last executing test programs: 11.742334523s ago: executing program 0 (id=2292): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4b45, r0) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) read$auto(r1, 0x0, 0x39b8) socketcall$auto_SYS_RECVMSG(0x11, 0x0) mlockall$auto(0x5) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(0xffffffffffffffff, 0x0, 0x810) 10.953595657s ago: executing program 3 (id=2297): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bus/usb/010/001\x00', 0x12b901, 0x0) openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/available_tracers\x00', 0x80000, 0x0) r0 = socket(0x11, 0x80003, 0x300) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x20008800) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYRES64, @ANYRESHEX=0x0, @ANYRESHEX], 0x38}, 0x1, 0x0, 0x0, 0xc044}, 0x40008c0) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x65, 0x2) socket(0x1d, 0x2, 0x2) connect$auto(0x3, 0x0, 0x53) socket(0x10, 0x3, 0x6) socketpair$auto(0x1e, 0xb, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x38}, 0x6, 0x0, 0x4, 0x9}, 0xee}, 0x6, 0x1f00) close_range$auto(0x2, 0x8, 0x0) 10.682326671s ago: executing program 3 (id=2298): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/arp\x00', 0x101000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x100b42, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) read$auto_proc_reg_file_ops_compat_inode(r0, 0x0, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x7, 0x20009, 0xdf, 0xeb1, r0, 0x7ffe) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x80001, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) read$auto(0x3, 0x0, 0xfdef) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0x1c, 0x92f1, 0x4}, 0xa) 8.983912545s ago: executing program 3 (id=2300): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0xffffffffffffffff, 0x4, r0) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) timer_create$auto(0x2, 0x0, 0x0) timer_settime$auto(0x0, 0x3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x68082, 0x0) mmap$auto(0x227, 0x3ff, 0x800000000000, 0x16, 0xffffffffffffffff, 0x800001) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x97865e9b37b25d2, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r1, &(0x7f0000000080)={0x0, 0x1000}, 0x3) 8.735246272s ago: executing program 1 (id=2301): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/pcrypt/pencrypt/parallel_cpumask\x00', 0x80302, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) socket(0x23, 0x2, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x1c, r2, 0x27c9d9d5b13b6c03, 0x70bd25, 0x25dfdbfd, {}, [@HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c884}, 0x64004890) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram12\x00', 0xa100, 0x0) setsockopt$auto_SO_DONTROUTE(r3, 0xff, 0x5, &(0x7f0000000300)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0xffffffff) recvmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000)="401b74ce4352ff99291303b63f9542fc7e0349eeaa504fed9ac3c58d5d0d9b5a0a185a7e711a048cfa7c4a01d2fffc493ec4dde809caa5296c5d617a0014e8f659d8778fae2a384ab8776224252a5fd029f6e569ad2244904ac4bd751dbbd9c8718eeadf95eb9c2f6587242f918fe0b0da16d19b6619de1848c87529", 0x7, &(0x7f0000000100)={&(0x7f0000000080)="cd2e1b909fc08d5e44bf38ed", 0x1}, 0x4d8, &(0x7f0000000180)="69f56afe5653d37acc622ed2f3beefdfeb9e67408457eb29197dd78ce1bf46630dd2", 0x4, 0x80}, 0x800}, 0xde4, 0x5, &(0x7f0000000200)={0x8, 0x400}) r4 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r4, 0x400, 0x1) open(&(0x7f0000000800)='./file0\x00', 0x44442, 0x155) fcntl$auto_F_GETLEASE(r4, 0x401, 0xf) r5 = openat$auto_lowpan_control_fops_6lowpan(0xffffffffffffff9c, &(0x7f0000000240), 0x82400, 0x0) read$auto_lowpan_control_fops_6lowpan(r5, &(0x7f0000000280)=""/83, 0x53) sendfile$auto(0x3, r3, 0x0, 0x100400000000006) 8.541384459s ago: executing program 3 (id=2302): socket(0x10, 0x2, 0xc) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0xe, 0x802b95}, 0x0) socket(0xa, 0x3, 0xff) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x101e, 0x2, 0x9, 0x0) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, 0x0) 7.893238745s ago: executing program 0 (id=2303): mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x80802, 0x0) r1 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) r2 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) statx$auto(r2, 0x0, 0x401006, 0x4015, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) syz_genetlink_get_family_id$auto_ovs_vport(0x0, r1) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x28641, 0x0) sendmsg$auto_OVS_VPORT_CMD_SET(r0, 0x0, 0x4000) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) shutdown$auto(0x200000003, 0x2) 7.704071392s ago: executing program 0 (id=2304): mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) io_setup$auto(0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001100)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x80002, 0x0) select$auto(0x100c9619, 0x0, 0x0, 0x0, 0x0) msgctl$auto_IPC_STAT(0x5f, 0x2, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3, 0x100, 0x5, 0x2}, 0x0, 0x0, 0x8001, 0x8, 0x72, 0x4, 0x8, 0x3, 0x5, 0x7, @raw=0x8, @raw=0x9}) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000080)={0x0, 0x1003}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) 7.637804729s ago: executing program 1 (id=2305): ioctl$auto_SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) setns(0xc9, 0x0) socket(0x11, 0x0, 0x300) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x6) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0x0) keyctl$auto(0xb, 0xfffffffd, 0x7, 0xfffffffffff00003, 0x2) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 4.965721868s ago: executing program 0 (id=2306): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyzb\x00', 0x800, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000440), 0x280003, 0x0) memfd_create$auto(&(0x7f0000000300)='/sys/kernel/debug/x86/boot_params/data\x00\"F\xb6\xcd\x06\xd6\x97\\L\xe1\xb2\xee\xb8\x8e\xd6O\xa1j\x90w\xc7\x94\xb7yi\x01&\x04b/\xaa\xfb#s\xc4\xa3\xa7\xacj\xc6\x8e\xf4L\x9a\xf8\xcc\xdcy\x9f\x93\xbc\xf6\xc8\xdb\x05w,|B\xfc\x04\x97\xd3\x0f\x8b\x81\xe8\xbc\x81\x0e\xd7o\xd2\xcd\x18z\xc2\xb7|\xe1\xa6\x9a~\x96\x10rnLnt\xdb\xdb-\x1b\x99\xd4\xed;\xf8\x13a\r\xf2\a\x85%\xef\xa7\x7f#\x96\xf2S\xb0\xf1Hq\x0f;\x83\xb7\x0fz\x9dN\xc9\x1e\x15r\x97|\xbfE\xce\"', 0x4) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3dd) unshare$auto(0x40000080) unshare$auto(0x40000080) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x141041, 0x0) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r2, @new_map_fd=0x2, 0x7, @old_map_fd=r0}, 0xa3) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 4.960481673s ago: executing program 3 (id=2308): r0 = fspick$auto(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x7) ioctl$auto_SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000080)=0x9) ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)={0xfd, 0x5, 0x10001, 0x4, &(0x7f0000000140)="d16b4e081fdef5ff3044", 0x6, 0x10, 0xffffffff, @number_of_packets=0xf7ffffff, 0x2084c, 0x800c, 0x0}) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) write$auto(0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdffe, {}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200088cd}, 0x10) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x18, 0x3, 0x2) bind$auto(r1, &(0x7f0000000180)=@phonet={0x23, 0x5, 0x3, 0xff}, 0x6a) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/ram0/trace/act_mask\x00', 0x168182, 0x0) sendfile$auto(r2, r2, 0x0, 0x2) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 4.939496165s ago: executing program 1 (id=2309): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/arp\x00', 0x101000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x100b42, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) read$auto_proc_reg_file_ops_compat_inode(r0, 0x0, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x7, 0x20009, 0xdf, 0xeb1, r0, 0x7ffe) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x80001, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) read$auto(0x3, 0x0, 0xfdef) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0x1c, 0x92f1, 0x4}, 0xa) 2.597812257s ago: executing program 3 (id=2310): socket(0xa, 0x801, 0x84) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) r1 = socket(0x29, 0x2, 0x0) ioctl$auto(r1, 0x89f2, 0x24) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/fs/xfs/stats/stats\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001180)=""/187, 0xbb) request_key$auto(0x0, &(0x7f0000000080)='keyring\x00', 0x0, 0xfffffffc) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x1) 2.585532161s ago: executing program 2 (id=2311): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) io_uring_setup$auto(0x85, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x200000000000003, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x5, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vidtv.0/i2c-0/new_device\x00', 0x4a001, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/irq/8/spurious\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x9) write$auto(r0, 0x0, 0xb) 2.563905601s ago: executing program 1 (id=2312): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x8, 0x2, 0x8000000000000000, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x440, 0x0) socket(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b82, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff14, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r1], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x200440c0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfc7c, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40c0}, 0x48050) sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x8001c01, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x7}, 0x3d55, 0x0) 2.548421793s ago: executing program 0 (id=2313): write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) unshare$auto(0x9) setns(0xc9, 0x0) socket(0x27, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x11, 0x3, 0x9) close_range$auto(0x2, r0, 0x0) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x14, 0x0, 0x4) sendmmsg$auto(r0, &(0x7f0000000400)={{&(0x7f0000000000), 0x20000, &(0x7f0000000100)={0x0, 0x4b}, 0x1, 0x0, 0x1, 0x1060}, 0x5}, 0x8001, 0x100) 2.268872081s ago: executing program 0 (id=2314): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) set_mempolicy$auto(0x8003, 0x0, 0x4) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x14) socket(0x11, 0x2, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) open(&(0x7f0000000000)='./bus\x00', 0xa23c2, 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x2) getdents64$auto(r0, &(0x7f0000000f40)={0x309, 0x7, 0xffff, 0x7}, 0x200c8) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 2.077505202s ago: executing program 2 (id=2315): pwrite64$auto(0xffffffffffffffff, 0x0, 0x6bc, 0x5) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x5, 0x0) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:R\xcc\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x84) socket(0x10, 0x2, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) bpf$auto(0x1, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x8000, 0xf9c, 0x466, 0x9, 0x3, 0x4, 0x2, 0x4, 0x200, 0x1fd, 0xb6, 0x4, 0x6, 0x3}, 0xa3) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x7e) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20f01, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64$auto(r0, 0x0, 0x100000000008, 0x8000) 2.02055107s ago: executing program 1 (id=2316): keyctl$auto(0x4, 0xfffffffe, 0x6, 0xffffffffffffffff, 0xe) mmap$auto(0x0, 0x2020006, 0x7, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x524, 0x3ff, 0x15, 0xffffffffffffffff, 0xeffd) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000001080)) r1 = socket(0xb, 0x80000, 0xfffffffd) mmap$auto(0x20000, 0x400008, 0xdf, 0x14, 0x2, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x8, 0x311) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) listmount$auto(&(0x7f0000000100)={0x2, @raw, 0x80000002, 0xfffffffffffdfff7, 0xb38}, 0x0, 0x40000f4240, 0x0) recvfrom$auto(r1, 0x0, 0xffffffff80000001, 0x4, 0x0, 0xfffffffffffffffd) mincore$auto(0x1000, 0x4000000, 0x0) 851.351846ms ago: executing program 2 (id=2317): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0xffffffffffffffff, 0x4, r0) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) timer_create$auto(0x2, 0x0, 0x0) timer_settime$auto(0x0, 0x3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x68082, 0x0) mmap$auto(0x227, 0x3ff, 0x800000000000, 0x16, 0xffffffffffffffff, 0x800001) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x97865e9b37b25d2, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r1, &(0x7f0000000080)={0x0, 0x1000}, 0x3) 848.851614ms ago: executing program 1 (id=2325): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/midi2\x00', 0x10201, 0x0) select$auto(0xf, &(0x7f0000000140)={[0x7e, 0x8, 0x6, 0x7fffffff, 0xc, 0x8, 0x1, 0xc86, 0x9, 0x9, 0x2, 0xbf, 0x8, 0x59c, 0x609, 0x4]}, &(0x7f0000000280)={[0x8912, 0x7, 0xc000000000000000, 0xff, 0xa5, 0x8, 0x584, 0xaee, 0x4, 0x6, 0x7a, 0xa, 0x3, 0x7, 0x2a0, 0x75cd65ac]}, &(0x7f0000000440)={[0x801ff, 0x4, 0xfffffffffffffffd, 0x8, 0x775, 0x3, 0xffffffffffff2e3d, 0x3, 0x5, 0x10080, 0x5, 0x3, 0x4, 0x5, 0xf47, 0xbba2]}, &(0x7f00000004c0)={0x4e3, 0x5239}) ioctl$auto_FICLONERANGE(r0, 0x4020940d, 0xffffffffffff8000) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x841, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram15/queue/rotational\x00', 0x420c61, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)='-', 0x1) write$auto(r1, 0x0, 0x3ff) flock$auto(0xffffffffffffffff, 0x7) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 552.761093ms ago: executing program 2 (id=2318): mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) io_uring_setup$auto(0x8000c, 0x0) ioctl$auto_BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x1, 0x7ff) ptrace$auto(0x1, r0, 0xcd69, 0x10) r1 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x7e) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000002180)='/dev/snd/pcmC0D0p\x00', 0x0, 0x0) fcntl$auto(0x3, 0x4, 0xa553) setfsuid$auto(0xee01) fchdir$auto(r1) capset$auto(0x0, 0x0) getsockopt$auto(0x3, 0x200000000001, 0x1f, 0x0, 0x0) 186.13753ms ago: executing program 2 (id=2319): mmap$auto(0x0, 0x2020005, 0x3, 0x80000000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) socket(0x15, 0x5, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/pcm1p/sub3/sw_params\x00', 0x88400, 0x0) io_uring_setup$auto(0xc, 0x0) pipe2$auto(0x0, 0x80) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto(r1, 0x80047437, r0) 0s ago: executing program 2 (id=2320): lseek$auto(0xffffffffffffffff, 0x7, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x9, 0x22, 0x940, 0x1ffde, 0x3, 0x6, 0x8000004, 0x9, 0x5, 0x0, 0x4, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x7, 0x0, 0x803ffff, 0x0, 0x3, 0x7069, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x8, 0x5, 0x8, 0x0, 0x2, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x100000000, 0x0, 0x8000000000000001, 0x0, 0x1, 0x0, 0x0, 0x1001, 0x4, 0x0, 0x0, 0x2000000000000000]}, 0x4b9, 0x7d) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x60000000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) kernel console output (not intermixed with test programs): te_new_namespaces+0x3ea/0xac0 [ 282.859372][ T9314] unshare_nsproxy_namespaces+0xf2/0x220 [ 282.859396][ T9314] ksys_unshare+0x4a2/0xa70 [ 282.859411][ T9314] ? __pfx_ksys_unshare+0x10/0x10 [ 282.859434][ T9314] __x64_sys_unshare+0x31/0x40 [ 282.859449][ T9314] do_syscall_64+0x121/0x770 [ 282.859469][ T9314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.859484][ T9314] RIP: 0033:0x7f50e4d9e159 [ 282.859497][ T9314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.859511][ T9314] RSP: 002b:00007f50e5b98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 282.859526][ T9314] RAX: ffffffffffffffda RBX: 00007f50e5025fa0 RCX: 00007f50e4d9e159 [ 282.859536][ T9314] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 282.859545][ T9314] RBP: 00007f50e4e3506b R08: 0000000000000000 R09: 0000000000000000 [ 282.859554][ T9314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.859563][ T9314] R13: 00007f50e5026038 R14: 00007f50e5025fa0 R15: 00007ffc23aa59f8 [ 282.859584][ T9314] [ 283.285605][ T9316] netlink: 62 bytes leftover after parsing attributes in process `syz.0.707'. [ 283.420934][ T9321] usbcore.quirks: string doesn't fit in 127 chars. [ 283.884316][ T9347] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 286.776955][ T9383] netlink: 226 bytes leftover after parsing attributes in process `syz.2.720'. [ 286.791217][ T9383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.720'. [ 286.791511][ T9383] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 286.791638][ T9383] netlink: 226 bytes leftover after parsing attributes in process `syz.2.720'. [ 286.791775][ T9383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.720'. [ 286.791984][ T9383] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 287.813000][ T9423] netlink: 326 bytes leftover after parsing attributes in process `syz.2.729'. [ 287.854471][ T9423] usb usb30: usbfs: interface 0 claimed by hub while 'syz.2.729' sets config #0 [ 291.920644][ T9496] netlink: 