last executing test programs: 4m51.213935018s ago: executing program 3 (id=3672): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) sendmsg$auto_NL80211_CMD_JOIN_OCB(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000000c0)={0xfe8, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xfc5, 0x75, 0x0, 0x1, [@typed={0x39, 0x4c, 0x0, 0x0, @binary="ff8a5ab5c1faa224e14c19c342eb867a88084002e10d4869ceabe1147060dee4cf8fe46d89bec890daa97e0c45b72e879890e6eecd"}, @generic="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"]}]}, 0xfe8}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) syz_genetlink_get_family_id$auto_802_15_4_mac(0x0, r0) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) connect$auto(0x3, 0x0, 0x55) 4m50.636906774s ago: executing program 3 (id=3679): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r0 = socket(0x2, 0xa, 0x106) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) memfd_secret$auto(0x0) socket(0xa, 0x1, 0x6) setsockopt$auto(r0, 0x6, 0xd, &(0x7f0000000280)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00', 0x4) 4m50.501083915s ago: executing program 3 (id=3680): openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000040), 0x242780, 0x0) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) madvise$auto(0x0, 0xff7fffffffff0001, 0x15) close_range$auto(r0, 0x8, 0x0) 4m49.533230375s ago: executing program 3 (id=3688): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) socket(0x2b, 0x1, 0x0) r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x7fff}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r0, 0x0, 0xffffff4b) madvise$auto(0x0, 0x2003f2, 0x15) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) 4m48.512017343s ago: executing program 3 (id=3696): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) r0 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) rename$auto(&(0x7f0000000480)='./file0\x00', 0x0) 4m47.565230613s ago: executing program 3 (id=3706): mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vbi19\x00', 0x8654092f478cae21, 0x0) getitimer$auto(0x3, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x10, 0x0, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x42942, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000140), 0x9}, 0x8) 4m32.098093814s ago: executing program 32 (id=3706): mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vbi19\x00', 0x8654092f478cae21, 0x0) getitimer$auto(0x3, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x10, 0x0, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x42942, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000140), 0x9}, 0x8) 3.795995004s ago: executing program 1 (id=5555): r0 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xa4e00, 0x0) socket(0xa, 0x801, 0x84) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace\x00', 0x240100, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) close_range$auto(0x2, 0x8000, 0x0) r2 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000140), 0x60e83, 0x0) ioctl$auto(r2, 0x3b8e, r1) write$auto_proc_mem_operations_base(r0, 0x0, 0x0) 3.578569599s ago: executing program 1 (id=5558): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0xade, 0x0) bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f00000000c0)=@test={0xffffffffffffffff, 0x400, 0x4, 0x4, 0x101, 0x200, 0x2, 0x1, 0x8001, 0x30c, 0x8001, 0x9, 0x40000, 0x80, 0x8d8}, 0xa) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x248300, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socketcall$auto(0x4000009, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0xdf, 0x0, [{0x40000020, 0x3ff, 0x2}]}) 3.123509519s ago: executing program 4 (id=5563): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = inotify_init1$auto(0x3000000000000) io_uring_setup$auto(0x1d48, 0x0) ioctl$auto_FS_IOC_GETFSMAP(r0, 0xc0c0583b, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) write$auto(0x6, 0x0, 0x100000001) setsockopt$auto(0x3, 0x1, 0x3c, 0x0, 0x9) 3.020259341s ago: executing program 1 (id=5564): mmap$auto(0x0, 0x1, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = socket(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') read$auto(r0, 0x0, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4010}, 0x51) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty12\x00', 0x800, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f1e) 2.950523043s ago: executing program 2 (id=5565): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r0, 0x0, 0xffffffff, 0x4, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) setgroups$auto(0xe32, 0x0) r1 = socket(0xa, 0x2, 0x88) setsockopt$auto(r1, 0x11, 0xb, 0x0, 0x8) 2.918321072s ago: executing program 0 (id=5566): mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x10, 0x80002, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) timerfd_create$auto(0x0, 0x0) timerfd_settime$auto(r0, 0x3, 0x0, 0x0) settimeofday$auto(0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff001, 0x2) 2.808796789s ago: executing program 1 (id=5567): close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x6) close_range$auto(0x0, 0xffffffffffffffff, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x59, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x5, 0x0) openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, 0x0, 0x18002, 0x0) io_uring_setup$auto(0x6, 0x0) statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x4b72, r1) 2.69618522s ago: executing program 0 (id=5568): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x11, 0x3, 0x9) syslog$auto(0x9, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x7) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents64$auto(r0, 0x0, 0x18) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5) ioctl$auto(r1, 0x4008af03, 0x0) ioctl$auto_VHOST_NET_SET_BACKEND(r1, 0x4008af30, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) 2.670989228s ago: executing program 1 (id=5569): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) setpgid$auto(0x0, 0xffffffffffffffff) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) writev$auto(r0, 0x0, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) set_mempolicy$auto(0x2005, &(0x7f0000000080)=0x87e, 0x4) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) write$auto(r1, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(0x3, 0x0, 0x100082) 2.567844575s ago: executing program 2 (id=5570): unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) socket(0xa, 0x2, 0x3a) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) 2.420398487s ago: executing program 0 (id=5571): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D3\x00', 0x20c00, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) socket(0xa, 0x1, 0x100) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) wait4$auto(0x80000000, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/loop10/queue/add_random\x00', 0x80302, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) mmap$auto(0x0, 0x4020009, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0) clock_gettime$auto(0xfffffffffffffff0, 0x0) 1.769897923s ago: executing program 1 (id=5572): unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) set_mempolicy$auto(0x1, 0x0, 0x803) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) msync$auto(0x0, 0xe0, 0x6) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) pkey_free$auto(0xfffffffd) 1.709232498s ago: executing program 4 (id=5573): mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2008000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r0 = socket(0x1d, 0x2, 0x7) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r3}, 0x18) sendmmsg$auto(0x3, 0x0, 0x9a4, 0xffff) 1.450058915s ago: executing program 2 (id=5574): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r0, 0x0) r2 = socket(0x10, 0x2, 0x4) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010337bd7000ffdbdf25100000000c00018008"], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x80000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) r3 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r3, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) 1.129723862s ago: executing program 2 (id=5575): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/scsi\x00', 0x80002, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000024c0)="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", 0xfff) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x929, 0x4001, 0x7, 0x5, 0x100717e, 0x3, 0x7, 0x6, 0x7ff, 0xfffffffe, 0x80000001, 0x4, 0x200000000001, 0x1, 0xfffffffffffffffb, 0x8, 0x0, 0x2, 0x2, 0x864, 0xe, 0x22000, 0x200, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffff4f3, 0x0, 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffffc]}, 0xa, 0xd) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) write$auto_proc_clear_refs_operations_internal(r0, &(0x7f0000000000)="73d6cc4fdf406742386dd72ff1428a506f5cd946a3", 0x15) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffff7effffd01, &(0x7f00000001c0)) 947.617507ms ago: executing program 4 (id=5576): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000300), r0) read$auto(r0, &(0x7f0000000040)='nl80211\x00', 0xbe62) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="1100"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x2000000, &(0x7f0000000080)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 759.284816ms ago: executing program 0 (id=5577): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x5, 0x0) open(0x0, 0x261c2, 0x84) uname$auto(0x0) r0 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r2, r1, 0x4, 0x1ff, r0, @relative_id=0x13, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) 736.431321ms ago: executing program 4 (id=5578): r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x848000000015, 0x805, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @loopback}, 0x55) sendmsg$auto_OVS_DP_CMD_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$auto_OVS_DP_CMD_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[], 0xd000}, 0x1, 0x0, 0x0, 0x50}, 0x0) close_range$auto(0x2, 0x8, 0x0) 579.160452ms ago: executing program 4 (id=5579): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/orangefs/acache/hard_limit\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0xfffffffffffffffd, 0xb, 0x4005, 0x4, 0x800000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x0, 0x80200001, 0x1c51, 0x10001, 0x91, 0x400000001, 0x2]}, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/scsi/sg/debug\x00', 0x100, 0x0) pread64$auto(r2, 0x0, 0x80000006, 0x3) r3 = fcntl$auto_F_WRLCK(r0, 0x2, 0x1) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_TID_CONFIG(r3, 0x0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x81) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) 509.730354ms ago: executing program 0 (id=5580): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) getcwd$auto(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) r0 = inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0xe6e) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22242, 0x154) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000002c0)=""/54, 0x36) 296.568839ms ago: executing program 4 (id=5581): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = io_uring_setup$auto(0x5, 0x0) close_range$auto(0x2, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6d) listen$auto(0x3, 0x81) r1 = socket(0x2b, 0x1, 0x0) sendmmsg$auto(r1, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x24, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x108) 138.040059ms ago: executing program 2 (id=5582): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x5, 0x0) r0 = socket(0xa, 0x5, 0x84) close_range$auto(0x0, 0x5, 0x0) io_uring_setup$auto(0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(r0, 0xc040aed4, r1) 112.576968ms ago: executing program 0 (id=5583): socket(0x2, 0x2, 0x88) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7ffff7ffefff}, 0x8000000000000001) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_CHECK_EXTENSION(r0, 0xae03, 0xdb) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/trace\x00', 0x705040, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/workqueue/cpumask\x00', 0x2, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0xffd8) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) unshare$auto(0x40000080) 0s ago: executing program 2 (id=5584): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) unshare$auto(0x40000080) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000040)=0x5) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x101901, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) recvmmsg$auto(0x3, 0x0, 0xfffe, 0x6, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/pcm0p/sub0/xrun_injection\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0x20499d, 0x9) kernel console output (not intermixed with test programs): 620.112841][T18127] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 620.112859][T18127] vfs_read+0x825/0xb30 [ 620.112884][T18127] ? __pfx_vfs_read+0x10/0x10 [ 620.112928][T18127] ksys_read+0x12a/0x250 [ 620.112951][T18127] ? __pfx_ksys_read+0x10/0x10 [ 620.112980][T18127] do_syscall_64+0x106/0xf80 [ 620.113001][T18127] ? clear_bhb_loop+0x40/0x90 [ 620.113020][T18127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.113035][T18127] RIP: 0033:0x7f6408d9c799 [ 620.113050][T18127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.113065][T18127] RSP: 002b:00007f6409d41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 620.113081][T18127] RAX: ffffffffffffffda RBX: 00007f6409015fa0 RCX: 00007f6408d9c799 [ 620.113092][T18127] RDX: 000000000000007a RSI: 0000200000000240 RDI: 0000000000000004 [ 620.113101][T18127] RBP: 00007f6408e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 620.113111][T18127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 620.113120][T18127] R13: 00007f6409016038 R14: 00007f6409015fa0 R15: 00007ffc06e2c548 [ 620.113141][T18127] [ 621.322647][T18140] kvm_intel: kvm [18139]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0xfffffffffffffffe [ 621.549730][T18150] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4291'. [ 622.313040][T18166] netlink: 326 bytes leftover after parsing attributes in process `syz.1.4298'. [ 623.931208][T18203] netlink: 'syz.1.4312': attribute type 7 has an invalid length. [ 623.954075][T18205] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4313'. [ 623.975566][T18203] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4312'. [ 624.156423][T18210] netlink: 266 bytes leftover after parsing attributes in process `syz.2.4315'. [ 624.199336][T18210] IPv6: NLM_F_CREATE should be specified when creating new route [ 624.382877][T18214] netlink: 'syz.1.4317': attribute type 27 has an invalid length. [ 624.416309][T18214] netlink: 'syz.1.4317': attribute type 28 has an invalid length. [ 624.442228][T18214] netlink: 'syz.1.4317': attribute type 29 has an invalid length. [ 624.481708][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.489133][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.504246][T18214] netlink: 'syz.1.4317': attribute type 30 has an invalid length. [ 624.542031][T18214] netlink: 'syz.1.4317': attribute type 31 has an invalid length. [ 624.592974][T18214] netlink: 'syz.1.4317': attribute type 32 has an invalid length. [ 624.619980][T18214] netlink: 'syz.1.4317': attribute type 33 has an invalid length. [ 624.654217][T18214] netlink: 'syz.1.4317': attribute type 35 has an invalid length. [ 624.684624][T18214] netlink: 'syz.1.4317': attribute type 37 has an invalid length. [ 624.714923][T18214] netlink: 18 bytes leftover after parsing attributes in process `syz.1.4317'. [ 625.428530][T18239] base or size exceeds the MTRR width [ 625.610907][T18242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4325'. [ 626.278706][T18262] zswap: compressor not available [ 627.441649][T18306] usb usb24: usbfs: process 18306 (syz.4.4345) did not claim interface 0 before use [ 627.942560][T18317] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4348'. [ 628.280471][T18320] zswap: compressor not available [ 628.307270][ T29] audit: type=1800 audit(1773377132.460:18): pid=18330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4350" name="trace_marker" dev="tracefs" ino=560 res=0 errno=0 [ 629.047982][T13560] Bluetooth: hci3: unexpected event 0x20 length: 123 > 7 [ 630.591480][T13560] Bluetooth: hci3: unexpected event 0x08 length: 435 > 4 [ 630.923098][T18398] netlink: 342 bytes leftover after parsing attributes in process `syz.4.4376'. [ 631.951267][T18425] netlink: 25 bytes leftover after parsing attributes in process `syz.2.4385'. [ 632.029270][T18423] zero sized request [ 632.197402][T18430] netlink: 25 bytes leftover after parsing attributes in process `syz.2.4387'. [ 632.902586][T18450] zswap: compressor not available [ 633.330596][T13560] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 633.883166][T18472] [U] [ 633.885895][T18472] [U] [ 633.888586][T18472] [U] [ 633.891266][T18472] [U] [ 633.935523][T18472] [U] [ 633.938252][T18472] [U] [ 633.940941][T18472] [U] [ 633.943614][T18472] [U] [ 633.997397][T18472] [U] [ 634.000120][T18472] [U] [ 634.002797][T18472] [U] [ 634.005471][T18472] [U] [ 634.061772][T18472] [U] [ 634.064489][T18472] [U] [ 634.067168][T18472] [U] [ 634.069847][T18472] [U] [ 634.115760][T18472] [U] [ 634.118472][T18472] [U] [ 634.121149][T18472] [U] [ 634.123853][T18472] [U] [ 634.175134][T18472] [U] [ 634.177849][T18472] [U] [ 634.180531][T18472] [U] [ 634.183207][T18472] [U] [ 634.212986][T18472] [U] [ 634.215710][T18472] [U] [ 634.218432][T18472] [U] [ 