last executing test programs: 2m48.473477698s ago: executing program 0 (id=4845): socket(0x10, 0x80000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r1 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x100009) write$auto(0x3, 0x0, 0xfffffdef) r2 = epoll_create$auto(0x8800001) epoll_ctl$auto(r2, 0x1, r0, 0x0) 2m47.391521015s ago: executing program 0 (id=4846): mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket(0x1d, 0x2, 0x6) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$auto(r0, &(0x7f0000000040)=@can={0x1d, r2, 0xfd}, 0x6a) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x21}}, 0x40) sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x800) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0xe2c1, 0x157) r3 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) ioctl$auto(r4, 0x80047437, r3) 2m46.385180285s ago: executing program 0 (id=4848): pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compaction_proactiveness\x00', 0x2800, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) setns(0xc9, 0x0) r0 = socket(0x1f, 0x3, 0x6) setfsuid$auto(0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xffffffffffdffe00, &(0x7f0000000140)='+') ioctl$auto(0x3, 0x40046201, 0x38) ioctl$auto(r0, 0x800448d2, 0xffffffffffffffff) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x37f) 2m42.983446338s ago: executing program 0 (id=4853): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) setsockopt$auto_SO_SNDBUF(0xffffffffffffffff, 0x6, 0x7, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x4, 0x0) r0 = socket(0x2, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/nfs4.idtoname/channel\x00', 0x8f3b7a51b80ebd01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000040)="20202078207e5cc0023af10e9bfa1babfa203753ca9a20370a", 0x19) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) getsockopt$auto(r0, 0x84, 0x84, 0x0, &(0x7f00000002c0)=0x1000c0) pwrite64$auto(0xc8, 0x0, 0x10, 0x6) getsockopt$auto(0x3, 0x6, 0x1f, &(0x7f0000000200)=':\x00', 0x0) clone$auto(0x2, 0x8, 0x0, 0x0, 0xff) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x8000000}, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) 2m42.175109985s ago: executing program 0 (id=4856): sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_VDPA_CMD_DEV_VSTATS_GET(0xffffffffffffffff, 0x0, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/v4l-subdev3\x00', 0x80000, 0x0) ioctl$auto_XFS_IOC_ERROR_INJECTION(0xffffffffffffffff, 0x40085874, &(0x7f0000000000)={r0}) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f0000000280)=@link_update={r3, @new_prog_fd=r1, 0x4, @old_map_fd=r1}, 0x80000000) ioctl$auto(r2, 0xc0285629, r2) sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x40000) mmap$auto(0x0, 0x10008, 0x4000000000df, 0xeb1, 0x401, 0x8000) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xfffffff9, 0x10, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) getrusage$auto(0x1, 0x0) ioctl$auto(r0, 0x89a3, 0x24) 2m40.927694822s ago: executing program 0 (id=4857): r0 = socket$nl_generic(0x10, 0x3, 0x10) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, 0x0, 0x6, 0x0) r1 = getpid() process_vm_readv$auto(r1, 0x0, 0x40000000001, &(0x7f0000000180)={0x0, 0x40000000001243}, 0xa, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r3, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000200)={0x14, r4, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x48080) sendmsg$auto_NFSD_CMD_LISTENER_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r4, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000804}, 0x50) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r5, 0x1, 0x94d1) ptrace$auto_PTRACE_GET_SYSCALL_USER_DISPATCH_CONFIG(0x4211, r5, 0x100, 0x100000001) lstat$auto(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/slabinfo\x00', 0x0, 0x0) 2m25.514920238s ago: executing program 32 (id=4857): r0 = socket$nl_generic(0x10, 0x3, 0x10) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, 0x0, 0x6, 0x0) r1 = getpid() process_vm_readv$auto(r1, 0x0, 0x40000000001, &(0x7f0000000180)={0x0, 0x40000000001243}, 0xa, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r3, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000200)={0x14, r4, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x48080) sendmsg$auto_NFSD_CMD_LISTENER_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r4, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000804}, 0x50) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r5, 0x1, 0x94d1) ptrace$auto_PTRACE_GET_SYSCALL_USER_DISPATCH_CONFIG(0x4211, r5, 0x100, 0x100000001) lstat$auto(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/slabinfo\x00', 0x0, 0x0) 1m19.062809461s ago: executing program 2 (id=4989): prctl$auto_PR_GET_UNALIGN(0x5, 0x29, 0x8000, 0x3, 0x7fff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) lseek$auto(0x3, 0x2, 0x4) mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000) mmap$auto(0x4, 0x2020009, 0x3, 0x15, 0xfffffffffffffffa, 0x8000) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x40400, 0x0) socket(0x10, 0x2, 0xc) openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/hci4/force_wakeup\x00', 0x97253d5c24a95d78, 0x0) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) clone$auto(0x20003b11, 0x8, 0x0, 0x0, 0x7) r2 = openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) pread64$auto(r2, &(0x7f00000001c0)='\x00', 0xca31, 0x4) write$auto(r1, 0x0, 0xe) 1m16.493139474s ago: executing program 2 (id=4992): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x101802, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r2 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) mq_notify$auto(0x4, &(0x7f0000000040)={@sival_int=0x70000000, @inferred=r0, 0x1}) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x80) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0xa7, &(0x7f0000000040), 0x8001, 0x9}, 0x8}, 0x1, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0) 1m14.389368517s ago: executing program 2 (id=4994): socket(0x2c, 0x3, 0x0) unshare$auto(0x3) unshare$auto(0x40000080) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) syz_clone(0x903ad480, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 1m9.322332067s ago: executing program 2 (id=5001): pipe$auto(&(0x7f0000000000)) socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x440, 0x0) socket(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b82, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff14, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r1], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x200440c0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfc7c, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40c0}, 0x48050) sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x8001c01, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x7}, 0x3d55, 0x0) 1m7.641158949s ago: executing program 2 (id=5004): r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0x5, 0x9) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x68000, 0x0) io_uring_setup$auto(0x7, 0x0) readv$auto(0x3, &(0x7f0000001100)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, 0x0, 0x80000, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/fail-nth\x00', 0x101000, 0x0) write$auto_split_huge_pages_fops_huge_memory(r1, 0x0, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0xc090) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/state\x00', 0x20a42, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000000)=""/189, 0xbd) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) syz_genetlink_get_family_id$auto_net_dm(0x0, 0xffffffffffffffff) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/009/001\x00', 0x4a541, 0x0) 1m6.390517087s ago: executing program 2 (id=5006): mq_notify$auto(0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fe02, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x40001, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1900, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b7e, 0xffffffffffffffff, 0x8000) io_uring_register$auto_IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x7) clock_adjtime$auto(0x10, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0x7, 0x0, 0x5, 0x3cbb}, 0xfff}, 0x8, 0x311) r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x60020000) umount2$auto(&(0x7f0000000000)='.\x00', 0x3) socket(0xb, 0x800, 0x84) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) 51.248150776s ago: executing program 33 (id=5006): mq_notify$auto(0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fe02, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x40001, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1900, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b7e, 0xffffffffffffffff, 0x8000) io_uring_register$auto_IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x7) clock_adjtime$auto(0x10, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0x7, 0x0, 0x5, 0x3cbb}, 0xfff}, 0x8, 0x311) r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x60020000) umount2$auto(&(0x7f0000000000)='.\x00', 0x3) socket(0xb, 0x800, 0x84) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) 16.32286894s ago: executing program 3 (id=5092): socket(0x2, 0x5, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) mmap$auto(0x0, 0x10000, 0xde, 0x11, r0, 0x28000) madvise$auto(0x0, 0x2000040080000004, 0xe) syz_genetlink_get_family_id$auto_ioam6(0x0, 0xffffffffffffffff) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(0xffffffffffffffff, 0x0, 0x808) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r1) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fbdbdf2504"], 0x44}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) setitimer$auto(0x2, 0x0, 0x0) getrlimit$auto(0x4, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r3, 0x127f, 0x0) 13.789118298s ago: executing program 1 (id=5096): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x2, 0x0) r1 = socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) getsockopt$auto(r1, 0x84, 0x6c, 0x0, &(0x7f0000000280)=0x1000c0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r0) ioctl$auto_KVM_CREATE_VM(r2, 0x4048aecb, 0x0) 13.639981728s ago: executing program 3 (id=5097): sysfs$auto(0x2, 0x23, 0x0) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, 0x0) keyctl$auto(0x4, 0xfffffffe, 0x0, 0x0, 0xfffffffffffffff8) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) read$auto(r0, 0x0, 0xfffffdef) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) ioctl$auto(0x3, 0x402c542b, 0x38) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write$auto(0x3, 0x0, 0x81) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 13.075895593s ago: executing program 1 (id=5098): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40100, 0x0) read$auto_proc_pagemap_operations_internal(r0, 0x0, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x28, 0x1, 0x0) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(r2, 0x0, 0x4000085) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x4c, r4, 0x1b, 0x70bd22, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_ACTIONS={0x30, 0x3, 0x0, 0x1, [@nested={0x2c, 0x1, 0x0, 0x1, [@nested={0xc, 0x106, 0x0, 0x1, [@typed={0x8, 0x107, 0x0, 0x0, @fd}]}, @typed={0x8, 0x3e, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @nested={0x14, 0x30, 0x0, 0x1, [@nested={0x10, 0x140, 0x0, 0x1, [@typed={0xc, 0x36, 0x0, 0x0, @u64=0x10}]}]}]}]}, @OVS_PACKET_ATTR_ACTIONS={0x4}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r5 = ioctl$auto_NS_GET_PID_IN_PIDNS(0xffffffffffffffff, 0x8004b708, &(0x7f0000000040)=0x4) timerfd_gettime$auto(r5, &(0x7f0000000080)={{0x8}, {0x8, 0xfffffffffffffffa}}) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 11.171813847s ago: executing program 5 (id=5100): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x80101, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1c, 0x3000, 0x6, 0x6, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x10000002, 0x6}, {0xe63c, 0x3, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}}) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}, 0xffff}, 0x4000, 0x20000043) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0xffffffffc0403d11, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f00000001c0), 0xffffffffffffffff) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) sendmsg$auto_HWSIM_CMD_REGISTER(0xffffffffffffffff, 0x0, 0x40) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) msync$auto(0x7fff, 0x4, 0xa7e) write$auto(0xffffffffffffffff, 0x0, 0x8000007f) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram11\x00', 0x2000, 0x0) sendfile$auto(0x3, r1, 0x0, 0x400000000006) 9.911157318s ago: executing program 5 (id=5102): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(0xffffffffffffffff, 0x0, 0x4000085) ioctl$auto_UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) socket(0x1d, 0x2, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) process_vm_writev$auto(0x0, 0x0, 0x200000000017, 0x0, 0x7, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x402) fcntl$auto_F_GETOWN(0xffffffffffffffff, 0x9, 0xb4) sendmsg$auto_NL80211_CMD_DISASSOCIATE(r1, 0x0, 0x200008c4) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8f3b7a51b8162d21, 0x0) 9.727539246s ago: executing program 3 (id=5103): unshare$auto(0x40000080) r0 = socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0x8010000, 0xffb, 0x8000000008011, 0x3, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) sendmsg$auto_NL80211_CMD_EPCS_CFG(r0, 0x0, 0x8d1) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) ioctl$auto_IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) getsockopt$auto_SO_PEERPIDFD(r0, 0x5, 0x4d, &(0x7f0000000280)='\x00', &(0x7f00000002c0)=0x1) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x402) openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000005dc0)='/proc/self/ns/cgroup\x00', 0x800, 0x0) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x12040, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 9.214243794s ago: executing program 1 (id=5104): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) get_robust_list$auto(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) ioctl$auto(0xffffffffffffffff, 0x5, 0xffffffffffffffff) quotactl_fd$auto(0xffffffffffffffff, 0x7, 0x0, &(0x7f00000033c0)) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4000085) fchdir$auto(0xffffffffffffffff) openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ubifs/chk_index\x00', 0x40400, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)={0x3c, r2, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0xc, 0x0, 0x1, [@nested={0x4, 0x6}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0x400c880) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x402) 7.307102449s ago: executing program 4 (id=5105): statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x7, 0x5, 0x1007181, 0x8a0d, 0x7, 0x7, 0x7ff, 0x89, 0x26, 0x4, 0x200000000001, 0x384, 0xfffffffffffffffa, 0x8, 0x0, 0x30, 0x0, 0x864, 0xe, 0x22000, 0x9, 0x0, 0x84}, 0x9, 0xd) r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r0, 0x2, &(0x7f0000000380)="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") ioctl$auto__ctl_fops_dm_ioctl(r0, 0xfffffff7effffd05, &(0x7f00000001c0)) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x1000000007, 0x0) socket(0x15, 0x5, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r3 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r4 = socket(0x1a, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) recvmmsg$auto(r4, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r3, 0x0, 0xffffff4b) 7.016794256s ago: executing program 4 (id=5106): r0 = openat$auto_uprobe_profile_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/uprobe_profile\x00', 0xdce40a92b3846e4b, 0x0) mmap$auto(0x0, 0x202000b, 0x2003, 0xeb1, r0, 0x8000) shutdown$auto(0x200000003, 0x2) openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000000080), 0x107200, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.events\x00', 0x2040, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) modify_ldt$auto(0x11, 0x0, 0x10) syz_clone3(&(0x7f0000000300)={0x28020400, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) socket(0x25, 0xb, 0x7) socket(0x10, 0x2, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0xffffff7c, 0x8000000000009) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(0x0, 0x4) mmap$auto(0x0, 0x400009, 0xffb, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x5, 0x7fffffff, 0x8000000008011, 0x3, 0x2000000000) 6.49746517s ago: executing program 4 (id=5107): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pppol2tp\x00', 0x40280, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8000, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x1) madvise$auto(0x0, 0x2000040080000004, 0xe) mmap$auto(0x0, 0x20009, 0x4000000000e3, 0x16, 0x401, 0x8000) socket(0x2, 0x1, 0x106) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x10, 0x0, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) r0 = socket(0x2b, 0x6, 0x6) setsockopt$auto(r0, 0xe, 0x12, 0x0, 0x52) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) setgroups$auto(0xa1, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 4.989182383s ago: executing program 5 (id=5108): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/net/tls_stat\x00', 0x500, 0x0) pipe$auto(0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/11/smp_affinity\x00', 0x28102, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/pagemap\x00', 0x8180, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x161543, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x222680, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x8001, 0x8, 0x8000, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101000, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, 0x0) 4.794515337s ago: executing program 1 (id=5109): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) waitid$auto_P_PID(0x1, 0x0, &(0x7f00000001c0)={@siginfo_0_0={0x0, 0x9, 0x7}}, 0x9, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x100, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = setfsuid$auto(0xee00) setresuid$auto(0xee01, r1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_PMK(0xffffffffffffffff, 0x0, 0x41) keyctl$auto(0x9, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x8) mmap$auto(0x0, 0x2020009, 0x100000000000003, 0xebe, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCGMASK(r2, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x105}) 4.673488533s ago: executing program 3 (id=5110): socket(0xa, 0x1, 0x84) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0x15, 0x5, 0x0) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b3b", 0xfdef) open(0x0, 0x149443, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x541c, r2) 4.564191928s ago: executing program 5 (id=5111): r0 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/raw\x00', 0x800, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000001c0)=""/249, 0xf9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) sysfs$auto(0x2, 0x100000000000039, 0x0) r2 = fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0xa, 0x0) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x1000000, 0x0) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000140), r2) sendmsg$auto_L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000008}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r4, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, r0}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x2c, r3, 0x401, 0x70bd25, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x10, 0x1, 0x0, 0x1, [@typed={0x9, 0x63, 0x0, 0x0, @str='+--&\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) 3.766636524s ago: executing program 3 (id=5112): r0 = socket(0x29, 0x800, 0x4) socket(0x2, 0x801, 0x10a) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x1, 0x2, 0xffffffffffdffffc, 0x17, r0, 0x7) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e21, @rand_addr=0x64010102}, 0x6a) ioperm$auto(0x7, 0x6, 0x80) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r1 = setfsuid$auto(0xee00) r2 = setfsuid$auto(0xee01) setresuid$auto(r1, r2, r1) setresuid$auto(r2, 0xffffffffffffffff, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 3.683531665s ago: executing program 4 (id=5113): socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80802, 0x0) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0xa, 0xa) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) epoll_create$auto(0x3e) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r0, 0x0, 0xc3) 3.446331794s ago: executing program 5 (id=5114): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101000, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) io_uring_register$auto_IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, 0x0, 0x5c48) madvise$auto(0x8000000000000001, 0x7fffffffffffffff, 0x40) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x4) unshare$auto(0x40000080) madvise$auto(0x0, 0x2003f2, 0x14) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x121300, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) bpf$auto_BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)=@link_detach={r0}, 0x7fffffff) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2c, 0x2, 0x200) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 3.272117535s ago: executing program 4 (id=5115): io_uring_register$auto(0xffffffffffffffff, 0x15, 0x0, 0x6) ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'geneve1\x00'}) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(0xc8, &(0x7f0000000540)='\vX5n\x91p\xe6\x1eRN8\x99C\x05\x06\x00J\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\v\x00\x00\x00\x00\x00\x00\x00X\xb9_\xdd*\xd1\x14^\xbe\xa2\x00'/97, 0xd12, 0x4000005) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x8002) ioctl$auto_TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000180)=0x3) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x4830) r0 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, 0x0, 0x82042, 0x0) write$auto_vcs_fops_vc_screen(r0, &(0x7f0000000300), 0x0) writev$auto(0x3, 0x0, 0x8) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 1.760833151s ago: executing program 1 (id=5116): mseal$auto(0x0, 0x7dda, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) socket(0x15, 0x801, 0x0) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media1\x00', 0x22001, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x68102, 0x0) pread64$auto(r0, 0x0, 0x3, 0xe9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) recvmmsg$auto(0x3, 0x0, 0x10088, 0x6, 0x0) unshare$auto(0x40000080) 567.536003ms ago: executing program 3 (id=5117): r0 = syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)={0x2, 0x80, 0xffff, 0x5, 0x0, 0x4b47, 0x3, 0x80005, @stream_id=0x7, 0x2004b, 0xc, 0x0, [{0xbb, 0x4, 0x800}, {0x0, 0x9, 0x5}, {0x4, 0x58dc, 0x101}]}) pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) settimeofday$auto(&(0x7f0000000540)={0x5, 0x5}, &(0x7f0000000400)={0x7fffffff, 0x3}) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video57\x00', 0x202000, 0x0) shmctl$auto_IPC_RMID(0x6, 0x0, &(0x7f0000000300)={{0x6, 0x0, 0x0, 0x1, 0x80, 0x3, 0x8}, 0xfffffff8, 0x1ff, 0x800, 0x4, @raw=0x3, @inferred=0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)="5e96d4c4c9f11b902b31b587288ce68456d3372d700a0df0db", 0x0}) setfsgid$auto(r2) r4 = socket(0x2, 0x1, 0x106) sendmsg$auto_TIPC_NL_NET_GET(r4, &(0x7f0000006140)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000006100)={&(0x7f0000000580)={0x1bb4, r0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x312, 0x1, 0x0, 0x1, [@generic="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", @nested={0x15c, 0x141, 0x0, 0x1, [@generic="402e03988cd317d33323985861f2bdc831c4e9bc5c8ad2ecb74d97b6b701d221c80451cf828686e07f21685cc7330131f7f6112f738513409649563c250c116ad36247b13ecbcde687959ef3b6396a04a61045397e616734b7ea83a59a52c62da32c46f553d664ad58ab8bf2ff5e7904af7ff35fcaef4be8a497acb4543710863a02664c30b69f79d62882d42dae0be82f9d59e331b1001ca217e0a123efd13279efbda37922f6f2ae80e65cc91f1d5f49ac2ba07b377063aa05adc167a178acb63d3ab433ad6a3fd2178a5503", @typed={0x8, 0x4a, 0x0, 0x0, @pid=r3}, @generic="a6f882e5e5c05219173313ada620234c286f554ad89eb60f9177f1ed3500c68374eaf67f07b68fd10337135a4a5d19b4d18c8a3c610ad1e1d731f986245557f60294782ea751fc0d9bce9147c3e877c92e8f18b1058bf9d638cf5a03e117cf51303864cf6672ad62537d6f7bd331469a3284be762445cfb5c9713a87b830f48427893b"]}, @typed={0xc, 0xd0, 0x0, 0x0, @u64}, @generic="ad324a545fd88fed7ee611665e0b260c2fb559ac3a733086fb1facf9ff13b1e7aecdcd3ea05c81e8d170ae6228e4fbf59fbc9fc6f5bd74e78f665fe703cff62fccc15cfdfb1b9849830ba4278d0f81eb36fad6f139eaa6f7ea"]}, @TIPC_NLA_UNSPEC={0x28, 0x0, "307ec59cf1360ab7874d12c3e553d59c569380ac8cf96e9275e5747193d1cba260a8db75"}, @TIPC_NLA_SOCK={0x218, 0x2, 0x0, 0x1, [@typed={0x8, 0x101, 0x0, 0x0, @fd}, @nested={0x9, 0x54, 0x0, 0x1, [@generic="d2fabac299"]}, @typed={0x14, 0x12a, 0x0, 0x0, @ipv6=@local}, @generic="e9b1eb1f3ff4f3faaf86a41d15fa15ab97363f2e1eb286628f9075a7a4604a87f8ef32254fd1d01e670de0e41e42c97a837d3258386dd074276e867b3bcd0f3d0858466439cd2dce86d0c5efa409b2134bf4e826e0408b8e595af0c47d659051e8951aaa8705aeacd3103f6728dd903ab2584ed027bfe5f57c34e789c878b70a5a42851d3c839c3539c63095f2ea5ac9", @nested={0x15c, 0xd3, 0x0, 0x1, [@generic="269ded31cbb4da2eb2a4257953e9f40f5e98cce77d48b376ca6b1229e436ec1a39163967cb28298aa14902d9e7168ffa5613c6ec2b92947bb6ff79187fa485bfdea8eeb518e31feb86ab40c2f85e87741e8b1ae595ec10508a71f3e6069b325e33abaa023ca99278fbfc8e1317a61d3f4b655e00d2b53f3f2c9f16d350a7ab427c96da297ae1e66f7a76472304699aee904c046c21a0b20aa012b0cc1aa8f46510fb9471d28f101b5aedb372bfff02e98288cb155286c3cd514abfea", @typed={0x8, 0xf3, 0x0, 0x0, @uid=r1}, @typed={0xb, 0x156, 0x0, 0x0, @str='TIPCv2\x00'}, @nested={0x4, 0x110}, @generic="c647d64732a3eef09e80230227ab746ad6549e32a8ed3d95a4c55e848b3709705744caa77d222e46e49adeab057182a84838344bcfd7ef137137b3e339ab3720dca304810c54b33032ad472b57c387822902fe46858cf29b6372878fc3837a03de1ebe2ac5b9cbdcb9860e57224a079fe493cd32f597b55b", @nested={0x4, 0x141}, @typed={0x8, 0xef, 0x0, 0x0, @u32=0x5}]}]}, @TIPC_NLA_SOCK={0x1210, 0x2, 0x0, 0x1, [@typed={0xc, 0xf1, 0x0, 0x0, @u64=0x8}, @nested={0x106f, 0xd0, 0x0, 0x1, [@generic="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", @nested={0x4, 0x10a}, @generic="1690681ae17d5f000f20b19a4214bfcc46f384944755012cd4b6190aab256cb73f3205f3931cbd6f49f4168052553ca1a812ae94f7b646227ee72b6938bda87f05c0a0c82c6ff45955e449e7e3b2fcf0aa80d31012e9f413a0210ef1fae1d90460d57accf1e66ed783784ac8ae78715df59469b5865e35ddab7e3322646cdf00414abcf4275220ba770d68a47631a35d57467ef5c523dfaf0602c00ed89c06a6e21f618b138a5661df9abbc5e8"]}, @nested={0x188, 0x156, 0x0, 0x1, [@generic="37120863dbb5235d84219e298ffcc29163ea1b9bb3bc7ea6f4cf11726a44b143c21c9565c168cc0d4dadea61b6e424e56f8b2053ab7813179af8dc496d550f4ba354b03c9a473cd05e6382a49f1447719d50a4df912dcf108ed76095be0c490f801cf1e3f2615d9af55bfd1665426eea463fa5fae887f9f5265900ef9de958b020f4bffa", @typed={0x8, 0x72, 0x0, 0x0, @uid=r1}, @generic="24beb86f216d64cade2062492bf23ca37b4201d9761d2ec64681e374b38e3ef38239d2ea6cd9017051eda096870462c23de10dd4fde7850872f7b5f4f38b887d93637c201bff717942f49bfcafc2d7341655d697fd61e5f718f581e33169e66266646235ef03ea637b28f1a3e7216d9bc98726d4ac0e8ff7a755de36449fe79988f822aab675f13f5a3e3379eefbaa56704b72e442764183e32fb29f9dd37cea5fa57a2cb046e44e485d95493dff9ef8f9", @generic="85feae18ecc009d422419d92be08473edad605b6f75baf145dce6974d02c2d1bf8639868202913bb830fbedc6a2545a1e34487da88253e5ff5062f", @typed={0x8, 0x59, 0x0, 0x0, @u32=0x81}, @nested={0x4, 0x15e}]}, @typed={0x8, 0x67, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @TIPC_NLA_SOCK={0x244, 0x2, 0x0, 0x1, [@typed={0x4, 0xe4}, @nested={0x1c2, 0x92, 0x0, 0x1, [@typed={0x14, 0xda, 0x0, 0x0, @ipv6=@local}, @nested={0x4, 0x1c}, @generic, @generic="3c0735718458d3b39e6e98f5562fbaa41d98946e4ddf11f7121aabd43effa31b260f37a01d7a004b245ab63f2c3a137da892c75a5813ab11ebbcc0855e2872a9bffda817c70aae70a5771215b4f649fd38f5854f9e9eed107f83fe5f25ca18fd0d8565a458cecc7ecfe8e16267fc3a5c4f1f9e0aa5802b36236aac5ee68aa2bd391ff7804954a13f9f528ba4d458b457e9f42ae59e2f162457d9b5e6017290bef831adf3f1d8e98570c67db3da76dafd53b53621489bf35a7cc5ae173231e32827cb636ba8a48834196308be6b314e5a2c6094c323ade8ea547b005113230be4d380aa30f6", @generic="e95fe0d2d3ca120d8d57c559f66108eff180fcaa74bbdfc86cbad40f58d5be1243e8c4a69d1409ed7b2edeab4d7d09f1806dfa593daebb07e6180cc35e1792092da1f51a023fca740442dcb8267c1fe217eadc7dc1ffdbc9e911649bd7c98bdbcabdb4f9f97e23865d33e444a4cd155bf52808a743dbc1f13fb89965fff83dad151ff51ce4b52f3b51c791c1f7718963a941a2252d3662a33279602e769fddb835eaa5f9c243e96624bc330f17", @typed={0x14, 0x5e, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, @nested={0x77, 0x77, 0x0, 0x1, [@typed={0x4, 0x138}, @generic="3b166050650e8826f2a95dfed69747ed5c2e6709e526f56bc27a8a08e905e281c354bbce968d25be8bd8cb075071c008cf404900ceedb58eeec1703d936aa5222dfa80e756d9a6fde3ff5a95bd6f8a68fa73c014e4b49e9bbc1bcc81c3569cdf3007ca67084a5e01d129e0d514654a"]}]}, @TIPC_NLA_MON={0x1f8, 0x9, 0x0, 0x1, [@nested={0x99, 0x108, 0x0, 0x1, [@typed={0x8, 0x105, 0x0, 0x0, @ipv4=@multicast2}, @generic="9b42c07bdeec745bd1fc28ed927b89bb0750e4f02426e839a75119eecb9ee499a7e91b2ebfff5ef9d2d502bd0afac97057f9e2c502b5df3419718467eb4a89969df955bdb6cc82ea65b178da618336", @generic="c2b9b52338e0f3957cb9abf22f211cd39900c31c4587c934f5739413aef62b5c12b86f699dd36aee922d9dabe33866b1f8bd8b16ebf977ce41608e609e01"]}, @typed={0x4, 0x92, 0x0, 0x0, @binary}, @nested={0x154, 0xf0, 0x0, 0x1, [@generic="45981a6646d912d1b8ff9e1283e3ba8330fee212d630ddbf4e38a08fc703eb94007d5c19568087911ff1445e65664b9def9e8d5b85f87b150eaab94e3d9dd5ef8258e1e3bce172ff9201d3bff505f7bf6df9f010df076276a9767684fc1f588ea002c4053af7f43488cef305af5fddf44f564f18683f5703b874a7984df894", @generic="56750b52d3bc07d52f4850ec79f861dbf741fbf9d6eb633a30c2607d751317808eac6572ddf552fa0d09338cf2c0739e8c3ada40a380fd232e65aeab73ff5b39e439aa18c79baa02357f8acc12ec1d8ca6647f06a1f3e27db0c224e21c6d97b1ca74913fb4f18615f534c794943a285d03fee797d34172cfec43b9e6f5175784078857a039066e55a29d6236cf2663f936b52361a594940f9b7e438aad218c7b5de4e3ff10b3d3b383bd272b5936c430dfbadb592ca7358cfaa1a38a95eb67887583bad243bb80eb91", @generic="e9748bc5195cc1a8"]}]}]}, 0x1bb4}, 0x1, 0x0, 0x0, 0x4000000}, 0x40400c1) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 161.978813ms ago: executing program 5 (id=5118): ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000000240)='#', 0x4b47, 0x3, 0x80005, @stream_id=0x7, 0x2004b, 0xc, 0x0}) pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) settimeofday$auto(&(0x7f0000000540)={0x5, 0x5}, &(0x7f0000000400)={0x7fffffff, 0x3}) shmctl$auto_IPC_RMID(0x6, 0x0, &(0x7f0000000300)={{0x6, 0x0, 0x0, 0x1, 0x80, 0x3, 0x8}, 0xfffffff8, 0x1ff, 0x800, 0x4, @raw=0x3, @inferred=0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)="5e96d4c4c9f11b902b31b587288ce68456d3372d700a0df0db", 0x0}) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), 0xffffffffffffffff) set_mempolicy$auto(0x8003, &(0x7f0000000280)=0x7c, 0x4) mseal$auto(0x0, 0x7dda, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 47.692202ms ago: executing program 4 (id=5119): openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0xffffffffffffffff, 0x202000a, 0x3, 0xeb1, 0xffffffffffffffff, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x202, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/zram-control/hot_add\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, r0, 0x8000) fsconfig$auto(0xffffffffffffffff, 0x1, &(0x7f0000000000)='4\x93\x03\x00\x04\x00\x00', 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x25, 0x2, 0xe) r1 = open(&(0x7f0000000000)='./file0\x00', 0x26142, 0x4b) r2 = open(&(0x7f0000000040)='./file0\x00', 0x4b41, 0x198) fallocate$auto(r2, 0x0, 0x7, 0x4cbd5d) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x283, 0xe}, 0x18) fremovexattr$auto(r3, &(0x7f0000000000)='system.posix_a)\xb0_access\x00') pwritev2$auto(r1, &(0x7f0000000300)={&(0x7f0000000240), 0x8}, 0x8, 0xc3, 0x1ff, 0xfa) ioctl$auto_FS_IOC_SETFLAGS2(r1, 0x40086602, 0x0) 0s ago: executing program 1 (id=5120): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) write$auto(0xffffffffffffffff, &(0x7f0000000180)='7k\x00\x00\x00\x00X\xb9\x0e\x11\xfb\x00\x00\x00\x00&!\x8f-\xfb\xea=\xc0\\\xec\xe7D\xe5V\xf1b\xa0\x9a\xa1\x88\xb4\x96\xf5\\\xad4\t\xca\x03\xe4\x15\v]\x00'/58, 0x82) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000) io_uring_setup$auto(0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir$auto(&(0x7f0000000180)='}[,&*}\x00', 0x7ffe) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='}[,&*}\x00', &(0x7f0000000080)={0x220000, 0x0, 0x10}, 0x18) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x34d802, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x121042, 0x0) write$auto(r0, &(0x7f0000000140)='0\x00d1L\xff\x15\xba\xa1\xbe\xd2\xf5\x1fram\xe3^\xa1v\x9b\x00\xdb\x95\x87\x9c\xd7\xe7\x11\xb5\x10\xb3q\xcc\xc74c\t\xb5eQ\x18\x1eT\x9a9\x80\x7f\xcb\xae\xadv[\x05\xbb\xb2=\xd3de\xa5\xbb$2\xe3B00\x1f=)=\xff?lm\x9b\xc9~\x10\xc0\xd8DK\xedf\x17\xf2\x8bzH\xacv\x1c\xf9\x19\x87\xec\xad\x15\x96\x89\x93\x7f\xca\xde\xd2\xaaY\xe8\xe4\x8d\xd7\x89\x80\x93\xaf\xf3\xc4\x1a\x94\xe6\xa4\xe5\x80\x83p\x9d\x04f\xb3\xc4\xaa\xe7\x95Xe\xfc;;\xf0(\xdb\x03\xcd)\x81\xb3ta{\x80\xb8\xbb\xeaS\xa8\x89\xec\x90\x83]u\xb8\x97\'\x80\xd0\xe8G\x01\x11\xf0\xd9\x12\xe6\xb6Kb\xab\xa5\xd5\xa4\xaf.\x90w\xfc\xbd\x8e\xb1x\xf2\xfd\xdd@6\xa1Gc\xa5`\xc5\x8cs\x05\xf3um~\x9a_\x14+e\xa68\xdaW\x9b\xd4\xd0Q\xb1tG\x00\x00\x00\x00\x00\x00\x00', 0x9) kernel console output (not intermixed with test programs): make_ready+0xeb/0x1b0 [ 1399.823572][T25327] snd_pcm_oss_sync+0x1de/0x840 [ 1399.823614][T25327] snd_pcm_oss_release+0x238/0x300 [ 1399.823652][T25327] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1399.823691][T25327] __fput+0x3ff/0xb50 [ 1399.823730][T25327] task_work_run+0x150/0x240 [ 1399.823763][T25327] ? __pfx_task_work_run+0x10/0x10 [ 1399.823801][T25327] exit_to_user_mode_loop+0x1d8/0x700 [ 1399.823840][T25327] ? rcu_is_watching+0x13/0xc0 [ 1399.823867][T25327] do_syscall_64+0x603/0x770 [ 1399.823905][T25327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1399.823931][T25327] RIP: 0033:0x7f3a6339e159 [ 1399.823951][T25327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1399.823976][T25327] RSP: 002b:00007f3a641f1028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1399.824000][T25327] RAX: 0000000000000000 RBX: 00007f3a63626090 RCX: 00007f3a6339e159 [ 1399.824016][T25327] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1399.824031][T25327] RBP: 00007f3a6343503b R08: 0000000000000000 R09: 0000000000000000 [ 1399.824046][T25327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1399.824062][T25327] R13: 00007f3a63626128 R14: 00007f3a63626090 R15: 00007ffda37ecc98 [ 1399.824093][T25327] [ 1402.588773][T25359] bridge0: port 3(team0) entered blocking state [ 1402.588849][T25359] bridge0: port 3(team0) entered disabled state [ 1402.588987][T25359] team0: entered allmulticast mode [ 1402.589008][T25359] team_slave_0: entered allmulticast mode [ 1402.589030][T25359] team_slave_1: entered allmulticast mode [ 1402.636555][T25359] team0: entered promiscuous mode [ 1402.636621][T25359] team_slave_0: entered promiscuous mode [ 1402.636784][T25359] team_slave_1: entered promiscuous mode [ 1402.662809][T25359] bridge0: port 3(team0) entered blocking state [ 1402.662907][T25359] bridge0: port 3(team0) entered forwarding state [ 1407.206070][T25420] netlink: zone id is out of range [ 1407.218167][T25420] netlink: zone id is out of range [ 1407.274384][T25420] netlink: set zone limit has 8 unknown bytes [ 1408.456774][T25436] FAULT_INJECTION: forcing a failure. [ 1408.456774][T25436] name failslab, interval 1, probability 0, space 0, times 0 [ 1408.482057][T25436] CPU: 0 UID: 0 PID: 25436 Comm: syz.1.3830 Tainted: G L syzkaller #0 PREEMPT(full) [ 1408.482098][T25436] Tainted: [L]=SOFTLOCKUP [ 1408.482107][T25436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1408.482123][T25436] Call Trace: [ 1408.482132][T25436] [ 1408.482142][T25436] dump_stack_lvl+0x100/0x190 [ 1408.482181][T25436] should_fail_ex.cold+0x5/0xa [ 1408.482214][T25436] should_failslab+0xc2/0x120 [ 1408.482248][T25436] __kmalloc_noprof+0xfc/0x840 [ 1408.482276][T25436] ? acpi_ns_get_normalized_pathname+0x95/0x250 [ 1408.482317][T25436] acpi_ns_get_normalized_pathname+0x95/0x250 [ 1408.482351][T25436] acpi_ds_call_control_method+0x5d4/0xab0 [ 1408.482484][T25436] acpi_ps_parse_aml+0xacd/0x1120 [ 1408.482512][T25436] acpi_ps_execute_method+0x5c4/0xe90 [ 1408.482546][T25436] acpi_ns_evaluate+0x640/0x1670 [ 1408.482581][T25436] acpi_evaluate_object+0x420/0xe00 [ 1408.482617][T25436] ? __kvmalloc_node_noprof+0x35b/0x9b0 [ 1408.482644][T25436] ? seq_read_iter+0x819/0x1270 [ 1408.482668][T25436] ? kernfs_fop_read_iter+0x46c/0x610 [ 1408.482715][T25436] ? vfs_read+0x82e/0xb40 [ 1408.482743][T25436] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 1408.482779][T25436] ? lock_acquire+0x1d1/0x380 [ 1408.482814][T25436] ? kernfs_seq_start+0x4f/0x2a0 [ 1408.482859][T25436] acpi_evaluate_integer+0xdf/0x220 [ 1408.482893][T25436] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 1408.482937][T25436] ? __pfx_status_show+0x10/0x10 [ 1408.482972][T25436] status_show+0xa0/0x120 [ 1408.483007][T25436] ? __pfx_status_show+0x10/0x10 [ 1408.483050][T25436] dev_attr_show+0x52/0xa0 [ 1408.483089][T25436] ? __pfx_dev_attr_show+0x10/0x10 [ 1408.483125][T25436] sysfs_kf_seq_show+0x217/0x3f0 [ 1408.483156][T25436] seq_read_iter+0x32f/0x1270 [ 1408.483180][T25436] ? lock_acquire+0x1d1/0x380 [ 1408.483226][T25436] kernfs_fop_read_iter+0x46c/0x610 [ 1408.483266][T25436] ? rw_verify_area+0xce/0x6d0 [ 1408.483305][T25436] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 1408.483347][T25436] vfs_read+0x82e/0xb40 [ 1408.483375][T25436] ? __pfx_vfs_read+0x10/0x10 [ 1408.483398][T25436] ? find_held_lock+0x2b/0x80 [ 1408.483442][T25436] ksys_read+0x12a/0x250 [ 1408.483467][T25436] ? __pfx_ksys_read+0x10/0x10 [ 1408.483500][T25436] do_syscall_64+0x121/0x770 [ 1408.483540][T25436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.483566][T25436] RIP: 0033:0x7f7884b9e159 [ 1408.483587][T25436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1408.483611][T25436] RSP: 002b:00007f7882df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1408.483636][T25436] RAX: ffffffffffffffda RBX: 00007f7884e25fa0 RCX: 00007f7884b9e159 [ 1408.483652][T25436] RDX: 000000000000002e RSI: 0000200000000000 RDI: 0000000000000006 [ 1408.483668][T25436] RBP: 00007f7884c3503b R08: 0000000000000000 R09: 0000000000000000 [ 1408.483688][T25436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1408.483703][T25436] R13: 00007f7884e26038 R14: 00007f7884e25fa0 R15: 00007ffd648d9ef8 [ 1408.483735][T25436] [ 1408.646718][T25436] ACPI Error: Could not allocate 10 bytes (20260408/nsnames-314) [ 1413.709328][T21608] Bluetooth: hci3: unexpected event 0x33 length: 124 > 10 [ 1415.393303][T25520] FAULT_INJECTION: forcing a failure. [ 1415.393303][T25520] name failslab, interval 1, probability 0, space 0, times 0 [ 1415.417572][T25520] CPU: 0 UID: 0 PID: 25520 Comm: syz.0.3840 Tainted: G L syzkaller #0 PREEMPT(full) [ 1415.417614][T25520] Tainted: [L]=SOFTLOCKUP [ 1415.417623][T25520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1415.417638][T25520] Call Trace: [ 1415.417647][T25520] [ 1415.417657][T25520] dump_stack_lvl+0x100/0x190 [ 1415.417697][T25520] should_fail_ex.cold+0x5/0xa [ 1415.417730][T25520] should_failslab+0xc2/0x120 [ 1415.417763][T25520] __kmalloc_noprof+0xfc/0x840 [ 1415.417790][T25520] ? acpi_ut_trace_ptr+0x1d2/0x2a0 [ 1415.417816][T25520] ? acpi_ex_allocate_name_string+0x8c/0x340 [ 1415.417920][T25520] acpi_ex_allocate_name_string+0x8c/0x340 [ 1415.417952][T25520] acpi_ex_get_name_string+0x322/0xb90 [ 1415.417985][T25520] ? __pfx_acpi_ex_get_name_string+0x10/0x10 [ 1415.418022][T25520] acpi_ds_create_operand+0x3fd/0xc20 [ 1415.418062][T25520] ? __pfx_acpi_ds_create_operand+0x10/0x10 [ 1415.418100][T25520] ? acpi_ut_trace_ptr+0x1d2/0x2a0 [ 1415.418127][T25520] ? __pfx_acpi_ut_trace_ptr+0x10/0x10 [ 1415.418151][T25520] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 1415.418175][T25520] ? __asan_memset+0x23/0x50 [ 1415.418199][T25520] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 1415.418229][T25520] acpi_ds_evaluate_name_path+0x158/0x4a0 [ 1415.418269][T25520] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 1415.418311][T25520] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 1415.418350][T25520] ? acpi_ut_trace_ptr+0x141/0x2a0 [ 1415.418381][T25520] acpi_ds_exec_end_op+0xb78/0x1e60 [ 1415.418426][T25520] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 1415.418465][T25520] acpi_ps_parse_loop+0x5e1/0x26e0 [ 1415.418513][T25520] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 1415.418559][T25520] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 1415.418588][T25520] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 1415.418614][T25520] ? acpi_ut_create_thread_state+0x6d/0x170 [ 1415.418664][T25520] acpi_ps_parse_aml+0x81e/0x1120 [ 1415.418695][T25520] acpi_ps_execute_method+0x5c4/0xe90 [ 1415.418728][T25520] acpi_ns_evaluate+0x640/0x1670 [ 1415.418765][T25520] acpi_evaluate_object+0x420/0xe00 [ 1415.418801][T25520] ? __kvmalloc_node_noprof+0x35b/0x9b0 [ 1415.418829][T25520] ? seq_read_iter+0x819/0x1270 [ 1415.418855][T25520] ? kernfs_fop_read_iter+0x46c/0x610 [ 1415.418894][T25520] ? vfs_read+0x82e/0xb40 [ 1415.418921][T25520] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 1415.418959][T25520] ? lock_acquire+0x1d1/0x380 [ 1415.418993][T25520] ? kernfs_seq_start+0x4f/0x2a0 [ 1415.419038][T25520] acpi_evaluate_integer+0xdf/0x220 [ 1415.419070][T25520] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 1415.419115][T25520] ? __pfx_status_show+0x10/0x10 [ 1415.419150][T25520] status_show+0xa0/0x120 [ 1415.419186][T25520] ? __pfx_status_show+0x10/0x10 [ 1415.419230][T25520] dev_attr_show+0x52/0xa0 [ 1415.419268][T25520] ? __pfx_dev_attr_show+0x10/0x10 [ 1415.419304][T25520] sysfs_kf_seq_show+0x217/0x3f0 [ 1415.419336][T25520] seq_read_iter+0x32f/0x1270 [ 1415.419361][T25520] ? lock_acquire+0x1d1/0x380 [ 1415.419407][T25520] kernfs_fop_read_iter+0x46c/0x610 [ 1415.419448][T25520] ? rw_verify_area+0xce/0x6d0 [ 1415.419486][T25520] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 1415.419537][T25520] vfs_read+0x82e/0xb40 [ 1415.419566][T25520] ? __pfx_vfs_read+0x10/0x10 [ 1415.419590][T25520] ? find_held_lock+0x2b/0x80 [ 1415.419637][T25520] ksys_read+0x12a/0x250 [ 1415.419662][T25520] ? __pfx_ksys_read+0x10/0x10 [ 1415.419697][T25520] do_syscall_64+0x121/0x770 [ 1415.419737][T25520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1415.419765][T25520] RIP: 0033:0x7f533f79e159 [ 1415.419786][T25520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1415.419811][T25520] RSP: 002b:00007f5340672028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1415.419838][T25520] RAX: ffffffffffffffda RBX: 00007f533fa25fa0 RCX: 00007f533f79e159 [ 1415.419856][T25520] RDX: 000000000000002e RSI: 0000200000000000 RDI: 0000000000000006 [ 1415.419872][T25520] RBP: 00007f533f83503b R08: 0000000000000000 R09: 0000000000000000 [ 1415.419888][T25520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1415.419905][T25520] R13: 00007f533fa26038 R14: 00007f533fa25fa0 R15: 00007ffc14302848 [ 1415.419938][T25520] [ 1415.629698][T25520] ACPI Error: Could not allocate size 7 (20260408/exnames-68) [ 1415.629884][T25520] ACPI Error: Aborting method \_SB.LNKB._STA due to previous error (AE_NO_MEMORY) (20260408/psparse-543) [ 1420.264122][T21608] Bluetooth: hci0: unexpected event 0x33 length: 124 > 10 [ 1421.647046][T25602] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3856'. [ 1423.023304][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.023377][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.052680][T21608] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 1428.246465][T21608] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 1432.713510][T21608] Bluetooth: hci2: unexpected event 0x33 length: 124 > 10 [ 1434.178391][T21608] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 1434.265945][T21608] Bluetooth: hci1: unexpected event 0x33 length: 124 > 10 [ 1434.369851][T25761] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3887'. [ 1438.816935][T25806] openvswitch: HfR: Dropping previously announced user features [ 1440.796286][T21608] Bluetooth: hci0: unexpected event 0x33 length: 124 > 10 [ 1441.554602][T25850] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3900'. [ 1442.210964][T21608] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 1442.421137][T25854] FAULT_INJECTION: forcing a failure. [ 1442.421137][T25854] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1442.436481][T25854] CPU: 0 UID: 0 PID: 25854 Comm: syz.0.3902 Tainted: G L syzkaller #0 PREEMPT(full) [ 1442.436523][T25854] Tainted: [L]=SOFTLOCKUP [ 1442.436532][T25854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1442.436549][T25854] Call Trace: [ 1442.436558][T25854] [ 1442.436568][T25854] dump_stack_lvl+0x100/0x190 [ 1442.436608][T25854] should_fail_ex.cold+0x5/0xa [ 1442.436640][T25854] get_futex_key+0x1d0/0x14f0 [ 1442.436684][T25854] ? __pfx_get_futex_key+0x10/0x10 [ 1442.436724][T25854] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 1442.436776][T25854] futex_wait_setup+0x91/0x540 [ 1442.436815][T25854] __futex_wait+0x19f/0x300 [ 1442.436847][T25854] ? __pfx___futex_wait+0x10/0x10 [ 1442.436876][T25854] ? __pfx_try_to_wake_up+0x10/0x10 [ 1442.436913][T25854] ? futex_hash+0x311/0x400 [ 1442.436954][T25854] ? __pfx_futex_wake_mark+0x10/0x10 [ 1442.436989][T25854] ? find_held_lock+0x2b/0x80 [ 1442.437015][T25854] ? futex_wake+0x4ea/0x5e0 [ 1442.437051][T25854] futex_wait+0xe6/0x370 [ 1442.437081][T25854] ? __pfx_futex_wait+0x10/0x10 [ 1442.437126][T25854] do_futex+0x265/0x440 [ 1442.437152][T25854] ? __pfx_do_futex+0x10/0x10 [ 1442.437176][T25854] ? __pfx___might_resched+0x10/0x10 [ 1442.437208][T25854] ? blkcg_maybe_throttle_current+0x5e7/0xeb0 [ 1442.437349][T25854] ? _raw_spin_unlock_irq+0x23/0x50 [ 1442.437388][T25854] __x64_sys_futex+0x34f/0x4d0 [ 1442.437418][T25854] ? __pfx___x64_sys_futex+0x10/0x10 [ 1442.437444][T25854] ? rcu_is_watching+0x13/0xc0 [ 1442.437477][T25854] do_syscall_64+0x121/0x770 [ 1442.437517][T25854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1442.437543][T25854] RIP: 0033:0x7f533f79e159 [ 1442.437564][T25854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1442.437590][T25854] RSP: 002b:00007f53406720e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1442.437616][T25854] RAX: ffffffffffffffda RBX: 00007f533fa25fa8 RCX: 00007f533f79e159 [ 1442.437633][T25854] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f533fa25fa8 [ 1442.437649][T25854] RBP: 00007f533fa25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1442.437666][T25854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1442.437682][T25854] R13: 00007f533fa26038 R14: 00007ffc14302760 R15: 00007ffc14302848 [ 1442.437713][T25854] [ 1443.679307][T25860] netlink: 186 bytes leftover after parsing attributes in process `syz.2.3904'. [ 1444.154841][T25871] HfR: entered promiscuous mode [ 1444.653918][T25882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3911'. [ 1445.337423][T25884] FAULT_INJECTION: forcing a failure. [ 1445.337423][T25884] name failslab, interval 1, probability 0, space 0, times 0 [ 1445.386028][T25884] CPU: 0 UID: 0 PID: 25884 Comm: syz.2.3911 Tainted: G L syzkaller #0 PREEMPT(full) [ 1445.386071][T25884] Tainted: [L]=SOFTLOCKUP [ 1445.386081][T25884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1445.386101][T25884] Call Trace: [ 1445.386111][T25884] [ 1445.386121][T25884] dump_stack_lvl+0x100/0x190 [ 1445.386160][T25884] should_fail_ex.cold+0x5/0xa [ 1445.386187][T25884] ? lock_acquire+0x1d1/0x380 [ 1445.386225][T25884] should_failslab+0xc2/0x120 [ 1445.386258][T25884] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 1445.386290][T25884] ? zswap_store+0xc6d/0x2e70 [ 1445.386403][T25884] zswap_store+0xc6d/0x2e70 [ 1445.386454][T25884] ? __pfx_zswap_store+0x10/0x10 [ 1445.386496][T25884] ? lock_acquire+0x1d1/0x380 [ 1445.386535][T25884] ? do_raw_spin_lock+0x128/0x260 [ 1445.386576][T25884] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1445.386616][T25884] ? find_held_lock+0x2b/0x80 [ 1445.386641][T25884] ? swap_writeout+0xdd8/0x1b20 [ 1445.386680][T25884] ? swap_writeout+0xdd8/0x1b20 [ 1445.386726][T25884] swap_writeout+0xde0/0x1b20 [ 1445.386774][T25884] shrink_folio_list+0x4ffb/0x5e40 [ 1445.386847][T25884] ? __pfx_shrink_folio_list+0x10/0x10 [ 1445.386881][T25884] ? do_raw_spin_lock+0x128/0x260 [ 1445.386933][T25884] ? clockevents_program_event+0x23e/0x820 [ 1445.386961][T25884] ? clockevents_program_event+0x23e/0x820 [ 1445.387013][T25884] ? __lock_acquire+0x5c0/0x1f40 [ 1445.387047][T25884] ? __css_rstat_updated+0x1ce/0x590 [ 1445.387086][T25884] ? __pfx___css_rstat_updated+0x10/0x10 [ 1445.387126][T25884] reclaim_folio_list+0xe9/0x5e0 [ 1445.387166][T25884] ? __pfx_reclaim_folio_list+0x10/0x10 [ 1445.387200][T25884] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 1445.387262][T25884] ? lru_gen_update_size+0x431/0xe20 [ 1445.387300][T25884] ? lru_gen_del_folio+0x382/0x5f0 [ 1445.387334][T25884] reclaim_pages+0x428/0x5e0 [ 1445.387372][T25884] ? __pfx_reclaim_pages+0x10/0x10 [ 1445.387405][T25884] ? find_held_lock+0x2b/0x80 [ 1445.387432][T25884] ? madvise_cold_or_pageout_pte_range+0xb8e/0x27b0 [ 1445.387476][T25884] madvise_cold_or_pageout_pte_range+0x15b5/0x27b0 [ 1445.387530][T25884] ? rcu_read_unlock+0x17/0x60 [ 1445.387569][T25884] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 1445.387609][T25884] ? __mod_zone_page_state+0xdb/0x190 [ 1445.387653][T25884] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 1445.387692][T25884] walk_pgd_range+0xbef/0x1e00 [ 1445.387727][T25884] ? find_held_lock+0x2b/0x80 [ 1445.387764][T25884] ? __pfx_walk_pgd_range+0x10/0x10 [ 1445.387792][T25884] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 1445.387834][T25884] __walk_page_range+0x171/0x850 [ 1445.387873][T25884] walk_page_range_vma_unsafe+0x209/0x8f0 [ 1445.387906][T25884] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 1445.387939][T25884] ? find_held_lock+0x2b/0x80 [ 1445.387965][T25884] ? mlock_drain_local+0x254/0x4e0 [ 1445.387988][T25884] ? mlock_drain_local+0x254/0x4e0 [ 1445.388016][T25884] walk_page_range_vma+0x63/0x90 [ 1445.388045][T25884] madvise_pageout+0x29e/0x5b0 [ 1445.388079][T25884] ? __lock_acquire+0x5c0/0x1f40 [ 1445.388113][T25884] ? __pfx_madvise_pageout+0x10/0x10 [ 1445.388161][T25884] ? find_held_lock+0x2b/0x80 [ 1445.388186][T25884] ? mt_find+0x728/0x9b0 [ 1445.388224][T25884] ? mt_find+0x728/0x9b0 [ 1445.388264][T25884] madvise_vma_behavior+0x48b/0x2350 [ 1445.388306][T25884] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 1445.388349][T25884] ? find_vma_prev+0xd8/0x150 [ 1445.388388][T25884] ? find_vma+0xbf/0x140 [ 1445.388415][T25884] ? __pfx_find_vma+0x10/0x10 [ 1445.388463][T25884] madvise_walk_vmas+0x30e/0xc50 [ 1445.388506][T25884] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 1445.388551][T25884] ? __pfx_futex_wake_mark+0x10/0x10 [ 1445.388587][T25884] ? lock_acquire+0x1d1/0x380 [ 1445.388625][T25884] madvise_do_behavior+0x1ea/0x510 [ 1445.388664][T25884] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1445.388702][T25884] ? down_read+0x13b/0x4c0 [ 1445.388755][T25884] do_madvise+0x238/0x290 [ 1445.388790][T25884] ? __pfx_do_madvise+0x10/0x10 [ 1445.388825][T25884] ? do_futex+0x190/0x440 [ 1445.388855][T25884] ? do_raw_spin_lock+0x128/0x260 [ 1445.388914][T25884] __x64_sys_madvise+0xa9/0x110 [ 1445.388950][T25884] ? lockdep_hardirqs_on+0x7d/0x110 [ 1445.388986][T25884] do_syscall_64+0x121/0x770 [ 1445.389025][T25884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1445.389050][T25884] RIP: 0033:0x7f84fa99e159 [ 1445.389071][T25884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1445.389096][T25884] RSP: 002b:00007f84fb8af028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1445.389121][T25884] RAX: ffffffffffffffda RBX: 00007f84fac26180 RCX: 00007f84fa99e159 [ 1445.389138][T25884] RDX: 0000000000000015 RSI: ff7fffffffff0001 RDI: 0000000000000000 [ 1445.389154][T25884] RBP: 00007f84faa3503b R08: 0000000000000000 R09: 0000000000000000 [ 1445.389169][T25884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1445.389185][T25884] R13: 00007f84fac26218 R14: 00007f84fac26180 R15: 00007ffef4cabd68 [ 1445.389217][T25884] [ 1450.679401][T25934] netlink: 186 bytes leftover after parsing attributes in process `syz.1.3919'. [ 1457.584727][T26009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3932'. [ 1460.227251][T26036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3946'. [ 1466.066180][T26075] Bluetooth: hci2: command 0x2016 tx timeout [ 1466.302343][T26119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3951'. [ 1468.891419][T26134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3963'. [ 1471.643888][T26166] binder: BINDER_SET_CONTEXT_MGR already set [ 1471.652168][T26166] binder: 26163:26166 ioctl 4018620d 4 returned -16 [ 1472.844412][T26179] HfR: entered promiscuous mode [ 1475.587410][T26219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3976'. [ 1478.475054][T26257] binder: BINDER_SET_CONTEXT_MGR already set [ 1478.475089][T26257] binder: 26255:26257 ioctl 4018620d 4 returned -16 [ 1478.923360][T26263] openvswitch: HfR: Dropping previously announced user features [ 1480.405319][T26281] openvswitch: HfR: Dropping previously announced user features [ 1480.817333][T26287] vcan0: tx drop: invalid sa for name 0x00000000000000fd [ 1481.807862][T26294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3983'. [ 1481.817708][T26294] netlink: 13 bytes leftover after parsing attributes in process `syz.3.3983'. [ 1484.464280][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.464347][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.744155][T26346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3991'. [ 1486.756123][T26346] netlink: 13 bytes leftover after parsing attributes in process `syz.0.3991'. [ 1488.254503][T26367] openvswitch: HfR: Dropping previously announced user features [ 1493.951135][T26432] HfR: entered promiscuous mode [ 1510.724682][T26633] ubi0: attaching mtd0 [ 1511.016959][T26633] ubi0: scanning is finished [ 1511.023405][T26633] ubi0: empty MTD device detected [ 1511.437622][T21608] block nbd0: Receive control failed (result -32) [ 1512.026597][T26633] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1513.845615][T26660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4057'. [ 1520.631557][T26738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4068'. [ 1520.643556][T26738] netlink: 13 bytes leftover after parsing attributes in process `syz.1.4068'. [ 1523.036273][T26768] ubi0: attaching mtd0 [ 1523.066407][T26768] ubi0: scanning is finished [ 1523.311482][T26768] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1523.319221][T26768] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3967 bytes [ 1523.319245][T26768] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1523.319265][T26768] ubi0: VID header offset: 65 (aligned 65), data offset: 129 [ 1523.319285][T26768] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1523.319304][T26768] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1523.319324][T26768] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 308845283 [ 1523.319347][T26768] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1523.321723][T26769] ubi0: background thread "ubi_bgt0d" started, PID 26769 [ 1524.159528][T21608] block nbd1: Receive control failed (result -32) [ 1535.212115][T26881] lo: entered allmulticast mode [ 1535.212183][T26881] lo: left allmulticast mode [ 1535.806613][T26887] ima: policy update failed [ 1535.806763][ T31] audit: type=1802 audit(2147483652.090:35): pid=26887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.4094" res=0 errno=0 [ 1535.901770][T26887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4094'. [ 1539.768183][T26946] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1540.260436][T26954] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1541.412873][T26967] tipc: Can't bind to reserved service type 63 [ 1541.426594][T26965] netlink: 13 bytes leftover after parsing attributes in process `syz.3.4112'. [ 1542.410665][T26992] FAULT_INJECTION: forcing a failure. [ 1542.410665][T26992] name failslab, interval 1, probability 0, space 0, times 0 [ 1542.410718][T26992] CPU: 0 UID: 0 PID: 26992 Comm: syz.2.4117 Tainted: G L syzkaller #0 PREEMPT(full) [ 1542.410755][T26992] Tainted: [L]=SOFTLOCKUP [ 1542.410765][T26992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1542.410781][T26992] Call Trace: [ 1542.410791][T26992] [ 1542.410804][T26992] dump_stack_lvl+0x100/0x190 [ 1542.410852][T26992] should_fail_ex.cold+0x5/0xa [ 1542.410887][T26992] should_failslab+0xc2/0x120 [ 1542.410923][T26992] __kmalloc_cache_noprof+0x91/0x6d0 [ 1542.410963][T26992] ? down_write_killable+0x152/0x240 [ 1542.411006][T26992] ? alloc_ldt_struct+0x5d/0x1b0 [ 1542.411068][T26992] alloc_ldt_struct+0x5d/0x1b0 [ 1542.411096][T26992] write_ldt+0x62b/0xd40 [ 1542.411130][T26992] ? __pfx_write_ldt+0x10/0x10 [ 1542.411160][T26992] ? xfd_validate_state+0x129/0x190 [ 1542.411207][T26992] __x64_sys_modify_ldt+0xb1/0x170 [ 1542.411237][T26992] do_syscall_64+0x121/0x770 [ 1542.411276][T26992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1542.411303][T26992] RIP: 0033:0x7f84fa99e159 [ 1542.411324][T26992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1542.411349][T26992] RSP: 002b:00007f84fb8d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 1542.411374][T26992] RAX: ffffffffffffffda RBX: 00007f84fac26090 RCX: 00007f84fa99e159 [ 1542.411392][T26992] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000001 [ 1542.411408][T26992] RBP: 00007f84faa3503b R08: 0000000000000000 R09: 0000000000000000 [ 1542.411423][T26992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1542.411439][T26992] R13: 00007f84fac26128 R14: 00007f84fac26090 R15: 00007ffef4cabd68 [ 1542.411471][T26992] [ 1544.748547][T27016] netlink: 186 bytes leftover after parsing attributes in process `syz.3.4124'. [ 1545.139478][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.147119][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.902809][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.902877][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.336782][T27047] ubi: mtd0 is already attached to ubi0 [ 1547.357331][T27047] ubi0: detaching mtd0 [ 1547.384408][T27047] ubi0: mtd0 is detached [ 1551.014021][T27094] netlink: 13 bytes leftover after parsing attributes in process `syz.0.4139'. [ 1552.357925][T27111] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4143'. [ 1552.900821][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880296e1c00: rx timeout, send abort [ 1552.901029][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880296e1c00: 0x0ffff: (3) A timeout occurred and this is the connection abort to close the session. [ 1552.989254][T27123] cifs: Unknown parameter 'r-zO' [ 1553.795110][T27138] FAULT_INJECTION: forcing a failure. [ 1553.795110][T27138] name failslab, interval 1, probability 0, space 0, times 0 [ 1553.795164][T27138] CPU: 0 UID: 0 PID: 27138 Comm: syz.0.4146 Tainted: G L syzkaller #0 PREEMPT(full) [ 1553.795201][T27138] Tainted: [L]=SOFTLOCKUP [ 1553.795211][T27138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1553.795227][T27138] Call Trace: [ 1553.795237][T27138] [ 1553.795246][T27138] dump_stack_lvl+0x100/0x190 [ 1553.795285][T27138] should_fail_ex.cold+0x5/0xa [ 1553.795318][T27138] should_failslab+0xc2/0x120 [ 1553.795358][T27138] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 1553.795397][T27138] ? register_lock_class+0x3f/0x7b0 [ 1553.795436][T27138] ? __d_alloc+0x35/0xa50 [ 1553.795474][T27138] __d_alloc+0x35/0xa50 [ 1553.795506][T27138] ? __lock_acquire+0x5c0/0x1f40 [ 1553.795544][T27138] d_alloc_parallel+0x105/0x14c0 [ 1553.795593][T27138] ? lock_acquire+0x1d1/0x380 [ 1553.795626][T27138] ? lookup_slow+0x42/0x70 [ 1553.795662][T27138] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1553.795704][T27138] ? __pfx___might_resched+0x10/0x10 [ 1553.795737][T27138] ? try_to_unlazy+0x296/0x910 [ 1553.795781][T27138] ? down_read+0x13b/0x4c0 [ 1553.795821][T27138] ? __pfx_down_read+0x10/0x10 [ 1553.795868][T27138] __lookup_slow+0x98/0x320 [ 1553.795908][T27138] lookup_slow+0x50/0x70 [ 1553.795945][T27138] path_lookupat+0x5e8/0xc40 [ 1553.795970][T27138] ? __do_sys_newlstat+0x8c/0x130 [ 1553.796004][T27138] ? do_syscall_64+0x121/0x770 [ 1553.796042][T27138] filename_lookup+0x202/0x590 [ 1553.796073][T27138] ? __pfx_filename_lookup+0x10/0x10 [ 1553.796121][T27138] ? __might_fault+0xc5/0x140 [ 1553.796161][T27138] ? find_held_lock+0x2b/0x80 [ 1553.796188][T27138] ? __might_fault+0xc5/0x140 [ 1553.796226][T27138] ? __might_fault+0xc5/0x140 [ 1553.796269][T27138] vfs_statx+0xff/0x3f0 [ 1553.796304][T27138] ? __pfx_vfs_statx+0x10/0x10 [ 1553.796340][T27138] ? do_getname+0x191/0x390 [ 1553.796384][T27138] __do_sys_newlstat+0xaa/0x130 [ 1553.796419][T27138] ? __pfx___do_sys_newlstat+0x10/0x10 [ 1553.796481][T27138] do_syscall_64+0x121/0x770 [ 1553.796521][T27138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1553.796547][T27138] RIP: 0033:0x7f533f79e159 [ 1553.796569][T27138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1553.796594][T27138] RSP: 002b:00007f53405cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 1553.796620][T27138] RAX: ffffffffffffffda RBX: 