last executing test programs: 9.421303061s ago: executing program 2 (id=3783): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0x5d, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ppoll$auto(0x0, 0x7f, 0x0, 0x0, 0x8) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) 8.144567419s ago: executing program 2 (id=3789): syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x810) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x200004400008, 0xe, 0x200009b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_ncsi(&(0x7f00000000c0), r0) sendmsg$auto_NCSI_CMD_SET_CHANNEL_MASK(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5) mmap$auto(0x0, 0x4, 0x6, 0x40eb1, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x3, 0x4000000000e0, 0xeb1, 0x401, 0x8000) rseq$auto(0x0, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0x400053, 0x9) prctl$auto(0x16, 0x1, 0x6, 0xfffffffffffffffe, 0x4) 7.262205473s ago: executing program 0 (id=3799): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x300c00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) socket(0x28, 0x4, 0x84) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) r1 = getpgid(0xffffffffffffffff) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000002c0)={{@inferred=0xffffffffffffffff, 0x4, 0x1, 0x0, "bfc956f7b829ea9bc64a831c54b927c5c84cdfcb6d840bf6034bbe162b339fcc0b9ad62f05f5e47256dc5c36", @raw=0x4}, 0x0, 0x5, 0xd77e, @inferred=r1, @integer={0x5, 0x2, 0x5}, "ff0931dc5a3fb879791acf380abcfd7f9f393a68114cc9d69244416e96525a166b971aae562cbc70472d48eb5f54d36edf407701d0d1c4e40409e86cafa60765"}) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711, @my=0x0}, 0x6) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) ioctl$auto(r2, 0x560a, 0xffffffffffffffff) setreuid$auto(0xffffffffffffffff, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) bpf$auto_BPF_PROG_BIND_MAP(0x23, &(0x7f0000000180)=@bpf_attr_7={@start_id=0x6, 0xffffffff, 0x2, r2}, 0xfc000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) 7.19281838s ago: executing program 2 (id=3791): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = open(0x0, 0x40bc2, 0x1c0) write$auto(r1, 0x0, 0x9) sendfile$auto(r1, r1, &(0x7f0000000000)=0x1, 0xb5d) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x641, 0x0) 6.937521152s ago: executing program 2 (id=3793): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x24008895}, 0x20000800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="01002cbd7000fbdbdf250a00", @ANYRES64=r0, @ANYRES32=r0], 0x14}, 0x1, 0x0, 0x0, 0x4042400}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) sendmmsg$auto(0x3, 0x0, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a"], 0x1ac}}, 0x40000) socket(0x1e, 0x800, 0x2) mmap$auto(0x0, 0x4, 0xdf, 0xeb1, r0, 0x8000) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000004f88", @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf25280000000c00288008009e00", @ANYRES32=0xee00, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0xc080}, 0x800) mmap$auto(0x0, 0x8000, 0x1, 0x9b72, 0xffffffffffffffff, 0xb) r2 = socket(0xa, 0x801, 0x86) getsockopt$auto(r2, 0x200, 0x6, 0x0, &(0x7f0000000000)=0x9000a) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0xd, &(0x7f0000000380)={&(0x7f0000000140)="19612dcf062230f45d5016caa055b82edbc5053655779de5c25163bc1fcf93c8c3cc34acd0a0f32008f782feab86918d4f9b55b8eefe4cafa466b3", 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xda5c}, 0x800}, 0x7, 0x400c) r3 = getpid() setfsuid$auto(0x0) mmap$auto(0xfffffffffffffffc, 0x61, 0x100001000000004, 0x15, 0x400, 0x8000) pwritev$auto(0xffffffffffffffff, 0x0, 0x5, 0x5, 0xd3b8) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x4020009, 0xdf, 0x40000eb1, 0x401, 0x8000) clone$auto(0x100000008, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4000006) clone$auto(0x1, 0x1, 0x0, 0x0, 0x2) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/001/001\x00', 0xa9202, 0x0) ioctl$auto_USBDEVFS_ALLOC_STREAMS(r4, 0x8008551c, 0xfffffffffffffffe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x443001f86cb35905, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) io_uring_setup$auto(0x2, 0x0) ioctl$auto_KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, 0x0) process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000100), 0xffffffff}, 0x6, 0x0) 4.792920321s ago: executing program 3 (id=3801): open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) msgrcv$auto(0x0, 0x0, 0xff9, 0x1, 0x3) msgsnd$auto(0x0, 0x0, 0xf, 0xc45) msgctl$auto_MSG_STAT(0x0, 0xb, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x80000000, 0x9fffffffd) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYRES64, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20008891}, 0x4) socket(0x10, 0x2, 0x0) r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xf, 0xfffffffd, 0x44b, 0x3, 0x5, 0x1007181, 0xd1, 0x400007, 0xffffffffffffffff, 0x2, 0x800c, 0x80000001, 0x4, 0x80200000000001, 0x200000004, 0xde3, 0x9809588, 0xfffffffd, 0x2, 0x1, 0x864, 0x6, 0x22000, 0x201, 0x4, 0xc3f, 0x2000000, 0x0, 0x0, 0x0, 0x39, [0x0, 0x0, 0x0, 0x7fdf, 0x47, 0x4000000000000, 0x100, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7cd, 0x7, 0x2, 0x8000000000000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x6, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffc0000000000000, 0x0, 0x0, 0x6, 0x800, 0x0, 0x0, 0x1, 0x0, 0xfff]}, 0xa, 0xd) ioctl$auto__ctl_fops_dm_ioctl(r0, 0xfffffffffffffd02, &(0x7f00000001c0)) 3.875116627s ago: executing program 3 (id=3803): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r1 = openat$auto_fops_u16_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim1/psample/out_tc\x00', 0x101002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)={0x3c, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x3, 0x0, 0x1, [@nested={0x7, 0xb7, 0x0, 0x1, [@generic='WIK']}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x3c}}, 0x48084) write$auto(r1, &(0x7f0000000140)='7\x00\\\xa0\x04|\x03\xcb\x03\x00\x00\x00\xc7\xd9\x88t?$\xe4W\x88Q\xe6e\xb2\xa5\xbbZ$\xc9\xa4@\xfb\xca|I\xb9\xdf\xb9\x81K\x02\xcb\t\x9f\x80\x187\xab\b\xd22\x14\xacj\x11\xd0\xa5E\x14\xc4n\xb7\xa4C\xb2C\x02\xb5L!\xc9_8\xe0r\xa8\a\x1d\x03/\xb0x\x83\xd8\x1d\xd3\x1e\xd0\xdd\x131\xca\x98\x96\xbc`\x06\a,\x88\x9dhT\xc6\x88\xa1\xd7\xe0\xb7\n\xbc\xbc\xf3\xd6\xf4g&\xed\xc2n\xee\x89\xfc\xf7F@\xf2\xddW;/%@\x185\x1ab\xf4*\xb8\x9a`D\xa3\xd0\xc3\x10\xff>\x87(\xba\xb4\xa0\x84\x89n9\x85\xa1\x8a\xce\x00'/176, 0x100081) r4 = openat$auto_clk_dump_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/clk/clk_orphan_dump\x00', 0x0, 0x0) close_range$auto(r4, r0, 0x2000000) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) sendmsg$auto_NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000000c0)={0x3d8, r5, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_FILS_NONCES={0xf7, 0xf3, "730ab089e65b78ae7bf6b6a20711965a0a74d7c3077ab963b8046fb13b24894f63d7bca91d6eb0023abf796481be95b6688bc298aa60ca34b6848c2753394d4ef83b73e9e5248a1a2389d5d4a35a80e060cbf6f9227f94de627408397bfa8f5be2e192354bb390345687966df4a91a0bb3492b282fa3a0b4b57259b75041f80a647b4d3e0556272d76ed8747445dc931a8b9e6cda5c410866398cec1006a39729431ed34fcdcb111e4bbb07b254f52246030798dc7f33388acb99231d8f3f01520681af86539a5882b1496df589882d516d3615dfc36519359acf130e7d5c4360ae4ef41fa7301288e7354b4d6347d6257c496"}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x31b}, @NL80211_ATTR_IE_RIC={0x1b9, 0xb2, "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"}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x31e}, @NL80211_ATTR_EHT_CAPABILITY={0x97, 0x136, "0ce0fbc6d0e50d884ba45110c70e4068ea3e2b4d4b191fa770820ef695938bc097a22d8d9a19bbaf0f3f873bd761c6c802330467945cbc24f1d9ad801541ff5cbcb6920de948deabc45b22cb8bc6622d5b4f9f3f9c0123097178f2303b16780ef863ce9997dedb87c0fe48fd1ff87ba93d170da7404fa2a9ce7965b9ceb9b441739380b6c2bfe9bfe9da02e3d4daaebb7836aa"}, @NL80211_ATTR_FTM_RESPONDER={0x68, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x5e, 0x2, "4c197d95c5eb2e6fb947e6735236e2475c8333e82194bf16ac22834247dceb46c5b4c42a9427c6bcabc0efb74ab6857fcb1d5a742d4d86c3129882000ad519b77bb37d16f6f45d658a700bed62cc84d8a0072546dfde084af145"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}]}, 0x3d8}, 0x1, 0x0, 0x0, 0x4040010}, 0x44000) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r6, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r7 = clone3$auto(&(0x7f0000000080)={0x1ff, 0x0, 0xffffffff, 0x2, 0x8, 0x4, 0x80, 0x7, 0x9, 0x317f, 0x3}, 0x8000) pidfd_open$auto(r7, 0xfdfffffd) shmget$auto(0x6a2, 0x1, 0x5300) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) setsockopt$auto(0x3, 0x0, 0x13, 0x0, 0xb) 3.871461065s ago: executing program 0 (id=3811): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mprotect$auto(0x1, 0x8, 0x3) mmap$auto(0x0, 0x202000a, 0x5, 0xfffffffffffffffb, 0xfffffffffffffffa, 0x2) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/veth0_to_bridge/base_reachable_time\x00', 0x202, 0x0) ioctl$auto(0xffffffffffffffff, 0xc0a85320, 0x38) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop13\x00', 0x8202, 0x0) mmap$auto(0x0, 0x8, 0x62a6, 0x9b72, 0x2, 0x8000) socket(0xa, 0x2, 0x73) open(0x0, 0x161342, 0x100) socket(0xa, 0x2, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r0, 0x4c00, 0x0) socket(0x15, 0x5, 0x0) mmap$auto(0xffffffffffffff88, 0x4020009, 0xdf, 0xeb1, 0x401, 0x7ffd) close_range$auto(0x0, 0x5, 0x0) sysfs$auto(0x2, 0x49, 0x0) fsopen$auto(0x0, 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x80000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/fcloop/ctl/del_remote_port\x00', 0xa001, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r2, 0x5453, 0x0) ioctl$auto(0x3, 0x5415, r1) socket(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 2.703915283s ago: executing program 1 (id=3804): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = open(0x0, 0x40bc2, 0x1c0) write$auto(r1, 0x0, 0x9) sendfile$auto(r1, r1, &(0x7f0000000000)=0x1, 0xb5d) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x641, 0x0) 2.703193262s ago: executing program 0 (id=3813): mmap$auto(0x293, 0x3, 0x3, 0xeb5, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x300c00, 0x0) ioctl$auto_TIOCGDEV2(r0, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x4, 0x200007, 0x9) r2 = io_uring_setup$auto(0xffffffff, &(0x7f0000000080)={0x80000003, 0x9, 0x4, 0x6, 0x4, 0x9, r1, [], {0x9, 0x6, 0xb, 0x29f, 0x100, 0x82, 0x101, 0x4000006, 0x2000}, {0x1, 0x1, 0x52, 0x5, 0x1, 0xb0, 0x104, 0x8, 0x100000000}}) syz_clone(0x1012000, 0x0, 0x0, 0x0, 0x0, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) getpgid(0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, 0x0, 0x414041, 0x0) r4 = openat$auto_tracing_total_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/tracing/buffer_total_size_kb\x00', 0x200080, 0x0) mmap$auto(0x0, 0x400205, 0x2000000000000de, 0x9b72, r4, 0x8) r5 = getpid() openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/pci/00/01.1\x00', 0x202280, 0x0) r6 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="1cc44bf37b00310900f4f8b69181a3bf952f9a98db3fe38918b4d65a19fa43e373370c5d8fee49c32d02083c8a915dc71058b0868de1e1da129c28f6a26e6212677f85dab602d2d6ba0a198e08bcaec90e8582c6d235a8432cabd4000000000000000000", @ANYRESOCT=r5, @ANYRES64=r3], 0x1c}, 0x1, 0x0, 0x0, 0x404c005}, 0x44855) ioctl$auto_VHOST_SET_MEM_TABLE(r6, 0x4001af84, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x8a002, 0x0) 2.40650423s ago: executing program 1 (id=3805): r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cec6\x00', 0x80001, 0x0) r1 = socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) set_mempolicy_home_node$auto(0x600000, 0xffffffffffffffff, 0x0, 0x0) setsockopt$auto(r1, 0x29, 0x19, 0x0, 0x3) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) read$auto_ep0_operations_inode(r2, &(0x7f0000000280)=""/86, 0x56) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_STOP_AP(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004010}, 0x4008000) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000040)={0x9, 0x5, 0x9, 0x2000004, 0x3, 0x7fffffff, "2f00a6b4aff2020015000000ed386d34", 0x2, 0x65, 0x9, 0x5, 0x2, 0x7, 0x2}) 2.206125428s ago: executing program 3 (id=3806): openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x280, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x1000, 0x1ca}, 0x2, 0x7) mmap$auto(0x0, 0xe883, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x121040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x20000000, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x2ffffffffffe) sendmsg$auto_ETHTOOL_MSG_STATS_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000080) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) mprotect$auto(0x1ffffffff000, 0x100004, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/devices/platform/dummy_hcd.5/usb6/bMaxPower\x00', 0x80, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mq_getsetattr$auto(0x3, 0x0, 0x0) sysfs$auto(0x2, 0xe, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x403c6f2b, 0x0) 2.013097544s ago: executing program 1 (id=3807): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xc0000100, 0x1, 0x9003}]}) mmap$auto(0x0, 0x2020002, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) timer_create$auto(0x9, 0x0, 0x0) timer_settime$auto(0x0, 0x9, &(0x7f00000000c0)={{0x0, 0x10007}, {0x400002000c}}, 0x0) timer_gettime$auto(0x0, 0x0) r2 = socket(0x1a, 0x6, 0x6) syz_genetlink_get_family_id$auto_netdev(0x0, r2) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder1\x00', 0x0, 0x0) ioctl$auto_BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video20\x00', 0x80000, 0x0) bind$auto(r5, 0x0, 0x3) r6 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r6, 0xb) socketcall$auto_SYS_SOCKET(0x1, &(0x7f0000000540)=0x5) write$auto_seq_oss_f_ops_seq_oss(r3, &(0x7f0000000040)="5f74ab2fc43781e047140a5cbc3ac5229b90633d9cddda9efb1f2c3d5d1e63f3fb5acf079b9336319d009cb514679a42eaca52b81c166d19625d173c26ece6542f2fb29712f4fb9072fc432b4cf3e6f5a7f3c9f91ee88ba5fa11d48fd3658e8f44f8423b4cd02bbec912ed34f9f4b19b03d4c62b24ede44c0c76c34edf7bde061903c2ee4c64110ac668239fa53ba42933ae74c3d173663248ff0945dd2e405e0d378b5a8e4643a7bc3b35a7248431450ca8901467ea6dc5d86de1e90f869f6a04ac10043676f3b2c7f1339b2d7468133fb8447d17846b6b78079ecc31d7d0f74caa4a3db1ac4d312bfdb34bd331f1f771a2396108561a52153d63a7b2a3a077a7e4c1a22bcb23e1f3e511fee310baa67904d2aad4d6671e8b77c7720e37e84e0efecb60a35f188cbe8b8b2fb3967b78aa482aabb103f23083baa9b2ae653731d5993db4054233dea4af25795e12eb4d6b046bdeea6adce8626e0def15dd32b0ec16a85d93e1dea980794033f4b46973062c64c0209f9d3efc6ea7704c8e8dfea8cdfbe2cb1e367bf634a1952190e0660994f79f0c622d47ee8f93ce1c2852db907ae68a29bcc960b26e0e634173287fd012c4bb3063c41d35c92e896b44080bc5a98e90907cd1d01cc0708019cc1c93c71f29bfe841c873ad2aa0565dfaeb86c8b8e58ea2075de2a562ba1b5dc4ca452df21f25453b7c7f9a3e31547f4e803cefbac3b94715f2ab1f9fc66570244472f2f29deb9bdf6dc5b18d54e3c2264f9598f2ea749d170a66d351acf003c3f37fe74a09a8a964ce2818e4b4efd1eb0e3bca5dfd2a053eeb5735b96d282d2e03866bd6581b5e5e541c74f0b92b932b234ac117342f156b4b23fc6dcbc92ada00ce404f54443b6e7fdac9acb79e5258a865ced633ff5356d13a3e9923bcd8e6d177c9fb8618f9393798d90d70c78207e40f95bb2b0a9308f29f4331bbdfc1021dface5a740473b462c47286fee1c9d0036c78134e108b5b218d3022fd277e1cdf0cdf8cd4b37d74c8dd47e00e50fcf8d336978a0e7624f94b8fdcd1c9459201231f343c7cb602083aa5e1aea8974a9e22d77cb94cae6c89e239bacfe656d9b0948de480ce2ba3b4dbcb180089d5eb0f8f481e02f7d4628e9134b6e52881572a398e4edd6f01f90983826d721dddc7d4ba3f293288ba54f696fa25cc2f8721c3e380dd04bf05801f90019498601fcbcea6aa6a2d7983e6823f480185ef9c3b4ed19c4f94c108067c89d69bc4e0da0112280ecd0caff8a454fb3e6655dc6a35cdd053aef882e403458754f5e84bd2210f18a61106af8c5a2c18dc48ff87cfda6d545014009a167570f0550e5121d0bdf4b20a1177b708e5515ee33db3baf29633440999ddd36eb0299a1efcd8934ab60c1a88d9db6fa0d2b3f0bf12e87630e0dc5eddca8f291ad85141391e6f9fe56ee4ddb39a1ac7a573cb69ec14f012ea0b721df3ea40747d1130a61802e859519ae1bc5a3673105fa87485f88b8981a3a208a3576848c2df152a023f5e573c867b43b10247336b110956eb28e5288d7aa19219e8324857cdf6d17530385720afd5a1ffd23aa1bd061b73caafa05afdd1441040989d081814635347f1d55669b1c38be4698e3a085e2010e35d2747b4e39ef4920f58d6b4585d737c13221a44ad5543099bb0ab228722ef9cbc0d621178012495837d6a220eeaaf498ccc01", 0xfe04) 1.427279396s ago: executing program 0 (id=3808): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto(0xffffffffffffffff, 0x200, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x4a801, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x8000000000000002, 0x4000000000df, 0x11, 0xffffffffffffffff, 0x64b3) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto(0xffffffffffffffff, 0x200, 0xffffffffffffffff) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x4a801, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x8000000000000002, 0x4000000000df, 0x11, 0xffffffffffffffff, 0x64b3) socket(0x18, 0xa, 0x1) r0 = socket(0xa, 0x2, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) r1 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r1, 0x3) r2 = bpf$auto_BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)=@iter_create={r0, 0x100}, 0x2) r3 = syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000280), r1) sendmsg$auto_NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x24, r3, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xd}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) sendmsg$auto_NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000825bd7000fddbdf250400000008000500000000000500000000080005001682a9e70a010102000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2000c044}, 0x24040000) r4 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) open_by_handle_at$auto(r4, 0x0, 0x6) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) 1.426712166s ago: executing program 1 (id=3809): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3, 0x1) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x5, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r0 = seccomp$auto(0x4, 0x400, &(0x7f0000000000)="64a02ef9448f09ccc45207eb9e33ad75ae98765b0ad11632f58886dad9f2d132ac1b5ee89782fab5c038ea83f5146a16") sendmmsg$auto(r0, &(0x7f0000000600)={{&(0x7f0000000400)="588eb8991ab15504642b8bb785187205271f4d1f75867745f61e0ea1052d8a07146a7f09a2952e11476a87eeb49d38b2f1bf84a0282b1ee10dddb9519bc66b9beea44703a84c4f68ffcd09a0b6c2ceb27b116713250a39cbda5bab4b8a5ba16f803c451925242debbd93f0709201568ff91908966764ee42bbd8efd06b74c84313a291fcbc818685692d7bee95af5bf1ca1bdbb8fcf3725a6889f9646247a1d67bec53202b84508b2611c49ea1097dfbeb82303ed01249ced415280cabd3036d", 0x400, &(0x7f0000000500)={&(0x7f00000004c0)="557f65", 0x140000000}, 0x7, &(0x7f0000000540)="c2cac2a47ce887868fc1219657e0dcd215290c9fc2f9b94ef7bc4e7421bcc9ae2ff17460cb2ff074f1959101bf7117d8cb7c11e53e6a13ee5949399de513cffd3c64b2302d49e54898e6c61f614554ca2c5d780501aa34e85fbf164b11f65304490789669c18e8b1bb0d56a9a385f80a80e39076aab9855b8e842108ae79b4c3c586625792c75e4d40f6f3cafadfb395a789db1e1690ac203c", 