567][ T9662] ? rcu_is_watching+0x12/0xc0 [ 311.672608][ T9662] ? finish_task_switch.isra.0+0x205/0xb80 [ 311.672634][ T9662] reclaim_folio_list+0xdc/0x600 [ 311.672655][ T9662] ? __lock_acquire+0x4a5/0x2630 [ 311.672675][ T9662] ? __pfx_reclaim_folio_list+0x10/0x10 [ 311.672703][ T9662] ? lru_gen_update_size+0x431/0xe40 [ 311.672728][ T9662] ? lru_gen_del_folio+0x382/0x5f0 [ 311.672749][ T9662] reclaim_pages+0x428/0x5e0 [ 311.672772][ T9662] ? __pfx_reclaim_pages+0x10/0x10 [ 311.672792][ T9662] ? madvise_cold_or_pageout_pte_range+0x2247/0x2720 [ 311.672813][ T9662] ? folio_isolate_lru+0xd5/0xaa0 [ 311.672837][ T9662] madvise_cold_or_pageout_pte_range+0x14e2/0x2720 [ 311.672872][ T9662] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 311.672900][ T9662] ? stack_trace_save+0x8e/0xc0 [ 311.672917][ T9662] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 311.672937][ T9662] walk_pgd_range+0xc04/0x1eb0 [ 311.672973][ T9662] ? __pfx_walk_pgd_range+0x10/0x10 [ 311.673002][ T9662] __walk_page_range+0x163/0x820 [ 311.673026][ T9662] ? process_measurement+0x4c8/0x2350 [ 311.673050][ T9662] ? process_measurement+0x4c8/0x2350 [ 311.673080][ T9662] walk_page_range_vma_unsafe+0x209/0x8f0 [ 311.673098][ T9662] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 311.673116][ T9662] ? find_held_lock+0x2b/0x80 [ 311.673130][ T9662] ? mlock_drain_local+0x254/0x4e0 [ 311.673152][ T9662] ? mlock_drain_local+0x254/0x4e0 [ 311.673177][ T9662] walk_page_range_vma+0x63/0x90 [ 311.673193][ T9662] madvise_pageout+0x259/0x540 [ 311.673211][ T9662] ? __pfx_madvise_pageout+0x10/0x10 [ 311.673235][ T9662] ? is_bpf_text_address+0x8a/0x1a0 [ 311.673259][ T9662] ? is_bpf_text_address+0x8a/0x1a0 [ 311.673285][ T9662] madvise_vma_behavior+0x3e6/0x3050 [ 311.673307][ T9662] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 311.673325][ T9662] ? mas_prev_setup.constprop.0+0xb6/0x9c0 [ 311.673350][ T9662] ? mas_prev+0x9b/0xf0 [ 311.673363][ T9662] ? __pfx_mas_prev+0x10/0x10 [ 311.673386][ T9662] ? find_vma_prev+0xd8/0x150 [ 311.673402][ T9662] ? _kstrtoull+0x13c/0x1f0 [ 311.673423][ T9662] ? __pfx_find_vma_prev+0x10/0x10 [ 311.673450][ T9662] madvise_walk_vmas+0x2fe/0xa90 [ 311.673472][ T9662] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 311.673495][ T9662] madvise_do_behavior+0x1ea/0x510 [ 311.673515][ T9662] ? __pfx_madvise_do_behavior+0x10/0x10 [ 311.673534][ T9662] ? down_read+0x13b/0x460 [ 311.673557][ T9662] do_madvise+0x195/0x240 [ 311.673575][ T9662] ? __pfx_do_madvise+0x10/0x10 [ 311.673596][ T9662] ? __mutex_unlock_slowpath+0x15c/0x790 [ 311.673657][ T9662] ? ksys_write+0x1ac/0x250 [ 311.673684][ T9662] ? __pfx_ksys_write+0x10/0x10 [ 311.673706][ T9662] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 311.673729][ T9662] __x64_sys_madvise+0xa9/0x110 [ 311.673747][ T9662] ? lockdep_hardirqs_on+0x78/0x100 [ 311.673769][ T9662] do_syscall_64+0x106/0xf80 [ 311.673790][ T9662] ? clear_bhb_loop+0x40/0x90 [ 311.673809][ T9662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.673824][ T9662] RIP: 0033:0x7f9164b9c799 [ 311.673838][ T9662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.673852][ T9662] RSP: 002b:00007f9165a37028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 311.673866][ T9662] RAX: ffffffffffffffda RBX: 00007f9164e16180 RCX: 00007f9164b9c799 [ 311.673876][ T9662] RDX: 0000000000000015 RSI: 00000000002003f2 RDI: 0000000000000000 [ 311.673888][ T9662] RBP: 00007f9165a37090 R08: 0000000000000000 R09: 0000000000000000 [ 311.673896][ T9662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.673905][ T9662] R13: 00007f9164e16218 R14: 00007f9164e16180 R15: 00007fffc1dc5388 [ 311.673924][ T9662] [ 314.199840][ T9679] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 314.229110][ T9679] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 314.354831][ T9679] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 314.360949][ T9679] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 314.548327][ T9679] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 314.612126][ T9679] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 314.648110][ T9679] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 314.678465][ T9679] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 314.707044][ T9679] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 315.383265][ T9712] netlink: 32 bytes leftover after parsing attributes in process `syz.0.865'. [ 315.674303][ T9719] FAULT_INJECTION: forcing a failure. [ 315.674303][ T9719] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 315.735757][ T9719] CPU: 0 UID: 0 PID: 9719 Comm: syz.1.864 Tainted: G U L syzkaller #0 PREEMPT(full) [ 315.735800][ T9719] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 315.735810][ T9719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 315.735824][ T9719] Call Trace: [ 315.735832][ T9719] [ 315.735842][ T9719] dump_stack_lvl+0x100/0x190 [ 315.735898][ T9719] should_fail_ex.cold+0x5/0xa [ 315.735925][ T9719] ? prepare_alloc_pages+0x16d/0x5f0 [ 315.735962][ T9719] should_fail_alloc_page+0xeb/0x140 [ 315.735994][ T9719] prepare_alloc_pages+0x1f0/0x5f0 [ 315.736033][ T9719] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 315.736083][ T9719] ? __pfx_folios_put_refs+0x10/0x10 [ 315.736130][ T9719] ? mark_held_locks+0x40/0x70 [ 315.736165][ T9719] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 315.736204][ T9719] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 315.736251][ T9719] ? __lock_acquire+0x4a5/0x2630 [ 315.736287][ T9719] ? __lock_acquire+0x4a5/0x2630 [ 315.736334][ T9719] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 315.736364][ T9719] ? policy_nodemask+0xed/0x4f0 [ 315.736392][ T9719] alloc_pages_mpol+0x1fb/0x550 [ 315.736420][ T9719] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 315.736450][ T9719] ? swap_entry_swapped+0x1ff/0x2b0 [ 315.736479][ T9719] ? __pfx_swap_entry_swapped+0x10/0x10 [ 315.736509][ T9719] folio_alloc_mpol_noprof+0x36/0x340 [ 315.736543][ T9719] swap_cache_alloc_folio+0x1a8/0x300 [ 315.736585][ T9719] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 315.736630][ T9719] swap_cluster_readahead+0x411/0x770 [ 315.736683][ T9719] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 315.736747][ T9719] shmem_swapin_folio+0x22a4/0x2c10 [ 315.736792][ T9719] ? find_held_lock+0x2b/0x80 [ 315.736817][ T9719] ? filemap_get_entry+0x1a7/0x3b0 [ 315.736866][ T9719] ? __pfx_shmem_swapin_folio+0x10/0x10 [ 315.737018][ T9719] ? __pfx_filemap_get_entry+0x10/0x10 [ 315.737055][ T9719] ? __rmap_walk_file+0x5c5/0x680 [ 315.737096][ T9719] shmem_get_folio_gfp+0x56c/0x1900 [ 315.737139][ T9719] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 315.737179][ T9719] ? preempt_schedule_thunk+0x16/0x30 [ 315.737216][ T9719] ? preempt_schedule_common+0x42/0xc0 [ 315.737260][ T9719] shmem_get_folio+0x84/0xb0 [ 315.737304][ T9719] collapse_file+0x1263/0x3cc0 [ 315.737344][ T9719] ? __lock_acquire+0x4a5/0x2630 [ 315.737373][ T9719] ? __pfx_collapse_file+0x10/0x10 [ 315.737415][ T9719] ? find_held_lock+0x2b/0x80 [ 315.737442][ T9719] ? hpage_collapse_scan_file+0x583/0x1fc0 [ 315.737473][ T9719] ? hpage_collapse_scan_file+0x583/0x1fc0 [ 315.737513][ T9719] hpage_collapse_scan_file+0x603/0x1fc0 [ 315.737556][ T9719] ? __pfx_hpage_collapse_scan_file+0x10/0x10 [ 315.737598][ T9719] ? madvise_collapse+0x3cb/0xbe0 [ 315.737629][ T9719] ? madvise_collapse+0x3cb/0xbe0 [ 315.737669][ T9719] madvise_collapse+0x412/0xbe0 [ 315.737715][ T9719] ? __pfx_madvise_collapse+0x10/0x10 [ 315.737751][ T9719] ? __print_lock_name+0x20/0x80 [ 315.737779][ T9719] ? is_bpf_text_address+0x8a/0x1a0 [ 315.737837][ T9719] madvise_vma_behavior+0x1987/0x3050 [ 315.737889][ T9719] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 315.737924][ T9719] ? mas_prev_setup.constprop.0+0xb6/0x9c0 [ 315.737968][ T9719] ? mas_prev+0x9b/0xf0 [ 315.737992][ T9719] ? __pfx_mas_prev+0x10/0x10 [ 315.738025][ T9719] ? find_vma_prev+0xd8/0x150 [ 315.738052][ T9719] ? _kstrtoull+0x13c/0x1f0 [ 315.738089][ T9719] ? __pfx_find_vma_prev+0x10/0x10 [ 315.738136][ T9719] madvise_walk_vmas+0x2fe/0xa90 [ 315.738174][ T9719] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 315.738217][ T9719] madvise_do_behavior+0x1ea/0x510 [ 315.738252][ T9719] ? __pfx_madvise_do_behavior+0x10/0x10 [ 315.738286][ T9719] ? down_read+0x13b/0x460 [ 315.738327][ T9719] do_madvise+0x195/0x240 [ 315.738357][ T9719] ? __pfx_do_madvise+0x10/0x10 [ 315.738386][ T9719] ? __mutex_unlock_slowpath+0x15c/0x790 [ 315.738450][ T9719] ? ksys_write+0x1ac/0x250 [ 315.738476][ T9719] ? __pfx_ksys_write+0x10/0x10 [ 315.738507][ T9719] __x64_sys_madvise+0xa9/0x110 [ 315.738538][ T9719] ? lockdep_hardirqs_on+0x78/0x100 [ 315.738575][ T9719] do_syscall_64+0x106/0xf80 [ 315.738611][ T9719] ? clear_bhb_loop+0x40/0x90 [ 315.738643][ T9719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.738670][ T9719] RIP: 0033:0x7fc9ffb9c799 [ 315.738693][ T9719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.738718][ T9719] RSP: 002b:00007fc9fdd93028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 315.738743][ T9719] RAX: ffffffffffffffda RBX: 00007fc9ffe16270 RCX: 00007fc9ffb9c799 [ 315.738760][ T9719] RDX: 0000000000000019 RSI: 0000000000200007 RDI: 0000000000000000 [ 315.738777][ T9719] RBP: 00007fc9fdd93090 R08: 0000000000000000 R09: 0000000000000000 [ 315.738793][ T9719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.738808][ T9719] R13: 00007fc9ffe16308 R14: 00007fc9ffe16270 R15: 00007fffe295b0e8 [ 315.738857][ T9719] [ 316.219625][ T5838] Bluetooth: hci0: command 0x0406 tx timeout [ 316.592595][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 316.605742][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 316.765124][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 316.925174][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 317.178778][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.186727][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.252842][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 318.264458][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 318.273074][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 318.281266][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 318.294491][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 318.449734][ T32] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.605270][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 318.606520][ T5830] Bluetooth: hci0: command 0x0406 tx timeout [ 318.715707][ T32] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.846491][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 318.878397][ T32] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.309753][ T32] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.696806][ T9749] chnl_net:caif_netlink_parms(): no params data found [ 319.907383][ T9777] vhci_hcd vhci_hcd.2: invalid port number 16 [ 319.928856][ T9777] vhci_hcd vhci_hcd.2: invalid port number 16 [ 319.947620][ T32] dummy0: left allmulticast mode [ 319.952834][ T32] dummy0: left promiscuous mode [ 319.975966][ T32] bridge0: port 3(dummy0) entered disabled state [ 320.008989][ T9791] random: crng reseeded on system resumption [ 320.034532][ T32] bridge_slave_1: left allmulticast mode [ 320.052996][ T32] bridge_slave_1: left promiscuous mode [ 320.062963][ T32] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.081193][ T32] bridge_slave_0: left allmulticast mode [ 320.091830][ T32] bridge_slave_0: left promiscuous mode [ 320.126179][ T32] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.368510][ T5830] Bluetooth: hci2: command tx timeout [ 320.631988][ T9804] netlink: 'syz.3.885': attribute type 3 has an invalid length. [ 320.668592][ T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.681135][ T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.690092][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 320.699513][ T32] bond0 (unregistering): Released all slaves [ 321.005790][ T9749] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.013255][ T9749] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.027172][ T9749] bridge_slave_0: entered allmulticast mode [ 321.034434][ T9749] bridge_slave_0: entered promiscuous mode [ 321.079199][ T9749] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.095227][ T9749] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.102629][ T9749] bridge_slave_1: entered allmulticast mode [ 321.116930][ T9749] bridge_slave_1: entered promiscuous mode [ 321.283497][ T9749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.329219][ T9749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.481252][ T9749] team0: Port device team_slave_0 added [ 321.490695][ T9749] team0: Port device team_slave_1 added [ 321.520067][ T32] hsr_slave_0: left promiscuous mode [ 321.530387][ T32] hsr_slave_1: left promiscuous mode [ 321.538304][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.548654][ T32] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.568916][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.576495][ T32] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.596626][ T32] veth1_macvtap: left promiscuous mode [ 321.602489][ T32] veth0_macvtap: left promiscuous mode [ 321.610783][ T32] veth1_vlan: left promiscuous mode [ 321.617234][ T32] veth0_vlan: left promiscuous mode [ 321.926748][ T32] team0 (unregistering): Port