634.221109][T18472] [U] [ 634.246583][T18472] [U] [ 634.249315][T18472] [U] [ 634.252017][T18472] [U] [ 634.254712][T18472] [U] [ 634.286549][T18472] [U] [ 634.289296][T18472] [U] [ 634.292002][T18472] [U] [ 634.294697][T18472] [U] [ 634.349528][T18472] [U] [ 634.352247][T18472] [U] [ 634.354924][T18472] [U] [ 634.357597][T18472] [U] [ 634.393820][T18472] [U] [ 634.396543][T18472] [U] [ 634.399222][T18472] [U] [ 634.401896][T18472] [U] [ 634.436576][T18472] [U] [ 634.439293][T18472] [U] [ 634.441971][T18472] [U] [ 634.444644][T18472] [U] [ 634.461881][T18472] [U] [ 634.464609][T18472] [U] [ 634.467312][T18472] [U] [ 634.470011][T18472] [U] [ 634.488296][T18472] [U] [ 634.491019][T18472] [U] [ 634.493697][T18472] [U] [ 634.496370][T18472] [U] [ 634.547229][T18488] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 634.560006][T18472] [U] [ 634.562699][T18472] [U] [ 634.565390][T18472] [U] [ 634.568061][T18472] [U] [ 634.605181][T18472] [U] [ 634.607897][T18472] [U] [ 634.610572][T18472] [U] [ 634.613244][T18472] [U] [ 634.691109][T18495] netlink: 186 bytes leftover after parsing attributes in process `syz.2.4406'. [ 634.715248][T18472] [U] [ 634.718142][T18472] [U] [ 634.720821][T18472] [U] [ 634.723493][T18472] [U] [ 634.759909][T18488] File: /dev/ram5 PID: 18488 Comm: syz.0.4402 [ 634.801956][T18472] [U] [ 634.804794][T18472] [U] [ 634.807560][T18472] [U] [ 634.810235][T18472] [U] [ 634.874419][T18472] [U] [ 634.877146][T18472] [U] [ 634.879909][T18472] [U] [ 634.882589][T18472] [U] [ 634.948328][T18472] [U] [ 635.429418][T18505] zswap: compressor not available [ 635.511564][T18515] netlink: 334 bytes leftover after parsing attributes in process `syz.0.4412'. [ 636.026368][T18523] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 638.229391][T18567] netlink: 334 bytes leftover after parsing attributes in process `syz.4.4432'. [ 638.593061][T18587] FAULT_INJECTION: forcing a failure. [ 638.593061][T18587] name failslab, interval 1, probability 0, space 0, times 0 [ 638.609779][T18587] CPU: 0 UID: 0 PID: 18587 Comm: syz.4.4440 Tainted: G L syzkaller #0 PREEMPT(full) [ 638.609807][T18587] Tainted: [L]=SOFTLOCKUP [ 638.609813][T18587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 638.609823][T18587] Call Trace: [ 638.609829][T18587] [ 638.609836][T18587] dump_stack_lvl+0x100/0x190 [ 638.609865][T18587] should_fail_ex.cold+0x5/0xa [ 638.609884][T18587] should_failslab+0xc2/0x120 [ 638.609900][T18587] __kmalloc_cache_noprof+0x7a/0x6f0 [ 638.609921][T18587] ? ima_calc_file_hash_tfm+0x236/0x350 [ 638.610016][T18587] ? sha256_init+0xd/0xc0 [ 638.610059][T18587] ima_calc_file_hash_tfm+0x236/0x350 [ 638.610085][T18587] ? __pfx_ima_calc_file_hash_tfm+0x10/0x10 [ 638.610132][T18587] ? stack_trace_save+0x8e/0xc0 [ 638.610149][T18587] ? look_up_lock_class+0x55/0x120 [ 638.610171][T18587] ? ima_alloc_tfm+0x21a/0x2e0 [ 638.610192][T18587] ? generic_fillattr+0x6c9/0x940 [ 638.610212][T18587] ima_calc_file_hash+0x18c/0x480 [ 638.610230][T18587] ima_collect_measurement+0x887/0xa40 [ 638.610246][T18587] ? ima_file_mmap+0x1c4/0x1f0 [ 638.610272][T18587] ? __pfx_ima_collect_measurement+0x10/0x10 [ 638.610288][T18587] ? lock_acquire+0x1cf/0x380 [ 638.610315][T18587] ? process_measurement+0x5ab/0x2350 [ 638.610338][T18587] ? is_bad_inode+0xd/0x40 [ 638.610358][T18587] ? xattr_resolve_name+0x27d/0x3f0 [ 638.610384][T18587] ? vfs_getxattr_alloc+0xec/0x350 [ 638.610403][T18587] ? ima_get_hash_algo+0x22d/0x400 [ 638.610432][T18587] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 638.610458][T18587] ? process_measurement+0xdfe/0x2350 [ 638.610480][T18587] process_measurement+0xdfe/0x2350 [ 638.610508][T18587] ? stack_trace_save+0x8e/0xc0 [ 638.610524][T18587] ? __pfx_process_measurement+0x10/0x10 [ 638.610548][T18587] ? __lock_acquire+0x4a5/0x2630 [ 638.610574][T18587] ? __kasan_slab_alloc+0x89/0x90 [ 638.610589][T18587] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 638.610612][T18587] ? init_file+0x95/0x480 [ 638.610628][T18587] ? alloc_empty_file+0x73/0x1c0 [ 638.610646][T18587] ? alloc_file_pseudo+0x13a/0x230 [ 638.610664][T18587] ? ksys_mmap_pgoff+0x232/0x650 [ 638.610679][T18587] ? __x64_sys_mmap+0x125/0x190 [ 638.610701][T18587] ? do_syscall_64+0x106/0xf80 [ 638.610738][T18587] ? __pfx_aa_file_perm+0x10/0x10 [ 638.610763][T18587] ima_file_mmap+0x1c4/0x1f0 [ 638.610786][T18587] ? __pfx_ima_file_mmap+0x10/0x10 [ 638.610813][T18587] security_mmap_file+0x278/0x9b0 [ 638.610833][T18587] vm_mmap_pgoff+0xec/0x470 [ 638.610857][T18587] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 638.610873][T18587] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 638.610893][T18587] ? hugetlbfs_get_inode+0x36e/0x750 [ 638.610924][T18587] ksys_mmap_pgoff+0x273/0x650 [ 638.610941][T18587] ? __x64_sys_futex+0x358/0x4d0 [ 638.610961][T18587] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 638.610978][T18587] ? xfd_validate_state+0x129/0x190 [ 638.611003][T18587] __x64_sys_mmap+0x125/0x190 [ 638.611027][T18587] do_syscall_64+0x106/0xf80 [ 638.611046][T18587] ? clear_bhb_loop+0x40/0x90 [ 638.611066][T18587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.611082][T18587] RIP: 0033:0x7fe3eb39c799 [ 638.611097][T18587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 638.611113][T18587] RSP: 002b:00007fe3ec177028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 638.611128][T18587] RAX: ffffffffffffffda RBX: 00007fe3eb615fa0 RCX: 00007fe3eb39c799 [ 638.611139][T18587] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 638.611148][T18587] RBP: 00007fe3eb432c99 R08: 0000000000000401 R09: 0000300000000000 [ 638.611158][T18587] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 638.611168][T18587] R13: 00007fe3eb616038 R14: 00007fe3eb615fa0 R15: 00007fffdc464778 [ 638.611188][T18587] [ 638.611692][ T29] audit: type=1800 audit(1773395486.756:19): pid=18587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4440" name="anon_hugepage" dev="hugetlbfs" ino=79452 res=0 errno=0 [ 639.174018][T18590] random: crng reseeded on system resumption [ 640.068916][T18610] zswap: compressor 000 not available [ 640.091912][T18620] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 640.301589][T18625] Invalid ELF header magic: != ELF [ 640.339506][T18630] netlink: 342 bytes leftover after parsing attributes in process `syz.4.4458'. [ 640.718136][T18643] netlink: 330 bytes leftover after parsing attributes in process `syz.2.4462'. [ 641.457567][T18664] netlink: 326 bytes leftover after parsing attributes in process `syz.4.4468'. [ 641.654417][T18670] mkiss: ax0: crc mode is auto. [ 641.770090][T18673] FAULT_INJECTION: forcing a failure. [ 641.770090][T18673] name failslab, interval 1, probability 0, space 0, times 0 [ 641.867497][T18673] CPU: 0 UID: 0 PID: 18673 Comm: syz.0.4469 Tainted: G L syzkaller #0 PREEMPT(full) [ 641.867525][T18673] Tainted: [L]=SOFTLOCKUP [ 641.867532][T18673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 641.867541][T18673] Call Trace: [ 641.867547][T18673] [ 641.867554][T18673] dump_stack_lvl+0x100/0x190 [ 641.867583][T18673] should_fail_ex.cold+0x5/0xa [ 641.867601][T18673] ? ima_alloc_init_template+0x19d/0x6d0 [ 641.867617][T18673] should_failslab+0xc2/0x120 [ 641.867633][T18673] __kmalloc_noprof+0xe0/0x850 [ 641.867656][T18673] ? take_dentry_name_snapshot+0x30b/0x7c0 [ 641.867679][T18673] ima_alloc_init_template+0x19d/0x6d0 [ 641.867695][T18673] ? take_dentry_name_snapshot+0x310/0x7c0 [ 641.867718][T18673] ima_store_measurement+0x1e3/0x5b0 [ 641.867735][T18673] ? __pfx_ima_store_measurement+0x10/0x10 [ 641.867759][T18673] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 641.867784][T18673] process_measurement+0x19cc/0x2350 [ 641.867812][T18673] ? stack_trace_save+0x8e/0xc0 [ 641.867827][T18673] ? __pfx_process_measurement+0x10/0x10 [ 641.867850][T18673] ? __lock_acquire+0x4a5/0x2630 [ 641.867868][T18673] ? __kasan_slab_alloc+0x89/0x90 [ 641.867882][T18673] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 641.867904][T18673] ? init_file+0x95/0x480 [ 641.867919][T18673] ? alloc_empty_file+0x73/0x1c0 [ 641.867936][T18673] ? alloc_file_pseudo+0x13a/0x230 [ 641.867953][T18673] ? ksys_mmap_pgoff+0x232/0x650 [ 641.867967][T18673] ? __x64_sys_mmap+0x125/0x190 [ 641.867987][T18673] ? do_syscall_64+0x106/0xf80 [ 641.868029][T18673] ? __pfx_aa_file_perm+0x10/0x10 [ 641.868055][T18673] ima_file_mmap+0x1c4/0x1f0 [ 641.868078][T18673] ? __pfx_ima_file_mmap+0x10/0x10 [ 641.868106][T18673] security_mmap_file+0x278/0x9b0 [ 641.868126][T18673] vm_mmap_pgoff+0xec/0x470 [ 641.868145][T18673] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 641.868160][T18673] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 641.868180][T18673] ? hugetlbfs_get_inode+0x36e/0x750 [ 641.868202][T18673] ksys_mmap_pgoff+0x273/0x650 [ 641.868218][T18673] ? __x64_sys_futex+0x358/0x4d0 [ 641.868238][T18673] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 641.868254][T18673] ? xfd_validate_state+0x129/0x190 [ 641.868278][T18673] __x64_sys_mmap+0x125/0x190 [ 641.868301][T18673] do_syscall_64+0x106/0xf80 [ 641.868321][T18673] ? clear_bhb_loop+0x40/0x90 [ 641.868347][T18673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.868363][T18673] RIP: 0033:0x7f9813b9c799 [ 641.868378][T18673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 641.868394][T18673] RSP: 002b:00007f9811db4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 641.868410][T18673] RAX: ffffffffffffffda RBX: 00007f9813e16180 RCX: 00007f9813b9c799 [ 641.868421][T18673] RDX: 0000000000009c0f RSI: 000000000000000c RDI: 0000000000000000 [ 641.868431][T18673] RBP: 00007f9813c32c99 R08: ffffffffffffffff R09: 0000300000020000 [ 641.868441][T18673] R10: 0000000000044eb2 R11: 0000000000000246 R12: 0000000000000000 [ 641.868450][T18673] R13: 00007f9813e16218 R14: 00007f9813e16180 R15: 00007ffc34c013a8 [ 641.868471][T18673] [ 642.216281][T18675] netlink: 266 bytes leftover after parsing attributes in process `syz.4.4472'. [ 642.225912][T18675] IPv6: NLM_F_CREATE should be specified when creating new route [ 642.305234][ T29] audit: type=1804 audit(1773395490.436:20): pid=18673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.0.4469" name="anon_hugepage" dev="hugetlbfs" ino=80059 res=0 errno=0 [ 642.554656][T18683] FAULT_INJECTION: forcing a failure. [ 642.554656][T18683] name failslab, interval 1, probability 0, space 0, times 0 [ 642.583721][T18683] CPU: 0 UID: 0 PID: 18683 Comm: syz.2.4473 Tainted: G L syzkaller #0 PREEMPT(full) [ 642.583751][T18683] Tainted: [L]=SOFTLOCKUP [ 642.583757][T18683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 642.583767][T18683] Call Trace: [ 642.583774][T18683] [ 642.583780][T18683] dump_stack_lvl+0x100/0x190 [ 642.583808][T18683] should_fail_ex.cold+0x5/0xa [ 642.583827][T18683] should_failslab+0xc2/0x120 [ 642.583844][T18683] __kmalloc_cache_noprof+0x7a/0x6f0 [ 642.583864][T18683] ? loop_add+0xb9/0xb60 [ 642.583959][T18683] loop_add+0xb9/0xb60 [ 642.583978][T18683] ? __pfx_loop_add+0x10/0x10 [ 642.584009][T18683] ? find_held_lock+0x2b/0x80 [ 642.584025][T18683] ? __fget_files+0x215/0x3d0 [ 642.584041][T18683] loop_control_ioctl+0xae/0x620 [ 642.584062][T18683] ? __pfx_loop_control_ioctl+0x10/0x10 [ 642.584084][T18683] ? __pfx_loop_control_ioctl+0x10/0x10 [ 642.584105][T18683] __x64_sys_ioctl+0x18e/0x210 [ 642.584128][T18683] do_syscall_64+0x106/0xf80 [ 642.584148][T18683] ? clear_bhb_loop+0x40/0x90 [ 642.584167][T18683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.584182][T18683] RIP: 0033:0x7fb2b799c799 [ 642.584196][T18683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 642.584211][T18683] RSP: 002b:00007fb2b8898028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 642.584227][T18683] RAX: ffffffffffffffda RBX: 00007fb2b7c15fa0 RCX: 00007fb2b799c799 [ 642.584237][T18683] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000005 [ 642.584247][T18683] RBP: 00007fb2b7a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 642.584256][T18683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 642.584266][T18683] R13: 00007fb2b7c16038 R14: 00007fb2b7c15fa0 R15: 00007fff174cc098 [ 642.584286][T18683] [ 643.624971][T18705] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4483'. [ 644.295810][T18721] FAULT_INJECTION: forcing a failure. [ 644.295810][T18721] name failslab, interval 1, probability 0, space 0, times 0 [ 644.386900][T18721] CPU: 0 UID: 0 PID: 18721 Comm: syz.2.4488 Tainted: G L syzkaller #0 PREEMPT(full) [ 644.386929][T18721] Tainted: [L]=SOFTLOCKUP [ 644.386935][T18721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 644.386945][T18721] Call Trace: [ 644.386951][T18721] [ 644.386958][T18721] dump_stack_lvl+0x100/0x190 [ 644.386986][T18721] should_fail_ex.cold+0x5/0xa [ 644.387006][T18721] should_failslab+0xc2/0x120 [ 644.387022][T18721] __kmalloc_cache_noprof+0x7a/0x6f0 [ 644.387042][T18721] ? snd_timer_instance_new+0x47/0x2e0 [ 644.387065][T18721] snd_timer_instance_new+0x47/0x2e0 [ 644.387082][T18721] snd_seq_timer_open+0x1d4/0x600 [ 644.387117][T18721] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 644.387145][T18721] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 644.387172][T18721] ? lockdep_hardirqs_on+0x78/0x100 [ 644.387193][T18721] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 644.387214][T18721] queue_use+0xdc/0x1f0 [ 644.387233][T18721] snd_seq_queue_alloc+0x2e5/0x590 [ 644.387254][T18721] snd_seq_ioctl_create_queue+0xa9/0x370 [ 644.387278][T18721] call_seq_client_ctl+0xa3/0x130 [ 644.387302][T18721] snd_seq_kernel_client_ctl+0x77/0xd0 [ 644.387326][T18721] alloc_seq_queue+0xdb/0x180 [ 644.387342][T18721] ? __pfx_alloc_seq_queue+0x10/0x10 [ 644.387367][T18721] ? mark_held_locks+0x40/0x70 [ 644.387386][T18721] ? _raw_spin_unlock_irq+0x23/0x50 [ 644.387403][T18721] ? lockdep_hardirqs_on+0x78/0x100 [ 644.387425][T18721] snd_seq_oss_open+0x2b2/0xa10 [ 644.387444][T18721] odev_open+0x79/0xc0 [ 644.387465][T18721] ? __pfx_odev_open+0x10/0x10 [ 644.387487][T18721] soundcore_open+0x2e3/0x5a0 [ 644.387513][T18721] ? __pfx_soundcore_open+0x10/0x10 [ 644.387536][T18721] chrdev_open+0x234/0x6a0 [ 644.387552][T18721] ? __pfx_apparmor_file_open+0x10/0x10 [ 644.387576][T18721] ? __pfx_chrdev_open+0x10/0x10 [ 644.387592][T18721] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 644.387613][T18721] do_dentry_open+0x6d8/0x1660 [ 644.387628][T18721] ? __pfx_chrdev_open+0x10/0x10 [ 644.387649][T18721] vfs_open+0x82/0x3f0 [ 644.387669][T18721] path_openat+0x208c/0x31a0 [ 644.387691][T18721] ? __pfx_path_openat+0x10/0x10 [ 644.387714][T18721] do_file_open+0x20e/0x430 [ 644.387731][T18721] ? __pfx_do_file_open+0x10/0x10 [ 644.387760][T18721] ? alloc_fd+0x476/0x790 [ 644.387776][T18721] ? do_getname+0x191/0x390 [ 644.387796][T18721] do_sys_openat2+0x10d/0x1e0 [ 644.387815][T18721] ? __pfx_do_sys_openat2+0x10/0x10 [ 644.387835][T18721] ? __fget_files+0x21f/0x3d0 [ 644.387853][T18721] __x64_sys_openat+0x12d/0x210 [ 644.387873][T18721] ? __pfx___x64_sys_openat+0x10/0x10 [ 644.387900][T18721] do_syscall_64+0x106/0xf80 [ 644.387920][T18721] ? clear_bhb_loop+0x40/0x90 [ 644.387938][T18721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.387954][T18721] RIP: 0033:0x7fb2b799c799 [ 644.387968][T18721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 644.387983][T18721] RSP: 002b:00007fb2b8898028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 644.387999][T18721] RAX: ffffffffffffffda RBX: 00007fb2b7c15fa0 RCX: 00007fb2b799c799 [ 644.388010][T18721] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 644.388020][T18721] RBP: 00007fb2b7a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 644.388029][T18721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 644.388038][T18721] R13: 00007fb2b7c16038 R14: 00007fb2b7c15fa0 R15: 00007fff174cc098 [ 644.388059][T18721] [ 646.184310][T18738] FAULT_INJECTION: forcing a failure. [ 646.184310][T18738] name failslab, interval 1, probability 0, space 0, times 0 [ 646.270192][T18738] CPU: 0 UID: 0 PID: 18738 Comm: syz.0.4491 Tainted: G L syzkaller #0 PREEMPT(full) [ 646.270222][T18738] Tainted: [L]=SOFTLOCKUP [ 646.270227][T18738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 646.270238][T18738] Call Trace: [ 646.270245][T18738] [ 646.270252][T18738] dump_stack_lvl+0x100/0x190 [ 646.270280][T18738] should_fail_ex.cold+0x5/0xa [ 646.270299][T18738] should_failslab+0xc2/0x120 [ 646.270315][T18738] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 646.270339][T18738] ? prepare_creds+0x2c/0x950 [ 646.270365][T18738] prepare_creds+0x2c/0x950 [ 646.270388][T18738] __sys_setregid+0x109/0x910 [ 646.270412][T18738] do_syscall_64+0x106/0xf80 [ 646.270433][T18738] ? clear_bhb_loop+0x40/0x90 [ 646.270451][T18738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.270467][T18738] RIP: 0033:0x7f9813b9c799 [ 646.270482][T18738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.270497][T18738] RSP: 002b:00007f9811dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000072 [ 646.270512][T18738] RAX: ffffffffffffffda RBX: 00007f9813e16090 RCX: 00007f9813b9c799 [ 646.270522][T18738] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 646.270531][T18738] RBP: 00007f9813c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 646.270540][T18738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 646.270550][T18738] R13: 00007f9813e16128 R14: 00007f9813e16090 R15: 00007ffc34c013a8 [ 646.270570][T18738] [ 646.835476][T18748] FAULT_INJECTION: forcing a failure. [ 646.835476][T18748] name failslab, interval 1, probability 0, space 0, times 0 [ 646.903698][T18748] CPU: 0 UID: 0 PID: 18748 Comm: syz.1.4495 Tainted: G L syzkaller #0 PREEMPT(full) [ 646.903727][T18748] Tainted: [L]=SOFTLOCKUP [ 646.903733][T18748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 646.903743][T18748] Call Trace: [ 646.903749][T18748] [ 646.903756][T18748] dump_stack_lvl+0x100/0x190 [ 646.903784][T18748] should_fail_ex.cold+0x5/0xa [ 646.903802][T18748] should_failslab+0xc2/0x120 [ 646.903818][T18748] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 646.903840][T18748] ? dup_fd+0x4d/0xd10 [ 646.903854][T18748] ? do_futex+0x192/0x350 [ 646.903876][T18748] dup_fd+0x4d/0xd10 [ 646.903890][T18748] ? bpf_lsm_capable+0x9/0x10 [ 646.903906][T18748] ? security_capable+0x80/0x260 [ 646.903933][T18748] __x64_sys_close_range+0x405/0x5d0 [ 646.903951][T18748] ? __pfx___x64_sys_close_range+0x10/0x10 [ 646.903972][T18748] do_syscall_64+0x106/0xf80 [ 646.903993][T18748] ? clear_bhb_loop+0x40/0x90 [ 646.904011][T18748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.904027][T18748] RIP: 0033:0x7f6408d9c799 [ 646.904040][T18748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.904055][T18748] RSP: 002b:00007f6409d41028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 646.904070][T18748] RAX: ffffffffffffffda RBX: 00007f6409015fa0 RCX: 00007f6408d9c799 [ 646.904082][T18748] RDX: 0000000000000002 RSI: fffffffffffff001 RDI: 0000000000000000 [ 646.904093][T18748] RBP: 00007f6408e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 646.904109][T18748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 646.904118][T18748] R13: 00007f6409016038 R14: 00007f6409015fa0 R15: 00007ffc06e2c548 [ 646.904139][T18748] [ 647.756640][T18756] netlink: 338 bytes leftover after parsing attributes in process `syz.2.4499'. [ 647.777315][T18763] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4499'. [ 647.837890][T18760] netlink: 338 bytes leftover after parsing attributes in process `syz.2.4499'. [ 649.449638][T18793] FAULT_INJECTION: forcing a failure. [ 649.449638][T18793] name failslab, interval 1, probability 0, space 0, times 0 [ 649.508307][T18793] CPU: 0 UID: 0 PID: 18793 Comm: syz.2.4513 Tainted: G L syzkaller #0 PREEMPT(full) [ 649.508336][T18793] Tainted: [L]=SOFTLOCKUP [ 649.508342][T18793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 649.508352][T18793] Call Trace: [ 649.508357][T18793] [ 649.508364][T18793] dump_stack_lvl+0x100/0x190 [ 649.508392][T18793] should_fail_ex.cold+0x5/0xa [ 649.508412][T18793] should_failslab+0xc2/0x120 [ 649.508429][T18793] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 649.508452][T18793] ? mas_alloc_nodes+0x280/0x390 [ 649.508475][T18793] mas_alloc_nodes+0x280/0x390 [ 649.508496][T18793] mas_preallocate+0x39c/0xf10 [ 649.508520][T18793] ? __pfx_mas_preallocate+0x10/0x10 [ 649.508548][T18793] ? __asan_memset+0x23/0x50 [ 649.508568][T18793] ? init_multi_vma_prep+0x33c/0x650 [ 649.508590][T18793] commit_merge+0x3e3/0xbd0 [ 649.508612][T18793] ? __pfx_commit_merge+0x10/0x10 [ 649.508632][T18793] ? __pfx_free_pgtables+0x10/0x10 [ 649.508657][T18793] vma_expand+0x7df/0xcf0 [ 649.508679][T18793] ? __pfx_vma_expand+0x10/0x10 [ 649.508700][T18793] ? can_vma_merge_right+0xa5/0x530 [ 649.508722][T18793] vma_merge_new_range+0x2ce/0xa30 [ 649.508742][T18793] ? __sanitizer_cov_trace_const_cmp2+0x1/0x20 [ 649.508787][T18793] __mmap_region+0x900/0x29e0 [ 649.508810][T18793] ? update_cfs_rq_load_avg+0x51/0x550 [ 649.508831][T18793] ? __pfx___mmap_region+0x10/0x10 [ 649.508857][T18793] ? set_next_entity+0x11e/0x9c0 [ 649.508881][T18793] ? __lock_acquire+0x4a5/0x2630 [ 649.508906][T18793] ? update_cfs_rq_load_avg+0x51/0x550 [ 649.508931][T18793] ? find_held_lock+0x2b/0x80 [ 649.508946][T18793] ? finish_task_switch.isra.0+0x200/0xb80 [ 649.508963][T18793] ? finish_task_switch.isra.0+0x200/0xb80 [ 649.508988][T18793] ? trace_sched_exit_tp+0x13a/0x180 [ 649.509007][T18793] ? __schedule+0x1000/0x6120 [ 649.509050][T18793] ? rcu_is_watching+0x12/0xc0 [ 649.509072][T18793] ? cap_capable+0x107/0x460 [ 649.509099][T18793] mmap_region+0x180/0x3e0 [ 649.509124][T18793] do_mmap+0xc63/0x12f0 [ 649.509144][T18793] ? __pfx_do_mmap+0x10/0x10 [ 649.509161][T18793] ? __pfx_down_write_killable+0x10/0x10 [ 649.509188][T18793] vm_mmap_pgoff+0x29e/0x470 [ 649.509208][T18793] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 649.509226][T18793] ? do_futex+0x192/0x350 [ 649.509246][T18793] ? __pfx_do_futex+0x10/0x10 [ 649.509268][T18793] ksys_mmap_pgoff+0xe1/0x650 [ 649.509283][T18793] ? __x64_sys_futex+0x34f/0x4d0 [ 649.509301][T18793] ? __x64_sys_futex+0x358/0x4d0 [ 649.509320][T18793] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 649.509336][T18793] ? xfd_validate_state+0x129/0x190 [ 649.509361][T18793] __x64_sys_mmap+0x125/0x190 [ 649.509384][T18793] do_syscall_64+0x106/0xf80 [ 649.509403][T18793] ? clear_bhb_loop+0x40/0x90 [ 649.509422][T18793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.509437][T18793] RIP: 0033:0x7fb2b799c799 [ 649.509451][T18793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.509466][T18793] RSP: 002b:00007fb2b8898028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 649.509481][T18793] RAX: ffffffffffffffda RBX: 00007fb2b7c15fa0 RCX: 00007fb2b799c799 [ 649.509491][T18793] RDX: 00000000000000df RSI: 0000000000000005 RDI: 0000000000000000 [ 649.509501][T18793] RBP: 00007fb2b7a32c99 R08: 0000000000000002 R09: 0000000000008000 [ 649.509511][T18793] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 649.509520][T18793] R13: 00007fb2b7c16038 R14: 00007fb2b7c15fa0 R15: 00007fff174cc098 [ 649.509541][T18793] [ 652.882640][T18847] mkiss: ax0: crc mode is auto. [ 652.928500][T18852] FAULT_INJECTION: forcing a failure. [ 652.928500][T18852] name failslab, interval 1, probability 0, space 0, times 0 [ 653.006501][T18852] CPU: 0 UID: 0 PID: 18852 Comm: syz.4.4533 Tainted: G L syzkaller #0 PREEMPT(full) [ 653.006530][T18852] Tainted: [L]=SOFTLOCKUP [ 653.006536][T18852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 653.006546][T18852] Call Trace: [ 653.006552][T18852] [ 653.006564][T18852] dump_stack_lvl+0x100/0x190 [ 653.006594][T18852] should_fail_ex.cold+0x5/0xa [ 653.006613][T18852] should_failslab+0xc2/0x120 [ 653.006630][T18852] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 653.006660][T18852] ? __alloc_skb+0x140/0x710 [ 653.006684][T18852] __alloc_skb+0x140/0x710 [ 653.006702][T18852] ? __alloc_skb+0x5b7/0x710 [ 653.006721][T18852] ? __pfx___alloc_skb+0x10/0x10 [ 653.006746][T18852] inet6_ifmcaddr_notify+0xd6/0x1d0 [ 653.006840][T18852] ? __pfx_inet6_ifmcaddr_notify+0x10/0x10 [ 653.006863][T18852] __ipv6_dev_mc_dec+0x297/0x340 [ 653.006886][T18852] ipv6_mc_destroy_dev+0x2cd/0x690 [ 653.006907][T18852] ? __local_bh_enable_ip+0x9e/0x120 [ 653.006926][T18852] addrconf_ifdown.isra.0+0x148a/0x1b70 [ 653.007002][T18852] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 653.007026][T18852] ? tls_dev_event+0x2c9/0x10f0 [ 653.007072][T18852] ? net_generic+0xea/0x2a0 [ 653.007146][T18852] addrconf_notify+0x458/0x19c0 [ 653.007163][T18852] ? ip6mr_device_event+0x1bc/0x230 [ 653.007211][T18852] notifier_call_chain+0x99/0x420 [ 653.007237][T18852] call_netdevice_notifiers_info+0xbe/0x110 [ 653.007263][T18852] unregister_netdevice_many_notify+0x1208/0x2580 [ 653.007293][T18852] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 653.007325][T18852] unregister_netdevice_queue+0x30b/0x3c0 [ 653.007348][T18852] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 653.007371][T18852] ? __pfx_locks_remove_file+0x10/0x10 [ 653.007392][T18852] ppp_release+0x211/0x230 [ 653.007411][T18852] ? __pfx_ppp_release+0x10/0x10 [ 653.007428][T18852] __fput+0x3ff/0xb40 [ 653.007450][T18852] task_work_run+0x150/0x240 [ 653.007472][T18852] ? __pfx_task_work_run+0x10/0x10 [ 653.007499][T18852] exit_to_user_mode_loop+0x100/0x4a0 [ 653.007520][T18852] do_syscall_64+0x668/0xf80 [ 653.007543][T18852] ? clear_bhb_loop+0x40/0x90 [ 653.007563][T18852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.007579][T18852] RIP: 0033:0x7fe3eb39c799 [ 653.007594][T18852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 653.007610][T18852] RSP: 002b:00007fe3ec177028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 653.007625][T18852] RAX: 0000000000000000 RBX: 00007fe3eb615fa0 RCX: 00007fe3eb39c799 [ 653.007636][T18852] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 653.007645][T18852] RBP: 00007fe3eb432c99 R08: 0000000000000000 R09: 0000000000000000 [ 653.007661][T18852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 653.007671][T18852] R13: 00007fe3eb616038 R14: 00007fe3eb615fa0 R15: 00007fffdc464778 [ 653.007692][T18852] [ 656.335945][T18922] FAULT_INJECTION: forcing a failure. [ 656.335945][T18922] name failslab, interval 1, probability 0, space 0, times 0 [ 656.454233][T18922] CPU: 0 UID: 0 PID: 18922 Comm: syz.4.4560 Tainted: G L syzkaller #0 PREEMPT(full) [ 656.454262][T18922] Tainted: [L]=SOFTLOCKUP [ 656.454268][T18922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 656.454277][T18922] Call Trace: [ 656.454283][T18922] [ 656.454296][T18922] dump_stack_lvl+0x100/0x190 [ 656.454325][T18922] should_fail_ex.cold+0x5/0xa [ 656.454345][T18922] should_failslab+0xc2/0x120 [ 656.454362][T18922] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 656.454384][T18922] ? prepare_creds+0x2c/0x950 [ 656.454411][T18922] prepare_creds+0x2c/0x950 [ 656.454435][T18922] __sys_setregid+0x109/0x910 [ 656.454461][T18922] do_syscall_64+0x106/0xf80 [ 656.454481][T18922] ? clear_bhb_loop+0x40/0x90 [ 656.454499][T18922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.454515][T18922] RIP: 0033:0x7fe3eb39c799 [ 656.454529][T18922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 656.454544][T18922] RSP: 002b:00007fe3e95f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000072 [ 656.454559][T18922] RAX: ffffffffffffffda RBX: 00007fe3eb616090 RCX: 00007fe3eb39c799 [ 656.454569][T18922] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 656.454578][T18922] RBP: 00007fe3eb432c99 R08: 0000000000000000 R09: 0000000000000000 [ 656.454587][T18922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 656.454596][T18922] R13: 00007fe3eb616128 R14: 00007fe3eb616090 R15: 00007fffdc464778 [ 656.454615][T18922] [ 656.952919][T18928] FAULT_INJECTION: forcing a failure. [ 656.952919][T18928] name failslab, interval 1, probability 0, space 0, times 0 [ 656.994551][T18928] CPU: 0 UID: 0 PID: 18928 Comm: syz.0.4561 Tainted: G L syzkaller #0 PREEMPT(full) [ 656.994580][T18928] Tainted: [L]=SOFTLOCKUP [ 656.994585][T18928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 656.994595][T18928] Call Trace: [ 656.994601][T18928] [ 656.994608][T18928] dump_stack_lvl+0x100/0x190 [ 656.994637][T18928] should_fail_ex.cold+0x5/0xa [ 656.994656][T18928] should_failslab+0xc2/0x120 [ 656.994672][T18928] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 656.994697][T18928] ? snd_timer_instance_new+0x65/0x2e0 [ 656.994719][T18928] kstrdup+0x51/0xe0 [ 656.994743][T18928] snd_timer_instance_new+0x65/0x2e0 [ 656.994761][T18928] snd_seq_timer_open+0x1d4/0x600 [ 656.994783][T18928] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 656.994809][T18928] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 656.994829][T18928] ? lockdep_hardirqs_on+0x78/0x100 [ 656.994849][T18928] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 656.994870][T18928] queue_use+0xdc/0x1f0 [ 656.994887][T18928] snd_seq_queue_alloc+0x2e5/0x590 [ 656.994908][T18928] snd_seq_ioctl_create_queue+0xa9/0x370 [ 656.994932][T18928] call_seq_client_ctl+0xa3/0x130 [ 656.994955][T18928] snd_seq_kernel_client_ctl+0x77/0xd0 [ 656.994979][T18928] alloc_seq_queue+0xdb/0x180 [ 656.994993][T18928] ? __pfx_alloc_seq_queue+0x10/0x10 [ 656.995018][T18928] ? mark_held_locks+0x40/0x70 [ 656.995037][T18928] ? _raw_spin_unlock_irq+0x23/0x50 [ 656.995054][T18928] ? lockdep_hardirqs_on+0x78/0x100 [ 656.995076][T18928] snd_seq_oss_open+0x2b2/0xa10 [ 656.995094][T18928] odev_open+0x79/0xc0 [ 656.995115][T18928] ? __pfx_odev_open+0x10/0x10 [ 656.995137][T18928] soundcore_open+0x2e3/0x5a0 [ 656.995162][T18928] ? __pfx_soundcore_open+0x10/0x10 [ 656.995185][T18928] chrdev_open+0x234/0x6a0 [ 656.995200][T18928] ? __pfx_apparmor_file_open+0x10/0x10 [ 656.995223][T18928] ? __pfx_chrdev_open+0x10/0x10 [ 656.995249][T18928] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 656.995270][T18928] do_dentry_open+0x6d8/0x1660 [ 656.995286][T18928] ? __pfx_chrdev_open+0x10/0x10 [ 656.995306][T18928] vfs_open+0x82/0x3f0 [ 656.995328][T18928] path_openat+0x208c/0x31a0 [ 656.995350][T18928] ? __pfx_path_openat+0x10/0x10 [ 656.995372][T18928] do_file_open+0x20e/0x430 [ 656.995389][T18928] ? __pfx_do_file_open+0x10/0x10 [ 656.995418][T18928] ? alloc_fd+0x476/0x790 [ 656.995435][T18928] ? do_getname+0x191/0x390 [ 656.995455][T18928] do_sys_openat2+0x10d/0x1e0 [ 656.995474][T18928] ? __pfx_do_sys_openat2+0x10/0x10 [ 656.995494][T18928] ? __fget_files+0x21f/0x3d0 [ 656.995512][T18928] __x64_sys_openat+0x12d/0x210 [ 656.995532][T18928] ? __pfx___x64_sys_openat+0x10/0x10 [ 656.995559][T18928] do_syscall_64+0x106/0xf80 [ 656.995578][T18928] ? clear_bhb_loop+0x40/0x90 [ 656.995596][T18928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.995612][T18928] RIP: 0033:0x7f9813b9c799 [ 656.995626][T18928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 656.995641][T18928] RSP: 002b:00007f9811df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 656.995656][T18928] RAX: ffffffffffffffda RBX: 00007f9813e15fa0 RCX: 00007f9813b9c799 [ 656.995666][T18928] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 656.995676][T18928] RBP: 00007f9813c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 656.995686][T18928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 656.995695][T18928] R13: 00007f9813e16038 R14: 00007f9813e15fa0 R15: 00007ffc34c013a8 [ 656.995715][T18928] [ 657.759360][T13560] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 659.581413][T18961] zswap: compressor not available [ 659.611210][T18965] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 659.694182][T18963] netlink: 334 bytes leftover after parsing attributes in process `syz.2.4572'. [ 659.812296][T18975] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4577'. [ 660.863525][T18992] mkiss: ax0: crc mode is auto. [ 660.943979][ T5833] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 660.966515][T18995] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 661.876074][T19010] netlink: 'syz.1.4587': attribute type 33 has an invalid length. [ 662.192999][T19018] netlink: 'syz.0.4601': attribute type 33 has an invalid length. [ 662.491171][T19022] zswap: compressor not available [ 662.506661][T19030] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 663.895807][T19059] FAULT_INJECTION: forcing a failure. [ 663.895807][T19059] name failslab, interval 1, probability 0, space 0, times 0 [ 663.924976][T19061] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4605'. [ 663.946385][T19059] CPU: 0 UID: 0 PID: 19059 Comm: syz.4.4607 Tainted: G L syzkaller #0 PREEMPT(full) [ 663.946413][T19059] Tainted: [L]=SOFTLOCKUP [ 663.946420][T19059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 663.946430][T19059] Call Trace: [ 663.946436][T19059] [ 663.946442][T19059] dump_stack_lvl+0x100/0x190 [ 663.946472][T19059] should_fail_ex.cold+0x5/0xa [ 663.946491][T19059] ? sk_prot_alloc+0x10b/0x2a0 [ 663.946505][T19059] should_failslab+0xc2/0x120 [ 663.946522][T19059] __kmalloc_noprof+0xe0/0x850 [ 663.946545][T19059] ? lockdep_init_map_type+0x5c/0x250 [ 663.946567][T19059] sk_prot_alloc+0x10b/0x2a0 [ 663.946584][T19059] sk_alloc+0x36/0xe80 [ 663.946603][T19059] pppoe_create+0x32/0x360 [ 663.946692][T19059] pppox_create+0x15c/0x2c0 [ 663.946711][T19059] __sock_create+0x339/0x860 [ 663.946731][T19059] __sys_socket+0x14d/0x260 [ 663.946748][T19059] ? __pfx___sys_socket+0x10/0x10 [ 663.946769][T19059] __x64_sys_socket+0x72/0xb0 [ 663.946785][T19059] ? lockdep_hardirqs_on+0x78/0x100 [ 663.946805][T19059] do_syscall_64+0x106/0xf80 [ 663.946834][T19059] ? clear_bhb_loop+0x40/0x90 [ 663.946854][T19059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.946870][T19059] RIP: 0033:0x7fe3eb39c799 [ 663.946886][T19059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 663.946900][T19059] RSP: 002b:00007fe3ec177028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 663.946916][T19059] RAX: ffffffffffffffda RBX: 00007fe3eb615fa0 RCX: 00007fe3eb39c799 [ 663.946926][T19059] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000018 [ 663.946935][T19059] RBP: 00007fe3eb432c99 R08: 0000000000000000 R09: 0000000000000000 [ 663.946944][T19059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 663.946954][T19059] R13: 00007fe3eb616038 R14: 00007fe3eb615fa0 R15: 00007fffdc464778 [ 663.946974][T19059] [ 665.948683][T19092] netlink: 330 bytes leftover after parsing attributes in process `syz.1.4614'. [ 665.997189][T19092] gretap0: refused to change device tx_queue_len [ 666.943671][ T5833] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 667.677400][T19124] FAULT_INJECTION: forcing a failure. [ 667.677400][T19124] name failslab, interval 1, probability 0, space 0, times 0 [ 667.799165][T19124] CPU: 0 UID: 0 PID: 19124 Comm: syz.0.4624 Tainted: G L syzkaller #0 PREEMPT(full) [ 667.799195][T19124] Tainted: [L]=SOFTLOCKUP [ 667.799201][T19124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 667.799211][T19124] Call Trace: [ 667.799217][T19124] [ 667.799225][T19124] dump_stack_lvl+0x100/0x190 [ 667.799254][T19124] should_fail_ex.cold+0x5/0xa [ 667.799274][T19124] should_failslab+0xc2/0x120 [ 667.799290][T19124] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 