0x5, 0x8}, 0x3}, 0x1, 0x4) unshare$auto(0xb) socket(0x2, 0x80002, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000000c0), r1) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET2(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40202820}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r2, 0x100, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000801}, 0x20008000) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) setsockopt$auto_SO_RCVMARK(r1, 0x1000, 0x4b, &(0x7f0000000040)='\xc2\\\x00', 0x6) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x12c, r3, 0x800, 0x70bd2d, 0x25dfdbf6, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_NONE={0xf7, 0x0, "80f5da5296cb91a08233beca9910d9faab15d7e0217899a6aadacd0ed40d4fd6ffd4202cd3f4400ca87bc742bcdf809bb2ffe036c0fc89b681776616fda32a3edbe44eea6de93d1e60622a4cc4f87dc1a1cff8abd22f8fdfa4f0a5e8bb4bde9094bbee3d9fff1fedbc4ba422311bd11623dbb80f9bebecc56a9f915baee2145e129956a5abec758cb19213c2fc821ee1672aa6275f08cac6f27e61e138b450623a8b549595a885d038be25cf7f9e1a69db9e881373d1f3911d31eae9cb97ce0241330d544080811d64e86aeaff28210a38da47b48db22c7a4cc74d4cfeb7ae6f2c0af192691b5a56a262d2a1ac30519a921fb7"}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x11e789c}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) r4 = open(&(0x7f0000000200)='./file0\x00', 0x80, 0xf6) ioctl$auto_CEC_ADAP_S_PHYS_ADDR(r4, 0x40026102, &(0x7f0000000240)=0x9) 1.426517175s ago: executing program 3 (id=3810): socket(0x1f, 0x3, 0x80009) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x22001, 0x0) mmap$auto(0x0, 0x276, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, 0x0, 0x36281, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}}) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}, 0xffff}, 0x4000, 0x20000043) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x6, 0x0) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a7, 0x7000000) syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f00000001c0), 0xffffffffffffffff) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) capset$auto(0x0, &(0x7f0000000000)={0x2, 0x10000002, 0x6}) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') write$auto(0xffffffffffffffff, 0x0, 0x8000007f) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop6\x00', 0x16fa02, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x800, 0x10) getdents$auto(r2, &(0x7f0000000f40)={0x1000000000302, 0xfffffffffffffffa, 0x7}, 0x18) sendfile$auto(0x3, r1, 0x0, 0x400000000006) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/neigh/netdevsim0/anycast_delay\x00', 0x321202, 0x0) 1.357596831s ago: executing program 2 (id=3812): lstat$auto(0x0, &(0x7f0000000180)={0x1, 0x100000000000001c, 0x27fffffffffa, 0x63, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80000008040000a, 0x3, 0x7, 0xc, 0xffffffff80000000, 0x800000000000b, 0x9, 0x240000100103}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r0 = socket(0x10, 0x2, 0x6) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_udc.5/udc/dummy_udc.5/srp\x00', 0x60301, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)='\n', 0x1) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x0) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) shutdown$auto(0x200000003, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(0x0, r2) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x6f4, r4, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_ASSOC_MLD_EXT_CAPA_OPS={0x6, 0x151, 0x7}, @NL80211_ATTR_BEACON_HEAD={0x6d8, 0xe, "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"}]}, 0x6f4}, 0x1, 0x0, 0x0, 0x4044005}, 0x4800) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/bonding/primary_reselect\x00', 0x1e2142, 0x0) sendfile$auto(r5, r5, 0x0, 0x7fff) r6 = pidfd_open$auto(0x1, 0x0) setns(r6, 0x60020000) msgctl$auto(0xffffffff, 0xffff0bc5, 0x0) open(0x0, 0xa61c2, 0x94) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x3, 0xa) connect$auto(0x3, 0x0, 0x54) openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000000080), 0x105802, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x4004) 994.166535ms ago: executing program 1 (id=3814): syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x810) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x200004400008, 0xe, 0x200009b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_ncsi(&(0x7f00000000c0), r0) sendmsg$auto_NCSI_CMD_SET_CHANNEL_MASK(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5) mmap$auto(0x0, 0x4, 0x6, 0x40eb1, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x3, 0x4000000000e0, 0xeb1, 0x401, 0x8000) rseq$auto(0x0, 0x8000, 0x0, 0x6) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, r2, 0x8000) madvise$auto(0x0, 0x400053, 0x9) prctl$auto(0x16, 0x1, 0x6, 0xfffffffffffffffe, 0x4) 326.13671ms ago: executing program 2 (id=3815): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x0, 0x0) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_SET_HW_TIMESTAMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0100db"], 0x14}, 0x1, 0x0, 0x0, 0x814}, 0x800c8c1) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000100)=""/92, 0x5c) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r1, 0x0, 0x400000000006) unshare$auto(0x40000080) ioctl$auto(0x3, 0x5411, 0x38) 325.643284ms ago: executing program 3 (id=3816): openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0x22, 0x3, 0xfffdffff) r0 = socket(0x18, 0x5, 0x1) connect$auto(r0, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) r1 = socket(0x18, 0x5, 0x1) connect$auto(r1, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) 200.607132ms ago: executing program 0 (id=3817): init_module$auto(0x0, 0x9, 0x0) rename$auto(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 143.169137ms ago: executing program 3 (id=3818): openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x280, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x1000, 0x1ca}, 0x2, 0x7) mmap$auto(0x0, 0xe883, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x121040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x20000000, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x2ffffffffffe) sendmsg$auto_ETHTOOL_MSG_STATS_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000080) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) mprotect$auto(0x1ffffffff000, 0x100004, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/devices/platform/dummy_hcd.5/usb6/bMaxPower\x00', 0x80, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mq_getsetattr$auto(0x3, 0x0, 0x0) sysfs$auto(0x2, 0xe, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x403c6f2b, 0x0) 18.843968ms ago: executing program 1 (id=3819): mmap$auto(0x40000, 0x2000c, 0xde, 0x20eb1, 0xffffffffffffffff, 0x8001) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/keycreate\x00', 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0x41c100, 0x0) syz_clone(0x80000000, &(0x7f0000000200), 0x0, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="1550840a18495b0a7840b96f2f6193c89e3d64833e4a9ea6b93bf6ce876dd670ea440f84ada784bf0aaa27253012946117f2233bdc6c551c9060c1212d8a867c893d64e1287cf06e5ef4cec38d3dab6c9920eec4531a64a2c3c611afc9f2534dc11b7cae36ff317f90bda3737ee49034104c6e05514fcc0c97018b5da9e4b2de4cafd2f9902787bcd53a60311ccf994e41e59ba07150ecf7ad49cf3dfaa100dea16298f6f280fa161ceca3190268d281") preadv$auto(r0, &(0x7f0000000000)={0x0, 0x2}, 0x6, 0xa, 0x3) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) 0s ago: executing program 0 (id=3820): r0 = prctl$auto_PR_SET_MM_START_CODE(0x4, 0x1, 0x0, 0x101, 0x7) mmap$auto(0x100000000000, 0x1, 0x800000003, 0x2762a053, r0, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC1\x00', 0x185200, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) fsconfig$auto_SHMEM_HUGE_FORCE(r0, 0x5, &(0x7f0000000100)='/\x00', &(0x7f0000000140)="c13f5817c132f76b12f845447118b937e2fa073756c3be86595c67cbd6cac2dafc96da08f35116e53141b879a8cb910d4aba006a6dc894e0739df2618bcdee7744a61012430fc8d4e24fa7c4abc2286d926604c32148", 0xfffffffffffffffe) read$auto(r1, 0x0, 0x6) mmap$auto(0x0, 0x100, 0xfffffffffffffff7, 0x8000000ebe, r0, 0x8000) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = socket(0x1d, 0x2, 0x6) r3 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r5 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r5, 0x10f, 0x87, 0x0, 0x14) bind$auto(r2, &(0x7f0000000040)=@can={0x1d, r4, 0xfd}, 0x6a) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x21}}, 0x40) sendmsg$auto_GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdc00}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4040884) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0xe2c1, 0x157) r6 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) ioctl$auto(0xffffffffffffffff, 0x80047437, r6) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x400901, 0x0) kernel console output (not intermixed with test programs): fx_do_file_open+0x10/0x10 [ 954.098195][T21661] ? alloc_fd+0x476/0x790 [ 954.098217][T21661] ? do_getname+0x191/0x390 [ 954.098240][T21661] do_sys_openat2+0x10d/0x1e0 [ 954.098263][T21661] ? __pfx_do_sys_openat2+0x10/0x10 [ 954.098287][T21661] ? __fget_files+0x21f/0x3d0 [ 954.098310][T21661] __x64_sys_openat+0x12d/0x210 [ 954.098333][T21661] ? __pfx___x64_sys_openat+0x10/0x10 [ 954.098359][T21661] ? rcu_is_watching+0x12/0xc0 [ 954.098379][T21661] do_syscall_64+0x115/0x840 [ 954.098399][T21661] ? clear_bhb_loop+0x40/0x90 [ 954.098424][T21661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.098441][T21661] RIP: 0033:0x7f8ea7b9ce59 [ 954.098455][T21661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 954.098471][T21661] RSP: 002b:00007f8ea8aa6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 954.098486][T21661] RAX: ffffffffffffffda RBX: 00007f8ea7e15fa0 RCX: 00007f8ea7b9ce59 [ 954.098497][T21661] RDX: 0000000000082000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 954.098508][T21661] RBP: 00007f8ea7c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 954.098517][T21661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 954.098526][T21661] R13: 00007f8ea7e16038 R14: 00007f8ea7e15fa0 R15: 00007ffc8ddf97a8 [ 954.098547][T21661] [ 956.752819][T20708] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 957.065933][T21697] Process accounting resumed [ 957.445663][T21716] FAULT_INJECTION: forcing a failure. [ 957.445663][T21716] name failslab, interval 1, probability 0, space 0, times 0 [ 957.514679][T21716] CPU: 0 UID: 0 PID: 21716 Comm: syz.3.3451 Tainted: G U L syzkaller #0 PREEMPT(full) [ 957.514708][T21716] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 957.514714][T21716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 957.514724][T21716] Call Trace: [ 957.514730][T21716] [ 957.514736][T21716] dump_stack_lvl+0x100/0x190 [ 957.514767][T21716] should_fail_ex.cold+0x5/0xa [ 957.514787][T21716] should_failslab+0xc2/0x120 [ 957.514805][T21716] __kmalloc_cache_noprof+0x7a/0x6f0 [ 957.514827][T21716] ? ring_buffer_read_start+0x149/0x450 [ 957.514851][T21716] ring_buffer_read_start+0x149/0x450 [ 957.514871][T21716] ? __pfx_ring_buffer_read_start+0x10/0x10 [ 957.514888][T21716] ? lockdep_init_map_type+0x5c/0x250 [ 957.514913][T21716] ? ring_buffer_overruns+0x14e/0x1a0 [ 957.514940][T21716] __tracing_open+0x74e/0xa80 [ 957.514959][T21716] tracing_open+0x26b/0x4d0 [ 957.514976][T21716] do_dentry_open+0x6ab/0x14d0 [ 957.514994][T21716] ? __pfx_tracing_open+0x10/0x10 [ 957.515013][T21716] vfs_open+0x82/0x3f0 [ 957.515037][T21716] path_openat+0x208c/0x31a0 [ 957.515062][T21716] ? __pfx_path_openat+0x10/0x10 [ 957.515087][T21716] do_file_open+0x20e/0x430 [ 957.515107][T21716] ? __pfx_do_file_open+0x10/0x10 [ 957.515146][T21716] ? alloc_fd+0x476/0x790 [ 957.515168][T21716] ? do_getname+0x191/0x390 [ 957.515192][T21716] do_sys_openat2+0x10d/0x1e0 [ 957.515214][T21716] ? __pfx_do_sys_openat2+0x10/0x10 [ 957.515241][T21716] ? __fget_files+0x21f/0x3d0 [ 957.515262][T21716] __x64_sys_openat+0x12d/0x210 [ 957.515285][T21716] ? __pfx___x64_sys_openat+0x10/0x10 [ 957.515311][T21716] ? rcu_is_watching+0x12/0xc0 [ 957.515330][T21716] do_syscall_64+0x115/0x840 [ 957.515351][T21716] ? clear_bhb_loop+0x40/0x90 [ 957.515369][T21716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.515385][T21716] RIP: 0033:0x7f87e179ce59 [ 957.515398][T21716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 957.515413][T21716] RSP: 002b:00007f87df9ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 957.515429][T21716] RAX: ffffffffffffffda RBX: 00007f87e1a15fa0 RCX: 00007f87e179ce59 [ 957.515439][T21716] RDX: 0000000000082000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 957.515449][T21716] RBP: 00007f87e1832d6f R08: 0000000000000000 R09: 0000000000000000 [ 957.515457][T21716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 957.515466][T21716] R13: 00007f87e1a16038 R14: 00007f87e1a15fa0 R15: 00007ffd7c512a28 [ 957.515485][T21716] [ 958.382528][T21727] FAULT_INJECTION: forcing a failure. [ 958.382528][T21727] name failslab, interval 1, probability 0, space 0, times 0 [ 958.474957][T21727] CPU: 0 UID: 0 PID: 21727 Comm: syz.3.3453 Tainted: G U L syzkaller #0 PREEMPT(full) [ 958.474987][T21727] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 958.474994][T21727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 958.475004][T21727] Call Trace: [ 958.475010][T21727] [ 958.475017][T21727] dump_stack_lvl+0x100/0x190 [ 958.475048][T21727] should_fail_ex.cold+0x5/0xa [ 958.475069][T21727] should_failslab+0xc2/0x120 [ 958.475095][T21727] __kmalloc_cache_noprof+0x7a/0x6f0 [ 958.475117][T21727] ? madvise_collapse+0x1a6/0x760 [ 958.475137][T21727] ? finish_task_switch.isra.0+0x2c6/0x1010 [ 958.475163][T21727] madvise_collapse+0x1a6/0x760 [ 958.475183][T21727] ? lockdep_hardirqs_on+0x78/0x100 [ 958.475206][T21727] ? __pfx_madvise_collapse+0x10/0x10 [ 958.475228][T21727] ? mtree_range_walk+0x72b/0xb70 [ 958.475251][T21727] madvise_vma_behavior+0x107c/0x2240 [ 958.475274][T21727] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 958.475299][T21727] ? find_vma_prev+0xd8/0x150 [ 958.475316][T21727] ? futex_unqueue+0x133/0x2c0 [ 958.475331][T21727] ? __pfx_find_vma_prev+0x10/0x10 [ 958.475354][T21727] ? __futex_wait+0x256/0x300 [ 958.475376][T21727] madvise_walk_vmas+0x2fe/0xa90 [ 958.475398][T21727] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 958.475423][T21727] madvise_do_behavior+0x1ea/0x510 [ 958.475444][T21727] ? __pfx_madvise_do_behavior+0x10/0x10 [ 958.475464][T21727] ? down_read+0x13b/0x450 [ 958.475486][T21727] do_madvise+0x195/0x240 [ 958.475505][T21727] ? __pfx_do_madvise+0x10/0x10 [ 958.475523][T21727] ? do_futex+0x192/0x350 [ 958.475551][T21727] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 958.475575][T21727] __x64_sys_madvise+0xa9/0x110 [ 958.475595][T21727] ? lockdep_hardirqs_on+0x78/0x100 [ 958.475615][T21727] do_syscall_64+0x115/0x840 [ 958.475634][T21727] ? clear_bhb_loop+0x40/0x90 [ 958.475653][T21727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.475668][T21727] RIP: 0033:0x7f87e179ce59 [ 958.475682][T21727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 958.475697][T21727] RSP: 002b:00007f87df9ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 958.475712][T21727] RAX: ffffffffffffffda RBX: 00007f87e1a15fa0 RCX: 00007f87e179ce59 [ 958.475722][T21727] RDX: 0000000000000019 RSI: ffffffffffff0005 RDI: 0000000000000000 [ 958.475731][T21727] RBP: 00007f87e1832d6f R08: 0000000000000000 R09: 0000000000000000 [ 958.475740][T21727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 958.475749][T21727] R13: 00007f87e1a16038 R14: 00007f87e1a15fa0 R15: 00007ffd7c512a28 [ 958.475770][T21727] [ 959.108498][T20708] Bluetooth: hci5: command 0x0406 tx timeout [ 959.945197][T21747] random: crng reseeded on system resumption [ 960.100721][T21740] can: request_module (can-proto-0) failed. [ 960.128713][T21750] hub 1-0:1.0: USB hub found [ 960.182971][T21750] hub 1-0:1.0: 1 port detected [ 961.141633][T21695] Bluetooth: hci5: command 0x0406 tx timeout [ 963.662089][T21810] random: crng reseeded on system resumption [ 963.860003][T21816] hub 1-0:1.0: USB hub found [ 963.873852][T21818] FAULT_INJECTION: forcing a failure. [ 963.873852][T21818] name fail_futex, interval 1, probability 0, space 0, times 0 [ 963.930947][T21818] CPU: 0 UID: 0 PID: 21818 Comm: syz.0.3474 Tainted: G U L syzkaller #0 PREEMPT(full) [ 963.930978][T21818] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 963.930984][T21818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 963.930995][T21818] Call Trace: [ 963.931001][T21818] [ 963.931007][T21818] dump_stack_lvl+0x100/0x190 [ 963.931039][T21818] should_fail_ex.cold+0x5/0xa [ 963.931059][T21818] get_futex_key+0x1d2/0x1510 [ 963.931085][T21818] ? __pfx_get_futex_key+0x10/0x10 [ 963.931107][T21818] ? pick_eevdf+0x4d3/0x860 [ 963.931127][T21818] ? update_se+0x94/0x770 [ 963.931152][T21818] futex_wait_setup+0x83/0x510 [ 963.931175][T21818] __futex_wait+0x19f/0x300 [ 963.931195][T21818] ? __pfx___futex_wait+0x10/0x10 [ 963.931212][T21818] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 963.931236][T21818] ? __pfx_futex_wake_mark+0x10/0x10 [ 963.931257][T21818] ? find_held_lock+0x2b/0x80 [ 963.931275][T21818] ? futex_wake+0x456/0x530 [ 963.931296][T21818] futex_wait+0xe6/0x370 [ 963.931315][T21818] ? __pfx_futex_wait+0x10/0x10 [ 963.931337][T21818] ? rcu_is_watching+0x12/0xc0 [ 963.931354][T21818] ? dvb_usercopy+0x1c0/0x340 [ 963.931377][T21818] ? kfree+0x1dd/0x6c0 [ 963.931400][T21818] do_futex+0x1ef/0x350 [ 963.931417][T21818] ? __pfx_do_futex+0x10/0x10 [ 963.931437][T21818] __x64_sys_futex+0x34f/0x4d0 [ 963.931455][T21818] ? __pfx___x64_sys_futex+0x10/0x10 [ 963.931474][T21818] ? rcu_is_watching+0x12/0xc0 [ 963.931493][T21818] do_syscall_64+0x115/0x840 [ 963.931513][T21818] ? clear_bhb_loop+0x40/0x90 [ 963.931530][T21818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.931546][T21818] RIP: 0033:0x7f8ea7b9ce59 [ 963.931560][T21818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 963.931575][T21818] RSP: 002b:00007f8ea8a850e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 963.931590][T21818] RAX: ffffffffffffffda RBX: 00007f8ea7e16098 RCX: 00007f8ea7b9ce59 [ 963.931600][T21818] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8ea7e16098 [ 963.931610][T21818] RBP: 00007f8ea7e16090 R08: 0000000000000000 R09: 0000000000000000 [ 963.931619][T21818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 963.931641][T21818] R13: 00007f8ea7e16128 R14: 00007ffc8ddf96c0 R15: 00007ffc8ddf97a8 [ 963.931661][T21818] [ 964.700124][T21816] hub 1-0:1.0: 1 port detected [ 965.142793][T21824] FAULT_INJECTION: forcing a failure. [ 965.142793][T21824] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 965.189302][T21824] CPU: 0 UID: 0 PID: 21824 Comm: syz.1.3476 Tainted: G U L syzkaller #0 PREEMPT(full) [ 965.189331][T21824] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 