device team_slave_1 removed [ 321.943818][ T32] team0 (unregistering): Port device team_slave_0 removed [ 322.157052][ T9749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.176029][ T9749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.214051][ T9749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.257762][ T9749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.266177][ T9749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.294756][ T9749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.455016][ T5830] Bluetooth: hci2: command tx timeout [ 322.514543][ T9749] hsr_slave_0: entered promiscuous mode [ 322.526301][ T9749] hsr_slave_1: entered promiscuous mode [ 322.623984][ T9839] Invalid ELF header magic: != ELF [ 322.969780][ T9839] Invalid ELF header magic: != ELF [ 322.992056][ T9839] Invalid ELF header magic: != ELF [ 323.026085][ T9839] Invalid ELF header magic: != ELF [ 323.036834][ T9839] Invalid ELF header magic: != ELF [ 323.047208][ T9839] Invalid ELF header magic: != ELF [ 323.057676][ T9839] Invalid ELF header magic: != ELF [ 323.069014][ T9839] Invalid ELF header magic: != ELF [ 323.114301][ T9839] Invalid ELF header magic: != ELF [ 323.124346][ T9839] Invalid ELF header magic: != ELF [ 323.134568][ T9839] Invalid ELF header magic: != ELF [ 323.144686][ T9839] Invalid ELF header magic: != ELF [ 323.159064][ T9839] Invalid ELF header magic: != ELF [ 323.210218][ T9839] Invalid ELF header magic: != ELF [ 323.218488][ T9839] Invalid ELF header magic: != ELF [ 323.226856][ T9839] Invalid ELF header magic: != ELF [ 323.235149][ T9839] Invalid ELF header magic: != ELF [ 323.243578][ T9839] Invalid ELF header magic: != ELF [ 323.409130][ T9749] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 323.539003][ T9749] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 323.632236][ T9749] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 324.286272][ T9749] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 324.525228][ T5830] Bluetooth: hci2: command tx timeout [ 325.035543][ T9874] can: request_module (can-proto-3) failed. [ 325.168392][ T9749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.251971][ T9749] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.295869][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.303015][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.353809][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.361135][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.002786][ T9749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.288873][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 326.614984][ T5830] Bluetooth: hci2: command tx timeout [ 326.998863][ T9749] veth0_vlan: entered promiscuous mode [ 327.045425][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880332e1400: rx timeout, send abort [ 327.077506][ T9749] veth1_vlan: entered promiscuous mode [ 327.161572][ T9749] veth0_macvtap: entered promiscuous mode [ 327.183739][ T9749] veth1_macvtap: entered promiscuous mode [ 327.234279][ T9749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.283707][ T9749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.334725][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.375307][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.402826][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.474985][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.553687][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880332e1400: abort rx timeout. Force session deactivation [ 327.803904][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.827944][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.229442][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.286566][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.818576][ T9969] FAULT_INJECTION: forcing a failure. [ 328.818576][ T9969] name failslab, interval 1, probability 0, space 0, times 0 [ 328.818624][ T9969] CPU: 1 UID: 0 PID: 9969 Comm: syz.2.906 Tainted: G U L syzkaller #0 PREEMPT(full) [ 328.818669][ T9969] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 328.818682][ T9969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 328.818700][ T9969] Call Trace: [ 328.818709][ T9969] [ 328.818719][ T9969] dump_stack_lvl+0x100/0x190 [ 328.818768][ T9969] should_fail_ex.cold+0x5/0xa [ 328.818802][ T9969] should_failslab+0xc2/0x120 [ 328.818833][ T9969] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 328.818876][ T9969] ? __proc_create+0x2cb/0x8c0 [ 328.818912][ T9969] __proc_create+0x2cb/0x8c0 [ 328.818940][ T9969] ? __pfx___proc_create+0x10/0x10 [ 328.818972][ T9969] ? _raw_write_unlock+0x28/0x50 [ 328.819009][ T9969] ? proc_register+0x559/0x8a0 [ 328.819037][ T9969] proc_create_reg+0x75/0x170 [ 328.819067][ T9969] proc_create_net_data+0x8e/0x1c0 [ 328.819097][ T9969] ? __pfx_proc_create_net_data+0x10/0x10 [ 328.819133][ T9969] ? __pfx_kcm_proc_init_net+0x10/0x10 [ 328.819182][ T9969] kcm_proc_init_net+0xa3/0x120 [ 328.819221][ T9969] ops_init+0x1e2/0x5f0 [ 328.819268][ T9969] setup_net+0x118/0x3a0 [ 328.819313][ T9969] ? __pfx_setup_net+0x10/0x10 [ 328.819352][ T9969] ? lockdep_init_map_type+0x5c/0x250 [ 328.819391][ T9969] ? mutex_init_lockep+0x110/0x150 [ 328.819435][ T9969] copy_net_ns+0x46f/0x7c0 [ 328.819468][ T9969] create_new_namespaces+0x3ea/0xac0 [ 328.819505][ T9969] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 328.819540][ T9969] ksys_unshare+0x473/0xad0 [ 328.819577][ T9969] ? __pfx_ksys_unshare+0x10/0x10 [ 328.819627][ T9969] __x64_sys_unshare+0x31/0x40 [ 328.819660][ T9969] do_syscall_64+0x106/0xf80 [ 328.819700][ T9969] ? clear_bhb_loop+0x40/0x90 [ 328.819732][ T9969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.819760][ T9969] RIP: 0033:0x7f245299c799 [ 328.819783][ T9969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.819807][ T9969] RSP: 002b:00007f2450bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 328.819831][ T9969] RAX: ffffffffffffffda RBX: 00007f2452c16090 RCX: 00007f245299c799 [ 328.819847][ T9969] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 328.819861][ T9969] RBP: 00007f2452a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 328.819876][ T9969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 328.819891][ T9969] R13: 00007f2452c16128 R14: 00007f2452c16090 R15: 00007ffd3dd6a848 [ 328.819925][ T9969] [ 329.184432][ T9978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.909'. [ 333.258149][T10057] block nbd8: shutting down sockets [ 333.424727][T10063] FAULT_INJECTION: forcing a failure. [ 333.424727][T10063] name failslab, interval 1, probability 0, space 0, times 0 [ 333.575152][T10063] CPU: 0 UID: 0 PID: 10063 Comm: syz.4.925 Tainted: G U