326 bytes leftover after parsing attributes in process `syz.0.740'. [ 292.003804][ T9499] usb usb30: usbfs: interface 0 claimed by hub while 'syz.0.740' sets config #0 [ 293.864627][ T9537] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 294.738786][ T9564] netlink: 504 bytes leftover after parsing attributes in process `syz.3.756'. [ 294.924046][ T4933] block nbd0: Receive control failed (result -32) [ 297.762989][ T9605] vcan0: tx drop: invalid sa for name 0x00000000000000fd [ 298.933134][ T9656] Per memcg swappiness does not exist in cgroup v2. See memory.reclaim or memory.swap.max there [ 298.933134][ T9656] [ 303.042782][ T9737] input: f¬ as /devices/virtual/input/input9 [ 305.452205][ T9790] FAULT_INJECTION: forcing a failure. [ 305.452205][ T9790] name fail_futex, interval 1, probability 0, space 0, times 1 [ 305.452245][ T9790] CPU: 0 UID: 0 PID: 9790 Comm: syz.3.793 Tainted: G L syzkaller #0 PREEMPT(full) [ 305.452268][ T9790] Tainted: [L]=SOFTLOCKUP [ 305.452273][ T9790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 305.452282][ T9790] Call Trace: [ 305.452288][ T9790] [ 305.452294][ T9790] dump_stack_lvl+0x100/0x190 [ 305.452318][ T9790] should_fail_ex.cold+0x5/0xa [ 305.452339][ T9790] get_futex_key+0x1d0/0x14f0 [ 305.452356][ T9790] ? __pfx_get_futex_key+0x10/0x10 [ 305.452371][ T9790] ? find_held_lock+0x2b/0x80 [ 305.452389][ T9790] ? futex_wake+0x4ea/0x5e0 [ 305.452411][ T9790] futex_wake+0xf4/0x5e0 [ 305.452428][ T9790] ? futex_wait+0x11e/0x370 [ 305.452449][ T9790] ? __pfx_futex_wake+0x10/0x10 [ 305.452475][ T9790] do_futex+0x2b2/0x440 [ 305.452492][ T9790] ? __pfx_do_futex+0x10/0x10 [ 305.452509][ T9790] ? __pfx_get_nodes+0x10/0x10 [ 305.452537][ T9790] __x64_sys_futex+0x34f/0x4d0 [ 305.452563][ T9790] ? __x64_sys_close_range+0x30f/0x5d0 [ 305.452585][ T9790] ? __pfx___x64_sys_futex+0x10/0x10 [ 305.452602][ T9790] ? __pfx___x64_sys_close_range+0x10/0x10 [ 305.452629][ T9790] do_syscall_64+0x121/0x770 [ 305.452649][ T9790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.452665][ T9790] RIP: 0033:0x7f50e4d9e159 [ 305.452678][ T9790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.452691][ T9790] RSP: 002b:00007f50e236c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 305.452706][ T9790] RAX: ffffffffffffffda RBX: 00007f50e5026458 RCX: 00007f50e4d9e159 [ 305.452716][ T9790] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f50e502645c [ 305.452725][ T9790] RBP: 00007f50e5026450 R08: 0000000000000001 R09: 0000000000000000 [ 305.452734][ T9790] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 305.452743][ T9790] R13: 00007f50e50264e8 R14: 00007ffc23aa5910 R15: 00007ffc23aa59f8 [ 305.452763][ T9790] [ 306.301016][ T1113] EXT4-fs error (device sda1): ext4_validate_block_bitmap:427: comm kworker/u8:7: bg 4: bad block bitmap checksum [ 306.304602][ T1113] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 74 [ 306.304625][ T1113] EXT4-fs (sda1): This should not happen!! Data will be lost [ 306.304625][ T1113] [ 306.444585][ T9801] netlink: 28 bytes leftover after parsing attributes in process `syz.0.797'. [ 309.554231][ T9855] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 310.693838][ T4933] Bluetooth: hci3: unexpected event 0x04 length: 435 > 10 [ 310.693957][ T4933] Bluetooth: hci3: connection err: -111 [ 312.592256][ T9909] netlink: 334 bytes leftover after parsing attributes in process `syz.3.817'. [ 313.676927][ T9934] netlink: 'syz.3.820': attribute type 15 has an invalid length. [ 313.676944][ T9934] netlink: 'syz.3.820': attribute type 16 has an invalid length. [ 313.676952][ T9934] netlink: 194 bytes leftover after parsing attributes in process `syz.3.820'. [ 316.374746][ T9973] netlink: 330 bytes leftover after parsing attributes in process `syz.2.829'. [ 317.174839][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.174879][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.414044][T10003] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 317.414070][T10003] EXT4-fs (sda1): This should not happen!! Data will be lost [ 317.414070][T10003] [ 318.305925][T10022] EXT4-fs error (device sda1): ext4_discard_preallocations:5697: comm syz.2.836: Error -117 reading block bitmap for 4 [ 319.638358][T10027] netlink: 202 bytes leftover after parsing attributes in process `syz.0.838'. [ 321.744757][ T4933] Bluetooth: hci1: unexpected event 0x04 length: 435 > 10 [ 321.744802][ T4933] Bluetooth: hci1: connection err: -111 [ 323.088931][ T4933] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 325.169669][ T4933] Bluetooth: hci1: command 0x0406 tx timeout [ 327.250486][ T5619] Bluetooth: hci1: command 0x0406 tx timeout [ 328.002805][T10192] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 332.221777][T10266] netlink: 'syz.0.885': attribute type 1 has an invalid length. [ 332.221794][T10266] netlink: 'syz.0.885': attribute type 6 has an invalid length. [ 337.754299][T10329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.898'. [ 337.780958][T10329] netlink: 13 bytes leftover after parsing attributes in process `syz.1.898'. [ 341.081395][T10394] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 344.227831][T10452] sysfs_service_op_show: Client not running :-5: [ 345.927062][T10479] netlink: 354 bytes leftover after parsing attributes in process `syz.2.923'. [ 353.625283][T10556] netlink: 342 bytes leftover after parsing attributes in process `syz.3.933'. [ 362.728824][T10742] netlink: 186 bytes leftover after parsing attributes in process `syz.0.959'. [ 362.747890][T10742] netlink: 186 bytes leftover after parsing attributes in process `syz.0.959'. [ 362.987563][T10749] FAULT_INJECTION: forcing a failure. [ 362.987563][T10749] name failslab, interval 1, probability 0, space 0, times 0 [ 362.987594][T10749] CPU: 0 UID: 8 PID: 10749 Comm: syz.0.969 Tainted: G L syzkaller #0 PREEMPT(full) [ 362.987615][T10749] Tainted: [L]=SOFTLOCKUP [ 362.987621][T10749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 362.987633][T10749] Call Trace: [ 362.987638][T10749] [ 362.987644][T10749] dump_stack_lvl+0x100/0x190 [ 362.987669][T10749] should_fail_ex.cold+0x5/0xa [ 362.987690][T10749] should_failslab+0xc2/0x120 [ 362.987711][T10749] __kmalloc_cache_noprof+0x91/0x6d0 [ 362.987727][T10749] ? key_user_lookup+0x16e/0x5a0 [ 362.987744][T10749] ? key_user_lookup+0x1a3/0x5a0 [ 362.987763][T10749] key_user_lookup+0x1a3/0x5a0 [ 362.987778][T10749] ? __pfx_key_user_lookup+0x10/0x10 [ 362.987795][T10749] ? security_key_permission+0x7b/0x230 [ 362.987824][T10749] key_alloc+0x18b/0x1310 [ 362.987844][T10749] ? __pfx_keyring_search+0x10/0x10 [ 362.987864][T10749] ? __pfx_key_alloc+0x10/0x10 [ 362.987879][T10749] ? __pfx_key_default_cmp+0x10/0x10 [ 362.987897][T10749] ? __pfx_keyring_search_iterator+0x10/0x10 [ 362.987918][T10749] keyring_alloc+0x44/0xc0 [ 362.987937][T10749] look_up_user_keyrings+0x465/0x790 [ 362.987964][T10749] ? __pfx_look_up_user_keyrings+0x10/0x10 [ 362.987988][T10749] ? __pfx_futex_wait+0x10/0x10 [ 362.988013][T10749] lookup_user_key+0xbb1/0x1300 [ 362.988029][T10749] ? __pfx_lookup_user_key+0x10/0x10 [ 362.988045][T10749] ? do_futex+0x190/0x440 [ 362.988063][T10749] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 362.988090][T10749] ? __x64_sys_futex+0x34f/0x4d0 [ 362.988105][T10749] ? __x64_sys_futex+0x358/0x4d0 [ 362.988125][T10749] keyctl_session_to_parent+0x28/0xae0 [ 362.988151][T10749] __do_sys_keyctl+0x2b1/0x5a0 [ 362.988174][T10749] do_syscall_64+0x121/0x770 [ 362.988194][T10749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.988210][T10749] RIP: 0033:0x7f5c4619e159 [ 362.988230][T10749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.988244][T10749] RSP: 002b:00007f5c46fe1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 362.988266][T10749] RAX: ffffffffffffffda RBX: 00007f5c46425fa0 RCX: 00007f5c4619e159 [ 362.988276][T10749] RDX: fffffffffffffffd RSI: 0000000000000000 RDI: 0000000000000012 [ 362.988285][T10749] RBP: 00007f5c4623506b R08: fffffffffffffffe R09: 0000000000000000 [ 362.988294][T10749] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 362.988303][T10749] R13: 00007f5c46426038 R14: 00007f5c46425fa0 R15: 00007fffd719fd28 [ 362.988323][T10749] [ 367.740693][T10832] binder: 10814:10832 ioctl c018620c 0 returned -22 [ 375.480825][T10955] netlink: 202 bytes leftover after parsing attributes in process `syz.2.998'. [ 377.252879][T10988] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1004'. [ 377.617705][T10996] netlink: zone id is out of range [ 377.640966][T10996] netlink: zone id is out of range [ 377.737447][T10996] netlink: set zone limit has 8 unknown bytes [ 378.464537][T11012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1011'. [ 378.479274][T11012] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1011'. [ 378.616735][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.616780][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.680711][T11040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1015'. [ 381.458495][ T4933] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 386.873499][T11158] binder: 11147:11158 ioctl c018620c 0 returned -22 [ 389.291754][T11200] FAULT_INJECTION: forcing a failure. [ 389.291754][T11200] name failslab, interval 1, probability 0, space 0, times 0 [ 389.291784][T11200] CPU: 0 UID: 0 PID: 11200 Comm: syz.2.1044 Tainted: G L syzkaller #0 PREEMPT(full) [ 389.291813][T11200] Tainted: [L]=SOFTLOCKUP [ 389.291819][T11200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 389.291828][T11200] Call Trace: [ 389.291833][T11200] [ 389.291839][T11200] dump_stack_lvl+0x100/0x190 [ 389.291864][T11200] should_fail_ex.cold+0x5/0xa [ 389.291884][T11200] should_failslab+0xc2/0x120 [ 389.291906][T11200] __kmalloc_cache_noprof+0x91/0x6d0 [ 389.291922][T11200] ? down_write_killable+0x152/0x240 [ 389.291942][T11200] ? alloc_ldt_struct+0x5d/0x1b0 [ 389.291963][T11200] alloc_ldt_struct+0x5d/0x1b0 [ 389.291979][T11200] write_ldt+0x62b/0xd40 [ 389.291999][T11200] ? __pfx_write_ldt+0x10/0x10 [ 389.292018][T11200] ? xfd_validate_state+0x129/0x190 [ 389.292046][T11200] __x64_sys_modify_ldt+0xb1/0x170 [ 389.292065][T11200] do_syscall_64+0x121/0x770 [ 389.292084][T11200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.292100][T11200] RIP: 0033:0x7f318839e159 [ 389.292113][T11200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.292127][T11200] RSP: 002b:00007f31892cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 389.292142][T11200] RAX: ffffffffffffffda RBX: 00007f3188626090 RCX: 00007f318839e159 [ 389.292152][T11200] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000001 [ 389.292161][T11200] RBP: 00007f318843506b R08: 0000000000000000 R09: 0000000000000000 [ 389.292170][T11200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 389.292179][T11200] R13: 00007f3188626128 R14: 00007f3188626090 R15: 00007ffeeb317588 [ 389.292200][T11200] [ 389.771728][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880348a5800: rx timeout, send abort [ 389.771862][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880348a5800: 0x0ffff: (3) A timeout occurred and this is the connection abort to close the session. [ 392.430923][ T4933] Bluetooth: hci1: unexpected event 0x35 length: 725 > 6 [ 392.471734][T11247] ovs_?: entered promiscuous mode [ 392.503415][T11247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1054'. [ 393.269361][T11271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1059'. [ 393.275459][T11271] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1059'. [ 401.355735][T11413] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 600000000 [ 406.083293][T11494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1097'. [ 407.797904][T11504] netlink: zone id is out of range [ 407.806046][T11504] netlink: zone id is out of range [ 407.861712][T11504] netlink: set zone limit has 8 unknown bytes [ 410.646276][T11556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1108'. [ 412.299961][T11591] FAULT_INJECTION: forcing a failure. [ 412.299961][T11591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.299990][T11591] CPU: 0 UID: 0 PID: 11591 Comm: syz.2.1119 Tainted: G L syzkaller #0 PREEMPT(full) [ 412.300011][T11591] Tainted: [L]=SOFTLOCKUP [ 412.300016][T11591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 412.300025][T11591] Call Trace: [ 412.300030][T11591] [ 412.300036][T11591] dump_stack_lvl+0x100/0x190 [ 412.300062][T11591] should_fail_ex.cold+0x5/0xa [ 412.300082][T11591] _copy_to_user+0x32/0xd0 [ 412.300104][T11591] copy_siginfo_to_user+0x27/0xc0 [ 412.300120][T11591] x64_setup_rt_frame+0xa03/0xce0 [ 412.300145][T11591] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 412.300165][T11591] ? do_send_specific+0x15c/0x360 [ 412.300181][T11591] ? __pfx_do_send_specific+0x10/0x10 [ 412.300198][T11591] arch_do_signal_or_restart+0x6b6/0x7a0 [ 412.300219][T11591] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 412.300244][T11591] ? __pfx___x64_sys_rt_tgsigqueueinfo+0x10/0x10 [ 412.300267][T11591] exit_to_user_mode_loop+0x139/0x700 [ 412.300282][T11591] ? rcu_is_watching+0x13/0xc0 [ 412.300300][T11591] do_syscall_64+0x603/0x770 [ 412.300320][T11591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.300335][T11591] RIP: 0033:0x7f318839e159 [ 412.300349][T11591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.300362][T11591] RSP: 002b:00007f3189249028 EFLAGS: 00000246 ORIG_RAX: 0000000000000129 [ 412.300378][T11591] RAX: 0000000000000000 RBX: 00007f3188626450 RCX: 00007f318839e159 [ 412.300387][T11591] RDX: 0000000000000021 RSI: 000000000000051c RDI: 0000000000000516 [ 412.300396][T11591] RBP: 00007f318843506b R08: 0000000000000000 R09: 0000000000000000 [ 412.300404][T11591] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000000 [ 412.300413][T11591] R13: 00007f31886264e8 R14: 00007f3188626450 R15: 00007ffeeb317588 [ 412.300432][T11591] [ 416.285030][T11636] vivid-007: ================= START STATUS ================= [ 416.295696][T11636] vivid-007: Generate PTS: true [ 416.295720][T11636] vivid-007: Generate SCR: true [ 416.295738][T11636] tpg source WxH: 320x240 (Y'CbCr) [ 416.295747][T11636] tpg field: 1 [ 416.295752][T11636] tpg crop: (0,0)/320x240 [ 416.295760][T11636] tpg compose: (0,0)/320x240 [ 416.295769][T11636] tpg colorspace: 8 [ 416.295774][T11636] tpg transfer function: 0/0 [ 416.295781][T11636] tpg Y'CbCr encoding: 0/0 [ 416.295787][T11636] tpg quantization: 0/0 [ 416.295793][T11636] tpg RGB range: 0/2 [ 416.295799][T11636] vivid-007: ================== END STATUS ================== [ 416.726474][T11651] capability: warning: `syz.1.1124' uses 32-bit capabilities (legacy support in use) [ 416.838870][T11654] netlink: 'syz.3.1125': attribute type 10 has an invalid length. [ 416.838886][T11654] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1125'. [ 420.734193][T11736] binder: 11728:11736 ioctl 400c620e 0 returned -22 [ 424.056702][T11777] lo: entered allmulticast mode [ 424.056746][T11777] lo: left allmulticast mode [ 426.790289][T11815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1151'. [ 428.088979][T11846] blktrace: Concurrent blktraces are not allowed on loop2 [ 428.331805][T11849] FAULT_INJECTION: forcing a failure. [ 428.331805][T11849] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 428.331833][T11849] CPU: 0 UID: 0 PID: 11849 Comm: syz.3.1159 Tainted: G L syzkaller #0 PREEMPT(full) [ 428.331854][T11849] Tainted: [L]=SOFTLOCKUP [ 428.331860][T11849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 428.331869][T11849] Call Trace: [ 428.331874][T11849] [ 428.331880][T11849] dump_stack_lvl+0x100/0x190 [ 428.331905][T11849] should_fail_ex.cold+0x5/0xa [ 428.331923][T11849] ? prepare_alloc_pages+0x16d/0x5b0 [ 428.331946][T11849] should_fail_alloc_page+0xeb/0x140 [ 428.331970][T11849] prepare_alloc_pages+0x1f0/0x5b0 [ 428.331994][T11849] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 428.332014][T11849] ? find_held_lock+0x2b/0x80 [ 428.332031][T11849] ? is_bpf_text_address+0x8a/0x1a0 [ 428.332053][T11849] ? is_bpf_text_address+0x8a/0x1a0 [ 428.332074][T11849] ? bpf_ksym_find+0x124/0x1c0 [ 428.332092][T11849] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 428.332113][T11849] ? is_bpf_text_address+0x94/0x1a0 [ 428.332134][T11849] ? kernel_text_address+0x8d/0x100 [ 428.332154][T11849] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 428.332180][T11849] ? arch_stack_walk+0xa6/0xf0 [ 428.332206][T11849] ? stack_trace_save+0x8e/0xc0 [ 428.332225][T11849] ? __pfx_stack_trace_save+0x10/0x10 [ 428.332245][T11849] ? kernel_text_address+0x8d/0x100 [ 428.332269][T11849] ? kasan_save_stack+0x3f/0x50 [ 428.332288][T11849] ? kasan_save_stack+0x30/0x50 [ 428.332307][T11849] ? kasan_save_track+0x14/0x30 [ 428.332325][T11849] ? __kasan_slab_alloc+0x89/0x90 [ 428.332344][T11849] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 428.332362][T11849] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 428.332385][T11849] ? policy_nodemask+0xed/0x4f0 [ 428.332408][T11849] alloc_pages_mpol+0x201/0x550 [ 428.332431][T11849] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 428.332458][T11849] alloc_pages_noprof+0x1a/0x160 [ 428.332474][T11849] pte_alloc_one+0x1c/0x3d0 [ 428.332494][T11849] __pte_alloc+0x6d/0x380 [ 428.332512][T11849] ? __pfx___pte_alloc+0x10/0x10 [ 428.332535][T11849] do_anonymous_page+0x1307/0x2050 [ 