667.799314][T19124] ? __alloc_skb+0x140/0x710 [ 667.799337][T19124] __alloc_skb+0x140/0x710 [ 667.799355][T19124] ? __alloc_skb+0x5b7/0x710 [ 667.799373][T19124] ? __pfx___alloc_skb+0x10/0x10 [ 667.799396][T19124] ? __asan_memcpy+0x3c/0x60 [ 667.799419][T19124] alloc_uevent_skb+0x7d/0x210 [ 667.799437][T19124] kobject_uevent_env+0x122c/0x18b0 [ 667.799455][T19124] ? kernfs_remove_by_name_ns+0x9f/0xf0 [ 667.799475][T19124] __kobject_del+0x168/0x220 [ 667.799499][T19124] kobject_put+0x348/0x640 [ 667.799523][T19124] net_rx_queue_update_kobjects+0x544/0x760 [ 667.799664][T19124] netdev_unregister_kobject+0x154/0x540 [ 667.799688][T19124] ? rtmsg_ifinfo_send+0xcc/0x110 [ 667.799713][T19124] unregister_netdevice_many_notify+0x1817/0x2580 [ 667.799743][T19124] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 667.799766][T19124] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 667.799798][T19124] unregister_netdevice_queue+0x30b/0x3c0 [ 667.799821][T19124] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 667.799844][T19124] ? __pfx_locks_remove_file+0x10/0x10 [ 667.799865][T19124] ppp_release+0x211/0x230 [ 667.799884][T19124] ? __pfx_ppp_release+0x10/0x10 [ 667.799901][T19124] __fput+0x3ff/0xb40 [ 667.799923][T19124] task_work_run+0x150/0x240 [ 667.799946][T19124] ? __pfx_task_work_run+0x10/0x10 [ 667.799972][T19124] exit_to_user_mode_loop+0x100/0x4a0 [ 667.799994][T19124] do_syscall_64+0x668/0xf80 [ 667.800014][T19124] ? clear_bhb_loop+0x40/0x90 [ 667.800033][T19124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.800049][T19124] RIP: 0033:0x7f9813b9c799 [ 667.800063][T19124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 667.800078][T19124] RSP: 002b:00007f9811df6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 667.800093][T19124] RAX: 0000000000000000 RBX: 00007f9813e15fa0 RCX: 00007f9813b9c799 [ 667.800103][T19124] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 667.800112][T19124] RBP: 00007f9813c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 667.800121][T19124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 667.800130][T19124] R13: 00007f9813e16038 R14: 00007f9813e15fa0 R15: 00007ffc34c013a8 [ 667.800151][T19124] [ 668.291516][T19131] FAULT_INJECTION: forcing a failure. [ 668.291516][T19131] name failslab, interval 1, probability 0, space 0, times 0 [ 668.304947][T19131] CPU: 0 UID: 0 PID: 19131 Comm: syz.4.4629 Tainted: G L syzkaller #0 PREEMPT(full) [ 668.304974][T19131] Tainted: [L]=SOFTLOCKUP [ 668.304980][T19131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 668.304989][T19131] Call Trace: [ 668.304995][T19131] [ 668.305001][T19131] dump_stack_lvl+0x100/0x190 [ 668.305030][T19131] should_fail_ex.cold+0x5/0xa [ 668.305050][T19131] should_failslab+0xc2/0x120 [ 668.305066][T19131] __kmalloc_cache_noprof+0x7a/0x6f0 [ 668.305085][T19131] ? alloc_mnt_ns+0xce/0x520 [ 668.305110][T19131] alloc_mnt_ns+0xce/0x520 [ 668.305131][T19131] copy_mnt_ns+0x220/0xc30 [ 668.305148][T19131] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 668.305169][T19131] ? create_new_namespaces+0x30/0xac0 [ 668.305185][T19131] ? rcu_is_watching+0x12/0xc0 [ 668.305209][T19131] create_new_namespaces+0xd3/0xac0 [ 668.305225][T19131] ? bpf_lsm_capable+0x9/0x10 [ 668.305240][T19131] ? security_capable+0x80/0x260 [ 668.305265][T19131] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 668.305283][T19131] ksys_unshare+0x473/0xad0 [ 668.305302][T19131] ? __pfx_ksys_unshare+0x10/0x10 [ 668.305329][T19131] __x64_sys_unshare+0x31/0x40 [ 668.305347][T19131] do_syscall_64+0x106/0xf80 [ 668.305368][T19131] ? clear_bhb_loop+0x40/0x90 [ 668.305386][T19131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.305411][T19131] RIP: 0033:0x7fe3eb39c799 [ 668.305433][T19131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 668.305448][T19131] RSP: 002b:00007fe3ec177028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 668.305465][T19131] RAX: ffffffffffffffda RBX: 00007fe3eb615fa0 RCX: 00007fe3eb39c799 [ 668.305476][T19131] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 668.305485][T19131] RBP: 00007fe3eb432c99 R08: 0000000000000000 R09: 0000000000000000 [ 668.305495][T19131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 668.305504][T19131] R13: 00007fe3eb616038 R14: 00007fe3eb615fa0 R15: 00007fffdc464778 [ 668.305525][T19131] [ 668.911939][T19138] openvswitch: netlink: IP tunnel dst address not specified [ 669.516147][T19160] kvm_intel: kvm [19159]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0xfffffffffffffffe [ 669.896055][T19174] netlink: 'syz.0.4643': attribute type 1 has an invalid length. [ 669.926523][T19176] vivid-007: ================= START STATUS ================= [ 669.959124][T19176] vivid-007: Generate PTS: true [ 669.979108][T19176] vivid-007: Generate SCR: true [ 670.003456][T19176] tpg source WxH: 320x240 (Y'CbCr) [ 670.044314][T19176] tpg field: 1 [ 670.047712][T19176] tpg crop: (0,0)/320x240 [ 670.052062][T19176] tpg compose: (0,0)/320x240 [ 670.094382][T19176] tpg colorspace: 8 [ 670.113677][T19176] tpg transfer function: 0/0 [ 670.118311][T19176] tpg Y'CbCr encoding: 0/0 [ 670.164054][T19176] tpg quantization: 0/0 [ 670.190205][T19176] tpg RGB range: 0/2 [ 670.222224][T19176] vivid-007: ================== END STATUS ================== [ 670.592780][T19189] FAULT_INJECTION: forcing a failure. [ 670.592780][T19189] name failslab, interval 1, probability 0, space 0, times 0 [ 670.638492][T19189] CPU: 0 UID: 0 PID: 19189 Comm: syz.2.4649 Tainted: G L syzkaller #0 PREEMPT(full) [ 670.638520][T19189] Tainted: [L]=SOFTLOCKUP [ 670.638526][T19189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 670.638535][T19189] Call Trace: [ 670.638541][T19189] [ 670.638548][T19189] dump_stack_lvl+0x100/0x190 [ 670.638577][T19189] should_fail_ex.cold+0x5/0xa [ 670.638596][T19189] should_failslab+0xc2/0x120 [ 670.638613][T19189] __kmalloc_cache_noprof+0x7a/0x6f0 [ 670.638633][T19189] ? alloc_super+0x52/0xd20 [ 670.638658][T19189] alloc_super+0x52/0xd20 [ 670.638681][T19189] ? __pfx_mqueue_fill_super+0x10/0x10 [ 670.638703][T19189] sget_fc+0x117/0xc70 [ 670.638724][T19189] ? __pfx_set_anon_super_fc+0x10/0x10 [ 670.638746][T19189] ? __pfx_mqueue_fill_super+0x10/0x10 [ 670.638767][T19189] get_tree_nodev+0x28/0x190 [ 670.638790][T19189] mqueue_get_tree+0xf1/0x130 [ 670.638812][T19189] vfs_get_tree+0x92/0x320 [ 670.638832][T19189] fc_mount_longterm+0x1a/0x270 [ 670.638855][T19189] mq_init_ns+0x482/0x820 [ 670.638871][T19189] copy_ipcs+0x3dd/0x7e0 [ 670.638888][T19189] create_new_namespaces+0x20a/0xac0 [ 670.638905][T19189] ? security_capable+0x80/0x260 [ 670.638929][T19189] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 670.638947][T19189] ksys_unshare+0x473/0xad0 [ 670.638968][T19189] ? __pfx_ksys_unshare+0x10/0x10 [ 670.638993][T19189] __x64_sys_unshare+0x31/0x40 [ 670.639011][T19189] do_syscall_64+0x106/0xf80 [ 670.639031][T19189] ? clear_bhb_loop+0x40/0x90 [ 670.639050][T19189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.639066][T19189] RIP: 0033:0x7fb2b799c799 [ 670.639080][T19189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 670.639096][T19189] RSP: 002b:00007fb2b8898028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 670.639112][T19189] RAX: ffffffffffffffda RBX: 00007fb2b7c15fa0 RCX: 00007fb2b799c799 [ 670.639122][T19189] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 670.639131][T19189] RBP: 00007fb2b7a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 670.639141][T19189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 670.639149][T19189] R13: 00007fb2b7c16038 R14: 00007fb2b7c15fa0 R15: 00007fff174cc098 [ 670.639170][T19189] [ 672.624189][T13560] Bluetooth: hci4: command 0x0406 tx timeout [ 672.832813][T19234] netlink: 326 bytes leftover after parsing attributes in process `syz.1.4662'. [ 673.703524][T19257] FAULT_INJECTION: forcing a failure. [ 673.703524][T19257] name failslab, interval 1, probability 0, space 0, times 0 [ 673.776093][T19257] CPU: 0 UID: 0 PID: 19257 Comm: syz.1.4665 Tainted: G L syzkaller #0 PREEMPT(full) [ 673.776122][T19257] Tainted: [L]=SOFTLOCKUP [ 673.776127][T19257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 673.776137][T19257] Call Trace: [ 673.776144][T19257] [ 673.776151][T19257] dump_stack_lvl+0x100/0x190 [ 673.776186][T19257] should_fail_ex.cold+0x5/0xa [ 673.776206][T19257] ? lsm_blob_alloc+0x68/0x90 [ 673.776227][T19257] should_failslab+0xc2/0x120 [ 673.776245][T19257] __kmalloc_noprof+0xe0/0x850 [ 673.776266][T19257] ? trace_kmem_cache_alloc+0xf3/0x120 [ 673.776287][T19257] lsm_blob_alloc+0x68/0x90 [ 673.776308][T19257] security_prepare_creds+0x2d/0x290 [ 673.776328][T19257] prepare_creds+0x5d6/0x950 [ 673.776352][T19257] __sys_setresgid+0x4a7/0x12f0 [ 673.776371][T19257] do_syscall_64+0x106/0xf80 [ 673.776391][T19257] ? clear_bhb_loop+0x40/0x90 [ 673.776409][T19257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.776425][T19257] RIP: 0033:0x7f6408d9c799 [ 673.776439][T19257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 673.776454][T19257] RSP: 002b:00007f6409d41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000077 [ 673.776470][T19257] RAX: ffffffffffffffda RBX: 00007f6409015fa0 RCX: 00007f6408d9c799 [ 673.776480][T19257] RDX: 0000000000000008 RSI: 00000000800000a0 RDI: 0000000000000081 [ 673.776489][T19257] RBP: 00007f6408e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 673.776499][T19257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 673.776507][T19257] R13: 00007f6409016038 R14: 00007f6409015fa0 R15: 00007ffc06e2c548 [ 673.776527][T19257] [ 674.119425][T19264] netlink: 146 bytes leftover after parsing attributes in process `syz.4.4669'. [ 674.212798][T19269] netlink: 25 bytes leftover after parsing attributes in process `syz.2.4668'. [ 674.988944][T19291] FAULT_INJECTION: forcing a failure. [ 674.988944][T19291] name failslab, interval 1, probability 0, space 0, times 0 [ 675.043799][T19291] CPU: 0 UID: 0 PID: 19291 Comm: syz.1.4676 Tainted: G L syzkaller #0 PREEMPT(full) [ 675.043828][T19291] Tainted: [L]=SOFTLOCKUP [ 675.043833][T19291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 675.043844][T19291] Call Trace: [ 675.043849][T19291] [ 675.043857][T19291] dump_stack_lvl+0x100/0x190 [ 675.043887][T19291] should_fail_ex.cold+0x5/0xa [ 675.043906][T19291] should_failslab+0xc2/0x120 [ 675.043922][T19291] __kmalloc_cache_noprof+0x7a/0x6f0 [ 675.043942][T19291] ? sctp_add_bind_addr+0xae/0x3e0 [ 675.044038][T19291] ? __sctp_v6_cmp_addr+0x206/0x530 [ 675.044178][T19291] sctp_add_bind_addr+0xae/0x3e0 [ 675.044200][T19291] sctp_copy_local_addr_list+0x349/0x550 [ 675.044247][T19291] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 675.044271][T19291] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 675.044294][T19291] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 675.044321][T19291] sctp_bind_addr_copy+0xe0/0x530 [ 675.044345][T19291] sctp_connect_new_asoc+0x1c9/0x770 [ 675.044362][T19291] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 675.044379][T19291] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 675.044407][T19291] __sctp_connect+0x3e7/0xc70 [ 675.044426][T19291] ? __pfx___sctp_connect+0x10/0x10 [ 675.044442][T19291] ? __pfx_sctp_inet_connect+0x10/0x10 [ 675.044458][T19291] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 675.044483][T19291] ? __pfx_sctp_inet_connect+0x10/0x10 [ 675.044497][T19291] sctp_inet_connect+0x15f/0x220 [ 675.044513][T19291] __sys_connect_file+0x141/0x1a0 [ 675.044535][T19291] __sys_connect+0x141/0x170 [ 675.044553][T19291] ? __pfx___sys_connect+0x10/0x10 [ 675.044584][T19291] __x64_sys_connect+0x72/0xb0 [ 675.044602][T19291] ? lockdep_hardirqs_on+0x78/0x100 [ 675.044622][T19291] do_syscall_64+0x106/0xf80 [ 675.044641][T19291] ? clear_bhb_loop+0x40/0x90 [ 675.044660][T19291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.044679][T19291] RIP: 0033:0x7f6408d9c799 [ 675.044692][T19291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 675.044708][T19291] RSP: 002b:00007f6409d41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 675.044724][T19291] RAX: ffffffffffffffda RBX: 00007f6409015fa0 RCX: 00007f6408d9c799 [ 675.044735][T19291] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 675.044745][T19291] RBP: 00007f6408e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 675.044755][T19291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 675.044764][T19291] R13: 00007f6409016038 R14: 00007f6409015fa0 R15: 00007ffc06e2c548 [ 675.044785][T19291] [ 676.187758][T19311] netlink: 'syz.0.4681': attribute type 7 has an invalid length. [ 676.207194][T19311] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4681'. [ 676.320672][T19317] random: crng reseeded on system resumption [ 676.389741][T19317] Restarting kernel threads ... [ 676.450701][T19317] Done restarting kernel threads. [ 676.506335][T19323] sp0: Synchronizing with TNC [ 676.861358][T19335] base or size exceeds the MTRR width [ 677.160276][T19347] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4693'. [ 677.368041][T19355] vivid-007: ================= START STATUS ================= [ 677.391940][T19355] vivid-007: Generate PTS: true [ 677.409603][T19355] vivid-007: Generate SCR: true [ 677.426661][T19355] tpg source WxH: 320x240 (Y'CbCr) [ 677.446625][T19355] tpg field: 1 [ 677.461339][T19355] tpg crop: (0,0)/320x240 [ 677.474689][T19355] tpg compose: (0,0)/320x240 [ 677.492222][T19355] tpg colorspace: 8 [ 677.507752][T19355] tpg transfer function: 0/0 [ 677.522230][T19355] tpg Y'CbCr encoding: 0/0 [ 677.537590][T19355] tpg quantization: 0/0 [ 677.546575][T19355] tpg RGB range: 0/2 [ 677.554953][T19355] vivid-007: ================== END STATUS ================== [ 677.716193][T19363] FAULT_INJECTION: forcing a failure. [ 677.716193][T19363] name failslab, interval 1, probability 0, space 0, times 0 [ 677.756108][T19363] CPU: 0 UID: 0 PID: 19363 Comm: syz.1.4697 Tainted: G L syzkaller #0 PREEMPT(full) [ 677.756137][T19363] Tainted: [L]=SOFTLOCKUP [ 677.756143][T19363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 677.756153][T19363] Call Trace: [ 677.756159][T19363] [ 677.756165][T19363] dump_stack_lvl+0x100/0x190 [ 677.756194][T19363] should_fail_ex.cold+0x5/0xa [ 677.756213][T19363] should_failslab+0xc2/0x120 [ 677.756230][T19363] __kmalloc_cache_noprof+0x7a/0x6f0 [ 677.756250][T19363] ? mqueue_init_fs_context+0x4b/0x690 [ 677.756277][T19363] mqueue_init_fs_context+0x4b/0x690 [ 677.756302][T19363] alloc_fs_context+0x60c/0xf40 [ 677.756323][T19363] mq_init_ns+0x16e/0x820 [ 677.756339][T19363] copy_ipcs+0x3dd/0x7e0 [ 677.756356][T19363] create_new_namespaces+0x20a/0xac0 [ 677.756372][T19363] ? security_capable+0x80/0x260 [ 677.756396][T19363] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 677.756414][T19363] ksys_unshare+0x473/0xad0 [ 677.756434][T19363] ? __pfx_ksys_unshare+0x10/0x10 [ 677.756459][T19363] __x64_sys_unshare+0x31/0x40 [ 677.756477][T19363] do_syscall_64+0x106/0xf80 [ 677.756508][T19363] ? clear_bhb_loop+0x40/0x90 [ 677.756527][T19363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.756544][T19363] RIP: 0033:0x7f6408d9c799 [ 677.756557][T19363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 677.756572][T19363] RSP: 002b:00007f6409d41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 677.756587][T19363] RAX: ffffffffffffffda RBX: 00007f6409015fa0 RCX: 00007f6408d9c799 [ 677.756598][T19363] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 677.756607][T19363] RBP: 00007f6408e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 677.756617][T19363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 677.756626][T19363] R13: 00007f6409016038 R14: 00007f6409015fa0 R15: 00007ffc06e2c548 [ 677.756646][T19363] [ 678.612709][T19372] netlink: 338 bytes leftover after parsing attributes in process `syz.2.4698'. [ 678.718305][T19372] bond_slave_0: entered allmulticast mode [ 679.168412][T19383] netlink: 186 bytes leftover after parsing attributes in process `syz.4.4706'. [ 679.188744][ T5833] Bluetooth: hci2: unexpected event 0x20 length: 123 > 7 [ 679.204311][T19383] netlink: 186 bytes leftover after parsing attributes in process `syz.4.4706'. [ 679.235627][T19388] FAULT_INJECTION: forcing a failure. [ 679.235627][T19388] name failslab, interval 1, probability 0, space 0, times 0 [ 679.288285][T19388] CPU: 0 UID: 0 PID: 19388 Comm: syz.0.4708 Tainted: G L syzkaller #0 PREEMPT(full) [ 679.288313][T19388] Tainted: [L]=SOFTLOCKUP [ 679.288319][T19388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 679.288329][T19388] Call Trace: [ 679.288335][T19388] [ 679.288341][T19388] dump_stack_lvl+0x100/0x190 [ 679.288369][T19388] should_fail_ex.cold+0x5/0xa [ 679.288388][T19388] ? lsm_blob_alloc+0x68/0x90 [ 679.288408][T19388] should_failslab+0xc2/0x120 [ 679.288424][T19388] __kmalloc_noprof+0xe0/0x850 [ 679.288446][T19388] ? trace_kmem_cache_alloc+0xf3/0x120 [ 679.288465][T19388] lsm_blob_alloc+0x68/0x90 [ 679.288485][T19388] security_sk_alloc+0x2d/0x290 [ 679.288575][T19388] sk_prot_alloc+0x1d1/0x2a0 [ 679.288592][T19388] sk_alloc+0x36/0xe80 [ 679.288611][T19388] rds_create+0x9e/0x5f0 [ 679.288630][T19388] __sock_create+0x339/0x860 [ 679.288650][T19388] __sys_socket+0x14d/0x260 [ 679.288666][T19388] ? __pfx___sys_socket+0x10/0x10 [ 679.288688][T19388] __x64_sys_socket+0x72/0xb0 [ 679.288711][T19388] ? lockdep_hardirqs_on+0x78/0x100 [ 679.288733][T19388] do_syscall_64+0x106/0xf80 [ 679.288753][T19388] ? clear_bhb_loop+0x40/0x90 [ 679.288771][T19388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.288788][T19388] RIP: 0033:0x7f9813b9c799 [ 