00007f533fa26450 RCX: 00007f533f79e159 [ 1553.796639][T27138] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1553.796654][T27138] RBP: 00007f533f83503b R08: 0000000000000000 R09: 0000000000000000 [ 1553.796670][T27138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1553.796687][T27138] R13: 00007f533fa264e8 R14: 00007f533fa26450 R15: 00007ffc14302848 [ 1553.796719][T27138] [ 1557.333012][ C0] sd 0:0:1:0: [sda] tag#2448 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1557.333118][ C0] sd 0:0:1:0: [sda] tag#2448 CDB: Read(6) 08 00 00 00 09 00 00 00 00 00 00 00 [ 1561.869780][T27213] [U] ^\ [ 1562.521303][T27222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4162'. [ 1562.533550][T27222] netlink: 354 bytes leftover after parsing attributes in process `syz.0.4162'. [ 1564.415139][T27249] aoe: invalid device specification [ 1570.143744][T27324] aoe: invalid device specification [ 1570.766933][T27332] netlink: 'syz.1.4185': attribute type 11 has an invalid length. [ 1575.353450][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058ed5400: rx timeout, send abort [ 1575.353685][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888058ed5400: 0x0ffff: (3) A timeout occurred and this is the connection abort to close the session. [ 1576.212539][T27371] FAULT_INJECTION: forcing a failure. [ 1576.212539][T27371] name failslab, interval 1, probability 0, space 0, times 0 [ 1576.227720][T27371] CPU: 0 UID: 0 PID: 27371 Comm: syz.0.4192 Tainted: G L syzkaller #0 PREEMPT(full) [ 1576.227762][T27371] Tainted: [L]=SOFTLOCKUP [ 1576.227772][T27371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1576.227788][T27371] Call Trace: [ 1576.227797][T27371] [ 1576.227807][T27371] dump_stack_lvl+0x100/0x190 [ 1576.227847][T27371] should_fail_ex.cold+0x5/0xa [ 1576.227879][T27371] should_failslab+0xc2/0x120 [ 1576.227913][T27371] __kmalloc_cache_noprof+0x91/0x6d0 [ 1576.227960][T27371] ? kvm_dev_ioctl+0xb48/0x1b50 [ 1576.227996][T27371] kvm_dev_ioctl+0xb48/0x1b50 [ 1576.228040][T27371] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1576.228070][T27371] ? __fget_files+0x21f/0x3d0 [ 1576.228103][T27371] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1576.228130][T27371] __x64_sys_ioctl+0x18e/0x210 [ 1576.228174][T27371] do_syscall_64+0x121/0x770 [ 1576.228214][T27371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1576.228240][T27371] RIP: 0033:0x7f533f79e159 [ 1576.228261][T27371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1576.228286][T27371] RSP: 002b:00007f5340672028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1576.228311][T27371] RAX: ffffffffffffffda RBX: 00007f533fa25fa0 RCX: 00007f533f79e159 [ 1576.228327][T27371] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000002 [ 1576.228344][T27371] RBP: 00007f533f83503b R08: 0000000000000000 R09: 0000000000000000 [ 1576.228359][T27371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1576.228375][T27371] R13: 00007f533fa26038 R14: 00007f533fa25fa0 R15: 00007ffc14302848 [ 1576.228407][T27371] [ 1579.139417][T27408] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1583.996122][T27442] cifs: Unknown parameter 'r-zO' [ 1584.955765][ C0] sd 0:0:1:0: [sda] tag#2434 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1584.955836][ C0] sd 0:0:1:0: [sda] tag#2434 CDB: Read(6) 08 00 00 00 09 00 00 00 00 00 00 00 [ 1585.793728][T21608] block nbd2: Receive control failed (result -32) [ 1585.813099][T27468] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1591.994057][T27560] netlink: 'syz.3.4227': attribute type 11 has an invalid length. [ 1593.810594][T27580] snd_virmidi snd_virmidi.0: control 61678:131081:1:y:6 is already present [ 1596.243458][ C0] sd 0:0:1:0: [sda] tag#2478 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1596.243542][ C0] sd 0:0:1:0: [sda] tag#2478 CDB: Read(6) 08 00 00 00 09 00 00 00 00 00 00 00 [ 1596.628360][T27612] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1598.363897][T27637] aoe: invalid device specification [ 1598.495081][T27643] netlink: 25 bytes leftover after parsing attributes in process `syz.2.4243'. [ 1600.478842][T27663] netlink: 'syz.0.4256': attribute type 21 has an invalid length. [ 1600.488536][T27663] netlink: 'syz.0.4256': attribute type 3 has an invalid length. [ 1600.496635][T27663] netlink: 306 bytes leftover after parsing attributes in process `syz.0.4256'. [ 1600.741603][T27666] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1601.331511][T27680] FAULT_INJECTION: forcing a failure. [ 1601.331511][T27680] name failslab, interval 1, probability 0, space 0, times 0 [ 1601.331563][T27680] CPU: 0 UID: 0 PID: 27680 Comm: syz.1.4251 Tainted: G L syzkaller #0 PREEMPT(full) [ 1601.331600][T27680] Tainted: [L]=SOFTLOCKUP [ 1601.331610][T27680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1601.331627][T27680] Call Trace: [ 1601.331635][T27680] [ 1601.331646][T27680] dump_stack_lvl+0x100/0x190 [ 1601.331686][T27680] should_fail_ex.cold+0x5/0xa [ 1601.331718][T27680] should_failslab+0xc2/0x120 [ 1601.331752][T27680] __kmalloc_cache_noprof+0x91/0x6d0 [ 1601.331794][T27680] ? kvm_dev_ioctl+0xb48/0x1b50 [ 1601.331825][T27680] kvm_dev_ioctl+0xb48/0x1b50 [ 1601.331869][T27680] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1601.331899][T27680] ? __fget_files+0x21f/0x3d0 [ 1601.331931][T27680] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1601.331959][T27680] __x64_sys_ioctl+0x18e/0x210 [ 1601.332002][T27680] do_syscall_64+0x121/0x770 [ 1601.332041][T27680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1601.332068][T27680] RIP: 0033:0x7f7884b9e159 [ 1601.332088][T27680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1601.332113][T27680] RSP: 002b:00007f7882df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1601.332138][T27680] RAX: ffffffffffffffda RBX: 00007f7884e25fa0 RCX: 00007f7884b9e159 [ 1601.332155][T27680] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000002 [ 1601.332171][T27680] RBP: 00007f7884c3503b R08: 0000000000000000 R09: 0000000000000000 [ 1601.332186][T27680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1601.332202][T27680] R13: 00007f7884e26038 R14: 00007f7884e25fa0 R15: 00007ffd648d9ef8 [ 1601.332233][T27680] [ 1601.922531][T27698] cifs: Unknown parameter 'r-zO' [ 1607.344751][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.344819][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.764561][T27751] FAULT_INJECTION: forcing a failure. [ 1607.764561][T27751] name failslab, interval 1, probability 0, space 0, times 0 [ 1607.796583][T27751] CPU: 0 UID: 8 PID: 27751 Comm: syz.0.4268 Tainted: G L syzkaller #0 PREEMPT(full) [ 1607.796628][T27751] Tainted: [L]=SOFTLOCKUP [ 1607.796638][T27751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1607.796654][T27751] Call Trace: [ 1607.796663][T27751] [ 1607.796673][T27751] dump_stack_lvl+0x100/0x190 [ 1607.796714][T27751] should_fail_ex.cold+0x5/0xa [ 1607.796747][T27751] should_failslab+0xc2/0x120 [ 1607.796781][T27751] __kmalloc_cache_noprof+0x91/0x6d0 [ 1607.796829][T27751] ? key_user_lookup+0x16e/0x5a0 [ 1607.796870][T27751] ? key_user_lookup+0x1a3/0x5a0 [ 1607.796913][T27751] key_user_lookup+0x1a3/0x5a0 [ 1607.796950][T27751] ? __pfx_key_user_lookup+0x10/0x10 [ 1607.796988][T27751] ? security_key_permission+0x7b/0x230 [ 1607.797030][T27751] key_alloc+0x18b/0x1310 [ 1607.797074][T27751] ? __pfx_keyring_search+0x10/0x10 [ 1607.797101][T27751] ? __pfx_key_alloc+0x10/0x10 [ 1607.797137][T27751] ? __pfx_key_default_cmp+0x10/0x10 [ 1607.797180][T27751] ? __pfx_keyring_search_iterator+0x10/0x10 [ 1607.797209][T27751] keyring_alloc+0x44/0xc0 [ 1607.797253][T27751] look_up_user_keyrings+0x465/0x790 [ 1607.797292][T27751] ? __pfx_look_up_user_keyrings+0x10/0x10 [ 1607.797328][T27751] ? __pfx_futex_wait+0x10/0x10 [ 1607.797367][T27751] lookup_user_key+0xbb1/0x1300 [ 1607.797403][T27751] ? lock_acquire+0x1d1/0x380 [ 1607.797438][T27751] ? __pfx_lookup_user_key+0x10/0x10 [ 1607.797473][T27751] ? do_futex+0x190/0x440 [ 1607.797502][T27751] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1607.797542][T27751] ? __x64_sys_futex+0x34f/0x4d0 [ 1607.797565][T27751] ? __x64_sys_futex+0x358/0x4d0 [ 1607.797596][T27751] keyctl_session_to_parent+0x28/0xae0 [ 1607.797634][T27751] __do_sys_keyctl+0x2b1/0x5a0 [ 1607.797667][T27751] do_syscall_64+0x121/0x770 [ 1607.797707][T27751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1607.797733][T27751] RIP: 0033:0x7f533f79e159 [ 1607.797755][T27751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1607.797779][T27751] RSP: 002b:00007f5340672028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1607.797812][T27751] RAX: ffffffffffffffda RBX: 00007f533fa25fa0 RCX: 00007f533f79e159 [ 1607.797830][T27751] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000012 [ 1607.797846][T27751] RBP: 00007f533f83503b R08: 0000000000000001 R09: 0000000000000000 [ 1607.797863][T27751] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 1607.797879][T27751] R13: 00007f533fa26038 R14: 00007f533fa25fa0 R15: 00007ffc14302848 [ 1607.797911][T27751] [ 1608.137417][T27751] i2c i2c-0: new_device: Missing parameters [ 1608.184538][T27756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4269'. [ 1608.283772][T27757] netlink: 'syz.2.4270': attribute type 10 has an invalid length. [ 1608.283819][T27757] netlink: 330 bytes leftover after parsing attributes in process `syz.2.4270'. [ 1608.470375][T27761] random: crng reseeded on system resumption [ 1608.491860][T27761] FAULT_INJECTION: forcing a failure. [ 1608.491860][T27761] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1608.505705][T27761] CPU: 0 UID: 0 PID: 27761 Comm: syz.3.4271 Tainted: G L syzkaller #0 PREEMPT(full) [ 1608.505745][T27761] Tainted: [L]=SOFTLOCKUP [ 1608.505754][T27761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1608.505771][T27761] Call Trace: [ 1608.505780][T27761] [ 1608.505790][T27761] dump_stack_lvl+0x100/0x190 [ 1608.505830][T27761] should_fail_ex.cold+0x5/0xa [ 1608.505857][T27761] ? prepare_alloc_pages+0x16d/0x5b0 [ 1608.505899][T27761] should_fail_alloc_page+0xeb/0x140 [ 1608.505935][T27761] prepare_alloc_pages+0x1f0/0x5b0 [ 1608.505968][T27761] ? unwind_get_return_address+0x59/0xa0 [ 1608.506005][T27761] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 1608.506040][T27761] ? stack_trace_save+0x8e/0xc0 [ 1608.506071][T27761] ? __pfx_stack_trace_save+0x10/0x10 [ 1608.506103][T27761] ? stack_depot_save_flags+0x27/0x9f0 [ 1608.506143][T27761] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1608.506170][T27761] ? kasan_save_stack+0x3f/0x50 [ 1608.506199][T27761] ? kasan_save_track+0x14/0x30 [ 1608.506228][T27761] ? __kasan_kmalloc+0xaa/0xb0 [ 1608.506256][T27761] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1608.506295][T27761] ? memory_bm_create+0x12c/0xcf0 [ 1608.506319][T27761] ? create_basic_memory_bitmaps+0x10b/0x350 [ 1608.506347][T27761] ? snapshot_open+0x23b/0x2b0 [ 1608.506376][T27761] ? misc_open+0x26d/0x450 [ 1608.506402][T27761] ? chrdev_open+0x234/0x6a0 [ 1608.506430][T27761] ? do_dentry_open+0x6ab/0x14d0 [ 1608.506456][T27761] ? vfs_open+0x82/0x3f0 [ 1608.506487][T27761] ? path_openat+0x19fa/0x2440 [ 1608.506516][T27761] ? do_file_open+0x20e/0x430 [ 1608.506545][T27761] ? do_sys_openat2+0x10f/0x1e0 [ 1608.506578][T27761] ? __x64_sys_openat+0x12d/0x210 [ 1608.506613][T27761] ? do_syscall_64+0x121/0x770 [ 1608.506655][T27761] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1608.506700][T27761] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1608.506737][T27761] ? policy_nodemask+0xed/0x4f0 [ 1608.506776][T27761] alloc_pages_mpol+0x201/0x550 [ 1608.506813][T27761] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1608.506848][T27761] ? kasan_save_track+0x14/0x30 [ 1608.506878][T27761] ? __kasan_kmalloc+0xaa/0xb0 [ 1608.506911][T27761] alloc_pages_noprof+0x1a/0x160 [ 1608.506951][T27761] get_zeroed_page_noprof+0x18/0xb0 [ 1608.506984][T27761] get_image_page+0x18/0x1a0 [ 1608.507010][T27761] memory_bm_create+0x66a/0xcf0 [ 1608.507048][T27761] create_basic_memory_bitmaps+0x10b/0x350 [ 1608.507082][T27761] snapshot_open+0x23b/0x2b0 [ 1608.507113][T27761] ? __pfx_snapshot_open+0x10/0x10 [ 1608.507146][T27761] misc_open+0x26d/0x450 [ 1608.507173][T27761] ? __pfx_misc_open+0x10/0x10 [ 1608.507200][T27761] chrdev_open+0x234/0x6a0 [ 1608.507230][T27761] ? __pfx_apparmor_file_open+0x10/0x10 [ 1608.507271][T27761] ? __pfx_chrdev_open+0x10/0x10 [ 1608.507303][T27761] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1608.507410][T27761] do_dentry_open+0x6ab/0x14d0 [ 1608.507437][T27761] ? __pfx_chrdev_open+0x10/0x10 [ 1608.507473][T27761] vfs_open+0x82/0x3f0 [ 1608.507511][T27761] path_openat+0x19fa/0x2440 [ 1608.507546][T27761] ? __pfx_path_openat+0x10/0x10 [ 1608.507585][T27761] do_file_open+0x20e/0x430 [ 1608.507623][T27761] ? __pfx_do_file_open+0x10/0x10 [ 1608.507675][T27761] ? _raw_spin_unlock+0x28/0x50 [ 1608.507707][T27761] ? alloc_fd+0x471/0x7a0 [ 1608.507744][T27761] do_sys_openat2+0x10f/0x1e0 [ 1608.507781][T27761] ? __pfx_do_sys_openat2+0x10/0x10 [ 1608.507819][T27761] ? __fget_files+0x21f/0x3d0 [ 1608.507853][T27761] __x64_sys_openat+0x12d/0x210 [ 1608.507890][T27761] ? __pfx___x64_sys_openat+0x10/0x10 [ 1608.507939][T27761] do_syscall_64+0x121/0x770 [ 1608.507978][T27761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1608.508005][T27761] RIP: 0033:0x7f3a6339e159 [ 1608.508026][T27761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1608.508051][T27761] RSP: 002b:00007f3a64212028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1608.508076][T27761] RAX: ffffffffffffffda RBX: 00007f3a63625fa0 RCX: 00007f3a6339e159 [ 1608.508093][T27761] RDX: 0000000000002401 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1608.508110][T27761] RBP: 00007f3a6343503b R08: 0000000000000000 R09: 0000000000000000 [ 1608.508126][T27761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1608.508142][T27761] R13: 00007f3a63626038 R14: 00007f3a63625fa0 R15: 00007ffda37ecc98 [ 1608.508174][T27761] [ 1609.990020][T27784] FAULT_INJECTION: forcing a failure. [ 1609.990020][T27784] name failslab, interval 1, probability 0, space 0, times 0 [ 1610.003942][T27784] CPU: 0 UID: 0 PID: 27784 Comm: syz.3.4275 Tainted: G L syzkaller #0 PREEMPT(full) [ 1610.003982][T27784] Tainted: [L]=SOFTLOCKUP [ 1610.003992][T27784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1610.004008][T27784] Call Trace: [ 1610.004017][T27784] [ 1610.004027][T27784] dump_stack_lvl+0x100/0x190 [ 1610.004068][T27784] should_fail_ex.cold+0x5/0xa [ 1610.004101][T27784] should_failslab+0xc2/0x120 [ 1610.004135][T27784] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 1610.004171][T27784] ? xas_split_alloc+0x182/0x530 [ 1610.004215][T27784] xas_split_alloc+0x182/0x530 [ 1610.004261][T27784] __folio_split+0x95e/0x1bf0 [ 1610.004297][T27784] ? __pfx___folio_split+0x10/0x10 [ 1610.004331][T27784] ? __pfx___might_resched+0x10/0x10 [ 1610.004370][T27784] madvise_cold_or_pageout_pte_range+0xfd1/0x27b0 [ 1610.004417][T27784] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1610.004451][T27784] ? is_bpf_text_address+0x94/0x1a0 [ 1610.004488][T27784] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 1610.004535][T27784] ? __kernel_text_address+0xd/0x30 [ 1610.004567][T27784] ? unwind_get_return_address+0x59/0xa0 [ 1610.004603][T27784] ? __lock_acquire+0x5c0/0x1f40 [ 1610.004642][T27784] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 1610.004682][T27784] walk_pgd_range+0xbef/0x1e00 [ 1610.004715][T27784] ? register_lock_class+0x3f/0x7b0 [ 1610.004763][T27784] ? __pfx_walk_pgd_range+0x10/0x10 [ 1610.004797][T27784] __walk_page_range+0x171/0x850 [ 1610.004826][T27784] ? __lock_acquire+0x5c0/0x1f40 [ 1610.004869][T27784] walk_page_range_vma_unsafe+0x209/0x8f0 [ 1610.004902][T27784] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 1610.004936][T27784] ? find_held_lock+0x2b/0x80 [ 1610.004962][T27784] ? mlock_drain_local+0x254/0x4e0 [ 1610.004986][T27784] ? mlock_drain_local+0x254/0x4e0 [ 1610.005026][T27784] walk_page_range_vma+0x63/0x90 [ 1610.005059][T27784] madvise_pageout+0x29e/0x5b0 [ 1610.005096][T27784] ? __pfx_madvise_pageout+0x10/0x10 [ 1610.005152][T27784] madvise_vma_behavior+0x48b/0x2350 [ 1610.005192][T27784] ? mas_prev+0xa4/0x100 [ 1610.005217][T27784] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 1610.005256][T27784] ? mas_walk+0x260/0x310 [ 1610.005292][T27784] ? find_vma_prev+0xd8/0x150 [ 1610.005323][T27784] ? __pfx_find_vma_prev+0x10/0x10 [ 1610.005354][T27784] ? lock_acquire+0x1d1/0x380 [ 1610.005403][T27784] madvise_walk_vmas+0x30e/0xc50 [ 1610.005444][T27784] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 1610.005483][T27784] ? __pfx_futex_wake_mark+0x10/0x10 [ 1610.005518][T27784] ? lock_acquire+0x1d1/0x380 [ 1610.005563][T27784] madvise_do_behavior+0x1ea/0x510 [ 1610.005603][T27784] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1610.005643][T27784] ? down_read+0x13b/0x4c0 [ 1610.005695][T27784] do_madvise+0x238/0x290 [ 1610.005731][T27784] ? __pfx_do_madvise+0x10/0x10 [ 1610.005766][T27784] ? do_futex+0x190/0x440 [ 1610.005796][T27784] ? fdget+0x18b/0x210 [ 1610.005836][T27784] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 1610.005869][T27784] __x64_sys_madvise+0xa9/0x110 [ 1610.005906][T27784] ? lockdep_hardirqs_on+0x7d/0x110 [ 1610.005941][T27784] do_syscall_64+0x121/0x770 [ 1610.005980][T27784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1610.006007][T27784] RIP: 0033:0x7f3a6339e159 [ 1610.006028][T27784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1610.006053][T27784] RSP: 002b:00007f3a64212028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1610.006078][T27784] RAX: ffffffffffffffda RBX: 00007f3a63625fa0 RCX: 00007f3a6339e159 [ 1610.006097][T27784] RDX: 0000000000000015 RSI: 0000000000000081 RDI: 0000000000000000 [ 1610.006113][T27784] RBP: 00007f3a6343503b R08: 0000000000000000 R09: 0000000000000000 [ 1610.006129][T27784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1610.006145][T27784] R13: 00007f3a63626038 R14: 00007f3a63625fa0 R15: 00007ffda37ecc98 [ 1610.006178][T27784] [ 1610.955752][T27788] FAULT_INJECTION: forcing a failure. [ 1610.955752][T27788] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1610.969331][T27788] CPU: 0 UID: 0 PID: 27788 Comm: syz.3.4276 Tainted: G L syzkaller #0 PREEMPT(full) [ 1610.969374][T27788] Tainted: [L]=SOFTLOCKUP [ 1610.969384][T27788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1610.969401][T27788] Call Trace: [ 1610.969412][T27788] [ 1610.969424][T27788] dump_stack_lvl+0x100/0x190 [ 1610.969464][T27788] should_fail_ex.cold+0x5/0xa [ 1610.969498][T27788] ? prepare_alloc_pages+0x16d/0x5b0 [ 1610.969535][T27788] should_fail_alloc_page+0xeb/0x140 [ 1610.969571][T27788] prepare_alloc_pages+0x1f0/0x5b0 [ 1610.969609][T27788] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 1610.969637][T27788] ? __kernel_text_address+0xd/0x30 [ 1610.969669][T27788] ? unwind_get_return_address+0x59/0xa0 [ 1610.969701][T27788] ? arch_stack_walk+0xa6/0xf0 [ 1610.969739][T27788] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1610.969766][T27788] ? __pfx_stack_trace_save+0x10/0x10 [ 1610.969799][T27788] ? stack_depot_save_flags+0x27/0x9f0 [ 1610.969841][T27788] ? kasan_save_stack+0x3f/0x50 [ 1610.969869][T27788] ? kasan_save_stack+0x30/0x50 [ 1610.969897][T27788] ? kasan_save_track+0x14/0x30 [ 1610.969925][T27788] ? __kasan_slab_alloc+0x89/0x90 [ 1610.969957][T27788] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 1610.969984][T27788] ? security_inode_alloc+0x3b/0x2c0 [ 1610.970016][T27788] ? inode_init_always_gfp+0xc6f/0xfb0 [ 1610.970045][T27788] ? alloc_inode+0x8e/0x250 [ 1610.970079][T27788] ? sock_alloc+0x44/0x280 [ 1610.970114][T27788] ? __sock_create+0xc2/0x860 [ 1610.970163][T27788] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1610.970201][T27788] ? policy_nodemask+0xed/0x4f0 [ 1610.970237][T27788] alloc_pages_mpol+0x201/0x550 [ 1610.970274][T27788] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1610.970317][T27788] ___kmalloc_large_node+0xe8/0x130 [ 1610.970354][T27788] __kmalloc_large_node_noprof+0x1c/0x70 [ 1610.970393][T27788] __kmalloc_noprof+0x5a8/0x840 [ 1610.970421][T27788] ? sk_prot_alloc+0x10b/0x2a0 [ 1610.970464][T27788] sk_prot_alloc+0x10b/0x2a0 [ 1610.970516][T27788] sk_alloc+0x36/0xe80 [ 1610.970548][T27788] can_create+0x1e5/0x630 [ 1610.970677][T27788] __sock_create+0x339/0x860 [ 1610.970723][T27788] __sys_socket+0x14d/0x260 [ 1610.970749][T27788] ? __pfx___sys_socket+0x10/0x10 [ 1610.970783][T27788] __x64_sys_socket+0x72/0xb0 [ 