965.189338][T21824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 965.189347][T21824] Call Trace: [ 965.189353][T21824] [ 965.189360][T21824] dump_stack_lvl+0x100/0x190 [ 965.189391][T21824] should_fail_ex.cold+0x5/0xa [ 965.189409][T21824] ? prepare_alloc_pages+0x16d/0x5f0 [ 965.189430][T21824] should_fail_alloc_page+0xeb/0x140 [ 965.189450][T21824] prepare_alloc_pages+0x1f0/0x5f0 [ 965.189472][T21824] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 965.189500][T21824] ? lock_acquire+0x1b1/0x370 [ 965.189523][T21824] ? find_held_lock+0x2b/0x80 [ 965.189540][T21824] ? page_table_check_set+0x477/0x920 [ 965.189564][T21824] ? page_table_check_set+0x477/0x920 [ 965.189583][T21824] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 965.189608][T21824] ? page_table_check_set+0x486/0x920 [ 965.189628][T21824] ? __page_table_check_ptes_set+0x1b5/0x4e0 [ 965.189646][T21824] ? xas_move_index+0xae/0x110 [ 965.189671][T21824] ? find_held_lock+0x2b/0x80 [ 965.189688][T21824] ? find_held_lock+0x2b/0x80 [ 965.189705][T21824] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 965.189727][T21824] ? policy_nodemask+0xed/0x4f0 [ 965.189746][T21824] alloc_pages_mpol+0x1fb/0x540 [ 965.189764][T21824] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 965.189783][T21824] ? __lock_acquire+0x4a5/0x2630 [ 965.189807][T21824] folio_alloc_mpol_noprof+0x36/0x260 [ 965.189828][T21824] vma_alloc_folio_noprof+0xed/0x1d0 [ 965.189848][T21824] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 965.189874][T21824] do_anonymous_page+0xb46/0x2050 [ 965.189896][T21824] ? rcu_read_unlock+0x2d/0xb0 [ 965.189922][T21824] __handle_mm_fault+0x1d2c/0x2a00 [ 965.189948][T21824] ? reacquire_held_locks+0xce/0x1e0 [ 965.189970][T21824] ? __pfx___handle_mm_fault+0x10/0x10 [ 965.189995][T21824] ? lock_vma_under_rcu+0x17c/0x590 [ 965.190026][T21824] handle_mm_fault+0x37b/0xa30 [ 965.190051][T21824] do_user_addr_fault+0x5a3/0x12f0 [ 965.190075][T21824] exc_page_fault+0x6f/0xd0 [ 965.190096][T21824] asm_exc_page_fault+0x26/0x30 [ 965.190111][T21824] RIP: 0033:0x7fe6dfc5e60b [ 965.190125][T21824] Code: 00 00 00 48 8d 3d 8d a0 1a 00 48 89 c1 31 c0 e8 cb 2e ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d c1 a0 1a 00 48 89 34 24 48 8b 14 24 48 8b [ 965.190140][T21824] RSP: 002b:00007fe6e0d38fa0 EFLAGS: 00010206 [ 965.190152][T21824] RAX: 0000000000000000 RBX: 00007fe6e0015fa0 RCX: 0000000000000000 [ 965.190163][T21824] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 965.190173][T21824] RBP: 00007fe6dfe32d6f R08: 0000000000000000 R09: 0000000000000000 [ 965.190183][T21824] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 965.190192][T21824] R13: 00007fe6e0016038 R14: 00007fe6e0015fa0 R15: 00007fff03a4d8a8 [ 965.190213][T21824] [ 965.190226][T21824] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 967.323541][T21847] FAULT_INJECTION: forcing a failure. [ 967.323541][T21847] name failslab, interval 1, probability 0, space 0, times 0 [ 967.407573][T21847] CPU: 0 UID: 0 PID: 21847 Comm: syz.0.3480 Tainted: G U L syzkaller #0 PREEMPT(full) [ 967.407602][T21847] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 967.407609][T21847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 967.407618][T21847] Call Trace: [ 967.407625][T21847] [ 967.407631][T21847] dump_stack_lvl+0x100/0x190 [ 967.407662][T21847] should_fail_ex.cold+0x5/0xa [ 967.407684][T21847] should_failslab+0xc2/0x120 [ 967.407703][T21847] __kmalloc_cache_noprof+0x7a/0x6f0 [ 967.407724][T21847] ? madvise_collapse+0x1a6/0x760 [ 967.407746][T21847] ? finish_task_switch.isra.0+0x2c6/0x1010 [ 967.407769][T21847] madvise_collapse+0x1a6/0x760 [ 967.407788][T21847] ? lockdep_hardirqs_on+0x78/0x100 [ 967.407811][T21847] ? __pfx_madvise_collapse+0x10/0x10 [ 967.407834][T21847] ? mtree_range_walk+0x72b/0xb70 [ 967.407857][T21847] madvise_vma_behavior+0x107c/0x2240 [ 967.407881][T21847] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 967.407907][T21847] ? find_vma_prev+0xd8/0x150 [ 967.407924][T21847] ? futex_unqueue+0x133/0x2c0 [ 967.407938][T21847] ? __pfx_find_vma_prev+0x10/0x10 [ 967.407961][T21847] ? __futex_wait+0x256/0x300 [ 967.407983][T21847] madvise_walk_vmas+0x2fe/0xa90 [ 967.408006][T21847] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 967.408030][T21847] madvise_do_behavior+0x1ea/0x510 [ 967.408052][T21847] ? __pfx_madvise_do_behavior+0x10/0x10 [ 967.408072][T21847] ? down_read+0x13b/0x450 [ 967.408094][T21847] do_madvise+0x195/0x240 [ 967.408113][T21847] ? __pfx_do_madvise+0x10/0x10 [ 967.408132][T21847] ? do_futex+0x192/0x350 [ 967.408160][T21847] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 967.408184][T21847] __x64_sys_madvise+0xa9/0x110 [ 967.408203][T21847] ? lockdep_hardirqs_on+0x78/0x100 [ 967.408224][T21847] do_syscall_64+0x115/0x840 [ 967.408244][T21847] ? clear_bhb_loop+0x40/0x90 [ 967.408262][T21847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.408277][T21847] RIP: 0033:0x7f8ea7b9ce59 [ 967.408292][T21847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 967.408331][T21847] RSP: 002b:00007f8ea8aa6028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 967.408349][T21847] RAX: ffffffffffffffda RBX: 00007f8ea7e15fa0 RCX: 00007f8ea7b9ce59 [ 967.408360][T21847] RDX: 0000000000000019 RSI: ffffffffffff0005 RDI: 0000000000000000 [ 967.408377][T21847] RBP: 00007f8ea7c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 967.408387][T21847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 967.408396][T21847] R13: 00007f8ea7e16038 R14: 00007f8ea7e15fa0 R15: 00007ffc8ddf97a8 [ 967.408417][T21847] [ 967.957312][T21851] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 968.130887][T21856] FAULT_INJECTION: forcing a failure. [ 968.130887][T21856] name failslab, interval 1, probability 0, space 0, times 0 [ 968.169866][T21856] CPU: 0 UID: 0 PID: 21856 Comm: syz.2.3485 Tainted: G U L syzkaller #0 PREEMPT(full) [ 968.169894][T21856] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 968.169905][T21856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 968.169914][T21856] Call Trace: [ 968.169919][T21856] [ 968.169925][T21856] dump_stack_lvl+0x100/0x190 [ 968.169955][T21856] should_fail_ex.cold+0x5/0xa [ 968.169974][T21856] ? iter_file_splice_write+0x1d8/0x10a0 [ 968.169992][T21856] should_failslab+0xc2/0x120 [ 968.170010][T21856] __kmalloc_noprof+0xe0/0x850 [ 968.170032][T21856] ? __pfx___might_resched+0x10/0x10 [ 968.170051][T21856] iter_file_splice_write+0x1d8/0x10a0 [ 968.170078][T21856] ? __pfx_iter_file_splice_write+0x10/0x10 [ 968.170096][T21856] ? __lock_acquire+0x4a5/0x2630 [ 968.170119][T21856] ? shmem_file_splice_read+0x724/0xd80 [ 968.170145][T21856] ? __pfx_iter_file_splice_write+0x10/0x10 [ 968.170164][T21856] direct_splice_actor+0x192/0x6c0 [ 968.170184][T21856] splice_direct_to_actor+0x345/0xa30 [ 968.170203][T21856] ? __pfx_direct_splice_actor+0x10/0x10 [ 968.170224][T21856] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 968.170247][T21856] do_splice_direct+0x174/0x240 [ 968.170265][T21856] ? __pfx_do_splice_direct+0x10/0x10 [ 968.170283][T21856] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 968.170304][T21856] ? rw_verify_area+0xce/0x6d0 [ 968.170320][T21856] do_sendfile+0xadc/0xe20 [ 968.170339][T21856] ? __pfx_do_sendfile+0x10/0x10 [ 968.170361][T21856] __x64_sys_sendfile64+0x154/0x220 [ 968.170381][T21856] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 968.170409][T21856] ? rcu_is_watching+0x12/0xc0 [ 968.170428][T21856] do_syscall_64+0x115/0x840 [ 968.170448][T21856] ? clear_bhb_loop+0x40/0x90 [ 968.170465][T21856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.170480][T21856] RIP: 0033:0x7ff86179ce59 [ 968.170493][T21856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 968.170506][T21856] RSP: 002b:00007ff8626f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 968.170521][T21856] RAX: ffffffffffffffda RBX: 00007ff861a15fa0 RCX: 00007ff86179ce59 [ 968.170530][T21856] RDX: 0000200000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 968.170539][T21856] RBP: 00007ff8626f2090 R08: 0000000000000000 R09: 0000000000000000 [ 968.170547][T21856] R10: 0000000000000b5d R11: 0000000000000246 R12: 0000000000000001 [ 968.170556][T21856] R13: 00007ff861a16038 R14: 00007ff861a15fa0 R15: 00007ffdc36a7508 [ 968.170575][T21856] [ 970.901260][T21894] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 972.441326][T20708] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 973.025845][T21938] futex_wake_op: syz.3.3503 tries to shift op by -2048; fix this program [ 973.115198][T21938] 0x000000000001-0x000000020000 : "" [ 973.259155][T21938] ftl_cs: FTL header corrupt! [ 974.510828][T21695] Bluetooth: hci4: command 0x0c1a tx timeout [ 974.660494][T21942] Process accounting resumed [ 974.979150][T21970] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 975.300014][T21974] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 975.362056][T21976] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 975.418213][T21974] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 975.469762][T21976] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 976.203800][T21992] nfs4: Unknown parameter 'ECÞHš];^‘ÌYµÙ‰ÜZL‘`š~^g ¨' [ 976.584109][T20708] Bluetooth: hci4: command 0x0c1a tx timeout [ 978.109625][T22013] FAULT_INJECTION: forcing a failure. [ 978.109625][T22013] name failslab, interval 1, probability 0, space 0, times 0 [ 978.128868][T22015] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 978.178621][T22013] CPU: 0 UID: 0 PID: 22013 Comm: syz.1.3522 Tainted: G U L syzkaller #0 PREEMPT(full) [ 978.178657][T22013] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 978.178664][T22013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 978.178674][T22013] Call Trace: [ 978.178680][T22013] [ 978.178687][T22013] dump_stack_lvl+0x100/0x190 [ 978.178718][T22013] should_fail_ex.cold+0x5/0xa [ 978.178738][T22013] ? iter_file_splice_write+0x1d8/0x10a0 [ 978.178757][T22013] should_failslab+0xc2/0x120 [ 978.178775][T22013] __kmalloc_noprof+0xe0/0x850 [ 978.178799][T22013] ? __pfx___might_resched+0x10/0x10 [ 978.178819][T22013] iter_file_splice_write+0x1d8/0x10a0 [ 978.178847][T22013] ? __pfx_iter_file_splice_write+0x10/0x10 [ 978.178866][T22013] ? __lock_acquire+0x4a5/0x2630 [ 978.178889][T22013] ? shmem_file_splice_read+0x724/0xd80 [ 978.178919][T22013] ? __pfx_iter_file_splice_write+0x10/0x10 [ 978.178940][T22013] direct_splice_actor+0x192/0x6c0 [ 978.178960][T22013] splice_direct_to_actor+0x345/0xa30 [ 978.178981][T22013] ? __pfx_direct_splice_actor+0x10/0x10 [ 978.179002][T22013] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 978.179027][T22013] do_splice_direct+0x174/0x240 [ 978.179046][T22013] ? __pfx_do_splice_direct+0x10/0x10 [ 978.179065][T22013] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 978.179087][T22013] ? rw_verify_area+0xce/0x6d0 [ 978.179103][T22013] do_sendfile+0xadc/0xe20 [ 978.179123][T22013] ? __pfx_do_sendfile+0x10/0x10 [ 978.179146][T22013] __x64_sys_sendfile64+0x154/0x220 [ 978.179167][T22013] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 978.179189][T22013] ? rcu_is_watching+0x12/0xc0 [ 978.179208][T22013] do_syscall_64+0x115/0x840 [ 978.179229][T22013] ? clear_bhb_loop+0x40/0x90 [ 978.179248][T22013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.179265][T22013] RIP: 0033:0x7fe6dfd9ce59 [ 978.179279][T22013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 978.179293][T22013] RSP: 002b:00007fe6e0d3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 978.179309][T22013] RAX: ffffffffffffffda RBX: 00007fe6e0015fa0 RCX: 00007fe6dfd9ce59 [ 978.179318][T22013] RDX: 0000200000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 978.179327][T22013] RBP: 00007fe6dfe32d6f R08: 0000000000000000 R09: 0000000000000000 [ 978.179336][T22013] R10: 0000000000000b5d R11: 0000000000000246 R12: 0000000000000000 [ 978.179345][T22013] R13: 00007fe6e0016038 R14: 00007fe6e0015fa0 R15: 00007fff03a4d8a8 [ 978.179366][T22013] [ 978.890438][T22020] FAULT_INJECTION: forcing a failure. [ 978.890438][T22020] name failslab, interval 1, probability 0, space 0, times 0 [ 978.933918][T22020] CPU: 0 UID: 0 PID: 22020 Comm: syz.1.3524 Tainted: G U L syzkaller #0 PREEMPT(full) [ 978.933946][T22020] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 978.933952][T22020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 978.933961][T22020] Call Trace: [ 978.933966][T22020] [ 978.933972][T22020] dump_stack_lvl+0x100/0x190 [ 978.934001][T22020] should_fail_ex.cold+0x5/0xa [ 978.934020][T22020] ? iter_file_splice_write+0x1d8/0x10a0 [ 978.934039][T22020] should_failslab+0xc2/0x120 [ 978.934056][T22020] __kmalloc_noprof+0xe0/0x850 [ 978.934078][T22020] ? __pfx___might_resched+0x10/0x10 [ 978.934096][T22020] iter_file_splice_write+0x1d8/0x10a0 [ 978.934124][T22020] ? __pfx_iter_file_splice_write+0x10/0x10 [ 978.934142][T22020] ? __lock_acquire+0x4a5/0x2630 [ 978.934164][T22020] ? shmem_file_splice_read+0x724/0xd80 [ 978.934191][T22020] ? __pfx_iter_file_splice_write+0x10/0x10 [ 978.934210][T22020] direct_splice_actor+0x192/0x6c0 [ 978.934230][T22020] splice_direct_to_actor+0x345/0xa30 [ 978.934249][T22020] ? __pfx_direct_splice_actor+0x10/0x10 [ 978.934270][T22020] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 978.934293][T22020] do_splice_direct+0x174/0x240 [ 978.934311][T22020] ? __pfx_do_splice_direct+0x10/0x10 [ 978.934329][T22020] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 978.934349][T22020] ? rw_verify_area+0xce/0x6d0 [ 978.934366][T22020] do_sendfile+0xadc/0xe20 [ 978.934385][T22020] ? __pfx_do_sendfile+0x10/0x10 [ 978.934407][T22020] __x64_sys_sendfile64+0x154/0x220 [ 978.934427][T22020] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 978.934447][T22020] ? rcu_is_watching+0x12/0xc0 [ 978.934468][T22020] do_syscall_64+0x115/0x840 [ 978.934491][T22020] ? clear_bhb_loop+0x40/0x90 [ 978.934514][T22020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.934529][T22020] RIP: 0033:0x7fe6dfd9ce59 [ 978.934543][T22020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 978.934563][T22020] RSP: 002b:00007fe6e0d3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 978.934582][T22020] RAX: ffffffffffffffda RBX: 00007fe6e0015fa0 RCX: 00007fe6dfd9ce59 [ 978.934592][T22020] RDX: 0000200000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 978.934601][T22020] RBP: 00007fe6e0d3a090 R08: 0000000000000000 R09: 0000000000000000 [ 978.934609][T22020] R10: 0000000000000b5d R11: 0000000000000246 R12: 0000000000000002 [ 978.934618][T22020] R13: 00007fe6e0016038 R14: 00007fe6e0015fa0 R15: 00007fff03a4d8a8 [ 978.934643][T22020] [ 980.847617][T22044] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 981.290195][T22056] FAULT_INJECTION: forcing a failure. [ 981.290195][T22056] name failslab, interval 1, probability 0, space 0, times 0 [ 981.369762][T22056] CPU: 0 UID: 0 PID: 22056 Comm: syz.2.3533 Tainted: G U L syzkaller #0 PREEMPT(full) [ 981.369793][T22056] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 981.369799][T22056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 981.369809][T22056] Call Trace: [ 981.369816][T22056] [ 981.369822][T22056] dump_stack_lvl+0x100/0x190 [ 981.369854][T22056] should_fail_ex.cold+0x5/0xa [ 981.369874][T22056] ? iter_file_splice_write+0x1d8/0x10a0 [ 981.369894][T22056] should_failslab+0xc2/0x120 [ 981.369912][T22056] __kmalloc_noprof+0xe0/0x850 [ 981.369936][T22056] ? __pfx___might_resched+0x10/0x10 [ 981.369955][T22056] iter_file_splice_write+0x1d8/0x10a0 [ 981.369983][T22056] ? __pfx_iter_file_splice_write+0x10/0x10 [ 981.370002][T22056] ? __lock_acquire+0x4a5/0x2630 [ 981.370025][T22056] ? shmem_file_splice_read+0x724/0xd80 [ 981.370051][T22056] ? __pfx_iter_file_splice_write+0x10/0x10 [ 981.370072][T22056] direct_splice_actor+0x192/0x6c0 [ 981.370092][T22056] splice_direct_to_actor+0x345/0xa30 [ 981.370113][T22056] ? __pfx_direct_splice_actor+0x10/0x10 [ 981.370134][T22056] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 981.370159][T22056] do_splice_direct+0x174/0x240 [ 981.370178][T22056] ? __pfx_do_splice_direct+0x10/0x10 [ 981.370197][T22056] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 981.370217][T22056] ? rw_verify_area+0xce/0x6d0 [ 981.370234][T22056] do_sendfile+0xadc/0xe20 [ 981.370260][T22056] ? __pfx_do_sendfile+0x10/0x10 [ 981.370285][T22056] __x64_sys_sendfile64+0x154/0x220 [ 981.370306][T22056] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 981.370328][T22056] ? rcu_is_watching+0x12/0xc0 [ 981.370348][T22056] do_syscall_64+0x115/0x840 [ 981.370370][T22056] ? clear_bhb_loop+0x40/0x90 [ 981.370388][T22056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.370404][T22056] RIP: 0033:0x7ff86179ce59 [ 981.370419][T22056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 981.370433][T22056] RSP: 002b:00007ff8626f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 981.370449][T22056] RAX: ffffffffffffffda RBX: 00007ff861a15fa0 RCX: 00007ff86179ce59 [ 981.370459][T22056] RDX: 0000200000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 981.370469][T22056] RBP: 00007ff861832d6f R08: 0000000000000000 R09: 0000000000000000 [ 981.370479][T22056] R10: 0000000000000b5d R11: 0000000000000246 R12: 0000000000000000 [ 981.370488][T22056] R13: 00007ff861a16038 R14: 00007ff861a15fa0 R15: 00007ffdc36a7508 [ 981.370509][T22056] [ 982.086680][T21695] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 982.151787][T20704] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 1339 with max blocks 5 with error 117 [ 982.233176][T22065] can: request_module (can-proto-3) failed. [ 982.242291][T20704] EXT4-fs (sda1): This should not happen!! Data will be lost [ 982.242291][T20704] [ 982.821891][T22081] FAULT_INJECTION: forcing a failure. [ 982.821891][T22081] name fail_futex, interval 1, probability 0, space 0, times 0 [ 982.902788][T22081] CPU: 0 UID: 0 PID: 22081 Comm: syz.1.3539 Tainted: G U L syzkaller #0 PREEMPT(full) [ 982.902818][T22081] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 982.902825][T22081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 982.902835][T22081] Call Trace: [ 982.902841][T22081] [ 982.902848][T22081] dump_stack_lvl+0x100/0x190 [ 982.902879][T22081] should_fail_ex.cold+0x5/0xa [ 982.902900][T22081] get_futex_key+0x1d2/0x1510 [ 982.902928][T22081] ? __pfx_get_futex_key+0x10/0x10 [ 982.902949][T22081] ? futex_hash+0x2ad/0x370 [ 982.902972][T22081] ? futex_hash+0x141/0x370 [ 982.902997][T22081] futex_wake+0xea/0x530 [ 982.903015][T22081] ? __pfx_futex_wait+0x10/0x10 [ 982.903033][T22081] ? __pfx_futex_wake+0x10/0x10 [ 982.903054][T22081] ? is_valid_madvise+0xc0/0xd0 [ 982.903075][T22081] do_futex+0x32b/0x350 [ 982.903091][T22081] ? __pfx_do_futex+0x10/0x10 [ 982.903111][T22081] __x64_sys_futex+0x34f/0x4d0 [ 982.903129][T22081] ? __pfx___x64_sys_futex+0x10/0x10 [ 982.903145][T22081] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 