L syzkaller #0 PREEMPT(full) [ 333.575199][T10063] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 333.575211][T10063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 333.575229][T10063] Call Trace: [ 333.575238][T10063] [ 333.575250][T10063] dump_stack_lvl+0x100/0x190 [ 333.575302][T10063] should_fail_ex.cold+0x5/0xa [ 333.575339][T10063] should_failslab+0xc2/0x120 [ 333.575372][T10063] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 333.575415][T10063] ? __proc_create+0x2cb/0x8c0 [ 333.575451][T10063] __proc_create+0x2cb/0x8c0 [ 333.575480][T10063] ? __pfx___proc_create+0x10/0x10 [ 333.575512][T10063] ? _raw_write_unlock+0x28/0x50 [ 333.575552][T10063] ? proc_register+0x559/0x8a0 [ 333.575584][T10063] proc_create_reg+0x75/0x170 [ 333.575617][T10063] proc_create_net_data+0x8e/0x1c0 [ 333.575648][T10063] ? __pfx_proc_create_net_data+0x10/0x10 [ 333.575685][T10063] ? __pfx_kcm_proc_init_net+0x10/0x10 [ 333.575725][T10063] kcm_proc_init_net+0xa3/0x120 [ 333.575763][T10063] ops_init+0x1e2/0x5f0 [ 333.575812][T10063] setup_net+0x118/0x3a0 [ 333.575858][T10063] ? __pfx_setup_net+0x10/0x10 [ 333.575899][T10063] ? lockdep_init_map_type+0x5c/0x250 [ 333.575939][T10063] ? mutex_init_lockep+0x110/0x150 [ 333.575994][T10063] copy_net_ns+0x46f/0x7c0 [ 333.576030][T10063] create_new_namespaces+0x3ea/0xac0 [ 333.576072][T10063] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 333.576109][T10063] ksys_unshare+0x473/0xad0 [ 333.576148][T10063] ? __pfx_ksys_unshare+0x10/0x10 [ 333.576199][T10063] __x64_sys_unshare+0x31/0x40 [ 333.576235][T10063] do_syscall_64+0x106/0xf80 [ 333.576277][T10063] ? clear_bhb_loop+0x40/0x90 [ 333.576312][T10063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.576342][T10063] RIP: 0033:0x7fb0aa59c799 [ 333.576366][T10063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.576395][T10063] RSP: 002b:00007fb0ab407028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 333.576422][T10063] RAX: ffffffffffffffda RBX: 00007fb0aa816090 RCX: 00007fb0aa59c799 [ 333.576442][T10063] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 333.576460][T10063] RBP: 00007fb0aa632c99 R08: 0000000000000000 R09: 0000000000000000 [ 333.576478][T10063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.576493][T10063] R13: 00007fb0aa816128 R14: 00007fb0aa816090 R15: 00007ffe6b517fa8 [ 333.576531][T10063] [ 336.732946][T10137] random: crng reseeded on system resumption [ 337.266999][T10157] FAULT_INJECTION: forcing a failure. [ 337.266999][T10157] name failslab, interval 1, probability 0, space 0, times 0 [ 337.306541][T10157] CPU: 1 UID: 0 PID: 10157 Comm: syz.2.949 Tainted: G U L syzkaller #0 PREEMPT(full) [ 337.306591][T10157] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 337.306602][T10157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 337.306618][T10157] Call Trace: [ 337.306627][T10157] [ 337.306637][T10157] dump_stack_lvl+0x100/0x190 [ 337.306683][T10157] should_fail_ex.cold+0x5/0xa [ 337.306716][T10157] should_failslab+0xc2/0x120 [ 337.306747][T10157] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 337.306788][T10157] ? __d_alloc+0x34/0xa80 [ 337.306820][T10157] ? lockdep_init_map_type+0x5c/0x250 [ 337.306865][T10157] __d_alloc+0x34/0xa80 [ 337.306896][T10157] d_alloc_pseudo+0x1c/0xc0 [ 337.306933][T10157] alloc_file_pseudo+0xcf/0x230 [ 337.306972][T10157] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 337.307006][T10157] ? alloc_fd+0x476/0x790 [ 337.307037][T10157] sock_alloc_file+0x50/0x210 [ 337.307082][T10157] __sys_socket+0x1c0/0x260 [ 337.307123][T10157] ? __pfx___sys_socket+0x10/0x10 [ 337.307157][T10157] ? __pfx_do_writev+0x10/0x10 [ 337.307205][T10157] __x64_sys_socket+0x72/0xb0 [ 337.307237][T10157] ? lockdep_hardirqs_on+0x78/0x100 [ 337.307279][T10157] do_syscall_64+0x106/0xf80 [ 337.307320][T10157] ? clear_bhb_loop+0x40/0x90 [ 337.307351][T10157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.307380][T10157] RIP: 0033:0x7f245299c799 [ 337.307404][T10157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.307431][T10157] RSP: 002b:00007f2453789028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 337.307455][T10157] RAX: ffffffffffffffda RBX: 00007f2452c15fa0 RCX: 00007f245299c799 [ 337.307471][T10157] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 337.307484][T10157] RBP: 00007f2452a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 337.307499][T10157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 337.307512][T10157] R13: 00007f2452c16038 R14: 00007f2452c15fa0 R15: 00007ffd3dd6a848 [ 337.307539][T10157] [ 337.872606][T10169] FAULT_INJECTION: forcing a failure. [ 337.872606][T10169] name fail_futex, interval 1, probability 0, space 0, times 0 [ 337.911940][T10169] CPU: 1 UID: 0 PID: 10169 Comm: syz.1.950 Tainted: G U L syzkaller #0 PREEMPT(full) [ 337.911988][T10169] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 337.911997][T10169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 337.912013][T10169] Call Trace: [ 337.912022][T10169] [ 337.912031][T10169] dump_stack_lvl+0x100/0x190 [ 337.912077][T10169] should_fail_ex.cold+0x5/0xa [ 337.912110][T10169] get_futex_key+0x295/0x1620 [ 337.912147][T10169] ? __pfx_get_futex_key+0x10/0x10 [ 337.912188][T10169] ? lock_acquire+0x1cf/0x380 [ 337.912234][T10169] futex_wake+0xea/0x530 [ 337.912276][T10169] ? __pfx_futex_wake+0x10/0x10 [ 337.912316][T10169] ? exit_mm_release+0x19/0x30 [ 337.912360][T10169] do_futex+0x32b/0x350 [ 337.912396][T10169] ? __pfx_do_futex+0x10/0x10 [ 337.912428][T10169] ? __might_fault+0xc5/0x140 [ 337.912476][T10169] mm_release+0x24a/0x2f0 [ 337.912506][T10169] do_exit+0x704/0x2b60 [ 337.912546][T10169] ? __pfx_do_exit+0x10/0x10 [ 337.912581][T10169] ? do_raw_spin_lock+0x128/0x260 [ 337.912619][T10169] ? find_held_lock+0x2b/0x80 [ 337.912644][T10169] ? get_signal+0x7e0/0x21e0 [ 337.912677][T10169] do_group_exit+0xd5/0x2a0 [ 337.912715][T10169] get_signal+0x1ec7/0x21e0 [ 337.912758][T10169] ? __pfx_get_signal+0x10/0x10 [ 337.912787][T10169] ? do_futex+0x192/0x350 [ 337.912826][T10169] arch_do_signal_or_restart+0x91/0x770 [ 337.912862][T10169] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 337.912906][T10169] ? __pfx___x64_sys_futex+0x10/0x10 [ 337.912950][T10169] exit_to_user_mode_loop+0x86/0x4a0 [ 337.912990][T10169] do_syscall_64+0x668/0xf80 [ 337.913029][T10169] ? clear_bhb_loop+0x40/0x90 [ 337.913062][T10169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.913090][T10169] RIP: 0033:0x7fc9ffb9c799 [ 337.913113][T10169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.913139][T10169] RSP: 002b:00007fc9fddf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 337.913164][T10169] RAX: fffffffffffffe00 RBX: 