1610.970806][T27788] ? lockdep_hardirqs_on+0x7d/0x110 [ 1610.970842][T27788] do_syscall_64+0x121/0x770 [ 1610.970882][T27788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1610.970908][T27788] RIP: 0033:0x7f3a6339e159 [ 1610.970930][T27788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1610.970956][T27788] RSP: 002b:00007f3a64212028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1610.970982][T27788] RAX: ffffffffffffffda RBX: 00007f3a63625fa0 RCX: 00007f3a6339e159 [ 1610.970999][T27788] RDX: 0000000000000006 RSI: 0000000000000002 RDI: 000000000000001d [ 1610.971015][T27788] RBP: 00007f3a6343503b R08: 0000000000000000 R09: 0000000000000000 [ 1610.971031][T27788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1610.971047][T27788] R13: 00007f3a63626038 R14: 00007f3a63625fa0 R15: 00007ffda37ecc98 [ 1610.971080][T27788] [ 1615.218683][T27828] vivid-008: ================= START STATUS ================= [ 1615.249078][T27828] vivid-008: Enable Output Cropping: true [ 1615.249194][T27828] vivid-008: Enable Output Composing: true [ 1615.249226][T27828] vivid-008: Enable Output Scaler: true [ 1615.249257][T27828] vivid-008: Tx RGB Quantization Range: Automatic [ 1615.249333][T27828] vivid-008: Transmit Mode: HDMI [ 1615.249363][T27828] vivid-008: Hotplug Present: 0x00000000 [ 1615.249395][T27828] vivid-008: RxSense Present: 0x00000000 [ 1615.249426][T27828] vivid-008: EDID Present: 0x00000000 [ 1615.249458][T27828] vivid-008: ================== END STATUS ================== [ 1623.645333][T27922] netlink: 13 bytes leftover after parsing attributes in process `syz.0.4304'. [ 1623.645390][T27922] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4304'. [ 1626.122672][T27957] vivid-008: ================= START STATUS ================= [ 1626.122706][T27957] vivid-008: Enable Output Cropping: true [ 1626.122751][T27957] vivid-008: Enable Output Composing: true [ 1626.122782][T27957] vivid-008: Enable Output Scaler: true [ 1626.122813][T27957] vivid-008: Tx RGB Quantization Range: Automatic [ 1626.122845][T27957] vivid-008: Transmit Mode: HDMI [ 1626.122875][T27957] vivid-008: Hotplug Present: 0x00000000 [ 1626.122907][T27957] vivid-008: RxSense Present: 0x00000000 [ 1626.122937][T27957] vivid-008: EDID Present: 0x00000000 [ 1626.122969][T27957] vivid-008: ================== END STATUS ================== [ 1629.786621][T28001] vhci_hcd vhci_hcd.2: invalid port number 255 [ 1631.754677][T28031] FAULT_INJECTION: forcing a failure. [ 1631.754677][T28031] name failslab, interval 1, probability 0, space 0, times 0 [ 1631.754743][T28031] CPU: 0 UID: 0 PID: 28031 Comm: syz.0.4324 Tainted: G L syzkaller #0 PREEMPT(full) [ 1631.754781][T28031] Tainted: [L]=SOFTLOCKUP [ 1631.754791][T28031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1631.754808][T28031] Call Trace: [ 1631.754817][T28031] [ 1631.754828][T28031] dump_stack_lvl+0x100/0x190 [ 1631.754871][T28031] should_fail_ex.cold+0x5/0xa [ 1631.754904][T28031] should_failslab+0xc2/0x120 [ 1631.754940][T28031] __kmalloc_cache_noprof+0x91/0x6d0 [ 1631.754980][T28031] ? allocate_file_region_entries+0x15d/0x630 [ 1631.755012][T28031] ? allocate_file_region_entries+0x1a0/0x630 [ 1631.755047][T28031] allocate_file_region_entries+0x1a0/0x630 [ 1631.755084][T28031] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 1631.755124][T28031] region_chg+0x85/0x140 [ 1631.755153][T28031] __vma_reservation_common+0x34b/0x6f0 [ 1631.755184][T28031] ? find_held_lock+0x2b/0x80 [ 1631.755213][T28031] ? __pfx___vma_reservation_common+0x10/0x10 [ 1631.755243][T28031] ? filemap_get_entry+0x22d/0x450 [ 1631.755288][T28031] alloc_hugetlb_folio+0x594/0x870 [ 1631.755329][T28031] ? __pfx_alloc_hugetlb_folio+0x10/0x10 [ 1631.755367][T28031] ? trace_contention_end+0x126/0x160 [ 1631.755408][T28031] ? __filemap_get_folio_mpol+0x369/0x1320 [ 1631.755444][T28031] ? lock_acquire+0x1d1/0x380 [ 1631.755484][T28031] hugetlb_no_page+0x1099/0x1c20 [ 1631.755530][T28031] ? __pfx_down_read+0x10/0x10 [ 1631.755572][T28031] ? __pfx_hugetlb_no_page+0x10/0x10 [ 1631.755614][T28031] ? huge_pte_alloc+0x39f/0x5a0 [ 1631.755656][T28031] hugetlb_fault+0x5a7/0x1650 [ 1631.755700][T28031] ? __pfx_mt_find+0x10/0x10 [ 1631.755746][T28031] ? __pfx_hugetlb_fault+0x10/0x10 [ 1631.755802][T28031] ? find_vma+0xbf/0x140 [ 1631.755831][T28031] ? __pfx_find_vma+0x10/0x10 [ 1631.755862][T28031] handle_mm_fault+0x604/0xa20 [ 1631.755908][T28031] do_user_addr_fault+0x745/0x12f0 [ 1631.755945][T28031] exc_page_fault+0x6f/0xd0 [ 1631.755981][T28031] asm_exc_page_fault+0x26/0x30 [ 1631.756009][T28031] RIP: 0010:strncpy_from_user+0xfd/0x2d0 [ 1631.756044][T28031] Code: 00 4d 89 64 1d 00 48 83 ed 08 bf 07 00 00 00 48 83 c3 08 48 89 ee e8 12 95 ad fc 48 83 fd 07 0f 86 bb 00 00 00 e8 63 9a ad fc <4d> 8b 24 1e e8 5a 9a ad fc 4c 89 e2 31 ff 4d 8d 7c 1d 00 48 b8 ff [ 1631.756070][T28031] RSP: 0018:ffffc90005357d18 EFLAGS: 00050287 [ 1631.756092][T28031] RAX: 000000000000001b RBX: 0000000000000000 RCX: ffffc90013251000 [ 1631.756109][T28031] RDX: 0000000000080000 RSI: ffffffff855dc2cd RDI: ffff88802bad3e80 [ 1631.756126][T28031] RBP: 00000000000000a8 R08: 0000000000000007 R09: 0000000000000007 [ 1631.756141][T28031] R10: 00000000000000a8 R11: 0000000000000000 R12: 0000000000000000 [ 1631.756157][T28031] R13: ffff8880758be718 R14: 0000000000000000 R15: 00000000000000a8 [ 1631.756182][T28031] ? strncpy_from_user+0xfd/0x2d0 [ 1631.756217][T28031] ? strncpy_from_user+0xfd/0x2d0 [ 1631.756252][T28031] do_getname+0x78/0x390 [ 1631.756293][T28031] __do_sys_newlstat+0x8c/0x130 [ 1631.756327][T28031] ? __pfx___do_sys_newlstat+0x10/0x10 [ 1631.756389][T28031] do_syscall_64+0x121/0x770 [ 1631.756429][T28031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1631.756455][T28031] RIP: 0033:0x7f533f79e159 [ 1631.756475][T28031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1631.756500][T28031] RSP: 002b:00007f53405cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 1631.756523][T28031] RAX: ffffffffffffffda RBX: 00007f533fa26450 RCX: 00007f533f79e159 [ 1631.756541][T28031] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1631.756556][T28031] RBP: 00007f533f83503b R08: 0000000000000000 R09: 0000000000000000 [ 1631.756572][T28031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1631.756587][T28031] R13: 00007f533fa264e8 R14: 00007f533fa26450 R15: 00007ffc14302848 [ 1631.756620][T28031] [ 1637.458396][T28093] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input16 [ 1643.408453][T28165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4354'. [ 1644.546478][T28186] FAULT_INJECTION: forcing a failure. [ 1644.546478][T28186] name failslab, interval 1, probability 0, space 0, times 0 [ 1644.596364][T28186] CPU: 0 UID: 0 PID: 28186 Comm: syz.2.4358 Tainted: G L syzkaller #0 PREEMPT(full) [ 1644.596407][T28186] Tainted: [L]=SOFTLOCKUP [ 1644.596417][T28186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1644.596434][T28186] Call Trace: [ 1644.596443][T28186] [ 1644.596454][T28186] dump_stack_lvl+0x100/0x190 [ 1644.596493][T28186] should_fail_ex.cold+0x5/0xa [ 1644.596526][T28186] should_failslab+0xc2/0x120 [ 1644.596561][T28186] __kvmalloc_node_noprof+0x113/0x9b0 [ 1644.596592][T28186] ? __pfx_net_ctl_permissions+0x10/0x10 [ 1644.596629][T28186] ? proc_sys_call_handler+0x2c7/0x5a0 [ 1644.596672][T28186] proc_sys_call_handler+0x2c7/0x5a0 [ 1644.596709][T28186] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 1644.596753][T28186] vfs_write+0x6af/0x1050 [ 1644.596780][T28186] ? __pfx_proc_sys_write+0x10/0x10 [ 1644.596824][T28186] ? __pfx_vfs_write+0x10/0x10 [ 1644.596848][T28186] ? find_held_lock+0x2b/0x80 [ 1644.596895][T28186] __x64_sys_pwrite64+0x1eb/0x250 [ 1644.596925][T28186] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 1644.596954][T28186] ? trace_hardirqs_off+0x70/0x170 [ 1644.597001][T28186] do_syscall_64+0x121/0x770 [ 1644.597042][T28186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1644.597069][T28186] RIP: 0033:0x7f84fa99e159 [ 1644.597090][T28186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1644.597115][T28186] RSP: 002b:00007f84fb8f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1644.597139][T28186] RAX: ffffffffffffffda RBX: 00007f84fac25fa0 RCX: 00007f84fa99e159 [ 1644.597157][T28186] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 1644.597172][T28186] RBP: 00007f84faa3503b R08: 0000000000000000 R09: 0000000000000000 [ 1644.597188][T28186] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1644.597203][T28186] R13: 00007f84fac26038 R14: 00007f84fac25fa0 R15: 00007ffef4cabd68 [ 1644.597235][T28186] [ 1659.743225][T21608] Bluetooth: hci0: ACL packet too small [ 1660.123439][ T31] audit: type=1800 audit(4294967336.734:36): pid=28371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4396" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1661.433324][T28380] FAULT_INJECTION: forcing a failure. [ 1661.433324][T28380] name failslab, interval 1, probability 0, space 0, times 0 [ 1661.433381][T28380] CPU: 0 UID: 0 PID: 28380 Comm: syz.3.4399 Tainted: G L syzkaller #0 PREEMPT(full) [ 1661.433418][T28380] Tainted: [L]=SOFTLOCKUP [ 1661.433428][T28380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1661.433443][T28380] Call Trace: [ 1661.433452][T28380] [ 1661.433462][T28380] dump_stack_lvl+0x100/0x190 [ 1661.433501][T28380] should_fail_ex.cold+0x5/0xa [ 1661.433533][T28380] should_failslab+0xc2/0x120 [ 1661.433568][T28380] __kvmalloc_node_noprof+0x113/0x9b0 [ 1661.433599][T28380] ? __pfx_net_ctl_permissions+0x10/0x10 [ 1661.433627][T28380] ? proc_sys_call_handler+0x2c7/0x5a0 [ 1661.433668][T28380] proc_sys_call_handler+0x2c7/0x5a0 [ 1661.433705][T28380] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 1661.433749][T28380] vfs_write+0x6af/0x1050 [ 1661.433789][T28380] ? __pfx_proc_sys_write+0x10/0x10 [ 1661.433826][T28380] ? __pfx_vfs_write+0x10/0x10 [ 1661.433850][T28380] ? find_held_lock+0x2b/0x80 [ 1661.433896][T28380] __x64_sys_pwrite64+0x1eb/0x250 [ 1661.433925][T28380] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 1661.433954][T28380] ? trace_hardirqs_off+0x70/0x170 [ 1661.434002][T28380] do_syscall_64+0x121/0x770 [ 1661.434042][T28380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1661.434069][T28380] RIP: 0033:0x7f3a6339e159 [ 1661.434089][T28380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1661.434115][T28380] RSP: 002b:00007f3a64212028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1661.434140][T28380] RAX: ffffffffffffffda RBX: 00007f3a63625fa0 RCX: 00007f3a6339e159 [ 1661.434157][T28380] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 1661.434172][T28380] RBP: 00007f3a6343503b R08: 0000000000000000 R09: 0000000000000000 [ 1661.434190][T28380] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1661.434205][T28380] R13: 00007f3a63626038 R14: 00007f3a63625fa0 R15: 00007ffda37ecc98 [ 1661.434237][T28380] [ 1668.768236][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.768305][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1672.825670][T28522] FAULT_INJECTION: forcing a failure. [ 1672.825670][T28522] name failslab, interval 1, probability 0, space 0, times 0 [ 1672.825723][T28522] CPU: 0 UID: 0 PID: 28522 Comm: syz.1.4426 Tainted: G L syzkaller #0 PREEMPT(full) [ 1672.825761][T28522] Tainted: [L]=SOFTLOCKUP [ 1672.825770][T28522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1672.825787][T28522] Call Trace: [ 1672.825795][T28522] [ 1672.825805][T28522] dump_stack_lvl+0x100/0x190 [ 1672.825844][T28522] should_fail_ex.cold+0x5/0xa [ 1672.825877][T28522] should_failslab+0xc2/0x120 [ 1672.825912][T28522] __kmalloc_noprof+0xfc/0x840 [ 1672.825946][T28522] ? __register_sysctl_table+0xac/0x1650 [ 1672.825989][T28522] __register_sysctl_table+0xac/0x1650 [ 1672.826025][T28522] ? trace_kmalloc+0xeb/0x110 [ 1672.826058][T28522] ? __kasan_kmalloc+0xaa/0xb0 [ 1672.826089][T28522] ? __kmalloc_node_track_caller_noprof+0x35b/0x870 [ 1672.826120][T28522] ? __pfx___register_sysctl_table+0x10/0x10 [ 1672.826156][T28522] ? setup_mq_sysctls+0x5d/0x240 [ 1672.826196][T28522] ? __asan_memcpy+0x3c/0x60 [ 1672.826223][T28522] setup_mq_sysctls+0x124/0x240 [ 1672.826269][T28522] copy_ipcs+0x524/0x7e0 [ 1672.826308][T28522] create_new_namespaces+0x20a/0xac0 [ 1672.826346][T28522] ? security_capable+0x80/0x260 [ 1672.826379][T28522] copy_namespaces+0x468/0x5e0 [ 1672.826418][T28522] copy_process+0x3954/0x8370 [ 1672.826474][T28522] ? __pfx_copy_process+0x10/0x10 [ 1672.826521][T28522] ? _copy_from_user+0x59/0xd0 [ 1672.826555][T28522] kernel_clone+0x176/0x9d0 [ 1672.826596][T28522] ? __pfx_kernel_clone+0x10/0x10 [ 1672.826652][T28522] __do_sys_clone3+0x214/0x290 [ 1672.826675][T28522] ? __pfx___do_sys_clone3+0x10/0x10 [ 1672.826735][T28522] do_syscall_64+0x121/0x770 [ 1672.826774][T28522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1672.826800][T28522] RIP: 0033:0x7f7884b9e159 [ 1672.826821][T28522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1672.826845][T28522] RSP: 002b:00007f7882df5ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1672.826870][T28522] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f7884b9e159 [ 1672.826887][T28522] RDX: 00007f7882df5f10 RSI: 0000000000000058 RDI: 00007f7882df5f10 [ 1672.826904][T28522] RBP: 00007f7884c3503b R08: 0000000000000000 R09: 0000000000000058 [ 1672.826920][T28522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1672.826936][T28522] R13: 00007f7884e26038 R14: 00007f7884e25fa0 R15: 00007ffd648d9ef8 [ 1672.826968][T28522] [ 1674.437600][T28546] FAULT_INJECTION: forcing a failure. [ 1674.437600][T28546] name failslab, interval 1, probability 0, space 0, times 0 [ 1674.453130][T28546] CPU: 0 UID: 0 PID: 28546 Comm: syz.2.4431 Tainted: G L syzkaller #0 PREEMPT(full) [ 1674.453171][T28546] Tainted: [L]=SOFTLOCKUP [ 1674.453181][T28546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1674.453198][T28546] Call Trace: [ 1674.453207][T28546] [ 1674.453217][T28546] dump_stack_lvl+0x100/0x190 [ 1674.453256][T28546] should_fail_ex.cold+0x5/0xa [ 1674.453289][T28546] should_failslab+0xc2/0x120 [ 1674.453323][T28546] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 1674.453355][T28546] ? shmem_alloc_inode+0x25/0x50 [ 1674.453385][T28546] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1674.453415][T28546] shmem_alloc_inode+0x25/0x50 [ 1674.453443][T28546] alloc_inode+0x68/0x250 [ 1674.453483][T28546] new_inode+0x22/0x1c0 [ 1674.453523][T28546] shmem_get_inode+0x1e3/0xf70 [ 1674.453557][T28546] ? __pfx_shmem_get_inode+0x10/0x10 [ 1674.453591][T28546] ? make_vfsgid+0xf1/0x140 [ 1674.453635][T28546] shmem_mknod+0x217/0x480 [ 1674.453668][T28546] ? __pfx_shmem_mknod+0x10/0x10 [ 1674.453707][T28546] vfs_mknod+0x3a5/0x7f0 [ 1674.453757][T28546] filename_mknodat+0x5aa/0x7f0 [ 1674.453793][T28546] ? __pfx_filename_mknodat+0x10/0x10 [ 1674.453825][T28546] ? strncpy_from_user+0x19d/0x2d0 [ 1674.453862][T28546] ? do_getname+0x191/0x390 [ 1674.453901][T28546] __x64_sys_mknod+0x8f/0xc0 [ 1674.453934][T28546] do_syscall_64+0x121/0x770 [ 1674.453974][T28546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1674.454001][T28546] RIP: 0033:0x7f84fa99e159 [ 1674.454022][T28546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1674.454048][T28546] RSP: 002b:00007f84fb8d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 1674.454072][T28546] RAX: ffffffffffffffda RBX: 00007f84fac26090 RCX: 00007f84fa99e159 [ 1674.454095][T28546] RDX: 0000000000000004 RSI: 0000000000001001 RDI: 0000000000000000 [ 1674.454111][T28546] RBP: 00007f84faa3503b R08: 0000000000000000 R09: 0000000000000000 [ 1674.454127][T28546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1674.454142][T28546] R13: 00007f84fac26128 R14: 00007f84fac26090 R15: 00007ffef4cabd68 [ 1674.454175][T28546] [ 1676.748507][T28572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4437'. [ 1684.024888][T28658] loop6: detected capacity change from 0 to 2097152 [ 1686.352151][T28672] FAULT_INJECTION: forcing a failure. [ 1686.352151][T28672] name failslab, interval 1, probability 0, space 0, times 0 [ 1686.352212][T28672] CPU: 0 UID: 0 PID: 28672 Comm: syz.1.4456 Tainted: G L syzkaller #0 PREEMPT(full) [ 1686.352249][T28672] Tainted: [L]=SOFTLOCKUP [ 1686.352259][T28672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1686.352275][T28672] Call Trace: [ 1686.352283][T28672] [ 1686.352293][T28672] dump_stack_lvl+0x100/0x190 [ 1686.352332][T28672] should_fail_ex.cold+0x5/0xa [ 1686.352364][T28672] should_failslab+0xc2/0x120 [ 1686.352398][T28672] __kvmalloc_node_noprof+0x113/0x9b0 [ 1686.352429][T28672] ? __pfx_net_ctl_permissions+0x10/0x10 [ 1686.352455][T28672] ? proc_sys_call_handler+0x2c7/0x5a0 [ 1686.352495][T28672] proc_sys_call_handler+0x2c7/0x5a0 [ 1686.352532][T28672] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 1686.352580][T28672] vfs_write+0x6af/0x1050 [ 1686.352607][T28672] ? __pfx_proc_sys_write+0x10/0x10 [ 1686.352644][T28672] ? __pfx_vfs_write+0x10/0x10 [ 1686.352667][T28672] ? find_held_lock+0x2b/0x80 [ 1686.352713][T28672] __x64_sys_pwrite64+0x1eb/0x250 [ 1686.352742][T28672] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 1686.352771][T28672] ? trace_hardirqs_off+0x70/0x170 [ 1686.352817][T28672] do_syscall_64+0x121/0x770 [ 1686.352856][T28672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1686.352883][T28672] RIP: 0033:0x7f7884b9e159 [ 1686.352904][T28672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1686.352929][T28672] RSP: 002b:00007f7882df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1686.352954][T28672] RAX: ffffffffffffffda RBX: 00007f7884e25fa0 RCX: 00007f7884b9e159 [ 1686.352971][T28672] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 1686.352987][T28672] RBP: 00007f7884c3503b R08: 0000000000000000 R09: 0000000000000000 [ 1686.353003][T28672] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1686.353019][T28672] R13: 00007f7884e26038 R14: 00007f7884e25fa0 R15: 00007ffd648d9ef8 [ 1686.353050][T28672] [ 1687.875358][T28690] netlink: 334 bytes leftover after parsing attributes in process `syz.0.4468'. [ 1691.761403][T21608] Bluetooth: hci2: unexpected event 0x30 length: 10 > 3 [ 1696.376871][T28804] vivid-008: ================= START STATUS ================= [ 1696.409063][T28804] vivid-008: ================== END STATUS ================== syzkaller syzkaller login: [ 1706.377967][T21608] Bluetooth: hci0: unexpected event 0x30 length: 10 > 3 [ 1707.305673][T28931] netlink: 'syz.3.4502': attribute type 2 has an invalid length. [ 1707.322771][T28931] netlink: 'syz.3.4502': attribute type 3 has an invalid length. [ 1707.332100][T28931] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4502'. [ 1708.115937][T28951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4505'. [ 1712.375894][T29006] FAULT_INJECTION: forcing a failure. [ 1712.375894][T29006] name failslab, interval 1, probability 0, space 0, times 0 [ 1712.407041][T29006] CPU: 0 UID: 0 PID: 29006 Comm: syz.1.4514 Tainted: G L syzkaller #0 PREEMPT(full) [ 1712.407091][T29006] Tainted: [L]=SOFTLOCKUP [ 1712.407101][T29006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1712.407117][T29006] Call Trace: [ 1712.407126][T29006] [ 1712.407137][T29006] dump_stack_lvl+0x100/0x190 [ 1712.407178][T29006] should_fail_ex.cold+0x5/0xa [ 1712.407210][T29006] should_failslab+0xc2/0x120 [ 1712.407244][T29006] __kmalloc_noprof+0xfc/0x840 [ 1712.407274][T29006] ? vb2_core_allocated_buffers_storage+0x184/0x220 [ 1712.407383][T29006] vb2_core_allocated_buffers_storage+0x184/0x220 [ 1712.407416][T29006] vb2_core_reqbufs+0x382/0xf30 [ 1712.407452][T29006] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1712.407491][T29006] ? __vb2_init_fileio+0x18f/0x1000 [ 1712.407527][T29006] __vb2_init_fileio+0x32d/0x1000 [ 1712.407556][T29006] ? lockdep_hardirqs_on+0x7d/0x110 [ 1712.407596][T29006] ? __pollwait+0x276/0x490 [ 1712.407626][T29006] vb2_core_poll+0x611/0x740 [ 1712.407658][T29006] vb2_poll+0x4b/0xe0 [ 1712.407683][T29006] vb2_fop_poll+0x10e/0x350 [ 1712.407711][T29006] ? __pfx_vb2_fop_poll+0x10/0x10 [ 1712.407737][T29006] v4l2_poll+0x15f/0x220 [ 1712.407814][T29006] ? __pfx_v4l2_poll+0x10/0x10 [ 1712.407853][T29006] do_sys_poll+0x6e5/0xe90 [ 1712.407878][T29006] ? rcu_is_watching+0x13/0xc0 [ 1712.407914][T29006] ? __pfx_do_sys_poll+0x10/0x10 [ 1712.407965][T29006] ? __futex_wait+0x256/0x300 [ 1712.407999][T29006] ? __pfx___pollwait+0x10/0x10 [ 1712.408028][T29006] ? __pfx_pollwake+0x10/0x10 [ 1712.408107][T29006] ? ktime_get_ts64+0x306/0x420 [ 1712.408146][T29006] ? ktime_get_ts64+0x318/0x420 [ 1712.408181][T29006] ? ktime_get_ts64+0x257/0x420 [ 