last executing test programs: 19.629796074s ago: executing program 1 (id=2338): unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x40e00, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000300), 0x60081, 0x0) ioctl$auto_PPPIOCATTACH(r1, 0x4004743d, 0x0) move_pages$auto(0x0, 0x4, &(0x7f0000000200)=0x0, &(0x7f0000000480)=0x6456, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x2, 0x80002, 0x1) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) connect$auto(0x3, 0x0, 0x58) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) socket(0x2, 0x801, 0x106) socket(0xa, 0x801, 0x84) setsockopt$auto(0x3, 0x10000000084, 0xc, 0x0, 0x4) listen$auto(0x3, 0x81) setgroups$auto(0xe32, 0x0) r3 = socket(0x2b, 0x1, 0x0) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000280), r3) sendmsg$auto_IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r4, 0x200, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000800) waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000080)={@siginfo_0_0={0x4, 0x8, 0x35764a2e, @_sigpoll={0x5}}}, 0x8, 0x0) sendmsg$auto_IPVS_CMD_ZERO(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20000805) 17.633780516s ago: executing program 1 (id=2343): unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x40e00, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000300), 0x60081, 0x0) ioctl$auto_PPPIOCATTACH(r1, 0x4004743d, 0x0) move_pages$auto(0x0, 0x4, &(0x7f0000000200)=0x0, &(0x7f0000000480)=0x6456, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x2, 0x80002, 0x1) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) connect$auto(0x3, 0x0, 0x58) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0x2003f0, 0x15) socket(0xa, 0x801, 0x84) sendmsg$auto_IPVS_CMD_ZERO(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20000805) 9.279573705s ago: executing program 2 (id=2368): sendmsg$auto_NET_SHAPER_CMD_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES16, @ANYBLOB='\t\x00\''], 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140)=';') 8.038316938s ago: executing program 0 (id=2371): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) madvise$auto(0x0, 0x6, 0x66) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000) r0 = io_uring_setup$auto(0xa, 0x0) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0xe779, 0x400000000007, 0x2, 0x13, r0, 0x0) socket(0xa, 0x1, 0x84) clock_nanosleep$auto(0x8, 0x0, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x82202, 0x0) r1 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2, 0xfd}, 0x6a) io_uring_setup$auto(0x1, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b71, 0x2, 0x1) 7.42457104s ago: executing program 0 (id=2374): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_setup$auto(0x1, 0x0) close_range$auto(r0, r0, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video59\x00', 0xa200, 0x0) socket(0x2, 0x3, 0x6) socket(0x2, 0x1, 0x0) r1 = socket(0xa, 0x2, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r2, 0x4048aecb, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) getpeername$auto(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x2, 0x3, 0xa) r5 = getsockopt$auto(r4, 0x0, 0x30, 0x0, &(0x7f0000000040)=0x4) r6 = socket(0x10, 0x2, 0x0) epoll_ctl$auto(0xffffffffffffffff, 0xffff, r5, &(0x7f0000000480)={0x1, 0x8}) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/ati_remote2/parameters/mode_mask\x00', 0x80401, 0x0) write$auto(r7, 0x0, 0x800f) 7.249716393s ago: executing program 3 (id=2375): syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) socket(0xa, 0x3, 0x3a) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x400) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x4, 0x0) close_range$auto(0x2, r0, 0x0) open(0x0, 0x40, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x40106f52, r1) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fanotify_init$auto(0x5, 0x2000000000002) io_uring_setup$auto(0x1, 0x0) write$auto(0x3, 0x0, 0xfffffdef) adjtimex$auto(0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vivid.0/video4linux/v4l-touch5/dev_debug\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/sys/net/smc/smcr_max_links_per_lgr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xfdef) timerfd_create$auto(0x9, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40802, 0x0) 6.947602413s ago: executing program 3 (id=2376): unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x40e00, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000300), 0x60081, 0x0) ioctl$auto_PPPIOCATTACH(r1, 0x4004743d, 0x0) move_pages$auto(0x0, 0x4, &(0x7f0000000200)=0x0, &(0x7f0000000480)=0x6456, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x2, 0x80002, 0x1) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) connect$auto(0x3, 0x0, 0x58) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) socket(0x2, 0x801, 0x106) socket(0xa, 0x801, 0x84) setsockopt$auto(0x3, 0x10000000084, 0xc, 0x0, 0x4) listen$auto(0x3, 0x81) setgroups$auto(0xe32, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x9, 0x5}, 0x1}, 0x5, 0x20000000) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r3, 0x200, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000800) waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000080)={@siginfo_0_0={0x4, 0x8, 0x35764a2e, @_sigpoll={0x5}}}, 0x8, 0x0) sendmsg$auto_IPVS_CMD_ZERO(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20000805) 6.816365248s ago: executing program 2 (id=2377): syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) socket(0xa, 0x3, 0x3a) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x400) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x4, 0x0) close_range$auto(0x2, r0, 0x0) open(0x0, 0x40, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$auto(0x3, 0x40106f52, 0xffffffffffffffff) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fanotify_init$auto(0x5, 0x2000000000002) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) write$auto(0x3, 0x0, 0xfffffdef) adjtimex$auto(0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vivid.0/video4linux/v4l-touch5/dev_debug\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/sys/net/smc/smcr_max_links_per_lgr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xfdef) timerfd_create$auto(0x9, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x424580, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40802, 0x0) 6.797555447s ago: executing program 0 (id=2378): r0 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004680), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f00000049c0)={0x0, 0x0, &(0x7f0000004980)={&(0x7f0000000040)={0x1c, r0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@OVS_VPORT_ATTR_OPTIONS={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x8}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040801}, 0x44000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) select$auto(0x8, &(0x7f0000000340)={[0x7, 0x6, 0xfffc000000000000, 0x6, 0x1, 0x5, 0x8, 0x1ff, 0x9, 0x1, 0x5, 0x81, 0x5, 0x7fff, 0x5]}, 0x0, &(0x7f00000004c0)={[0xe3c6, 0x8, 0x2, 0x8, 0x7, 0x3ff, 0x3, 0xa, 0x0, 0x9, 0x6, 0x1, 0x7a, 0x8, 0x66960ada, 0xffff]}, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) write$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8240, 0x0) select$auto(0xa, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x4, 0xd, 0x8fd6, 0x948d, 0x3, 0x80, 0x3, 0x6, 0x7ffffffffffffffb, 0x7, 0x2, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) 5.853440232s ago: executing program 2 (id=2379): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x5, 0x0) r1 = getsockopt$auto(r0, 0x84, 0x10, 0x0, &(0x7f0000000240)=0x10009b) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/pci/00/01.3\x00', 0x40d01, 0x0) write$auto(r4, 0x0, 0x5) write$auto_proc_reg_file_ops_compat_inode(r4, 0x0, 0x0) ioctl$auto(r4, 0x3, r3) r5 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x49402, 0x0) read$auto(r5, 0x0, 0x9a28) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, &(0x7f0000000040)="5f74ab2fc43781e047140a5cbc3ac5229b90633d9cddda9efb1f2c3d5d1e63f3fb5acf079b9336319d009cb514", 0x2d) r6 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) statmount$auto(&(0x7f0000000040)={0x1f, @raw, 0x8000001c, 0xffffffffffffffff, 0x8}, 0x0, 0x7ffffffff000, 0x0) write$auto(r6, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x18, 0x5, 0x3) wait4$auto(0xfffffff9, 0x0, 0x0, 0x0) connect$auto(r1, &(0x7f0000000000)=@l2={0x1f, 0x9, @any, 0x4, 0x2}, 0x3a) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0x40047452, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto(0x3, 0xae41, 0x38) r7 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) futimesat$auto(r7, 0x0, 0x0) syz_genetlink_get_family_id$auto_netdev(0x0, r3) 5.668004077s ago: executing program 0 (id=2380): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptycc\x00', 0xa0840, 0x0) ioctl$auto(r0, 0x540a, 0x2) socket(0xa, 0x1, 0x84) shutdown$auto(0x200000003, 0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xff}}, 0x54) io_uring_setup$auto(0x6, 0x0) connect$auto(0x3, 0x0, 