982.903167][T22081] ? syscall_user_dispatch+0x76/0x130 [ 982.903186][T22081] do_syscall_64+0x115/0x840 [ 982.903206][T22081] ? clear_bhb_loop+0x40/0x90 [ 982.903225][T22081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.903242][T22081] RIP: 0033:0x7fe6dfd9ce59 [ 982.903259][T22081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 982.903273][T22081] RSP: 002b:00007fe6e0d3a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 982.903289][T22081] RAX: ffffffffffffffda RBX: 00007fe6e0015fa8 RCX: 00007fe6dfd9ce59 [ 982.903299][T22081] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe6e0015fac [ 982.903308][T22081] RBP: 00007fe6e0015fa0 R08: 0000000000000001 R09: 0000000000000000 [ 982.903317][T22081] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 982.903326][T22081] R13: 00007fe6e0016038 R14: 00007fff03a4d7c0 R15: 00007fff03a4d8a8 [ 982.903346][T22081] [ 984.299883][T21695] Bluetooth: hci3: command 0x040f tx timeout [ 984.415323][T22101] FAULT_INJECTION: forcing a failure. [ 984.415323][T22101] name failslab, interval 1, probability 0, space 0, times 0 [ 984.610219][T22101] CPU: 0 UID: 0 PID: 22101 Comm: syz.2.3544 Tainted: G U L syzkaller #0 PREEMPT(full) [ 984.610245][T22101] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 984.610251][T22101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 984.610260][T22101] Call Trace: [ 984.610266][T22101] [ 984.610271][T22101] dump_stack_lvl+0x100/0x190 [ 984.610300][T22101] should_fail_ex.cold+0x5/0xa [ 984.610319][T22101] should_failslab+0xc2/0x120 [ 984.610337][T22101] __kmalloc_cache_noprof+0x7a/0x6f0 [ 984.610357][T22101] ? io_uring_alloc_task_context+0xa7/0x51f [ 984.610379][T22101] ? __lock_acquire+0x4a5/0x2630 [ 984.610403][T22101] io_uring_alloc_task_context+0xa7/0x51f [ 984.610426][T22101] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 984.610454][T22101] __io_uring_add_tctx_node.cold+0x15/0x201 [ 984.610477][T22101] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 984.610577][T22101] ? __fget_files+0x21f/0x3d0 [ 984.610597][T22101] __io_uring_add_tctx_node_from_submit+0x89/0x130 [ 984.610617][T22101] __do_sys_io_uring_enter+0x1656/0x1b50 [ 984.610666][T22101] ? __fget_files+0x21f/0x3d0 [ 984.610682][T22101] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 984.610705][T22101] ? fput+0x79/0x100 [ 984.610724][T22101] ? ksys_write+0x1ac/0x250 [ 984.610739][T22101] ? __pfx_ksys_write+0x10/0x10 [ 984.610756][T22101] ? rcu_is_watching+0x12/0xc0 [ 984.610774][T22101] do_syscall_64+0x115/0x840 [ 984.610794][T22101] ? clear_bhb_loop+0x40/0x90 [ 984.610811][T22101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.610826][T22101] RIP: 0033:0x7ff86179ce59 [ 984.610839][T22101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 984.610852][T22101] RSP: 002b:00007ff8626d1028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 984.610866][T22101] RAX: ffffffffffffffda RBX: 00007ff861a16090 RCX: 00007ff86179ce59 [ 984.610876][T22101] RDX: 0000000080000001 RSI: 0000000000000a84 RDI: 0000000000000003 [ 984.610885][T22101] RBP: 00007ff8626d1090 R08: 0000000000000000 R09: 0000000000000046 [ 984.610893][T22101] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000001 [ 984.610901][T22101] R13: 00007ff861a16128 R14: 00007ff861a16090 R15: 00007ffdc36a7508 [ 984.610920][T22101] [ 985.588225][T22112] nfs4: Unknown parameter 'ECÞHš];^‘ÌYµÙ‰ÜZL‘`š~^g ¨' [ 986.367782][T20708] Bluetooth: hci3: command 0x040f tx timeout [ 986.561356][T22129] nfs4: Unknown parameter 'ECÞHš];^‘ÌYµÙ‰ÜZL‘`š~^g ¨' [ 987.120306][T22115] Process accounting paused [ 987.795124][T22154] FAULT_INJECTION: forcing a failure. [ 987.795124][T22154] name fail_futex, interval 1, probability 0, space 0, times 0 [ 987.872645][T22154] CPU: 0 UID: 0 PID: 22154 Comm: syz.1.3553 Tainted: G U L syzkaller #0 PREEMPT(full) [ 987.872674][T22154] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 987.872680][T22154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 987.872691][T22154] Call Trace: [ 987.872698][T22154] [ 987.872704][T22154] dump_stack_lvl+0x100/0x190 [ 987.872736][T22154] should_fail_ex.cold+0x5/0xa [ 987.872754][T22154] ? rcu_is_watching+0x12/0xc0 [ 987.872773][T22154] get_futex_key+0x1d2/0x1510 [ 987.872799][T22154] ? __pfx_get_futex_key+0x10/0x10 [ 987.872829][T22154] futex_wait_setup+0x83/0x510 [ 987.872859][T22154] __futex_wait+0x19f/0x300 [ 987.872881][T22154] ? __pfx___futex_wait+0x10/0x10 [ 987.872903][T22154] ? __pfx_futex_wake_mark+0x10/0x10 [ 987.872926][T22154] ? find_held_lock+0x2b/0x80 [ 987.872944][T22154] ? futex_wake+0x456/0x530 [ 987.872967][T22154] futex_wait+0xe6/0x370 [ 987.872985][T22154] ? __pfx_futex_wait+0x10/0x10 [ 987.873007][T22154] ? rcu_is_watching+0x12/0xc0 [ 987.873023][T22154] ? dvb_usercopy+0x1c0/0x340 [ 987.873046][T22154] ? kfree+0x1dd/0x6c0 [ 987.873070][T22154] do_futex+0x1ef/0x350 [ 987.873085][T22154] ? __pfx_do_futex+0x10/0x10 [ 987.873107][T22154] __x64_sys_futex+0x34f/0x4d0 [ 987.873125][T22154] ? __pfx___x64_sys_futex+0x10/0x10 [ 987.873145][T22154] ? rcu_is_watching+0x12/0xc0 [ 987.873164][T22154] do_syscall_64+0x115/0x840 [ 987.873185][T22154] ? clear_bhb_loop+0x40/0x90 [ 987.873203][T22154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.873218][T22154] RIP: 0033:0x7fe6dfd9ce59 [ 987.873232][T22154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 987.873247][T22154] RSP: 002b:00007fe6e0d190e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 987.873263][T22154] RAX: ffffffffffffffda RBX: 00007fe6e0016098 RCX: 00007fe6dfd9ce59 [ 987.873273][T22154] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe6e0016098 [ 987.873282][T22154] RBP: 00007fe6e0016090 R08: 0000000000000000 R09: 0000000000000000 [ 987.873291][T22154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 987.873300][T22154] R13: 00007fe6e0016128 R14: 00007fff03a4d7c0 R15: 00007fff03a4d8a8 [ 987.873320][T22154] [ 989.340376][T22169] FAULT_INJECTION: forcing a failure. [ 989.340376][T22169] name fail_futex, interval 1, probability 0, space 0, times 0 [ 989.429741][T22169] CPU: 0 UID: 0 PID: 22169 Comm: syz.3.3558 Tainted: G U L syzkaller #0 PREEMPT(full) [ 989.429772][T22169] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 989.429778][T22169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 989.429789][T22169] Call Trace: [ 989.429794][T22169] [ 989.429801][T22169] dump_stack_lvl+0x100/0x190 [ 989.429834][T22169] should_fail_ex.cold+0x5/0xa [ 989.429853][T22169] get_futex_key+0x1d2/0x1510 [ 989.429880][T22169] ? __pfx_get_futex_key+0x10/0x10 [ 989.429903][T22169] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 989.429925][T22169] ? __print_lock_name+0x63/0x80 [ 989.429949][T22169] futex_wake+0xea/0x530 [ 989.429966][T22169] ? dvb_dmxdev_filter_start+0x8d1/0xdd0 [ 989.429988][T22169] ? __pfx_futex_wake+0x10/0x10 [ 989.430009][T22169] ? rcu_is_watching+0x12/0xc0 [ 989.430026][T22169] ? dvb_usercopy+0x1c0/0x340 [ 989.430048][T22169] ? kfree+0x1dd/0x6c0 [ 989.430072][T22169] do_futex+0x32b/0x350 [ 989.430087][T22169] ? __pfx_do_futex+0x10/0x10 [ 989.430107][T22169] __x64_sys_futex+0x34f/0x4d0 [ 989.430125][T22169] ? __pfx___x64_sys_futex+0x10/0x10 [ 989.430144][T22169] ? rcu_is_watching+0x12/0xc0 [ 989.430163][T22169] do_syscall_64+0x115/0x840 [ 989.430182][T22169] ? clear_bhb_loop+0x40/0x90 [ 989.430201][T22169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.430216][T22169] RIP: 0033:0x7f87e179ce59 [ 989.430230][T22169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 989.430244][T22169] RSP: 002b:00007f87df9cd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 989.430260][T22169] RAX: ffffffffffffffda RBX: 00007f87e1a16098 RCX: 00007f87e179ce59 [ 989.430270][T22169] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f87e1a1609c [ 989.430280][T22169] RBP: 00007f87e1a16090 R08: 0000000000000001 R09: 0000000000000000 [ 989.430289][T22169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 989.430297][T22169] R13: 00007f87e1a16128 R14: 00007ffd7c512940 R15: 00007ffd7c512a28 [ 989.430317][T22169] [ 990.600484][ T30] audit: type=1326 audit(2147493361.535:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22176 comm="syz.2.3561" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff86179ce59 code=0x0 [ 990.755444][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 990.761855][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 990.953991][T22187] FAULT_INJECTION: forcing a failure. [ 990.953991][T22187] name failslab, interval 1, probability 0, space 0, times 0 [ 991.084622][T22187] CPU: 0 UID: 0 PID: 22187 Comm: syz.0.3562 Tainted: G U L syzkaller #0 PREEMPT(full) [ 991.084649][T22187] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 991.084655][T22187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 991.084664][T22187] Call Trace: [ 991.084669][T22187] [ 991.084675][T22187] dump_stack_lvl+0x100/0x190 [ 991.084703][T22187] should_fail_ex.cold+0x5/0xa [ 991.084723][T22187] should_failslab+0xc2/0x120 [ 991.084741][T22187] __kmalloc_cache_noprof+0x7a/0x6f0 [ 991.084761][T22187] ? io_wq_create+0x6a/0x9a0 [ 991.084782][T22187] ? lockdep_hardirqs_on+0x78/0x100 [ 991.084804][T22187] io_wq_create+0x6a/0x9a0 [ 991.084826][T22187] io_uring_alloc_task_context+0x2d9/0x51f [ 991.084850][T22187] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 991.084878][T22187] __io_uring_add_tctx_node.cold+0x15/0x201 [ 991.084902][T22187] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 991.084921][T22187] ? __fget_files+0x21f/0x3d0 [ 991.084942][T22187] __io_uring_add_tctx_node_from_submit+0x89/0x130 [ 991.084961][T22187] __do_sys_io_uring_enter+0x1656/0x1b50 [ 991.084987][T22187] ? __fget_files+0x21f/0x3d0 [ 991.085003][T22187] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 991.085027][T22187] ? fput+0x79/0x100 [ 991.085045][T22187] ? ksys_write+0x1ac/0x250 [ 991.085060][T22187] ? __pfx_ksys_write+0x10/0x10 [ 991.085078][T22187] ? rcu_is_watching+0x12/0xc0 [ 991.085097][T22187] do_syscall_64+0x115/0x840 [ 991.085116][T22187] ? clear_bhb_loop+0x40/0x90 [ 991.085133][T22187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.085148][T22187] RIP: 0033:0x7f8ea7b9ce59 [ 991.085161][T22187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 991.085175][T22187] RSP: 002b:00007f8ea8a85028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 991.085189][T22187] RAX: ffffffffffffffda RBX: 00007f8ea7e16090 RCX: 00007f8ea7b9ce59 [ 991.085199][T22187] RDX: 0000000080000001 RSI: 0000000000000a84 RDI: 0000000000000003 [ 991.085208][T22187] RBP: 00007f8ea8a85090 R08: 0000000000000000 R09: 0000000000000046 [ 991.085217][T22187] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000001 [ 991.085225][T22187] R13: 00007f8ea7e16128 R14: 00007f8ea7e16090 R15: 00007ffc8ddf97a8 [ 991.085243][T22187] [ 991.759119][T22194] FAULT_INJECTION: forcing a failure. [ 991.759119][T22194] name fail_futex, interval 1, probability 0, space 0, times 0 [ 991.830765][T22194] CPU: 0 UID: 0 PID: 22194 Comm: syz.2.3563 Tainted: G U L syzkaller #0 PREEMPT(full) [ 991.830795][T22194] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 991.830802][T22194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 991.830811][T22194] Call Trace: [ 991.830817][T22194] [ 991.830824][T22194] dump_stack_lvl+0x100/0x190 [ 991.830854][T22194] should_fail_ex.cold+0x5/0xa [ 991.830871][T22194] ? rcu_is_watching+0x12/0xc0 [ 991.830890][T22194] get_futex_key+0x1d2/0x1510 [ 991.830917][T22194] ? __pfx_get_futex_key+0x10/0x10 [ 991.830947][T22194] futex_wait_setup+0x83/0x510 [ 991.830970][T22194] __futex_wait+0x19f/0x300 [ 991.830989][T22194] ? __pfx___futex_wait+0x10/0x10 [ 991.831010][T22194] ? __pfx_futex_wake_mark+0x10/0x10 [ 991.831032][T22194] ? find_held_lock+0x2b/0x80 [ 991.831049][T22194] ? futex_wake+0x456/0x530 [ 991.831071][T22194] futex_wait+0xe6/0x370 [ 991.831089][T22194] ? __pfx_futex_wait+0x10/0x10 [ 991.831111][T22194] ? rcu_is_watching+0x12/0xc0 [ 991.831127][T22194] ? dvb_usercopy+0x1c0/0x340 [ 991.831149][T22194] ? kfree+0x1dd/0x6c0 [ 991.831172][T22194] do_futex+0x1ef/0x350 [ 991.831187][T22194] ? __pfx_do_futex+0x10/0x10 [ 991.831207][T22194] __x64_sys_futex+0x34f/0x4d0 [ 991.831225][T22194] ? __pfx___x64_sys_futex+0x10/0x10 [ 991.831244][T22194] ? rcu_is_watching+0x12/0xc0 [ 991.831262][T22194] do_syscall_64+0x115/0x840 [ 991.831284][T22194] ? clear_bhb_loop+0x40/0x90 [ 991.831302][T22194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.831318][T22194] RIP: 0033:0x7ff86179ce59 [ 991.831331][T22194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 991.831346][T22194] RSP: 002b:00007ff8626d10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 991.831361][T22194] RAX: ffffffffffffffda RBX: 00007ff861a16098 RCX: 00007ff86179ce59 [ 991.831371][T22194] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff861a16098 [ 991.831380][T22194] RBP: 00007ff861a16090 R08: 0000000000000000 R09: 0000000000000000 [ 991.831389][T22194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 991.831397][T22194] R13: 00007ff861a16128 R14: 00007ffdc36a7420 R15: 00007ffdc36a7508 [ 991.831420][T22194] [ 992.749261][T22199] FAULT_INJECTION: forcing a failure. [ 992.749261][T22199] name failslab, interval 1, probability 0, space 0, times 0 [ 992.842734][T22199] CPU: 0 UID: 0 PID: 22199 Comm: syz.3.3566 Tainted: G U L syzkaller #0 PREEMPT(full) [ 992.842765][T22199] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 992.842772][T22199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 992.842782][T22199] Call Trace: [ 992.842789][T22199] [ 992.842795][T22199] dump_stack_lvl+0x100/0x190 [ 992.842828][T22199] should_fail_ex.cold+0x5/0xa [ 992.842849][T22199] should_failslab+0xc2/0x120 [ 992.842868][T22199] __kmalloc_cache_noprof+0x7a/0x6f0 [ 992.842890][T22199] ? vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 992.842919][T22199] vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 992.842945][T22199] vidtv_mux_create_pid_ctx_once+0xe6/0x140 [ 992.842969][T22199] vidtv_mux_init+0x7b1/0xbf0 [ 992.842994][T22199] vidtv_start_feed+0x34e/0x500 [ 992.843012][T22199] ? __pfx_vidtv_start_feed+0x10/0x10 [ 992.843029][T22199] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 992.843056][T22199] dmx_section_feed_start_filtering+0x3a8/0x660 [ 992.843082][T22199] dvb_dmxdev_filter_start+0x767/0xdd0 [ 992.843104][T22199] dvb_demux_do_ioctl+0xe64/0x1200 [ 992.843126][T22199] dvb_usercopy+0x167/0x340 [ 992.843148][T22199] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 992.843165][T22199] ? __pfx_dvb_usercopy+0x10/0x10 [ 992.843195][T22199] ? __fget_files+0x21f/0x3d0 [ 992.843216][T22199] dvb_demux_ioctl+0x29/0x40 [ 992.843230][T22199] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 992.843244][T22199] __x64_sys_ioctl+0x18e/0x210 [ 992.843261][T22199] do_syscall_64+0x115/0x840 [ 992.843282][T22199] ? clear_bhb_loop+0x40/0x90 [ 992.843300][T22199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.843316][T22199] RIP: 0033:0x7f87e179ce59 [ 992.843331][T22199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 992.843346][T22199] RSP: 002b:00007f87df9cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 992.843361][T22199] RAX: ffffffffffffffda RBX: 00007f87e1a16090 RCX: 00007f87e179ce59 [ 992.843371][T22199] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000007 [ 992.843388][T22199] RBP: 00007f87e1832d6f R08: 0000000000000000 R09: 0000000000000000 [ 992.843398][T22199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 992.843408][T22199] R13: 00007f87e1a16128 R14: 00007f87e1a16090 R15: 00007ffd7c512a28 [ 992.843429][T22199] [ 993.451829][T22207] ovs_: entered promiscuous mode [ 993.476060][T22207] FAULT_INJECTION: forcing a failure. [ 993.476060][T22207] name failslab, interval 1, probability 0, space 0, times 0 [ 993.526146][T22207] CPU: 0 UID: 0 PID: 22207 Comm: syz.1.3568 Tainted: G U L syzkaller #0 PREEMPT(full) [ 993.526174][T22207] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 993.526181][T22207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 993.526191][T22207] Call Trace: [ 993.526197][T22207] [ 993.526204][T22207] dump_stack_lvl+0x100/0x190 [ 993.526235][T22207] should_fail_ex.cold+0x5/0xa [ 993.526255][T22207] should_failslab+0xc2/0x120 [ 993.526274][T22207] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 993.526296][T22207] ? sk_prot_alloc+0x60/0x2a0 [ 993.526339][T22207] sk_prot_alloc+0x60/0x2a0 [ 993.526362][T22207] sk_alloc+0x36/0xe80 [ 993.526386][T22207] qrtr_create+0x84/0x1d0 [ 993.526515][T22207] __sock_create+0x339/0x860 [ 993.526540][T22207] __sys_socket+0x14d/0x260 [ 993.526560][T22207] ? __pfx___sys_socket+0x10/0x10 [ 993.526586][T22207] __x64_sys_socket+0x72/0xb0 [ 993.526606][T22207] ? lockdep_hardirqs_on+0x78/0x100 [ 993.526627][T22207] do_syscall_64+0x115/0x840 [ 993.526646][T22207] ? clear_bhb_loop+0x40/0x90 [ 993.526665][T22207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.526680][T22207] RIP: 0033:0x7fe6dfd9ce59 [ 993.526694][T22207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 993.526709][T22207] RSP: 002b:00007fe6e0d3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 993.526724][T22207] RAX: ffffffffffffffda RBX: 00007fe6e0015fa0 RCX: 00007fe6dfd9ce59 [ 993.526736][T22207] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002a [ 993.526745][T22207] RBP: 00007fe6dfe32d6f R08: 0000000000000000 R09: 0000000000000000 [ 993.526755][T22207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 993.526764][T22207] R13: 00007fe6e0016038 R14: 00007fe6e0015fa0 R15: 00007fff03a4d8a8 [ 993.526785][T22207] [ 993.866991][T22211] FAULT_INJECTION: forcing a failure. [ 993.866991][T22211] name fail_futex, interval 1, probability 0, space 0, times 0 [ 993.880319][T22211] CPU: 0 UID: 0 PID: 22211 Comm: syz.3.3569 Tainted: G U L syzkaller #0 PREEMPT(full) [ 993.880349][T22211] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 993.880355][T22211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 993.880372][T22211] Call Trace: [ 993.880378][T22211] [ 993.880384][T22211] dump_stack_lvl+0x100/0x190 [ 993.880416][T22211] should_fail_ex.cold+0x5/0xa [ 993.880437][T22211] get_futex_key+0x1d2/0x1510 [ 993.880463][T22211] ? __pfx_get_futex_key+0x10/0x10 [ 993.880492][T22211] futex_wake+0xea/0x530 [ 993.880512][T22211] ? __pfx_futex_wake+0x10/0x10 [ 993.880532][T22211] ? errseq_sample+0x51/0x70 [ 993.880552][T22211] ? file_init_path+0x48e/0x670 [ 993.880576][T22211] do_futex+0x32b/0x350 [ 993.880591][T22211] ? __pfx_do_futex+0x10/0x10 [ 993.880606][T22211] ? fd_install+0x223/0x580 [ 993.880627][T22211] __x64_sys_futex+0x34f/0x4d0 [ 993.880643][T22211] ? __sys_socket+0xac/0x260 [ 993.880664][T22211] ? __pfx___x64_sys_futex+0x10/0x10 [ 993.880682][T22211] ? rcu_is_watching+0x12/0xc0 [ 993.880702][T22211] do_syscall_64+0x115/0x840 [ 993.880722][T22211] ? clear_bhb_loop+0x40/0x90 [ 993.880740][T22211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.880755][T22211] RIP: 