679.288802][T19388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 679.288817][T19388] RSP: 002b:00007f9811df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 679.288832][T19388] RAX: ffffffffffffffda RBX: 00007f9813e15fa0 RCX: 00007f9813b9c799 [ 679.288842][T19388] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000015 [ 679.288851][T19388] RBP: 00007f9813c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 679.288860][T19388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 679.288870][T19388] R13: 00007f9813e16038 R14: 00007f9813e15fa0 R15: 00007ffc34c013a8 [ 679.288890][T19388] [ 679.832547][T19394] FAULT_INJECTION: forcing a failure. [ 679.832547][T19394] name failslab, interval 1, probability 0, space 0, times 0 [ 679.877307][T19394] CPU: 0 UID: 0 PID: 19394 Comm: syz.4.4710 Tainted: G L syzkaller #0 PREEMPT(full) [ 679.877335][T19394] Tainted: [L]=SOFTLOCKUP [ 679.877341][T19394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 679.877350][T19394] Call Trace: [ 679.877356][T19394] [ 679.877363][T19394] dump_stack_lvl+0x100/0x190 [ 679.877391][T19394] should_fail_ex.cold+0x5/0xa [ 679.877410][T19394] should_failslab+0xc2/0x120 [ 679.877426][T19394] __kmalloc_cache_noprof+0x7a/0x6f0 [ 679.877446][T19394] ? alloc_super+0x52/0xd20 [ 679.877471][T19394] alloc_super+0x52/0xd20 [ 679.877494][T19394] ? __pfx_mqueue_fill_super+0x10/0x10 [ 679.877516][T19394] sget_fc+0x117/0xc70 [ 679.877537][T19394] ? __pfx_set_anon_super_fc+0x10/0x10 [ 679.877559][T19394] ? __pfx_mqueue_fill_super+0x10/0x10 [ 679.877580][T19394] get_tree_nodev+0x28/0x190 [ 679.877604][T19394] mqueue_get_tree+0xf1/0x130 [ 679.877625][T19394] vfs_get_tree+0x92/0x320 [ 679.877645][T19394] fc_mount_longterm+0x1a/0x270 [ 679.877676][T19394] mq_init_ns+0x482/0x820 [ 679.877693][T19394] copy_ipcs+0x3dd/0x7e0 [ 679.877711][T19394] create_new_namespaces+0x20a/0xac0 [ 679.877728][T19394] ? security_capable+0x80/0x260 [ 679.877754][T19394] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 679.877771][T19394] ksys_unshare+0x473/0xad0 [ 679.877791][T19394] ? __pfx_ksys_unshare+0x10/0x10 [ 679.877816][T19394] __x64_sys_unshare+0x31/0x40 [ 679.877834][T19394] do_syscall_64+0x106/0xf80 [ 679.877854][T19394] ? clear_bhb_loop+0x40/0x90 [ 679.877873][T19394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.877889][T19394] RIP: 0033:0x7fe3eb39c799 [ 679.877903][T19394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 679.877918][T19394] RSP: 002b:00007fe3ec177028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 679.877933][T19394] RAX: ffffffffffffffda RBX: 00007fe3eb615fa0 RCX: 00007fe3eb39c799 [ 679.877943][T19394] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 679.877952][T19394] RBP: 00007fe3eb432c99 R08: 0000000000000000 R09: 0000000000000000 [ 679.877961][T19394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 679.877970][T19394] R13: 00007fe3eb616038 R14: 00007fe3eb615fa0 R15: 00007fffdc464778 [ 679.877991][T19394] [ 681.023485][T19409] zero sized request [ 681.602807][T19424] netlink: 326 bytes leftover after parsing attributes in process `syz.0.4720'. [ 682.475456][T19440] netlink: 334 bytes leftover after parsing attributes in process `syz.2.4724'. [ 683.167150][T19451] netlink: 334 bytes leftover after parsing attributes in process `syz.2.4731'. [ 683.420607][T19453] zswap: compressor not available [ 685.909668][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.918825][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.121059][T19503] FAULT_INJECTION: forcing a failure. [ 686.121059][T19503] name failslab, interval 1, probability 0, space 0, times 0 [ 686.178604][T19503] CPU: 0 UID: 0 PID: 19503 Comm: syz.0.4747 Tainted: G L syzkaller #0 PREEMPT(full) [ 686.178633][T19503] Tainted: [L]=SOFTLOCKUP [ 686.178639][T19503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 686.178649][T19503] Call Trace: [ 686.178656][T19503] [ 686.178662][T19503] dump_stack_lvl+0x100/0x190 [ 686.178691][T19503] should_fail_ex.cold+0x5/0xa [ 686.178710][T19503] should_failslab+0xc2/0x120 [ 686.178726][T19503] __kmalloc_cache_noprof+0x7a/0x6f0 [ 686.178747][T19503] ? alloc_mnt_ns+0xce/0x520 [ 686.178771][T19503] alloc_mnt_ns+0xce/0x520 [ 686.178793][T19503] copy_mnt_ns+0x220/0xc30 [ 686.178811][T19503] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 686.178832][T19503] ? create_new_namespaces+0x30/0xac0 [ 686.178848][T19503] ? rcu_is_watching+0x12/0xc0 [ 686.178872][T19503] create_new_namespaces+0xd3/0xac0 [ 686.178887][T19503] ? bpf_lsm_capable+0x9/0x10 [ 686.178902][T19503] ? security_capable+0x80/0x260 [ 686.178927][T19503] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 686.178945][T19503] ksys_unshare+0x473/0xad0 [ 686.178964][T19503] ? __pfx_ksys_unshare+0x10/0x10 [ 686.178990][T19503] __x64_sys_unshare+0x31/0x40 [ 686.179008][T19503] do_syscall_64+0x106/0xf80 [ 686.179028][T19503] ? clear_bhb_loop+0x40/0x90 [ 686.179047][T19503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.179064][T19503] RIP: 0033:0x7f9813b9c799 [ 686.179077][T19503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 686.179092][T19503] RSP: 002b:00007f9811df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 686.179107][T19503] RAX: ffffffffffffffda RBX: 00007f9813e15fa0 RCX: 00007f9813b9c799 [ 686.179118][T19503] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 686.179127][T19503] RBP: 00007f9813c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 686.179136][T19503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 686.179144][T19503] R13: 00007f9813e16038 R14: 00007f9813e15fa0 R15: 00007ffc34c013a8 [ 686.179163][T19503] [ 687.651879][T19525] netlink: 186 bytes leftover after parsing attributes in process `syz.0.4754'. [ 687.691842][T19525] netlink: 186 bytes leftover after parsing attributes in process `syz.0.4754'. [ 689.141742][T19559] random: crng reseeded on system resumption [ 689.378468][T19567] Invalid ELF header magic: != ELF [ 691.211136][T19597] netlink: 266 bytes leftover after parsing attributes in process `syz.0.4779'. [ 693.122975][ C0] vcan0: j1939_tp_rxtimer: 0xffff888038fd9000: rx timeout, send abort [ 693.131370][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880607bd800: rx timeout, send abort [ 693.140518][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888038fd9000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 693.154913][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880607bd800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 694.930446][T19649] zswap: compressor not available [ 695.659521][ T5833] Bluetooth: hci1: unexpected event 0x08 length: 435 > 4 [ 696.876655][T19690] usb usb24: usbfs: process 19690 (syz.2.4808) did not claim interface 0 before use [ 697.772556][T19710] FAULT_INJECTION: forcing a failure. [ 697.772556][T19710] name failslab, interval 1, probability 0, space 0, times 0 [ 697.882376][T19710] CPU: 0 UID: 0 PID: 19710 Comm: syz.1.4818 Tainted: G L syzkaller #0 PREEMPT(full) [ 697.882404][T19710] Tainted: [L]=SOFTLOCKUP [ 697.882409][T19710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 697.882419][T19710] Call Trace: [ 697.882425][T19710] [ 697.882432][T19710] dump_stack_lvl+0x100/0x190 [ 697.882461][T19710] should_fail_ex.cold+0x5/0xa [ 697.882480][T19710] ? ima_alloc_init_template+0x19d/0x6d0 [ 697.882496][T19710] should_failslab+0xc2/0x120 [ 697.882512][T19710] __kmalloc_noprof+0xe0/0x850 [ 697.882535][T19710] ? take_dentry_name_snapshot+0x30b/0x7c0 [ 697.882558][T19710] ima_alloc_init_template+0x19d/0x6d0 [ 697.882574][T19710] ? take_dentry_name_snapshot+0x310/0x7c0 [ 697.882597][T19710] ima_store_measurement+0x1e3/0x5b0 [ 697.882614][T19710] ? __pfx_ima_store_measurement+0x10/0x10 [ 697.882638][T19710] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 697.882663][T19710] process_measurement+0x19cc/0x2350 [ 697.882691][T19710] ? stack_trace_save+0x8e/0xc0 [ 697.882707][T19710] ? __pfx_process_measurement+0x10/0x10 [ 697.882730][T19710] ? __lock_acquire+0x4a5/0x2630 [ 697.882749][T19710] ? __kasan_slab_alloc+0x89/0x90 [ 697.882762][T19710] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 697.882784][T19710] ? init_file+0x95/0x480 [ 697.882799][T19710] ? alloc_empty_file+0x73/0x1c0 [ 697.882816][T19710] ? alloc_file_pseudo+0x13a/0x230 [ 697.882833][T19710] ? ksys_mmap_pgoff+0x232/0x650 [ 697.882847][T19710] ? __x64_sys_mmap+0x125/0x190 [ 697.882868][T19710] ? do_syscall_64+0x106/0xf80 [ 697.882906][T19710] ? __pfx_aa_file_perm+0x10/0x10 [ 697.882931][T19710] ima_file_mmap+0x1c4/0x1f0 [ 697.882953][T19710] ? __pfx_ima_file_mmap+0x10/0x10 [ 697.882982][T19710] security_mmap_file+0x278/0x9b0 [ 697.883001][T19710] vm_mmap_pgoff+0xec/0x470 [ 697.883021][T19710] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 697.883039][T19710] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 697.883059][T19710] ? hugetlbfs_get_inode+0x36e/0x750 [ 697.883082][T19710] ksys_mmap_pgoff+0x273/0x650 [ 697.883099][T19710] ? __x64_sys_futex+0x358/0x4d0 [ 697.883119][T19710] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 697.883135][T19710] ? xfd_validate_state+0x129/0x190 [ 697.883161][T19710] __x64_sys_mmap+0x125/0x190 [ 697.883184][T19710] do_syscall_64+0x106/0xf80 [ 697.883203][T19710] ? clear_bhb_loop+0x40/0x90 [ 697.883222][T19710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.883237][T19710] RIP: 0033:0x7f6408d9c799 [ 697.883252][T19710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.883266][T19710] RSP: 002b:00007f6409cff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 697.883281][T19710] RAX: ffffffffffffffda RBX: 00007f6409016180 RCX: 00007f6408d9c799 [ 697.883292][T19710] RDX: 0000000000009c0f RSI: 000000000000000c RDI: 0000000000000000 [ 697.883301][T19710] RBP: 00007f6408e32c99 R08: ffffffffffffffff R09: 0000300000020000 [ 697.883312][T19710] R10: 0000000000044eb2 R11: 0000000000000246 R12: 0000000000000000 [ 697.883322][T19710] R13: 00007f6409016218 R14: 00007f6409016180 R15: 00007ffc06e2c548 [ 697.883349][T19710] [ 699.003879][T19715] pim6reg: entered allmulticast mode [ 699.056913][ T29] audit: type=1804 audit(1773395547.206:21): pid=19710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.1.4818" name="anon_hugepage" dev="hugetlbfs" ino=86454 res=0 errno=0 [ 699.795908][T19732] zswap: compressor not available [ 700.238322][T19743] usb usb24: usbfs: process 19743 (syz.1.4819) did not claim interface 0 before use [ 703.756853][T19801] usb usb24: usbfs: process 19801 (syz.0.4833) did not claim interface 0 before use [ 703.933815][T19798] zswap: compressor not available [ 705.084807][T19820] FAULT_INJECTION: forcing a failure. [ 705.084807][T19820] name failslab, interval 1, probability 0, space 0, times 0 [ 705.200764][T19820] CPU: 0 UID: 0 PID: 19820 Comm: syz.0.4846 Tainted: G L syzkaller #0 PREEMPT(full) [ 705.200793][T19820] Tainted: [L]=SOFTLOCKUP [ 705.200798][T19820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 705.200809][T19820] Call Trace: [ 705.200814][T19820] [ 705.200820][T19820] dump_stack_lvl+0x100/0x190 [ 705.200849][T19820] should_fail_ex.cold+0x5/0xa [ 705.200869][T19820] should_failslab+0xc2/0x120 [ 705.200886][T19820] __kmalloc_cache_noprof+0x7a/0x6f0 [ 705.200906][T19820] ? madvise_collapse+0x1b5/0xbe0 [ 705.200935][T19820] madvise_collapse+0x1b5/0xbe0 [ 705.200958][T19820] ? find_held_lock+0x2b/0x80 [ 705.200972][T19820] ? finish_task_switch.isra.0+0x200/0xb80 [ 705.200990][T19820] ? __pfx_madvise_collapse+0x10/0x10 [ 705.201009][T19820] ? __pfx_rcu_is_watching+0x1/0x10 [ 705.201038][T19820] madvise_vma_behavior+0x1987/0x3050 [ 705.201060][T19820] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 705.201077][T19820] ? mas_prev_setup.constprop.0+0xb6/0x9c0 [ 705.201101][T19820] ? mas_prev+0x9b/0xf0 [ 705.201122][T19820] ? __pfx_mas_prev+0x10/0x10 [ 705.201148][T19820] ? find_vma_prev+0xd8/0x150 [ 705.201164][T19820] ? futex_unqueue+0x133/0x2c0 [ 705.201182][T19820] ? __pfx_find_vma_prev+0x10/0x10 [ 705.201203][T19820] ? __futex_wait+0x256/0x300 [ 705.201228][T19820] madvise_walk_vmas+0x2fe/0xa90 [ 705.201249][T19820] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 705.201272][T19820] madvise_do_behavior+0x1ea/0x510 [ 705.201291][T19820] ? __pfx_madvise_do_behavior+0x10/0x10 [ 705.201310][T19820] ? down_read+0x13b/0x460 [ 705.201341][T19820] do_madvise+0x195/0x240 [ 705.201358][T19820] ? __pfx_do_madvise+0x10/0x10 [ 705.201375][T19820] ? do_futex+0x192/0x350 [ 705.201406][T19820] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 705.201428][T19820] __x64_sys_madvise+0xa9/0x110 [ 705.201445][T19820] ? lockdep_hardirqs_on+0x78/0x100 [ 705.201465][T19820] do_syscall_64+0x106/0xf80 [ 705.201484][T19820] ? clear_bhb_loop+0x40/0x90 [ 705.201503][T19820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.201518][T19820] RIP: 0033:0x7f9813b9c799 [ 705.201533][T19820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 705.201548][T19820] RSP: 002b:00007f9811df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 705.201564][T19820] RAX: ffffffffffffffda RBX: 00007f9813e15fa0 RCX: 00007f9813b9c799 [ 705.201575][T19820] RDX: 0000000000000019 RSI: ffffffffffff0005 RDI: 0000000000000000 [ 705.201585][T19820] RBP: 00007f9813c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 705.201594][T19820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 705.201604][T19820] R13: 00007f9813e16038 R14: 00007f9813e15fa0 R15: 00007ffc34c013a8 [ 705.201624][T19820] [ 706.076455][T19834] FAULT_INJECTION: forcing a failure. [ 706.076455][T19834] name failslab, interval 1, probability 0, space 0, times 0 [ 706.129512][T19834] CPU: 0 UID: 0 PID: 19834 Comm: syz.4.4843 Tainted: G L syzkaller #0 PREEMPT(full) [ 706.129542][T19834] Tainted: [L]=SOFTLOCKUP [ 706.129548][T19834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 706.129558][T19834] Call Trace: [ 706.129564][T19834] [ 706.129571][T19834] dump_stack_lvl+0x100/0x190 [ 706.129600][T19834] should_fail_ex.cold+0x5/0xa [ 706.129619][T19834] ? kobject_get_path+0xcf/0x2c0 [ 706.129641][T19834] should_failslab+0xc2/0x120 [ 706.129657][T19834] __kmalloc_noprof+0xe0/0x850 [ 706.129686][T19834] kobject_get_path+0xcf/0x2c0 [ 706.129711][T19834] kobject_uevent_env+0x287/0x18b0 [ 706.129730][T19834] ? kernfs_remove_by_name_ns+0x9f/0xf0 [ 706.129749][T19834] __kobject_del+0x168/0x220 [ 706.129772][T19834] kobject_put+0x348/0x640 [ 706.129795][T19834] netdev_queue_update_kobjects+0x4e5/0x6f0 [ 706.129826][T19834] netdev_unregister_kobject+0x168/0x540 [ 706.129849][T19834] ? rtmsg_ifinfo_send+0xcc/0x110 [ 706.129874][T19834] unregister_netdevice_many_notify+0x1817/0x2580 [ 706.129904][T19834] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 706.129936][T19834] unregister_netdevice_queue+0x30b/0x3c0 [ 706.129959][T19834] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 706.129981][T19834] ? __pfx_locks_remove_file+0x10/0x10 [ 706.130002][T19834] ppp_release+0x211/0x230 [ 706.130021][T19834] ? __pfx_ppp_release+0x10/0x10 [ 706.130038][T19834] __fput+0x3ff/0xb40 [ 706.130060][T19834] task_work_run+0x150/0x240 [ 706.130082][T19834] ? __pfx_task_work_run+0x10/0x10 [ 706.130108][T19834] exit_to_user_mode_loop+0x100/0x4a0 [ 706.130130][T19834] do_syscall_64+0x668/0xf80 [ 706.130149][T19834] ? clear_bhb_loop+0x40/0x90 [ 706.130168][T19834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.130184][T19834] RIP: 0033:0x7fe3eb39c799 [ 706.130198][T19834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 706.130213][T19834] RSP: 002b:00007fe3ec177028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 706.130228][T19834] RAX: 0000000000000000 RBX: 00007fe3eb615fa0 RCX: 00007fe3eb39c799 [ 706.130238][T19834] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 706.130248][T19834] RBP: 00007fe3eb432c99 R08: 0000000000000000 R09: 0000000000000000 [ 706.130258][T19834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 706.130267][T19834] R13: 00007fe3eb616038 R14: 00007fe3eb615fa0 R15: 00007fffdc464778 [ 706.130288][T19834] [ 707.953169][T19850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4856'. [ 707.990522][T19850] netlink: 25 bytes leftover after parsing attributes in process `syz.0.4856'. [ 708.464017][T19865] netlink: 'syz.0.4853': attribute type 1 has an invalid length. [ 708.471773][T19865] netlink: 'syz.0.4853': attribute type 6 has an invalid length. [ 708.676512][T19867] netlink: 138 bytes leftover after parsing attributes in process `syz.4.4855'. [ 708.697384][T19870] random: crng reseeded on system resumption [ 708.761608][T19870] Restarting kernel threads ... [ 708.784471][T19870] Done restarting kernel threads. [ 708.854000][T19870] sp0: Synchronizing with TNC [ 709.077098][T19883] netlink: 266 bytes leftover after parsing attributes in process `syz.1.4862'. [ 709.125372][T19883] IPv6: NLM_F_CREATE should be specified when creating new route [ 710.012902][T19904] sp0: Synchronizing with TNC [ 710.262840][T19915] netlink: 74 bytes leftover after parsing attributes in process `syz.2.4872'. [ 710.443885][T19912] random: crng reseeded on system resumption [ 710.487869][T19922] netlink: 202 bytes leftover after parsing attributes in process `syz.4.4876'. [ 710.599495][T19924] usb usb24: usbfs: process 19924 (syz.1.4877) did not claim interface 0 before use [ 711.192527][T19942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4881'. [ 711.260276][T19942] netlink: 354 bytes leftover after parsing attributes in process `syz.1.4881'. [ 711.273415][T19945] netlink: 'syz.0.4882': attribute type 21 has an invalid length. [ 711.312435][T19945] netlink: 326 bytes leftover after parsing attributes in process `syz.0.4882'. [ 