0x54) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x7fffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x189401, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/lockdep\x00', 0x60400, 0x0) pread64$auto(r1, 0x0, 0xff, 0xaee8) 5.356024709s ago: executing program 2 (id=2381): openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, &(0x7f0000003900)='\t', 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/virtio_mmio/parameters/device\x00', 0x80480, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x129882, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xc040aed4, r0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) bpf$auto_BPF_PROG_LOAD(0x5, 0x0, 0x7ff) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x44eb2, 0xd, 0x300000000000) semctl$auto_SEM_INFO(0x0, 0xfffffffd, 0x13, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) 5.318425187s ago: executing program 3 (id=2382): unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x40e00, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000300), 0x60081, 0x0) ioctl$auto_PPPIOCATTACH(r1, 0x4004743d, 0x0) move_pages$auto(0x0, 0x4, &(0x7f0000000200)=0x0, &(0x7f0000000480)=0x6456, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x2, 0x80002, 0x1) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) connect$auto(0x3, 0x0, 0x58) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) socket(0x2, 0x801, 0x106) socket(0xa, 0x801, 0x84) setsockopt$auto(0x3, 0x10000000084, 0xc, 0x0, 0x4) listen$auto(0x3, 0x81) setgroups$auto(0xe32, 0x0) r3 = socket(0x2b, 0x1, 0x0) sendmmsg$auto(r3, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x9, 0x5}, 0x1}, 0x5, 0x20000000) sendmsg$auto_IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000800) sendmsg$auto_IPVS_CMD_ZERO(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20000805) 5.190626684s ago: executing program 0 (id=2383): unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x40e00, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000300), 0x60081, 0x0) ioctl$auto_PPPIOCATTACH(r1, 0x4004743d, 0x0) move_pages$auto(0x0, 0x4, &(0x7f0000000200)=0x0, &(0x7f0000000480)=0x6456, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x2, 0x80002, 0x1) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) connect$auto(0x3, 0x0, 0x58) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) socket(0x2, 0x801, 0x106) socket(0xa, 0x801, 0x84) setsockopt$auto(0x3, 0x10000000084, 0xc, 0x0, 0x4) listen$auto(0x3, 0x81) setgroups$auto(0xe32, 0x0) r3 = socket(0x2b, 0x1, 0x0) sendmmsg$auto(r3, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x9, 0x5}, 0x1}, 0x5, 0x20000000) sendmsg$auto_IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000800) sendmsg$auto_IPVS_CMD_ZERO(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20000805) 4.933846206s ago: executing program 2 (id=2384): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x2, 0x0) pwrite64$auto(r0, &(0x7f0000000180)='\x00', 0x3, 0x8) socketpair$auto(0x4001b, 0x96, 0x18, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) socket(0x840000000002, 0x3, 0xff) clock_gettime$auto(0x1, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) ioctl$auto(0x3, 0x8905, 0x38) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x5, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) pselect6$auto(0x9, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffff00, 0x1}, 0x0) bpf$auto(0x2, 0x0, 0x1) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r3, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, 0x55) 3.751460466s ago: executing program 0 (id=2385): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0xa876, 0xffffffffffffffff, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0xe8) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) r3 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mixer2\x00', 0x5ab101, 0x0) ioctl$auto_FS_IOC_UNRESVSP64(r3, 0x4030581e, 0x4) r4 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/loadavg\x00', 0x40, 0x0) read$auto_proc_mountinfo_operations_mnt_namespace(r4, &(0x7f00000000c0)=""/126, 0x7e) openat$nci(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r5 = socketpair$auto(0x1, 0x3, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) fcntl$auto_F_SETSIG(0xffffffffffffffff, 0xa, 0x400000000000) r6 = accept$auto(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x5) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000880), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_STOP_POLL(r6, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r7, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0xfffffff9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x24) sendmsg$auto_NFC_CMD_DISABLE_SE(r5, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="24000000fded21a6b2407d05364153623e7edeb69b28266ca540edf857dfec19ff95ad8c27900ff436e25a8ca9db8e06e36983529cc124f0fd08a15155944869b3251653cfd404bbd76d11620411c8707143adb34fa7d84c949dc7d89dcbf8cfc3d4b13784ac6d63f60c593d38664e39c69af5a0094ca992b9f8861a7e74832b56329e587fcee3be8724649351692d354c15962dc6a7e624c5eeef2a25a6caec1ecadb8b7afbc7efd3352c5c23977b6261e1aa1aef42", @ANYRES16=r6, @ANYRESDEC=r6], 0x24}, 0x1, 0x0, 0x0, 0x24000001}, 0x4000015) unshare$auto(0x40000080) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0x1700, 0x0) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x3) io_uring_setup$auto(0x6, 0x0) openat$auto_ptdump_curknl_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000140), 0x208883, 0x0) 3.696771816s ago: executing program 3 (id=2386): r0 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) setsockopt$auto(r0, 0x1, 0x12, &(0x7f0000000400)='\'\ak\xb6\xc8\vFx\xed\xd6\xf8\x00\x10\xa4#\x92`\xdb\xafL\x0f\xfbUV\xa6KH]Cv\xbf\xf2a\v', 0xeb66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) unshare$auto(0x40000080) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000280)=0x5) unshare$auto(0x40000080) r1 = socket(0x18, 0x800, 0x2) getpeername$auto(r1, &(0x7f0000000040)=@llc={0x1a, 0x338, 0x7, 0xc, 0x9, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000080)=0xa98) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) ioctl$auto(0xffffffffffffffff, 0x541b, 0x24) recvmmsg$auto(0x3, 0x0, 0xfffe, 0x6, 0x0) msync$auto(0x20000000000000, 0x9, 0x4) 3.667008486s ago: executing program 1 (id=2347): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) madvise$auto(0x0, 0x6, 0x66) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000) r0 = io_uring_setup$auto(0xa, 0x0) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0xe779, 0x400000000007, 0x2, 0x13, r0, 0x0) socket(0xa, 0x1, 0x84) clock_nanosleep$auto(0x8, 0x0, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x82202, 0x0) r1 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2, 0xfd}, 0x6a) io_uring_setup$auto(0x1, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b71, 0x2, 0x1) 2.636291854s ago: executing program 2 (id=2387): mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) mbind$auto(0x8000000000000002, 0x100000004, 0x100000000, 0x0, 0x9, 0x2) madvise$auto(0x0, 0x20499d, 0x9) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x100, 0x4000000000df, 0x13, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) socket(0x2, 0x1, 0x106) connect$auto(0x3, 0x0, 0x54) ioprio_set$auto(0x3, 0x0, 0x4b34) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) futex$auto(0x0, 0x86, 0x8, 0x0, 0x0, 0x7) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x1000000, 0xffffffffffff0006, 0x17) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vhci_hcd.3/usb16/power/wakeup_active_count\x00', 0x40000, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) madvise$auto(0x80000000, 0x7, 0x5) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x1000, 0x2) clone$auto(0x0, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x101e81, 0x0) openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) 2.133609928s ago: executing program 1 (id=2388): unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x40e00, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000300), 0x60081, 0x0) ioctl$auto_PPPIOCATTACH(r1, 0x4004743d, 0x0) move_pages$auto(0x0, 0x4, &(0x7f0000000200)=0x0, &(0x7f0000000480)=0x6456, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x2, 0x80002, 0x1) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) connect$auto(0x3, 0x0, 0x58) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) socket(0x2, 0x801, 0x106) socket(0xa, 0x801, 0x84) setsockopt$auto(0x3, 0x10000000084, 0xc, 0x0, 0x4) listen$auto(0x3, 0x81) setgroups$auto(0xe32, 0x0) r3 = socket(0x2b, 0x1, 0x0) sendmsg$auto_IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000800) sendmsg$auto_IPVS_CMD_ZERO(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20000805) 1.307142526s ago: executing program 3 (id=2389): r0 = open(&(0x7f0000000000)='./file0\x00', 0x43c2, 0xe1d2b27bdc14aaf1) flock$auto(r0, 0x1) ioctl$auto_RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000280)=0x1) r1 = open(&(0x7f0000000040)='./file0\x00', 0x4242, 0x40) signalfd4$auto(0xffffffffffffffff, 0x0, 0x6, 0xa) socket(0x5, 0x1, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknod$auto(&(0x7f0000001040)=':,\x00', 0xca, 0xfffffffa) r2 