0033:0x7f87e179ce59 [ 993.880769][T22211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 993.880784][T22211] RSP: 002b:00007f87df9ee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 993.880798][T22211] RAX: ffffffffffffffda RBX: 00007f87e1a15fa8 RCX: 00007f87e179ce59 [ 993.880809][T22211] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f87e1a15fac [ 993.880818][T22211] RBP: 00007f87e1a15fa0 R08: 0000000000000001 R09: 0000000000000000 [ 993.880827][T22211] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000000 [ 993.880836][T22211] R13: 00007f87e1a16038 R14: 00007ffd7c512940 R15: 00007ffd7c512a28 [ 993.880857][T22211] [ 995.148964][T22242] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 995.158839][ T30] audit: type=1326 audit(2147493366.119:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22231 comm="syz.0.3572" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ea7b9ce59 code=0x0 [ 995.896035][T22255] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 996.009296][T22255] netlink: 384 bytes leftover after parsing attributes in process `syz.0.3588'. [ 996.189630][T22254] FAULT_INJECTION: forcing a failure. [ 996.189630][T22254] name fail_futex, interval 1, probability 0, space 0, times 0 [ 996.253539][T22254] CPU: 0 UID: 0 PID: 22254 Comm: syz.3.3579 Tainted: G U L syzkaller #0 PREEMPT(full) [ 996.253567][T22254] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 996.253573][T22254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 996.253582][T22254] Call Trace: [ 996.253588][T22254] [ 996.253593][T22254] dump_stack_lvl+0x100/0x190 [ 996.253622][T22254] should_fail_ex.cold+0x5/0xa [ 996.253641][T22254] get_futex_key+0x1d2/0x1510 [ 996.253666][T22254] ? __pfx_get_futex_key+0x10/0x10 [ 996.253687][T22254] ? lock_acquire+0x1b1/0x370 [ 996.253714][T22254] futex_wake+0xea/0x530 [ 996.253732][T22254] ? __pfx_futex_wake+0x10/0x10 [ 996.253749][T22254] ? exit_mm_release+0x19/0x30 [ 996.253774][T22254] do_futex+0x32b/0x350 [ 996.253789][T22254] ? __pfx_do_futex+0x10/0x10 [ 996.253802][T22254] ? __might_fault+0xc5/0x140 [ 996.253830][T22254] mm_release+0x24a/0x2f0 [ 996.253847][T22254] do_exit+0x707/0x2af0 [ 996.253870][T22254] ? __pfx_do_exit+0x10/0x10 [ 996.253890][T22254] ? do_raw_spin_lock+0x128/0x260 [ 996.253904][T22254] ? find_held_lock+0x2b/0x80 [ 996.253920][T22254] ? get_signal+0x7e5/0x2210 [ 996.253939][T22254] do_group_exit+0xd5/0x2a0 [ 996.253960][T22254] get_signal+0x20ff/0x2210 [ 996.253981][T22254] ? rcu_is_watching+0x12/0xc0 [ 996.253997][T22254] ? ath10k_sta_statistics+0xca0/0xcf0 [ 996.254018][T22254] ? __pfx_get_signal+0x10/0x10 [ 996.254036][T22254] ? do_futex+0x192/0x350 [ 996.254051][T22254] arch_do_signal_or_restart+0x91/0x7a0 [ 996.254074][T22254] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 996.254100][T22254] ? rcu_is_watching+0x12/0xc0 [ 996.254118][T22254] exit_to_user_mode_loop+0x98/0x670 [ 996.254139][T22254] ? rcu_is_watching+0x12/0xc0 [ 996.254157][T22254] do_syscall_64+0x652/0x840 [ 996.254177][T22254] ? clear_bhb_loop+0x40/0x90 [ 996.254194][T22254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.254216][T22254] RIP: 0033:0x7f87e179ce59 [ 996.254229][T22254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 996.254243][T22254] RSP: 002b:00007f87df9cd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 996.254258][T22254] RAX: fffffffffffffe00 RBX: 00007f87e1a16098 RCX: 00007f87e179ce59 [ 996.254268][T22254] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f87e1a16098 [ 996.254277][T22254] RBP: 00007f87e1a16090 R08: 0000000000000000 R09: 0000000000000000 [ 996.254286][T22254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 996.254295][T22254] R13: 00007f87e1a16128 R14: 00007ffd7c512940 R15: 00007ffd7c512a28 [ 996.254314][T22254] [ 997.009106][T22267] FAULT_INJECTION: forcing a failure. [ 997.009106][T22267] name fail_futex, interval 1, probability 0, space 0, times 0 [ 997.077802][T22267] CPU: 0 UID: 0 PID: 22267 Comm: syz.2.3581 Tainted: G U L syzkaller #0 PREEMPT(full) [ 997.077832][T22267] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 997.077838][T22267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 997.077848][T22267] Call Trace: [ 997.077853][T22267] [ 997.077860][T22267] dump_stack_lvl+0x100/0x190 [ 997.077892][T22267] should_fail_ex.cold+0x5/0xa [ 997.077911][T22267] get_futex_key+0x1d2/0x1510 [ 997.077936][T22267] ? __pfx_get_futex_key+0x10/0x10 [ 997.077966][T22267] futex_wake+0xea/0x530 [ 997.077985][T22267] ? __pfx_futex_wake+0x10/0x10 [ 997.078006][T22267] ? errseq_sample+0x51/0x70 [ 997.078026][T22267] ? file_init_path+0x48e/0x670 [ 997.078049][T22267] do_futex+0x32b/0x350 [ 997.078065][T22267] ? __pfx_do_futex+0x10/0x10 [ 997.078080][T22267] ? fd_install+0x223/0x580 [ 997.078101][T22267] __x64_sys_futex+0x34f/0x4d0 [ 997.078117][T22267] ? __sys_socket+0xac/0x260 [ 997.078138][T22267] ? __pfx___x64_sys_futex+0x10/0x10 [ 997.078160][T22267] ? rcu_is_watching+0x12/0xc0 [ 997.078179][T22267] do_syscall_64+0x115/0x840 [ 997.078209][T22267] ? clear_bhb_loop+0x40/0x90 [ 997.078229][T22267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 997.078245][T22267] RIP: 0033:0x7ff86179ce59 [ 997.078258][T22267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 997.078273][T22267] RSP: 002b:00007ff8626f20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 997.078288][T22267] RAX: ffffffffffffffda RBX: 00007ff861a15fa8 RCX: 00007ff86179ce59 [ 997.078298][T22267] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff861a15fac [ 997.078307][T22267] RBP: 00007ff861a15fa0 R08: 0000000000000001 R09: 0000000000000000 [ 997.078316][T22267] R10: 000000000000000b R11: 0000000000000246 R12: 0000000000000000 [ 997.078326][T22267] R13: 00007ff861a16038 R14: 00007ffdc36a7420 R15: 00007ffdc36a7508 [ 997.078346][T22267] [ 997.342063][T22280] FAULT_INJECTION: forcing a failure. [ 997.342063][T22280] name fail_futex, interval 1, probability 0, space 0, times 0 [ 997.355035][T22280] CPU: 0 UID: 0 PID: 22280 Comm: syz.3.3583 Tainted: G U L syzkaller #0 PREEMPT(full) [ 997.355064][T22280] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 997.355070][T22280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 997.355080][T22280] Call Trace: [ 997.355087][T22280] [ 997.355101][T22280] dump_stack_lvl+0x100/0x190 [ 997.355133][T22280] should_fail_ex.cold+0x5/0xa [ 997.355153][T22280] get_futex_key+0x1d2/0x1510 [ 997.355179][T22280] ? __pfx_get_futex_key+0x10/0x10 [ 997.355201][T22280] ? find_held_lock+0x2b/0x80 [ 997.355219][T22280] ? futex_wake+0x456/0x530 [ 997.355240][T22280] futex_wake+0xea/0x530 [ 997.355258][T22280] ? __pfx_futex_wait+0x10/0x10 [ 997.355276][T22280] ? __pfx_futex_wake+0x10/0x10 [ 997.355298][T22280] ? is_valid_madvise+0xc0/0xd0 [ 997.355319][T22280] do_futex+0x32b/0x350 [ 997.355335][T22280] ? __pfx_do_futex+0x10/0x10 [ 997.355355][T22280] __x64_sys_futex+0x34f/0x4d0 [ 997.355373][T22280] ? __pfx___x64_sys_futex+0x10/0x10 [ 997.355389][T22280] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 997.355411][T22280] ? syscall_user_dispatch+0x76/0x130 [ 997.355430][T22280] do_syscall_64+0x115/0x840 [ 997.355451][T22280] ? clear_bhb_loop+0x40/0x90 [ 997.355469][T22280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 997.355484][T22280] RIP: 0033:0x7f87e179ce59 [ 997.355498][T22280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 997.355513][T22280] RSP: 002b:00007f87df9ee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 997.355528][T22280] RAX: ffffffffffffffda RBX: 00007f87e1a15fa8 RCX: 00007f87e179ce59 [ 997.355538][T22280] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f87e1a15fac [ 997.355547][T22280] RBP: 00007f87e1a15fa0 R08: 0000000000000001 R09: 0000000000000000 [ 997.355556][T22280] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 997.355565][T22280] R13: 00007f87e1a16038 R14: 00007ffd7c512940 R15: 00007ffd7c512a28 [ 997.355585][T22280] [ 997.357404][T22276] FAULT_INJECTION: forcing a failure. [ 997.357404][T22276] name fail_futex, interval 1, probability 0, space 0, times 0 [ 997.707813][T22276] CPU: 0 UID: 0 PID: 22276 Comm: syz.0.3590 Tainted: G U L syzkaller #0 PREEMPT(full) [ 997.707840][T22276] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 997.707846][T22276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 997.707855][T22276] Call Trace: [ 997.707860][T22276] [ 997.707866][T22276] dump_stack_lvl+0x100/0x190 [ 997.707895][T22276] should_fail_ex.cold+0x5/0xa [ 997.707914][T22276] get_futex_key+0x1d2/0x1510 [ 997.707939][T22276] ? __pfx_get_futex_key+0x10/0x10 [ 997.707960][T22276] ? lock_acquire+0x1b1/0x370 [ 997.707986][T22276] futex_wake+0xea/0x530 [ 997.708005][T22276] ? __pfx_futex_wake+0x10/0x10 [ 997.708032][T22276] ? exit_mm_release+0x19/0x30 [ 997.708057][T22276] do_futex+0x32b/0x350 [ 997.708072][T22276] ? __pfx_do_futex+0x10/0x10 [ 997.708085][T22276] ? __might_fault+0xc5/0x140 [ 997.708111][T22276] mm_release+0x24a/0x2f0 [ 997.708131][T22276] do_exit+0x707/0x2af0 [ 997.708154][T22276] ? __pfx_do_exit+0x10/0x10 [ 997.708174][T22276] ? do_raw_spin_lock+0x128/0x260 [ 997.708188][T22276] ? find_held_lock+0x2b/0x80 [ 997.708205][T22276] ? get_signal+0x7e5/0x2210 [ 997.708224][T22276] do_group_exit+0xd5/0x2a0 [ 997.708245][T22276] get_signal+0x20ff/0x2210 [ 997.708266][T22276] ? rcu_is_watching+0x12/0xc0 [ 997.708281][T22276] ? ath10k_sta_statistics+0xca0/0xcf0 [ 997.708300][T22276] ? __pfx_get_signal+0x10/0x10 [ 997.708318][T22276] ? do_futex+0x192/0x350 [ 997.708334][T22276] arch_do_signal_or_restart+0x91/0x7a0 [ 997.708356][T22276] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 997.708383][T22276] ? rcu_is_watching+0x12/0xc0 [ 997.708400][T22276] exit_to_user_mode_loop+0x98/0x670 [ 997.708422][T22276] ? rcu_is_watching+0x12/0xc0 [ 997.708439][T22276] do_syscall_64+0x652/0x840 [ 997.708459][T22276] ? clear_bhb_loop+0x40/0x90 [ 997.708477][T22276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 997.708491][T22276] RIP: 0033:0x7f8ea7b9ce59 [ 997.708504][T22276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 997.708518][T22276] RSP: 002b:00007f8ea8a850e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 997.708533][T22276] RAX: fffffffffffffe00 RBX: 00007f8ea7e16098 RCX: 00007f8ea7b9ce59 [ 997.708543][T22276] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8ea7e16098 [ 997.708551][T22276] RBP: 00007f8ea7e16090 R08: 0000000000000000 R09: 0000000000000000 [ 997.708560][T22276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 997.708568][T22276] R13: 00007f8ea7e16128 R14: 00007ffc8ddf96c0 R15: 00007ffc8ddf97a8 [ 997.708587][T22276] [ 998.565699][T22286] FAULT_INJECTION: forcing a failure. [ 998.565699][T22286] name failslab, interval 1, probability 0, space 0, times 0 [ 998.598126][T22288] FAULT_INJECTION: forcing a failure. [ 998.598126][T22288] name failslab, interval 1, probability 0, space 0, times 0 [ 998.647775][T22286] CPU: 0 UID: 0 PID: 22286 Comm: syz.2.3585 Tainted: G U L syzkaller #0 PREEMPT(full) [ 998.647807][T22286] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 998.647813][T22286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 998.647824][T22286] Call Trace: [ 998.647829][T22286] [ 998.647836][T22286] dump_stack_lvl+0x100/0x190 [ 998.647867][T22286] should_fail_ex.cold+0x5/0xa [ 998.647889][T22286] should_failslab+0xc2/0x120 [ 998.647907][T22286] __kmalloc_cache_noprof+0x7a/0x6f0 [ 998.647928][T22286] ? snd_pcm_oss_change_params_locked+0x247/0x39f0 [ 998.647955][T22286] snd_pcm_oss_change_params_locked+0x247/0x39f0 [ 998.647980][T22286] ? trace_contention_end+0x122/0x170 [ 998.647998][T22286] ? snd_pcm_oss_sync+0x243/0x840 [ 998.648027][T22286] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 998.648052][T22286] ? __pfx___mutex_lock+0x10/0x10 [ 998.648081][T22286] ? __fsnotify_parent+0x2b4/0xca0 [ 998.648107][T22286] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 998.648129][T22286] snd_pcm_oss_sync+0x265/0x840 [ 998.648153][T22286] snd_pcm_oss_release+0x238/0x300 [ 998.648179][T22286] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 998.648204][T22286] __fput+0x3ff/0xb50 [ 998.648229][T22286] task_work_run+0x150/0x240 [ 998.648245][T22286] ? __pfx_task_work_run+0x10/0x10 [ 998.648261][T22286] ? rcu_is_watching+0x12/0xc0 [ 998.648281][T22286] exit_to_user_mode_loop+0x157/0x670 [ 998.648305][T22286] ? rcu_is_watching+0x12/0xc0 [ 998.648324][T22286] do_syscall_64+0x652/0x840 [ 998.648344][T22286] ? clear_bhb_loop+0x40/0x90 [ 998.648362][T22286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.648377][T22286] RIP: 0033:0x7ff86179ce59 [ 998.648391][T22286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 998.648405][T22286] RSP: 002b:00007ff8626f2028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 998.648420][T22286] RAX: 0000000000000000 RBX: 00007ff861a15fa0 RCX: 00007ff86179ce59 [ 998.648430][T22286] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 998.648438][T22286] RBP: 00007ff861832d6f R08: 0000000000000000 R09: 0000000000000000 [ 998.648448][T22286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 998.648457][T22286] R13: 00007ff861a16038 R14: 00007ff861a15fa0 R15: 00007ffdc36a7508 [ 998.648478][T22286] [ 998.887746][T22288] CPU: 0 UID: 0 PID: 22288 Comm: syz.3.3586 Tainted: G U L syzkaller #0 PREEMPT(full) [ 998.887776][T22288] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 998.887782][T22288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 998.887791][T22288] Call Trace: [ 998.887796][T22288] [ 998.887802][T22288] dump_stack_lvl+0x100/0x190 [ 998.887831][T22288] should_fail_ex.cold+0x5/0xa [ 998.887850][T22288] ? iter_file_splice_write+0x1d8/0x10a0 [ 998.887869][T22288] should_failslab+0xc2/0x120 [ 998.887886][T22288] __kmalloc_noprof+0xe0/0x850 [ 998.887907][T22288] ? __pfx___might_resched+0x10/0x10 [ 998.887926][T22288] iter_file_splice_write+0x1d8/0x10a0 [ 998.887954][T22288] ? __pfx_iter_file_splice_write+0x10/0x10 [ 998.887972][T22288] ? __lock_acquire+0x4a5/0x2630 [ 998.888001][T22288] ? shmem_file_splice_read+0x724/0xd80 [ 998.888028][T22288] ? __pfx_iter_file_splice_write+0x10/0x10 [ 998.888047][T22288] direct_splice_actor+0x192/0x6c0 [ 998.888067][T22288] splice_direct_to_actor+0x345/0xa30 [ 998.888086][T22288] ? __pfx_direct_splice_actor+0x10/0x10 [ 998.888107][T22288] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 998.888130][T22288] do_splice_direct+0x174/0x240 [ 998.888148][T22288] ? __pfx_do_splice_direct+0x10/0x10 [ 998.888166][T22288] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 998.888186][T22288] ? rw_verify_area+0xce/0x6d0 [ 998.888202][T22288] do_sendfile+0xadc/0xe20 [ 998.888221][T22288] ? __pfx_do_sendfile+0x10/0x10 [ 998.888243][T22288] __x64_sys_sendfile64+0x154/0x220 [ 998.888263][T22288] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 998.888284][T22288] ? rcu_is_watching+0x12/0xc0 [ 998.888303][T22288] do_syscall_64+0x115/0x840 [ 998.888322][T22288] ? clear_bhb_loop+0x40/0x90 [ 998.888340][T22288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.888354][T22288] RIP: 0033:0x7f87e179ce59 [ 998.888367][T22288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 998.888381][T22288] RSP: 002b:00007f87df9ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 998.888395][T22288] RAX: ffffffffffffffda RBX: 00007f87e1a15fa0 RCX: 00007f87e179ce59 [ 998.888405][T22288] RDX: 0000200000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 998.888414][T22288] RBP: 00007f87df9ee090 R08: 0000000000000000 R09: 0000000000000000 [ 998.888423][T22288] R10: 0000000000000b5d R11: 0000000000000246 R12: 0000000000000002 [ 998.888431][T22288] R13: 00007f87e1a16038 R14: 00007f87e1a15fa0 R15: 00007ffd7c512a28 [ 998.888450][T22288] [ 999.438323][T22292] FAULT_INJECTION: forcing a failure. [ 999.438323][T22292] name failslab, interval 1, probability 0, space 0, times 0 [ 999.497857][T22292] CPU: 0 UID: 0 PID: 22292 Comm: syz.1.3587 Tainted: G U L syzkaller #0 PREEMPT(full) [ 999.497885][T22292] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 999.497891][T22292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 999.497900][T22292] Call Trace: [ 999.497906][T22292] [ 999.497912][T22292] dump_stack_lvl+0x100/0x190 [ 999.497946][T22292] should_fail_ex.cold+0x5/0xa [ 999.497966][T22292] should_failslab+0xc2/0x120 [ 999.497983][T22292] __kmalloc_cache_noprof+0x7a/0x6f0 [ 999.498003][T22292] ? __io_uring_add_tctx_node+0x179/0x4f0 [ 999.498025][T22292] __io_uring_add_tctx_node+0x179/0x4f0 [ 999.498044][T22292] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 999.498062][T22292] ? __fget_files+0x21f/0x3d0 [ 999.498082][T22292] __io_uring_add_tctx_node_from_submit+0x89/0x130 [ 999.498101][T22292] __do_sys_io_uring_enter+0x1656/0x1b50 [ 999.498127][T22292] ? __fget_files+0x21f/0x3d0 [ 999.498142][T22292] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 999.498166][T22292] ? fput+0x79/0x100 [ 999.498184][T22292] ? ksys_write+0x1ac/0x250 [ 999.498200][T22292] ? __pfx_ksys_write+0x10/0x10 [ 999.498217][T22292] ? rcu_is_watching+0x12/0xc0 [ 999.498236][T22292] do_syscall_64+0x115/0x840 [ 999.498255][T22292] ? clear_bhb_loop+0x40/0x90 [ 999.498273][T22292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.498287][T22292] RIP: 0033:0x7fe6dfd9ce59 [ 999.498301][T22292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 999.498314][T22292] RSP: 002b:00007fe6e0d19028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 999.498329][T22292] RAX: ffffffffffffffda RBX: 00007fe6e0016090 RCX: 00007fe6dfd9ce59 [ 999.498338][T22292] RDX: 0000000080000001 RSI: 0000000000000a84 RDI: 0000000000000003 [ 999.498347][T22292] RBP: 00007fe6e0d19090 R08: 0000000000000000 R09: 0000000000000046 [ 999.498356][T22292] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000001 [ 999.498364][T22292] R13: 00007fe6e0016128 R14: 00007fe6e0016090 R15: 00007fff03a4d8a8 [ 999.498383][T22292] [ 1000.240927][T22301] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 1000.280271][T22301] netlink: 384 bytes leftover after parsing attributes in process `syz.2.3591'. [ 1000.828501][ T30] audit: type=1326 audit(2147493371.818:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22305 comm="syz.1.3589" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe6dfd9ce59 code=0x0 [ 1002.031090][T22337] FAULT_INJECTION: forcing a failure. [ 1002.031090][T22337] name failslab, interval 1, probability 0, space 0, times 0 [ 1002.070920][T22334] [U] ^\ [ 1002.077843][T22337] CPU: 0 UID: 0 PID: 22337 Comm: syz.1.3598 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1002.077873][T22337] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1002.077880][T22337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1002.077890][T22337] Call Trace: [ 1002.077896][T22337] [ 1002.077903][T22337] dump_stack_lvl+0x100/0x190 [ 1002.077933][T22337] should_fail_ex.cold+0x5/0xa [ 1002.077955][T22337] should_failslab+0xc2/0x120 [ 