428.332552][T11849] ? find_held_lock+0x2b/0x80 [ 428.332569][T11849] ? __pmd_alloc+0x3f6/0x950 [ 428.332588][T11849] ? __pmd_alloc+0x3f6/0x950 [ 428.332609][T11849] ? __pfx_do_anonymous_page+0x10/0x10 [ 428.332623][T11849] ? do_raw_spin_unlock+0x145/0x1e0 [ 428.332642][T11849] ? _raw_spin_unlock+0x28/0x50 [ 428.332657][T11849] ? __pmd_alloc+0x3fb/0x950 [ 428.332680][T11849] __handle_mm_fault+0x1ff3/0x2f60 [ 428.332700][T11849] ? __pfx___handle_mm_fault+0x10/0x10 [ 428.332714][T11849] ? __pfx_mt_find+0x10/0x10 [ 428.332750][T11849] handle_mm_fault+0x363/0xa20 [ 428.332770][T11849] __get_user_pages+0x8ae/0x2c30 [ 428.332797][T11849] ? __pfx___get_user_pages+0x10/0x10 [ 428.332817][T11849] ? lock_acquire+0x1d1/0x380 [ 428.332837][T11849] ? mmap_read_lock_maybe_expand+0x1e2/0x3d0 [ 428.332865][T11849] get_user_pages_remote+0x3d2/0xb10 [ 428.332888][T11849] ? __pfx_get_user_pages_remote+0x10/0x10 [ 428.332916][T11849] get_arg_page+0xf4/0x310 [ 428.332933][T11849] ? __pfx_get_arg_page+0x10/0x10 [ 428.332948][T11849] ? do_raw_spin_lock+0x128/0x260 [ 428.332963][T11849] ? alloc_bprm+0x54e/0x9e0 [ 428.332978][T11849] ? alloc_bprm+0x54e/0x9e0 [ 428.332996][T11849] copy_string_kernel+0x17d/0x3f0 [ 428.333013][T11849] ? alloc_bprm+0x596/0x9e0 [ 428.333032][T11849] do_execveat_common.isra.0+0x2e6/0x580 [ 428.333053][T11849] __x64_sys_execveat+0xdf/0x130 [ 428.333073][T11849] do_syscall_64+0x121/0x770 [ 428.333092][T11849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.333108][T11849] RIP: 0033:0x7f50e4d9e159 [ 428.333121][T11849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.333135][T11849] RSP: 002b:00007f50e5b98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 428.333151][T11849] RAX: ffffffffffffffda RBX: 00007f50e5025fa0 RCX: 00007f50e4d9e159 [ 428.333161][T11849] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000006 [ 428.333176][T11849] RBP: 00007f50e4e3506b R08: 0000000000000000 R09: 0000000000000000 [ 428.333185][T11849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 428.333195][T11849] R13: 00007f50e5026038 R14: 00007f50e5025fa0 R15: 00007ffc23aa59f8 [ 428.333214][T11849] [ 433.768766][T11959] vcan0: tx drop: invalid sa for name 0x00000000000000fd [ 435.679644][T12002] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 436.380522][T12012] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1186'. [ 440.043262][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.043302][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.575046][T12130] IPVS: length: 537396514 != 24 [ 443.593693][T12141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1211'. [ 448.988633][T12233] vcan0: tx drop: invalid sa for name 0x00000000000000fd [ 449.323767][T12244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1230'. [ 455.287852][T12353] vcan0: tx drop: invalid sa for name 0x00000000000000fd [ 463.802763][T12448] netlink: 186 bytes leftover after parsing attributes in process `syz.1.1270'. [ 467.652205][T12520] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1282'. [ 467.749145][T12522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1283'. [ 467.761054][T12522] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1283'. [ 467.964694][T12528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1285'. [ 467.965259][T12528] netlink: 354 bytes leftover after parsing attributes in process `syz.2.1285'. [ 469.292270][ T4933] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 479.629752][ T4933] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 482.021762][T12747] cifs: Unknown parameter '¢ÔÃöår¨-z„¡O­œî' [ 482.252842][ C0] sd 0:0:1:0: [sda] tag#5355 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 482.252886][ C0] sd 0:0:1:0: [sda] tag#5355 CDB: Read(6) 08 00 00 00 09 00 00 00 00 00 00 00 [ 482.500542][T12756] ubi0: attaching mtd0 [ 482.559042][T12756] ubi0: scanning is finished [ 482.559058][T12756] ubi0: empty MTD device detected [ 483.037087][T12756] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 483.037114][T12756] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 483.037126][T12756] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 483.037137][T12756] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 483.037149][T12756] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 483.037160][T12756] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 483.037172][T12756] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1245500923 [ 483.037187][T12756] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 483.039434][T12770] ubi0: background thread "ubi_bgt0d" started, PID 12770 [ 483.131086][T12760] ubi0: detaching mtd0 [ 483.222440][T12760] ubi0: mtd0 is detached [ 485.626631][ T4933] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 486.719981][T12811] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 490.595810][T12860] bridge0: port 3(team0) entered blocking state [ 490.595871][T12860] bridge0: port 3(team0) entered disabled state [ 490.595963][T12860] team0: entered allmulticast mode [ 490.595975][T12860] team_slave_0: entered allmulticast mode [ 490.595988][T12860] team_slave_1: entered allmulticast mode [ 490.601305][T12860] team0: entered promiscuous mode [ 490.601319][T12860] team_slave_0: entered promiscuous mode [ 490.601439][T12860] team_slave_1: entered promiscuous mode [ 490.662355][T12860] FAULT_INJECTION: forcing a failure. [ 490.662355][T12860] name failslab, interval 1, probability 0, space 0, times 0 [ 490.662448][T12860] CPU: 0 UID: 0 PID: 12860 Comm: syz.3.1340 Tainted: G L syzkaller #0 PREEMPT(full) [ 490.662471][T12860] Tainted: [L]=SOFTLOCKUP [ 490.662477][T12860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 490.662493][T12860] Call Trace: [ 490.662499][T12860] [ 490.662505][T12860] dump_stack_lvl+0x100/0x190 [ 490.662600][T12860] should_fail_ex.cold+0x5/0xa [ 490.662634][T12860] should_failslab+0xc2/0x120 [ 490.662704][T12860] __kmalloc_cache_noprof+0x91/0x6d0 [ 490.662758][T12860] ? nbp_vlan_add+0x1eb/0x3e0 [ 490.662834][T12860] nbp_vlan_add+0x1eb/0x3e0 [ 490.662852][T12860] nbp_vlan_init+0x37e/0x500 [ 490.662869][T12860] ? __pfx_nbp_vlan_init+0x10/0x10 [ 490.662889][T12860] ? __local_bh_enable_ip+0xa5/0x120 [ 490.662934][T12860] ? lockdep_hardirqs_on+0x7d/0x110 [ 490.663018][T12860] ? br_fdb_add_local+0x43/0x60 [ 490.663085][T12860] ? __local_bh_enable_ip+0xa5/0x120 [ 490.663111][T12860] br_add_if+0x10a1/0x1c80 [ 490.663134][T12860] add_del_if+0x114/0x160 [ 490.663153][T12860] br_dev_siocdevprivate+0x8b5/0x1660 [ 490.663173][T12860] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 490.663195][T12860] ? do_raw_spin_lock+0x128/0x260 [ 490.663221][T12860] ? find_held_lock+0x2b/0x80 [ 490.663237][T12860] ? debug_mutex_remove_waiter+0xa0/0x320 [ 490.663255][T12860] ? debug_mutex_remove_waiter+0xa0/0x320 [ 490.663277][T12860] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 490.663317][T12860] ? full_name_hash+0xbc/0x100 [ 490.663387][T12860] dev_ifsioc+0xc2f/0x1ee0 [ 490.663448][T12860] ? __pfx_dev_ifsioc+0x10/0x10 [ 490.663462][T12860] ? __pfx___mutex_lock+0x10/0x10 [ 490.663484][T12860] ? lock_acquire+0x1d1/0x380 [ 490.663507][T12860] ? dev_load+0x8e/0x240 [ 490.663550][T12860] ? dev_load+0x8e/0x240 [ 490.663576][T12860] dev_ioctl+0x70e/0x1070 [ 490.663593][T12860] sock_ioctl+0x494/0x6b0 [ 490.663641][T12860] ? __pfx_sock_ioctl+0x10/0x10 [ 490.663669][T12860] ? __pfx_sock_ioctl+0x10/0x10 [ 490.663689][T12860] __x64_sys_ioctl+0x18e/0x210 [ 490.663735][T12860] do_syscall_64+0x121/0x770 [ 490.663757][T12860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.663781][T12860] RIP: 0033:0x7f50e4d9e159 [ 490.663795][T12860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.663809][T12860] RSP: 002b:00007f50e5b98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 490.663850][T12860] RAX: ffffffffffffffda RBX: 00007f50e5025fa0 RCX: 00007f50e4d9e159 [ 490.663861][T12860] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000003 [ 490.663870][T12860] RBP: 00007f50e4e3506b R08: 0000000000000000 R09: 0000000000000000 [ 490.663880][T12860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 490.663889][T12860] R13: 00007f50e5026038 R14: 00007f50e5025fa0 R15: 00007ffc23aa59f8 [ 490.663917][T12860] [ 491.010019][T12860] team0: failed to initialize vlan filtering on this port [ 491.032492][T12860] team0: left allmulticast mode [ 491.032508][T12860] team_slave_0: left allmulticast mode [ 491.032521][T12860] team_slave_1: left allmulticast mode [ 492.212131][T12888] netlink: 'syz.1.1343': attribute type 11 has an invalid length. [ 495.032281][T12925] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1348'. [ 496.918840][T12963] tipc: Can't bind to reserved service type 63 [ 501.468349][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.468391][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.024945][ T4933] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 507.152467][T13116] ubi0: attaching mtd0 [ 507.153736][T13116] ubi0: scanning is finished [ 507.350106][T13116] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 507.350125][T13116] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 507.350139][T13116] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 507.350151][T13116] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 507.350162][T13116] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 507.350173][T13116] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 507.350186][T13116] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1245500923 [ 507.350199][T13116] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 507.350230][T13131] ubi0: background thread "ubi_bgt0d" started, PID 13131 [ 507.392997][T13122] ubi0: detaching mtd0 [ 507.483530][T13122] ubi0: mtd0 is detached [ 519.544710][T13312] netlink: 354 bytes leftover after parsing attributes in process `syz.1.1413'. [ 522.163642][T13365] FAULT_INJECTION: forcing a failure. [ 522.163642][T13365] name failslab, interval 1, probability 0, space 0, times 0 [ 522.163670][T13365] CPU: 0 UID: 0 PID: 13365 Comm: syz.3.1421 Tainted: G L syzkaller #0 PREEMPT(full) [ 522.163692][T13365] Tainted: [L]=SOFTLOCKUP [ 522.163697][T13365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 522.163706][T13365] Call Trace: [ 522.163711][T13365] [ 522.163718][T13365] dump_stack_lvl+0x100/0x190 [ 522.163744][T13365] should_fail_ex.cold+0x5/0xa [ 522.163764][T13365] should_failslab+0xc2/0x120 [ 522.163786][T13365] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 522.163807][T13365] ? xas_split_alloc+0x182/0x530 [ 522.163899][T13365] xas_split_alloc+0x182/0x530 [ 522.163923][T13365] __folio_split+0x95e/0x1bf0 [ 522.163994][T13365] ? __pfx___folio_split+0x10/0x10 [ 522.164017][T13365] ? __pfx___might_resched+0x10/0x10 [ 522.164047][T13365] madvise_cold_or_pageout_pte_range+0xfd1/0x27b0 [ 522.164102][T13365] ? rcu_read_unlock+0x17/0x60 [ 522.164157][T13365] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 522.164181][T13365] ? __mod_zone_page_state+0xdb/0x190 [ 522.164259][T13365] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 522.164283][T13365] walk_pgd_range+0xbef/0x1e00 [ 522.164327][T13365] ? find_held_lock+0x2b/0x80 [ 522.164352][T13365] ? __pfx_walk_pgd_range+0x10/0x10 [ 522.164371][T13365] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 522.164438][T13365] __walk_page_range+0x171/0x850 [ 522.164465][T13365] walk_page_range_vma_unsafe+0x209/0x8f0 [ 522.164487][T13365] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 522.164510][T13365] ? find_held_lock+0x2b/0x80 [ 522.164533][T13365] ? mlock_drain_local+0x254/0x4e0 [ 522.164572][T13365] ? mlock_drain_local+0x254/0x4e0 [ 522.164592][T13365] walk_page_range_vma+0x63/0x90 [ 522.164612][T13365] madvise_pageout+0x29e/0x5b0 [ 522.164636][T13365] ? __pfx_madvise_pageout+0x10/0x10 [ 522.164672][T13365] madvise_vma_behavior+0x48b/0x2350 [ 522.164696][T13365] ? mas_prev+0xa4/0x100 [ 522.164743][T13365] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 522.164768][T13365] ? mas_walk+0x260/0x310 [ 522.164786][T13365] ? find_vma_prev+0xd8/0x150 [ 522.164806][T13365] ? __pfx_find_vma_prev+0x10/0x10 [ 522.164826][T13365] ? lock_acquire+0x1d1/0x380 [ 522.164858][T13365] madvise_walk_vmas+0x30e/0xc50 [ 522.164884][T13365] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 522.164909][T13365] ? __pfx_futex_wake_mark+0x10/0x10 [ 522.164944][T13365] ? lock_acquire+0x1d1/0x380 [ 522.164967][T13365] madvise_do_behavior+0x1ea/0x510 [ 522.164992][T13365] ? __pfx_madvise_do_behavior+0x10/0x10 [ 522.165017][T13365] ? down_read+0x13b/0x4c0 [ 522.165046][T13365] do_madvise+0x238/0x290 [ 522.165059][T13365] ? __pfx_do_madvise+0x10/0x10 [ 522.165072][T13365] ? do_futex+0x190/0x440 [ 522.165092][T13365] ? fdget+0x18b/0x210 [ 522.165163][T13365] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 522.165185][T13365] __x64_sys_madvise+0xa9/0x110 [ 522.165199][T13365] ? lockdep_hardirqs_on+0x7d/0x110 [ 522.165217][T13365] do_syscall_64+0x121/0x770 [ 522.165237][T13365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.165253][T13365] RIP: 0033:0x7f50e4d9e159 [ 522.165266][T13365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.165281][T13365] RSP: 002b:00007f50e5b98028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 522.165296][T13365] RAX: ffffffffffffffda RBX: 00007f50e5025fa0 RCX: 00007f50e4d9e159 [ 522.165307][T13365] RDX: 0000000000000015 RSI: 0000000000000081 RDI: 0000000000000000 [ 522.165316][T13365] RBP: 00007f50e4e3506b R08: 0000000000000000 R09: 0000000000000000 [ 522.165325][T13365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 522.165333][T13365] R13: 00007f50e5026038 R14: 00007f50e5025fa0 R15: 00007ffc23aa59f8 [ 522.165354][T13365] [ 524.547902][T13399] ubi0: attaching mtd0 [ 524.549098][T13399] ubi0: scanning is finished [ 524.737803][T13399] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 524.737822][T13399] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 524.737834][T13399] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 524.737846][T13399] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 524.737857][T13399] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 524.737868][T13399] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 524.737880][T13399] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1245500923 [ 524.737893][T13399] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 524.737945][T13402] ubi0: detaching mtd0 [ 524.845876][T13402] ubi0: mtd0 is detached [ 529.980530][T13483] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 530.439728][T13485] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1439'. [ 538.361970][T13604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1460'. [ 538.488868][T13604] netlink: 'syz.1.1460': attribute type 1 has an invalid length. [ 538.488884][T13604] netlink: 'syz.1.1460': attribute type 6 has an invalid length. [ 541.538870][T13638] [U] ^\ [ 541.930854][T13647] random: crng reseeded on system resumption [ 544.598932][T13701] ubi0: attaching mtd0 [ 544.616302][T13701] ubi0: scanning is finished [ 544.748654][T13701] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 544.748673][T13701] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 544.748685][T13701] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 544.748696][T13701] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 544.748708][T13701] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 544.748720][T13701] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 544.748732][T13701] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1245500923 [ 544.748746][T13701] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 544.748821][T13710] ubi0: background thread "ubi_bgt0d" started, PID 13710 [ 544.750086][T13705] ubi0: detaching mtd0 [ 544.874774][T13713] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 544.900850][T13705] ubi0: mtd0 is detached [ 546.245118][T13735] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1482'. [ 548.910949][T13772] netlink: 186 bytes leftover after parsing attributes in process `syz.0.1497'. [ 549.112229][T13779] capability: warning: `syz.0.1491' uses deprecated v2 capabilities in a way that may be insecure [ 549.213348][T13776] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 555.324206][T13868] netlink: 'syz.2.1516': attribute type 21 has an invalid length. [ 555.324222][T13868] netlink: 'syz.2.1516': attribute type 3 has an invalid length. [ 555.324231][T13868] netlink: 306 bytes leftover after parsing attributes in process `syz.2.1516'. [ 557.612781][ T31] audit: type=1807 audit(4294967374.694:5): UNKNOWN=Ï res=0 [ 557.641348][ T31] audit: type=1802 audit(4294967374.724:6): pid=13920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.1513" res=0 errno=0 [ 558.137518][T13897] ima: policy update failed [ 558.138135][ T31] audit: type=1802 audit(4294967375.224:7): pid=13897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1513" res=0 errno=0 [ 558.691760][T13927] ubi0: attaching mtd0 [ 558.717252][T13927] ubi0: scanning is finished [ 558.910738][T13927] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 558.910759][T13927] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 558.910771][T13927] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 558.910782][T13927] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 