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r2, &(0x7f0000000040)=""/4096, 0xfffffe82) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) fcntl$auto_F_GETSIG(r3, 0xb, 0x1) ioctl$auto(r3, 0x64c7, 0x1e2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) munmap$auto(0x1, 0x4) r4 = socket(0xa, 0x5, 0x84) getsockopt$auto(r4, 0x86, 0x9, 0x0, &(0x7f0000000000)=0x6) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, &(0x7f0000001300)=&(0x7f0000001080)='\x8c\x82\xa5') r5 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sg0\x00', 0x100e42, 0x0) ioctl$auto_SG_GET_REQUEST_TABLE(r5, 0x2286, &(0x7f0000000040)) openat$auto_rts_threshold_ops_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy9/rts_threshold\x00', 0x0, 0x0) flock$auto(r1, 0xb) r6 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x80044944, 0x0) flock$auto(r1, 0x2) r7 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto(r7, 0x8000450a, 0x10000000000402) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f00000000c0), 0x60a02, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) 710.850278ms ago: executing program 1 (id=2391): unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x40e00, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000300), 0x60081, 0x0) ioctl$auto_PPPIOCATTACH(r1, 0x4004743d, 0x0) move_pages$auto(0x0, 0x4, &(0x7f0000000200)=0x0, &(0x7f0000000480)=0x6456, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x2, 0x80002, 0x1) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) connect$auto(0x3, 0x0, 0x58) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0xa, 0x801, 0x84) sendmsg$auto_IPVS_CMD_ZERO(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20000805) 29.454121ms ago: executing program 3 (id=2392): syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) socket(0xa, 0x3, 0x3a) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x400) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x4, 0x0) close_range$auto(0x2, r0, 0x0) open(0x0, 0x40, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x40106f52, r1) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fanotify_init$auto(0x5, 0x2000000000002) io_uring_setup$auto(0x1, 0x0) write$auto(0x3, 0x0, 0xfffffdef) adjtimex$auto(0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vivid.0/video4linux/v4l-touch5/dev_debug\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/sys/net/smc/smcr_max_links_per_lgr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xfdef) timerfd_create$auto(0x9, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x424580, 0x0) 0s ago: executing program 1 (id=2393): r0 = open(&(0x7f0000000000)='./file0\x00', 0x43c2, 0xe1d2b27bdc14aaf1) flock$auto(r0, 0x1) ioctl$auto_RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000280)=0x1) r1 = open(&(0x7f0000000040)='./file0\x00', 0x4242, 0x40) signalfd4$auto(0xffffffffffffffff, 0x0, 0x6, 0xa) socket(0x5, 0x1, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknod$auto(&(0x7f0000001040)=':,\x00', 0xca, 0xfffffffa) r2 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r2, &(0x7f0000000040)=""/4096, 0xfffffe82) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) fcntl$auto_F_GETSIG(r3, 0xb, 0x1) ioctl$auto(r3, 0x64c7, 0x1e2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) munmap$auto(0x1, 0x4) r4 = socket(0xa, 0x5, 0x84) getsockopt$auto(r4, 0x86, 0x9, 0x0, &(0x7f0000000000)=0x6) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, &(0x7f0000001300)=&(0x7f0000001080)='\x8c\x82\xa5') r5 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sg0\x00', 0x100e42, 0x0) ioctl$auto_SG_GET_REQUEST_TABLE(r5, 0x2286, &(0x7f0000000040)) openat$auto_rts_threshold_ops_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy9/rts_threshold\x00', 0x0, 0x0) flock$auto(r1, 0xb) r6 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x80044944, 0x0) flock$auto(r1, 0x2) r7 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto(r7, 0x8000450a, 0x10000000000402) r8 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f00000000c0), 0x60a02, 0x0) mmap$auto(0x200000000000, 0x7, 0xffb, 0x16, r8, 0x0) kernel console output (not intermixed with test programs): 90 [ 474.911963][T13077] ? find_held_lock+0x2b/0x80 [ 474.912008][T13077] ? ksys_write+0x190/0x250 [ 474.912065][T13077] do_getname+0x35/0x390 [ 474.912101][T13077] do_sys_openat2+0xc5/0x1e0 [ 474.912136][T13077] ? __pfx_do_sys_openat2+0x10/0x10 [ 474.912174][T13077] ? __fget_files+0x21f/0x3d0 [ 474.912223][T13077] __x64_sys_open+0xfe/0x1d0 [ 474.912257][T13077] ? __pfx___x64_sys_open+0x10/0x10 [ 474.912287][T13077] ? ksys_write+0x1ac/0x250 [ 474.912342][T13077] do_syscall_64+0x106/0xf80 [ 474.912375][T13077] ? clear_bhb_loop+0x40/0x90 [ 474.912413][T13077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.912445][T13077] RIP: 0033:0x7fd6f0f9bf79 [ 474.912474][T13077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.912504][T13077] RSP: 002b:00007fd6ef1d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 474.912535][T13077] RAX: ffffffffffffffda RBX: 00007fd6f1216090 RCX: 00007fd6f0f9bf79 [ 474.912556][T13077] RDX: 0000000000000014 RSI: 0000000000000201 RDI: 00002000000001c0 [ 474.912574][T13077] RBP: 00007fd6ef1d5090 R08: 0000000000000000 R09: 0000000000000000 [ 474.912593][T13077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.912611][T13077] R13: 00007fd6f1216128 R14: 00007fd6f1216090 R15: 00007ffc9a4e9048 [ 474.912652][T13077] [ 478.270734][T13135] random: crng reseeded on system resumption [ 478.420688][T13138] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1622'. [ 480.052162][T13156] random: crng reseeded on system resumption [ 480.607259][T13152] Process accounting resumed [ 481.364589][T13183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 483.557009][T13217] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1641'. [ 483.868154][T13223] netlink: 146 bytes leftover after parsing attributes in process `syz.2.1643'. [ 483.987481][T13219] random: crng reseeded on system resumption [ 485.537744][T13248] random: crng reseeded on system resumption [ 486.361457][T13264] nvme_fcloop: unknown parameter or missing value '' [ 487.685987][T13285] random: crng reseeded on system resumption [ 487.749420][T13282] random: crng reseeded on system resumption [ 489.045530][T13316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 489.312829][T13311] FAULT_INJECTION: forcing a failure. [ 489.312829][T13311] name failslab, interval 1, probability 0, space 0, times 0 [ 489.325744][T13311] CPU: 1 UID: 0 PID: 13311 Comm: syz.1.1664 Tainted: G L syzkaller #0 PREEMPT(full) [ 489.325793][T13311] Tainted: [L]=SOFTLOCKUP [ 489.325804][T13311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 489.325822][T13311] Call Trace: [ 489.325833][T13311] [ 489.325844][T13311] dump_stack_lvl+0x100/0x190 [ 489.325896][T13311] should_fail_ex.cold+0x5/0xa [ 489.325941][T13311] should_failslab+0xc2/0x120 [ 489.325987][T13311] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 489.326025][T13311] ? ptlock_alloc+0x1f/0x70 [ 489.326067][T13311] ptlock_alloc+0x1f/0x70 [ 489.326102][T13311] pte_alloc_one+0x84/0x3e0 [ 489.326136][T13311] __pte_alloc+0x6d/0x3f0 [ 489.326178][T13311] ? __pfx___pte_alloc+0x10/0x10 [ 489.326223][T13311] ? __vma_start_exclude_readers+0x238/0x810 [ 489.326257][T13311] ? walk_to_pmd+0x302/0x4c0 [ 489.326292][T13311] get_locked_pte+0xa1/0xc0 [ 489.326324][T13311] insert_page+0xcc/0x220 [ 489.326355][T13311] ? __pfx_insert_page+0x10/0x10 [ 489.326383][T13311] ? __pfx_down_read_trylock+0x10/0x10 [ 489.326436][T13311] vm_insert_page+0x2c0/0x400 [ 489.326471][T13311] kcov_mmap+0xca/0x130 [ 489.326517][T13311] __mmap_region+0x139e/0x2760 [ 489.326562][T13311] ? __pfx___mmap_region+0x10/0x10 [ 489.326635][T13311] ? __lock_acquire+0x4a5/0x2630 [ 489.326764][T13311] mmap_region+0x30a/0x3e0 [ 489.326811][T13311] do_mmap+0xc63/0x12f0 [ 489.326866][T13311] ? __pfx_do_mmap+0x10/0x10 [ 489.326912][T13311] ? __pfx_down_write_killable+0x10/0x10 [ 489.326968][T13311] vm_mmap_pgoff+0x29e/0x470 [ 489.327023][T13311] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 489.327067][T13311] ? __fget_files+0x215/0x3d0 [ 489.327116][T13311] ? __fget_files+0x21f/0x3d0 [ 489.327165][T13311] ksys_mmap_pgoff+0x328/0x5b0 [ 489.327217][T13311] __x64_sys_mmap+0x125/0x190 [ 489.327265][T13311] do_syscall_64+0x106/0xf80 [ 489.327296][T13311] ? clear_bhb_loop+0x40/0x90 [ 489.327334][T13311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.327365][T13311] RIP: 0033:0x7faeee59bce2 [ 489.327392][T13311] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 489.327422][T13311] RSP: 002b:00007ffd2ac66cd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 489.327452][T13311] RAX: ffffffffffffffda RBX: 00007faeebfb2000 RCX: 00007faeee59bce2 [ 489.327472][T13311] RDX: 0000000000000003 RSI: 0000000000400000 RDI: 00007faeebfb2000 [ 489.327491][T13311] RBP: 0000000000000011 R08: 00000000000000dc R09: 0000000000000000 [ 489.327509][T13311] R10: 0000000000000011 R11: 0000000000000206 R12: 0000000000000003 [ 489.327525][T13311] R13: 0000000000000004 R14: 0000000000000000 R15: 00007faeee815fa0 [ 489.327565][T13311] [ 490.655118][T13345] random: crng reseeded on system resumption [ 491.509779][T13365] futex_wake_op: syz.3.1677 tries to shift op by -2048; fix this program [ 491.522242][T13366] 0x001c00000000-0x100002c00000200 : "" [ 491.549738][T13365] futex_wake_op: syz.3.1677 tries to shift op by -2048; fix this program [ 491.599587][T13366] mtd: partition "" is out of reach -- disabled [ 491.680220][T13365] futex_wake_op: syz.3.1677 tries to shift op by -2048; fix this program [ 491.720982][T13366] ftl_cs: FTL header not found. [ 491.814984][T13365] futex_wake_op: syz.3.1677 tries to shift op by -2048; fix this program [ 494.936720][T13412] random: crng reseeded on system resumption [ 496.648696][T13434] FAULT_INJECTION: forcing a failure. [ 496.648696][T13434] name failslab, interval 1, probability 0, space 0, times 0 [ 496.662352][T13434] CPU: 1 UID: 0 PID: 13434 Comm: syz.1.1688 Tainted: G L syzkaller #0 PREEMPT(full) [ 496.662392][T13434] Tainted: [L]=SOFTLOCKUP [ 496.662400][T13434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 496.662411][T13434] Call Trace: [ 496.662418][T13434] [ 496.662426][T13434] dump_stack_lvl+0x100/0x190 [ 496.662458][T13434] should_fail_ex.cold+0x5/0xa [ 496.662480][T13434] should_failslab+0xc2/0x120 [ 496.662508][T13434] __kmalloc_cache_noprof+0x7a/0x6f0 [ 496.662529][T13434] ? device_add+0xd3a/0x1950 [ 496.662551][T13434] device_add+0xd3a/0x1950 [ 496.662568][T13434] ? dev_set_name+0xc7/0x100 [ 496.662588][T13434] ? __pfx_dev_set_name+0x10/0x10 [ 496.662608][T13434] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 496.662636][T13434] ? __pfx_device_add+0x10/0x10 [ 496.662654][T13434] ? lockdep_init_map_type+0x5c/0x250 [ 496.662678][T13434] ? __init_waitqueue_head+0xca/0x150 [ 496.662710][T13434] netdev_register_kobject+0x1a9/0x3d0 [ 496.662737][T13434] register_netdevice+0x12e0/0x2210 [ 496.662761][T13434] ? idr_alloc+0xdd/0x130 [ 496.662780][T13434] ? __pfx_register_netdevice+0x10/0x10 [ 496.662799][T13434] ? net_generic+0xea/0x2a0 [ 496.662825][T13434] ppp_dev_configure+0x986/0xcb0 [ 496.662851][T13434] ppp_ioctl+0x985/0x2800 [ 496.662874][T13434] ? find_held_lock+0x2b/0x80 [ 496.662915][T13434] ? __pfx_ppp_ioctl+0x10/0x10 [ 496.662942][T13434] ? __fget_files+0x21f/0x3d0 [ 496.662971][T13434] ? __pfx_ppp_ioctl+0x10/0x10 [ 496.662994][T13434] __x64_sys_ioctl+0x18e/0x210 [ 496.663020][T13434] do_syscall_64+0x106/0xf80 [ 496.663039][T13434] ? clear_bhb_loop+0x40/0x90 [ 496.663063][T13434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.663083][T13434] RIP: 0033:0x7faeee59bf79 [ 496.663100][T13434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.663119][T13434] RSP: 002b:00007faeef36f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 496.663137][T13434] RAX: ffffffffffffffda RBX: 00007faeee816090 RCX: 00007faeee59bf79 [ 496.663151][T13434] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000003 [ 496.663164][T13434] RBP: 00007faeee6327e0 R08: 0000000000000000 R09: 0000000000000000 [ 496.663174][T13434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 496.663195][T13434] R13: 00007faeee816128 R14: 00007faeee816090 R15: 00007ffd2ac66c28 [ 496.663233][T13434] [ 497.250419][T13440] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1689'. [ 498.000447][T13448] random: crng reseeded on system resumption [ 498.565683][T13461] netlink: 'syz.1.1697': attribute type 4 has an invalid length. [ 498.610539][T13461] netlink: 'syz.1.1697': attribute type 1 has an invalid length. [ 499.197919][T13477] FAULT_INJECTION: forcing a failure. [ 499.197919][T13477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 499.334412][T13477] CPU: 0 UID: 0 PID: 13477 Comm: syz.1.1699 Tainted: G L syzkaller #0 PREEMPT(full) [ 499.334462][T13477] Tainted: [L]=SOFTLOCKUP [ 499.334473][T13477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 499.334491][T13477] Call Trace: [ 499.334502][T13477] [ 499.334514][T13477] dump_stack_lvl+0x100/0x190 [ 499.334565][T13477] should_fail_ex.cold+0x5/0xa [ 499.334602][T13477] _copy_from_user+0x2e/0xd0 [ 499.334634][T13477] copy_msghdr_from_user+0x9f/0x4f0 [ 499.334679][T13477] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 499.334742][T13477] ___sys_sendmsg+0x106/0x1e0 [ 499.334788][T13477] ? __pfx____sys_sendmsg+0x10/0x10 [ 499.334877][T13477] __sys_sendmsg+0x170/0x220 [ 499.334910][T13477] ? __pfx___sys_sendmsg+0x10/0x10 [ 499.334967][T13477] do_syscall_64+0x106/0xf80 [ 499.335000][T13477] ? clear_bhb_loop+0x40/0x90 [ 499.335038][T13477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.335070][T13477] RIP: 0033:0x7faeee59bf79 [ 499.335096][T13477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.335134][T13477] RSP: 002b:00007faeef390028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 499.335163][T13477] RAX: ffffffffffffffda RBX: 00007faeee815fa0 RCX: 00007faeee59bf79 [ 499.335189][T13477] RDX: 000000000400c850 RSI: 0000200000000840 RDI: 0000000000000004 [ 499.335207][T13477] RBP: 00007faeef390090 R08: 0000000000000000 R09: 0000000000000000 [ 499.335225][T13477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.335242][T13477] R13: 00007faeee816038 R14: 00007faeee815fa0 R15: 00007ffd2ac66c28 [ 499.335281][T13477] [ 500.296831][T13489] zswap: compressor not available [ 500.915063][T13519] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 501.064853][T13506] hub 1-0:1.0: USB hub found [ 501.153992][T13506] hub 1-0:1.0: 1 port detected [ 501.343323][T13500] hub 1-0:1.0: USB hub found [ 501.416038][T13500] hub 1-0:1.0: 1 port detected [ 501.626816][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.638192][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.809396][T13565] FAULT_INJECTION: forcing a failure. [ 503.809396][T13565] name failslab, interval 1, probability 0, space 0, times 0 [ 503.856043][T13565] CPU: 0 UID: 0 PID: 13565 Comm: syz.3.1715 Tainted: G L syzkaller #0 PREEMPT(full) [ 503.856082][T13565] Tainted: [L]=SOFTLOCKUP [ 503.856089][T13565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 503.856101][T13565] Call Trace: [ 503.856109][T13565] [ 503.856117][T13565] dump_stack_lvl+0x100/0x190 [ 503.856148][T13565] should_fail_ex.cold+0x5/0xa [ 503.856169][T13565] should_failslab+0xc2/0x120 [ 503.856203][T13565] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 503.856227][T13565] ? __alloc_skb+0x140/0x710 [ 503.856249][T13565] __alloc_skb+0x140/0x710 [ 503.856264][T13565] ? __alloc_skb+0x5b7/0x710 [ 503.856281][T13565] ? __pfx___alloc_skb+0x10/0x10 [ 503.856297][T13565] ? arch_stack_walk+0xa6/0xf0 [ 503.856320][T13565] alloc_skb_with_frags+0xe0/0x810 [ 503.856342][T13565] ? stack_trace_save+0x8e/0xc0 [ 503.856370][T13565] ? __pfx_stack_trace_save+0x10/0x10 [ 503.856400][T13565] sock_alloc_send_pskb+0x801/0x980 [ 503.856431][T13565] ? kasan_save_track+0x14/0x30 [ 503.856457][T13565] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 503.856483][T13565] ? __x64_sys_sendmmsg+0x9c/0x100 [ 503.856501][T13565] ? do_syscall_64+0x106/0xf80 [ 503.856520][T13565] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.856548][T13565] __ip6_append_data+0x2c4c/0x4de0 [ 503.856578][T13565] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 503.856601][T13565] ? find_held_lock+0x2b/0x80 [ 503.856633][T13565] ? __pfx___ip6_append_data+0x10/0x10 [ 503.856657][T13565] ? __pfx_ip6_mtu+0x10/0x10 [ 503.856676][T13565] ? ip6_setup_cork+0x5be/0x14c0 [ 503.856701][T13565] ip6_make_skb+0x2a3/0x3b0 [ 503.856729][T13565] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 503.856750][T13565] ? __pfx_ip6_make_skb+0x10/0x10 [ 503.856780][T13565] ? sk_dst_check+0x1de/0x550 [ 503.856812][T13565] ? udpv6_sendmsg+0x2499/0x2f60 [ 503.856828][T13565] udpv6_sendmsg+0x2499/0x2f60 [ 503.856848][T13565] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 503.856885][T13565] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 503.856918][T13565] ? __pfx___might_resched+0x10/0x10 [ 503.856955][T13565] ? __import_iovec+0x1d2/0x640 [ 503.856976][T13565] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 503.856995][T13565] ? inet6_sendmsg+0x105/0x140 [ 503.857013][T13565] inet6_sendmsg+0x105/0x140 [ 503.857032][T13565] ____sys_sendmsg+0x704/0xc30 [ 503.857058][T13565] ? __pfx_____sys_sendmsg+0x10/0x10 [ 503.857090][T13565] ? rcu_is_watching+0x12/0xc0 [ 503.857128][T13565] ? ___sys_sendmsg+0x19d/0x1e0 [ 503.857164][T13565] ? kfree+0x2ec/0x6b0 [ 503.857196][T13565] ___sys_sendmsg+0x190/0x1e0 [ 503.857223][T13565] ? __pfx____sys_sendmsg+0x10/0x10 [ 503.857267][T13565] ? __pfx___might_resched+0x10/0x10 [ 503.857296][T13565] __sys_sendmmsg+0x205/0x430 [ 503.857318][T13565] ? __pfx___sys_sendmmsg+0x10/0x10 [ 503.857344][T13565] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 503.857374][T13565] ? fput+0x79/0x100 [ 503.857391][T13565] ? ksys_write+0x1ac/0x250 [ 503.857415][T13565] ? __pfx_ksys_write+0x10/0x10 [ 503.857443][T13565] __x64_sys_sendmmsg+0x9c/0x100 [ 503.857462][T13565] ? lockdep_hardirqs_on+0x78/0x100 [ 503.857482][T13565] do_syscall_64+0x106/0xf80 [ 503.857500][T13565] ? clear_bhb_loop+0x40/0x90 [ 