711.536619][T19948] FAULT_INJECTION: forcing a failure. [ 711.536619][T19948] name failslab, interval 1, probability 0, space 0, times 0 [ 711.604051][T19948] CPU: 0 UID: 0 PID: 19948 Comm: syz.0.4891 Tainted: G L syzkaller #0 PREEMPT(full) [ 711.604080][T19948] Tainted: [L]=SOFTLOCKUP [ 711.604087][T19948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 711.604097][T19948] Call Trace: [ 711.604103][T19948] [ 711.604109][T19948] dump_stack_lvl+0x100/0x190 [ 711.604137][T19948] should_fail_ex.cold+0x5/0xa [ 711.604156][T19948] should_failslab+0xc2/0x120 [ 711.604172][T19948] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 711.604194][T19948] ? security_inode_alloc+0x3b/0x2c0 [ 711.604211][T19948] ? lockdep_init_map_type+0x5c/0x250 [ 711.604233][T19948] security_inode_alloc+0x3b/0x2c0 [ 711.604248][T19948] inode_init_always_gfp+0xced/0x1040 [ 711.604268][T19948] ? __pfx_nfsd_fill_super+0x10/0x10 [ 711.604340][T19948] alloc_inode+0x8e/0x250 [ 711.604361][T19948] new_inode+0x22/0x1c0 [ 711.604388][T19948] ? __pfx_nfsd_fill_super+0x10/0x10 [ 711.604406][T19948] nfsd_fill_super+0x145/0x560 [ 711.604425][T19948] ? __pfx_nfsd_fill_super+0x10/0x10 [ 711.604442][T19948] get_tree_keyed+0x10e/0x1d0 [ 711.604467][T19948] vfs_get_tree+0x92/0x320 [ 711.604489][T19948] path_mount+0x7d0/0x23d0 [ 711.604509][T19948] ? __pfx_path_mount+0x10/0x10 [ 711.604525][T19948] ? lockdep_hardirqs_on+0x78/0x100 [ 711.604548][T19948] ? putname+0xb1/0x110 [ 711.604562][T19948] ? kmem_cache_free+0x124/0x6a0 [ 711.604589][T19948] ? __x64_sys_mount+0x293/0x310 [ 711.604605][T19948] __x64_sys_mount+0x293/0x310 [ 711.604623][T19948] ? __pfx___x64_sys_mount+0x10/0x10 [ 711.604646][T19948] do_syscall_64+0x106/0xf80 [ 711.604665][T19948] ? clear_bhb_loop+0x40/0x90 [ 711.604684][T19948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.604699][T19948] RIP: 0033:0x7f9813b9c799 [ 711.604713][T19948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 711.604728][T19948] RSP: 002b:00007f9811df6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 711.604743][T19948] RAX: ffffffffffffffda RBX: 00007f9813e15fa0 RCX: 00007f9813b9c799 [ 711.604754][T19948] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 711.604763][T19948] RBP: 00007f9813c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 711.604772][T19948] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 711.604782][T19948] R13: 00007f9813e16038 R14: 00007f9813e15fa0 R15: 00007ffc34c013a8 [ 711.604810][T19948] [ 712.091118][T19968] [U] [ 712.093840][T19968] [U] [ 712.096520][T19968] [U] [ 712.099190][T19968] [U] [ 712.102030][T19968] [U] [ 712.104706][T19968] [U] [ 712.107378][T19968] [U] [ 712.110050][T19968] [U] [ 712.113642][T19968] [U] [ 712.116349][T19968] [U] [ 712.119038][T19968] [U] [ 712.121718][T19968] [U] [ 712.129547][T19968] [U] [ 712.132276][T19968] [U] [ 712.134972][T19968] [U] [ 712.137668][T19968] [U] [ 712.170149][T19968] [U] [ 712.172869][T19968] [U] [ 712.175546][T19968] [U] [ 712.178219][T19968] [U] [ 712.207902][T19968] [U] [ 712.210648][T19968] [U] [ 712.213326][T19968] [U] [ 712.215997][T19968] [U] [ 712.234589][T19968] [U] [ 712.237305][T19968] [U] [ 712.240006][T19968] [U] [ 712.242678][T19968] [U] [ 712.264066][T19968] [U] [ 712.266784][T19968] [U] [ 712.269459][T19968] [U] [ 712.272240][T19968] [U] [ 712.286735][T19968] [U] [ 712.289451][T19968] [U] [ 712.292155][T19968] [U] [ 712.294831][T19968] [U] [ 712.313782][T19968] [U] [ 712.316502][T19968] [U] [ 712.319207][T19968] [U] [ 712.321879][T19968] [U] [ 712.333807][T19968] [U] [ 712.336669][T19968] [U] [ 712.339351][T19968] [U] [ 712.342040][T19968] [U] [ 712.357473][T19968] [U] [ 712.360191][T19968] [U] [ 712.362878][T19968] [U] [ 712.365561][T19968] [U] [ 712.399848][T19968] [U] [ 712.402578][T19968] [U] [ 712.405255][T19968] [U] [ 712.407927][T19968] [U] [ 712.433818][T19968] [U] [ 712.436530][T19968] [U] [ 712.439202][T19968] [U] [ 712.441873][T19968] [U] [ 712.465407][T19968] [U] [ 712.468128][T19968] [U] [ 712.470804][T19968] [U] [ 712.473477][T19968] [U] [ 712.504206][T19968] [U] [ 712.506942][T19968] [U] [ 712.509618][T19968] [U] [ 712.512291][T19968] [U] [ 712.541579][T19968] [U] [ 712.544297][T19968] [U] [ 712.546994][T19968] [U] [ 712.549664][T19968] [U] [ 712.585704][T19968] [U] [ 712.588436][T19968] [U] [ 712.591118][T19968] [U] [ 712.593792][T19968] [U] [ 712.617527][T19968] [U] [ 712.620243][T19968] [U] [ 712.622928][T19968] [U] [ 712.625601][T19968] [U] [ 712.653801][T19968] [U] [ 712.656517][T19968] [U] [ 712.659193][T19968] [U] [ 712.661865][T19968] [U] [ 712.695768][T19968] [U] [ 712.698519][T19968] [U] [ 712.701195][T19968] [U] [ 712.703864][T19968] [U] [ 712.725947][T19968] [U] [ 712.728666][T19968] [U] [ 712.731371][T19968] [U] [ 712.734045][T19968] [U] [ 712.759167][T19968] [U] [ 712.761883][T19968] [U] [ 712.764566][T19968] [U] [ 712.767240][T19968] [U] [ 712.797575][T19968] [U] [ 712.800319][T19968] [U] [ 712.802998][T19968] [U] [ 712.805667][T19968] [U] [ 712.835884][T19968] [U] [ 712.838600][T19968] [U] [ 712.841273][T19968] [U] [ 712.843968][T19968] [U] [ 712.909731][T19968] [U] [ 712.912452][T19968] [U] [ 712.915130][T19968] [U] [ 712.917801][T19968] [U] [ 712.992157][T19968] [U] [ 713.050376][T19980] usb usb24: usbfs: process 19980 (syz.2.4890) did not claim interface 0 before use [ 713.499854][T19994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4896'. [ 713.554735][T19994] netlink: 13 bytes leftover after parsing attributes in process `syz.4.4896'. [ 713.750168][T20002] FAULT_INJECTION: forcing a failure. [ 713.750168][T20002] name failslab, interval 1, probability 0, space 0, times 0 [ 713.889902][T20002] CPU: 0 UID: 0 PID: 20002 Comm: syz.1.4897 Tainted: G L syzkaller #0 PREEMPT(full) [ 713.889931][T20002] Tainted: [L]=SOFTLOCKUP [ 713.889937][T20002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 713.889947][T20002] Call Trace: [ 713.889953][T20002] [ 713.889959][T20002] dump_stack_lvl+0x100/0x190 [ 713.889988][T20002] should_fail_ex.cold+0x5/0xa [ 713.890008][T20002] should_failslab+0xc2/0x120 [ 713.890025][T20002] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 713.890047][T20002] ? security_inode_alloc+0x3b/0x2c0 [ 713.890064][T20002] ? lockdep_init_map_type+0x5c/0x250 [ 713.890088][T20002] security_inode_alloc+0x3b/0x2c0 [ 713.890103][T20002] inode_init_always_gfp+0xced/0x1040 [ 713.890122][T20002] ? __pfx_nfsd_fill_super+0x10/0x10 [ 713.890139][T20002] alloc_inode+0x8e/0x250 [ 713.890159][T20002] new_inode+0x22/0x1c0 [ 713.890178][T20002] ? __pfx_nfsd_fill_super+0x10/0x10 [ 713.890194][T20002] nfsd_fill_super+0x145/0x560 [ 713.890213][T20002] ? __pfx_nfsd_fill_super+0x10/0x10 [ 713.890229][T20002] get_tree_keyed+0x10e/0x1d0 [ 713.890252][T20002] vfs_get_tree+0x92/0x320 [ 713.890283][T20002] path_mount+0x7d0/0x23d0 [ 713.890305][T20002] ? __pfx_path_mount+0x10/0x10 [ 713.890322][T20002] ? lockdep_hardirqs_on+0x78/0x100 [ 713.890346][T20002] ? putname+0xb1/0x110 [ 713.890360][T20002] ? kmem_cache_free+0x124/0x6a0 [ 713.890386][T20002] ? __x64_sys_mount+0x293/0x310 [ 713.890402][T20002] __x64_sys_mount+0x293/0x310 [ 713.890420][T20002] ? __pfx___x64_sys_mount+0x10/0x10 [ 713.890443][T20002] do_syscall_64+0x106/0xf80 [ 713.890462][T20002] ? clear_bhb_loop+0x40/0x90 [ 713.890481][T20002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.890497][T20002] RIP: 0033:0x7f6408d9c799 [ 713.890511][T20002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 713.890526][T20002] RSP: 002b:00007f6409d41028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 713.890541][T20002] RAX: ffffffffffffffda RBX: 00007f6409015fa0 RCX: 00007f6408d9c799 [ 713.890551][T20002] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 713.890561][T20002] RBP: 00007f6408e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 713.890570][T20002] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 713.890580][T20002] R13: 00007f6409016038 R14: 00007f6409015fa0 R15: 00007ffc06e2c548 [ 713.890601][T20002] [ 716.765174][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025b83400: rx timeout, send abort [ 716.773509][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807876dc00: rx timeout, send abort [ 716.782265][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888025b83400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 716.796733][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807876dc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 718.872767][T20094] FAULT_INJECTION: forcing a failure. [ 718.872767][T20094] name failslab, interval 1, probability 0, space 0, times 0 [ 718.965753][T20094] CPU: 0 UID: 8 PID: 20094 Comm: syz.0.4928 Tainted: G L syzkaller #0 PREEMPT(full) [ 718.965782][T20094] Tainted: [L]=SOFTLOCKUP [ 718.965788][T20094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 718.965798][T20094] Call Trace: [ 718.965804][T20094] [ 718.965811][T20094] dump_stack_lvl+0x100/0x190 [ 718.965840][T20094] should_fail_ex.cold+0x5/0xa [ 718.965859][T20094] should_failslab+0xc2/0x120 [ 718.965876][T20094] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 718.965901][T20094] ? key_alloc+0x423/0x1310 [ 718.965920][T20094] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 718.965953][T20094] kmemdup_noprof+0x29/0x60 [ 718.965978][T20094] key_alloc+0x423/0x1310 [ 718.966003][T20094] ? __pfx_key_alloc+0x10/0x10 [ 718.966020][T20094] ? __pfx_key_default_cmp+0x10/0x10 [ 718.966044][T20094] ? __pfx_keyring_search_iterator+0x10/0x10 [ 718.966066][T20094] keyring_alloc+0x44/0xc0 [ 718.966087][T20094] look_up_user_keyrings+0x465/0x790 [ 718.966107][T20094] ? __pfx_look_up_user_keyrings+0x10/0x10 [ 718.966122][T20094] ? futex_wait+0x125/0x380 [ 718.966145][T20094] ? __pfx_futex_wait+0x10/0x10 [ 718.966170][T20094] lookup_user_key+0xbb1/0x1300 [ 718.966188][T20094] ? __pfx_lookup_user_key+0x10/0x10 [ 718.966210][T20094] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 718.966229][T20094] ? __x64_sys_futex+0x34f/0x4d0 [ 718.966246][T20094] ? __x64_sys_futex+0x358/0x4d0 [ 718.966269][T20094] keyctl_session_to_parent+0x28/0xae0 [ 718.966287][T20094] __do_sys_keyctl+0x2b1/0x5a0 [ 718.966303][T20094] do_syscall_64+0x106/0xf80 [ 718.966323][T20094] ? clear_bhb_loop+0x40/0x90 [ 718.966342][T20094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.966358][T20094] RIP: 0033:0x7f9813b9c799 [ 718.966372][T20094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 718.966387][T20094] RSP: 002b:00007f9811df6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 718.966402][T20094] RAX: ffffffffffffffda RBX: 00007f9813e15fa0 RCX: 00007f9813b9c799 [ 718.966412][T20094] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000012 [ 718.966422][T20094] RBP: 00007f9813c32c99 R08: 0000000000000001 R09: 0000000000000000 [ 718.966432][T20094] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 718.966441][T20094] R13: 00007f9813e16038 R14: 00007f9813e15fa0 R15: 00007ffc34c013a8 [ 718.966462][T20094] [ 720.196355][T20115] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4936'. [ 720.231361][T20115] netlink: 302 bytes leftover after parsing attributes in process `syz.0.4936'. [ 724.225210][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880232a1400: rx timeout, send abort [ 724.233715][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880232a1800: rx timeout, send abort [ 724.242056][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880232a1400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 724.256785][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880232a1800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 724.444050][T20194] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4965'. [ 724.521295][T20194] veth1_vlan: entered allmulticast mode [ 724.996830][T20205] netlink: 306 bytes leftover after parsing attributes in process `syz.4.4970'. [ 725.430151][T20221] netlink: 'syz.2.4977': attribute type 21 has an invalid length. [ 725.473883][T20221] netlink: 326 bytes leftover after parsing attributes in process `syz.2.4977'. [ 726.104961][T20240] netlink: 18 bytes leftover after parsing attributes in process `syz.2.4984'. [ 728.968557][T20294] netlink: 342 bytes leftover after parsing attributes in process `syz.0.5003'. [ 729.043186][T20294] netlink: 302 bytes leftover after parsing attributes in process `syz.0.5003'. [ 730.773284][T20349] netlink: 252 bytes leftover after parsing attributes in process `syz.0.5019'. [ 730.845539][T20349] netlink: 252 bytes leftover after parsing attributes in process `syz.0.5019'. [ 731.276754][ T5833] Bluetooth: hci1: unexpected event 0x09 length: 435 > 3 [ 731.288920][T20359] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5021'. [ 731.387794][T20359] veth1_vlan: entered allmulticast mode [ 731.645028][T20365] [U] [ 731.647744][T20365] [U] [ 731.650439][T20365] [U] [ 731.653119][T20365] [U] [ 731.689652][T20365] [U] [ 731.692415][T20365] [U] [ 731.695091][T20365] [U] [ 731.697762][T20365] [U] [ 731.753774][T20365] [U] [ 731.756494][T20365] [U] [ 731.759170][T20365] [U] [ 731.761862][T20365] [U] [ 731.804023][T20365] [U] [ 731.806737][T20365] [U] [ 731.809415][T20365] [U] [ 731.812109][T20365] [U] [ 731.863281][T20365] [U] [ 731.866024][T20365] [U] [ 731.868706][T20365] [U] [ 731.871383][T20365] [U] [ 731.908994][T20365] [U] [ 731.911752][T20365] [U] [ 731.914431][T20365] [U] [ 731.917106][T20365] [U] [ 731.930970][T20376] netlink: 'syz.4.5027': attribute type 33 has an invalid length. [ 731.949675][T20365] [U] [ 731.952397][T20365] [U] [ 731.955110][T20365] [U] [ 731.957818][T20365] [U] [ 731.985443][T20365] [U] [ 731.988159][T20365] [U] [ 731.990838][T20365] [U] [ 731.993512][T20365] [U] [ 732.025365][T20365] [U] [ 732.028105][T20365] [U] [ 732.030785][T20365] [U] [ 732.033456][T20365] [U] [ 732.060837][T20365] [U] [ 732.063563][T20365] [U] [ 732.066244][T20365] [U] [ 732.068920][T20365] [U] [ 732.099694][T20365] [U] [ 732.102414][T20365] [U] [ 732.105114][T20365] [U] [ 732.107808][T20365] [U] [ 732.139807][T20365] [U] [ 732.142524][T20365] [U] [ 732.145231][T20365] [U] [ 732.147907][T20365] [U] [ 732.179462][T20365] [U] [ 732.182186][T20365] [U] [ 732.184888][T20365] [U] [ 732.187562][T20365] [U] [ 732.193514][T20381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5029'. [ 732.214295][T20381] netlink: 13 bytes leftover after parsing attributes in process `syz.4.5029'. [ 732.226111][T20365] [U] [ 732.228817][T20365] [U] [ 732.231497][T20365] [U] [ 732.234183][T20365] [U] [ 732.251506][T20365] [U] [ 732.254249][T20365] [U] [ 732.256926][T20365] [U] [ 732.259598][T20365] [U] [ 732.290427][T20365] [U] [ 732.293167][T20365] [U] [ 732.295872][T20365] [U] [ 732.298547][T20365] [U] [ 732.329851][T20365] [U] [ 732.332603][T20365] [U] [ 732.335302][T20365] [U] [ 732.338007][T20365] [U] [ 732.363375][T20365] [U] [ 732.366083][T20365] [U] [ 732.368760][T20365] [U] [ 732.371432][T20365] [U] [ 732.388495][T20365] [U] [ 732.391236][T20365] [U] [ 732.393915][T20365] [U] [ 732.396588][T20365] [U] [ 732.452549][T20365] [U] [ 732.455289][T20365] [U] [ 732.457965][T20365] [U] [ 732.460643][T20365] [U] [ 732.502361][T20365] [U] [ 732.505079][T20365] [U] [ 732.507755][T20365] [U] [ 732.510431][T20365] [U] [ 732.541834][T20365] [U] [ 733.297593][T20407] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5038'. [ 733.685681][T20414] bond0: no command found in slaves file - use +ifname or -ifname [ 736.819367][T20489] netlink: 'syz.4.5063': attribute type 33 has an invalid length. [ 736.890852][T20489] netlink: 322 bytes leftover after parsing attributes in process `syz.4.5063'. [ 737.714613][T20506] netlink: 330 bytes leftover after parsing attributes in process `syz.1.5071'. [ 738.205861][T20521] random: crng reseeded on system resumption [ 740.026184][T20562] FAULT_INJECTION: forcing a failure. [ 740.026184][T20562] name failslab, interval 1, probability 0, space 0, times 0 [ 740.049531][T20563] netlink: zone id is out of range [ 740.118458][T20562] CPU: 0 UID: 0 PID: 20562 Comm: syz.1.5091 Tainted: G L syzkaller #0 PREEMPT(full) [ 740.118487][T20562] Tainted: [L]=SOFTLOCKUP [ 740.118493][T20562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 740.118503][T20562] Call Trace: [ 740.118509][T20562] [ 740.118516][T20562] dump_stack_lvl+0x100/0x190 [ 740.118548][T20562] should_fail_ex.cold+0x5/0xa [ 740.118568][T20562] should_failslab+0xc2/0x120 [ 740.118586][T20562] __kmalloc_cache_noprof+0x7a/0x6f0 [ 740.118606][T20562] ? cec_open+0xdb/0x690 [ 740.118703][T20562] ? __lock_acquire+0x4a5/0x2630 [ 740.118726][T20562] cec_open+0xdb/0x690 [ 740.118747][T20562] ? __pfx_cec_open+0x10/0x10 [ 740.118769][T20562] ? kobject_get_unless_zero+0x156/0x200 [ 740.118794][T20562] ? find_held_lock+0x2b/0x80 [ 740.118807][T20562] ? chrdev_open+0x10b/0x6a0 [ 740.118822][T20562] ? chrdev_open+0x10b/0x6a0 [ 740.118840][T20562] ? __pfx_cec_open+0x10/0x10 [ 740.118864][T20562] chrdev_open+0x234/0x6a0 [ 740.118879][T20562] ? __pfx_apparmor_file_open+0x10/0x10 [ 740.118905][T20562] ? __pfx_chrdev_open+0x10/0x10 [ 740.118922][T20562] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 740.118947][T20562] do_dentry_open+0x6d8/0x1660 [ 740.118963][T20562] ? __pfx_chrdev_open+0x10/0x10 [ 740.118983][T20562] vfs_open+0x82/0x3f0 [ 740.119005][T20562] path_openat+0x208c/0x31a0 [ 740.119036][T20562] ? __pfx_path_openat+0x10/0x10 [ 740.119058][T20562] do_file_open+0x20e/0x430 [ 740.119075][T20562] ? __pfx_do_file_open+0x10/0x10 [ 740.119104][T20562] ? alloc_fd+0x476/0x790 [ 740.119121][T20562] ? do_getname+0x191/0x390 [ 740.119141][T20562] do_sys_openat2+0x10d/0x1e0 [ 740.119160][T20562] ? __pfx_do_sys_openat2+0x10/0x10 [ 