558.910794][T13927] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 558.910805][T13927] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 558.910817][T13927] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1245500923 [ 558.910831][T13927] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 558.910889][T13928] ubi0: detaching mtd0 [ 559.007403][T13928] ubi0: mtd0 is detached [ 559.294800][T13932] FAULT_INJECTION: forcing a failure. [ 559.294800][T13932] name failslab, interval 1, probability 0, space 0, times 0 [ 559.294825][T13932] CPU: 0 UID: 0 PID: 13932 Comm: syz.2.1517 Tainted: G L syzkaller #0 PREEMPT(full) [ 559.294845][T13932] Tainted: [L]=SOFTLOCKUP [ 559.294851][T13932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 559.294860][T13932] Call Trace: [ 559.294865][T13932] [ 559.294871][T13932] dump_stack_lvl+0x100/0x190 [ 559.294895][T13932] should_fail_ex.cold+0x5/0xa [ 559.294915][T13932] should_failslab+0xc2/0x120 [ 559.294937][T13932] __kmalloc_cache_noprof+0x91/0x6d0 [ 559.294957][T13932] ? kvm_dev_ioctl+0xb48/0x1b50 [ 559.295000][T13932] kvm_dev_ioctl+0xb48/0x1b50 [ 559.295022][T13932] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 559.295040][T13932] ? __fget_files+0x21f/0x3d0 [ 559.295068][T13932] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 559.295086][T13932] __x64_sys_ioctl+0x18e/0x210 [ 559.295104][T13932] do_syscall_64+0x121/0x770 [ 559.295125][T13932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.295140][T13932] RIP: 0033:0x7f318839e159 [ 559.295153][T13932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 559.295167][T13932] RSP: 002b:00007f31892ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 559.295182][T13932] RAX: ffffffffffffffda RBX: 00007f3188625fa0 RCX: 00007f318839e159 [ 559.295192][T13932] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000002 [ 559.295201][T13932] RBP: 00007f318843506b R08: 0000000000000000 R09: 0000000000000000 [ 559.295210][T13932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 559.295218][T13932] R13: 00007f3188626038 R14: 00007f3188625fa0 R15: 00007ffeeb317588 [ 559.295237][T13932] [ 562.912285][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.912323][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.763999][T14000] mmap: syz.0.1529 (14000) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 564.161740][T14004] HfR: entered promiscuous mode [ 565.340489][T14018] random: crng reseeded on system resumption [ 565.352389][T14018] FAULT_INJECTION: forcing a failure. [ 565.352389][T14018] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 565.352415][T14018] CPU: 0 UID: 0 PID: 14018 Comm: syz.3.1533 Tainted: G L syzkaller #0 PREEMPT(full) [ 565.352436][T14018] Tainted: [L]=SOFTLOCKUP [ 565.352441][T14018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 565.352450][T14018] Call Trace: [ 565.352456][T14018] [ 565.352462][T14018] dump_stack_lvl+0x100/0x190 [ 565.352493][T14018] should_fail_ex.cold+0x5/0xa [ 565.352511][T14018] ? prepare_alloc_pages+0x16d/0x5b0 [ 565.352606][T14018] should_fail_alloc_page+0xeb/0x140 [ 565.352630][T14018] prepare_alloc_pages+0x1f0/0x5b0 [ 565.352651][T14018] ? unwind_get_return_address+0x59/0xa0 [ 565.352685][T14018] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 565.352732][T14018] ? stack_trace_save+0x8e/0xc0 [ 565.352759][T14018] ? __pfx_stack_trace_save+0x10/0x10 [ 565.352779][T14018] ? stack_depot_save_flags+0x27/0x9f0 [ 565.352824][T14018] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 565.352842][T14018] ? kasan_save_stack+0x3f/0x50 [ 565.352883][T14018] ? kasan_save_track+0x14/0x30 [ 565.352902][T14018] ? __kasan_kmalloc+0xaa/0xb0 [ 565.352920][T14018] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 565.352936][T14018] ? memory_bm_create+0x12c/0xcf0 [ 565.352952][T14018] ? create_basic_memory_bitmaps+0x10b/0x350 [ 565.352970][T14018] ? snapshot_open+0x23b/0x2b0 [ 565.352988][T14018] ? misc_open+0x26d/0x450 [ 565.353037][T14018] ? chrdev_open+0x234/0x6a0 [ 565.353056][T14018] ? do_dentry_open+0x6ab/0x14d0 [ 565.353074][T14018] ? vfs_open+0x82/0x3f0 [ 565.353120][T14018] ? path_openat+0x19fa/0x2440 [ 565.353140][T14018] ? do_file_open+0x20e/0x430 [ 565.353159][T14018] ? do_sys_openat2+0x10f/0x1e0 [ 565.353181][T14018] ? __x64_sys_openat+0x12d/0x210 [ 565.353194][T14018] ? do_syscall_64+0x121/0x770 [ 565.353211][T14018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.353243][T14018] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 565.353268][T14018] ? policy_nodemask+0xed/0x4f0 [ 565.353334][T14018] alloc_pages_mpol+0x201/0x550 [ 565.353357][T14018] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 565.353381][T14018] ? kasan_save_track+0x14/0x30 [ 565.353400][T14018] ? __kasan_kmalloc+0xaa/0xb0 [ 565.353422][T14018] alloc_pages_noprof+0x1a/0x160 [ 565.353438][T14018] get_zeroed_page_noprof+0x18/0xb0 [ 565.353459][T14018] get_image_page+0x18/0x1a0 [ 565.353493][T14018] memory_bm_create+0x66a/0xcf0 [ 565.353520][T14018] create_basic_memory_bitmaps+0x10b/0x350 [ 565.353542][T14018] snapshot_open+0x23b/0x2b0 [ 565.353562][T14018] ? __pfx_snapshot_open+0x10/0x10 [ 565.353583][T14018] misc_open+0x26d/0x450 [ 565.353603][T14018] ? __pfx_misc_open+0x10/0x10 [ 565.353622][T14018] chrdev_open+0x234/0x6a0 [ 565.353641][T14018] ? __pfx_apparmor_file_open+0x10/0x10 [ 565.353700][T14018] ? __pfx_chrdev_open+0x10/0x10 [ 565.353722][T14018] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 565.353777][T14018] do_dentry_open+0x6ab/0x14d0 [ 565.353795][T14018] ? __pfx_chrdev_open+0x10/0x10 [ 565.353820][T14018] vfs_open+0x82/0x3f0 [ 565.353845][T14018] path_openat+0x19fa/0x2440 [ 565.353867][T14018] ? __pfx_path_openat+0x10/0x10 [ 565.353893][T14018] do_file_open+0x20e/0x430 [ 565.353914][T14018] ? __pfx_do_file_open+0x10/0x10 [ 565.353947][T14018] ? _raw_spin_unlock+0x28/0x50 [ 565.353962][T14018] ? alloc_fd+0x471/0x7a0 [ 565.353987][T14018] do_sys_openat2+0x10f/0x1e0 [ 565.354009][T14018] ? __pfx_do_sys_openat2+0x10/0x10 [ 565.354033][T14018] ? __fget_files+0x21f/0x3d0 [ 565.354055][T14018] __x64_sys_openat+0x12d/0x210 [ 565.354070][T14018] ? __pfx___x64_sys_openat+0x10/0x10 [ 565.354092][T14018] do_syscall_64+0x121/0x770 [ 565.354111][T14018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.354127][T14018] RIP: 0033:0x7f50e4d9e159 [ 565.354140][T14018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.354154][T14018] RSP: 002b:00007f50e5b98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 565.354170][T14018] RAX: ffffffffffffffda RBX: 00007f50e5025fa0 RCX: 00007f50e4d9e159 [ 565.354179][T14018] RDX: 0000000000002401 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 565.354189][T14018] RBP: 00007f50e4e3506b R08: 0000000000000000 R09: 0000000000000000 [ 565.354198][T14018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 565.354207][T14018] R13: 00007f50e5026038 R14: 00007f50e5025fa0 R15: 00007ffc23aa59f8 [ 565.354229][T14018] [ 568.446823][T14065] netlink: 504 bytes leftover after parsing attributes in process `syz.0.1541'. [ 568.448051][T14065] netlink: 350 bytes leftover after parsing attributes in process `syz.0.1541'. [ 572.160909][T14135] sd 0:0:1:0: PR command failed: 1026 [ 572.160941][T14135] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 572.160968][T14135] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 575.806208][T14167] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1554'. [ 577.803517][T14206] binder: BINDER_SET_CONTEXT_MGR already set [ 577.803528][T14206] binder: 14198:14206 ioctl 4018620d 4 returned -16 [ 578.698395][T14219] [U] ^\ [ 582.786712][T14275] FAULT_INJECTION: forcing a failure. [ 582.786712][T14275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 582.786742][T14275] CPU: 0 UID: 0 PID: 14275 Comm: syz.0.1581 Tainted: G L syzkaller #0 PREEMPT(full) [ 582.786775][T14275] Tainted: [L]=SOFTLOCKUP [ 582.786780][T14275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 582.786788][T14275] Call Trace: [ 582.786793][T14275] [ 582.786799][T14275] dump_stack_lvl+0x100/0x190 [ 582.786824][T14275] should_fail_ex.cold+0x5/0xa [ 582.786844][T14275] _copy_from_user+0x2e/0xd0 [ 582.786968][T14275] restore_altstack+0x98/0x170 [ 582.786986][T14275] ? __pfx_restore_altstack+0x10/0x10 [ 582.787004][T14275] ? _raw_spin_unlock_irq+0x23/0x50 [ 582.787020][T14275] ? lockdep_hardirqs_on+0x7d/0x110 [ 582.787037][T14275] ? _raw_spin_unlock_irq+0x2e/0x50 [ 582.787054][T14275] __do_sys_rt_sigreturn+0x1ab/0x2c0 [ 582.787075][T14275] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 582.787101][T14275] do_syscall_64+0x121/0x770 [ 582.787120][T14275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.787136][T14275] RIP: 0033:0x7f5c4613f4d9 [ 582.787149][T14275] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 582.787162][T14275] RSP: 002b:00007f5c43bf1a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 582.787177][T14275] RAX: ffffffffffffffda RBX: 00007f5c46426360 RCX: 00007f5c4613f4d9 [ 582.787187][T14275] RDX: 00007f5c43bf1a80 RSI: 00007f5c43bf1bb0 RDI: 0000000000000021 [ 582.787197][T14275] RBP: 00007f5c4623506b R08: 0000000000000000 R09: 0000000000000000 [ 582.787205][T14275] R10: 0000200000000340 R11: 0000000000000202 R12: 0000000000000000 [ 582.787214][T14275] R13: 00007f5c464263f8 R14: 00007f5c46426360 R15: 00007fffd719fd28 [ 582.787233][T14275] [ 583.041521][T14280] FAULT_INJECTION: forcing a failure. [ 583.041521][T14280] name failslab, interval 1, probability 0, space 0, times 0 [ 583.041548][T14280] CPU: 0 UID: 0 PID: 14280 Comm: syz.2.1574 Tainted: G L syzkaller #0 PREEMPT(full) [ 583.041570][T14280] Tainted: [L]=SOFTLOCKUP [ 583.041576][T14280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 583.041585][T14280] Call Trace: [ 583.041591][T14280] [ 583.041596][T14280] dump_stack_lvl+0x100/0x190 [ 583.041624][T14280] should_fail_ex.cold+0x5/0xa [ 583.041645][T14280] should_failslab+0xc2/0x120 [ 583.041668][T14280] __kmalloc_cache_noprof+0x91/0x6d0 [ 583.041685][T14280] ? sget_fc+0xb19/0x1f70 [ 583.041705][T14280] sget_fc+0xb19/0x1f70 [ 583.041726][T14280] ? __pfx_set_anon_super_fc+0x10/0x10 [ 583.041742][T14280] ? __pfx_sget_fc+0x10/0x10 [ 583.041757][T14280] ? refcount_dec_not_one+0x136/0x1c0 [ 583.041778][T14280] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 583.041797][T14280] ? __kasan_kmalloc+0xaa/0xb0 [ 583.041817][T14280] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 583.041832][T14280] ? __kasan_kmalloc+0xaa/0xb0 [ 583.041862][T14280] ? __pfx_mqueue_fill_super+0x10/0x10 [ 583.041956][T14280] get_tree_nodev+0x28/0x190 [ 583.041974][T14280] mqueue_get_tree+0xf1/0x130 [ 583.041995][T14280] vfs_get_tree+0x92/0x320 [ 583.042010][T14280] fc_mount_longterm+0x1a/0x270 [ 583.042029][T14280] mq_init_ns+0x482/0x820 [ 583.042076][T14280] copy_ipcs+0x3dd/0x7e0 [ 583.042091][T14280] create_new_namespaces+0x20a/0xac0 [ 583.042115][T14280] ? security_capable+0x80/0x260 [ 583.042178][T14280] copy_namespaces+0x468/0x5e0 [ 583.042202][T14280] copy_process+0x395c/0x8380 [ 583.042228][T14280] ? __pfx_copy_process+0x10/0x10 [ 583.042248][T14280] ? _copy_from_user+0x59/0xd0 [ 583.042272][T14280] kernel_clone+0x176/0x9d0 [ 583.042287][T14280] ? __pfx_kernel_clone+0x10/0x10 [ 583.042313][T14280] __do_sys_clone3+0x214/0x290 [ 583.042327][T14280] ? __pfx___do_sys_clone3+0x10/0x10 [ 583.042366][T14280] do_syscall_64+0x121/0x770 [ 583.042387][T14280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.042403][T14280] RIP: 0033:0x7f318839e159 [ 583.042416][T14280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 583.042431][T14280] RSP: 002b:00007f31892edef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 583.042447][T14280] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f318839e159 [ 583.042458][T14280] RDX: 00007f31892edf10 RSI: 0000000000000058 RDI: 00007f31892edf10 [ 583.042468][T14280] RBP: 00007f318843506b R08: 0000000000000000 R09: 0000000000000058 [ 583.042477][T14280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 583.042486][T14280] R13: 00007f3188626038 R14: 00007f3188625fa0 R15: 00007ffeeb317588 [ 583.042506][T14280] [ 584.474141][T14287] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1577'. [ 589.325492][T14401] serio: Serial port pty37 [ 593.918972][T14485] netlink: 246 bytes leftover after parsing attributes in process `syz.2.1603'. [ 594.052078][T14493] random: crng reseeded on system resumption [ 594.074345][T14493] FAULT_INJECTION: forcing a failure. [ 594.074345][T14493] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 594.074371][T14493] CPU: 0 UID: 0 PID: 14493 Comm: syz.0.1606 Tainted: G L syzkaller #0 PREEMPT(full) [ 594.074394][T14493] Tainted: [L]=SOFTLOCKUP [ 594.074400][T14493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 594.074409][T14493] Call Trace: [ 594.074414][T14493] [ 594.074420][T14493] dump_stack_lvl+0x100/0x190 [ 594.074444][T14493] should_fail_ex.cold+0x5/0xa [ 594.074462][T14493] ? prepare_alloc_pages+0x16d/0x5b0 [ 594.074486][T14493] should_fail_alloc_page+0xeb/0x140 [ 594.074509][T14493] prepare_alloc_pages+0x1f0/0x5b0 [ 594.074530][T14493] ? unwind_get_return_address+0x59/0xa0 [ 594.074552][T14493] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 594.074575][T14493] ? stack_trace_save+0x8e/0xc0 [ 594.074595][T14493] ? __pfx_stack_trace_save+0x10/0x10 [ 594.074618][T14493] ? stack_depot_save_flags+0x27/0x9f0 [ 594.074637][T14493] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 594.074655][T14493] ? kasan_save_stack+0x3f/0x50 [ 594.074673][T14493] ? kasan_save_track+0x14/0x30 [ 594.074692][T14493] ? __kasan_kmalloc+0xaa/0xb0 [ 594.074710][T14493] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 594.074727][T14493] ? memory_bm_create+0x12c/0xcf0 [ 594.074743][T14493] ? create_basic_memory_bitmaps+0x10b/0x350 [ 594.074760][T14493] ? snapshot_open+0x23b/0x2b0 [ 594.074779][T14493] ? misc_open+0x26d/0x450 [ 594.074797][T14493] ? chrdev_open+0x234/0x6a0 [ 594.074816][T14493] ? do_dentry_open+0x6ab/0x14d0 [ 594.074840][T14493] ? vfs_open+0x82/0x3f0 [ 594.074862][T14493] ? path_openat+0x19fa/0x2440 [ 594.074881][T14493] ? do_file_open+0x20e/0x430 [ 594.074900][T14493] ? do_sys_openat2+0x10f/0x1e0 [ 594.074921][T14493] ? __x64_sys_openat+0x12d/0x210 [ 594.074934][T14493] ? do_syscall_64+0x121/0x770 [ 594.074951][T14493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.074978][T14493] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 594.075004][T14493] ? policy_nodemask+0xed/0x4f0 [ 594.075028][T14493] alloc_pages_mpol+0x201/0x550 [ 594.075051][T14493] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 594.075073][T14493] ? kasan_save_track+0x14/0x30 [ 594.075091][T14493] ? __kasan_kmalloc+0xaa/0xb0 [ 594.075113][T14493] alloc_pages_noprof+0x1a/0x160 [ 594.075129][T14493] get_zeroed_page_noprof+0x18/0xb0 [ 594.075149][T14493] get_image_page+0x18/0x1a0 [ 594.075167][T14493] memory_bm_create+0x66a/0xcf0 [ 594.075191][T14493] create_basic_memory_bitmaps+0x10b/0x350 [ 594.075213][T14493] snapshot_open+0x23b/0x2b0 [ 594.075232][T14493] ? __pfx_snapshot_open+0x10/0x10 [ 594.075252][T14493] misc_open+0x26d/0x450 [ 594.075271][T14493] ? __pfx_misc_open+0x10/0x10 [ 594.075291][T14493] chrdev_open+0x234/0x6a0 [ 594.075309][T14493] ? __pfx_apparmor_file_open+0x10/0x10 [ 594.075327][T14493] ? __pfx_chrdev_open+0x10/0x10 [ 594.075348][T14493] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 594.075375][T14493] do_dentry_open+0x6ab/0x14d0 [ 594.075393][T14493] ? __pfx_chrdev_open+0x10/0x10 [ 594.075418][T14493] vfs_open+0x82/0x3f0 [ 594.075442][T14493] path_openat+0x19fa/0x2440 [ 594.075464][T14493] ? __pfx_path_openat+0x10/0x10 [ 594.075490][T14493] do_file_open+0x20e/0x430 [ 594.075511][T14493] ? __pfx_do_file_open+0x10/0x10 [ 594.075544][T14493] ? _raw_spin_unlock+0x28/0x50 [ 594.075559][T14493] ? alloc_fd+0x471/0x7a0 [ 594.075584][T14493] do_sys_openat2+0x10f/0x1e0 [ 594.075606][T14493] ? __pfx_do_sys_openat2+0x10/0x10 [ 594.075631][T14493] ? __fget_files+0x21f/0x3d0 [ 594.075653][T14493] __x64_sys_openat+0x12d/0x210 [ 594.075668][T14493] ? __pfx___x64_sys_openat+0x10/0x10 [ 594.075690][T14493] do_syscall_64+0x121/0x770 [ 594.075709][T14493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.075725][T14493] RIP: 0033:0x7f5c4619e159 [ 594.075739][T14493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 594.075753][T14493] RSP: 002b:00007f5c46fe1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 594.075769][T14493] RAX: ffffffffffffffda RBX: 00007f5c46425fa0 RCX: 00007f5c4619e159 [ 594.075780][T14493] RDX: 0000000000002401 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 594.075789][T14493] RBP: 00007f5c4623506b R08: 0000000000000000 R09: 0000000000000000 [ 594.075799][T14493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 594.075808][T14493] R13: 00007f5c46426038 R14: 00007f5c46425fa0 R15: 00007fffd719fd28 [ 594.075837][T14493] [ 595.069390][T14510] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 599.280439][T14575] serio: Serial port pty37 [ 600.826035][T14607] netlink: 'syz.1.1632': attribute type 2 has an invalid length. [ 600.826052][T14607] netlink: 'syz.1.1632': attribute type 3 has an invalid length. [ 600.826062][T14607] netlink: 158 bytes leftover after parsing attributes in process `syz.1.1632'. [ 600.870656][T14607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1632'. [ 601.659263][ T31] audit: type=1807 