503.857522][T13565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.857541][T13565] RIP: 0033:0x7f91cf79bf79 [ 503.857557][T13565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.857574][T13565] RSP: 002b:00007f91d0676028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 503.857593][T13565] RAX: ffffffffffffffda RBX: 00007f91cfa15fa0 RCX: 00007f91cf79bf79 [ 503.857605][T13565] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 503.857616][T13565] RBP: 00007f91d0676090 R08: 0000000000000000 R09: 0000000000000000 [ 503.857626][T13565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 503.857637][T13565] R13: 00007f91cfa16038 R14: 00007f91cfa15fa0 R15: 00007ffdaf6cdb58 [ 503.857659][T13565] [ 505.300143][T13582] random: crng reseeded on system resumption [ 506.301991][T13611] FAULT_INJECTION: forcing a failure. [ 506.301991][T13611] name failslab, interval 1, probability 0, space 0, times 0 [ 506.388815][T13611] CPU: 0 UID: 0 PID: 13611 Comm: syz.3.1726 Tainted: G L syzkaller #0 PREEMPT(full) [ 506.388864][T13611] Tainted: [L]=SOFTLOCKUP [ 506.388875][T13611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 506.388893][T13611] Call Trace: [ 506.388903][T13611] [ 506.388916][T13611] dump_stack_lvl+0x100/0x190 [ 506.388967][T13611] should_fail_ex.cold+0x5/0xa [ 506.389003][T13611] should_failslab+0xc2/0x120 [ 506.389051][T13611] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 506.389114][T13611] ? nfs_netns_identifier_store+0xe3/0x150 [ 506.389181][T13611] kmemdup_nul+0x49/0xd0 [ 506.389226][T13611] nfs_netns_identifier_store+0xe3/0x150 [ 506.389277][T13611] ? __pfx_nfs_netns_identifier_store+0x10/0x10 [ 506.389324][T13611] kobj_attr_store+0x58/0x80 [ 506.389361][T13611] ? __pfx_kobj_attr_store+0x10/0x10 [ 506.389396][T13611] sysfs_kf_write+0xf2/0x150 [ 506.389446][T13611] kernfs_fop_write_iter+0x3e0/0x5f0 [ 506.389484][T13611] ? __pfx_sysfs_kf_write+0x10/0x10 [ 506.389534][T13611] iter_file_splice_write+0x82b/0x10a0 [ 506.389601][T13611] ? __pfx_iter_file_splice_write+0x10/0x10 [ 506.389655][T13611] ? __pfx_copy_splice_read+0x10/0x10 [ 506.389721][T13611] ? __pfx_iter_file_splice_write+0x10/0x10 [ 506.389769][T13611] direct_splice_actor+0x192/0x6c0 [ 506.389817][T13611] splice_direct_to_actor+0x345/0xa30 [ 506.389864][T13611] ? __pfx_direct_splice_actor+0x10/0x10 [ 506.389914][T13611] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 506.389971][T13611] do_splice_direct+0x174/0x240 [ 506.390015][T13611] ? __pfx_do_splice_direct+0x10/0x10 [ 506.390054][T13611] ? common_file_perm+0x1ab/0x4f0 [ 506.390085][T13611] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 506.390142][T13611] ? rw_verify_area+0xce/0x6d0 [ 506.390184][T13611] do_sendfile+0xadc/0xe20 [ 506.390232][T13611] ? __pfx_do_sendfile+0x10/0x10 [ 506.390272][T13611] ? __fget_files+0x21f/0x3d0 [ 506.390324][T13611] __x64_sys_sendfile64+0x1d8/0x220 [ 506.390370][T13611] ? ksys_write+0x1ac/0x250 [ 506.390410][T13611] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 506.390466][T13611] do_syscall_64+0x106/0xf80 [ 506.390494][T13611] ? clear_bhb_loop+0x40/0x90 [ 506.390529][T13611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.390558][T13611] RIP: 0033:0x7f91cf79bf79 [ 506.390583][T13611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.390611][T13611] RSP: 002b:00007f91d0676028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 506.390640][T13611] RAX: ffffffffffffffda RBX: 00007f91cfa15fa0 RCX: 00007f91cf79bf79 [ 506.390659][T13611] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 506.390675][T13611] RBP: 00007f91d0676090 R08: 0000000000000000 R09: 0000000000000000 [ 506.390691][T13611] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000001 [ 506.390708][T13611] R13: 00007f91cfa16038 R14: 00007f91cfa15fa0 R15: 00007ffdaf6cdb58 [ 506.390749][T13611] [ 506.970456][T13594] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1722'. [ 506.996913][ T30] audit: type=1800 audit(1771062680.768:24): pid=13592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1722" name="dbroot" dev="configfs" ino=49233 res=0 errno=0 [ 507.136937][T13594] team0: Port device team_slave_1 removed [ 507.517983][T13628] cgroup: fork rejected by pids controller in /syz3 [ 508.924832][T13721] random: crng reseeded on system resumption [ 510.274878][T13761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 511.230864][T13741] Process accounting paused [ 511.370932][T13770] input: jJǸ-9%vJ86 as /devices/virtual/input/input11 [ 511.824331][T13777] vivid-007: ================= START STATUS ================= [ 511.864639][T13777] vivid-007: Generate PTS: true [ 511.898814][T13777] vivid-007: Generate SCR: true [ 511.910033][T13777] tpg source WxH: 320x240 (Y'CbCr) [ 511.940658][T13777] tpg field: 1 [ 511.966490][T13777] tpg crop: (0,0)/320x240 [ 511.992438][T13777] tpg compose: (0,0)/320x240 [ 512.003315][T13777] tpg colorspace: 8 [ 512.007276][T13777] tpg transfer function: 0/0 [ 512.103422][T13777] tpg Y'CbCr encoding: 0/0 [ 512.133927][T13777] tpg quantization: 0/0 [ 512.148868][T13777] tpg RGB range: 0/2 [ 512.152871][T13777] vivid-007: ================== END STATUS ================== [ 518.371886][T13860] zswap: compressor not available [ 520.390192][T13890] zswap: compressor not available [ 521.195618][T13912] vivid-007: ================= START STATUS ================= [ 521.219948][T13912] vivid-007: Generate PTS: true [ 521.240411][T13912] vivid-007: Generate SCR: true [ 521.251291][T13912] tpg source WxH: 320x240 (Y'CbCr) [ 521.303362][T13912] tpg field: 1 [ 521.317175][T13912] tpg crop: (0,0)/320x240 [ 521.327388][T13912] tpg compose: (0,0)/320x240 [ 521.332808][T13912] tpg colorspace: 8 [ 521.378233][T13912] tpg transfer function: 0/0 [ 521.382897][T13912] tpg Y'CbCr encoding: 0/0 [ 521.433233][T13912] tpg quantization: 0/0 [ 521.437505][T13912] tpg RGB range: 0/2 [ 521.498625][T13912] vivid-007: ================== END STATUS ================== [ 524.652467][T13984] FAULT_INJECTION: forcing a failure. [ 524.652467][T13984] name failslab, interval 1, probability 0, space 0, times 0 [ 524.803392][T13984] CPU: 1 UID: 0 PID: 13984 Comm: syz.0.1777 Tainted: G L syzkaller #0 PREEMPT(full) [ 524.803440][T13984] Tainted: [L]=SOFTLOCKUP [ 524.803453][T13984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 524.803470][T13984] Call Trace: [ 524.803480][T13984] [ 524.803488][T13984] dump_stack_lvl+0x100/0x190 [ 524.803522][T13984] should_fail_ex.cold+0x5/0xa [ 524.803544][T13984] should_failslab+0xc2/0x120 [ 524.803573][T13984] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 524.803596][T13984] ? alloc_vfsmnt+0x23/0x6a0 [ 524.803619][T13984] alloc_vfsmnt+0x23/0x6a0 [ 524.803637][T13984] ? __pfx___might_resched+0x10/0x10 [ 524.803665][T13984] clone_mnt+0x4b/0x930 [ 524.803690][T13984] copy_tree+0xfc/0xbf0 [ 524.803715][T13984] ? __pfx_down_write+0x10/0x10 [ 524.803743][T13984] copy_mnt_ns+0x2bd/0xc30 [ 524.803762][T13984] ? create_new_namespaces+0x30/0xac0 [ 524.803791][T13984] ? rcu_is_watching+0x12/0xc0 [ 524.803820][T13984] create_new_namespaces+0xd3/0xac0 [ 524.803848][T13984] ? bpf_lsm_capable+0x9/0x10 [ 524.803876][T13984] ? security_capable+0x80/0x260 [ 524.803904][T13984] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 524.803924][T13984] ksys_unshare+0x455/0xab0 [ 524.803948][T13984] ? __pfx_ksys_unshare+0x10/0x10 [ 524.803979][T13984] __x64_sys_unshare+0x31/0x40 [ 524.804000][T13984] do_syscall_64+0x106/0xf80 [ 524.804019][T13984] ? clear_bhb_loop+0x40/0x90 [ 524.804042][T13984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.804061][T13984] RIP: 0033:0x7f07b959bf79 [ 524.804079][T13984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.804105][T13984] RSP: 002b:00007f07ba4a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 524.804125][T13984] RAX: ffffffffffffffda RBX: 00007f07b9816180 RCX: 00007f07b959bf79 [ 524.804138][T13984] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 524.804149][T13984] RBP: 00007f07b96327e0 R08: 0000000000000000 R09: 0000000000000000 [ 524.804161][T13984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.804173][T13984] R13: 00007f07b9816218 R14: 00007f07b9816180 R15: 00007fff1e852258 [ 524.804197][T13984] [ 525.696629][T14002] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 527.303663][T14040] FAULT_INJECTION: forcing a failure. [ 527.303663][T14040] name failslab, interval 1, probability 0, space 0, times 0 [ 527.317148][T14040] CPU: 1 UID: 0 PID: 14040 Comm: syz.3.1786 Tainted: G L syzkaller #0 PREEMPT(full) [ 527.317197][T14040] Tainted: [L]=SOFTLOCKUP [ 527.317208][T14040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 527.317225][T14040] Call Trace: [ 527.317235][T14040] [ 527.317246][T14040] dump_stack_lvl+0x100/0x190 [ 527.317293][T14040] should_fail_ex.cold+0x5/0xa [ 527.317328][T14040] should_failslab+0xc2/0x120 [ 527.317373][T14040] __kmalloc_cache_noprof+0x7a/0x6f0 [ 527.317405][T14040] ? alloc_pipe_info+0x10e/0x590 [ 527.317446][T14040] ? aa_file_perm+0x268/0x1530 [ 527.317489][T14040] alloc_pipe_info+0x10e/0x590 [ 527.317529][T14040] ? aa_file_perm+0x277/0x1530 [ 