1712.408226][T29006] __x64_sys_poll+0x1b3/0x420 [ 1712.408256][T29006] ? __pfx___x64_sys_poll+0x10/0x10 [ 1712.408293][T29006] do_syscall_64+0x121/0x770 [ 1712.408332][T29006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1712.408359][T29006] RIP: 0033:0x7f7884b9e159 [ 1712.408381][T29006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1712.408406][T29006] RSP: 002b:00007f788214b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 1712.408431][T29006] RAX: ffffffffffffffda RBX: 00007f7884e26450 RCX: 00007f7884b9e159 [ 1712.408449][T29006] RDX: 0000000000000007 RSI: 0000000000000003 RDI: 0000200000000480 [ 1712.408465][T29006] RBP: 00007f7884c3503b R08: 0000000000000000 R09: 0000000000000000 [ 1712.408481][T29006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1712.408496][T29006] R13: 00007f7884e264e8 R14: 00007f7884e26450 R15: 00007ffd648d9ef8 [ 1712.408530][T29006] [ 1714.947569][T21608] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 1715.624009][T29039] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4520'. [ 1715.802317][T29024] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20000 [ 1715.802370][T29024] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1715.802415][T29024] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 1715.802444][T29024] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 1715.802466][T29024] page dumped because: unmovable page [ 1715.802561][T29024] page_owner tracks the page as allocated [ 1715.802575][T29024] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 1392106671 [ 1715.802611][T29024] register_early_stack+0x74/0xaf [ 1715.802648][T29024] init_page_owner+0x4c/0xa40 [ 1715.802726][T29024] page_ext_init+0x71d/0x780 [ 1715.802750][T29024] mm_core_init+0x229/0x270 [ 1715.802780][T29024] page_owner free stack trace missing [ 1717.881572][T26075] Bluetooth: hci1: unexpected event 0x30 length: 10 > 3 [ 1719.462998][T29074] netlink: 'syz.0.4526': attribute type 2 has an invalid length. [ 1719.479186][T29074] netlink: 'syz.0.4526': attribute type 3 has an invalid length. [ 1719.489306][T29074] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4526'. [ 1720.737501][T29102] snd_virmidi snd_virmidi.0: control 61678:131081:1:y:1033 is already present [ 1723.506435][T29128] netlink: 'syz.2.4537': attribute type 2 has an invalid length. [ 1723.514615][T29128] netlink: 'syz.2.4537': attribute type 3 has an invalid length. [ 1723.522620][T29128] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4537'. [ 1725.157055][T29145] netlink: 286 bytes leftover after parsing attributes in process `syz.1.4542'. [ 1727.522029][T29168] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input17 [ 1728.655910][T29188] ubi0: attaching mtd0 [ 1728.687359][T29188] ubi0 error: validate_ec_hdr: bad VID header offset 65, expected 64 [ 1728.702468][T29188] ubi0 error: validate_ec_hdr: bad EC header [ 1728.709375][T29188] Erase counter header dump: [ 1728.714092][T29188] magic 0x55424923 [ 1728.714122][T29188] version 1 [ 1728.714132][T29188] ec 1 [ 1728.714142][T29188] vid_hdr_offset 65 [ 1728.714151][T29188] data_offset 129 [ 1728.714160][T29188] image_seq 308845283 [ 1728.714170][T29188] hdr_crc 0xe218a037 [ 1728.714180][T29188] erase counter header hexdump: [ 1728.714252][T29188] CPU: 0 UID: 0 PID: 29188 Comm: syz.1.4548 Tainted: G L syzkaller #0 PREEMPT(full) [ 1728.714286][T29188] Tainted: [L]=SOFTLOCKUP [ 1728.714296][T29188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1728.714312][T29188] Call Trace: [ 1728.714321][T29188] [ 1728.714331][T29188] dump_stack_lvl+0x100/0x190 [ 1728.714369][T29188] validate_ec_hdr+0x2d0/0x330 [ 1728.714403][T29188] ubi_io_read_ec_hdr+0x656/0x6d0 [ 1728.714438][T29188] ubi_attach+0x601/0x4d30 [ 1728.714487][T29188] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1728.714524][T29188] ? __pfx_ubi_msg+0x10/0x10 [ 1728.714594][T29188] ? __pfx_ubi_attach+0x10/0x10 [ 1728.714630][T29188] ? lockdep_init_map_type+0x5c/0x250 [ 1728.714672][T29188] ? ubi_attach_mtd_dev+0x1429/0x3420 [ 1728.714712][T29188] ? __vmalloc_node_noprof+0xad/0xf0 [ 1728.714748][T29188] ? ubi_attach_mtd_dev+0x1429/0x3420 [ 1728.714791][T29188] ubi_attach_mtd_dev+0x1478/0x3420 [ 1728.714845][T29188] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 1728.714885][T29188] ? __pfx_get_mtd_device+0x10/0x10 [ 1728.714978][T29188] ctrl_cdev_ioctl+0x375/0x410 [ 1728.715020][T29188] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 1728.715068][T29188] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 1728.715111][T29188] __x64_sys_ioctl+0x18e/0x210 [ 1728.715155][T29188] do_syscall_64+0x121/0x770 [ 1728.715197][T29188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1728.715223][T29188] RIP: 0033:0x7f7884b9e159 [ 1728.715245][T29188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1728.715271][T29188] RSP: 002b:00007f7882db4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1728.715295][T29188] RAX: ffffffffffffffda RBX: 00007f7884e26180 RCX: 00007f7884b9e159 [ 1728.715313][T29188] RDX: 0000000000000000 RSI: 0000000040186f40 RDI: 0000000000000003 [ 1728.715328][T29188] RBP: 00007f7884c3503b R08: 0000000000000000 R09: 0000000000000000 [ 1728.715344][T29188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1728.715359][T29188] R13: 00007f7884e26218 R14: 00007f7884e26180 R15: 00007ffd648d9ef8 [ 1728.715392][T29188] [ 1728.715402][T29188] ubi0 error: ubi_io_read_ec_hdr: validation failed for PEB 1 [ 1729.478721][T29188] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1730.147077][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.147144][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1749.062415][T29406] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1749.311019][T29411] futex_wake_op: syz.3.4587 tries to shift op by -2048; fix this program [ 1749.311189][T29411] futex_wake_op: syz.3.4587 tries to shift op by -2048; fix this program [ 1753.908297][T29460] netlink: 13 bytes leftover after parsing attributes in process `syz.0.4595'. [ 1755.955395][T29490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4602'. [ 1755.967102][T29490] netlink: 25 bytes leftover after parsing attributes in process `syz.3.4602'. [ 1756.217247][T29492] FAULT_INJECTION: forcing a failure. [ 1756.217247][T29492] name failslab, interval 1, probability 0, space 0, times 0 [ 1756.232916][T29492] CPU: 0 UID: 0 PID: 29492 Comm: syz.3.4604 Tainted: G L syzkaller #0 PREEMPT(full) [ 1756.232957][T29492] Tainted: [L]=SOFTLOCKUP [ 1756.232967][T29492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1756.232983][T29492] Call Trace: [ 1756.232993][T29492] [ 1756.233003][T29492] dump_stack_lvl+0x100/0x190 [ 1756.233045][T29492] should_fail_ex.cold+0x5/0xa [ 1756.233078][T29492] should_failslab+0xc2/0x120 [ 1756.233114][T29492] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1756.233142][T29492] ? __pfx_map_id_range_down+0x10/0x10 [ 1756.233177][T29492] ? rcu_is_watching+0x13/0xc0 [ 1756.233211][T29492] ? security_inode_alloc+0x3b/0x2c0 [ 1756.233251][T29492] security_inode_alloc+0x3b/0x2c0 [ 1756.233285][T29492] inode_init_always_gfp+0xc6f/0xfb0 [ 1756.233320][T29492] alloc_inode+0x8e/0x250 [ 1756.233358][T29492] sock_alloc+0x44/0x280 [ 1756.233393][T29492] ? security_socket_create+0x7f/0x250 [ 1756.233426][T29492] sock_create_lite+0x82/0x120 [ 1756.233467][T29492] __netlink_kernel_create+0xbd/0x750 [ 1756.233495][T29492] ? __lock_acquire+0x5c0/0x1f40 [ 1756.233532][T29492] ? __pfx___netlink_kernel_create+0x10/0x10 [ 1756.233569][T29492] rtnetlink_net_init+0xb9/0x140 [ 1756.233687][T29492] ? __pfx_rtnetlink_net_init+0x10/0x10 [ 1756.233718][T29492] ? lockdep_init_map_type+0x5c/0x250 [ 1756.233754][T29492] ? __pfx_rtnetlink_rcv+0x10/0x10 [ 1756.233781][T29492] ? __pfx_rtnetlink_bind+0x10/0x10 [ 1756.233811][T29492] ? mutex_init_lockdep+0xf1/0x120 [ 1756.233852][T29492] ? __pfx_rtnetlink_net_init+0x10/0x10 [ 1756.233880][T29492] ops_init+0x1e2/0x5f0 [ 1756.233918][T29492] setup_net+0x118/0x3a0 [ 1756.233953][T29492] ? __pfx_setup_net+0x10/0x10 [ 1756.233995][T29492] copy_net_ns+0x345/0x7a0 [ 1756.234035][T29492] create_new_namespaces+0x3ea/0xac0 [ 1756.234081][T29492] unshare_nsproxy_namespaces+0xf2/0x220 [ 1756.234122][T29492] ksys_unshare+0x4a2/0xa70 [ 1756.234148][T29492] ? __pfx_ksys_unshare+0x10/0x10 [ 1756.234192][T29492] __x64_sys_unshare+0x31/0x40 [ 1756.234216][T29492] do_syscall_64+0x121/0x770 [ 1756.234257][T29492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1756.234285][T29492] RIP: 0033:0x7f3a6339e159 [ 1756.234315][T29492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1756.234341][T29492] RSP: 002b:00007f3a64212028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1756.234366][T29492] RAX: ffffffffffffffda RBX: 00007f3a63625fa0 RCX: 00007f3a6339e159 [ 1756.234383][T29492] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1756.234399][T29492] RBP: 00007f3a6343503b R08: 0000000000000000 R09: 0000000000000000 [ 1756.234415][T29492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1756.234430][T29492] R13: 00007f3a63626038 R14: 00007f3a63625fa0 R15: 00007ffda37ecc98 [ 1756.234462][T29492] [ 1756.799809][T29494] netlink: 306 bytes leftover after parsing attributes in process `syz.3.4605'. [ 1760.050076][T26075] Bluetooth: hci3: unexpected event 0x30 length: 10 > 3 [ 1766.273063][T29596] random: crng reseeded on system resumption [ 1766.613442][T29601] netlink: 25 bytes leftover after parsing attributes in process `syz.3.4625'. [ 1769.603200][T29636] Process accounting resumed [ 1769.945594][T29652] futex_wake_op: syz.3.4636 tries to shift op by -2048; fix this program [ 1770.119397][T29644] 0x000000000001-0x000000020000 : "" [ 1770.153737][T29644] ftl_cs: FTL header corrupt! [ 1772.672647][T29681] FAULT_INJECTION: forcing a failure. [ 1772.672647][T29681] name failslab, interval 1, probability 0, space 0, times 0 [ 1772.708558][T29681] CPU: 0 UID: 0 PID: 29681 Comm: syz.3.4641 Tainted: G L syzkaller #0 PREEMPT(full) [ 1772.708602][T29681] Tainted: [L]=SOFTLOCKUP [ 1772.708613][T29681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1772.708629][T29681] Call Trace: [ 1772.708639][T29681] [ 1772.708650][T29681] dump_stack_lvl+0x100/0x190 [ 1772.708690][T29681] should_fail_ex.cold+0x5/0xa [ 1772.708723][T29681] should_failslab+0xc2/0x120 [ 1772.708757][T29681] __kmalloc_cache_noprof+0x91/0x6d0 [ 1772.708798][T29681] ? tomoyo_find_next_domain+0x145/0x2010 [ 1772.708846][T29681] tomoyo_find_next_domain+0x145/0x2010 [ 1772.708881][T29681] ? __pfx___kernel_read+0x10/0x10 [ 1772.708915][T29681] ? __pfx_tomoyo_find_next_domain+0x10/0x10 [ 1772.708960][T29681] tomoyo_bprm_check_security+0x12d/0x1d0 [ 1772.708990][T29681] ? tomoyo_bprm_check_security+0x11f/0x1d0 [ 1772.709022][T29681] security_bprm_check+0x87/0x1e0 [ 1772.709056][T29681] bprm_execve+0x80b/0x1940 [ 1772.709089][T29681] ? __pfx_bprm_execve+0x10/0x10 [ 1772.709112][T29681] ? copy_string_kernel+0x339/0x3f0 [ 1772.709143][T29681] do_execveat_common.isra.0+0x4a5/0x580 [ 1772.709175][T29681] __x64_sys_execveat+0xdf/0x130 [ 1772.709205][T29681] do_syscall_64+0x121/0x770 [ 1772.709246][T29681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1772.709272][T29681] RIP: 0033:0x7f3a6339e159 [ 1772.709293][T29681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1772.709318][T29681] RSP: 002b:00007f3a64212028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1772.709343][T29681] RAX: ffffffffffffffda RBX: 00007f3a63625fa0 RCX: 00007f3a6339e159 [ 1772.709361][T29681] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000006 [ 1772.709377][T29681] RBP: 00007f3a6343503b R08: 0000000000000000 R09: 0000000000000000 [ 1772.709393][T29681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1772.709408][T29681] R13: 00007f3a63626038 R14: 00007f3a63625fa0 R15: 00007ffda37ecc98 [ 1772.709441][T29681] [ 1774.232145][T29700] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4643'. [ 1776.353655][T29718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4647'. [ 1776.364631][T29718] netlink: 54041 bytes leftover after parsing attributes in process `syz.1.4647'. [ 1776.668106][T29707] kexec: Could not allocate control_code_buffer [ 1786.012913][T29836] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1787.640230][T29847] netlink: 338 bytes leftover after parsing attributes in process `syz.0.4671'. [ 1790.886453][T29885] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 1791.270597][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.270688][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1802.964084][T29985] Process accounting paused [ 1809.059703][T30093] FAULT_INJECTION: forcing a failure. [ 1809.059703][T30093] name failslab, interval 1, probability 0, space 0, times 0 [ 1809.104842][T30093] CPU: 0 UID: 0 PID: 30093 Comm: syz.0.4725 Tainted: G L syzkaller #0 PREEMPT(full) [ 1809.104884][T30093] Tainted: [L]=SOFTLOCKUP [ 1809.104894][T30093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1809.104910][T30093] Call Trace: [ 1809.104919][T30093] [ 1809.104929][T30093] dump_stack_lvl+0x100/0x190 [ 1809.104969][T30093] should_fail_ex.cold+0x5/0xa [ 1809.105002][T30093] should_failslab+0xc2/0x120 [ 1809.105037][T30093] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1809.105068][T30093] ? skb_clone+0x190/0x400 [ 1809.105108][T30093] skb_clone+0x190/0x400 [ 1809.105141][T30093] netlink_broadcast_filtered+0xb22/0xf20 [ 1809.105184][T30093] netlink_broadcast+0x39/0x50 [ 1809.105213][T30093] kobject_uevent_env+0xcdd/0x18b0 [ 1809.105258][T30093] kvm_uevent_notify_change.part.0+0x3a6/0x450 [ 1809.105291][T30093] ? __pfx_kvm_vm_release+0x10/0x10 [ 1809.105317][T30093] kvm_put_kvm+0xf9/0xc10 [ 1809.105342][T30093] ? lockdep_hardirqs_on+0x7d/0x110 [ 1809.105378][T30093] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1809.105410][T30093] ? kvm_irqfd_release+0xd3/0x110 [ 1809.105440][T30093] ? __pfx_kvm_vm_release+0x10/0x10 [ 1809.105466][T30093] kvm_vm_release+0x3c/0x50 [ 1809.105490][T30093] __fput+0x3ff/0xb50 [ 1809.105525][T30093] ? _raw_spin_unlock_irq+0x23/0x50 [ 1809.105559][T30093] task_work_run+0x150/0x240 [ 1809.105592][T30093] ? __pfx_task_work_run+0x10/0x10 [ 1809.105631][T30093] exit_to_user_mode_loop+0x1d8/0x700 [ 1809.105673][T30093] ? rcu_is_watching+0x13/0xc0 [ 1809.105700][T30093] do_syscall_64+0x603/0x770 [ 1809.105746][T30093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1809.105773][T30093] RIP: 0033:0x7f533f79e159 [ 1809.105794][T30093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1809.105820][T30093] RSP: 002b:00007f5340651028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1809.105847][T30093] RAX: 0000000000000000 RBX: 00007f533fa26090 RCX: 00007f533f79e159 [ 1809.105864][T30093] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000002 [ 1809.105880][T30093] RBP: 00007f533f83503b R08: 0000000000000000 R09: 0000000000000000 [ 1809.105896][T30093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1809.105912][T30093] R13: 00007f533fa26128 R14: 00007f533fa26090 R15: 00007ffc14302848 [ 1809.105944][T30093] [ 1813.952987][T26075] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 1814.195078][T21608] Bluetooth: hci1: unexpected event 0x05 length: 6 > 4 [ 1816.019342][T21608] Bluetooth: hci1: command tx timeout [ 1817.279470][T30181] netlink: 354 bytes leftover after parsing attributes in process `syz.0.4739'. [ 1823.562191][T30233] FAULT_INJECTION: forcing a failure. [ 1823.562191][T30233] name failslab, interval 1, probability 0, space 0, times 0 [ 1823.562264][T30233] CPU: 0 UID: 0 PID: 30233 Comm: syz.3.4749 Tainted: G L syzkaller #0 PREEMPT(full) [ 1823.562300][T30233] Tainted: [L]=SOFTLOCKUP [ 1823.562310][T30233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1823.562326][T30233] Call Trace: [ 1823.562335][T30233] [ 1823.562345][T30233] dump_stack_lvl+0x100/0x190 [ 1823.562383][T30233] should_fail_ex.cold+0x5/0xa [ 1823.562415][T30233] should_failslab+0xc2/0x120 [ 1823.562458][T30233] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1823.562486][T30233] ? __pfx_map_id_range_down+0x10/0x10 [ 1823.562522][T30233] ? security_inode_alloc+0x3b/0x2c0 [ 1823.562562][T30233] security_inode_alloc+0x3b/0x2c0 [ 1823.562596][T30233] inode_init_always_gfp+0xc6f/0xfb0 [ 1823.562631][T30233] alloc_inode+0x8e/0x250 [ 1823.562669][T30233] new_inode+0x22/0x1c0 [ 1823.562708][T30233] debugfs_create_dir+0x9d/0x420 [ 1823.562743][T30233] kvm_dev_ioctl+0x1286/0x1b50 [ 1823.562780][T30233] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1823.562816][T30233] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1823.562844][T30233] __x64_sys_ioctl+0x18e/0x210 [ 1823.562887][T30233] do_syscall_64+0x121/0x770 [ 1823.562927][T30233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1823.562953][T30233] RIP: 0033:0x7f3a6339e159 [ 1823.562974][T30233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1823.562999][T30233] RSP: 002b:00007f3a64212028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1823.563024][T30233] RAX: ffffffffffffffda RBX: 00007f3a63625fa0 RCX: 00007f3a6339e159 [ 1823.563041][T30233] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000002 [ 1823.563057][T30233] RBP: 00007f3a6343503b R08: 0000000000000000 R09: 0000000000000000 [ 1823.563073][T30233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1823.563088][T30233] R13: 00007f3a63626038 R14: 00007f3a63625fa0 R15: 00007ffda37ecc98 [ 1823.563120][T30233] [ 1823.811215][T30233] debugfs: out of free dentries, can not create directory '30233-3' [ 1827.286903][T30265] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4757'. [ 1829.003651][T30282] FAULT_INJECTION: forcing a failure. [ 1829.003651][T30282] name failslab, interval 1, probability 0, space 0, times 0 [ 1829.024087][T30282] CPU: 0 UID: 0 PID: 30282 Comm: syz.0.4761 Tainted: G L syzkaller #0 PREEMPT(full) [ 1829.024135][T30282] Tainted: [L]=SOFTLOCKUP [ 1829.024144][T30282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1829.024161][T30282] Call Trace: [ 1829.024170][T30282] [ 1829.024180][T30282] dump_stack_lvl+0x100/0x190 [ 1829.024221][T30282] should_fail_ex.cold+0x5/0xa [ 1829.024253][T30282] should_failslab+0xc2/0x120 [ 1829.024288][T30282] __kmalloc_cache_noprof+0x91/0x6d0 [ 1829.024328][T30282] ? __kasan_kmalloc+0xaa/0xb0 [ 1829.024357][T30282] ? vidtv_psi_network_name_desc_init+0x68/0x310 [ 1829.024401][T30282] vidtv_psi_network_name_desc_init+0x68/0x310 [ 1829.024439][T30282] vidtv_psi_nit_table_init+0x291/0x5f0 [ 1829.024484][T30282] vidtv_channel_si_init+0xccf/0x18f0 [ 1829.024535][T30282] vidtv_mux_init+0x522/0xbf0 [ 1829.024580][T30282] vidtv_start_feed+0x34e/0x500 [ 1829.024612][T30282] ? __pfx_vidtv_start_feed+0x10/0x10 [ 1829.024641][T30282] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1829.024684][T30282] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 1829.024722][T30282] ? mark_held_locks+0x40/0x70 [ 1829.024762][T30282] ? __pfx_vidtv_start_feed+0x10/0x10 [ 1829.024792][T30282] dmx_ts_feed_start_filtering+0xf6/0x220 [ 1829.024831][T30282] dvb_dmxdev_start_feed+0x273/0x3f0 [ 1829.024862][T30282] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 1829.024894][T30282] ? dvb_dmxdev_add_pid+0x2a4/0x4f0 [ 1829.024925][T30282] dvb_demux_do_ioctl+0xe64/0x1200 [ 1829.024964][T30282] dvb_usercopy+0x167/0x340 [ 1829.024987][T30282] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1829.025018][T30282] ? __pfx_dvb_usercopy+0x10/0x10 [ 1829.025041][T30282] ? __fget_files+0x34/0x3d0 [ 1829.025081][T30282] ? __fget_files+0x21f/0x3d0 [ 1829.025122][T30282] dvb_demux_ioctl+0x29/0x40 [ 1829.025146][T30282] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1829.025172][T30282] __x64_sys_ioctl+0x18e/0x210 [ 1829.025217][T30282] do_syscall_64+0x121/0x770 [ 1829.025257][T30282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1829.025284][T30282] RIP: 0033:0x7f533f79e159 [ 1829.025305][T30282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1829.025332][T30282] RSP: 002b:00007f5340672028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1829.025358][T30282] RAX: ffffffffffffffda RBX: 00007f533fa25fa0 RCX: 00007f533f79e159 [ 1829.025376][T30282] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000007 [ 1829.025392][T30282] RBP: 00007f533f83503b R08: 0000000000000000 R09: 0000000000000000 [ 1829.025409][T30282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1829.025424][T30282] R13: 00007f533fa26038 R14: 00007f533fa25fa0 R15: 00007ffc14302848 [ 1829.025458][T30282] [ 1834.421680][T30315] Process accounting resumed [ 1837.724185][T30375] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4780'. [ 1837.815682][T30373] netlink: 