audit(4294967418.744:8): UNKNOWN=Í res=0 [ 601.659295][ T31] audit: type=1802 audit(4294967418.744:9): pid=14623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.1627" res=0 errno=0 [ 602.442510][T14613] ima: policy update failed [ 602.442610][ T31] audit: type=1802 audit(4294967419.524:10): pid=14613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1627" res=0 errno=0 [ 603.376340][T14660] FAULT_INJECTION: forcing a failure. [ 603.376340][T14660] name failslab, interval 1, probability 0, space 0, times 0 [ 603.376368][T14660] CPU: 0 UID: 0 PID: 14660 Comm: syz.0.1636 Tainted: G L syzkaller #0 PREEMPT(full) [ 603.376390][T14660] Tainted: [L]=SOFTLOCKUP [ 603.376396][T14660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 603.376405][T14660] Call Trace: [ 603.376410][T14660] [ 603.376416][T14660] dump_stack_lvl+0x100/0x190 [ 603.376442][T14660] should_fail_ex.cold+0x5/0xa [ 603.376463][T14660] should_failslab+0xc2/0x120 [ 603.376486][T14660] __kmalloc_cache_noprof+0x91/0x6d0 [ 603.376504][T14660] ? trace_pid_list_alloc+0x232/0x480 [ 603.376530][T14660] trace_pid_list_alloc+0x232/0x480 [ 603.376554][T14660] trace_pid_write+0x110/0x460 [ 603.376576][T14660] ? __pfx_trace_pid_write+0x10/0x10 [ 603.376600][T14660] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 603.376631][T14660] event_pid_write.isra.0+0x1e4/0x7d0 [ 603.376656][T14660] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 603.376685][T14660] vfs_write+0x2aa/0x1050 [ 603.376704][T14660] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 603.376728][T14660] ? lock_acquire+0x1d1/0x380 [ 603.376748][T14660] ? __fget_files+0x34/0x3d0 [ 603.376766][T14660] ? __pfx_vfs_write+0x10/0x10 [ 603.376782][T14660] ? find_held_lock+0x2b/0x80 [ 603.376800][T14660] ? __fget_files+0x215/0x3d0 [ 603.376822][T14660] ? __fget_files+0x21f/0x3d0 [ 603.376852][T14660] ksys_write+0x12a/0x250 [ 603.376870][T14660] ? __pfx_ksys_write+0x10/0x10 [ 603.376894][T14660] do_syscall_64+0x121/0x770 [ 603.376914][T14660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.376930][T14660] RIP: 0033:0x7f5c4619e159 [ 603.376944][T14660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 603.376958][T14660] RSP: 002b:00007f5c46fe1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 603.376973][T14660] RAX: ffffffffffffffda RBX: 00007f5c46425fa0 RCX: 00007f5c4619e159 [ 603.376983][T14660] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 603.376993][T14660] RBP: 00007f5c4623506b R08: 0000000000000000 R09: 0000000000000000 [ 603.377002][T14660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 603.377018][T14660] R13: 00007f5c46426038 R14: 00007f5c46425fa0 R15: 00007fffd719fd28 [ 603.377039][T14660] [ 605.421781][T14682] HfR: entered promiscuous mode [ 607.746671][ T4933] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 608.026728][ T4933] Bluetooth: hci1: unexpected event 0x05 length: 6 > 4 [ 608.523745][T14736] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input12 [ 609.735355][T14751] openvswitch: HfR: Dropping previously announced user features [ 609.784939][ T5621] Bluetooth: hci1: command tx timeout [ 612.233578][T14790] snd_virmidi snd_virmidi.0: control 61678:131081:1:y»:1033 is already present [ 616.032657][T14849] vivid-008: ================= START STATUS ================= [ 616.032736][T14849] vivid-008: ================== END STATUS ================== [ 616.238470][T14854] vhci_hcd vhci_hcd.2: invalid port number 16 [ 616.238491][T14854] vhci_hcd vhci_hcd.2: invalid port number 16 [ 619.115561][T14895] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1679'. [ 620.290727][T14920] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1685'. [ 620.468774][T14923] FAULT_INJECTION: forcing a failure. [ 620.468774][T14923] name failslab, interval 1, probability 0, space 0, times 0 [ 620.468805][T14923] CPU: 0 UID: 0 PID: 14923 Comm: syz.1.1686 Tainted: G L syzkaller #0 PREEMPT(full) [ 620.468826][T14923] Tainted: [L]=SOFTLOCKUP [ 620.468832][T14923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 620.468842][T14923] Call Trace: [ 620.468847][T14923] [ 620.468853][T14923] dump_stack_lvl+0x100/0x190 [ 620.468879][T14923] should_fail_ex.cold+0x5/0xa [ 620.468903][T14923] should_failslab+0xc2/0x120 [ 620.468926][T14923] __kmalloc_cache_noprof+0x91/0x6d0 [ 620.468944][T14923] ? trace_pid_list_alloc+0x232/0x480 [ 620.468969][T14923] trace_pid_list_alloc+0x232/0x480 [ 620.468994][T14923] trace_pid_write+0x110/0x460 [ 620.469017][T14923] ? __pfx_trace_pid_write+0x10/0x10 [ 620.469041][T14923] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 620.469071][T14923] event_pid_write.isra.0+0x1e4/0x7d0 [ 620.469095][T14923] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 620.469125][T14923] vfs_write+0x2aa/0x1050 [ 620.469143][T14923] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 620.469167][T14923] ? lock_acquire+0x1d1/0x380 [ 620.469188][T14923] ? __fget_files+0x34/0x3d0 [ 620.469207][T14923] ? __pfx_vfs_write+0x10/0x10 [ 620.469223][T14923] ? find_held_lock+0x2b/0x80 [ 620.469240][T14923] ? __fget_files+0x215/0x3d0 [ 620.469262][T14923] ? __fget_files+0x21f/0x3d0 [ 620.469286][T14923] ksys_write+0x12a/0x250 [ 620.469303][T14923] ? __pfx_ksys_write+0x10/0x10 [ 620.469330][T14923] do_syscall_64+0x121/0x770 [ 620.469350][T14923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.469366][T14923] RIP: 0033:0x7fc97919e159 [ 620.469387][T14923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.469402][T14923] RSP: 002b:00007fc97a14c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 620.469418][T14923] RAX: ffffffffffffffda RBX: 00007fc979425fa0 RCX: 00007fc97919e159 [ 620.469428][T14923] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 620.469438][T14923] RBP: 00007fc97923506b R08: 0000000000000000 R09: 0000000000000000 [ 620.469448][T14923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 620.469457][T14923] R13: 00007fc979426038 R14: 00007fc979425fa0 R15: 00007ffeeeed57e8 [ 620.469478][T14923] [ 624.350540][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.350596][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.490019][T15004] HfR: entered promiscuous mode [ 632.318766][T15106] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1721'. [ 634.612076][T15149] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input14 [ 641.079732][T15258] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1745'. [ 643.538670][ T31] audit: type=1807 audit(4294967460.624:11): UNKNOWN=ë res=0 [ 643.539529][ T31] audit: type=1802 audit(4294967460.624:12): pid=15292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.1752" res=0 errno=0 [ 643.880257][T15281] ima: policy update failed [ 643.881404][ T31] audit: type=1802 audit(4294967460.964:13): pid=15281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1752" res=0 errno=0 [ 647.068777][T15365] FAULT_INJECTION: forcing a failure. [ 647.068777][T15365] name failslab, interval 1, probability 0, space 0, times 0 [ 647.068804][T15365] CPU: 0 UID: 0 PID: 15365 Comm: syz.2.1761 Tainted: G L syzkaller #0 PREEMPT(full) [ 647.068826][T15365] Tainted: [L]=SOFTLOCKUP [ 647.068832][T15365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 647.068842][T15365] Call Trace: [ 647.068847][T15365] [ 647.068854][T15365] dump_stack_lvl+0x100/0x190 [ 647.068880][T15365] should_fail_ex.cold+0x5/0xa [ 647.068901][T15365] should_failslab+0xc2/0x120 [ 647.068930][T15365] kmem_cache_alloc_noprof+0x92/0x6a0 [ 647.068952][T15365] ? skb_clone+0x190/0x400 [ 647.069040][T15365] skb_clone+0x190/0x400 [ 647.069056][T15365] netlink_broadcast_filtered+0xb22/0xf20 [ 647.069127][T15365] netlink_broadcast+0x39/0x50 [ 647.069149][T15365] kobject_uevent_env+0xcdd/0x18b0 [ 647.069173][T15365] kvm_uevent_notify_change.part.0+0x3a6/0x450 [ 647.069193][T15365] ? __pfx_kvm_vm_release+0x10/0x10 [ 647.069209][T15365] kvm_put_kvm+0xf9/0xc10 [ 647.069224][T15365] ? lockdep_hardirqs_on+0x7d/0x110 [ 647.069242][T15365] ? _raw_spin_unlock_irq+0x2e/0x50 [ 647.069258][T15365] ? kvm_irqfd_release+0xd3/0x110 [ 647.069276][T15365] ? __pfx_kvm_vm_release+0x10/0x10 [ 647.069293][T15365] kvm_vm_release+0x3c/0x50 [ 647.069307][T15365] __fput+0x3ff/0xb50 [ 647.069330][T15365] ? _raw_spin_unlock_irq+0x23/0x50 [ 647.069347][T15365] task_work_run+0x150/0x240 [ 647.069367][T15365] ? __pfx_task_work_run+0x10/0x10 [ 647.069391][T15365] exit_to_user_mode_loop+0x1d8/0x700 [ 647.069406][T15365] ? rcu_is_watching+0x13/0xc0 [ 647.069425][T15365] do_syscall_64+0x603/0x770 [ 647.069444][T15365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.069460][T15365] RIP: 0033:0x7f318839e159 [ 647.069474][T15365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.069489][T15365] RSP: 002b:00007f31892cd028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 647.069504][T15365] RAX: 0000000000000000 RBX: 00007f3188626090 RCX: 00007f318839e159 [ 647.069515][T15365] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000002 [ 647.069524][T15365] RBP: 00007f318843506b R08: 0000000000000000 R09: 0000000000000000 [ 647.069534][T15365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 647.069543][T15365] R13: 00007f3188626128 R14: 00007f3188626090 R15: 00007ffeeb317588 [ 647.069564][T15365] [ 652.736393][ T59] netdevsim netdevsim1335 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.006719][T15425] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1771'. [ 657.941950][T15480] vivid-008: ================= START STATUS ================= [ 657.941964][T15480] vivid-008: ================== END STATUS ================== [ 658.194635][T15488] vhci_hcd vhci_hcd.2: invalid port number 16 [ 658.194654][T15488] vhci_hcd vhci_hcd.2: invalid port number 16 [ 664.900026][T15557] vivid-008: ================= START STATUS ================= [ 664.900042][T15557] vivid-008: ================== END STATUS ================== [ 665.135364][T15563] loop6: detected capacity change from 0 to 2097152 [ 665.217374][T15568] vhci_hcd vhci_hcd.2: invalid port number 16 [ 665.217393][T15568] vhci_hcd vhci_hcd.2: invalid port number 16 [ 666.501655][T15595] syz.0.1799 (15595): /proc/15591/oom_adj is deprecated, please use /proc/15591/oom_score_adj instead. [ 667.200728][T15604] FAULT_INJECTION: forcing a failure. [ 667.200728][T15604] name failslab, interval 1, probability 0, space 0, times 0 [ 667.200758][T15604] CPU: 0 UID: 0 PID: 15604 Comm: syz.1.1800 Tainted: G L syzkaller #0 PREEMPT(full) [ 667.200780][T15604] Tainted: [L]=SOFTLOCKUP [ 667.200786][T15604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 667.200796][T15604] Call Trace: [ 667.200801][T15604] [ 667.200807][T15604] dump_stack_lvl+0x100/0x190 [ 667.200833][T15604] should_fail_ex.cold+0x5/0xa [ 667.200854][T15604] should_failslab+0xc2/0x120 [ 667.200876][T15604] __kmalloc_noprof+0xfc/0x840 [ 667.200895][T15604] ? vb2_core_allocated_buffers_storage+0x184/0x220 [ 667.200986][T15604] vb2_core_allocated_buffers_storage+0x184/0x220 [ 667.201010][T15604] vb2_core_reqbufs+0x382/0xf30 [ 667.201035][T15604] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 667.201071][T15604] ? __vb2_init_fileio+0x18f/0x1000 [ 667.201095][T15604] __vb2_init_fileio+0x32d/0x1000 [ 667.201116][T15604] ? lockdep_hardirqs_on+0x7d/0x110 [ 667.201136][T15604] ? __pollwait+0x276/0x490 [ 667.201157][T15604] vb2_core_poll+0x611/0x740 [ 667.201179][T15604] vb2_poll+0x4b/0xe0 [ 667.201197][T15604] vb2_fop_poll+0x10e/0x350 [ 667.201217][T15604] ? __pfx_vb2_fop_poll+0x10/0x10 [ 667.201236][T15604] v4l2_poll+0x15f/0x220 [ 667.201284][T15604] ? __pfx_v4l2_poll+0x10/0x10 [ 667.201301][T15604] do_sys_poll+0x6e5/0xe90 [ 667.201318][T15604] ? rcu_is_watching+0x13/0xc0 [ 667.201343][T15604] ? __pfx_do_sys_poll+0x10/0x10 [ 667.201378][T15604] ? __futex_wait+0x256/0x300 [ 667.201399][T15604] ? __pfx___pollwait+0x10/0x10 [ 667.201419][T15604] ? __pfx_pollwake+0x10/0x10 [ 667.201466][T15604] ? ktime_get_ts64+0x306/0x420 [ 667.201497][T15604] ? ktime_get_ts64+0x318/0x420 [ 667.201519][T15604] ? ktime_get_ts64+0x257/0x420 [ 667.201547][T15604] __x64_sys_poll+0x1b3/0x420 [ 667.201567][T15604] ? __pfx___x64_sys_poll+0x10/0x10 [ 667.201591][T15604] do_syscall_64+0x121/0x770 [ 667.201611][T15604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.201627][T15604] RIP: 0033:0x7fc97919e159 [ 667.201640][T15604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 667.201655][T15604] RSP: 002b:00007fc97a0a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 667.201671][T15604] RAX: ffffffffffffffda RBX: 00007fc979426450 RCX: 00007fc97919e159 [ 667.201682][T15604] RDX: 0000000000000007 RSI: 0000000000000003 RDI: 0000200000000480 [ 667.201692][T15604] RBP: 00007fc97923506b R08: 0000000000000000 R09: 0000000000000000 [ 667.201702][T15604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 667.201711][T15604] R13: 00007fc9794264e8 R14: 00007fc979426450 R15: 00007ffeeeed57e8 [ 667.201732][T15604] syzkaller syzkaller login: [ 670.433027][T15634] FAULT_INJECTION: forcing a failure. [ 670.433027][T15634] name failslab, interval 1, probability 0, space 0, times 0 [ 670.433054][T15634] CPU: 0 UID: 0 PID: 15634 Comm: syz.0.1805 Tainted: G L syzkaller #0 PREEMPT(full) [ 670.433076][T15634] Tainted: [L]=SOFTLOCKUP [ 670.433082][T15634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 670.433092][T15634] Call Trace: [ 670.433097][T15634] [ 670.433103][T15634] dump_stack_lvl+0x100/0x190 [ 670.433129][T15634] should_fail_ex.cold+0x5/0xa [ 670.433150][T15634] should_failslab+0xc2/0x120 [ 670.433172][T15634] kmem_cache_alloc_noprof+0x92/0x6a0 [ 670.433192][T15634] ? skb_clone+0x190/0x400 [ 670.433210][T15634] skb_clone+0x190/0x400 [ 670.433225][T15634] netlink_broadcast_filtered+0xb22/0xf20 [ 670.433255][T15634] netlink_broadcast+0x39/0x50 [ 670.433277][T15634] kobject_uevent_env+0xcdd/0x18b0 [ 670.433300][T15634] kvm_uevent_notify_change.part.0+0x3a6/0x450 [ 670.433320][T15634] ? __pfx_kvm_vm_release+0x10/0x10 [ 670.433336][T15634] kvm_put_kvm+0xf9/0xc10 [ 670.433351][T15634] ? lockdep_hardirqs_on+0x7d/0x110 [ 670.433370][T15634] ? _raw_spin_unlock_irq+0x2e/0x50 [ 670.433385][T15634] ? kvm_irqfd_release+0xd3/0x110 [ 670.433403][T15634] ? __pfx_kvm_vm_release+0x10/0x10 [ 670.433419][T15634] kvm_vm_release+0x3c/0x50 [ 670.433434][T15634] __fput+0x3ff/0xb50 [ 670.433456][T15634] ? _raw_spin_unlock_irq+0x23/0x50 [ 670.433473][T15634] task_work_run+0x150/0x240 [ 670.433493][T15634] ? __pfx_task_work_run+0x10/0x10 [ 670.433516][T15634] exit_to_user_mode_loop+0x1d8/0x700 [ 670.433532][T15634] ? rcu_is_watching+0x13/0xc0 [ 670.433550][T15634] do_syscall_64+0x603/0x770 [ 670.433575][T15634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.433591][T15634] RIP: 0033:0x7f5c4619e159 [ 670.433605][T15634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 670.433620][T15634] RSP: 002b:00007f5c46fc0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 670.433636][T15634] RAX: 0000000000000000 RBX: 00007f5c46426090 RCX: 00007f5c4619e159 [ 670.433645][T15634] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000002 [ 670.433654][T15634] RBP: 00007f5c4623506b R08: 0000000000000000 R09: 0000000000000000 [ 670.433664][T15634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 670.433673][T15634] R13: 00007f5c46426128 R14: 00007f5c46426090 R15: 00007fffd719fd28 [ 670.433695][T15634] [ 671.528826][T15641] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1814'. [ 674.499268][T15671] FAULT_INJECTION: forcing a failure. [ 674.499268][T15671] name failslab, interval 1, probability 0, space 0, times 0 [ 674.499297][T15671] CPU: 0 UID: 0 PID: 15671 Comm: syz.1.1811 Tainted: G L syzkaller #0 PREEMPT(full) [ 674.499321][T15671] Tainted: [L]=SOFTLOCKUP [ 674.499327][T15671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 674.499337][T15671] Call Trace: [ 674.499342][T15671] [ 674.499348][T15671] dump_stack_lvl+0x100/0x190 [ 674.499374][T15671] should_fail_ex.cold+0x5/0xa [ 674.499394][T15671] should_failslab+0xc2/0x120 [ 674.499424][T15671] kmem_cache_alloc_noprof+0x92/0x6a0 [ 674.499445][T15671] ? fc_mount_longterm+0xf1/0x270 [ 674.499462][T15671] ? alloc_vfsmnt+0x23/0x710 [ 674.499479][T15671] alloc_vfsmnt+0x23/0x710 [ 674.499494][T15671] fc_mount_longterm+0x154/0x270 [ 674.499511][T15671] mq_init_ns+0x482/0x820 [ 674.499535][T15671] copy_ipcs+0x3dd/0x7e0 [ 674.499550][T15671] create_new_namespaces+0x20a/0xac0 [ 674.499573][T15671] ? security_capable+0x80/0x260 [ 674.499596][T15671] copy_namespaces+0x468/0x5e0 [ 674.499619][T15671] copy_process+0x395c/0x8380 [ 674.499644][T15671] ? __pfx_copy_process+0x10/0x10 [ 674.499663][T15671] ? _copy_from_user+0x59/0xd0 [ 674.499686][T15671] kernel_clone+0x176/0x9d0 [ 674.499701][T15671] ? __pfx_kernel_clone+0x10/0x10 [ 674.499726][T15671] __do_sys_clone3+0x214/0x290 [ 674.499740][T15671] ? __pfx___do_sys_clone3+0x10/0x10 [ 674.499778][T15671] do_syscall_64+0x121/0x770 [ 674.499799][T15671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.499814][T15671] RIP: 0033:0x7fc97919e159 [ 674.499828][T15671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 674.499842][T15671] RSP: 002b:00007fc97a14bef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 674.499858][T15671] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fc97919e159 [ 674.499868][T15671] RDX: 00007fc97a14bf10 RSI: 0000000000000058 RDI: 00007fc97a14bf10 [ 674.499877][T15671] RBP: 00007fc97923506b R08: 0000000000000000 R09: 0000000000000058 [ 674.499886][T15671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 674.499895][T15671] R13: 00007fc979426038 R14: 00007fc979425fa0 R15: 00007ffeeeed57e8 [ 674.499915][T15671] [ 681.832854][T15757] FAULT_INJECTION: forcing a failure. [ 681.832854][T15757] name failslab, interval 1, probability 0, space 0, times 0 [ 681.832882][T15757] CPU: 0 UID: 0 PID: 15757 Comm: syz.3.1824 Tainted: G L syzkaller #0 PREEMPT(full) [ 681.832905][T15757] Tainted: [L]=SOFTLOCKUP [ 681.832911][T15757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 681.832921][T15757] Call Trace: [ 681.832927][T15757] [ 681.832935][T15757] dump_stack_lvl+0x100/0x190 [ 681.832961][T15757] should_fail_ex.cold+0x5/0xa [ 681.832982][T15757] should_failslab+0xc2/0x120 [ 681.833004][T15757] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 681.833025][T15757] ? lockdep_hardirqs_on+0x7d/0x110 [ 681.833043][T15757] ? setup_mq_sysctls+0x5d/0x240 [ 681.833063][T15757] kmemdup_noprof+0x29/0x60 [ 681.833081][T15757] setup_mq_sysctls+0x5d/0x240 [ 681.833095][T15757] ? mq_init_ns+0x4de/0x820 [ 681.833118][T15757] copy_ipcs+0x524/0x7e0 [ 681.833133][T15757] create_new_namespaces+0x20a/0xac0 [ 681.833157][T15757] ? security_capable+0x80/0x260 [ 681.833181][T15757] copy_namespaces+0x468/0x5e0 [ 681.833203][T15757] copy_process+0x395c/0x8380 [ 681.833228][T15757] ? __pfx_copy_process+0x10/0x10 [ 681.833248][T15757] ? _copy_from_user+0x59/0xd0 [ 681.833270][T15757] kernel_clone+0x176/0x9d0 [ 681.833286][T15757] ? __pfx_kernel_clone+0x10/0x10 [ 681.833311][T15757] __do_sys_clone3+0x214/0x290 [ 681.833325][T15757] ? __pfx___do_sys_clone3+0x10/0x10 [ 681.833369][T15757] do_syscall_64+0x121/0x770 [ 681.833392][T15757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.833409][T15757] RIP: 0033:0x7f50e4d9e159 [ 681.833422][T15757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 681.833437][T15757] RSP: 002b:00007f50e5b97ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 681.833453][T15757] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f50e4d9e159 [ 681.833462][T15757] RDX: 00007f50e5b97f10 RSI: 0000000000000058 RDI: 00007f50e5b97f10 [ 681.833472][T15757] RBP: 00007f50e4e3506b R08: 0000000000000000 R09: 0000000000000058 [ 681.833481][T15757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 681.833490][T15757] R13: 00007f50e5026038 R14: 00007f50e5025fa0 R15: 00007ffc23aa59f8 [ 681.833510][T15757] [ 683.506377][T15772] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1829'. [ 683.506413][T15772] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1829'. [ 685.785514][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.785553][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.405619][T15845] FAULT_INJECTION: forcing a failure. [ 688.405619][T15845] name failslab, interval 1, probability 0, space 0, times 0 [ 688.405647][T15845] CPU: 0 UID: 0 PID: 15845 Comm: syz.0.1840 Tainted: G L syzkaller #0 PREEMPT(full) [ 688.405669][T15845] Tainted: [L]=SOFTLOCKUP [ 688.405675][T15845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 688.405685][T15845] Call Trace: [ 688.405690][T15845] [ 688.405696][T15845] dump_stack_lvl+0x100/0x190 [ 688.405723][T15845] should_fail_ex.cold+0x5/0xa [ 688.405744][T15845] should_failslab+0xc2/0x120 [ 688.405767][T15845] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 688.405788][T15845] ? lockdep_hardirqs_on+0x7d/0x110 [ 688.405806][T15845] ? setup_mq_sysctls+0x5d/0x240 [ 688.405825][T15845] kmemdup_noprof+0x29/0x60 [ 688.405843][T15845] setup_mq_sysctls+0x5d/0x240 [ 688.405857][T15845] ? mq_init_ns+0x4de/0x820 [ 688.405880][T15845] copy_ipcs+0x524/0x7e0 [ 688.405895][T15845] create_new_namespaces+0x20a/0xac0 [ 688.405918][T15845] ? security_capable+0x80/0x260 [ 688.405941][T15845] copy_namespaces+0x468/0x5e0 [ 688.405964][T15845] copy_process+0x395c/0x8380 [ 688.405989][T15845] ? __pfx_copy_process+0x10/0x10 [ 688.406008][T15845] ? _copy_from_user+0x59/0xd0 [ 688.406031][T15845] kernel_clone+0x176/0x9d0 [ 688.406047][T15845] ? __pfx_kernel_clone+0x10/0x10 [ 688.406071][T15845] __do_sys_clone3+0x214/0x290 [ 688.406086][T15845] ? __pfx___do_sys_clone3+0x10/0x10 [ 688.406131][T15845] do_syscall_64+0x121/0x770 [ 688.406152][T15845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.406168][T15845] RIP: 0033:0x7f5c4619e159 [ 688.406181][T15845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 688.406196][T15845] RSP: 002b:00007f5c46fe0ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 688.406211][T15845] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f5c4619e159 [ 688.406221][T15845] RDX: 00007f5c46fe0f10 RSI: 0000000000000058 RDI: 00007f5c46fe0f10 [ 688.406231][T15845] RBP: 00007f5c4623506b R08: 0000000000000000 R09: 0000000000000058 [ 688.406240][T15845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 688.406249][T15845] R13: 00007f5c46426038 R14: 00007f5c46425fa0 R15: 00007fffd719fd28 [ 688.406268][T15845] [ 689.832320][T15852] futex_wake_op: syz.2.1842 tries to shift op by -2048; fix this program [ 689.832435][T15852] futex_wake_op: syz.2.1842 tries to shift op by -2048; fix this program [ 700.708767][T15991] FAULT_INJECTION: forcing a failure. [ 700.708767][T15991] name failslab, interval 1, probability 0, space 0, times 0 [ 700.708793][T15991] CPU: 0 UID: 0 PID: 15991 Comm: syz.3.1868 Tainted: G L syzkaller #0 PREEMPT(full) [ 700.708814][T15991] Tainted: [L]=SOFTLOCKUP [ 700.708820][T15991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 700.708830][T15991] Call Trace: [ 700.708835][T15991] [ 700.708841][T15991] dump_stack_lvl+0x100/0x190 [ 700.708869][T15991] should_fail_ex.cold+0x5/0xa [ 700.708891][T15991] should_failslab+0xc2/0x120 [ 700.708915][T15991] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 700.708945][T15991] ? shmem_alloc_inode+0x25/0x50 [ 700.708967][T15991] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 700.708987][T15991] shmem_alloc_inode+0x25/0x50 [ 700.709006][T15991] alloc_inode+0x68/0x250 [ 700.709023][T15991] new_inode+0x22/0x1c0 [ 700.709040][T15991] shmem_get_inode+0x1e3/0xf70 [ 700.709062][T15991] ? __pfx_shmem_get_inode+0x10/0x10 [ 700.709084][T15991] ? make_vfsgid+0xf1/0x140 [ 700.709171][T15991] shmem_mknod+0x217/0x480 [ 700.709193][T15991] ? __pfx_shmem_mknod+0x10/0x10 [ 700.709222][T15991] vfs_mknod+0x3a5/0x7f0 [ 700.709242][T15991] filename_mknodat+0x5aa/0x7f0 [ 700.709266][T15991] ? __pfx_filename_mknodat+0x10/0x10 [ 700.709286][T15991] ? strncpy_from_user+0x19d/0x2d0 [ 700.709313][T15991] ? do_getname+0x191/0x390 [ 700.709329][T15991] __x64_sys_mknod+0x8f/0xc0 [ 700.709350][T15991] do_syscall_64+0x121/0x770 [ 700.709371][T15991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.709387][T15991] RIP: 0033:0x7f50e4d9e159 [ 700.709401][T15991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.709416][T15991] RSP: 002b:00007f50e2ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 700.709433][T15991] RAX: ffffffffffffffda RBX: 00007f50e5026090 RCX: 00007f50e4d9e159 [ 700.709443][T15991] RDX: 0000000000000004 RSI: 0000000000001001 RDI: 0000000000000000 [ 700.709452][T15991] RBP: 00007f50e4e3506b R08: 0000000000000000 R09: 0000000000000000 [ 700.709462][T15991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 700.709471][T15991] R13: 00007f50e5026128 R14: 00007f50e5026090 R15: 00007ffc23aa59f8 [ 700.709491][T15991] [ 702.147911][T16005] FAULT_INJECTION: forcing a failure. [ 702.147911][T16005] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 702.147938][T16005] CPU: 0 UID: 0 PID: 16005 Comm: syz.0.1880 Tainted: G L syzkaller #0 PREEMPT(full) [ 702.147959][T16005] Tainted: [L]=SOFTLOCKUP [ 702.147965][T16005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 702.147974][T16005] Call Trace: [ 702.147979][T16005] [ 702.147985][T16005] dump_stack_lvl+0x100/0x190 [ 702.148009][T16005] should_fail_ex.cold+0x5/0xa [ 702.148026][T16005] ? prepare_alloc_pages+0x16d/0x5b0 [ 702.148050][T16005] should_fail_alloc_page+0xeb/0x140 [ 702.148073][T16005] prepare_alloc_pages+0x1f0/0x5b0 [ 702.148097][T16005] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 702.148116][T16005] ? __kernel_text_address+0xd/0x30 [ 702.148136][T16005] ? unwind_get_return_address+0x59/0xa0 [ 702.148156][T16005] ? arch_stack_walk+0xa6/0xf0 [ 702.148180][T16005] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 702.148198][T16005] ? __pfx_stack_trace_save+0x10/0x10 [ 702.148219][T16005] ? stack_depot_save_flags+0x27/0x9f0 [ 702.148235][T16005] ? __lock_acquire+0x5c0/0x1f40 [ 702.148259][T16005] ? kasan_save_stack+0x3f/0x50 [ 702.148277][T16005] ? kasan_save_stack+0x30/0x50 [ 702.148299][T16005] ? kasan_save_track+0x14/0x30 [ 702.148317][T16005] ? __kasan_slab_alloc+0x89/0x90 [ 702.148336][T16005] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 702.148353][T16005] ? security_inode_alloc+0x3b/0x2c0 [ 702.148377][T16005] ? inode_init_always_gfp+0xc6f/0xfb0 [ 702.148395][T16005] ? alloc_inode+0x8e/0x250 [ 702.148408][T16005] ? sock_alloc+0x44/0x280 [ 702.148422][T16005] ? __sock_create+0xc2/0x860 [ 702.148446][T16005] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 702.148470][T16005] ? policy_nodemask+0xed/0x4f0 [ 702.148495][T16005] alloc_pages_mpol+0x201/0x550 [ 702.148517][T16005] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 702.148544][T16005] ___kmalloc_large_node+0xe8/0x130 [ 702.148568][T16005] __kmalloc_large_node_noprof+0x1c/0x70 [ 702.148592][T16005] __kmalloc_noprof+0x5a8/0x840 [ 702.148611][T16005] ? sk_prot_alloc+0x10b/0x2a0 [ 702.148704][T16005] sk_prot_alloc+0x10b/0x2a0 [ 702.148723][T16005] sk_alloc+0x36/0xe80 [ 702.148746][T16005] can_create+0x1e5/0x630 [ 702.148869][T16005] __sock_create+0x339/0x860 [ 702.148891][T16005] __sys_socket+0x14d/0x260 [ 702.148911][T16005] ? __pfx___sys_socket+0x10/0x10 [ 702.148935][T16005] __x64_sys_socket+0x72/0xb0 [ 702.148953][T16005] ? lockdep_hardirqs_on+0x7d/0x110 [ 702.148971][T16005] do_syscall_64+0x121/0x770 [ 702.148990][T16005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.149005][T16005] RIP: 0033:0x7f5c4619e159 [ 702.149019][T16005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 702.149034][T16005] RSP: 002b:00007f5c46fe1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 702.149049][T16005] RAX: ffffffffffffffda RBX: 00007f5c46425fa0 RCX: 00007f5c4619e159 [ 702.149060][T16005] RDX: 0000000000000006 RSI: 0000000000000002 RDI: 000000000000001d [ 702.149069][T16005] RBP: 00007f5c4623506b R08: 0000000000000000 R09: 0000000000000000 [ 702.149078][T16005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 702.149087][T16005] R13: 00007f5c46426038 R14: 00007f5c46425fa0 R15: 00007fffd719fd28 [ 702.149106][T16005] [ 703.805131][T16030] futex_wake_op: syz.1.1874 tries to shift op by -2048; fix this program [ 703.805245][T16030] futex_wake_op: syz.1.1874 tries to shift op by -2048; fix this program [ 705.831704][T16062] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1882'. [ 709.087000][T16105] FAULT_INJECTION: forcing a failure. [ 709.087000][T16105] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 709.099110][T16105] CPU: 0 UID: 0 PID: 16105 Comm: syz.1.1888 Tainted: G L syzkaller #0 PREEMPT(full) [ 709.099135][T16105] Tainted: [L]=SOFTLOCKUP [ 709.099141][T16105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 709.099152][T16105] Call Trace: [ 709.099157][T16105] [ 709.099164][T16105] dump_stack_lvl+0x100/0x190 [ 709.099189][T16105] should_fail_ex.cold+0x5/0xa [ 709.099208][T16105] ? prepare_alloc_pages+0x16d/0x5b0 [ 709.099233][T16105] should_fail_alloc_page+0xeb/0x140 [ 709.099263][T16105] prepare_alloc_pages+0x1f0/0x5b0 [ 709.099289][T16105] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 709.099310][T16105] ? __asan_memset+0x23/0x50 [ 709.099327][T16105] ? folios_put_refs+0x58a/0xaa0 [ 709.099353][T16105] ? __lock_acquire+0x5c0/0x1f40 [ 709.099375][T16105] ? __css_rstat_updated+0x1ce/0x590 [ 709.099399][T16105] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 709.099424][T16105] ? rcu_is_watching+0x13/0xc0 [ 709.099441][T16105] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 709.099463][T16105] ? find_held_lock+0x2b/0x80 [ 709.099486][T16105] ? __lock_acquire+0x5c0/0x1f40 [ 709.099507][T16105] ? rcu_is_watching+0x13/0xc0 [ 709.099523][T16105] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 709.099546][T16105] ? policy_nodemask+0xed/0x4f0 [ 709.099569][T16105] alloc_pages_mpol+0x201/0x550 [ 709.099592][T16105] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 709.099614][T16105] ? filemap_get_entry+0x22d/0x450 [ 709.099705][T16105] ? filemap_get_entry+0x22d/0x450 [ 709.099731][T16105] folio_alloc_noprof+0x22/0x250 [ 709.099749][T16105] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 709.099770][T16105] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 709.099790][T16105] ? rcu_is_watching+0x13/0xc0 [ 709.099806][T16105] ? trace_kmalloc+0xeb/0x110 [ 709.099830][T16105] __filemap_get_folio_mpol+0x653/0x1280 [ 709.099858][T16105] ioctx_alloc+0x7e1/0x21a0 [ 709.099937][T16105] ? __pfx_ioctx_alloc+0x10/0x10 [ 709.099964][T16105] __x64_sys_io_setup+0xc9/0x220 [ 709.099989][T16105] do_syscall_64+0x121/0x770 [ 709.100010][T16105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.100026][T16105] RIP: 0033:0x7fc97919e159 [ 709.100040][T16105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 709.100059][T16105] RSP: 002b:00007fc97a10a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 709.100083][T16105] RAX: ffffffffffffffda RBX: 00007fc979426180 RCX: 00007fc97919e159 [ 709.100098][T16105] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 709.100108][T16105] RBP: 00007fc97923506b R08: 0000000000000000 R09: 0000000000000000 [ 709.100118][T16105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 709.100127][T16105] R13: 00007fc979426218 R14: 00007fc979426180 R15: 00007ffeeeed57e8 [ 709.100148][T16105] [ 712.229102][T16138] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1895'. [ 713.006773][T16143] vivid-008: ================= START STATUS ================= [ 713.006861][T16143] vivid-008: Enable Output Cropping: true [ 713.006903][T16143] vivid-008: Enable Output Composing: true [ 713.006918][T16143] vivid-008: Enable Output Scaler: true [ 713.006932][T16143] vivid-008: Tx RGB Quantization Range: Automatic [ 713.006947][T16143] vivid-008: Transmit Mode: HDMI [ 713.006961][T16143] vivid-008: Hotplug Present: 0x00000000 [ 713.006976][T16143] vivid-008: RxSense Present: 0x00000000 [ 713.006991][T16143] vivid-008: EDID Present: 0x00000000 [ 713.007005][T16143] vivid-008: ================== END STATUS ================== [ 713.153465][T16146] FAULT_INJECTION: forcing a failure. [ 713.153465][T16146] name failslab, interval 1, probability 0, space 0, times 0 [ 713.153490][T16146] CPU: 0 UID: 0 PID: 16146 Comm: syz.2.1900 Tainted: G L syzkaller #0 PREEMPT(full) [ 713.153512][T16146] Tainted: [L]=SOFTLOCKUP [ 713.153518][T16146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 713.153527][T16146] Call Trace: [ 713.153532][T16146] [ 713.153538][T16146] dump_stack_lvl+0x100/0x190 [ 713.153563][T16146] should_fail_ex.cold+0x5/0xa [ 713.153583][T16146] should_failslab+0xc2/0x120 [ 713.153605][T16146] __kmalloc_cache_noprof+0x91/0x6d0 [ 713.153621][T16146] ? lockdep_init_map_type+0x5c/0x250 [ 713.153644][T16146] ? fuse_pqueue_alloc+0x44/0xe0 [ 713.153770][T16146] fuse_pqueue_alloc+0x44/0xe0 [ 713.153792][T16146] fuse_dev_chan_new+0x2a/0x2b0 [ 713.153819][T16146] ? kobject_get_unless_zero+0x156/0x200 [ 713.153872][T16146] cuse_channel_open+0x1f/0x8f0 [ 713.153919][T16146] ? __pfx_cuse_channel_open+0x10/0x10 [ 713.153945][T16146] misc_open+0x26d/0x450 [ 713.153968][T16146] ? __pfx_misc_open+0x10/0x10 [ 713.153987][T16146] chrdev_open+0x234/0x6a0 [ 713.154007][T16146] ? __pfx_apparmor_file_open+0x10/0x10 [ 713.154025][T16146] ? __pfx_chrdev_open+0x10/0x10 [ 713.154045][T16146] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 713.154072][T16146] do_dentry_open+0x6ab/0x14d0 [ 713.154089][T16146] ? __pfx_chrdev_open+0x10/0x10 [ 713.154113][T16146] vfs_open+0x82/0x3f0 [ 713.154137][T16146] path_openat+0x19fa/0x2440 [ 713.154160][T16146] ? __pfx_path_openat+0x10/0x10 [ 713.154185][T16146] do_file_open+0x20e/0x430 [ 713.154206][T16146] ? __pfx_do_file_open+0x10/0x10 [ 713.154239][T16146] ? _raw_spin_unlock+0x28/0x50 [ 713.154254][T16146] ? alloc_fd+0x471/0x7a0 [ 713.154279][T16146] do_sys_openat2+0x10f/0x1e0 [ 713.154301][T16146] ? __pfx_do_sys_openat2+0x10/0x10 [ 713.154326][T16146] ? __fget_files+0x21f/0x3d0 [ 713.154348][T16146] __x64_sys_openat+0x12d/0x210 [ 713.154363][T16146] ? __pfx___x64_sys_openat+0x10/0x10 [ 713.154384][T16146] do_syscall_64+0x121/0x770 [ 713.154404][T16146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.154420][T16146] RIP: 0033:0x7f318839e159 [ 713.154434][T16146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 713.154450][T16146] RSP: 002b:00007f31892ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 713.154465][T16146] RAX: ffffffffffffffda RBX: 00007f3188625fa0 RCX: 00007f318839e159 [ 713.154476][T16146] RDX: 00000000001c1041 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 713.154487][T16146] RBP: 00007f318843506b R08: 0000000000000000 R09: 0000000000000000 [ 713.154496][T16146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 713.154506][T16146] R13: 00007f3188626038 R14: 00007f3188625fa0 R15: 00007ffeeb317588 [ 