527.317566][T14040] splice_direct_to_actor+0x78f/0xa30 [ 527.317612][T14040] ? __pfx_direct_splice_actor+0x10/0x10 [ 527.317652][T14040] ? __pfx_aa_file_perm+0x10/0x10 [ 527.317704][T14040] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 527.317756][T14040] do_splice_direct+0x174/0x240 [ 527.317798][T14040] ? __pfx_do_splice_direct+0x10/0x10 [ 527.317835][T14040] ? common_file_perm+0x1ab/0x4f0 [ 527.317863][T14040] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 527.317904][T14040] ? bpf_lsm_file_permission+0x9/0x10 [ 527.317942][T14040] ? security_file_permission+0x76/0x210 [ 527.317975][T14040] ? rw_verify_area+0xce/0x6d0 [ 527.318011][T14040] do_sendfile+0xadc/0xe20 [ 527.318056][T14040] ? __pfx_do_sendfile+0x10/0x10 [ 527.318104][T14040] ? __fget_files+0x21f/0x3d0 [ 527.318154][T14040] __x64_sys_sendfile64+0x1d8/0x220 [ 527.318200][T14040] ? ksys_write+0x1ac/0x250 [ 527.318238][T14040] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 527.318294][T14040] do_syscall_64+0x106/0xf80 [ 527.318324][T14040] ? clear_bhb_loop+0x40/0x90 [ 527.318361][T14040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.318391][T14040] RIP: 0033:0x7f91cf79bf79 [ 527.318417][T14040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.318444][T14040] RSP: 002b:00007f91d0655028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 527.318474][T14040] RAX: ffffffffffffffda RBX: 00007f91cfa16090 RCX: 00007f91cf79bf79 [ 527.318493][T14040] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 527.318511][T14040] RBP: 00007f91d0655090 R08: 0000000000000000 R09: 0000000000000000 [ 527.318529][T14040] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000001 [ 527.318548][T14040] R13: 00007f91cfa16128 R14: 00007f91cfa16090 R15: 00007ffdaf6cdb58 [ 527.318588][T14040] [ 528.395919][T14066] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 528.695671][T14074] netlink: 346 bytes leftover after parsing attributes in process `syz.0.1794'. [ 529.690760][T14105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 531.894991][T14143] mmap: syz.2.1797 (14143) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 532.190155][T14149] FAULT_INJECTION: forcing a failure. [ 532.190155][T14149] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 532.232996][T14149] CPU: 0 UID: 0 PID: 14149 Comm: syz.3.1805 Tainted: G L syzkaller #0 PREEMPT(full) [ 532.233054][T14149] Tainted: [L]=SOFTLOCKUP [ 532.233065][T14149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 532.233081][T14149] Call Trace: [ 532.233091][T14149] [ 532.233103][T14149] dump_stack_lvl+0x100/0x190 [ 532.233150][T14149] should_fail_ex.cold+0x5/0xa [ 532.233182][T14149] ? prepare_alloc_pages+0x16d/0x5f0 [ 532.233229][T14149] should_fail_alloc_page+0xeb/0x140 [ 532.233273][T14149] prepare_alloc_pages+0x1f0/0x5f0 [ 532.233323][T14149] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 532.233373][T14149] ? __lock_acquire+0x4a5/0x2630 [ 532.233409][T14149] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 532.233457][T14149] ? is_bpf_text_address+0x94/0x1a0 [ 532.233498][T14149] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 532.233542][T14149] ? find_held_lock+0x2b/0x80 [ 532.233581][T14149] ? __might_fault+0xc5/0x140 [ 532.233612][T14149] ? __might_fault+0xc5/0x140 [ 532.233659][T14149] ? _copy_from_iter+0x270/0x1690 [ 532.233689][T14149] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 532.233736][T14149] ? policy_nodemask+0xed/0x4f0 [ 532.233782][T14149] alloc_pages_mpol+0x1fb/0x550 [ 532.233824][T14149] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 532.233879][T14149] alloc_pages_noprof+0x131/0x390 [ 532.233923][T14149] anon_pipe_write+0xabf/0x1d40 [ 532.233978][T14149] ? __pfx_anon_pipe_write+0x10/0x10 [ 532.234016][T14149] ? common_file_perm+0x1ab/0x4f0 [ 532.234060][T14149] ? bpf_lsm_file_permission+0x9/0x10 [ 532.234095][T14149] ? security_file_permission+0x76/0x210 [ 532.234125][T14149] ? rw_verify_area+0xce/0x6d0 [ 532.234162][T14149] vfs_write+0x6ac/0x1070 [ 532.234198][T14149] ? __pfx_anon_pipe_write+0x10/0x10 [ 532.234236][T14149] ? __pfx_vfs_write+0x10/0x10 [ 532.234268][T14149] ? find_held_lock+0x2b/0x80 [ 532.234332][T14149] ksys_write+0x1f8/0x250 [ 532.234366][T14149] ? __pfx_ksys_write+0x10/0x10 [ 532.234414][T14149] do_syscall_64+0x106/0xf80 [ 532.234443][T14149] ? clear_bhb_loop+0x40/0x90 [ 532.234476][T14149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.234503][T14149] RIP: 0033:0x7f91cf79bf79 [ 532.234528][T14149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.234552][T14149] RSP: 002b:00007f91d0655028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 532.234579][T14149] RAX: ffffffffffffffda RBX: 00007f91cfa16090 RCX: 00007f91cf79bf79 [ 532.234598][T14149] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 532.234616][T14149] RBP: 00007f91d0655090 R08: 0000000000000000 R09: 0000000000000000 [ 532.234633][T14149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 532.234650][T14149] R13: 00007f91cfa16128 R14: 00007f91cfa16090 R15: 00007ffdaf6cdb58 [ 532.234690][T14149] [ 533.033603][T14159] random: crng reseeded on system resumption [ 536.111887][T14228] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1818'. [ 536.989093][T14247] random: crng reseeded on system resumption [ 538.386198][T14273] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 538.603536][T14279] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 540.110992][T14314] ubi0: attaching mtd0 [ 540.171729][T14314] ubi0: scanning is finished [ 540.176831][T14314] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 540.427506][T14314] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 542.156584][T14366] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 542.958671][T14332] Process accounting resumed [ 543.116301][T14375] FAULT_INJECTION: forcing a failure. [ 543.116301][T14375] name failslab, interval 1, probability 0, space 0, times 0 [ 543.135094][T14375] CPU: 0 UID: 0 PID: 14375 Comm: syz.0.1844 Tainted: G L syzkaller #0 PREEMPT(full) [ 543.135147][T14375] Tainted: [L]=SOFTLOCKUP [ 543.135159][T14375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 543.135178][T14375] Call Trace: [ 543.135189][T14375] [ 543.135203][T14375] dump_stack_lvl+0x100/0x190 [ 543.135257][T14375] should_fail_ex.cold+0x5/0xa [ 543.135295][T14375] should_failslab+0xc2/0x120 [ 543.135343][T14375] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 543.135383][T14375] ? __kernfs_new_node+0xd2/0x960 [ 543.135426][T14375] __kernfs_new_node+0xd2/0x960 [ 543.135458][T14375] ? kernfs_add_one+0x583/0x850 [ 543.135498][T14375] ? __pfx___kernfs_new_node+0x10/0x10 [ 543.135543][T14375] ? find_held_lock+0x2b/0x80 [ 543.135590][T14375] ? kernfs_root+0xee/0x2a0 [ 543.135623][T14375] ? kernfs_root+0xee/0x2a0 [ 543.135666][T14375] kernfs_new_node+0x11b/0x1a0 [ 543.135709][T14375] __kernfs_create_file+0x53/0x350 [ 543.135760][T14375] sysfs_add_file_mode_ns+0x207/0x3c0 [ 543.135820][T14375] sysfs_create_file_ns+0x145/0x1e0 [ 543.135872][T14375] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 543.135926][T14375] ? __pfx___up_read+0x10/0x10 [ 543.135979][T14375] ? acpi_device_notify+0x464/0x500 [ 543.136028][T14375] ? kobject_put+0xb9/0x640 [ 543.136072][T14375] device_create_file+0xf2/0x1d0 [ 543.136112][T14375] device_add+0x2cb/0x1950 [ 543.136145][T14375] ? __pfx_dev_set_name+0x10/0x10 [ 543.136182][T14375] ? __pfx_device_add+0x10/0x10 [ 543.136213][T14375] ? lockdep_init_map_type+0x5c/0x250 [ 543.136254][T14375] ? __init_waitqueue_head+0xca/0x150 [ 543.136311][T14375] rfkill_register+0x1ad/0xb30 [ 543.136363][T14375] nfc_register_device+0x11f/0x3e0 [ 543.136401][T14375] nci_register_device+0x7f1/0xb80 [ 543.136450][T14375] ? __pfx_nci_register_device+0x10/0x10 [ 543.136503][T14375] ? lockdep_init_map_type+0x5c/0x250 [ 543.136550][T14375] virtual_ncidev_open+0x141/0x220 [ 543.136589][T14375] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 543.136626][T14375] misc_open+0x26d/0x450 [ 543.136658][T14375] ? __pfx_misc_open+0x10/0x10 [ 543.136688][T14375] chrdev_open+0x234/0x6a0 [ 543.136735][T14375] ? __pfx_apparmor_file_open+0x10/0x10 [ 543.136779][T14375] ? __pfx_chrdev_open+0x10/0x10 [ 543.136827][T14375] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 543.136887][T14375] do_dentry_open+0x6d8/0x1660 [ 543.136933][T14375] ? __pfx_chrdev_open+0x10/0x10 [ 543.137003][T14375] vfs_open+0x82/0x3f0 [ 543.137041][T14375] path_openat+0x208c/0x31a0 [ 543.137104][T14375] ? __pfx_path_openat+0x10/0x10 [ 543.137166][T14375] do_file_open+0x20e/0x430 [ 543.137217][T14375] ? __pfx_do_file_open+0x10/0x10 [ 543.137297][T14375] ? alloc_fd+0x476/0x790 [ 543.137348][T14375] ? do_getname+0x191/0x390 [ 543.137385][T14375] do_sys_openat2+0x10d/0x1e0 [ 543.137421][T14375] ? __pfx_do_sys_openat2+0x10/0x10 [ 543.137473][T14375] __x64_sys_openat+0x12d/0x210 [ 543.137509][T14375] ? __pfx___x64_sys_openat+0x10/0x10 [ 543.137563][T14375] do_syscall_64+0x106/0xf80 [ 543.137597][T14375] ? clear_bhb_loop+0x40/0x90 [ 543.137639][T14375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.137672][T14375] RIP: 0033:0x7f07b959bf79 [ 