'syz.0.4780': attribute type 1 has an invalid length. [ 1837.815719][T30373] netlink: 33 bytes leftover after parsing attributes in process `syz.0.4780'. [ 1838.751906][T30378] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4782'. [ 1838.896720][T30378] bond0: (slave bond_slave_1): Releasing backup interface [ 1852.391162][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1852.391229][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1855.919213][T30539] netlink: 'syz.3.4807': attribute type 1 has an invalid length. [ 1855.919253][T30539] netlink: 13 bytes leftover after parsing attributes in process `syz.3.4807'. [ 1862.824696][T30600] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1865.973173][T30597] Process accounting paused [ 1868.000456][T30649] netlink: 330 bytes leftover after parsing attributes in process `syz.1.4830'. [ 1868.718069][T30649] syz_tun: refused to change device tx_queue_len [ 1870.699718][T30658] netlink: 350 bytes leftover after parsing attributes in process `syz.1.4831'. [ 1876.561702][T30701] syz.3.4839 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1879.537342][T30713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4841'. [ 1879.548975][T30713] netlink: 25 bytes leftover after parsing attributes in process `syz.1.4841'. [ 1884.010662][T30765] sd 0:0:1:0: PR command failed: 1026 [ 1884.010720][T30765] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1884.010777][T30765] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1885.735578][ T31] audit: type=1800 audit(4294973707.222:37): pid=30783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4852" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1893.413357][T30846] phram: parameter too long [ 1897.626850][T21608] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 1897.665865][T21608] Bluetooth: hci3: unexpected event 0x06 length: 6 > 3 [ 1899.665574][T21608] Bluetooth: hci3: command 0x0406 tx timeout [ 1901.734916][T21608] Bluetooth: hci3: command 0x0406 tx timeout [ 1902.794211][ T5620] Process accounting resumed [ 1902.865454][T30907] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:106: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 1902.884084][T30907] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:106: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 1902.919874][T30907] EXT4-fs error (device sda1): ext4_validate_block_bitmap:427: comm syz-executor: bg 0: bad block bitmap checksum [ 1903.619633][T21608] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1903.632669][T21608] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1903.633877][T21608] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1903.634630][T21608] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1903.635227][T21608] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1905.712560][T26075] Bluetooth: hci4: command tx timeout [ 1907.176258][T30950] tipc: Started in network mode [ 1907.181376][T30950] tipc: Node identity ee00, cluster identity 4711 [ 1907.190432][T30950] tipc: Node number set to 60928 [ 1907.781909][T26075] Bluetooth: hci4: command tx timeout [ 1908.914971][T30916] bridge0: port 1(bridge_slave_0) entered blocking state [ 1908.922762][T30916] bridge0: port 1(bridge_slave_0) entered disabled state [ 1908.930436][T30916] bridge_slave_0: entered allmulticast mode [ 1908.944858][T30916] bridge_slave_0: entered promiscuous mode [ 1908.961510][T30916] bridge0: port 2(bridge_slave_1) entered blocking state [ 1908.971166][T30916] bridge0: port 2(bridge_slave_1) entered disabled state [ 1908.971329][T30916] bridge_slave_1: entered allmulticast mode [ 1908.993462][T30916] bridge_slave_1: entered promiscuous mode [ 1909.151341][T30916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1909.174261][T30916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1909.359675][T30916] team0: Port device team_slave_0 added [ 1909.382733][T30916] team0: Port device team_slave_1 added [ 1909.496799][T30916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1909.496832][T30916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1909.496874][T30916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1909.550558][T30916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1909.557809][T30916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1909.557845][T30916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1909.851026][T21608] Bluetooth: hci4: command tx timeout [ 1909.887128][T30916] hsr_slave_0: entered promiscuous mode [ 1909.900104][T30916] hsr_slave_1: entered promiscuous mode [ 1909.900968][T30916] debugfs: 'hsr0' already exists in 'hsr' [ 1909.901009][T30916] Cannot create hsr debugfs directory [ 1911.923051][T21608] Bluetooth: hci4: command tx timeout [ 1912.810350][T30916] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1912.851725][T30916] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1912.864107][T30916] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1912.914064][T30916] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1912.927791][T30916] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1912.950773][T30916] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1912.962786][T30916] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1912.986253][T30916] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1913.295691][T30988] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2186283331 (8745133324 ns) > initial count (8745132648 ns). Using initial count to start timer. [ 1913.518856][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1913.518927][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1916.719633][T30916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1916.893233][T30916] 8021q: adding VLAN 0 to HW filter on device team0 [ 1916.926166][T23582] bridge0: port 1(bridge_slave_0) entered blocking state [ 1916.926268][T23582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1916.994804][T28332] bridge0: port 2(bridge_slave_1) entered blocking state [ 1916.994933][T28332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1917.446579][T31013] netlink: 'syz.3.4894': attribute type 1 has an invalid length. [ 1917.446618][T31013] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4894'. [ 1920.057347][T30916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1921.349027][T31053] FAULT_INJECTION: forcing a failure. [ 1921.349027][T31053] name failslab, interval 1, probability 0, space 0, times 0 [ 1921.349105][T31053] CPU: 0 UID: 0 PID: 31053 Comm: syz.2.4900 Tainted: G L syzkaller #0 PREEMPT(full) [ 1921.349144][T31053] Tainted: [L]=SOFTLOCKUP [ 1921.349154][T31053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1921.349180][T31053] Call Trace: [ 1921.349189][T31053] [ 1921.349200][T31053] dump_stack_lvl+0x100/0x190 [ 1921.349242][T31053] should_fail_ex.cold+0x5/0xa [ 1921.349276][T31053] should_failslab+0xc2/0x120 [ 1921.349313][T31053] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1921.349342][T31053] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1921.349379][T31053] ? vm_area_dup+0x27/0x9d0 [ 1921.349421][T31053] vm_area_dup+0x27/0x9d0 [ 1921.349459][T31053] __split_vma+0x19c/0x1de0 [ 1921.349505][T31053] ? __pfx___split_vma+0x10/0x10 [ 1921.349542][T31053] ? mas_next_slot+0xc05/0x13a0 [ 1921.349600][T31053] vms_gather_munmap_vmas+0x3a5/0x1720 [ 1921.349648][T31053] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1921.349696][T31053] ? mmap_region+0x410/0x6d0 [ 1921.349724][T31053] ? __pfx_mmap_region+0x10/0x10 [ 1921.349749][T31053] ? thp_get_unmapped_area_vmaflags+0x236/0x2b0 [ 1921.349802][T31053] do_vmi_align_munmap+0x287/0x5f0 [ 1921.349847][T31053] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 1921.349898][T31053] ? __lock_acquire+0x5c0/0x1f40 [ 1921.349957][T31053] ? mas_walk+0x260/0x310 [ 1921.349996][T31053] do_vmi_munmap+0x1f8/0x3e0 [ 1921.350042][T31053] __vm_munmap+0x196/0x390 [ 1921.350069][T31053] ? __pfx___vm_munmap+0x10/0x10 [ 1921.350113][T31053] __x64_sys_munmap+0x59/0x80 [ 1921.350147][T31053] do_syscall_64+0x121/0x770 [ 1921.350194][T31053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1921.350222][T31053] RIP: 0033:0x7f84fa99df87 [ 1921.350243][T31053] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1921.350276][T31053] RSP: 002b:00007f84fb8ced18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 1921.350302][T31053] RAX: ffffffffffffffda RBX: 00007f84f0000000 RCX: 00007f84fa99df87 [ 1921.350321][T31053] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 00007f84efe00000 [ 1921.350339][T31053] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 1921.350356][T31053] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 1921.350374][T31053] R13: 0000000000001000 R14: 00007f84f4000000 R15: 0000000000200000 [ 1921.350406][T31053] [ 1923.932607][T30916] veth0_vlan: entered promiscuous mode [ 1923.963571][T30916] veth1_vlan: entered promiscuous mode [ 1924.162436][T30916] veth0_macvtap: entered promiscuous mode [ 1924.192604][T30916] veth1_macvtap: entered promiscuous mode [ 1924.253343][T31086] netlink: 158 bytes leftover after parsing attributes in process `syz.2.4905'. [ 1924.253385][T31086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4905'. [ 1924.289860][T30916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1924.329404][T30916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1924.425665][ T1112] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1924.426435][ T1112] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1924.426493][ T1112] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1924.426536][ T1112] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1924.971538][T16258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1924.971593][T16258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1925.139236][T16258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1925.139276][T16258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1926.673004][T31113] phram: parameter too long [ 1931.754113][T31153] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4919'. [ 1931.765268][T31153] veth1_macvtap: left promiscuous mode [ 1932.789528][T31166] netlink: 25 bytes leftover after parsing attributes in process `syz.3.4922'. [ 1935.877836][T21608] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1936.218985][T31197] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1940.317503][T31236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4933'. [ 1940.336097][T31236] netlink: 354 bytes leftover after parsing attributes in process `syz.4.4933'. [ 1940.393039][T31238] FAULT_INJECTION: forcing a failure. [ 1940.393039][T31238] name failslab, interval 1, probability 0, space 0, times 0 [ 1940.393093][T31238] CPU: 0 UID: 0 PID: 31238 Comm: syz.3.4932 Tainted: G L syzkaller #0 PREEMPT(full) [ 1940.393131][T31238] Tainted: [L]=SOFTLOCKUP [ 1940.393142][T31238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1940.393160][T31238] Call Trace: [ 1940.393169][T31238] [ 1940.393180][T31238] dump_stack_lvl+0x100/0x190 [ 1940.393219][T31238] should_fail_ex.cold+0x5/0xa [ 1940.393253][T31238] should_failslab+0xc2/0x120 [ 1940.393288][T31238] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 1940.393318][T31238] ? __alloc_skb+0x5b7/0x710 [ 1940.393351][T31238] ? __alloc_skb+0x140/0x710 [ 1940.393386][T31238] __alloc_skb+0x140/0x710 [ 1940.393414][T31238] ? __alloc_skb+0x5b7/0x710 [ 1940.393444][T31238] ? __pfx___alloc_skb+0x10/0x10 [ 1940.393473][T31238] ? common_file_perm+0x266/0x500 [ 1940.393523][T31238] vhci_write+0xc1/0x490 [ 1940.393659][T31238] vfs_write+0x6af/0x1050 [ 1940.393689][T31238] ? __pfx_vhci_write+0x10/0x10 [ 1940.393728][T31238] ? __pfx_vfs_write+0x10/0x10 [ 1940.393752][T31238] ? find_held_lock+0x2b/0x80 [ 1940.393799][T31238] ksys_write+0x12a/0x250 [ 1940.393825][T31238] ? __pfx_ksys_write+0x10/0x10 [ 1940.393860][T31238] do_syscall_64+0x121/0x770 [ 1940.393901][T31238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1940.393928][T31238] RIP: 0033:0x7f3a6339e159 [ 1940.393950][T31238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1940.393979][T31238] RSP: 002b:00007f3a641af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1940.394005][T31238] RAX: ffffffffffffffda RBX: 00007f3a63626270 RCX: 00007f3a6339e159 [ 1940.394023][T31238] RDX: 000000000000007f RSI: 00002000000002c0 RDI: 00000000000000ca [ 1940.394040][T31238] RBP: 00007f3a6343503b R08: 0000000000000000 R09: 0000000000000000 [ 1940.394058][T31238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1940.394074][T31238] R13: 00007f3a63626308 R14: 00007f3a63626270 R15: 00007ffda37ecc98 [ 1940.394107][T31238] [ 1946.745632][T31282] netlink: 25 bytes leftover after parsing attributes in process `syz.3.4951'. [ 1947.316474][T31300] FAULT_INJECTION: forcing a failure. [ 1947.316474][T31300] name failslab, interval 1, probability 0, space 0, times 0 [ 1947.316529][T31300] CPU: 0 UID: 0 PID: 31300 Comm: syz.2.4946 Tainted: G L syzkaller #0 PREEMPT(full) [ 1947.316567][T31300] Tainted: [L]=SOFTLOCKUP [ 1947.316577][T31300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1947.316595][T31300] Call Trace: [ 1947.316604][T31300] [ 1947.316615][T31300] dump_stack_lvl+0x100/0x190 [ 1947.316654][T31300] should_fail_ex.cold+0x5/0xa [ 1947.316687][T31300] should_failslab+0xc2/0x120 [ 1947.316722][T31300] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 1947.316752][T31300] ? __alloc_skb+0x5b7/0x710 [ 1947.316783][T31300] ? __alloc_skb+0x140/0x710 [ 1947.316818][T31300] __alloc_skb+0x140/0x710 [ 1947.316847][T31300] ? __alloc_skb+0x5b7/0x710 [ 1947.316876][T31300] ? __pfx___alloc_skb+0x10/0x10 [ 1947.316906][T31300] ? common_file_perm+0x266/0x500 [ 1947.316951][T31300] vhci_write+0xc1/0x490 [ 1947.316990][T31300] vfs_write+0x6af/0x1050 [ 1947.317017][T31300] ? __pfx_vhci_write+0x10/0x10 [ 1947.317056][T31300] ? __pfx_vfs_write+0x10/0x10 [ 1947.317093][T31300] ? find_held_lock+0x2b/0x80 [ 1947.317140][T31300] ksys_write+0x12a/0x250 [ 1947.317166][T31300] ? __pfx_ksys_write+0x10/0x10 [ 1947.317201][T31300] do_syscall_64+0x121/0x770 [ 1947.317241][T31300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1947.317269][T31300] RIP: 0033:0x7f84fa99e159 [ 1947.317290][T31300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1947.317319][T31300] RSP: 002b:00007f84fb88e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1947.317345][T31300] RAX: ffffffffffffffda RBX: 00007f84fac26270 RCX: 00007f84fa99e159 [ 1947.317364][T31300] RDX: 000000000000007f RSI: 00002000000002c0 RDI: 00000000000000ca [ 1947.317381][T31300] RBP: 00007f84faa3503b R08: 0000000000000000 R09: 0000000000000000 [ 1947.317398][T31300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1947.317415][T31300] R13: 00007f84fac26308 R14: 00007f84fac26270 R15: 00007ffef4cabd68 [ 1947.317447][T31300] [ 1949.639290][T31308] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1950.070971][T31311] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4950'. [ 1950.071067][T31311] bridge_slave_1: left allmulticast mode [ 1950.071117][T31311] bridge_slave_1: left promiscuous mode [ 1950.071311][T31311] bridge0: port 2(bridge_slave_1) entered disabled state [ 1950.111246][T31311] bridge_slave_0: left allmulticast mode [ 1950.111291][T31311] bridge_slave_0: left promiscuous mode [ 1950.112772][T31311] bridge0: port 1(bridge_slave_0) entered disabled state [ 1955.002231][T31373] sd 0:0:1:0: device reset [ 1955.207851][T31376] phram: parameter too long [ 1961.225289][T31429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4974'. [ 1961.248629][T31429] netlink: 54041 bytes leftover after parsing attributes in process `syz.2.4974'. [ 1968.194584][T31491] random: crng reseeded on system resumption [ 1969.673431][T31511] hub 1-0:1.0: USB hub found [ 1969.738899][T31511] hub 1-0:1.0: 1 port detected [ 1974.637794][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1974.637865][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1979.512528][T31591] phram: parameter too long [ 1980.119680][T31587] netlink: 354 bytes leftover after parsing attributes in process `syz.2.5001'. [ 1983.769237][T31634] binder: 31633:31634 ioctl 541b 0 returned -22 [ 1983.987714][T31639] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5011'. [ 1984.123640][T31639] hsr_slave_0: left promiscuous mode [ 1984.132284][T31639] hsr_slave_1: left promiscuous mode [ 1986.188750][T31656] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 1986.188820][T31656] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1986.188855][T31656] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1986.188895][T31656] page_type: f5(slab) [ 1986.188920][T31656] raw: 00fff00000000040 ffff88801c02e140 dead000000000100 dead000000000122 [ 1986.188947][T31656] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1986.188974][T31656] head: 00fff00000000040 ffff88801c02e140 dead000000000100 dead000000000122 [ 1986.189013][T31656] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1986.189040][T31656] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1986.189065][T31656] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1986.189082][T31656] page dumped because: unmovable page [ 1986.189098][T31656] page_owner tracks the page as allocated [ 1986.189110][T31656] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6218, tgid 6210 (syz.1.92), ts 123287661547 [ 1986.189155][T31656] post_alloc_hook+0xfd/0x120 [ 1986.189200][T31656] get_page_from_freelist+0x110d/0x35d0 [ 1986.189227][T31656] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 1986.189254][T31656] new_slab+0xa9/0x6e0 [ 1986.189277][T31656] refill_objects+0xe3/0x410 [ 1986.189301][T31656] __pcs_replace_empty_main+0x35e/0x650 [ 1986.189343][T31656] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 1986.189384][T31656] ipv4_mib_init_net+0x277/0x500 [ 1986.189424][T31656] ops_init+0x1e2/0x5f0 [ 1986.189458][T31656] setup_net+0x118/0x3a0 [ 1986.189492][T31656] copy_net_ns+0x345/0x7a0 [ 1986.189529][T31656] create_new_namespaces+0x3ea/0xac0 [ 1986.189569][T31656] unshare_nsproxy_namespaces+0xf2/0x220 [ 1986.189609][T31656] ksys_unshare+0x4a2/0xa70 [ 1986.189634][T31656] __x64_sys_unshare+0x31/0x40 [ 1986.189669][T31656] do_syscall_64+0x121/0x770 [ 1986.189707][T31656] page last free pid 4991 tgid 4991 ts 117170354572 stack trace: [ 1986.189728][T31656] __free_frozen_pages+0x79f/0x10f0 [ 1986.189765][T31656] qlist_free_all+0x47/0xf0 [ 1986.189793][T31656] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1986.189831][T31656] __kasan_slab_alloc+0x69/0x90 [ 1986.189863][T31656] __kmalloc_noprof+0x2cc/0x840 [ 1986.189892][T31656] tomoyo_realpath_from_path+0xb6/0x690 [ 1986.189919][T31656] tomoyo_path_perm+0x276/0x460 [ 1986.189955][T31656] security_inode_getattr+0x116/0x280 [ 1986.189995][T31656] vfs_fstat+0x4b/0xe0 [ 1986.190028][T31656] __do_sys_newfstat+0x8b/0x110 [ 1986.190064][T31656] do_syscall_64+0x121/0x770 [ 1986.190100][T31656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1986.599536][T31656] openvswitch: ovs_: Dropping previously announced user features [ 1987.763626][T31676] phram: parameter too long [ 1990.536989][T31685] netlink: 354 bytes leftover after parsing attributes in process `syz.1.5019'. [ 1991.341181][T31697] netlink: 342 bytes leftover after parsing attributes in process `syz.4.5022'. [ 1991.714369][T31712] FAULT_INJECTION: forcing a failure. [ 1991.714369][T31712] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1991.731855][T31712] CPU: 0 UID: 0 PID: 31712 Comm: syz.4.5024 Tainted: G L syzkaller #0 PREEMPT(full) [ 1991.731895][T31712] Tainted: [L]=SOFTLOCKUP [ 1991.731905][T31712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1991.731920][T31712] Call Trace: [ 1991.731929][T31712] [ 1991.731939][T31712] dump_stack_lvl+0x100/0x190 [ 1991.731980][T31712] should_fail_ex.cold+0x5/0xa [ 1991.732010][T31712] ? prepare_alloc_pages+0x16d/0x5b0 [ 1991.732048][T31712] should_fail_alloc_page+0xeb/0x140 [ 1991.732084][T31712] prepare_alloc_pages+0x1f0/0x5b0 [ 1991.732122][T31712] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 1991.732157][T31712] ? __lock_acquire+0x5c0/0x1f40 [ 1991.732194][T31712] ? arch_stack_walk+0xa6/0xf0 [ 1991.732226][T31712] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1991.732256][T31712] ? do_raw_spin_lock+0x128/0x260 [ 1991.732297][T31712] ? find_held_lock+0x2b/0x80 [ 1991.732323][T31712] ? debug_check_no_obj_freed+0x31f/0x630 [ 1991.732369][T31712] ? __lock_acquire+0x5c0/0x1f40 [ 1991.732415][T31712] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1991.732454][T31712] ? policy_nodemask+0xed/0x4f0 [ 1991.732493][T31712] alloc_pages_mpol+0x201/0x550 [ 1991.732529][T31712] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1991.732565][T31712] ? __free_frozen_pages+0x751/0x10f0 [ 1991.732607][T31712] alloc_pages_noprof+0x1a/0x160 [ 1991.732647][T31712] kimage_alloc_pages+0x72/0x380 [ 1991.732684][T31712] kimage_alloc_control_pages+0x157/0xa20 [ 1991.732727][T31712] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 1991.732775][T31712] ? kimage_alloc_control_pages+0x3f7/0xa20 [ 1991.732813][T31712] ? ident_pmd_init+0x12c/0x170 [ 1991.732854][T31712] ? __pfx_alloc_pgt_page+0x10/0x10 [ 1991.732891][T31712] alloc_pgt_page+0xc/0xa0 [ 1991.732926][T31712] ident_pud_init+0x203/0x3d0 [ 1991.732971][T31712] ident_p4d_init+0x247/0x330 [ 1991.733016][T31712] kernel_ident_mapping_init+0x334/0x4c0 [ 1991.733064][T31712] machine_kexec_prepare+0x430/0x1270 [ 1991.733103][T31712] ? kimage_free_page_list+0x185/0x240 [ 1991.733143][T31712] ? __pfx_machine_kexec_prepare+0x10/0x10 [ 1991.733184][T31712] ? __pfx_alloc_pgt_page+0x10/0x10 [ 1991.733232][T31712] do_kexec_load+0x32c/0x810 [ 1991.733272][T31712] ? __pfx_do_kexec_load+0x10/0x10 [ 1991.733311][T31712] ? _copy_from_user+0x59/0xd0 [ 1991.733344][T31712] __x64_sys_kexec_load+0x1bf/0x230 [ 1991.733384][T31712] do_syscall_64+0x121/0x770 [ 1991.733425][T31712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1991.733452][T31712] RIP: 0033:0x7f731ef9e159 [ 1991.733473][T31712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1991.733498][T31712] RSP: 002b:00007f731fef3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 1991.733523][T31712] RAX: ffffffffffffffda RBX: 00007f731f226090 RCX: 00007f731ef9e159 [ 1991.733541][T31712] RDX: 0000200000000040 RSI: 0000000000000002 RDI: 0000000000000005 [ 1991.733557][T31712] RBP: 00007f731f03503b R08: 0000000000000000 R09: 0000000000000000 [ 1991.733573][T31712] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 1991.733589][T31712] R13: 00007f731f226128 R14: 00007f731f226090 R15: 00007ffcd55326b8 [ 1991.733621][T31712] [ 1995.355401][T31740] phram: parameter too long [ 1996.163338][T31746] netlink: 28905 bytes leftover after parsing attributes in process `syz.3.5029'. [ 1996.566382][T31748] netlink: 330 bytes leftover after parsing attributes in process `syz.3.5030'. [ 1996.757348][T31748] ce_p: renamed from lo (while UP) [ 1997.811896][T26075] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1997.839983][T26075] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1997.849838][T26075] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1997.857932][T26075] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1997.865803][T26075] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1999.943961][T26075] Bluetooth: hci5: command tx timeout [ 2002.014933][T26075] Bluetooth: hci5: command tx timeout [ 2004.081634][T26075] Bluetooth: hci5: command tx timeout [ 2004.615973][T31762] bridge0: port 1(bridge_slave_0) entered blocking state [ 2004.616079][T31762] bridge0: port 1(bridge_slave_0) entered disabled state [ 2004.616229][T31762] bridge_slave_0: entered allmulticast mode [ 2004.691503][T31762] bridge_slave_0: entered promiscuous mode [ 2004.952240][T31762] bridge0: port 2(bridge_slave_1) entered blocking state [ 2004.952339][T31762] bridge0: port 2(bridge_slave_1) entered disabled state [ 2004.952503][T31762] bridge_slave_1: entered allmulticast mode [ 2004.979956][T31762] bridge_slave_1: entered promiscuous mode [ 2005.396716][T31762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2005.448005][T31762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2005.568433][T31762] team0: Port device team_slave_0 added [ 2005.596314][T31762] team0: Port device team_slave_1 added [ 2005.711685][T31762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2005.723254][T31762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2005.749808][T31762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2005.769057][T31762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2005.769089][T31762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2005.769132][T31762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2006.052078][T31762] hsr_slave_0: entered promiscuous mode [ 2006.065305][T31762] hsr_slave_1: entered promiscuous mode [ 2006.077377][T31762] debugfs: 'hsr0' already exists in 'hsr' [ 2006.077422][T31762] Cannot create hsr debugfs directory [ 2006.151414][T26075] Bluetooth: hci5: command tx timeout [ 2008.871231][T31762] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2008.889310][T31762] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2008.900444][T31762] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2008.916393][T31864] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5051'. [ 2008.927708][T31762] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2009.156502][T31762] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2009.171030][T31762] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2009.435408][T31762] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2009.462539][T31762] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2010.396946][T31887] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5055'. [ 2013.236128][T31762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2013.340339][T31762] 8021q: adding VLAN 0 to HW filter on device team0 [ 2013.375786][T23582] bridge0: port 1(bridge_slave_0) entered blocking state [ 2013.375890][T23582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2013.427027][T28332] bridge0: port 2(bridge_slave_1) entered blocking state [ 2013.427132][T28332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2016.622967][T31762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2020.107636][T31762] veth0_vlan: entered promiscuous mode [ 2020.156888][T31762] veth1_vlan: entered promiscuous mode [ 2020.332159][T31762] veth0_macvtap: entered promiscuous mode [ 2020.357357][T31762] veth1_macvtap: entered promiscuous mode [ 2020.439345][T31762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2020.501554][T31762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2020.626002][T16258] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2020.626197][T16258] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2020.626249][T16258] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2020.626290][T16258] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2021.683455][T31985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5071'. [ 2022.114127][T16258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2022.122228][T16258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2023.006637][T29165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2023.016284][T29165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2023.781042][T32012] netlink: 25 bytes leftover after parsing attributes in process `syz.5.5031'. [ 2027.638583][T21608] Bluetooth: hci4: command 0x0406 tx timeout [ 2031.524679][T32082] FAULT_INJECTION: forcing a failure. [ 2031.524679][T32082] name failslab, interval 1, probability 0, space 0, times 0 [ 2031.524851][T32082] CPU: 0 UID: 0 PID: 32082 Comm: syz.3.5090 Tainted: G L syzkaller #0 PREEMPT(full) [ 2031.524905][T32082] Tainted: [L]=SOFTLOCKUP [ 2031.524915][T32082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2031.524932][T32082] Call Trace: [ 2031.524941][T32082] [ 2031.524952][T32082] dump_stack_lvl+0x100/0x190 [ 2031.524992][T32082] should_fail_ex.cold+0x5/0xa [ 2031.525024][T32082] should_failslab+0xc2/0x120 [ 2031.525060][T32082] kmem_cache_alloc_noprof+0x92/0x6a0 [ 2031.525090][T32082] ? do_epoll_ctl_file+0x237d/0x36e0 [ 2031.525210][T32082] do_epoll_ctl_file+0x237d/0x36e0 [ 2031.525256][T32082] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 2031.525291][T32082] ? lock_acquire+0x1d1/0x380 [ 2031.525326][T32082] ? __fget_files+0x34/0x3d0 [ 2031.525356][T32082] ? find_held_lock+0x2b/0x80 [ 2031.525385][T32082] ? __fget_files+0x215/0x3d0 [ 2031.525418][T32082] ? __fget_files+0x21f/0x3d0 [ 2031.525453][T32082] ? do_epoll_ctl+0xfd/0x1a0 [ 2031.525486][T32082] do_epoll_ctl+0xfd/0x1a0 [ 2031.525521][T32082] ? __pfx_do_epoll_ctl+0x10/0x10 [ 2031.525564][T32082] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 2031.525602][T32082] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 2031.525648][T32082] do_syscall_64+0x121/0x770 [ 2031.525691][T32082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2031.525717][T32082] RIP: 0033:0x7f3a6339e159 [ 2031.525739][T32082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2031.525765][T32082] RSP: 002b:00007f3a64212028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 2031.525790][T32082] RAX: ffffffffffffffda RBX: 00007f3a63625fa0 RCX: 00007f3a6339e159 [ 2031.525807][T32082] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 2031.525823][T32082] RBP: 00007f3a6343503b R08: 0000000000000000 R09: 0000000000000000 [ 2031.525839][T32082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2031.525854][T32082] R13: 00007f3a63626038 R14: 00007f3a63625fa0 R15: 00007ffda37ecc98 [ 2031.525894][T32082] [ 2032.694226][T32098] netlink: 330 bytes leftover after parsing attributes in process `syz.1.5093'. [ 2033.550891][T32089] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5092'. [ 2035.759392][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 2041.045821][T32169] device-mapper: ioctl: Unable to rename non-existent device, to uuid [ 2041.288823][T32171] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 2048.490789][ T32] INFO: task syz.0.4857:30796 blocked for more than 143 seconds. [ 2048.490828][ T32] Tainted: G L syzkaller #0 [ 2048.490852][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2048.490866][ T32] task:syz.0.4857 state:D stack:27504 pid:30796 tgid:30794 ppid:5620 task_flags:0x400040 flags:0x00080002 [ 2048.490966][ T32] Call Trace: [ 2048.490977][ T32] [ 2048.490994][ T32] __schedule+0x1259/0x6920 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2048.491034][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 2048.491079][ T32] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 2048.491119][ T32] ? __pfx___schedule+0x10/0x10 [ 2048.491152][ T32] ? find_held_lock+0x2b/0x80 [ 2048.491182][ T32] ? schedule+0x225/0x2c0 [ 2048.491221][ T32] schedule+0xdd/0x2c0 [ 2048.491255][ T32] schedule_preempt_disabled+0x13/0x30 [ 2048.491291][ T32] __mutex_lock+0xccb/0x1bd0 [ 2048.491330][ T32] ? nfsd_nl_listener_get_doit+0x13f/0x7c0 [ 2048.491442][ T32] ? __kmalloc_node_track_caller_noprof+0x35b/0x870 [ 2048.491478][ T32] ? trace_kmem_cache_alloc+0xdd/0x100 [ 2048.491517][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 2048.491559][ T32] ? kmalloc_reserve+0xf9/0x350 [ 2048.491603][ T32] ? skb_put+0x138/0x180 [ 2048.491645][ T32] ? __nlmsg_put+0x152/0x1c0 [ 2048.491715][ T32] ? nfsd_nl_listener_get_doit+0x13f/0x7c0 [ 2048.491750][ T32] nfsd_nl_listener_get_doit+0x13f/0x7c0 [ 2048.491785][ T32] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 2048.491823][ T32] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 2048.491866][ T32] genl_family_rcv_msg_doit+0x214/0x300 [ 2048.491905][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2048.491946][ T32] ? genl_get_cmd+0x3e7/0x760 [ 2048.491987][ T32] ? __dev_queue_xmit+0xa33/0x4970 [ 2048.492043][ T32] ? __radix_tree_lookup+0x217/0x2b0 [ 2048.492085][ T32] genl_rcv_msg+0x560/0x800 [ 2048.492123][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2048.492157][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 2048.492194][ T32] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 2048.492239][ T32] netlink_rcv_skb+0x159/0x420 [ 2048.492271][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2048.492308][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2048.492351][ T32] ? netlink_deliver_tap+0x1ae/0xcc0 [ 2048.492384][ T32] genl_rcv+0x28/0x40 [ 2048.492416][ T32] netlink_unicast+0x585/0x850 [ 2048.492451][ T32] ? __pfx_netlink_unicast+0x10/0x10 [ 2048.492490][ T32] netlink_sendmsg+0x8b0/0xda0 [ 2048.492526][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2048.492561][ T32] ? apparmor_socket_sendmsg+0x165/0x280 [ 2048.492602][ T32] ____sys_sendmsg+0xa4d/0xbe0 [ 2048.492644][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2048.492678][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2048.492724][ T32] ? lockdep_hardirqs_on+0x7d/0x110 [ 2048.492764][ T32] ? find_held_lock+0x2b/0x80 [ 2048.492797][ T32] ___sys_sendmsg+0x190/0x1e0 [ 2048.492827][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 2048.492855][ T32] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2048.492907][ T32] ? find_held_lock+0x2b/0x80 [ 2048.492959][ T32] __sys_sendmsg+0x160/0x210 [ 2048.492996][ T32] ? __pfx___sys_sendmsg+0x10/0x10 [ 2048.493030][ T32] ? kcov_ioctl+0x17a/0x760 [ 2048.493082][ T32] do_syscall_64+0x121/0x770 [ 2048.493123][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2048.493152][ T32] RIP: 0033:0x7f533f79e159 [ 2048.493174][ T32] RSP: 002b:00007f5340651028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2048.493204][ T32] RAX: ffffffffffffffda RBX: 00007f533fa26090 RCX: 00007f533f79e159 [ 2048.493224][ T32] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 0000000000000004 [ 2048.493243][ T32] RBP: 00007f533f83503b R08: 0000000000000000 R09: 0000000000000000 [ 2048.493261][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2048.493279][ T32] R13: 00007f533fa26128 R14: 00007f533fa26090 R15: 00007ffc14302848 [ 2048.493314][ T32] [ 2048.493354][ T32] [ 2048.493354][ T32] Showing all locks held in the system: [ 2048.493398][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 2048.493454][ T32] #0: ffffffff8edec0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 2048.493564][ T32] locks held by udevd/4991: 2, last CPU#0: [ 2048.493584][ T32] #0: ffff888037264460 (sb_writers#5){.+.+}-{0:0}, at: filename_unlinkat+0x1ad/0x730 [ 2048.493672][ T32] #1: ffff8880373f94a0 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_unlinkat+0x262/0x730 [ 2048.493777][ T32] locks held by getty/28819: 2, on CPU#0: [ 2048.493796][ T32] #0: ffff8880366330a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 2048.493891][ T32] #1: ffffc900055bb2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 2048.493982][ T32] locks held by syz.0.4857/30795: 2, on CPU#0: [ 2048.494003][ T32] #0: ffffffff90d82be8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2048.494077][ T32] #1: ffffffff8f2871c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x1a3/0x1dc0 [ 2048.494154][ T32] locks held by syz.0.4857/30796: 2, on CPU#0: [ 2048.494175][ T32] #0: ffffffff90d82be8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2048.494249][ T32] #1: ffffffff8f2871c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x13f/0x7c0 [ 2048.494328][ T32] locks held by syz.2.5006/31621: 2, on CPU#0: [ 2048.494348][ T32] #0: ffff88807f0180e8 (&type->s_umount_key#55){++++}-{4:4}, at: deactivate_super+0xe2/0x110 [ 2048.494443][ T32] #1: ffffffff8f2871c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 2048.494549][ T32] locks held by syz.3.5117/32230: 2, on CPU#0: [ 2048.494570][ T32] #0: ffffffff90cbaaa8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 2048.494652][ T32] #1: ffffffff90cd3580 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x21e/0x780 [ 2048.494821][ T32] locks held by syz.3.5117/32231: 2, on CPU#0: [ 2048.494842][ T32] #0: ffffffff90cbaaa8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 2048.494924][ T32] #1: ffffffff90cd3580 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x21e/0x780 [ 2048.495010][ T32] locks held by syz.3.5117/32232: 3, last CPU#0: [ 2048.495030][ T32] #0: ffffffff90cbaaa8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 2048.495112][ T32] #1: ffffffff90cd3580 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x50 [ 2048.495191][ T32] #2: ffffffff8edec0e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 2048.495268][ T32] locks held by syz.5.5118/32233: 2, last CPU#0: [ 2048.495288][ T32] #0: ffff88801c0829f8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1f5/0x470 [ 2048.495363][ T32] #1: ffffffff8edec0e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 2048.495437][ T32] locks held by syz.5.5118/32237: 2, on CPU#0: [ 2048.848632][ T32] #0: ffffffff90cbaaa8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 2048.848712][ T32] #1: ffffffff90cd3580 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x1b/0x70 [ 2048.848773][ T32] locks held by syz.5.5118/32241: 2, on CPU#0: [ 2048.848791][ T32] #0: ffffffff90cbaaa8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 2048.848857][ T32] #1: ffffffff90cd3580 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x23/0xb0 [ 2048.848978][ T32] locks held by syz.5.5118/32243: 2, on CPU#0: [ 2048.848996][ T32] #0: ffffffff90cbaaa8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 2048.849062][ T32] #1: ffffffff90cd3580 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x23/0xb0 [ 2048.849123][ T32] locks held by syz.4.5119/32236: 1, on CPU#0: [ 2048.849141][ T32] #0: ffff88801c0836b8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1f5/0x470 [ 2048.849201][ T32] locks held by syz.4.5119/32238: 2, last CPU#0: [ 2048.849219][ T32] #0: ffff88801c0836b8 (&mm->mmap_lock){++++}-{4:4}, at: __mm_populate+0x229/0x3a0 [ 2048.849281][ T32] #1: ffffffff8edec0e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 2048.849343][ T32] locks held by syz.1.5120/32242: 2, last CPU#0: [ 2048.849361][ T32] #0: ffff88801c0869b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00 [ 2048.849423][ T32] #1: ffffffff8edec0e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 2048.849483][ T32] [ 2048.849490][ T32] ============================================= [ 2048.849490][ T32] [ 2048.849517][ T32] NMI backtrace for cpu 0 [ 2048.849535][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2048.849569][ T32] Tainted: [L]=SOFTLOCKUP [ 2048.849578][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2048.849593][ T32] Call Trace: [ 2048.849602][ T32] [ 2048.849612][ T32] dump_stack_lvl+0x100/0x190 [ 2048.849647][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 2048.849683][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2048.849723][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 2048.849756][ T32] sys_info+0x141/0x190 [ 2048.849779][ T32] watchdog+0xcb1/0x1030 [ 2048.849818][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2048.849851][ T32] ? __pfx_watchdog+0x10/0x10 [ 2048.849886][ T32] ? __kthread_parkme+0x18f/0x230 [ 2048.849932][ T32] ? kthread+0x13a/0x450 [ 2048.849956][ T32] ? __pfx_watchdog+0x10/0x10 [ 2048.849987][ T32] kthread+0x373/0x450 [ 2048.850012][ T32] ? __pfx_kthread+0x10/0x10 [ 2048.850040][ T32] ret_from_fork+0x730/0xd60 [ 2048.850080][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 2048.850120][ T32] ? __switch_to+0x800/0x10f0 [ 2048.850150][ T32] ? __switch_to_asm+0x39/0x70 [ 2048.850172][ T32] ? __pfx_kthread+0x10/0x10 [ 2048.850199][ T32] ret_from_fork_asm+0x1a/0x30 [ 2048.850235][ T32] [ 2049.059281][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 2049.504535][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2049.515228][ T32] Tainted: [L]=SOFTLOCKUP [ 2049.519556][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2049.529616][ T32] Call Trace: [ 2049.532924][ T32] [ 2049.535881][ T32] dump_stack_lvl+0x100/0x190 [ 2049.540584][ T32] vpanic+0x553/0x970 [ 2049.544594][ T32] ? __pfx_vpanic+0x10/0x10 [ 2049.549118][ T32] panic+0xd1/0xe0 [ 2049.552869][ T32] ? __pfx_panic+0x10/0x10 [ 2049.557303][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 2049.563483][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 2049.569657][ T32] ? watchdog.cold+0x1ec/0x234 [ 2049.574446][ T32] watchdog.cold+0x1fd/0x234 [ 2049.579060][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2049.584884][ T32] ? __pfx_watchdog+0x10/0x10 [ 2049.589605][ T32] ? __kthread_parkme+0x18f/0x230 [ 2049.594659][ T32] ? kthread+0x13a/0x450 [ 2049.599100][ T32] ? __pfx_watchdog+0x10/0x10 [ 2049.603816][ T32] kthread+0x373/0x450 [ 2049.607920][ T32] ? __pfx_kthread+0x10/0x10 [ 2049.612537][ T32] ret_from_fork+0x730/0xd60 [ 2049.617166][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 2049.622326][ T32] ? __switch_to+0x800/0x10f0 [ 2049.627030][ T32] ? __switch_to_asm+0x39/0x70 [ 2049.631814][ T32] ? __pfx_kthread+0x10/0x10 [ 2049.636431][ T32] ret_from_fork_asm+0x1a/0x30 [ 2049.641238][ T32] [ 2049.644334][ T32] Kernel Offset: disabled [ 2049.648695][ T32] Rebooting in 86400 seconds..