740.119180][T20562] ? __fget_files+0x21f/0x3d0 [ 740.119198][T20562] __x64_sys_openat+0x12d/0x210 [ 740.119217][T20562] ? __pfx___x64_sys_openat+0x10/0x10 [ 740.119244][T20562] do_syscall_64+0x106/0xf80 [ 740.119264][T20562] ? clear_bhb_loop+0x40/0x90 [ 740.119283][T20562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.119299][T20562] RIP: 0033:0x7f6408d9c799 [ 740.119313][T20562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 740.119328][T20562] RSP: 002b:00007f6409d41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 740.119352][T20562] RAX: ffffffffffffffda RBX: 00007f6409015fa0 RCX: 00007f6408d9c799 [ 740.119369][T20562] RDX: 0000000000101901 RSI: 0000200000002c00 RDI: ffffffffffffff9c [ 740.119379][T20562] RBP: 00007f6408e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 740.119389][T20562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 740.119399][T20562] R13: 00007f6409016038 R14: 00007f6409015fa0 R15: 00007ffc06e2c548 [ 740.119420][T20562] [ 740.884905][T20566] mkiss: ax0: crc mode is auto. [ 743.219871][T20602] FAULT_INJECTION: forcing a failure. [ 743.219871][T20602] name failslab, interval 1, probability 0, space 0, times 0 [ 743.309602][T20602] CPU: 0 UID: 0 PID: 20602 Comm: syz.0.5112 Tainted: G L syzkaller #0 PREEMPT(full) [ 743.309631][T20602] Tainted: [L]=SOFTLOCKUP [ 743.309638][T20602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 743.309648][T20602] Call Trace: [ 743.309654][T20602] [ 743.309660][T20602] dump_stack_lvl+0x100/0x190 [ 743.309689][T20602] should_fail_ex.cold+0x5/0xa [ 743.309709][T20602] should_failslab+0xc2/0x120 [ 743.309725][T20602] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 743.309748][T20602] ? __kernfs_new_node+0xd2/0x960 [ 743.309775][T20602] __kernfs_new_node+0xd2/0x960 [ 743.309797][T20602] ? __pfx___kernfs_new_node+0x10/0x10 [ 743.309822][T20602] ? find_held_lock+0x2b/0x80 [ 743.309837][T20602] ? kernfs_root+0xee/0x2a0 [ 743.309856][T20602] ? kernfs_root+0xee/0x2a0 [ 743.309880][T20602] kernfs_new_node+0x11b/0x1a0 [ 743.309905][T20602] __kernfs_create_file+0x53/0x350 [ 743.309925][T20602] sysfs_add_file_mode_ns+0x207/0x3c0 [ 743.309949][T20602] internal_create_group+0x593/0xf40 [ 743.309976][T20602] ? __pfx_internal_create_group+0x10/0x10 [ 743.310000][T20602] ? kernfs_create_link+0x1bd/0x240 [ 743.310020][T20602] internal_create_groups+0x9d/0x150 [ 743.310043][T20602] device_add+0x71a/0x1950 [ 743.310139][T20602] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 743.310166][T20602] ? __pfx_device_add+0x10/0x10 [ 743.310184][T20602] ? lockdep_init_map_type+0x5c/0x250 [ 743.310205][T20602] ? __init_waitqueue_head+0xca/0x150 [ 743.310233][T20602] netdev_register_kobject+0x1a9/0x3d0 [ 743.310261][T20602] register_netdevice+0x12e0/0x2210 [ 743.310288][T20602] ? __pfx_register_netdevice+0x10/0x10 [ 743.310314][T20602] ? __pfx_loopback_net_init+0x10/0x10 [ 743.310369][T20602] register_netdev+0x34/0x50 [ 743.310390][T20602] loopback_net_init+0x7a/0x170 [ 743.310406][T20602] ? __pfx_loopback_net_init+0x10/0x10 [ 743.310421][T20602] ops_init+0x1e2/0x5f0 [ 743.310472][T20602] setup_net+0x118/0x3a0 [ 743.310495][T20602] ? __pfx_setup_net+0x10/0x10 [ 743.310516][T20602] ? lockdep_init_map_type+0x5c/0x250 [ 743.310536][T20602] ? mutex_init_lockep+0x110/0x150 [ 743.310559][T20602] copy_net_ns+0x46f/0x7c0 [ 743.310605][T20602] create_new_namespaces+0x3ea/0xac0 [ 743.310629][T20602] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 743.310648][T20602] ksys_unshare+0x473/0xad0 [ 743.310669][T20602] ? __pfx_ksys_unshare+0x10/0x10 [ 743.310695][T20602] __x64_sys_unshare+0x31/0x40 [ 743.310713][T20602] do_syscall_64+0x106/0xf80 [ 743.310733][T20602] ? clear_bhb_loop+0x40/0x90 [ 743.310753][T20602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.310769][T20602] RIP: 0033:0x7f9813b9c799 [ 743.310784][T20602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 743.310799][T20602] RSP: 002b:00007f9811df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 743.310815][T20602] RAX: ffffffffffffffda RBX: 00007f9813e15fa0 RCX: 00007f9813b9c799 [ 743.310825][T20602] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 743.310835][T20602] RBP: 00007f9813c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 743.310845][T20602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 743.310855][T20602] R13: 00007f9813e16038 R14: 00007f9813e15fa0 R15: 00007ffc34c013a8 [ 743.310875][T20602] [ 744.004383][T20606] bond0: no command found in slaves file - use +ifname or -ifname [ 745.902628][T20664] FAULT_INJECTION: forcing a failure. [ 745.902628][T20664] name failslab, interval 1, probability 0, space 0, times 0 [ 745.964388][T20664] CPU: 0 UID: 0 PID: 20664 Comm: syz.0.5129 Tainted: G L syzkaller #0 PREEMPT(full) [ 745.964417][T20664] Tainted: [L]=SOFTLOCKUP [ 745.964422][T20664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 745.964433][T20664] Call Trace: [ 745.964439][T20664] [ 745.964445][T20664] dump_stack_lvl+0x100/0x190 [ 745.964474][T20664] should_fail_ex.cold+0x5/0xa [ 745.964493][T20664] ? ops_init+0x77/0x5f0 [ 745.964513][T20664] should_failslab+0xc2/0x120 [ 745.964530][T20664] __kmalloc_noprof+0xe0/0x850 [ 745.964565][T20664] ops_init+0x77/0x5f0 [ 745.964589][T20664] setup_net+0x118/0x3a0 [ 745.964611][T20664] ? __pfx_setup_net+0x10/0x10 [ 745.964632][T20664] ? lockdep_init_map_type+0x5c/0x250 [ 745.964653][T20664] ? mutex_init_lockep+0x110/0x150 [ 745.964676][T20664] copy_net_ns+0x46f/0x7c0 [ 745.964701][T20664] create_new_namespaces+0x3ea/0xac0 [ 745.964721][T20664] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 745.964740][T20664] ksys_unshare+0x473/0xad0 [ 745.964760][T20664] ? __pfx_ksys_unshare+0x10/0x10 [ 745.964785][T20664] __x64_sys_unshare+0x31/0x40 [ 745.964803][T20664] do_syscall_64+0x106/0xf80 [ 745.964823][T20664] ? clear_bhb_loop+0x40/0x90 [ 745.964842][T20664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.964857][T20664] RIP: 0033:0x7f9813b9c799 [ 745.964871][T20664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 745.964886][T20664] RSP: 002b:00007f9811df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 745.964902][T20664] RAX: ffffffffffffffda RBX: 00007f9813e15fa0 RCX: 00007f9813b9c799 [ 745.964912][T20664] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 745.964921][T20664] RBP: 00007f9813c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 745.964931][T20664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 745.964946][T20664] R13: 00007f9813e16038 R14: 00007f9813e15fa0 R15: 00007ffc34c013a8 [ 745.964967][T20664] [ 746.369667][T20668] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5134'. [ 746.378872][T20668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 746.573516][T20668] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 747.348032][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.354466][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.291852][T20715] netlink: 'syz.2.5147': attribute type 33 has an invalid length. [ 748.320811][T20715] netlink: 322 bytes leftover after parsing attributes in process `syz.2.5147'. [ 749.854373][T20743] netlink: 330 bytes leftover after parsing attributes in process `syz.2.5156'. [ 750.225941][T20758] netlink: 338 bytes leftover after parsing attributes in process `syz.1.5161'. [ 750.289594][T20758] team_slave_0: entered allmulticast mode [ 751.335867][T20778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5170'. [ 751.764199][T20785] netlink: 330 bytes leftover after parsing attributes in process `syz.1.5173'. [ 751.813507][T20787] netlink: 338 bytes leftover after parsing attributes in process `syz.2.5175'. [ 751.863779][T20787] team_slave_0: entered allmulticast mode [ 751.907497][T20789] netlink: 'syz.4.5174': attribute type 27 has an invalid length. [ 751.982820][T20789] netlink: 146 bytes leftover after parsing attributes in process `syz.4.5174'. [ 752.142163][T20797] netlink: 'syz.1.5177': attribute type 1 has an invalid length. [ 752.223991][T20797] netlink: 'syz.1.5177': attribute type 6 has an invalid length. [ 753.159538][T20814] netlink: 338 bytes leftover after parsing attributes in process `syz.2.5184'. [ 753.412518][T20821] netlink: 330 bytes leftover after parsing attributes in process `syz.2.5185'. [ 753.710782][T20824] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5187'. [ 754.196338][T20835] netlink: 50 bytes leftover after parsing attributes in process `syz.2.5190'. [ 754.702155][T20838] netlink: 318 bytes leftover after parsing attributes in process `syz.1.5191'. [ 755.174000][T20851] netlink: 'syz.2.5195': attribute type 1 has an invalid length. [ 755.214906][T20851] netlink: 330 bytes leftover after parsing attributes in process `syz.2.5195'. [ 755.681750][T20861] FAULT_INJECTION: forcing a failure. [ 755.681750][T20861] name failslab, interval 1, probability 0, space 0, times 0 [ 755.800907][T20861] CPU: 0 UID: 0 PID: 20861 Comm: syz.0.5199 Tainted: G L syzkaller #0 PREEMPT(full) [ 755.800935][T20861] Tainted: [L]=SOFTLOCKUP [ 755.800941][T20861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 755.800952][T20861] Call Trace: [ 755.800958][T20861] [ 755.800965][T20861] dump_stack_lvl+0x100/0x190 [ 755.800993][T20861] should_fail_ex.cold+0x5/0xa [ 755.801012][T20861] should_failslab+0xc2/0x120 [ 755.801029][T20861] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 755.801051][T20861] ? security_inode_alloc+0x3b/0x2c0 [ 755.801066][T20861] ? lockdep_init_map_type+0x5c/0x250 [ 755.801089][T20861] security_inode_alloc+0x3b/0x2c0 [ 755.801106][T20861] inode_init_always_gfp+0xced/0x1040 [ 755.801124][T20861] alloc_inode+0x8e/0x250 [ 755.801144][T20861] sock_alloc+0x44/0x280 [ 755.801186][T20861] ? security_socket_create+0x7f/0x250 [ 755.801211][T20861] __sock_create+0xc2/0x860 [ 755.801231][T20861] __sys_socketpair+0x1e4/0x5b0 [ 755.801251][T20861] ? __pfx___sys_socketpair+0x10/0x10 [ 755.801267][T20861] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 755.801285][T20861] ? xfd_validate_state+0x129/0x190 [ 755.801311][T20861] __x64_sys_socketpair+0x96/0x100 [ 755.801328][T20861] ? lockdep_hardirqs_on+0x78/0x100 [ 755.801349][T20861] do_syscall_64+0x106/0xf80 [ 755.801369][T20861] ? clear_bhb_loop+0x40/0x90 [ 755.801388][T20861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.801405][T20861] RIP: 0033:0x7f9813b9c799 [ 755.801419][T20861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 755.801434][T20861] RSP: 002b:00007f9811df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 755.801449][T20861] RAX: ffffffffffffffda RBX: 00007f9813e15fa0 RCX: 00007f9813b9c799 [ 755.801459][T20861] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 755.801469][T20861] RBP: 00007f9813c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 755.801478][T20861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 755.801488][T20861] R13: 00007f9813e16038 R14: 00007f9813e15fa0 R15: 00007ffc34c013a8 [ 755.801508][T20861] [ 755.801533][T20861] socket: no more sockets [ 758.856256][T20900] netlink: 50 bytes leftover after parsing attributes in process `syz.4.5210'. [ 759.842559][T20910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5215'. [ 760.993253][T20936] netlink: 62 bytes leftover after parsing attributes in process `syz.0.5224'. [ 762.453863][T20962] sd 0:0:1:0: device reset [ 764.147493][T21007] raw_sendmsg: syz.0.5246 forgot to set AF_INET. Fix it! [ 764.552658][T21011] zswap: compressor not available [ 767.420640][T21063] zswap: compressor not available [ 768.530826][T21089] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5273'. [ 768.708896][T21089] team0 (unregistering): Port device team_slave_0 removed [ 768.759352][T21089] team0 (unregistering): Port device team_slave_1 removed [ 770.615510][T21081] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 772.044573][T21142] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5290'. [ 773.758227][T21164] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5297'. [ 776.101981][T21205] netlink: 54 bytes leftover after parsing attributes in process `syz.4.5312'. [ 777.565229][T21230] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5320'. [ 778.588870][T21252] FAULT_INJECTION: forcing a failure. [ 778.588870][T21252] name failslab, interval 1, probability 0, space 0, times 0 [ 778.682522][T21252] CPU: 0 UID: 0 PID: 21252 Comm: syz.1.5328 Tainted: G L syzkaller #0 PREEMPT(full) [ 778.682550][T21252] Tainted: [L]=SOFTLOCKUP [ 778.682560][T21252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 778.682571][T21252] Call Trace: [ 778.682577][T21252] [ 778.682584][T21252] dump_stack_lvl+0x100/0x190 [ 778.682612][T21252] should_fail_ex.cold+0x5/0xa [ 778.682632][T21252] should_failslab+0xc2/0x120 [ 778.682648][T21252] __kmalloc_cache_noprof+0x7a/0x6f0 [ 778.682669][T21252] ? alloc_fs_context+0x57/0xf40 [ 778.682685][T21252] ? lockdep_hardirqs_on+0x78/0x100 [ 778.682714][T21252] alloc_fs_context+0x57/0xf40 [ 778.682736][T21252] __x64_sys_fsopen+0xed/0x220 [ 778.682757][T21252] do_syscall_64+0x106/0xf80 [ 778.682778][T21252] ? clear_bhb_loop+0x40/0x90 [ 778.682796][T21252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.682812][T21252] RIP: 0033:0x7f6408d9c799 [ 778.682826][T21252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 778.682841][T21252] RSP: 002b:00007f6409d41028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 778.682856][T21252] RAX: ffffffffffffffda RBX: 00007f6409015fa0 RCX: 00007f6408d9c799 [ 778.682866][T21252] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 778.682875][T21252] RBP: 00007f6408e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 778.682884][T21252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 778.682893][T21252] R13: 00007f6409016038 R14: 00007f6409015fa0 R15: 00007ffc06e2c548 [ 778.682913][T21252] [ 779.253775][T21259] [U]  [ 779.256593][T21259] [U] [ 779.259264][T21259] [U] [ 779.261932][T21259] [U] [ 779.286429][T21259] [U] [ 779.289142][T21259] [U] [ 779.291821][T21259] [U] [ 779.294491][T21259] [U] [ 779.354588][T21259] [U] [ 779.357309][T21259] [U] [ 779.359998][T21259] [U] [ 779.362673][T21259] [U] [ 779.394792][T21259] [U] [ 779.397520][T21259] [U] [ 779.400196][T21259] [U] [ 779.402867][T21259] [U] [ 779.435033][T21259] [U] [ 779.437749][T21259] [U] [ 779.440453][T21259] [U] [ 779.443142][T21259] [U] [ 779.482716][T21259] [U] [ 779.485426][T21259] [U] [ 779.488099][T21259] [U] [ 779.490772][T21259] [U] [ 779.526458][T21259] [U] [ 779.529178][T21259] [U] [ 779.531857][T21259] [U] [ 779.534539][T21259] [U] [ 779.583542][T21259] [U] [ 779.586261][T21259] [U] [ 779.588941][T21259] [U] [ 779.591612][T21259] [U] [ 779.627355][T21259] [U] [ 779.630073][T21259] [U] [ 779.632749][T21259] [U] [ 779.635451][T21259] [U] [ 779.685703][T21259] [U] [ 779.688451][T21259] [U] [ 779.691146][T21259] [U] [ 779.693819][T21259] [U] [ 779.726103][T21259] [U] [ 779.728820][T21259] [U] [ 779.731498][T21259] [U] [ 779.734172][T21259] [U] [ 779.780570][T21259] [U] [ 779.783287][T21259] [U] [ 779.785984][T21259] [U] [ 779.788671][T21259] [U] [ 779.825291][T21259] [U] [ 779.828014][T21259] [U] [ 779.830691][T21259] [U] [ 779.833359][T21259] [U] [ 779.873790][T21259] [U] [ 779.876530][T21259] [U] [ 779.879202][T21259] [U] [ 779.881887][T21259] [U] [ 779.926013][T21259] [U] [ 779.928732][T21259] [U] [ 779.931404][T21259] [U] [ 779.934076][T21259] [U] [ 779.977017][T21259] [U] [ 779.979754][T21259] [U] [ 779.982429][T21259] [U] [ 779.985103][T21259] [U] [ 780.093816][T21259] [U] [ 780.096532][T21259] [U] [ 780.099219][T21259] [U] [ 780.101892][T21259] [U] [ 780.172866][T21259] [U] [ 780.713935][ T5833] Bluetooth: hci2: Malformed LE Event: 0x1b [ 782.133044][T21310] netlink: 186 bytes leftover after parsing attributes in process `syz.0.5352'. [ 783.268718][T21323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5351'. [ 783.317271][T21323] netlink: 25 bytes leftover after parsing attributes in process `syz.4.5351'. [ 785.137240][T21360] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5360'. [ 785.828120][T21374] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5367'. [ 788.232243][T21431] netlink: 330 bytes leftover after parsing attributes in process `syz.2.5383'. [ 789.550552][T21459] netlink: 62 bytes leftover after parsing attributes in process `syz.1.5393'. [ 791.846234][T21505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5410'. [ 791.877567][T21507] netlink: 326 bytes leftover after parsing attributes in process `syz.4.5411'. [ 792.023670][T21511] netlink: 330 bytes leftover after parsing attributes in process `syz.4.5412'. [ 795.546390][T21569] netlink: 'syz.0.5431': attribute type 10 has an invalid length. [ 795.616330][T21575] netlink: 330 bytes leftover after parsing attributes in process `syz.1.5433'. [ 795.633207][T21569] netlink: 'syz.0.5431': attribute type 13 has an invalid length. [ 796.395064][T21584] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5435'. [ 797.447804][T21602] netlink: 326 bytes leftover after parsing attributes in process `syz.4.5442'. [ 797.490092][T21602] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 797.497380][T21602] IPv6: NLM_F_CREATE should be set when creating new route [ 797.504629][T21602] IPv6: NLM_F_CREATE should be set when creating new route [ 797.827359][T21611] netlink: 186 bytes leftover after parsing attributes in process `syz.4.5445'. [ 797.956232][T21612] FAULT_INJECTION: forcing a failure. [ 797.956232][T21612] name failslab, interval 1, probability 0, space 0, times 0 [ 798.202417][T21612] CPU: 0 UID: 0 PID: 21612 Comm: syz.0.5443 Tainted: G L syzkaller #0 PREEMPT(full) [ 798.202445][T21612] Tainted: [L]=SOFTLOCKUP [ 