1002.077973][T22337] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1002.077994][T22337] ? snd_pcm_oss_change_params_locked+0x247/0x39f0 [ 1002.078020][T22337] snd_pcm_oss_change_params_locked+0x247/0x39f0 [ 1002.078045][T22337] ? trace_contention_end+0x122/0x170 [ 1002.078063][T22337] ? snd_pcm_oss_sync+0x243/0x840 [ 1002.078083][T22337] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1002.078107][T22337] ? __pfx___mutex_lock+0x10/0x10 [ 1002.078134][T22337] ? __fsnotify_parent+0x2b4/0xca0 [ 1002.078160][T22337] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 1002.078182][T22337] snd_pcm_oss_sync+0x265/0x840 [ 1002.078206][T22337] snd_pcm_oss_release+0x238/0x300 [ 1002.078226][T22337] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1002.078248][T22337] __fput+0x3ff/0xb50 [ 1002.078272][T22337] task_work_run+0x150/0x240 [ 1002.078288][T22337] ? __pfx_task_work_run+0x10/0x10 [ 1002.078304][T22337] ? rcu_is_watching+0x12/0xc0 [ 1002.078323][T22337] exit_to_user_mode_loop+0x157/0x670 [ 1002.078348][T22337] ? rcu_is_watching+0x12/0xc0 [ 1002.078366][T22337] do_syscall_64+0x652/0x840 [ 1002.078386][T22337] ? clear_bhb_loop+0x40/0x90 [ 1002.078405][T22337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.078426][T22337] RIP: 0033:0x7fe6dfd9ce59 [ 1002.078441][T22337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1002.078457][T22337] RSP: 002b:00007fe6e0d3a028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1002.078473][T22337] RAX: 0000000000000000 RBX: 00007fe6e0015fa0 RCX: 00007fe6dfd9ce59 [ 1002.078483][T22337] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1002.078493][T22337] RBP: 00007fe6dfe32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1002.078504][T22337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1002.078513][T22337] R13: 00007fe6e0016038 R14: 00007fe6e0015fa0 R15: 00007fff03a4d8a8 [ 1002.078533][T22337] [ 1003.688865][T22359] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 1003.868868][T22363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3609'. [ 1005.098602][T22373] Process accounting paused [ 1005.198182][T22392] random: crng reseeded on system resumption [ 1005.421632][T22401] FAULT_INJECTION: forcing a failure. [ 1005.421632][T22401] name failslab, interval 1, probability 0, space 0, times 0 [ 1005.479186][T22401] CPU: 0 UID: 0 PID: 22401 Comm: syz.3.3618 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1005.479215][T22401] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1005.479221][T22401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1005.479231][T22401] Call Trace: [ 1005.479237][T22401] [ 1005.479243][T22401] dump_stack_lvl+0x100/0x190 [ 1005.479276][T22401] should_fail_ex.cold+0x5/0xa [ 1005.479296][T22401] ? sk_prot_alloc+0x10b/0x2a0 [ 1005.479314][T22401] should_failslab+0xc2/0x120 [ 1005.479334][T22401] __kmalloc_noprof+0xe0/0x850 [ 1005.479361][T22401] sk_prot_alloc+0x10b/0x2a0 [ 1005.479380][T22401] sk_alloc+0x36/0xe80 [ 1005.479404][T22401] __netlink_create+0x5e/0x2c0 [ 1005.479421][T22401] ? __wake_up+0x3f/0x60 [ 1005.479442][T22401] netlink_create+0x29b/0x610 [ 1005.479459][T22401] ? __pfx_genl_bind+0x10/0x10 [ 1005.479478][T22401] ? __pfx_genl_unbind+0x10/0x10 [ 1005.479496][T22401] ? __pfx_genl_release+0x10/0x10 [ 1005.479518][T22401] __sock_create+0x339/0x860 [ 1005.479542][T22401] __sys_socket+0x14d/0x260 [ 1005.479562][T22401] ? exc_page_fault+0x6f/0xd0 [ 1005.479582][T22401] ? __pfx___sys_socket+0x10/0x10 [ 1005.479603][T22401] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 1005.479636][T22401] __x64_sys_socket+0x72/0xb0 [ 1005.479657][T22401] ? lockdep_hardirqs_on+0x78/0x100 [ 1005.479677][T22401] do_syscall_64+0x115/0x840 [ 1005.479698][T22401] ? clear_bhb_loop+0x40/0x90 [ 1005.479716][T22401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.479731][T22401] RIP: 0033:0x7f87e179e6c7 [ 1005.479745][T22401] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1005.479760][T22401] RSP: 002b:00007f87df9ecf98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1005.479775][T22401] RAX: ffffffffffffffda RBX: 00007f87e1a15fa0 RCX: 00007f87e179e6c7 [ 1005.479785][T22401] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1005.479794][T22401] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 1005.479803][T22401] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 1005.479812][T22401] R13: 00007f87e1a16038 R14: 00007f87e1a15fa0 R15: 00007ffd7c512a28 [ 1005.479832][T22401] [ 1005.850419][T22405] FAULT_INJECTION: forcing a failure. [ 1005.850419][T22405] name failslab, interval 1, probability 0, space 0, times 0 [ 1005.863133][T22405] CPU: 0 UID: 0 PID: 22405 Comm: syz.3.3620 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1005.863159][T22405] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1005.863164][T22405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1005.863173][T22405] Call Trace: [ 1005.863178][T22405] [ 1005.863185][T22405] dump_stack_lvl+0x100/0x190 [ 1005.863214][T22405] should_fail_ex.cold+0x5/0xa [ 1005.863233][T22405] ? iter_file_splice_write+0x1d8/0x10a0 [ 1005.863251][T22405] should_failslab+0xc2/0x120 [ 1005.863269][T22405] __kmalloc_noprof+0xe0/0x850 [ 1005.863290][T22405] ? __pfx___might_resched+0x10/0x10 [ 1005.863309][T22405] iter_file_splice_write+0x1d8/0x10a0 [ 1005.863337][T22405] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1005.863355][T22405] ? __lock_acquire+0x4a5/0x2630 [ 1005.863377][T22405] ? shmem_file_splice_read+0x724/0xd80 [ 1005.863403][T22405] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1005.863423][T22405] direct_splice_actor+0x192/0x6c0 [ 1005.863442][T22405] splice_direct_to_actor+0x345/0xa30 [ 1005.863461][T22405] ? __pfx_direct_splice_actor+0x10/0x10 [ 1005.863482][T22405] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1005.863505][T22405] do_splice_direct+0x174/0x240 [ 1005.863523][T22405] ? __pfx_do_splice_direct+0x10/0x10 [ 1005.863541][T22405] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1005.863561][T22405] ? rw_verify_area+0xce/0x6d0 [ 1005.863583][T22405] do_sendfile+0xadc/0xe20 [ 1005.863602][T22405] ? __pfx_do_sendfile+0x10/0x10 [ 1005.863624][T22405] __x64_sys_sendfile64+0x154/0x220 [ 1005.863644][T22405] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1005.863664][T22405] ? rcu_is_watching+0x12/0xc0 [ 1005.863683][T22405] do_syscall_64+0x115/0x840 [ 1005.863703][T22405] ? clear_bhb_loop+0x40/0x90 [ 1005.863720][T22405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.863735][T22405] RIP: 0033:0x7f87e179ce59 [ 1005.863748][T22405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1005.863763][T22405] RSP: 002b:00007f87df9ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1005.863777][T22405] RAX: ffffffffffffffda RBX: 00007f87e1a15fa0 RCX: 00007f87e179ce59 [ 1005.863787][T22405] RDX: 0000200000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 1005.863796][T22405] RBP: 00007f87df9ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1005.863805][T22405] R10: 0000000000000b5d R11: 0000000000000246 R12: 0000000000000002 [ 1005.863814][T22405] R13: 00007f87e1a16038 R14: 00007f87e1a15fa0 R15: 00007ffd7c512a28 [ 1005.863833][T22405] [ 1009.286799][T22465] Loading of unsigned module is rejected [ 1009.303705][T22464] random: crng reseeded on system resumption [ 1009.496554][T22458] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3631'. [ 1012.861338][T22480] [U] ^\ [ 1015.023250][T22515] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 1017.926178][T22551] Process accounting resumed [ 1018.735542][ T30] audit: type=1326 audit(2147493389.811:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22573 comm="syz.2.3656" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff86179ce59 code=0x0 [ 1019.192413][T22581] FAULT_INJECTION: forcing a failure. [ 1019.192413][T22581] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1019.266342][T22581] CPU: 0 UID: 0 PID: 22581 Comm: syz.3.3658 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1019.266372][T22581] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1019.266379][T22581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1019.266389][T22581] Call Trace: [ 1019.266395][T22581] [ 1019.266402][T22581] dump_stack_lvl+0x100/0x190 [ 1019.266434][T22581] should_fail_ex.cold+0x5/0xa [ 1019.266455][T22581] get_futex_key+0x1d2/0x1510 [ 1019.266481][T22581] ? __pfx_get_futex_key+0x10/0x10 [ 1019.266502][T22581] ? futex_hash+0x2ad/0x370 [ 1019.266534][T22581] ? futex_hash+0x141/0x370 [ 1019.266560][T22581] futex_wake+0xea/0x530 [ 1019.266578][T22581] ? __pfx_futex_wait+0x10/0x10 [ 1019.266598][T22581] ? __pfx_futex_wake+0x10/0x10 [ 1019.266618][T22581] ? do_writev+0x214/0x340 [ 1019.266639][T22581] do_futex+0x32b/0x350 [ 1019.266655][T22581] ? __pfx_do_futex+0x10/0x10 [ 1019.266670][T22581] ? cap_task_prctl+0x104/0xa50 [ 1019.266690][T22581] __x64_sys_futex+0x34f/0x4d0 [ 1019.266708][T22581] ? __pfx___x64_sys_futex+0x10/0x10 [ 1019.266724][T22581] ? __pfx___do_sys_prctl+0x10/0x10 [ 1019.266738][T22581] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 1019.266760][T22581] ? syscall_user_dispatch+0x76/0x130 [ 1019.266778][T22581] do_syscall_64+0x115/0x840 [ 1019.266800][T22581] ? clear_bhb_loop+0x40/0x90 [ 1019.266818][T22581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.266833][T22581] RIP: 0033:0x7f87e179ce59 [ 1019.266848][T22581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1019.266863][T22581] RSP: 002b:00007f87df9ee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1019.266878][T22581] RAX: ffffffffffffffda RBX: 00007f87e1a15fa8 RCX: 00007f87e179ce59 [ 1019.266889][T22581] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f87e1a15fac [ 1019.266899][T22581] RBP: 00007f87e1a15fa0 R08: 0000000000000001 R09: 0000000000000000 [ 1019.266909][T22581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1019.266918][T22581] R13: 00007f87e1a16038 R14: 00007ffd7c512940 R15: 00007ffd7c512a28 [ 1019.266938][T22581] [ 1019.560653][T22586] FAULT_INJECTION: forcing a failure. [ 1019.560653][T22586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1019.574336][T22586] CPU: 0 UID: 0 PID: 22586 Comm: syz.1.3659 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1019.574367][T22586] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1019.574375][T22586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1019.574385][T22586] Call Trace: [ 1019.574391][T22586] [ 1019.574398][T22586] dump_stack_lvl+0x100/0x190 [ 1019.574430][T22586] should_fail_ex.cold+0x5/0xa [ 1019.574450][T22586] _copy_from_user+0x2e/0xd0 [ 1019.574472][T22586] proc_do_submiturb+0x1d8e/0x3820 [ 1019.574516][T22586] usbdev_ioctl+0x2adb/0x3aa0 [ 1019.574542][T22586] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1019.574568][T22586] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1019.574591][T22586] ? do_vfs_ioctl+0x226/0x13e0 [ 1019.574606][T22586] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1019.574627][T22586] ? find_held_lock+0x2b/0x80 [ 1019.574645][T22586] ? __fget_files+0x215/0x3d0 [ 1019.574661][T22586] ? hook_file_ioctl_common+0x149/0x410 [ 1019.574688][T22586] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1019.574711][T22586] __x64_sys_ioctl+0x18e/0x210 [ 1019.574727][T22586] do_syscall_64+0x115/0x840 [ 1019.574747][T22586] ? clear_bhb_loop+0x40/0x90 [ 1019.574766][T22586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.574781][T22586] RIP: 0033:0x7fe6dfd9ce59 [ 1019.574796][T22586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1019.574811][T22586] RSP: 002b:00007fe6e0d3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1019.574827][T22586] RAX: ffffffffffffffda RBX: 00007fe6e0015fa0 RCX: 00007fe6dfd9ce59 [ 1019.574837][T22586] RDX: 0000200000000100 RSI: 000000008038550a RDI: 0000000000000009 [ 1019.574846][T22586] RBP: 00007fe6dfe32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1019.574855][T22586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1019.574864][T22586] R13: 00007fe6e0016038 R14: 00007fe6e0015fa0 R15: 00007fff03a4d8a8 [ 1019.574884][T22586] [ 1022.435018][T22622] Loading of unsigned module is rejected [ 1023.398007][T22633] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 1024.277294][ T30] audit: type=1326 audit(2147493395.380:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22642 comm="syz.1.3669" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe6dfd9ce59 code=0x0 [ 1024.870677][T22653] NFSD: Failed to start, no listeners configured. [ 1026.351065][T22683] FAULT_INJECTION: forcing a failure. [ 1026.351065][T22683] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1026.471464][T22683] CPU: 0 UID: 0 PID: 22683 Comm: syz.2.3680 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1026.471494][T22683] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1026.471500][T22683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1026.471520][T22683] Call Trace: [ 1026.471526][T22683] [ 1026.471532][T22683] dump_stack_lvl+0x100/0x190 [ 1026.471564][T22683] should_fail_ex.cold+0x5/0xa [ 1026.471585][T22683] get_futex_key+0x1d2/0x1510 [ 1026.471610][T22683] ? __pfx_get_futex_key+0x10/0x10 [ 1026.471636][T22683] ? do_raw_spin_lock+0x128/0x260 [ 1026.471656][T22683] futex_wait_setup+0x83/0x510 [ 1026.471680][T22683] __futex_wait+0x19f/0x300 [ 1026.471700][T22683] ? __pfx___futex_wait+0x10/0x10 [ 1026.471721][T22683] ? __pfx_futex_wake_mark+0x10/0x10 [ 1026.471742][T22683] ? futex_hash+0x2ad/0x370 [ 1026.471765][T22683] ? futex_hash+0x141/0x370 [ 1026.471789][T22683] futex_wait+0xe6/0x370 [ 1026.471807][T22683] ? __pfx_futex_wait+0x10/0x10 [ 1026.471829][T22683] ? rcu_is_watching+0x12/0xc0 [ 1026.471848][T22683] ? dvb_usercopy+0x1c0/0x340 [ 1026.471871][T22683] ? kfree+0x1dd/0x6c0 [ 1026.471895][T22683] do_futex+0x1ef/0x350 [ 1026.471911][T22683] ? __pfx_do_futex+0x10/0x10 [ 1026.471932][T22683] __x64_sys_futex+0x34f/0x4d0 [ 1026.471949][T22683] ? __fget_files+0x21f/0x3d0 [ 1026.471967][T22683] ? __pfx___x64_sys_futex+0x10/0x10 [ 1026.471985][T22683] ? rcu_is_watching+0x12/0xc0 [ 1026.472004][T22683] do_syscall_64+0x115/0x840 [ 1026.472025][T22683] ? clear_bhb_loop+0x40/0x90 [ 1026.472043][T22683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.472058][T22683] RIP: 0033:0x7ff86179ce59 [ 1026.472072][T22683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1026.472087][T22683] RSP: 002b:00007ff8626d10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1026.472102][T22683] RAX: ffffffffffffffda RBX: 00007ff861a16098 RCX: 00007ff86179ce59 [ 1026.472112][T22683] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff861a16098 [ 1026.472121][T22683] RBP: 00007ff861a16090 R08: 0000000000000000 R09: 0000000000000000 [ 1026.472130][T22683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1026.472139][T22683] R13: 00007ff861a16128 R14: 00007ffdc36a7420 R15: 00007ffdc36a7508 [ 1026.472158][T22683] [ 1026.813322][T22690] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 1027.025370][T22695] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3685'. [ 1027.547187][ T30] audit: type=1326 audit(2147493398.677:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22696 comm="syz.3.3686" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f87e179ce59 code=0x0 [ 1027.878353][T22707] NFSD: Failed to start, no listeners configured. [ 1029.566564][T22774] FAULT_INJECTION: forcing a failure. [ 1029.566564][T22774] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1029.566598][T22774] CPU: 0 UID: 0 PID: 22774 Comm: syz.3.3695 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1029.566623][T22774] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1029.566629][T22774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1029.566638][T22774] Call Trace: [ 1029.566644][T22774] [ 1029.566652][T22774] dump_stack_lvl+0x100/0x190 [ 1029.566682][T22774] should_fail_ex.cold+0x5/0xa [ 1029.566700][T22774] ? rcu_is_watching+0x12/0xc0 [ 1029.566719][T22774] get_futex_key+0x1d2/0x1510 [ 1029.566746][T22774] ? __pfx_get_futex_key+0x10/0x10 [ 1029.566775][T22774] futex_wait_setup+0x83/0x510 [ 1029.566799][T22774] __futex_wait+0x19f/0x300 [ 1029.566819][T22774] ? __pfx___futex_wait+0x10/0x10 [ 1029.566840][T22774] ? __pfx_futex_wake_mark+0x10/0x10 [ 1029.566863][T22774] ? find_held_lock+0x2b/0x80 [ 1029.566881][T22774] ? futex_wake+0x456/0x530 [ 1029.566902][T22774] futex_wait+0xe6/0x370 [ 1029.566921][T22774] ? __pfx_futex_wait+0x10/0x10 [ 1029.566943][T22774] ? rcu_is_watching+0x12/0xc0 [ 1029.566958][T22774] ? dvb_usercopy+0x1c0/0x340 [ 1029.566981][T22774] ? kfree+0x1dd/0x6c0 [ 1029.567004][T22774] do_futex+0x1ef/0x350 [ 1029.567020][T22774] ? __pfx_do_futex+0x10/0x10 [ 1029.567041][T22774] __x64_sys_futex+0x34f/0x4d0 [ 1029.567060][T22774] ? __pfx___x64_sys_futex+0x10/0x10 [ 1029.567079][T22774] ? rcu_is_watching+0x12/0xc0 [ 1029.567097][T22774] do_syscall_64+0x115/0x840 [ 1029.567119][T22774] ? clear_bhb_loop+0x40/0x90 [ 1029.567137][T22774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.567153][T22774] RIP: 0033:0x7f87e179ce59 [ 1029.567166][T22774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1029.567181][T22774] RSP: 002b:00007f87df9cd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1029.567196][T22774] RAX: ffffffffffffffda RBX: 00007f87e1a16098 RCX: 00007f87e179ce59 [ 1029.567206][T22774] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f87e1a16098 [ 1029.567216][T22774] RBP: 00007f87e1a16090 R08: 0000000000000000 R09: 0000000000000000 [ 1029.567225][T22774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1029.567234][T22774] R13: 00007f87e1a16128 R14: 00007ffd7c512940 R15: 00007ffd7c512a28 [ 1029.567253][T22774] [ 1030.643175][T22787] FAULT_INJECTION: forcing a failure. [ 1030.643175][T22787] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1030.643206][T22787] CPU: 0 UID: 0 PID: 22787 Comm: syz.0.3699 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1030.643229][T22787] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1030.643234][T22787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1030.643243][T22787] Call Trace: [ 1030.643249][T22787] [ 1030.643254][T22787] dump_stack_lvl+0x100/0x190 [ 1030.643283][T22787] should_fail_ex.cold+0x5/0xa [ 1030.643302][T22787] get_futex_key+0x295/0x1510 [ 1030.643328][T22787] ? __pfx_get_futex_key+0x10/0x10 [ 1030.643348][T22787] ? lock_acquire+0x1b1/0x370 [ 1030.643375][T22787] futex_wake+0xea/0x530 [ 1030.643393][T22787] ? __pfx_futex_wake+0x10/0x10 [ 1030.643410][T22787] ? exit_mm_release+0x19/0x30 [ 1030.643435][T22787] do_futex+0x32b/0x350 [ 1030.643449][T22787] ? __pfx_do_futex+0x10/0x10 [ 1030.643462][T22787] ? __might_fault+0xc5/0x140 [ 1030.643489][T22787] mm_release+0x24a/0x2f0 [ 1030.643524][T22787] do_exit+0x707/0x2af0 [ 1030.643550][T22787] ? __pfx_do_exit+0x10/0x10 [ 1030.643569][T22787] ? do_raw_spin_lock+0x128/0x260 [ 1030.643584][T22787] ? find_held_lock+0x2b/0x80 [ 