00007fc9ffe15fa8 RCX: 00007fc9ffb9c799 [ 337.913189][T10169] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc9ffe15fa8 [ 337.913206][T10169] RBP: 00007fc9ffe15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 337.913223][T10169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 337.913238][T10169] R13: 00007fc9ffe16038 R14: 00007fffe295b000 R15: 00007fffe295b0e8 [ 337.913275][T10169] [ 338.930135][T10198] netlink: 28 bytes leftover after parsing attributes in process `syz.4.956'. [ 339.004824][T10202] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 341.916392][T10270] FAULT_INJECTION: forcing a failure. [ 341.916392][T10270] name failslab, interval 1, probability 0, space 0, times 0 [ 341.974408][T10270] CPU: 0 UID: 0 PID: 10270 Comm: syz.4.966 Tainted: G U L syzkaller #0 PREEMPT(full) [ 341.974462][T10270] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 341.974472][T10270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 341.974488][T10270] Call Trace: [ 341.974497][T10270] [ 341.974507][T10270] dump_stack_lvl+0x100/0x190 [ 341.974557][T10270] should_fail_ex.cold+0x5/0xa [ 341.974591][T10270] ? alloc_pipe_info+0x1ec/0x590 [ 341.974622][T10270] should_failslab+0xc2/0x120 [ 341.974655][T10270] __kmalloc_noprof+0xe0/0x850 [ 341.974708][T10270] alloc_pipe_info+0x1ec/0x590 [ 341.974742][T10270] splice_direct_to_actor+0x78f/0xa30 [ 341.974773][T10270] ? __lock_acquire+0x4a5/0x2630 [ 341.974808][T10270] ? __pfx_direct_splice_actor+0x10/0x10 [ 341.974840][T10270] ? __pfx_aa_file_perm+0x10/0x10 [ 341.974883][T10270] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 341.974922][T10270] do_splice_direct+0x174/0x240 [ 341.974950][T10270] ? __pfx_do_splice_direct+0x10/0x10 [ 341.974977][T10270] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 341.975023][T10270] ? rw_verify_area+0xce/0x6d0 [ 341.975063][T10270] do_sendfile+0xadc/0xe20 [ 341.975115][T10270] ? __pfx_do_sendfile+0x10/0x10 [ 341.975166][T10270] ? __x64_sys_futex+0x34f/0x4d0 [ 341.975205][T10270] ? __x64_sys_futex+0x358/0x4d0 [ 341.975248][T10270] __x64_sys_sendfile64+0x1d8/0x220 [ 341.975293][T10270] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 341.975340][T10270] do_syscall_64+0x106/0xf80 [ 341.975384][T10270] ? clear_bhb_loop+0x40/0x90 [ 341.975419][T10270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.975449][T10270] RIP: 0033:0x7fb0aa59c799 [ 341.975475][T10270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.975505][T10270] RSP: 002b:00007fb0ab428028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 341.975533][T10270] RAX: ffffffffffffffda RBX: 00007fb0aa815fa0 RCX: 00007fb0aa59c799 [ 341.975553][T10270] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 341.975571][T10270] RBP: 00007fb0aa632c99 R08: 0000000000000000 R09: 0000000000000000 [ 341.975589][T10270] R10: 0000400000000006 R11: 0000000000000246 R12: 0000000000000000 [ 341.975608][T10270] R13: 00007fb0aa816038 R14: 00007fb0aa815fa0 R15: 00007ffe6b517fa8 [ 341.975646][T10270] [ 342.945416][T10285] Invalid ELF header magic: != ELF [ 345.465010][T10342] random: crng reseeded on system resumption [ 348.099640][T10392] FAULT_INJECTION: forcing a failure. [ 348.099640][T10392] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 348.155169][T10392] CPU: 0 UID: 0 PID: 10392 Comm: syz.2.988 Tainted: G U L syzkaller #0 PREEMPT(full) [ 348.155216][T10392] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 348.155227][T10392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 348.155242][T10392] Call Trace: [ 348.155251][T10392] [ 348.155262][T10392] dump_stack_lvl+0x100/0x190 [ 348.155314][T10392] should_fail_ex.cold+0x5/0xa [ 348.155345][T10392] ? prepare_alloc_pages+0x16d/0x5f0 [ 348.155382][T10392] should_fail_alloc_page+0xeb/0x140 [ 348.155417][T10392] prepare_alloc_pages+0x1f0/0x5f0 [ 348.155456][T10392] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 348.155501][T10392] ? vms_complete_munmap_vmas+0x1e1/0xdd0 [ 348.155544][T10392] ? mas_store_prealloc+0x893/0xfb0 [ 348.155575][T10392] ? __pfx_perf_event_mmap+0x10/0x10 [ 348.155608][T10392] ? __pfx_vms_complete_munmap_vmas+0x10/0x10 [ 348.155650][T10392] ? vma_wants_writenotify+0x10b/0x390 [ 348.155694][T10392] ? __pfx_vma_wants_writenotify+0x10/0x10 [ 348.155740][T10392] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 348.155791][T10392] ? vma_set_page_prot+0xb1/0x120 [ 348.155835][T10392] ? mas_ascend+0x53d/0xb30 [ 348.155876][T10392] ? __pfx___mmap_region+0x10/0x10 [ 348.155914][T10392] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 348.155945][T10392] ? policy_nodemask+0xed/0x4f0 [ 348.155979][T10392] alloc_pages_mpol+0x1fb/0x550 [ 348.156010][T10392] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 348.156052][T10392] alloc_pages_noprof+0x131/0x390 [ 348.156092][T10392] __pud_alloc+0x3b/0x6e0 [ 348.156130][T10392] __handle_mm_fault+0x134c/0x2b60 [ 348.156175][T10392] ? mt_find+0x45e/0x8e0 [ 348.156204][T10392] ? __pfx___handle_mm_fault+0x10/0x10 [ 348.156237][T10392] ? __pfx_mt_find+0x10/0x10 [ 348.156290][T10392] handle_mm_fault+0x36d/0xa20 [ 348.156333][T10392] __get_user_pages+0xf9c/0x34d0 [ 348.156376][T10392] ? __pfx___get_user_pages+0x10/0x10 [ 348.156421][T10392] populate_vma_page_range+0x267/0x3f0 [ 348.156458][T10392] ? __pfx_populate_vma_page_range+0x10/0x10 [ 348.156492][T10392] ? __pfx_find_vma_intersection+0x10/0x10 [ 348.156526][T10392] ? do_mmap+0x93f/0x12f0 [ 348.156563][T10392] __mm_populate+0x107/0x3a0 [ 348.156597][T10392] ? __pfx___mm_populate+0x10/0x10 [ 348.156635][T10392] ? up_write+0x290/0x4f0 [ 348.156686][T10392] vm_mmap_pgoff+0x37f/0x470 [ 348.156725][T10392] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 348.156763][T10392] ? do_futex+0x192/0x350 [ 348.156798][T10392] ? __pfx_do_futex+0x10/0x10 [ 348.156843][T10392] ksys_mmap_pgoff+0xe1/0x650 [ 348.156874][T10392] ? __x64_sys_futex+0x34f/0x4d0 [ 348.156910][T10392] ? __x64_sys_futex+0x358/0x4d0 [ 348.156948][T10392] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 348.156981][T10392] ? xfd_validate_state+0x129/0x190 [ 348.157028][T10392] __x64_sys_mmap+0x125/0x190 [ 348.157081][T10392] do_syscall_64+0x106/0xf80 [ 348.157125][T10392] ? clear_bhb_loop+0x40/0x90 [ 348.157161][T10392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.157191][T10392] RIP: 0033:0x7f245299c799 [ 348.157216][T10392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.157243][T10392] RSP: 002b:00007f2453789028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 348.157272][T10392] RAX: ffffffffffffffda RBX: 00007f2452c15fa0 RCX: 00007f245299c799 [ 348.157291][T10392] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000400000000000 [ 348.157309][T10392] RBP: 00007f2452a32c99 