798.202451][T21612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 798.202461][T21612] Call Trace: [ 798.202467][T21612] [ 798.202474][T21612] dump_stack_lvl+0x100/0x190 [ 798.202503][T21612] should_fail_ex.cold+0x5/0xa [ 798.202522][T21612] should_failslab+0xc2/0x120 [ 798.202538][T21612] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 798.202567][T21612] ? __alloc_skb+0x140/0x710 [ 798.202591][T21612] __alloc_skb+0x140/0x710 [ 798.202609][T21612] ? __alloc_skb+0x5b7/0x710 [ 798.202627][T21612] ? __pfx___alloc_skb+0x10/0x10 [ 798.202646][T21612] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 798.202668][T21612] ? audit_log_start+0x29d/0x930 [ 798.202688][T21612] ? lockdep_init_map_type+0x5c/0x250 [ 798.202711][T21612] audit_log_start+0x350/0x930 [ 798.202733][T21612] ? __pfx_audit_log_start+0x10/0x10 [ 798.202755][T21612] ? arch_do_signal_or_restart+0x1f9/0x770 [ 798.202774][T21612] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 798.202796][T21612] audit_seccomp+0x60/0x190 [ 798.202814][T21612] ? exc_general_protection+0x12e/0x250 [ 798.202832][T21612] __secure_computing+0x26d/0x2c0 [ 798.202853][T21612] do_syscall_64+0x568/0xf80 [ 798.202874][T21612] ? clear_bhb_loop+0x40/0x90 [ 798.202893][T21612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.202910][T21612] RIP: 0033:0x7f9813b9c799 [ 798.202924][T21612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 798.202938][T21612] RSP: 002b:00007f9811db3a38 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 798.202954][T21612] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f9813b9c799 [ 798.202964][T21612] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000000000000000b [ 798.202972][T21612] RBP: 00007f9811db4030 R08: 0000000000000000 R09: 000000000000000b [ 798.202981][T21612] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000024e28 [ 798.202990][T21612] R13: 00007f9813e16218 R14: 00007f9813e16180 R15: 00007ffc34c013a8 [ 798.203010][T21612] [ 798.203028][T21612] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 799.311823][T21633] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5453'. [ 800.285904][T21612] audit: out of memory in audit_log_start [ 801.737099][T21682] netlink: 354 bytes leftover after parsing attributes in process `syz.2.5470'. [ 803.278632][T21719] sp0: Synchronizing with TNC [ 804.320120][T21741] netlink: 'syz.2.5489': attribute type 15 has an invalid length. [ 804.362979][T21741] netlink: 'syz.2.5489': attribute type 16 has an invalid length. [ 804.410573][T21741] netlink: 194 bytes leftover after parsing attributes in process `syz.2.5489'. [ 807.559894][T21801] netlink: 206 bytes leftover after parsing attributes in process `syz.0.5507'. [ 808.788875][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.796052][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.543783][T21835] zswap: compressor  not available [ 809.565226][T21843] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 810.969099][T21862] sp0: Synchronizing with TNC [ 813.101123][T21882] FAULT_INJECTION: forcing a failure. [ 813.101123][T21882] name failslab, interval 1, probability 0, space 0, times 0 [ 813.217605][T21882] CPU: 0 UID: 0 PID: 21882 Comm: syz.0.5529 Tainted: G L syzkaller #0 PREEMPT(full) [ 813.217633][T21882] Tainted: [L]=SOFTLOCKUP [ 813.217640][T21882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 813.217649][T21882] Call Trace: [ 813.217655][T21882] [ 813.217662][T21882] dump_stack_lvl+0x100/0x190 [ 813.217691][T21882] should_fail_ex.cold+0x5/0xa [ 813.217710][T21882] ? lsm_blob_alloc+0x68/0x90 [ 813.217730][T21882] should_failslab+0xc2/0x120 [ 813.217747][T21882] __kmalloc_noprof+0xe0/0x850 [ 813.217768][T21882] ? trace_kmem_cache_alloc+0xf3/0x120 [ 813.217787][T21882] lsm_blob_alloc+0x68/0x90 [ 813.217808][T21882] security_prepare_creds+0x2d/0x290 [ 813.217828][T21882] prepare_creds+0x5d6/0x950 [ 813.217852][T21882] lookup_user_key+0xfb2/0x1300 [ 813.217872][T21882] ? __pfx_lookup_user_key+0x10/0x10 [ 813.217893][T21882] ? do_raw_spin_lock+0x128/0x260 [ 813.217916][T21882] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 813.217936][T21882] ? _raw_spin_unlock_irq+0x2e/0x50 [ 813.217955][T21882] ? do_sigaltstack.constprop.0+0x4c0/0x670 [ 813.217979][T21882] keyctl_restrict_keyring+0x99/0x250 [ 813.217994][T21882] ? __pfx_keyctl_restrict_keyring+0x10/0x10 [ 813.218016][T21882] __do_sys_keyctl+0x2e8/0x5a0 [ 813.218032][T21882] do_syscall_64+0x106/0xf80 [ 813.218051][T21882] ? clear_bhb_loop+0x40/0x90 [ 813.218069][T21882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.218085][T21882] RIP: 0033:0x7f9813b9c799 [ 813.218098][T21882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 813.218113][T21882] RSP: 002b:00007f9811df6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 813.218137][T21882] RAX: ffffffffffffffda RBX: 00007f9813e15fa0 RCX: 00007f9813b9c799 [ 813.218153][T21882] RDX: 0000000000000002 RSI: fffffffffffffffd RDI: 000000000000001d [ 813.218163][T21882] RBP: 00007f9813c32c99 R08: fffffffffffffffd R09: 0000000000000000 [ 813.218174][T21882] R10: 0000000000000628 R11: 0000000000000246 R12: 0000000000000000 [ 813.218184][T21882] R13: 00007f9813e16038 R14: 00007f9813e15fa0 R15: 00007ffc34c013a8 [ 813.218204][T21882] [ 813.942731][T21892] netlink: 13 bytes leftover after parsing attributes in process `syz.0.5532'. [ 814.863218][T21904] vcan0: tx drop: invalid sa for name 0x00000000000000fd [ 815.475769][T21913] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 815.944138][T21925] netlink: 342 bytes leftover after parsing attributes in process `syz.2.5544'. [ 816.792316][T21944] netlink: 'syz.0.5548': attribute type 10 has an invalid length. [ 816.835740][T21944] netlink: 230 bytes leftover after parsing attributes in process `syz.0.5548'. [ 816.984828][T21954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5552'. [ 817.046850][T21954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5552'. [ 818.072490][T21984] netlink: 50 bytes leftover after parsing attributes in process `syz.1.5564'. [ 818.488315][T21994] FAULT_INJECTION: forcing a failure. [ 818.488315][T21994] name fail_futex, interval 1, probability 0, space 0, times 0 [ 818.602640][T21994] CPU: 0 UID: 0 PID: 21994 Comm: syz.1.5569 Tainted: G L syzkaller #0 PREEMPT(full) [ 818.602667][T21994] Tainted: [L]=SOFTLOCKUP [ 818.602672][T21994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 818.602682][T21994] Call Trace: [ 818.602688][T21994] [ 818.602694][T21994] dump_stack_lvl+0x100/0x190 [ 818.602722][T21994] should_fail_ex.cold+0x5/0xa [ 818.602740][T21994] get_futex_key+0x1d2/0x1620 [ 818.602769][T21994] ? __pfx_get_futex_key+0x10/0x10 [ 818.602789][T21994] ? __lock_acquire+0x4a5/0x2630 [ 818.602814][T21994] futex_wait_setup+0x83/0x510 [ 818.602842][T21994] __futex_wait+0x19f/0x300 [ 818.602865][T21994] ? __pfx___futex_wait+0x10/0x10 [ 818.602886][T21994] ? do_raw_spin_lock+0x128/0x260 [ 818.602910][T21994] ? __pfx_futex_wake_mark+0x10/0x10 [ 818.602934][T21994] ? futex_hash+0x2c5/0x380 [ 818.602957][T21994] futex_wait+0xed/0x380 [ 818.602979][T21994] ? __pfx_futex_wait+0x10/0x10 [ 818.603007][T21994] ? mmput+0x53/0x80 [ 818.603025][T21994] do_futex+0x1ef/0x350 [ 818.603044][T21994] ? __pfx_do_futex+0x10/0x10 [ 818.603064][T21994] ? __pfx_kernel_move_pages+0x10/0x10 [ 818.603082][T21994] ? __pfx_do_set_mempolicy+0x10/0x10 [ 818.603100][T21994] __x64_sys_futex+0x34f/0x4d0 [ 818.603122][T21994] ? __pfx___x64_sys_futex+0x10/0x10 [ 818.603149][T21994] do_syscall_64+0x106/0xf80 [ 818.603180][T21994] ? clear_bhb_loop+0x40/0x90 [ 818.603199][T21994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.603215][T21994] RIP: 0033:0x7f6408d9c799 [ 818.603230][T21994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 818.603245][T21994] RSP: 002b:00007f6409d410e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 818.603261][T21994] RAX: ffffffffffffffda RBX: 00007f6409015fa8 RCX: 00007f6408d9c799 [ 818.603271][T21994] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6409015fa8 [ 818.603280][T21994] RBP: 00007f6409015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 818.603290][T21994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 818.603299][T21994] R13: 00007f6409016038 R14: 00007ffc06e2c460 R15: 00007ffc06e2c548 [ 818.603319][T21994] [ 819.599093][T22013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5574'. [ 819.660296][T22013] netlink: 13 bytes leftover after parsing attributes in process `syz.2.5574'. [ 821.111190][T22036] [ 821.113543][T22036] ====================================================== [ 821.120619][T22036] WARNING: possible circular locking dependency detected [ 821.127672][T22036] syzkaller #0 Tainted: G L [ 821.133628][T22036] ------------------------------------------------------ [ 821.140632][T22036] syz.4.5581/22036 is trying to acquire lock: [ 821.146701][T22036] ffff888032e17ae8 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x4ca/0xcb0 [ 821.158174][T22036] [ 821.158174][T22036] but task is already holding lock: [ 821.165518][T22036] ffff8880586e0ee0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 821.174638][T22036] [ 821.174638][T22036] which lock already depends on the new lock. [ 821.174638][T22036] [ 821.185045][T22036] [ 821.185045][T22036] the existing dependency chain (in reverse order) is: [ 821.194059][T22036] [ 821.194059][T22036] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 821.201780][T22036] lock_sock_nested+0x41/0xf0 [ 821.206970][T22036] smc_listen_out+0x1f5/0x4b0 [ 821.212170][T22036] smc_listen_work+0x4c2/0x50e0 [ 821.217542][T22036] process_one_work+0x9d7/0x1920 [ 821.223007][T22036] worker_thread+0x5da/0xe40 [ 821.228131][T22036] kthread+0x370/0x450 [ 821.232722][T22036] ret_from_fork+0x754/0xd80 [ 821.237829][T22036] ret_from_fork_asm+0x1a/0x30 [ 821.243115][T22036] [ 821.243115][T22036] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 821.253280][T22036] __lock_acquire+0x14b8/0x2630 [ 821.258644][T22036] lock_acquire+0x1cf/0x380 [ 821.263659][T22036] __flush_work+0x4de/0xcb0 [ 821.268695][T22036] cancel_work_sync+0xd1/0xf0 [ 821.273890][T22036] smc_clcsock_release+0x5f/0xe0 [ 821.279409][T22036] __smc_release+0x5c2/0x880 [ 821.284507][T22036] smc_close_non_accepted+0xda/0x200 [ 821.290301][T22036] smc_close_active+0x4ff/0x1070 [ 821.295761][T22036] __smc_release+0x634/0x880 [ 821.300854][T22036] smc_release+0x1fc/0x620 [ 821.305774][T22036] __sock_release+0xb3/0x260 [ 821.310874][T22036] sock_close+0x1c/0x30 [ 821.315542][T22036] __fput+0x3ff/0xb40 [ 821.320034][T22036] task_work_run+0x150/0x240 [ 821.325135][T22036] exit_to_user_mode_loop+0x100/0x4a0 [ 821.331024][T22036] do_syscall_64+0x668/0xf80 [ 821.336141][T22036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.342556][T22036] [ 821.342556][T22036] other info that might help us debug this: [ 821.342556][T22036] [ 821.352769][T22036] Possible unsafe locking scenario: [ 821.352769][T22036] [ 821.360197][T22036] CPU0 CPU1 [ 821.365560][T22036] ---- ---- [ 821.370933][T22036] lock(sk_lock-AF_SMC/1); [ 821.375427][T22036] lock((work_completion)(&new_smc->smc_listen_work)); [ 821.384882][T22036] lock(sk_lock-AF_SMC/1); [ 821.391918][T22036] lock((work_completion)(&new_smc->smc_listen_work)); [ 821.398840][T22036] [ 821.398840][T22036] *** DEADLOCK *** [ 821.398840][T22036] [ 821.406985][T22036] 3 locks held by syz.4.5581/22036: [ 821.412165][T22036] #0: ffff8880129eef48 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 821.422776][T22036] #1: ffff8880586e0ee0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 821.432178][T22036] #2: ffffffff8e7e7460 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xfd/0xcb0 [ 821.441323][T22036] [ 821.441323][T22036] stack backtrace: [ 821.447285][T22036] CPU: 0 UID: 0 PID: 22036 Comm: syz.4.5581 Tainted: G L syzkaller #0 PREEMPT(full) [ 821.447308][T22036] Tainted: [L]=SOFTLOCKUP [ 821.447313][T22036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 821.447323][T22036] Call Trace: [ 821.447330][T22036] [ 821.447336][T22036] dump_stack_lvl+0x100/0x190 [ 821.447361][T22036] print_circular_bug.cold+0x178/0x1c7 [ 821.447385][T22036] check_noncircular+0x146/0x160 [ 821.447404][T22036] __lock_acquire+0x14b8/0x2630 [ 821.447425][T22036] lock_acquire+0x1cf/0x380 [ 821.447442][T22036] ? __flush_work+0x4ca/0xcb0 [ 821.447464][T22036] ? mark_held_locks+0x40/0x70 [ 821.447481][T22036] ? __flush_work+0x4ca/0xcb0 [ 821.447501][T22036] __flush_work+0x4de/0xcb0 [ 821.447521][T22036] ? __flush_work+0x4ca/0xcb0 [ 821.447542][T22036] ? __pfx___flush_work+0x10/0x10 [ 821.447564][T22036] ? __pfx_wq_barrier_func+0x10/0x10 [ 821.447582][T22036] ? __pfx___might_resched+0x10/0x10 [ 821.447605][T22036] cancel_work_sync+0xd1/0xf0 [ 821.447619][T22036] smc_clcsock_release+0x5f/0xe0 [ 821.447643][T22036] __smc_release+0x5c2/0x880 [ 821.447659][T22036] ? __pfx_sock_def_readable+0x10/0x10 [ 821.447678][T22036] smc_close_non_accepted+0xda/0x200 [ 821.447695][T22036] smc_close_active+0x4ff/0x1070 [ 821.447714][T22036] __smc_release+0x634/0x880 [ 821.447729][T22036] smc_release+0x1fc/0x620 [ 821.447745][T22036] __sock_release+0xb3/0x260 [ 821.447765][T22036] ? __pfx_sock_close+0x10/0x10 [ 821.447785][T22036] sock_close+0x1c/0x30 [ 821.447804][T22036] __fput+0x3ff/0xb40 [ 821.447822][T22036] task_work_run+0x150/0x240 [ 821.447843][T22036] ? __pfx_task_work_run+0x10/0x10 [ 821.447865][T22036] exit_to_user_mode_loop+0x100/0x4a0 [ 821.447885][T22036] do_syscall_64+0x668/0xf80 [ 821.447906][T22036] ? clear_bhb_loop+0x40/0x90 [ 821.447922][T22036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.447937][T22036] RIP: 0033:0x7fe3eb39c799 [ 821.447951][T22036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 821.447966][T22036] RSP: 002b:00007fffdc4648d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 821.447980][T22036] RAX: 0000000000000000 RBX: 00007fe3eb617da0 RCX: 00007fe3eb39c799 [ 821.447990][T22036] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 821.447998][T22036] RBP: 00007fe3eb617da0 R08: 00007fe3eb616128 R09: 0000000000000000 [ 821.448008][T22036] R10: 00000000005d8d2c R11: 0000000000000246 R12: 00000000000c88e7 [ 821.448016][T22036] R13: 00007fe3eb61609c R14: 00000000000c866f R15: 00007fffdc4649e0 [ 821.448030][T22036] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 823.498531][ T1109] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.662097][ T1109] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.747615][ T1109] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.777488][ T1109] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.879031][ T1109] bridge_slave_1: left allmulticast mode [ 823.888262][ T1109] bridge_slave_1: left promiscuous mode [ 823.904484][ T1109] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.921434][ T1109] bridge_slave_0: left allmulticast mode [ 823.934123][ T1109] bridge_slave_0: left promiscuous mode [ 823.946342][ T1109] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.088547][ T1109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 824.111162][ T1109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 824.129322][ T1109] bond0 (unregistering): Released all slaves [ 824.281627][ T1109] hsr_slave_0: left promiscuous mode [ 824.293699][ T1109] hsr_slave_1: left promiscuous mode [ 824.308055][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 824.321452][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 824.345875][ T1109] veth1_macvtap: left promiscuous mode [ 824.351787][ T1109] veth0_macvtap: left promiscuous mode [ 824.363980][ T1109] veth0_vlan: left promiscuous mode [ 824.537202][ T1109] team0 (unregistering): Port device team_slave_1 removed [ 824.561549][ T1109] team0 (unregistering): Port device team_slave_0 removed [ 824.794678][ T1109] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.859632][ T1109] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.897008][ T1109] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.939336][ T1109] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.021554][ T1109] batadv0: left allmulticast mode [ 825.033109][ T1109] batadv0: left promiscuous mode [ 825.044051][ T1109] bridge0: port 3(batadv0) entered disabled state [ 825.067328][ T1109] bridge_slave_1: left allmulticast mode [ 825.072987][ T1109] bridge_slave_1: left promiscuous mode [ 825.094117][ T1109] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.112452][ T1109] bridge_slave_0: left allmulticast mode [ 825.124998][ T1109] bridge_slave_0: left promiscuous mode [ 825.130657][ T1109] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.238051][ T1109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 825.247946][ T1109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 825.258471][ T1109] bond0 (unregistering): Released all slaves [ 825.366431][ T1109] hsr_slave_0: left promiscuous mode [ 825.383963][ T1109] hsr_slave_1: left promiscuous mode [ 825.395593][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 825.414938][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 825.434036][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 825.441655][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 825.466596][ T1109] veth1_macvtap: left promiscuous mode [ 825.472085][ T1109] veth0_macvtap: left promiscuous mode [ 825.490900][ T1109] veth1_vlan: left promiscuous mode [ 825.499650][ T1109] veth0_vlan: left promiscuous mode [ 825.590035][ T1109] pim6reg (unregistering): left allmulticast mode [ 825.696949][ T1109] team0 (unregistering): Port device team_slave_1 removed [ 825.708853][ T1109] team0 (unregistering): Port device team_slave_0 removed