1030.643607][T22787] ? get_signal+0x7e5/0x2210 [ 1030.643625][T22787] do_group_exit+0xd5/0x2a0 [ 1030.643646][T22787] get_signal+0x20ff/0x2210 [ 1030.643667][T22787] ? rcu_is_watching+0x12/0xc0 [ 1030.643683][T22787] ? ath10k_sta_statistics+0xca0/0xcf0 [ 1030.643702][T22787] ? __pfx_get_signal+0x10/0x10 [ 1030.643720][T22787] ? do_futex+0x192/0x350 [ 1030.643735][T22787] arch_do_signal_or_restart+0x91/0x7a0 [ 1030.643757][T22787] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1030.643784][T22787] ? rcu_is_watching+0x12/0xc0 [ 1030.643801][T22787] exit_to_user_mode_loop+0x98/0x670 [ 1030.643823][T22787] ? rcu_is_watching+0x12/0xc0 [ 1030.643840][T22787] do_syscall_64+0x652/0x840 [ 1030.643860][T22787] ? clear_bhb_loop+0x40/0x90 [ 1030.643877][T22787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.643891][T22787] RIP: 0033:0x7f8ea7b9ce59 [ 1030.643905][T22787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1030.643918][T22787] RSP: 002b:00007f8ea8a850e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1030.643933][T22787] RAX: fffffffffffffe00 RBX: 00007f8ea7e16098 RCX: 00007f8ea7b9ce59 [ 1030.643942][T22787] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8ea7e16098 [ 1030.643951][T22787] RBP: 00007f8ea7e16090 R08: 0000000000000000 R09: 0000000000000000 [ 1030.643959][T22787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1030.643968][T22787] R13: 00007f8ea7e16128 R14: 00007ffc8ddf96c0 R15: 00007ffc8ddf97a8 [ 1030.643986][T22787] [ 1030.804994][T22791] FAULT_INJECTION: forcing a failure. [ 1030.804994][T22791] name failslab, interval 1, probability 0, space 0, times 0 [ 1030.805025][T22791] CPU: 0 UID: 0 PID: 22791 Comm: syz.3.3700 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1030.805047][T22791] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1030.805053][T22791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1030.805062][T22791] Call Trace: [ 1030.805067][T22791] [ 1030.805073][T22791] dump_stack_lvl+0x100/0x190 [ 1030.805102][T22791] should_fail_ex.cold+0x5/0xa [ 1030.805120][T22791] should_failslab+0xc2/0x120 [ 1030.805139][T22791] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1030.805159][T22791] ? alloc_pipe_info+0x10e/0x590 [ 1030.805177][T22791] ? find_held_lock+0x2b/0x80 [ 1030.805198][T22791] alloc_pipe_info+0x10e/0x590 [ 1030.805217][T22791] splice_direct_to_actor+0x78f/0xa30 [ 1030.805236][T22791] ? __lock_acquire+0x4a5/0x2630 [ 1030.805255][T22791] ? __pfx_direct_splice_actor+0x10/0x10 [ 1030.805274][T22791] ? __pfx_aa_file_perm+0x10/0x10 [ 1030.805296][T22791] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1030.805319][T22791] do_splice_direct+0x174/0x240 [ 1030.805337][T22791] ? __pfx_do_splice_direct+0x10/0x10 [ 1030.805355][T22791] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1030.805375][T22791] ? rw_verify_area+0xce/0x6d0 [ 1030.805391][T22791] do_sendfile+0xadc/0xe20 [ 1030.805410][T22791] ? __pfx_do_sendfile+0x10/0x10 [ 1030.805426][T22791] ? __fget_files+0x21f/0x3d0 [ 1030.805447][T22791] __x64_sys_sendfile64+0x1d8/0x220 [ 1030.805465][T22791] ? ksys_write+0x1ac/0x250 [ 1030.805480][T22791] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1030.805500][T22791] ? rcu_is_watching+0x12/0xc0 [ 1030.805519][T22791] do_syscall_64+0x115/0x840 [ 1030.805539][T22791] ? clear_bhb_loop+0x40/0x90 [ 1030.805562][T22791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.805578][T22791] RIP: 0033:0x7f87e179ce59 [ 1030.805590][T22791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1030.805604][T22791] RSP: 002b:00007f87df9ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1030.805618][T22791] RAX: ffffffffffffffda RBX: 00007f87e1a15fa0 RCX: 00007f87e179ce59 [ 1030.805628][T22791] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1030.805636][T22791] RBP: 00007f87df9ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1030.805645][T22791] R10: 0000000000000443 R11: 0000000000000246 R12: 0000000000000001 [ 1030.805653][T22791] R13: 00007f87e1a16038 R14: 00007f87e1a15fa0 R15: 00007ffd7c512a28 [ 1030.805672][T22791] [ 1031.052100][T22797] netlink: 504 bytes leftover after parsing attributes in process `syz.0.3703'. [ 1031.432927][T22779] Process accounting resumed [ 1032.378147][T22815] FAULT_INJECTION: forcing a failure. [ 1032.378147][T22815] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1032.480130][T22815] CPU: 0 UID: 0 PID: 22815 Comm: syz.0.3705 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1032.480159][T22815] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1032.480166][T22815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1032.480175][T22815] Call Trace: [ 1032.480181][T22815] [ 1032.480187][T22815] dump_stack_lvl+0x100/0x190 [ 1032.480218][T22815] should_fail_ex.cold+0x5/0xa [ 1032.480239][T22815] get_futex_key+0x1d2/0x1510 [ 1032.480265][T22815] ? __pfx_get_futex_key+0x10/0x10 [ 1032.480288][T22815] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 1032.480310][T22815] ? __print_lock_name+0x63/0x80 [ 1032.480334][T22815] futex_wake+0xea/0x530 [ 1032.480350][T22815] ? dvb_dmxdev_filter_start+0x8d1/0xdd0 [ 1032.480369][T22815] ? __pfx_futex_wake+0x10/0x10 [ 1032.480390][T22815] ? rcu_is_watching+0x12/0xc0 [ 1032.480406][T22815] ? dvb_usercopy+0x1c0/0x340 [ 1032.480428][T22815] ? kfree+0x1dd/0x6c0 [ 1032.480460][T22815] do_futex+0x32b/0x350 [ 1032.480476][T22815] ? __pfx_do_futex+0x10/0x10 [ 1032.480497][T22815] __x64_sys_futex+0x34f/0x4d0 [ 1032.480516][T22815] ? __pfx___x64_sys_futex+0x10/0x10 [ 1032.480536][T22815] ? rcu_is_watching+0x12/0xc0 [ 1032.480555][T22815] do_syscall_64+0x115/0x840 [ 1032.480576][T22815] ? clear_bhb_loop+0x40/0x90 [ 1032.480594][T22815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.480609][T22815] RIP: 0033:0x7f8ea7b9ce59 [ 1032.480623][T22815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1032.480637][T22815] RSP: 002b:00007f8ea8a850e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1032.480652][T22815] RAX: ffffffffffffffda RBX: 00007f8ea7e16098 RCX: 00007f8ea7b9ce59 [ 1032.480662][T22815] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8ea7e1609c [ 1032.480671][T22815] RBP: 00007f8ea7e16090 R08: 0000000000000001 R09: 0000000000000000 [ 1032.480680][T22815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1032.480689][T22815] R13: 00007f8ea7e16128 R14: 00007ffc8ddf96c0 R15: 00007ffc8ddf97a8 [ 1032.480708][T22815] [ 1033.188258][T22830] FAULT_INJECTION: forcing a failure. [ 1033.188258][T22830] name failslab, interval 1, probability 0, space 0, times 0 [ 1033.253468][T22830] CPU: 0 UID: 0 PID: 22830 Comm: syz.3.3709 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1033.253498][T22830] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1033.253504][T22830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1033.253514][T22830] Call Trace: [ 1033.253520][T22830] [ 1033.253527][T22830] dump_stack_lvl+0x100/0x190 [ 1033.253556][T22830] should_fail_ex.cold+0x5/0xa [ 1033.253577][T22830] should_failslab+0xc2/0x120 [ 1033.253595][T22830] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1033.253617][T22830] ? security_inode_alloc+0x3b/0x2c0 [ 1033.253635][T22830] ? lockdep_init_map_type+0x5c/0x250 [ 1033.253661][T22830] security_inode_alloc+0x3b/0x2c0 [ 1033.253678][T22830] inode_init_always_gfp+0xc77/0xfb0 [ 1033.253700][T22830] alloc_inode+0x8e/0x250 [ 1033.253722][T22830] sock_alloc+0x44/0x280 [ 1033.253738][T22830] ? security_socket_create+0x7f/0x250 [ 1033.253755][T22830] __sock_create+0xc2/0x860 [ 1033.253778][T22830] __sys_socket+0x14d/0x260 [ 1033.253798][T22830] ? __pfx___sys_socket+0x10/0x10 [ 1033.253824][T22830] __x64_sys_socket+0x72/0xb0 [ 1033.253845][T22830] ? lockdep_hardirqs_on+0x78/0x100 [ 1033.253866][T22830] do_syscall_64+0x115/0x840 [ 1033.253886][T22830] ? clear_bhb_loop+0x40/0x90 [ 1033.253905][T22830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.253922][T22830] RIP: 0033:0x7f87e179ce59 [ 1033.253936][T22830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1033.253950][T22830] RSP: 002b:00007f87df9ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1033.253965][T22830] RAX: ffffffffffffffda RBX: 00007f87e1a15fa0 RCX: 00007f87e179ce59 [ 1033.253975][T22830] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1033.253984][T22830] RBP: 00007f87e1832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1033.253993][T22830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1033.254002][T22830] R13: 00007f87e1a16038 R14: 00007f87e1a15fa0 R15: 00007ffd7c512a28 [ 1033.254021][T22830] [ 1033.254045][T22830] socket: no more sockets [ 1033.909504][ T30] audit: type=1326 audit(2147493405.010:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22834 comm="syz.0.3710" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ea7b9ce59 code=0x0 [ 1035.303085][T22858] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 1035.370717][T22853] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3713'. [ 1035.549077][T22854] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3713'. [ 1035.787519][T22867] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 1037.296864][T17471] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 1037.392836][T22904] FAULT_INJECTION: forcing a failure. [ 1037.392836][T22904] name failslab, interval 1, probability 0, space 0, times 0 [ 1037.641474][T22904] CPU: 0 UID: 0 PID: 22904 Comm: syz.3.3729 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1037.641505][T22904] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1037.641511][T22904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1037.641521][T22904] Call Trace: [ 1037.641527][T22904] [ 1037.641534][T22904] dump_stack_lvl+0x100/0x190 [ 1037.641566][T22904] should_fail_ex.cold+0x5/0xa [ 1037.641587][T22904] should_failslab+0xc2/0x120 [ 1037.641606][T22904] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 1037.641623][T22904] ? debugfs_create_symlink+0x29/0x220 [ 1037.641645][T22904] kstrdup+0x51/0xe0 [ 1037.641662][T22904] debugfs_create_symlink+0x29/0x220 [ 1037.641679][T22904] ref_tracker_dir_symlink+0x257/0x3b0 [ 1037.641698][T22904] ? __pfx_ref_tracker_dir_symlink+0x10/0x10 [ 1037.641732][T22904] ? find_held_lock+0x2b/0x80 [ 1037.641761][T22904] ? __pfx_net_ns_net_init+0x10/0x10 [ 1037.641779][T22904] net_ns_net_init+0x7e/0x120 [ 1037.641796][T22904] ops_init+0x1e2/0x5f0 [ 1037.641815][T22904] setup_net+0x118/0x3a0 [ 1037.641832][T22904] ? __pfx_setup_net+0x10/0x10 [ 1037.641849][T22904] ? mutex_init_lockdep+0xf1/0x120 [ 1037.641868][T22904] copy_net_ns+0x46f/0x7c0 [ 1037.641888][T22904] create_new_namespaces+0x3ea/0xac0 [ 1037.641911][T22904] unshare_nsproxy_namespaces+0xf2/0x220 [ 1037.641931][T22904] ksys_unshare+0x438/0xab0 [ 1037.641953][T22904] ? __pfx_ksys_unshare+0x10/0x10 [ 1037.641972][T22904] ? xfd_validate_state+0x129/0x190 [ 1037.641987][T22904] ? trace_kmalloc+0xe3/0x110 [ 1037.642010][T22904] __x64_sys_unshare+0x31/0x40 [ 1037.642030][T22904] do_syscall_64+0x115/0x840 [ 1037.642051][T22904] ? clear_bhb_loop+0x40/0x90 [ 1037.642069][T22904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.642085][T22904] RIP: 0033:0x7f87e179ce59 [ 1037.642099][T22904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1037.642114][T22904] RSP: 002b:00007f87df9ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1037.642129][T22904] RAX: ffffffffffffffda RBX: 00007f87e1a15fa0 RCX: 00007f87e179ce59 [ 1037.642139][T22904] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1037.642148][T22904] RBP: 00007f87e1832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1037.642157][T22904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1037.642165][T22904] R13: 00007f87e1a16038 R14: 00007f87e1a15fa0 R15: 00007ffd7c512a28 [ 1037.642192][T22904] [ 1038.600097][T22917] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3732'. [ 1040.213837][T22938] FAULT_INJECTION: forcing a failure. [ 1040.213837][T22938] name failslab, interval 1, probability 0, space 0, times 0 [ 1040.262031][T22938] CPU: 0 UID: 0 PID: 22938 Comm: syz.1.3737 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1040.262060][T22938] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1040.262066][T22938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1040.262075][T22938] Call Trace: [ 1040.262080][T22938] [ 1040.262086][T22938] dump_stack_lvl+0x100/0x190 [ 1040.262115][T22938] should_fail_ex.cold+0x5/0xa [ 1040.262135][T22938] ? alloc_pipe_info+0x1ec/0x590 [ 1040.262153][T22938] should_failslab+0xc2/0x120 [ 1040.262170][T22938] __kmalloc_noprof+0xe0/0x850 [ 1040.262196][T22938] alloc_pipe_info+0x1ec/0x590 [ 1040.262218][T22938] splice_direct_to_actor+0x78f/0xa30 [ 1040.262237][T22938] ? __lock_acquire+0x4a5/0x2630 [ 1040.262257][T22938] ? __pfx_direct_splice_actor+0x10/0x10 [ 1040.262276][T22938] ? __pfx_aa_file_perm+0x10/0x10 [ 1040.262298][T22938] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1040.262321][T22938] do_splice_direct+0x174/0x240 [ 1040.262339][T22938] ? __pfx_do_splice_direct+0x10/0x10 [ 1040.262357][T22938] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1040.262377][T22938] ? rw_verify_area+0xce/0x6d0 [ 1040.262392][T22938] do_sendfile+0xadc/0xe20 [ 1040.262411][T22938] ? __pfx_do_sendfile+0x10/0x10 [ 1040.262427][T22938] ? __fget_files+0x21f/0x3d0 [ 1040.262448][T22938] __x64_sys_sendfile64+0x1d8/0x220 [ 1040.262466][T22938] ? ksys_write+0x1ac/0x250 [ 1040.262481][T22938] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1040.262501][T22938] ? rcu_is_watching+0x12/0xc0 [ 1040.262519][T22938] do_syscall_64+0x115/0x840 [ 1040.262543][T22938] ? clear_bhb_loop+0x40/0x90 [ 1040.262561][T22938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.262576][T22938] RIP: 0033:0x7fe6dfd9ce59 [ 1040.262589][T22938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1040.262603][T22938] RSP: 002b:00007fe6e0d3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1040.262617][T22938] RAX: ffffffffffffffda RBX: 00007fe6e0015fa0 RCX: 00007fe6dfd9ce59 [ 1040.262627][T22938] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1040.262635][T22938] RBP: 00007fe6e0d3a090 R08: 0000000000000000 R09: 0000000000000000 [ 1040.262644][T22938] R10: 0000000000000443 R11: 0000000000000246 R12: 0000000000000001 [ 1040.262652][T22938] R13: 00007fe6e0016038 R14: 00007fe6e0015fa0 R15: 00007fff03a4d8a8 [ 1040.262671][T22938] [ 1041.701249][ T30] audit: type=1326 audit(2147493421.904:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22957 comm="syz.1.3742" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe6dfd9ce59 code=0x0 [ 1042.758262][ T30] audit: type=1326 audit(2147493422.969:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22969 comm="syz.2.3745" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff86179ce59 code=0x0 [ 1043.367389][T22896] Process accounting resumed [ 1043.525964][ T30] audit: type=1326 audit(2147493423.733:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22977 comm="syz.0.3756" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ea7b9ce59 code=0x0 [ 1043.646922][T22982] FAULT_INJECTION: forcing a failure. [ 1043.646922][T22982] name failslab, interval 1, probability 0, space 0, times 0 [ 1043.798541][T22982] CPU: 0 UID: 0 PID: 22982 Comm: syz.2.3748 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1043.798572][T22982] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1043.798579][T22982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1043.798589][T22982] Call Trace: [ 1043.798595][T22982] [ 1043.798601][T22982] dump_stack_lvl+0x100/0x190 [ 1043.798633][T22982] should_fail_ex.cold+0x5/0xa [ 1043.798654][T22982] should_failslab+0xc2/0x120 [ 1043.798673][T22982] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1043.798697][T22982] ? __d_alloc+0x34/0xa40 [ 1043.798722][T22982] __d_alloc+0x34/0xa40 [ 1043.798744][T22982] d_alloc+0x4a/0x1e0 [ 1043.798764][T22982] lookup_one_qstr_excl+0x171/0x250 [ 1043.798789][T22982] start_dirop+0x59/0xb0 [ 1043.798806][T22982] simple_start_creating+0xf9/0x110 [ 1043.798825][T22982] ? __pfx_simple_start_creating+0x10/0x10 [ 1043.798842][T22982] ? mntput+0x70/0xa0 [ 1043.798859][T22982] ? simple_pin_fs+0xa3/0x190 [ 1043.798877][T22982] debugfs_start_creating.part.0+0x82/0x170 [ 1043.798896][T22982] debugfs_create_symlink+0x7f/0x220 [ 1043.798912][T22982] ref_tracker_dir_symlink+0x257/0x3b0 [ 1043.798930][T22982] ? __pfx_ref_tracker_dir_symlink+0x10/0x10 [ 1043.798964][T22982] ? find_held_lock+0x2b/0x80 [ 1043.798989][T22982] ? __pfx_net_ns_net_init+0x10/0x10 [ 1043.799007][T22982] net_ns_net_init+0x7e/0x120 [ 1043.799023][T22982] ops_init+0x1e2/0x5f0 [ 1043.799041][T22982] setup_net+0x118/0x3a0 [ 1043.799058][T22982] ? __pfx_setup_net+0x10/0x10 [ 1043.799073][T22982] ? mutex_init_lockdep+0xf1/0x120 [ 1043.799092][T22982] copy_net_ns+0x46f/0x7c0 [ 1043.799112][T22982] create_new_namespaces+0x3ea/0xac0 [ 1043.799136][T22982] unshare_nsproxy_namespaces+0xf2/0x220 [ 1043.799156][T22982] ksys_unshare+0x438/0xab0 [ 1043.799179][T22982] ? __pfx_ksys_unshare+0x10/0x10 [ 1043.799198][T22982] ? xfd_validate_state+0x129/0x190 [ 1043.799212][T22982] ? trace_kmalloc+0xe3/0x110 [ 1043.799236][T22982] __x64_sys_unshare+0x31/0x40 [ 1043.799256][T22982] do_syscall_64+0x115/0x840 [ 1043.799277][T22982] ? clear_bhb_loop+0x40/0x90 [ 1043.799295][T22982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1043.799311][T22982] RIP: 0033:0x7ff86179ce59 [ 1043.799325][T22982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1043.799340][T22982] RSP: 002b:00007ff8626f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1043.799355][T22982] RAX: ffffffffffffffda RBX: 00007ff861a15fa0 RCX: 00007ff86179ce59 [ 1043.799366][T22982] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1043.799376][T22982] RBP: 00007ff861832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1043.799385][T22982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1043.799394][T22982] R13: 00007ff861a16038 R14: 00007ff861a15fa0 R15: 00007ffdc36a7508 [ 1043.799414][T22982] [ 1045.270746][ T10] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 1048.442397][ T30] audit: type=1326 audit(2147493437.679:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23042 comm="syz.0.3762" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ea7b9ce59 code=0x0 [ 1049.215682][T23030] Process accounting resumed [ 1049.434618][T23057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3767'. [ 1050.238979][T23084] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 1050.584716][ T30] audit: type=1326 audit(2147493439.831:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23091 comm="syz.1.3776" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe6dfd9ce59 code=0x0 [ 1051.518098][T23102] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3779'. [ 