713.154526][T16146] [ 713.845963][T16159] FAULT_INJECTION: forcing a failure. [ 713.845963][T16159] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 713.845991][T16159] CPU: 0 UID: 0 PID: 16159 Comm: syz.3.1902 Tainted: G L syzkaller #0 PREEMPT(full) [ 713.846015][T16159] Tainted: [L]=SOFTLOCKUP [ 713.846021][T16159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 713.846031][T16159] Call Trace: [ 713.846037][T16159] [ 713.846043][T16159] dump_stack_lvl+0x100/0x190 [ 713.846067][T16159] should_fail_ex.cold+0x5/0xa [ 713.846085][T16159] ? prepare_alloc_pages+0x16d/0x5b0 [ 713.846109][T16159] should_fail_alloc_page+0xeb/0x140 [ 713.846132][T16159] prepare_alloc_pages+0x1f0/0x5b0 [ 713.846154][T16159] ? __memcg_slab_post_alloc_hook+0x71e/0x10c0 [ 713.846174][T16159] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 713.846194][T16159] ? rcu_is_watching+0x13/0xc0 [ 713.846210][T16159] ? trace_kmem_cache_alloc+0x51/0x100 [ 713.846237][T16159] ? __lock_acquire+0x5c0/0x1f40 [ 713.846259][T16159] ? __css_rstat_updated+0x1ce/0x590 [ 713.846283][T16159] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 713.846307][T16159] ? rcu_is_watching+0x13/0xc0 [ 713.846327][T16159] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 713.846348][T16159] ? find_held_lock+0x2b/0x80 [ 713.846370][T16159] ? __lock_acquire+0x5c0/0x1f40 [ 713.846392][T16159] ? rcu_is_watching+0x13/0xc0 [ 713.846408][T16159] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 713.846432][T16159] ? policy_nodemask+0xed/0x4f0 [ 713.846456][T16159] alloc_pages_mpol+0x201/0x550 [ 713.846479][T16159] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 713.846501][T16159] ? filemap_get_entry+0x22d/0x450 [ 713.846524][T16159] ? filemap_get_entry+0x22d/0x450 [ 713.846549][T16159] folio_alloc_noprof+0x22/0x250 [ 713.846565][T16159] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 713.846586][T16159] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 713.846611][T16159] __filemap_get_folio_mpol+0x653/0x1280 [ 713.846639][T16159] ioctx_alloc+0x7e1/0x21a0 [ 713.846669][T16159] ? __pfx_ioctx_alloc+0x10/0x10 [ 713.846696][T16159] __x64_sys_io_setup+0xc9/0x220 [ 713.846719][T16159] do_syscall_64+0x121/0x770 [ 713.846749][T16159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.846765][T16159] RIP: 0033:0x7f50e4d9e159 [ 713.846779][T16159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 713.846794][T16159] RSP: 002b:00007f50e2fd5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 713.846810][T16159] RAX: ffffffffffffffda RBX: 00007f50e5026180 RCX: 00007f50e4d9e159 [ 713.846820][T16159] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 713.846830][T16159] RBP: 00007f50e4e3506b R08: 0000000000000000 R09: 0000000000000000 [ 713.846839][T16159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 713.846848][T16159] R13: 00007f50e5026218 R14: 00007f50e5026180 R15: 00007ffc23aa59f8 [ 713.846869][T16159] [ 717.368259][ T31] audit: type=1800 audit(4294967534.444:14): pid=16197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1909" name="SYSVffffffff" dev="tmpfs" ino=0 res=0 errno=0 [ 717.575217][T16201] FAULT_INJECTION: forcing a failure. [ 717.575217][T16201] name failslab, interval 1, probability 0, space 0, times 0 [ 717.575246][T16201] CPU: 0 UID: 0 PID: 16201 Comm: syz.0.1911 Tainted: G L syzkaller #0 PREEMPT(full) [ 717.575269][T16201] Tainted: [L]=SOFTLOCKUP [ 717.575275][T16201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 717.575287][T16201] Call Trace: [ 717.575292][T16201] [ 717.575298][T16201] dump_stack_lvl+0x100/0x190 [ 717.575325][T16201] should_fail_ex.cold+0x5/0xa [ 717.575347][T16201] should_failslab+0xc2/0x120 [ 717.575370][T16201] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 717.575390][T16201] ? __kasan_kmalloc+0xaa/0xb0 [ 717.575416][T16201] ? vidtv_psi_service_desc_init+0x38d/0x4c0 [ 717.575524][T16201] kstrdup+0x51/0xe0 [ 717.575542][T16201] vidtv_psi_service_desc_init+0x38d/0x4c0 [ 717.575569][T16201] vidtv_psi_desc_clone+0x496/0x5d0 [ 717.575594][T16201] vidtv_channel_si_init+0x4b7/0x18f0 [ 717.575619][T16201] vidtv_mux_init+0x522/0xbf0 [ 717.575639][T16201] vidtv_start_feed+0x34e/0x500 [ 717.575662][T16201] ? __pfx_vidtv_start_feed+0x10/0x10 [ 717.575682][T16201] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 717.575699][T16201] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 717.575725][T16201] ? mark_held_locks+0x40/0x70 [ 717.575749][T16201] ? __pfx_vidtv_start_feed+0x10/0x10 [ 717.575770][T16201] dmx_ts_feed_start_filtering+0xf6/0x220 [ 717.575796][T16201] dvb_dmxdev_start_feed+0x273/0x3f0 [ 717.575818][T16201] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 717.575840][T16201] ? dvb_dmxdev_add_pid+0x2a4/0x4f0 [ 717.575863][T16201] dvb_demux_do_ioctl+0xe64/0x1200 [ 717.575889][T16201] dvb_usercopy+0x167/0x340 [ 717.575907][T16201] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 717.575928][T16201] ? __pfx_dvb_usercopy+0x10/0x10 [ 717.575945][T16201] ? __fget_files+0x34/0x3d0 [ 717.575971][T16201] ? __fget_files+0x21f/0x3d0 [ 717.575993][T16201] dvb_demux_ioctl+0x29/0x40 [ 717.576011][T16201] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 717.576029][T16201] __x64_sys_ioctl+0x18e/0x210 [ 717.576048][T16201] do_syscall_64+0x121/0x770 [ 717.576068][T16201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.576085][T16201] RIP: 0033:0x7f5c4619e159 [ 717.576098][T16201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.576113][T16201] RSP: 002b:00007f5c46fc0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 717.576129][T16201] RAX: ffffffffffffffda RBX: 00007f5c46426090 RCX: 00007f5c4619e159 [ 717.576139][T16201] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000007 [ 717.576149][T16201] RBP: 00007f5c4623506b R08: 0000000000000000 R09: 0000000000000000 [ 717.576159][T16201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 717.576168][T16201] R13: 00007f5c46426128 R14: 00007f5c46426090 R15: 00007fffd719fd28 [ 717.576189][T16201] [ 720.895980][T16245] FAULT_INJECTION: forcing a failure. [ 720.895980][T16245] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 720.896010][T16245] CPU: 0 UID: 0 PID: 16245 Comm: syz.2.1915 Tainted: G L syzkaller #0 PREEMPT(full) [ 720.896033][T16245] Tainted: [L]=SOFTLOCKUP [ 720.896039][T16245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 720.896048][T16245] Call Trace: [ 720.896054][T16245] [ 720.896060][T16245] dump_stack_lvl+0x100/0x190 [ 720.896094][T16245] should_fail_ex.cold+0x5/0xa [ 720.896112][T16245] ? prepare_alloc_pages+0x16d/0x5b0 [ 720.896135][T16245] should_fail_alloc_page+0xeb/0x140 [ 720.896158][T16245] prepare_alloc_pages+0x1f0/0x5b0 [ 720.896180][T16245] ? find_held_lock+0x2b/0x80 [ 720.896200][T16245] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 720.896220][T16245] ? mark_held_locks+0x40/0x70 [ 720.896242][T16245] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 720.896264][T16245] ? lockdep_hardirqs_on+0x7d/0x110 [ 720.896285][T16245] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 720.896309][T16245] ? rcu_is_watching+0x13/0xc0 [ 720.896325][T16245] ? trace_sched_exit_tp+0x120/0x160 [ 720.896341][T16245] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 720.896367][T16245] ? rcu_is_watching+0x13/0xc0 [ 720.896392][T16245] ? __lock_acquire+0x5c0/0x1f40 [ 720.896415][T16245] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 720.896439][T16245] ? policy_nodemask+0xed/0x4f0 [ 720.896462][T16245] alloc_pages_mpol+0x201/0x550 [ 720.896486][T16245] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 720.896507][T16245] ? filemap_get_entry+0x22d/0x450 [ 720.896530][T16245] ? filemap_get_entry+0x22d/0x450 [ 720.896555][T16245] folio_alloc_noprof+0x22/0x250 [ 720.896571][T16245] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 720.896593][T16245] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 720.896613][T16245] ? rcu_is_watching+0x13/0xc0 [ 720.896629][T16245] ? trace_kmalloc+0xeb/0x110 [ 720.896652][T16245] __filemap_get_folio_mpol+0x653/0x1280 [ 720.896680][T16245] ioctx_alloc+0x7e1/0x21a0 [ 720.896710][T16245] ? __pfx_ioctx_alloc+0x10/0x10 [ 720.896737][T16245] __x64_sys_io_setup+0xc9/0x220 [ 720.896760][T16245] do_syscall_64+0x121/0x770 [ 720.896780][T16245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.896795][T16245] RIP: 0033:0x7f318839e159 [ 720.896809][T16245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 720.896823][T16245] RSP: 002b:00007f31892ac028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 720.896839][T16245] RAX: ffffffffffffffda RBX: 00007f3188626180 RCX: 00007f318839e159 [ 720.896849][T16245] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 720.896859][T16245] RBP: 00007f318843506b R08: 0000000000000000 R09: 0000000000000000 [ 720.896868][T16245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 720.896877][T16245] R13: 00007f3188626218 R14: 00007f3188626180 R15: 00007ffeeb317588 [ 720.896898][T16245] [ 723.825770][T16272] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1923'. [ 725.308923][T16297] FAULT_INJECTION: forcing a failure. [ 725.308923][T16297] name failslab, interval 1, probability 0, space 0, times 0 [ 725.308950][T16297] CPU: 0 UID: 0 PID: 16297 Comm: syz.0.1928 Tainted: G L syzkaller #0 PREEMPT(full) [ 725.308972][T16297] Tainted: [L]=SOFTLOCKUP [ 725.308978][T16297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 725.308988][T16297] Call Trace: [ 725.308993][T16297] [ 725.308999][T16297] dump_stack_lvl+0x100/0x190 [ 725.309024][T16297] should_fail_ex.cold+0x5/0xa [ 725.309044][T16297] should_failslab+0xc2/0x120 [ 725.309066][T16297] __kmalloc_noprof+0xfc/0x840 [ 725.309088][T16297] ? lsm_blob_alloc+0x68/0x90 [ 725.309111][T16297] lsm_blob_alloc+0x68/0x90 [ 725.309130][T16297] security_prepare_creds+0x2d/0x290 [ 725.309222][T16297] prepare_creds+0x5d6/0x950 [ 725.309245][T16297] prepare_exec_creds+0x10/0x240 [ 725.309266][T16297] bprm_execve+0xc0/0x1940 [ 725.309282][T16297] ? do_raw_spin_lock+0x128/0x260 [ 725.309299][T16297] ? alloc_bprm+0x54e/0x9e0 [ 725.309315][T16297] ? alloc_bprm+0x54e/0x9e0 [ 725.309332][T16297] ? __pfx_bprm_execve+0x10/0x10 [ 725.309348][T16297] ? copy_string_kernel+0x339/0x3f0 [ 725.309369][T16297] do_execveat_common.isra.0+0x4a5/0x580 [ 725.309390][T16297] __x64_sys_execveat+0xdf/0x130 [ 725.309410][T16297] do_syscall_64+0x121/0x770 [ 725.309431][T16297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.309447][T16297] RIP: 0033:0x7f5c4619e159 [ 725.309460][T16297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 725.309474][T16297] RSP: 002b:00007f5c46fe1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 725.309489][T16297] RAX: ffffffffffffffda RBX: 00007f5c46425fa0 RCX: 00007f5c4619e159 [ 725.309500][T16297] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000006 [ 725.309509][T16297] RBP: 00007f5c4623506b R08: 0000000000000000 R09: 0000000000000000 [ 725.309518][T16297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 725.309527][T16297] R13: 00007f5c46426038 R14: 00007f5c46425fa0 R15: 00007fffd719fd28 [ 725.309548][T16297] [ 725.838540][T16302] netlink: 'syz.0.1929': attribute type 2 has an invalid length. [ 725.838557][T16302] netlink: 'syz.0.1929': attribute type 3 has an invalid length. [ 725.838566][T16302] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1929'. syzkaller syzkaller login: [ 747.228579][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.228630][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.277144][ T5621] Bluetooth: hci2: unexpected event 0x30 length: 10 > 3 [ 750.411122][T16622] ubi0: attaching mtd0 [ 750.433152][T16622] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 2 [ 750.433302][T16622] eraseblock attaching information dump: [ 750.433309][T16622] ec 1 [ 750.433314][T16622] pnum 1 [ 750.433319][T16622] lnum 1 [ 750.433324][T16622] scrub 0 [ 750.433329][T16622] sqnum 2 [ 750.433358][T16622] Volume identifier header dump: [ 750.433365][T16622] magic 55424921 [ 750.433371][T16622] version 1 [ 750.433376][T16622] vol_type 1 [ 750.433381][T16622] copy_flag 0 [ 750.433386][T16622] compat 5 [ 750.433391][T16622] vol_id 2147479551 [ 750.433397][T16622] lnum 1 [ 750.433402][T16622] data_size 0 [ 750.433407][T16622] used_ebs 0 [ 750.433412][T16622] data_pad 0 [ 750.433417][T16622] sqnum 2 [ 750.433422][T16622] hdr_crc 7beff9af [ 750.433428][T16622] Volume identifier header hexdump: [ 750.954700][T16622] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 755.679317][T16675] FAULT_INJECTION: forcing a failure. [ 755.679317][T16675] name failslab, interval 1, probability 0, space 0, times 0 [ 755.679347][T16675] CPU: 0 UID: 0 PID: 16675 Comm: syz.1.1995 Tainted: G L syzkaller #0 PREEMPT(full) [ 755.679369][T16675] Tainted: [L]=SOFTLOCKUP [ 755.679374][T16675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 755.679383][T16675] Call Trace: [ 755.679389][T16675] [ 755.679395][T16675] dump_stack_lvl+0x100/0x190 [ 755.679421][T16675] should_fail_ex.cold+0x5/0xa [ 755.679441][T16675] should_failslab+0xc2/0x120 [ 755.679463][T16675] __kmalloc_cache_noprof+0x91/0x6d0 [ 755.679479][T16675] ? kasan_save_track+0x14/0x30 [ 755.679499][T16675] ? vidtv_psi_nit_table_init+0x5b/0x5f0 [ 755.679521][T16675] vidtv_psi_nit_table_init+0x5b/0x5f0 [ 755.679540][T16675] vidtv_channel_si_init+0xccf/0x18f0 [ 755.679564][T16675] vidtv_mux_init+0x522/0xbf0 [ 755.679585][T16675] vidtv_start_feed+0x34e/0x500 [ 755.679607][T16675] ? __pfx_vidtv_start_feed+0x10/0x10 [ 755.679627][T16675] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 755.679644][T16675] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 755.679670][T16675] ? mark_held_locks+0x40/0x70 [ 755.679695][T16675] ? __pfx_vidtv_start_feed+0x10/0x10 [ 755.679716][T16675] dmx_ts_feed_start_filtering+0xf6/0x220 [ 755.679742][T16675] dvb_dmxdev_start_feed+0x273/0x3f0 [ 755.679765][T16675] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 755.679787][T16675] ? dvb_dmxdev_add_pid+0x2a4/0x4f0 [ 755.679809][T16675] dvb_demux_do_ioctl+0xe64/0x1200 [ 755.679835][T16675] dvb_usercopy+0x167/0x340 [ 755.679853][T16675] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 755.679874][T16675] ? __pfx_dvb_usercopy+0x10/0x10 [ 755.679891][T16675] ? __fget_files+0x34/0x3d0 [ 755.679926][T16675] ? __fget_files+0x21f/0x3d0 [ 755.679950][T16675] dvb_demux_ioctl+0x29/0x40 [ 755.679968][T16675] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 755.679987][T16675] __x64_sys_ioctl+0x18e/0x210 [ 755.680006][T16675] do_syscall_64+0x121/0x770 [ 755.680029][T16675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.680045][T16675] RIP: 0033:0x7fc97919e159 [ 755.680059][T16675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 755.680074][T16675] RSP: 002b:00007fc97a12b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 755.680090][T16675] RAX: ffffffffffffffda RBX: 00007fc979426090 RCX: 00007fc97919e159 [ 755.680100][T16675] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000007 [ 755.680109][T16675] RBP: 00007fc97923506b R08: 0000000000000000 R09: 0000000000000000 [ 755.680118][T16675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 755.680127][T16675] R13: 00007fc979426128 R14: 00007fc979426090 R15: 00007ffeeeed57e8 [ 755.680147][T16675] [ 761.432371][T16752] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2015'. [ 761.471339][T16753] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2012'. [ 765.436474][T16806] synth uevent: /bus/usb-serial/drivers/motorola_tetra: unknown uevent action string syzkaller syzkaller login: [ 769.496920][ T5621] Bluetooth: hci2: ACL packet too small [ 773.269614][T16900] synth uevent: /bus/usb-serial/drivers/motorola_tetra: unknown uevent action string [ 775.413276][T16928] ubi0: attaching mtd0 [ 775.414241][T16928] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 2 [ 775.414264][T16928] eraseblock attaching information dump: [ 775.414270][T16928] ec 1 [ 775.414275][T16928] pnum 1 [ 775.414279][T16928] lnum 1 [ 775.414284][T16928] scrub 0 [ 775.414289][T16928] sqnum 2 [ 775.414294][T16928] Volume identifier header dump: [ 775.414299][T16928] magic 55424921 [ 775.414304][T16928] version 1 [ 775.414309][T16928] vol_type 1 [ 775.414315][T16928] copy_flag 0 [ 775.414320][T16928] compat 5 [ 775.414325][T16928] vol_id 2147479551 [ 775.414331][T16928] lnum 1 [ 775.414336][T16928] data_size 0 [ 775.414341][T16928] used_ebs 0 [ 775.414346][T16928] data_pad 0 [ 775.414350][T16928] sqnum 2 [ 775.414356][T16928] hdr_crc 7beff9af [ 775.414362][T16928] Volume identifier header hexdump: [ 775.927078][T16928] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 781.676749][T16993] synth uevent: /bus/usb-serial/drivers/motorola_tetra: unknown uevent action string [ 783.941342][T17003] netlink: 286 bytes leftover after parsing attributes in process `syz.2.2053'. [ 791.875242][T17112] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 600000000 [ 792.372073][T17101] syz.0.2069 (17101) used greatest stack depth: 19896 bytes left [ 798.245631][T17179] ubi0: attaching mtd0 [ 798.251730][T17179] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 2 [ 798.251756][T17179] eraseblock attaching information dump: [ 798.251761][T17179] ec 1 [ 798.251767][T17179] pnum 1 [ 798.251771][T17179] lnum 1 [ 798.251776][T17179] scrub 0 [ 798.251781][T17179] sqnum 2 [ 798.251786][T17179] Volume identifier header dump: [ 798.251791][T17179] magic 55424921 [ 798.251797][T17179] version 1 [ 798.251802][T17179] vol_type 1 [ 798.251807][T17179] copy_flag 0 [ 798.251812][T17179] compat 5 [ 798.251816][T17179] vol_id 2147479551 [ 798.251822][T17179] lnum 1 [ 798.251827][T17179] data_size 0 [ 798.251832][T17179] used_ebs 0 [ 798.251837][T17179] data_pad 0 [ 798.251842][T17179] sqnum 2 [ 798.251847][T17179] hdr_crc 7beff9af [ 798.251852][T17179] Volume identifier header hexdump: [ 798.955380][T17179] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 800.419512][T17211] synth uevent: /bus/usb-serial/drivers/motorola_tetra: unknown uevent action string [ 808.158706][T17282] synth uevent: /bus/usb-serial/drivers/motorola_tetra: unknown uevent action string [ 808.395695][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.395744][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 818.348308][T17398] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 600000000 [ 818.436580][T17400] FAULT_INJECTION: forcing a failure. [ 818.436580][T17400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 818.436607][T17400] CPU: 0 UID: 0 PID: 17400 Comm: syz.2.2126 Tainted: G L syzkaller #0 PREEMPT(full) [ 818.436628][T17400] Tainted: [L]=SOFTLOCKUP [ 818.436634][T17400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 818.436644][T17400] Call Trace: [ 818.436649][T17400] [ 818.436655][T17400] dump_stack_lvl+0x100/0x190 [ 818.436682][T17400] should_fail_ex.cold+0x5/0xa [ 818.436703][T17400] _copy_from_user+0x2e/0xd0 [ 818.436726][T17400] restore_altstack+0x98/0x170 [ 818.436745][T17400] ? __pfx_restore_altstack+0x10/0x10 [ 818.436764][T17400] ? _raw_spin_unlock_irq+0x23/0x50 [ 818.436780][T17400] ? lockdep_hardirqs_on+0x7d/0x110 [ 818.436797][T17400] ? _raw_spin_unlock_irq+0x2e/0x50 [ 818.436814][T17400] __do_sys_rt_sigreturn+0x1ab/0x2c0 [ 818.436836][T17400] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 818.436862][T17400] do_syscall_64+0x121/0x770 [ 818.436882][T17400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.436897][T17400] RIP: 0033:0x7f318833f4d9 [ 818.436910][T17400] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 818.436925][T17400] RSP: 002b:00007f3189248a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 818.436940][T17400] RAX: ffffffffffffffda RBX: 00007f3188626450 RCX: 00007f318833f4d9 [ 818.436950][T17400] RDX: 00007f3189248a80 RSI: 00007f3189248bb0 RDI: 0000000000000021 [ 818.436959][T17400] RBP: 00007f318843506b R08: 0000000000000000 R09: 0000000000000000 [ 818.436968][T17400] R10: 0000200000000340 R11: 0000000000000202 R12: 0000000000000000 [ 818.436977][T17400] R13: 00007f31886264e8 R14: 00007f3188626450 R15: 00007ffeeb317588 [ 818.436997][T17400] [ 820.308056][T17411] FAULT_INJECTION: forcing a failure. [ 820.308056][T17411] name failslab, interval 1, probability 0, space 0, times 0 [ 820.308085][T17411] CPU: 0 UID: 0 PID: 17411 Comm: syz.0.2129 Tainted: G L syzkaller #0 PREEMPT(full) [ 820.308107][T17411] Tainted: [L]=SOFTLOCKUP [ 820.308113][T17411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 820.308123][T17411] Call Trace: [ 820.308128][T17411] [ 820.308136][T17411] dump_stack_lvl+0x100/0x190 [ 820.308162][T17411] should_fail_ex.cold+0x5/0xa [ 820.308182][T17411] should_failslab+0xc2/0x120 [ 820.308206][T17411] __kvmalloc_node_noprof+0x113/0x9b0 [ 820.308227][T17411] ? __pfx_net_ctl_permissions+0x10/0x10 [ 820.308335][T17411] ? proc_sys_call_handler+0x2c7/0x5a0 [ 820.308420][T17411] proc_sys_call_handler+0x2c7/0x5a0 [ 820.308444][T17411] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 820.308473][T17411] vfs_write+0x6af/0x1050 [ 820.308494][T17411] ? __pfx_proc_sys_write+0x10/0x10 [ 820.308517][T17411] ? __pfx_vfs_write+0x10/0x10 [ 820.308533][T17411] ? find_held_lock+0x2b/0x80 [ 820.308564][T17411] __x64_sys_pwrite64+0x1eb/0x250 [ 820.308583][T17411] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 820.308602][T17411] ? trace_hardirqs_off+0x70/0x170 [ 820.308622][T17411] do_syscall_64+0x121/0x770 [ 820.308643][T17411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.308659][T17411] RIP: 0033:0x7f5c4619e159 [ 820.308672][T17411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 820.308687][T17411] RSP: 002b:00007f5c46fe1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 820.308703][T17411] RAX: ffffffffffffffda RBX: 00007f5c46425fa0 RCX: 00007f5c4619e159 [ 820.308713][T17411] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 820.308722][T17411] RBP: 00007f5c4623506b R08: 0000000000000000 R09: 0000000000000000 [ 820.308731][T17411] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 820.308741][T17411] R13: 00007f5c46426038 R14: 00007f5c46425fa0 R15: 00007fffd719fd28 [ 820.308761][T17411] [ 823.231882][T17439] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2133'. [ 824.486502][T17465] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 600000000 [ 828.183895][T17500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2144'. [ 828.184493][T17500] netlink: 54041 bytes leftover after parsing attributes in process `syz.2.2144'. [ 848.312409][T17731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2189'. [ 848.339466][T17731] netlink: 354 bytes leftover after parsing attributes in process `syz.1.2189'. [ 854.028003][ T31] audit: type=1800 audit(4294967311.860:15): pid=17791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2208" name="dummy_udc" dev="gadgetfs" ino=7407 res=0 errno=0 [ 854.938048][T17809] FAULT_INJECTION: forcing a failure. [ 854.938048][T17809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 854.938077][T17809] CPU: 0 UID: 0 PID: 17809 Comm: syz.0.2202 Tainted: G L syzkaller #0 PREEMPT(full) [ 854.938098][T17809] Tainted: [L]=SOFTLOCKUP [ 854.938103][T17809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 854.938113][T17809] Call Trace: [ 854.938118][T17809] [ 854.938125][T17809] dump_stack_lvl+0x100/0x190 [ 854.938149][T17809] should_fail_ex.cold+0x5/0xa [ 854.938169][T17809] _copy_from_user+0x2e/0xd0 [ 854.938191][T17809] restore_altstack+0x98/0x170 [ 854.938209][T17809] ? __pfx_restore_altstack+0x10/0x10 [ 854.938227][T17809] ? _raw_spin_unlock_irq+0x23/0x50 [ 854.938245][T17809] ? lockdep_hardirqs_on+0x7d/0x110 [ 854.938263][T17809] ? _raw_spin_unlock_irq+0x2e/0x50 [ 854.938279][T17809] __do_sys_rt_sigreturn+0x1ab/0x2c0 [ 854.938301][T17809] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 854.938327][T17809] do_syscall_64+0x121/0x770 [ 854.938346][T17809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.938362][T17809] RIP: 0033:0x7f5c4613f4d9 [ 854.938375][T17809] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 854.938389][T17809] RSP: 002b:00007f5c437cea80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 854.938404][T17809] RAX: ffffffffffffffda RBX: 00007f5c46426450 RCX: 00007f5c4613f4d9 [ 854.938414][T17809] RDX: 00007f5c437cea80 RSI: 00007f5c437cebb0 RDI: 0000000000000021 [ 854.938424][T17809] RBP: 00007f5c4623506b R08: 0000000000000000 R09: 0000000000000000 [ 854.938433][T17809] R10: 0000200000000340 R11: 0000000000000202 R12: 0000000000000000 [ 854.938442][T17809] R13: 00007f5c464264e8 R14: 00007f5c46426450 R15: 00007fffd719fd28 [ 854.938465][T17809] [ 856.884108][T17820] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 868.043773][T17952] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 600000000 [ 869.518540][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.518580][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 878.370241][T18044] futex_wake_op: syz.1.2250 tries to shift op by -2048; fix this program [ 878.532992][T18038] 0x000000000001-0x000000020000 : "" [ 878.608958][T18038] ftl_cs: FTL header corrupt! [ 878.654224][T18041] netlink: 354 bytes leftover after parsing attributes in process `syz.0.2241'. [ 882.487082][T18109] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 600000000 [ 884.072600][T18119] futex_wake_op: syz.3.2257 tries to shift op by -2048; fix this program [ 884.250569][T18117] 0x000000000001-0x000000020000 : "" [ 884.277298][T18117] ftl_cs: FTL header corrupt! [ 888.174991][T18174] FAULT_INJECTION: forcing a failure. [ 888.174991][T18174] name failslab, interval 1, probability 0, space 0, times 0 [ 888.175018][T18174] CPU: 0 UID: 0 PID: 18174 Comm: syz.3.2267 Tainted: G L syzkaller #0 PREEMPT(full) [ 888.175039][T18174] Tainted: [L]=SOFTLOCKUP [ 888.175045][T18174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 888.175054][T18174] Call Trace: [ 888.175059][T18174] [ 888.175065][T18174] dump_stack_lvl+0x100/0x190 [ 888.175090][T18174] should_fail_ex.cold+0x5/0xa [ 888.175111][T18174] should_failslab+0xc2/0x120 [ 888.175133][T18174] kmem_cache_alloc_noprof+0x92/0x6a0 [ 888.175152][T18174] ? __proc_create+0xc1/0x8f0 [ 888.175249][T18174] ? __proc_create+0x247/0x8f0 [ 888.175274][T18174] __proc_create+0x247/0x8f0 [ 888.175297][T18174] ? __pfx___proc_create+0x10/0x10 [ 888.175320][T18174] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 888.175346][T18174] proc_create_reg+0x75/0x170 [ 888.175363][T18174] proc_create_net_data+0x8e/0x1c0 [ 888.175386][T18174] ? __pfx_proc_create_net_data+0x10/0x10 [ 888.175413][T18174] ? __pfx_netlink_net_init+0x10/0x10 [ 888.175434][T18174] netlink_net_init+0x50/0x80 [ 888.175451][T18174] ops_init+0x1e2/0x5f0 [ 888.175500][T18174] setup_net+0x118/0x3a0 [ 888.175516][T18174] ? __pfx_setup_net+0x10/0x10 [ 888.175536][T18174] copy_net_ns+0x345/0x7a0 [ 888.175554][T18174] create_new_namespaces+0x3ea/0xac0 [ 888.175598][T18174] unshare_nsproxy_namespaces+0xf2/0x220 [ 888.175622][T18174] ksys_unshare+0x4a2/0xa70 [ 888.175638][T18174] ? __pfx_ksys_unshare+0x10/0x10 [ 888.175661][T18174] __x64_sys_unshare+0x31/0x40 [ 888.175676][T18174] do_syscall_64+0x121/0x770 [ 888.175696][T18174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.175712][T18174] RIP: 0033:0x7f50e4d9e159 [ 888.175726][T18174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 888.175741][T18174] RSP: 002b:00007f50e5b98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 888.175756][T18174] RAX: ffffffffffffffda RBX: 00007f50e5025fa0 RCX: 00007f50e4d9e159 [ 888.175766][T18174] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 888.175775][T18174] RBP: 00007f50e4e3506b R08: 0000000000000000 R09: 0000000000000000 [ 888.175784][T18174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 888.175793][T18174] R13: 00007f50e5026038 R14: 00007f50e5025fa0 R15: 00007ffc23aa59f8 [ 888.175813][T18174] [ 895.838569][T18234] vhci_hcd vhci_hcd.2: invalid port number 255 [ 897.302261][T18266] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 900.256997][ T5621] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 901.605220][T18305] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20000 [ 901.605303][T18305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 901.605327][T18305] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 901.649218][T18305] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 901.649232][T18305] page dumped because: unmovable page [ 901.649263][T18305] page_owner tracks the page as allocated [ 901.649269][T18305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 1439511817 [ 901.649329][T18305] register_early_stack+0x74/0xaf [ 901.649360][T18305] init_page_owner+0x4c/0xa40 [ 901.649410][T18305] page_ext_init+0x71d/0x780 [ 901.649423][T18305] mm_core_init+0x229/0x270 [ 901.649440][T18305] page_owner free stack trace missing [ 909.158891][T18394] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 909.167839][T18395] netlink: 354 bytes leftover after parsing attributes in process `syz.1.2312'. [ 909.370545][T18309] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 909.395850][ T4933] Bluetooth: hci2: unexpected event 0x06 length: 6 > 3 [ 911.370167][T18309] Bluetooth: hci2: command 0x2016 tx timeout [ 911.452264][ T4933] ------------[ cut here ]------------ [ 911.452275][ T4933] refcnt < 0 [ 911.452301][ T4933] WARNING: net/bluetooth/hci_conn.c:649 at hci_conn_timeout+0x16a/0x230, CPU#0: kworker/u9:1/4933 [ 911.472072][ T4933] Modules linked in: [ 911.475953][ T4933] CPU: 0 UID: 0 PID: 4933 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 911.487377][ T4933] Tainted: [L]=SOFTLOCKUP [ 911.491816][ T4933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 911.502028][ T4933] Workqueue: hci2 hci_conn_timeout [ 911.507283][ T4933] RIP: 0010:hci_conn_timeout+0x16a/0x230 [ 911.512954][ T4933] Code: 44 0f b6 2d 3b fa 7a 06 31 ff 41 83 e5 40 44 89 ee e8 5a 9b 45 f7 45 84 ed 0f 84 02 ff ff ff e9 e9 01 ac f6 e8 37 a1 45 f7 90 <0f> 0b 90 e8 2e a1 45 f7 48 8d bb ed f5 ff ff 48 b8 00 00 00 00 00 [ 911.532737][ T4933] RSP: 0000:ffffc9000ea5fbf8 EFLAGS: 00010293 [ 911.538784][ T4933] RAX: 0000000000000000 RBX: ffff888079e8ca50 RCX: 0000000000000000 [ 911.546796][ T4933] RDX: ffff88802c351f40 RSI: ffffffff8ac60339 RDI: ffff88802c351f40 [ 911.554882][ T4933] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 911.562874][ T4933] R10: 00000000ffffffff R11: 0000000000000000 R12: ffff888079e8c000 [ 911.570879][ T4933] R13: ffff88802c352404 R14: 0000000000000000 R15: ffff888037119800 [ 911.578864][ T4933] FS: 0000000000000000(0000) GS:ffff888123b55000(0000) knlGS:0000000000000000 [ 911.588034][ T4933] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 911.595006][ T4933] CR2: 0000001b33e0bff8 CR3: 00000000599d2000 CR4: 00000000003526f0 [ 911.603004][ T4933] Call Trace: [ 911.606264][ T4933] [ 911.609275][ T4933] process_one_work+0xac7/0x1b10 [ 911.614208][ T4933] ? __pfx_process_one_work+0x10/0x10 [ 911.619593][ T4933] ? lock_acquire+0x1d1/0x380 [ 911.624264][ T4933] ? __pfx_hci_conn_timeout+0x10/0x10 [ 911.629652][ T4933] worker_thread+0x5ef/0xe50 [ 911.634253][ T4933] ? kthread+0x13a/0x450 [ 911.639376][ T4933] ? __pfx_worker_thread+0x10/0x10 [ 911.644489][ T4933] kthread+0x373/0x450 [ 911.648563][ T4933] ? __pfx_kthread+0x10/0x10 [ 911.653139][ T4933] ret_from_fork+0x730/0xd60 [ 911.657712][ T4933] ? __pfx_ret_from_fork+0x10/0x10 [ 911.662827][ T4933] ? __switch_to+0x800/0x10f0 [ 911.667489][ T4933] ? __switch_to_asm+0x39/0x70 [ 911.672267][ T4933] ? __pfx_kthread+0x10/0x10 [ 911.676845][ T4933] ret_from_fork_asm+0x1a/0x30 [ 911.681614][ T4933] [ 911.684877][ T4933] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 911.692137][ T4933] CPU: 0 UID: 0 PID: 4933 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 911.703134][ T4933] Tainted: [L]=SOFTLOCKUP [ 911.707431][ T4933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 911.717462][ T4933] Workqueue: hci2 hci_conn_timeout [ 911.722560][ T4933] Call Trace: [ 911.725820][ T4933] [ 911.728732][ T4933] dump_stack_lvl+0x100/0x190 [ 911.733400][ T4933] vpanic+0x553/0x970 [ 911.737364][ T4933] ? __pfx_vpanic+0x10/0x10 [ 911.741855][ T4933] panic+0xd1/0xe0 [ 911.745553][ T4933] ? __pfx_panic+0x10/0x10 [ 911.749955][ T4933] check_panic_on_warn.cold+0x19/0x34 [ 911.755305][ T4933] ? hci_conn_timeout+0x16a/0x230 [ 911.760312][ T4933] __warn.cold+0x191/0x318 [ 911.764711][ T4933] __report_bug+0x30f/0x440 [ 911.769270][ T4933] ? hci_conn_timeout+0x16a/0x230 [ 911.774277][ T4933] ? __pfx___report_bug+0x10/0x10 [ 911.779282][ T4933] ? __lock_acquire+0x5c0/0x1f40 [ 911.784208][ T4933] ? look_up_lock_class+0x64/0x120 [ 911.789300][ T4933] ? register_lock_class+0x3f/0x7b0 [ 911.794746][ T4933] ? __lock_acquire+0x5c0/0x1f40 [ 911.799668][ T4933] ? hci_conn_timeout+0x16a/0x230 [ 911.804672][ T4933] report_bug+0xb3/0x220 [ 911.808914][ T4933] ? hci_conn_timeout+0x16a/0x230 [ 911.813920][ T4933] handle_bug+0x16a/0x2a0 [ 911.818234][ T4933] exc_invalid_op+0x17/0x50 [ 911.822736][ T4933] asm_exc_invalid_op+0x1a/0x20 [ 911.827569][ T4933] RIP: 0010:hci_conn_timeout+0x16a/0x230 [ 911.833186][ T4933] Code: 44 0f b6 2d 3b fa 7a 06 31 ff 41 83 e5 40 44 89 ee e8 5a 9b 45 f7 45 84 ed 0f 84 02 ff ff ff e9 e9 01 ac f6 e8 37 a1 45 f7 90 <0f> 0b 90 e8 2e a1 45 f7 48 8d bb ed f5 ff ff 48 b8 00 00 00 00 00 [ 911.852772][ T4933] RSP: 0000:ffffc9000ea5fbf8 EFLAGS: 00010293 [ 911.858817][ T4933] RAX: 0000000000000000 RBX: ffff888079e8ca50 RCX: 0000000000000000 [ 911.866769][ T4933] RDX: ffff88802c351f40 RSI: ffffffff8ac60339 RDI: ffff88802c351f40 [ 911.874717][ T4933] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 911.882664][ T4933] R10: 00000000ffffffff R11: 0000000000000000 R12: ffff888079e8c000 [ 911.890613][ T4933] R13: ffff88802c352404 R14: 0000000000000000 R15: ffff888037119800 [ 911.898569][ T4933] ? hci_conn_timeout+0x169/0x230 [ 911.903581][ T4933] ? hci_conn_timeout+0x169/0x230 [ 911.908586][ T4933] process_one_work+0xac7/0x1b10 [ 911.913513][ T4933] ? __pfx_process_one_work+0x10/0x10 [ 911.918868][ T4933] ? lock_acquire+0x1d1/0x380 [ 911.923536][ T4933] ? __pfx_hci_conn_timeout+0x10/0x10 [ 911.928891][ T4933] worker_thread+0x5ef/0xe50 [ 911.933469][ T4933] ? kthread+0x13a/0x450 [ 911.937689][ T4933] ? __pfx_worker_thread+0x10/0x10 [ 911.942781][ T4933] kthread+0x373/0x450 [ 911.946831][ T4933] ? __pfx_kthread+0x10/0x10 [ 911.951403][ T4933] ret_from_fork+0x730/0xd60 [ 911.955976][ T4933] ? __pfx_ret_from_fork+0x10/0x10 [ 911.961066][ T4933] ? __switch_to+0x800/0x10f0 [ 911.965732][ T4933] ? __switch_to_asm+0x39/0x70 [ 911.970474][ T4933] ? __pfx_kthread+0x10/0x10 [ 911.975061][ T4933] ret_from_fork_asm+0x1a/0x30 [ 911.979812][ T4933] [ 911.982870][ T4933] Kernel Offset: disabled [ 911.987183][ T4933] Rebooting in 86400 seconds..