R08: 0000000000000002 R09: 0000000000008000 [ 348.157327][T10392] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 348.157344][T10392] R13: 00007f2452c16038 R14: 00007f2452c15fa0 R15: 00007ffd3dd6a848 [ 348.157382][T10392] [ 349.137292][T10403] FAULT_INJECTION: forcing a failure. [ 349.137292][T10403] name fail_futex, interval 1, probability 0, space 0, times 0 [ 349.153781][T10403] CPU: 1 UID: 0 PID: 10403 Comm: syz.1.990 Tainted: G U L syzkaller #0 PREEMPT(full) [ 349.153830][T10403] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 349.153841][T10403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 349.153855][T10403] Call Trace: [ 349.153863][T10403] [ 349.153873][T10403] dump_stack_lvl+0x100/0x190 [ 349.153921][T10403] should_fail_ex.cold+0x5/0xa [ 349.153955][T10403] get_futex_key+0x1d2/0x1620 [ 349.153995][T10403] ? __pfx_get_futex_key+0x10/0x10 [ 349.154031][T10403] ? update_se+0x94/0x760 [ 349.154073][T10403] futex_wait_setup+0x83/0x510 [ 349.154127][T10403] __futex_wait+0x19f/0x300 [ 349.154174][T10403] ? __pfx___futex_wait+0x10/0x10 [ 349.154216][T10403] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 349.154257][T10403] ? lockdep_hardirqs_on+0x78/0x100 [ 349.154303][T10403] ? __pfx_futex_wake_mark+0x10/0x10 [ 349.154354][T10403] ? find_held_lock+0x2b/0x80 [ 349.154383][T10403] ? futex_wake+0x456/0x530 [ 349.154443][T10403] futex_wait+0xed/0x380 [ 349.154489][T10403] ? __pfx_futex_wait+0x10/0x10 [ 349.154554][T10403] do_futex+0x1ef/0x350 [ 349.154593][T10403] ? __pfx_do_futex+0x10/0x10 [ 349.154631][T10403] ? __pfx___might_resched+0x10/0x10 [ 349.154674][T10403] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 349.154728][T10403] __x64_sys_futex+0x34f/0x4d0 [ 349.154772][T10403] ? __pfx___x64_sys_futex+0x10/0x10 [ 349.154826][T10403] do_syscall_64+0x106/0xf80 [ 349.154868][T10403] ? clear_bhb_loop+0x40/0x90 [ 349.154904][T10403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.154929][T10403] RIP: 0033:0x7fc9ffb9c799 [ 349.154951][T10403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.154976][T10403] RSP: 002b:00007fc9fddd50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 349.154999][T10403] RAX: ffffffffffffffda RBX: 00007fc9ffe16098 RCX: 00007fc9ffb9c799 [ 349.155017][T10403] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc9ffe16098 [ 349.155035][T10403] RBP: 00007fc9ffe16090 R08: 0000000000000000 R09: 0000000000000000 [ 349.155052][T10403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.155069][T10403] R13: 00007fc9ffe16128 R14: 00007fffe295b000 R15: 00007fffe295b0e8 [ 349.155107][T10403] [ 351.025275][T10434] FAULT_INJECTION: forcing a failure. [ 351.025275][T10434] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 351.163212][T10434] CPU: 1 UID: 0 PID: 10434 Comm: syz.3.997 Tainted: G U L syzkaller #0 PREEMPT(full) [ 351.163257][T10434] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 351.163266][T10434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 351.163279][T10434] Call Trace: [ 351.163287][T10434] [ 351.163295][T10434] dump_stack_lvl+0x100/0x190 [ 351.163333][T10434] should_fail_ex.cold+0x5/0xa [ 351.163354][T10434] ? prepare_alloc_pages+0x16d/0x5f0 [ 351.163389][T10434] should_fail_alloc_page+0xeb/0x140 [ 351.163417][T10434] prepare_alloc_pages+0x1f0/0x5f0 [ 351.163454][T10434] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 351.163491][T10434] ? xa_load+0x153/0x2c0 [ 351.163517][T10434] ? __pfx_xa_load+0x10/0x10 [ 351.163551][T10434] ? __lock_acquire+0x4a5/0x2630 [ 351.163585][T10434] ? workingset_refault+0x477/0xf60 [ 351.163628][T10434] ? workingset_refault+0x477/0xf60 [ 351.163681][T10434] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 351.163727][T10434] ? __lock_acquire+0x4a5/0x2630 [ 351.163765][T10434] ? __lock_acquire+0x4a5/0x2630 [ 351.163811][T10434] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 351.163842][T10434] ? policy_nodemask+0xed/0x4f0 [ 351.163876][T10434] alloc_pages_mpol+0x1fb/0x550 [ 351.163907][T10434] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 351.163938][T10434] ? swap_entry_swapped+0x1ff/0x2b0 [ 351.163967][T10434] ? __pfx_swap_entry_swapped+0x10/0x10 [ 351.164001][T10434] folio_alloc_mpol_noprof+0x36/0x340 [ 351.164039][T10434] swap_cache_alloc_folio+0x1a8/0x300 [ 351.164080][T10434] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 351.164130][T10434] swap_cluster_readahead+0x411/0x770 [ 351.164178][T10434] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 351.164246][T10434] shmem_swapin_folio+0x22a4/0x2c10 [ 351.164290][T10434] ? find_held_lock+0x2b/0x80 [ 351.164316][T10434] ? filemap_get_entry+0x1a7/0x3b0 [ 351.164368][T10434] ? __pfx_shmem_swapin_folio+0x10/0x10 [ 351.164406][T10434] ? __pfx_filemap_get_entry+0x10/0x10 [ 351.164446][T10434] ? __rmap_walk_file+0x5c5/0x680 [ 351.164493][T10434] shmem_get_folio_gfp+0x56c/0x1900 [ 351.164543][T10434] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 351.164588][T10434] ? find_held_lock+0x2b/0x80 [ 351.164617][T10434] shmem_get_folio+0x84/0xb0 [ 351.164661][T10434] collapse_file+0x1263/0x3cc0 [ 351.164710][T10434] ? find_held_lock+0x2b/0x80 [ 351.164738][T10434] ? __pfx_collapse_file+0x10/0x10 [ 351.164769][T10434] ? rcu_is_watching+0x12/0xc0 [ 351.164811][T10434] ? lockdep_hardirqs_on+0x78/0x100 [ 351.164860][T10434] ? rcu_is_watching+0x12/0xc0 [ 351.164908][T10434] hpage_collapse_scan_file+0x603/0x1fc0 [ 351.164944][T10434] ? __pfx_hpage_collapse_scan_file+0x10/0x10 [ 351.164977][T10434] ? madvise_collapse+0x3cb/0xbe0 [ 351.165006][T10434] ? madvise_collapse+0x3cb/0xbe0 [ 351.165041][T10434] madvise_collapse+0x412/0xbe0 [ 351.165080][T10434] ? __pfx_madvise_collapse+0x10/0x10 [ 351.165111][T10434] ? __print_lock_name+0x20/0x80 [ 351.165136][T10434] ? is_bpf_text_address+0x8a/0x1a0 [ 351.165179][T10434] madvise_vma_behavior+0x1987/0x3050 [ 351.165212][T10434] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 351.165243][T10434] ? mas_prev_setup.constprop.0+0xb6/0x9c0 [ 351.165283][T10434] ? mas_prev+0x9b/0xf0 [ 351.165308][T10434] ? __pfx_mas_prev+0x10/0x10 [ 351.165340][T10434] ? find_vma_prev+0xd8/0x150 [ 351.165367][T10434] ? _kstrtoull+0x13c/0x1f0 [ 351.165403][T10434] ? __pfx_find_vma_prev+0x10/0x10 [ 351.165450][T10434] madvise_walk_vmas+0x2fe/0xa90 [ 351.165489][T10434] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 351.165532][T10434] madvise_do_behavior+0x1ea/0x510 [ 351.165569][T10434] ? __pfx_madvise_do_behavior+0x10/0x10 [ 351.165600][T10434] ? down_read+0x13b/0x460 [ 351.165643][T10434] do_madvise+0x195/0x240 [ 351.165682][T10434] ? __pfx_do_madvise+0x10/0x10 [ 351.165712][T10434] ? __mutex_unlock_slowpath+0x15c/0x790 [ 351.165775][T10434] ? ksys_write+0x1ac/0x250 [ 351.165801][T10434] ? __pfx_ksys_write+0x10/0x10 [ 351.165825][T10434] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 351.165864][T10434] __x64_sys_madvise+0xa9/0x110 [ 351.165894][T10434] ? lockdep_hardirqs_on+0x78/0x100 [ 351.165931][T10434] do_syscall_64+0x106/0xf80 [ 351.165968][T10434] ? clear_bhb_loop+0x40/0x90 [ 351.166002][T10434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.166029][T10434] RIP: 0033:0x7f9164b9c799 [ 351.166052][T10434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.166078][T10434] RSP: 002b:00007f9165a37028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 351.166103][T10434] RAX: ffffffffffffffda RBX: 00007f9164e16180 RCX: 00007f9164b9c799 [ 351.166122][T10434] RDX: 0000000000000019 RSI: 0000000000200007 RDI: 0000000000000000 [ 351.166138][T10434] RBP: 00007f9165a37090 R08: 0000000000000000 R09: 0000000000000000 [ 351.166154][T10434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.166169][T10434] R13: 00007f9164e16218 R14: 00007f9164e16180 R15: 00007fffc1dc5388 [ 351.166204][T10434] [ 352.041936][T10439] random: crng reseeded on system resumption [ 353.723670][T10492] FAULT_INJECTION: forcing a failure. [ 353.723670][T10492] name failslab, interval 1, probability 0, space 0, times 0 [ 353.776075][T10492] CPU: 0 UID: 0 PID: 10492 Comm: syz.1.1014 Tainted: G U L syzkaller #0 PREEMPT(full) [ 353.776126][T10492] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 353.776136][T10492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 353.776154][T10492] Call Trace: [ 353.776249][T10492] [ 353.776260][T10492] dump_stack_lvl+0x100/0x190 [ 353.776370][T10492] should_fail_ex.cold+0x5/0xa [ 353.776423][T10492] should_failslab+0xc2/0x120 [ 353.776489][T10492] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 353.776545][T10492] ? __kernfs_new_node+0xd2/0x960 [ 353.776620][T10492] __kernfs_new_node+0xd2/0x960 [ 353.776669][T10492] ? __pfx___kernfs_new_node+0x10/0x10 [ 353.776721][T10492] ? find_held_lock+0x2b/0x80 [ 353.776769][T10492] ? kernfs_root+0xee/0x2a0 [ 353.776807][T10492] ? kernfs_root+0xee/0x2a0 [ 353.776853][T10492] kernfs_new_node+0x11b/0x1a0 [ 353.776884][T10492] __kernfs_create_file+0x53/0x350 [ 353.776921][T10492] sysfs_add_file_mode_ns+0x207/0x3c0 [ 353.776965][T10492] internal_create_group+0x593/0xf40 [ 353.777013][T10492] ? __pfx_internal_create_group+0x10/0x10 [ 353.777060][T10492] ? kernfs_create_link+0x1bd/0x240 [ 353.777100][T10492] internal_create_groups+0x9d/0x150 [ 353.777143][T10492] device_add+0x71a/0x1950 [ 353.777270][T10492] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 353.777317][T10492] ? __pfx_device_add+0x10/0x10 [ 353.777350][T10492] ? lockdep_init_map_type+0x5c/0x250 [ 353.777387][T10492] ? __init_waitqueue_head+0xca/0x150 [ 353.777433][T10492] netdev_register_kobject+0x1a9/0x3d0 [ 353.777543][T10492] register_netdevice+0x12e0/0x2210 [ 353.777713][T10492] ? __pfx_register_netdevice+0x10/0x10 [ 353.777761][T10492] ? __pfx_loopback_net_init+0x10/0x10 [ 353.777849][T10492] register_netdev+0x34/0x50 [ 353.777891][T10492] loopback_net_init+0x7a/0x170 [ 353.777921][T10492] ? __pfx_loopback_net_init+0x10/0x10 [ 353.777950][T10492] ops_init+0x1e2/0x5f0 [ 353.778022][T10492] setup_net+0x118/0x3a0 [ 353.778064][T10492] ? __pfx_setup_net+0x10/0x10 [ 353.778105][T10492] ? lockdep_init_map_type+0x5c/0x250 [ 353.778146][T10492] ? mutex_init_lockep+0x110/0x150 [ 353.778190][T10492] copy_net_ns+0x46f/0x7c0 [ 353.778252][T10492] create_new_namespaces+0x3ea/0xac0 [ 353.778302][T10492] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 353.778338][T10492] ksys_unshare+0x473/0xad0 [ 353.778388][T10492] ? __pfx_ksys_unshare+0x10/0x10 [ 353.778447][T10492] __x64_sys_unshare+0x31/0x40 [ 353.778483][T10492] do_syscall_64+0x106/0xf80 [ 353.778619][T10492] ? clear_bhb_loop+0x40/0x90 [ 353.778666][T10492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.778695][T10492] RIP: 0033:0x7fc9ffb9c799 [ 353.778720][T10492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.778748][T10492] RSP: 002b:00007fc9fddf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 353.778807][T10492] RAX: ffffffffffffffda RBX: 00007fc9ffe15fa0 RCX: 00007fc9ffb9c799 [ 353.778827][T10492] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 353.778845][T10492] RBP: 00007fc9ffc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 353.778862][T10492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.778880][T10492] R13: 00007fc9ffe16038 R14: 00007fc9ffe15fa0 R15: 00007fffe295b0e8 [ 353.778920][T10492] [ 354.434045][T10492] Invalid ELF header magic: != ELF [ 355.310561][T10538] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1025'. [ 355.914017][T10556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1031'. [ 355.927603][T10556] netlink: 354 bytes leftover after parsing attributes in process `syz.1.1031'. [ 357.491819][T10595] ubi0: attaching mtd0 [ 357.503027][T10595] ubi0: scanning is finished [ 357.510956][T10595] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 357.707291][T10595] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 360.669198][T10666] bonding: no command found in bonding_masters - use +ifname or -ifname [ 360.692681][T10666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1057'. [ 366.599717][ T29] audit: type=1804 audit(4294967331.630:5): pid=10771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1082" name=2F6E6577726F6F742F34382F22050820 dev="tmpfs" ino=264 res=1 errno=0 [ 366.717216][ T29] audit: type=1800 audit(4294967331.630:6): pid=10771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1082" name=22050820 dev="tmpfs" ino=264 res=0 errno=0 [ 370.263289][T10821] can: request_module (can-proto-0) failed. [ 371.646894][T10835] Invalid ELF header magic: != ELF [ 373.043344][T10865] usbip-vudc usbip-vudc.0: gadget not bound [ 373.774386][ T5830] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 374.252842][T10885] Process accounting resumed [ 375.040105][T10911] FAULT_INJECTION: forcing a failure. [ 375.040105][T10911] name failslab, interval 1, probability 0, space 0, times 0 [ 375.065011][T10911] CPU: 0 UID: 0 PID: 10911 Comm: syz.3.1115 Tainted: G U L syzkaller #0 PREEMPT(full) [ 375.065062][T10911] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 375.065074][T10911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 375.065091][T10911] Call Trace: [ 375.065100][T10911] [ 375.065111][T10911] dump_stack_lvl+0x100/0x190 [ 375.065164][T10911] should_fail_ex.cold+0x5/0xa [ 375.065201][T10911] should_failslab+0xc2/0x120 [ 375.065246][T10911] __kmalloc_cache_noprof+0x7a/0x6f0 [ 375.065285][T10911] ? vidtv_psi_pmt_stream_init+0x4e/0x3e0 [ 375.065463][T10911] ? vidtv_psi_pmt_table_init+0x363/0x430 [ 375.065510][T10911] vidtv_psi_pmt_stream_init+0x4e/0x3e0 [ 375.065555][T10911] vidtv_channel_si_init+0x1289/0x18d0 [ 375.065612][T10911] vidtv_mux_init+0x526/0xbf0 [ 375.065661][T10911] vidtv_start_feed+0x33e/0x4c0 [ 375.065696][T10911] ? __pfx_vidtv_start_feed+0x10/0x10 [ 375.065730][T10911] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 375.065773][T10911] ? mark_held_locks+0x40/0x70 [ 375.065816][T10911] ? __pfx_vidtv_start_feed+0x10/0x10 [ 375.065850][T10911] dmx_ts_feed_start_filtering+0xf6/0x220 [ 375.065945][T10911] dvb_dmxdev_start_feed+0x273/0x3f0 [ 375.065983][T10911] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 375.066036][T10911] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 375.066073][T10911] dvb_demux_do_ioctl+0xe64/0x1200 [ 375.066118][T10911] dvb_usercopy+0x167/0x340 [ 375.066146][T10911] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 375.066182][T10911] ? __pfx_dvb_usercopy+0x10/0x10 [ 375.066233][T10911] ? __fget_files+0x21f/0x3d0 [ 375.066289][T10911] dvb_demux_ioctl+0x29/0x40 [ 375.066318][T10911] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 375.066349][T10911] __x64_sys_ioctl+0x18e/0x210 [ 375.066403][T10911] do_syscall_64+0x106/0xf80 [ 375.066445][T10911] ? clear_bhb_loop+0x40/0x90 [ 375.066481][T10911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.066508][T10911] RIP: 0033:0x7f9164b9c799 [ 375.066533][T10911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.066561][T10911] RSP: 002b:00007f9165a58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 375.066599][T10911] RAX: ffffffffffffffda RBX: 00007f9164e16090 RCX: 00007f9164b9c799 [ 375.066619][T10911] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000002 [ 375.066636][T10911] RBP: 00007f9164c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 375.066653][T10911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.066670][T10911] R13: 00007f9164e16128 R14: 00007f9164e16090 R15: 00007fffc1dc5388 [ 375.066711][T10911] [ 375.066803][T10911] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 375.335696][T10911] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 375.344116][T10911] CPU: 0 UID: 0 PID: 10911 Comm: syz.3.1115 Tainted: G U L syzkaller #0 PREEMPT(full) [ 375.355066][T10911] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 375.360251][T10911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 375.370313][T10911] RIP: 0010:vidtv_psi_desc_assign+0x24/0x90 [ 375.376231][T10911] Code: 90 90 90 90 90 90 0f 1f 40 d6 41 54 55 48 89 f5 53 48 89 fb e8 cd 59 db f9 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 75 4c 4c 8b 23 49 39 ec 74 36 e8 a9 59 db f9 4d 85 e4 [ 375.395850][T10911] RSP: 0018:ffffc900038e7a10 EFLAGS: 00010247 [ 375.401928][T10911] RAX: dffffc0000000000 RBX: 0000000000000005 RCX: ffffc9000f013000 [ 375.409900][T10911] RDX: 0000000000000000 RSI: ffffffff882ce7f3 RDI: 0000000000000005 [ 375.417871][T10911] RBP: ffff888029f43c60 R08: 0000000000000000 R09: 4453534204050000 [ 375.425843][T10911] R10: 0000000000000005 R11: ffffffff81000130 R12: 0000000000000000 [ 375.433811][T10911] R13: ffff8880631eed00 R14: ffff88805ef23300 R15: ffff8880631ee280 [ 375.441783][T10911] FS: 00007f9165a586c0(0000) GS:ffff888124346000(0000) knlGS:0000000000000000 [ 375.450714][T10911] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 375.457299][T10911] CR2: 0000001b30f0fff8 CR3: 000000007e000000 CR4: 00000000003526f0 [ 375.465278][T10911] Call Trace: [ 375.468557][T10911] [ 375.471485][T10911] vidtv_channel_si_init+0x12fc/0x18d0 [ 375.476970][T10911] vidtv_mux_init+0x526/0xbf0 [ 375.481665][T10911] vidtv_start_feed+0x33e/0x4c0 [ 375.486523][T10911] ? __pfx_vidtv_start_feed+0x10/0x10 [ 375.491903][T10911] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 375.498502][T10911] ? mark_held_locks+0x40/0x70 [ 375.503278][T10911] ? __pfx_vidtv_start_feed+0x10/0x10 [ 375.508661][T10911] dmx_ts_feed_start_filtering+0xf6/0x220 [ 375.514398][T10911] dvb_dmxdev_start_feed+0x273/0x3f0 [ 375.519693][T10911] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 375.525158][T10911] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 375.530366][T10911] dvb_demux_do_ioctl+0xe64/0x1200 [ 375.535486][T10911] dvb_usercopy+0x167/0x340 [ 375.539990][T10911] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 375.545541][T10911] ? __pfx_dvb_usercopy+0x10/0x10 [ 375.550572][T10911] ? __fget_files+0x21f/0x3d0 [ 375.555255][T10911] dvb_demux_ioctl+0x29/0x40 [ 375.559851][T10911] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 375.565139][T10911] __x64_sys_ioctl+0x18e/0x210 [ 375.570184][T10911] do_syscall_64+0x106/0xf80 [ 375.574791][T10911] ? clear_bhb_loop+0x40/0x90 [ 375.579474][T10911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.585374][T10911] RIP: 0033:0x7f9164b9c799 [ 375.589790][T10911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.609404][T10911] RSP: 002b:00007f9165a58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 375.617825][T10911] RAX: ffffffffffffffda RBX: 00007f9164e16090 RCX: 00007f9164b9c799 [ 375.625799][T10911] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000002 [ 375.633772][T10911] RBP: 00007f9164c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 375.641741][T10911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.649711][T10911] R13: 00007f9164e16128 R14: 00007f9164e16090 R15: 00007fffc1dc5388 [ 375.657701][T10911] [ 375.660714][T10911] Modules linked in: [ 375.665606][T10911] ---[ end trace 0000000000000000 ]--- [ 375.689898][T10911] RIP: 0010:vidtv_psi_desc_assign+0x24/0x90 [ 375.708427][T10911] Code: 90 90 90 90 90 90 0f 1f 40 d6 41 54 55 48 89 f5 53 48 89 fb e8 cd 59 db f9 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 75 4c 4c 8b 23 49 39 ec 74 36 e8 a9 59 db f9 4d 85 e4 [ 375.771682][T10911] RSP: 0018:ffffc900038e7a10 EFLAGS: 00010247 [ 375.778317][T10911] RAX: dffffc0000000000 RBX: 0000000000000005 RCX: ffffc9000f013000 [ 375.797995][T10911] RDX: 0000000000000000 RSI: ffffffff882ce7f3 RDI: 0000000000000005 [ 375.853410][T10911] RBP: ffff888029f43c60 R08: 0000000000000000 R09: 4453534204050000 [ 375.867571][T10911] R10: 0000000000000005 R11: ffffffff81000130 R12: 0000000000000000 [ 375.876079][T10911] R13: ffff8880631eed00 R14: ffff88805ef23300 R15: ffff8880631ee280 [ 375.884204][T10911] FS: 00007f9165a586c0(0000) GS:ffff888124346000(0000) knlGS:0000000000000000 [ 375.899539][T10911] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 375.908911][T10911] CR2: 000000000000e000 CR3: 000000007e000000 CR4: 00000000003526f0 [ 375.925145][T10911] Kernel panic - not syncing: Fatal exception [ 375.931527][T10911] Kernel Offset: disabled [ 375.935841][T10911] Rebooting in 86400 seconds..