1051.549132][T23102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1051.577116][T23102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1051.600329][T23102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1051.622982][T23102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1051.871926][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1051.881037][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1053.274887][T23128] FAULT_INJECTION: forcing a failure. [ 1053.274887][T23128] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1053.449567][T23136] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 1053.460942][T23128] CPU: 0 UID: 0 PID: 23128 Comm: syz.0.3785 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1053.460971][T23128] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1053.460978][T23128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1053.460988][T23128] Call Trace: [ 1053.460993][T23128] [ 1053.461000][T23128] dump_stack_lvl+0x100/0x190 [ 1053.461032][T23128] should_fail_ex.cold+0x5/0xa [ 1053.461054][T23128] get_futex_key+0x1d2/0x1510 [ 1053.461082][T23128] ? __pfx_get_futex_key+0x10/0x10 [ 1053.461103][T23128] ? pick_eevdf+0x4d3/0x860 [ 1053.461124][T23128] ? update_se+0x94/0x770 [ 1053.461151][T23128] futex_wait_setup+0x83/0x510 [ 1053.461174][T23128] __futex_wait+0x19f/0x300 [ 1053.461194][T23128] ? __pfx___futex_wait+0x10/0x10 [ 1053.461214][T23128] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1053.461237][T23128] ? __pfx_futex_wake_mark+0x10/0x10 [ 1053.461259][T23128] ? find_held_lock+0x2b/0x80 [ 1053.461277][T23128] ? futex_wake+0x456/0x530 [ 1053.461299][T23128] futex_wait+0xe6/0x370 [ 1053.461318][T23128] ? __pfx_futex_wait+0x10/0x10 [ 1053.461341][T23128] ? rcu_is_watching+0x12/0xc0 [ 1053.461358][T23128] ? dvb_usercopy+0x1c0/0x340 [ 1053.461380][T23128] ? kfree+0x1dd/0x6c0 [ 1053.461403][T23128] do_futex+0x1ef/0x350 [ 1053.461419][T23128] ? __pfx_do_futex+0x10/0x10 [ 1053.461439][T23128] __x64_sys_futex+0x34f/0x4d0 [ 1053.461457][T23128] ? __pfx___x64_sys_futex+0x10/0x10 [ 1053.461475][T23128] ? rcu_is_watching+0x12/0xc0 [ 1053.461495][T23128] do_syscall_64+0x115/0x840 [ 1053.461515][T23128] ? clear_bhb_loop+0x40/0x90 [ 1053.461533][T23128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.461548][T23128] RIP: 0033:0x7f8ea7b9ce59 [ 1053.461562][T23128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1053.461577][T23128] RSP: 002b:00007f8ea8a850e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1053.461594][T23128] RAX: ffffffffffffffda RBX: 00007f8ea7e16098 RCX: 00007f8ea7b9ce59 [ 1053.461605][T23128] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8ea7e16098 [ 1053.461614][T23128] RBP: 00007f8ea7e16090 R08: 0000000000000000 R09: 0000000000000000 [ 1053.461624][T23128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1053.461634][T23128] R13: 00007f8ea7e16128 R14: 00007ffc8ddf96c0 R15: 00007ffc8ddf97a8 [ 1053.461655][T23128] [ 1054.268143][ T30] audit: type=1326 audit(2147493443.479:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23143 comm="syz.2.3789" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff86179ce59 code=0x0 [ 1055.110122][T23155] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3790'. [ 1055.158006][T23155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1055.192794][T23155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1055.232694][T23155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1055.251518][T23155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1055.644035][T23171] FAULT_INJECTION: forcing a failure. [ 1055.644035][T23171] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1055.669438][T23162] FAULT_INJECTION: forcing a failure. [ 1055.669438][T23162] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1055.703926][T23171] CPU: 0 UID: 0 PID: 23171 Comm: syz.3.3794 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1055.703956][T23171] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1055.703962][T23171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1055.703972][T23171] Call Trace: [ 1055.703978][T23171] [ 1055.703984][T23171] dump_stack_lvl+0x100/0x190 [ 1055.704016][T23171] should_fail_ex.cold+0x5/0xa [ 1055.704033][T23171] ? rcu_is_watching+0x12/0xc0 [ 1055.704052][T23171] get_futex_key+0x1d2/0x1510 [ 1055.704077][T23171] ? __pfx_get_futex_key+0x10/0x10 [ 1055.704108][T23171] futex_wait_setup+0x83/0x510 [ 1055.704132][T23171] __futex_wait+0x19f/0x300 [ 1055.704151][T23171] ? __pfx___futex_wait+0x10/0x10 [ 1055.704173][T23171] ? __pfx_futex_wake_mark+0x10/0x10 [ 1055.704194][T23171] ? find_held_lock+0x2b/0x80 [ 1055.704211][T23171] ? futex_wake+0x456/0x530 [ 1055.704233][T23171] futex_wait+0xe6/0x370 [ 1055.704252][T23171] ? __pfx_futex_wait+0x10/0x10 [ 1055.704273][T23171] ? rcu_is_watching+0x12/0xc0 [ 1055.704289][T23171] ? dvb_usercopy+0x1c0/0x340 [ 1055.704311][T23171] ? kfree+0x1dd/0x6c0 [ 1055.704334][T23171] do_futex+0x1ef/0x350 [ 1055.704349][T23171] ? __pfx_do_futex+0x10/0x10 [ 1055.704370][T23171] __x64_sys_futex+0x34f/0x4d0 [ 1055.704388][T23171] ? __pfx___x64_sys_futex+0x10/0x10 [ 1055.704406][T23171] ? rcu_is_watching+0x12/0xc0 [ 1055.704425][T23171] do_syscall_64+0x115/0x840 [ 1055.704446][T23171] ? clear_bhb_loop+0x40/0x90 [ 1055.704464][T23171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.704480][T23171] RIP: 0033:0x7f87e179ce59 [ 1055.704494][T23171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1055.704508][T23171] RSP: 002b:00007f87df9ee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1055.704523][T23171] RAX: ffffffffffffffda RBX: 00007f87e1a15fa8 RCX: 00007f87e179ce59 [ 1055.704533][T23171] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f87e1a15fa8 [ 1055.704543][T23171] RBP: 00007f87e1a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1055.704552][T23171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1055.704561][T23171] R13: 00007f87e1a16038 R14: 00007ffd7c512940 R15: 00007ffd7c512a28 [ 1055.704580][T23171] [ 1056.164686][T23162] CPU: 0 UID: 0 PID: 23162 Comm: syz.1.3792 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1056.164724][T23162] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1056.164730][T23162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1056.164739][T23162] Call Trace: [ 1056.164744][T23162] [ 1056.164750][T23162] dump_stack_lvl+0x100/0x190 [ 1056.164779][T23162] should_fail_ex.cold+0x5/0xa [ 1056.164798][T23162] get_futex_key+0x295/0x1510 [ 1056.164823][T23162] ? __pfx_get_futex_key+0x10/0x10 [ 1056.164845][T23162] ? lock_acquire+0x1b1/0x370 [ 1056.164871][T23162] futex_wake+0xea/0x530 [ 1056.164890][T23162] ? __pfx_futex_wake+0x10/0x10 [ 1056.164907][T23162] ? exit_mm_release+0x19/0x30 [ 1056.164932][T23162] do_futex+0x32b/0x350 [ 1056.164947][T23162] ? __pfx_do_futex+0x10/0x10 [ 1056.164961][T23162] ? __might_fault+0xc5/0x140 [ 1056.164987][T23162] mm_release+0x24a/0x2f0 [ 1056.165004][T23162] do_exit+0x707/0x2af0 [ 1056.165027][T23162] ? __pfx_do_exit+0x10/0x10 [ 1056.165047][T23162] ? do_raw_spin_lock+0x128/0x260 [ 1056.165062][T23162] ? find_held_lock+0x2b/0x80 [ 1056.165078][T23162] ? get_signal+0x7e5/0x2210 [ 1056.165097][T23162] do_group_exit+0xd5/0x2a0 [ 1056.165118][T23162] get_signal+0x20ff/0x2210 [ 1056.165139][T23162] ? rcu_is_watching+0x12/0xc0 [ 1056.165155][T23162] ? ath10k_sta_statistics+0xca0/0xcf0 [ 1056.165173][T23162] ? __pfx_get_signal+0x10/0x10 [ 1056.165191][T23162] ? do_futex+0x192/0x350 [ 1056.165207][T23162] arch_do_signal_or_restart+0x91/0x7a0 [ 1056.165228][T23162] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1056.165255][T23162] ? rcu_is_watching+0x12/0xc0 [ 1056.165281][T23162] exit_to_user_mode_loop+0x98/0x670 [ 1056.165303][T23162] ? rcu_is_watching+0x12/0xc0 [ 1056.165320][T23162] do_syscall_64+0x652/0x840 [ 1056.165340][T23162] ? clear_bhb_loop+0x40/0x90 [ 1056.165357][T23162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.165372][T23162] RIP: 0033:0x7fe6dfd9ce59 [ 1056.165385][T23162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1056.165399][T23162] RSP: 002b:00007fe6e0d190e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1056.165413][T23162] RAX: fffffffffffffe00 RBX: 00007fe6e0016098 RCX: 00007fe6dfd9ce59 [ 1056.165423][T23162] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe6e0016098 [ 1056.165432][T23162] RBP: 00007fe6e0016090 R08: 0000000000000000 R09: 0000000000000000 [ 1056.165440][T23162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1056.165449][T23162] R13: 00007fe6e0016128 R14: 00007fff03a4d7c0 R15: 00007fff03a4d8a8 [ 1056.165467][T23162] [ 1058.438973][T23209] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3803'. [ 1058.461484][ T30] audit: type=1326 audit(2147493447.742:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23202 comm="syz.1.3802" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe6dfd9ce59 code=0x0 [ 1058.521364][T23209] FAULT_INJECTION: forcing a failure. [ 1058.521364][T23209] name failslab, interval 1, probability 0, space 0, times 0 [ 1058.601268][T23209] CPU: 0 UID: 0 PID: 23209 Comm: syz.3.3803 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1058.601299][T23209] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1058.601305][T23209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1058.601315][T23209] Call Trace: [ 1058.601321][T23209] [ 1058.601327][T23209] dump_stack_lvl+0x100/0x190 [ 1058.601359][T23209] should_fail_ex.cold+0x5/0xa [ 1058.601403][T23209] should_failslab+0xc2/0x120 [ 1058.601425][T23209] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1058.601449][T23209] ? __d_alloc+0x34/0xa40 [ 1058.601474][T23209] __d_alloc+0x34/0xa40 [ 1058.601495][T23209] d_alloc_pseudo+0x1c/0xc0 [ 1058.601510][T23209] alloc_file_pseudo+0xcf/0x230 [ 1058.601533][T23209] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1058.601560][T23209] __shmem_file_setup+0x205/0x460 [ 1058.601581][T23209] ? __pfx___shmem_file_setup+0x10/0x10 [ 1058.601608][T23209] newseg+0x3c0/0xed0 [ 1058.601632][T23209] ? __pfx_newseg+0x10/0x10 [ 1058.601652][T23209] ? find_held_lock+0x2b/0x80 [ 1058.601671][T23209] ? ipcget+0x8aa/0xf50 [ 1058.601695][T23209] ipcget+0x909/0xf50 [ 1058.601714][T23209] ? do_futex+0x192/0x350 [ 1058.601734][T23209] ? __pfx_ipcget+0x10/0x10 [ 1058.601754][T23209] ? __x64_sys_futex+0x34f/0x4d0 [ 1058.601768][T23209] ? __x64_sys_futex+0x358/0x4d0 [ 1058.601786][T23209] __x64_sys_shmget+0x13b/0x1b0 [ 1058.601807][T23209] ? __pfx___x64_sys_shmget+0x10/0x10 [ 1058.601828][T23209] ? rcu_is_watching+0x12/0xc0 [ 1058.601848][T23209] do_syscall_64+0x115/0x840 [ 1058.601869][T23209] ? clear_bhb_loop+0x40/0x90 [ 1058.601888][T23209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.601904][T23209] RIP: 0033:0x7f87e179ce59 [ 1058.601918][T23209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1058.601933][T23209] RSP: 002b:00007f87df9ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 1058.601949][T23209] RAX: ffffffffffffffda RBX: 00007f87e1a15fa0 RCX: 00007f87e179ce59 [ 1058.601960][T23209] RDX: 0000000000005300 RSI: 0000000000000001 RDI: 00000000000006a2 [ 1058.601969][T23209] RBP: 00007f87e1832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1058.601978][T23209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1058.601988][T23209] R13: 00007f87e1a16038 R14: 00007f87e1a15fa0 R15: 00007ffd7c512a28 [ 1058.602007][T23209] [ 1061.506591][ T30] audit: type=1326 audit(2147493450.807:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23250 comm="syz.1.3814" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe6dfd9ce59 code=0x0 [ 1061.708924][T23235] Process accounting resumed [ 1061.858020][T23249] Process accounting paused [ 1062.251054][T23265] FAULT_INJECTION: forcing a failure. [ 1062.251054][T23265] name failslab, interval 1, probability 0, space 0, times 0 [ 1062.327546][T23265] CPU: 0 UID: 0 PID: 23265 Comm: syz.3.3818 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1062.327576][T23265] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1062.327582][T23265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1062.327592][T23265] Call Trace: [ 1062.327598][T23265] [ 1062.327605][T23265] dump_stack_lvl+0x100/0x190 [ 1062.327637][T23265] should_fail_ex.cold+0x5/0xa [ 1062.327657][T23265] should_failslab+0xc2/0x120 [ 1062.327675][T23265] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1062.327697][T23265] ? vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 1062.327726][T23265] vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 1062.327752][T23265] vidtv_mux_init+0x8a6/0xbf0 [ 1062.327777][T23265] vidtv_start_feed+0x34e/0x500 [ 1062.327795][T23265] ? __pfx_vidtv_start_feed+0x10/0x10 [ 1062.327812][T23265] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 1062.327839][T23265] dmx_section_feed_start_filtering+0x3a8/0x660 [ 1062.327865][T23265] dvb_dmxdev_filter_start+0x767/0xdd0 [ 1062.327888][T23265] dvb_demux_do_ioctl+0xe64/0x1200 [ 1062.327910][T23265] dvb_usercopy+0x167/0x340 [ 1062.327932][T23265] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1062.327948][T23265] ? __pfx_dvb_usercopy+0x10/0x10 [ 1062.327978][T23265] ? __fget_files+0x21f/0x3d0 [ 1062.327999][T23265] dvb_demux_ioctl+0x29/0x40 [ 1062.328013][T23265] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1062.328027][T23265] __x64_sys_ioctl+0x18e/0x210 [ 1062.328044][T23265] do_syscall_64+0x115/0x840 [ 1062.328066][T23265] ? clear_bhb_loop+0x40/0x90 [ 1062.328084][T23265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.328100][T23265] RIP: 0033:0x7f87e179ce59 [ 1062.328114][T23265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1062.328138][T23265] RSP: 002b:00007f87df9cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1062.328154][T23265] RAX: ffffffffffffffda RBX: 00007f87e1a16090 RCX: 00007f87e179ce59 [ 1062.328165][T23265] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000007 [ 1062.328175][T23265] RBP: 00007f87e1832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1062.328185][T23265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1062.328194][T23265] R13: 00007f87e1a16128 R14: 00007f87e1a16090 R15: 00007ffd7c512a28 [ 1062.328215][T23265] [ 1062.328312][T17471] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 1062.567119][T17471] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1062.575522][T17471] CPU: 0 UID: 0 PID: 17471 Comm: kworker/0:7 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1062.586533][T17471] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1062.591706][T17471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1062.601750][T17471] Workqueue: events vidtv_mux_tick [ 1062.606859][T17471] RIP: 0010:vidtv_psi_ts_psi_write_into+0x4bb/0xb40 [ 1062.613434][T17471] Code: fb d4 d7 f9 4d 8d 65 20 4c 89 e0 48 c1 e8 03 80 3c 18 00 0f 85 fe 04 00 00 49 8b 45 20 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 <0f> b6 14 1a 38 ca 7f 08 84 d2 0f 85 c6 04 00 00 0f b6 10 48 8b 7c [ 1062.633049][T17471] RSP: 0018:ffffc9000377f3f0 EFLAGS: 00010202 [ 1062.639106][T17471] RAX: 0000000000000002 RBX: dffffc0000000000 RCX: 0000000000000002 [ 1062.647058][T17471] RDX: 0000000000000000 RSI: ffffffff88302865 RDI: ffff8880334c9f00 [ 1062.655012][T17471] RBP: 0000000000000008 R08: 0000000000000005 R09: 0000000000000000 [ 1062.662967][T17471] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc9000377f690 [ 1062.670925][T17471] R13: ffffc9000377f670 R14: 0000000000000178 R15: 0000000000000000 [ 1062.678880][T17471] FS: 0000000000000000(0000) GS:ffff88812438e000(0000) knlGS:0000000000000000 [ 1062.687796][T17471] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1062.694365][T17471] CR2: 00007fe6e0015fac CR3: 00000000331a8000 CR4: 00000000003526f0 [ 1062.702326][T17471] Call Trace: [ 1062.705588][T17471] [ 1062.708503][T17471] ? __pfx_vidtv_psi_ts_psi_write_into+0x10/0x10 [ 1062.714822][T17471] vidtv_psi_pmt_write_into+0x3b2/0xa70 [ 1062.720375][T17471] ? __pfx_vidtv_psi_pmt_write_into+0x10/0x10 [ 1062.726428][T17471] ? vidtv_psi_pat_write_into+0x56a/0x690 [ 1062.732134][T17471] ? __pfx_vidtv_psi_pat_write_into+0x10/0x10 [ 1062.738189][T17471] ? unwind_next_frame+0x3be/0x2090 [ 1062.743375][T17471] ? unwind_next_frame+0x3be/0x2090 [ 1062.748558][T17471] ? ret_from_fork_asm+0x1a/0x30 [ 1062.753483][T17471] vidtv_mux_push_si+0x932/0xe80 [ 1062.758414][T17471] ? __pfx_vidtv_mux_push_si+0x10/0x10 [ 1062.763864][T17471] ? vidtv_memset+0x50/0x90 [ 1062.768351][T17471] ? vidtv_ts_pcr_write_into+0x45b/0x650 [ 1062.773968][T17471] ? do_raw_spin_lock+0x128/0x260 [ 1062.778977][T17471] vidtv_mux_tick+0xe93/0x1460 [ 1062.783733][T17471] ? __lock_acquire+0x4a5/0x2630 [ 1062.788666][T17471] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 1062.793853][T17471] ? __lock_acquire+0x4a5/0x2630 [ 1062.798781][T17471] ? do_raw_spin_unlock+0x145/0x1e0 [ 1062.803961][T17471] ? debug_object_deactivate+0x2e4/0x3b0 [ 1062.809582][T17471] ? rcu_is_watching+0x12/0xc0 [ 1062.814328][T17471] process_one_work+0xa0e/0x1980 [ 1062.819250][T17471] ? __pfx_process_one_work+0x10/0x10 [ 1062.824606][T17471] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 1062.829803][T17471] worker_thread+0x5ef/0xe50 [ 1062.834381][T17471] ? __pfx_worker_thread+0x10/0x10 [ 1062.839472][T17471] ? kthread+0x13a/0x450 [ 1062.843704][T17471] ? __pfx_worker_thread+0x10/0x10 [ 1062.848797][T17471] kthread+0x370/0x450 [ 1062.852853][T17471] ? __pfx_kthread+0x10/0x10 [ 1062.857436][T17471] ret_from_fork+0x72b/0xd50 [ 1062.862010][T17471] ? __pfx_ret_from_fork+0x10/0x10 [ 1062.867104][T17471] ? __switch_to+0x800/0x1100 [ 1062.871766][T17471] ? __switch_to_asm+0x39/0x70 [ 1062.876515][T17471] ? __pfx_kthread+0x10/0x10 [ 1062.881123][T17471] ret_from_fork_asm+0x1a/0x30 [ 1062.885878][T17471] [ 1062.888877][T17471] Modules linked in: [ 1062.893670][T17471] ---[ end trace 0000000000000000 ]--- [ 1063.705253][T17471] RIP: 0010:vidtv_psi_ts_psi_write_into+0x4bb/0xb40 [ 1063.719357][T17471] Code: fb d4 d7 f9 4d 8d 65 20 4c 89 e0 48 c1 e8 03 80 3c 18 00 0f 85 fe 04 00 00 49 8b 45 20 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 <0f> b6 14 1a 38 ca 7f 08 84 d2 0f 85 c6 04 00 00 0f b6 10 48 8b 7c [ 1063.760710][T17471] RSP: 0018:ffffc9000377f3f0 EFLAGS: 00010202 [ 1063.773967][T17471] RAX: 0000000000000002 RBX: dffffc0000000000 RCX: 0000000000000002 [ 1063.793531][T17471] RDX: 0000000000000000 RSI: ffffffff88302865 RDI: ffff8880334c9f00 [ 1063.810305][T17471] RBP: 0000000000000008 R08: 0000000000000005 R09: 0000000000000000 [ 1063.826612][T17471] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc9000377f690 [ 1063.843398][T17471] R13: ffffc9000377f670 R14: 0000000000000178 R15: 0000000000000000 [ 1063.861252][T17471] FS: 0000000000000000(0000) GS:ffff88812438e000(0000) knlGS:0000000000000000 [ 1063.880066][T17471] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1063.895549][T17471] CR2: 00001ffffffffe40 CR3: 0000000074554000 CR4: 00000000003526f0 [ 1063.912131][T17471] Kernel panic - not syncing: Fatal exception [ 1063.918271][T17471] Kernel Offset: disabled [ 1063.922580][T17471] Rebooting in 86400 seconds..