543.137702][T14375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.137731][T14375] RSP: 002b:00007f07ba4e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 543.137764][T14375] RAX: ffffffffffffffda RBX: 00007f07b9815fa0 RCX: 00007f07b959bf79 [ 543.137785][T14375] RDX: 0000000000000002 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 543.137807][T14375] RBP: 00007f07b96327e0 R08: 0000000000000000 R09: 0000000000000000 [ 543.137828][T14375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 543.137848][T14375] R13: 00007f07b9816038 R14: 00007f07b9815fa0 R15: 00007fff1e852258 [ 543.137887][T14375] [ 544.310079][T14385] FAULT_INJECTION: forcing a failure. [ 544.310079][T14385] name failslab, interval 1, probability 0, space 0, times 0 [ 544.324777][T14385] CPU: 0 UID: 0 PID: 14385 Comm: syz.3.1847 Tainted: G L syzkaller #0 PREEMPT(full) [ 544.324829][T14385] Tainted: [L]=SOFTLOCKUP [ 544.324839][T14385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 544.324856][T14385] Call Trace: [ 544.324867][T14385] [ 544.324878][T14385] dump_stack_lvl+0x100/0x190 [ 544.324928][T14385] should_fail_ex.cold+0x5/0xa [ 544.324964][T14385] should_failslab+0xc2/0x120 [ 544.325009][T14385] __kmalloc_cache_noprof+0x7a/0x6f0 [ 544.325040][T14385] ? __do_sys_fanotify_init+0x690/0xe50 [ 544.325087][T14385] __do_sys_fanotify_init+0x690/0xe50 [ 544.325132][T14385] do_syscall_64+0x106/0xf80 [ 544.325163][T14385] ? clear_bhb_loop+0x40/0x90 [ 544.325203][T14385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.325233][T14385] RIP: 0033:0x7f91cf79bf79 [ 544.325258][T14385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.325288][T14385] RSP: 002b:00007f91d0676028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 544.325318][T14385] RAX: ffffffffffffffda RBX: 00007f91cfa15fa0 RCX: 00007f91cf79bf79 [ 544.325338][T14385] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 544.325357][T14385] RBP: 00007f91cf8327e0 R08: 0000000000000000 R09: 0000000000000000 [ 544.325375][T14385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 544.325393][T14385] R13: 00007f91cfa16038 R14: 00007f91cfa15fa0 R15: 00007ffdaf6cdb58 [ 544.325433][T14385] [ 544.646368][T14385] zswap: compressor not available [ 545.360891][T14402] random: crng reseeded on system resumption [ 546.096794][T14427] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 546.829698][T14449] FAULT_INJECTION: forcing a failure. [ 546.829698][T14449] name failslab, interval 1, probability 0, space 0, times 0 [ 546.856597][T14449] CPU: 0 UID: 0 PID: 14449 Comm: syz.1.1857 Tainted: G L syzkaller #0 PREEMPT(full) [ 546.856630][T14449] Tainted: [L]=SOFTLOCKUP [ 546.856637][T14449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 546.856649][T14449] Call Trace: [ 546.856657][T14449] [ 546.856665][T14449] dump_stack_lvl+0x100/0x190 [ 546.856697][T14449] should_fail_ex.cold+0x5/0xa [ 546.856719][T14449] should_failslab+0xc2/0x120 [ 546.856748][T14449] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 546.856774][T14449] ? __kernfs_new_node+0xd2/0x960 [ 546.856793][T14449] ? kstrdup+0xb3/0xe0 [ 546.856820][T14449] __kernfs_new_node+0xd2/0x960 [ 546.856838][T14449] ? __kernel_text_address+0xd/0x30 [ 546.856865][T14449] ? arch_stack_walk+0xa6/0xf0 [ 546.856882][T14449] ? __pfx___kernfs_new_node+0x10/0x10 [ 546.856906][T14449] ? find_held_lock+0x2b/0x80 [ 546.856935][T14449] ? kernfs_root+0xee/0x2a0 [ 546.856953][T14449] ? kernfs_root+0xee/0x2a0 [ 546.856978][T14449] kernfs_new_node+0x11b/0x1a0 [ 546.857004][T14449] kernfs_create_dir_ns+0x4c/0x1a0 [ 546.857040][T14449] sysfs_create_dir_ns+0x13a/0x2b0 [ 546.857060][T14449] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 546.857088][T14449] ? find_held_lock+0x2b/0x80 [ 546.857115][T14449] ? kobject_add_internal+0x25f/0x930 [ 546.857140][T14449] ? kobject_add_internal+0x25f/0x930 [ 546.857166][T14449] ? do_raw_spin_unlock+0x145/0x1e0 [ 546.857193][T14449] kobject_add_internal+0x2c8/0x930 [ 546.857222][T14449] kobject_add+0x16a/0x1e0 [ 546.857245][T14449] ? __pfx_kobject_add+0x10/0x10 [ 546.857267][T14449] ? class_to_subsys+0x10f/0x150 [ 546.857300][T14449] ? kobject_put+0xb9/0x640 [ 546.857333][T14449] ? _raw_spin_unlock+0x28/0x50 [ 546.857391][T14449] device_add+0x294/0x1950 [ 546.857421][T14449] ? __pfx_dev_set_name+0x10/0x10 [ 546.857455][T14449] ? __pfx_device_add+0x10/0x10 [ 546.857484][T14449] ? lockdep_init_map_type+0x5c/0x250 [ 546.857521][T14449] ? __init_waitqueue_head+0xca/0x150 [ 546.857576][T14449] rfkill_register+0x1ad/0xb30 [ 546.857629][T14449] nfc_register_device+0x11f/0x3e0 [ 546.857670][T14449] nci_register_device+0x7f1/0xb80 [ 546.857720][T14449] ? __pfx_nci_register_device+0x10/0x10 [ 546.857773][T14449] ? lockdep_init_map_type+0x5c/0x250 [ 546.857822][T14449] virtual_ncidev_open+0x141/0x220 [ 546.857861][T14449] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 546.857898][T14449] misc_open+0x26d/0x450 [ 546.857931][T14449] ? __pfx_misc_open+0x10/0x10 [ 546.857961][T14449] chrdev_open+0x234/0x6a0 [ 546.858008][T14449] ? __pfx_apparmor_file_open+0x10/0x10 [ 546.858066][T14449] ? __pfx_chrdev_open+0x10/0x10 [ 546.858115][T14449] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 546.858174][T14449] do_dentry_open+0x6d8/0x1660 [ 546.858221][T14449] ? __pfx_chrdev_open+0x10/0x10 [ 546.858279][T14449] vfs_open+0x82/0x3f0 [ 546.858321][T14449] path_openat+0x208c/0x31a0 [ 546.858385][T14449] ? __pfx_path_openat+0x10/0x10 [ 546.858446][T14449] do_file_open+0x20e/0x430 [ 546.858497][T14449] ? __pfx_do_file_open+0x10/0x10 [ 546.858568][T14449] ? alloc_fd+0x476/0x790 [ 546.858602][T14449] ? do_getname+0x191/0x390 [ 546.858623][T14449] do_sys_openat2+0x10d/0x1e0 [ 546.858644][T14449] ? __pfx_do_sys_openat2+0x10/0x10 [ 546.858673][T14449] __x64_sys_openat+0x12d/0x210 [ 546.858694][T14449] ? __pfx___x64_sys_openat+0x10/0x10 [ 546.858724][T14449] do_syscall_64+0x106/0xf80 [ 546.858744][T14449] ? clear_bhb_loop+0x40/0x90 [ 546.858767][T14449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.858789][T14449] RIP: 0033:0x7faeee59bf79 [ 546.858806][T14449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.858824][T14449] RSP: 002b:00007faeef390028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 546.858843][T14449] RAX: ffffffffffffffda RBX: 00007faeee815fa0 RCX: 00007faeee59bf79 [ 546.858856][T14449] RDX: 0000000000000002 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 546.858868][T14449] RBP: 00007faeee6327e0 R08: 0000000000000000 R09: 0000000000000000 [ 546.858879][T14449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 546.858890][T14449] R13: 00007faeee816038 R14: 00007faeee815fa0 R15: 00007ffd2ac66c28 [ 546.858915][T14449] [ 547.333470][T14449] kobject: kobject_add_internal failed for rfkill177 (error: -12 parent: nfc2) [ 548.867838][T14489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.782783][T14524] zswap: compressor not available [ 556.190512][T14605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 556.930451][T14615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 557.061969][T14614] random: crng reseeded on system resumption [ 557.336253][T14622] random: crng reseeded on system resumption [ 557.568076][T14623] zswap: compressor not available [ 558.071841][T14643] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 558.644996][T14651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 559.068366][T14656] zswap: compressor not available [ 559.895422][T14678] tc_dump_action: action bad kind [ 561.199672][T14704] zswap: compressor not available [ 561.616629][T14721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 562.497650][T14725] zswap: compressor not available [ 562.622654][T14743] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 563.057671][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.064069][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.374216][T14759] zswap: compressor not available [ 563.597166][T14772] FAULT_INJECTION: forcing a failure. [ 563.597166][T14772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 563.709534][T14772] CPU: 0 UID: 0 PID: 14772 Comm: syz.1.1922 Tainted: G L syzkaller #0 PREEMPT(full) [ 563.709588][T14772] Tainted: [L]=SOFTLOCKUP [ 563.709601][T14772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 563.709617][T14772] Call Trace: [ 563.709628][T14772] [ 563.709639][T14772] dump_stack_lvl+0x100/0x190 [ 563.709689][T14772] should_fail_ex.cold+0x5/0xa [ 563.709725][T14772] _copy_from_user+0x2e/0xd0 [ 563.709756][T14772] ucma_write+0x128/0x330 [ 563.709787][T14772] ? __pfx_ucma_write+0x10/0x10 [ 563.709817][T14772] ? bpf_lsm_file_permission+0x9/0x10 [ 563.709866][T14772] ? security_file_permission+0x76/0x210 [ 563.709901][T14772] ? rw_verify_area+0xce/0x6d0 [ 563.709944][T14772] vfs_write+0x2aa/0x1070 [ 563.709987][T14772] ? __pfx_ucma_write+0x10/0x10 [ 563.710019][T14772] ? __pfx_vfs_write+0x10/0x10 [ 563.710057][T14772] ? find_held_lock+0x2b/0x80 [ 563.710102][T14772] ? __fget_files+0x215/0x3d0 [ 563.710142][T14772] ? __fget_files+0x215/0x3d0 [ 563.710190][T14772] ? __fget_files+0x21f/0x3d0 [ 563.710243][T14772] ksys_write+0x1f8/0x250 [ 563.710285][T14772] ? __pfx_ksys_write+0x10/0x10 [ 563.710338][T14772] do_syscall_64+0x106/0xf80 [ 563.710371][T14772] ? clear_bhb_loop+0x40/0x90 [ 563.710409][T14772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.710441][T14772] RIP: 0033:0x7faeee59bf79 [ 563.710467][T14772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.710496][T14772] RSP: 002b:00007faeef390028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 563.710525][T14772] RAX: ffffffffffffffda RBX: 00007faeee815fa0 RCX: 00007faeee59bf79 [ 563.710545][T14772] RDX: 00000000000000c3 RSI: 0000000000000000 RDI: 0000000000000011 [ 563.710564][T14772] RBP: 00007faeef390090 R08: 0000000000000000 R09: 0000000000000000 [ 563.710582][T14772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 563.710601][T14772] R13: 00007faeee816038 R14: 00007faeee815fa0 R15: 00007ffd2ac66c28 [ 563.710641][T14772] [ 565.106140][T14791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.019683][T14804] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 566.340590][T14802] zswap: compressor 000 not available [ 568.964372][T14855] FAULT_INJECTION: forcing a failure. [ 568.964372][T14855] name failslab, interval 1, probability 0, space 0, times 0 [ 568.977145][T14855] CPU: 0 UID: 0 PID: 14855 Comm: syz.1.1939 Tainted: G L syzkaller #0 PREEMPT(full) [ 568.977175][T14855] Tainted: [L]=SOFTLOCKUP [ 568.977182][T14855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 568.977193][T14855] Call Trace: [ 568.977200][T14855] [ 568.977208][T14855] dump_stack_lvl+0x100/0x190 [ 568.977239][T14855] should_fail_ex.cold+0x5/0xa [ 568.977261][T14855] ? tomoyo_realpath_from_path+0xb6/0x690 [ 568.977289][T14855] should_failslab+0xc2/0x120 [ 568.977316][T14855] __kmalloc_noprof+0xe0/0x850 [ 568.977344][T14855] tomoyo_realpath_from_path+0xb6/0x690 [ 568.977374][T14855] tomoyo_path_number_perm+0x23c/0x580 [ 568.977402][T14855] ? tomoyo_path_number_perm+0x22e/0x580 [ 568.977432][T14855] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 568.977481][T14855] ? find_held_lock+0x2b/0x80 [ 568.977508][T14855] ? __fget_files+0x215/0x3d0 [ 568.977531][T14855] ? hook_file_ioctl_common+0x146/0x410 [ 568.977564][T14855] ? __fget_files+0x21f/0x3d0 [ 568.977591][T14855] security_file_ioctl+0xd3/0x230 [ 568.977621][T14855] __x64_sys_ioctl+0xb7/0x210 [ 568.977645][T14855] do_syscall_64+0x106/0xf80 [ 568.977671][T14855] ? clear_bhb_loop+0x40/0x90 [ 568.977693][T14855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.977712][T14855] RIP: 0033:0x7faeee59bf79 [ 568.977728][T14855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.977745][T14855] RSP: 002b:00007faeef390028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 568.977763][T14855] RAX: ffffffffffffffda RBX: 00007faeee815fa0 RCX: 00007faeee59bf79 [ 568.977775][T14855] RDX: 0000200000000340 RSI: 000000008038550a RDI: 0000000000000003 [ 568.977786][T14855] RBP: 00007faeef390090 R08: 0000000000000000 R09: 0000000000000000 [ 568.977796][T14855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.977807][T14855] R13: 00007faeee816038 R14: 00007faeee815fa0 R15: 00007ffd2ac66c28 [ 568.977829][T14855] [ 568.977837][T14855] ERROR: Out of memory at tomoyo_realpath_from_path. [ 569.636451][T14869] FAULT_INJECTION: forcing a failure. [ 569.636451][T14869] name failslab, interval 1, probability 0, space 0, times 0 [ 569.650041][T14869] CPU: 1 UID: 0 PID: 14869 Comm: syz.1.1941 Tainted: G L syzkaller #0 PREEMPT(full) [ 569.650099][T14869] Tainted: [L]=SOFTLOCKUP [ 569.650111][T14869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 569.650129][T14869] Call Trace: [ 569.650140][T14869] [ 569.650152][T14869] dump_stack_lvl+0x100/0x190 [ 569.650207][T14869] should_fail_ex.cold+0x5/0xa [ 569.650244][T14869] should_failslab+0xc2/0x120 [ 569.650294][T14869] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 569.650334][T14869] ? __kernfs_new_node+0xd2/0x960 [ 569.650376][T14869] __kernfs_new_node+0xd2/0x960 [ 569.650415][T14869] ? __pfx___kernfs_new_node+0x10/0x10 [ 569.650461][T14869] ? find_held_lock+0x2b/0x80 [ 569.650510][T14869] ? kernfs_root+0xee/0x2a0 [ 569.650540][T14869] ? kernfs_root+0xee/0x2a0 [ 569.650581][T14869] kernfs_new_node+0x11b/0x1a0 [ 569.650626][T14869] __kernfs_create_file+0x53/0x350 [ 569.650686][T14869] sysfs_add_file_mode_ns+0x207/0x3c0 [ 569.650749][T14869] internal_create_group+0x593/0xf40 [ 569.650796][T14869] ? __pfx_internal_create_group+0x10/0x10 [ 569.650837][T14869] ? kernfs_create_link+0x1bd/0x240 [ 569.650892][T14869] internal_create_groups+0x9d/0x150 [ 569.650931][T14869] device_add+0x71a/0x1950 [ 569.650966][T14869] ? __pfx_device_add+0x10/0x10 [ 569.650996][T14869] ? lockdep_init_map_type+0x5c/0x250 [ 569.651036][T14869] ? __init_waitqueue_head+0xca/0x150 [ 569.651089][T14869] rfkill_register+0x1ad/0xb30 [ 569.651141][T14869] nfc_register_device+0x11f/0x3e0 [ 569.651178][T14869] nci_register_device+0x7f1/0xb80 [ 569.651228][T14869] ? __pfx_nci_register_device+0x10/0x10 [ 569.651279][T14869] ? lockdep_init_map_type+0x5c/0x250 [ 569.651327][T14869] virtual_ncidev_open+0x141/0x220 [ 569.651366][T14869] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 569.651402][T14869] misc_open+0x26d/0x450 [ 569.651433][T14869] ? __pfx_misc_open+0x10/0x10 [ 569.651462][T14869] chrdev_open+0x234/0x6a0 [ 569.651507][T14869] ? __pfx_apparmor_file_open+0x10/0x10 [ 569.651554][T14869] ? __pfx_chrdev_open+0x10/0x10 [ 569.651604][T14869] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 569.651671][T14869] do_dentry_open+0x6d8/0x1660 [ 569.651716][T14869] ? __pfx_chrdev_open+0x10/0x10 [ 569.651773][T14869] vfs_open+0x82/0x3f0 [ 569.651813][T14869] path_openat+0x208c/0x31a0 [ 569.651876][T14869] ? __pfx_path_openat+0x10/0x10 [ 569.651938][T14869] do_file_open+0x20e/0x430 [ 569.651988][T14869] ? __pfx_do_file_open+0x10/0x10 [ 569.652062][T14869] ? alloc_fd+0x476/0x790 [ 569.652105][T14869] ? do_getname+0x191/0x390 [ 569.652138][T14869] do_sys_openat2+0x10d/0x1e0 [ 569.652170][T14869] ? __pfx_do_sys_openat2+0x10/0x10 [ 569.652218][T14869] __x64_sys_openat+0x12d/0x210 [ 569.652254][T14869] ? __pfx___x64_sys_openat+0x10/0x10 [ 569.652307][T14869] do_syscall_64+0x106/0xf80 [ 569.652340][T14869] ? clear_bhb_loop+0x40/0x90 [ 569.652379][T14869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.652410][T14869] RIP: 0033:0x7faeee59bf79 [ 569.652438][T14869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 569.652468][T14869] RSP: 002b:00007faeef390028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 569.652498][T14869] RAX: ffffffffffffffda RBX: 00007faeee815fa0 RCX: 00007faeee59bf79 [ 569.652519][T14869] RDX: 0000000000000002 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 569.652538][T14869] RBP: 00007faeee6327e0 R08: 0000000000000000 R09: 0000000000000000 [ 569.652559][T14869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 569.652577][T14869] R13: 00007faeee816038 R14: 00007faeee815fa0 R15: 00007ffd2ac66c28 [ 569.652622][T14869] [ 571.023481][ T30] audit: type=1804 audit(2147483648.700:25): pid=14888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1945" name="/newroot/483/file0" dev="tmpfs" ino=2624 res=1 errno=0 [ 571.045389][ T30] audit: type=1804 audit(2147483648.720:26): pid=14888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1945" name="/newroot/483/file0" dev="tmpfs" ino=2624 res=1 errno=0 [ 571.741921][T14903] nvme_fabrics: missing parameter 'transport=%s' [ 571.750424][T14903] nvme_fabrics: missing parameter 'nqn=%s' [ 571.812318][T14908] nvme_fabrics: missing parameter 'transport=%s' [ 571.843523][T14908] nvme_fabrics: missing parameter 'nqn=%s' [ 573.042216][T14936] Process accounting paused [ 573.370175][T14940] zswap: compressor not available [ 573.540715][T14949] random: crng reseeded on system resumption [ 573.683922][T14949] hub 1-0:1.0: USB hub found [ 573.708208][T14949] hub 1-0:1.0: 1 port detected [ 573.924330][T14955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1961'. [ 573.929516][T14959] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 575.079508][T14988] FAULT_INJECTION: forcing a failure. [ 575.079508][T14988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 575.131362][T14988] CPU: 0 UID: 0 PID: 14988 Comm: syz.1.1967 Tainted: G L syzkaller #0 PREEMPT(full) [ 575.131410][T14988] Tainted: [L]=SOFTLOCKUP [ 575.131421][T14988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 575.131439][T14988] Call Trace: [ 575.131449][T14988] [ 575.131460][T14988] dump_stack_lvl+0x100/0x190 [ 575.131518][T14988] should_fail_ex.cold+0x5/0xa [ 575.131552][T14988] _copy_from_user+0x2e/0xd0 [ 575.131592][T14988] copy_msghdr_from_user+0x9f/0x4f0 [ 575.131633][T14988] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 575.131680][T14988] ? rcu_is_watching+0x12/0xc0 [ 575.131720][T14988] ? ___sys_recvmsg+0x177/0x1a0 [ 575.131757][T14988] ? kfree+0x2ec/0x6b0 [ 575.131797][T14988] ___sys_recvmsg+0xdd/0x1a0 [ 575.131839][T14988] ? __pfx____sys_recvmsg+0x10/0x10 [ 575.131902][T14988] ? __pfx___might_resched+0x10/0x10 [ 575.131953][T14988] do_recvmmsg+0x301/0x760 [ 575.132002][T14988] ? __pfx_do_recvmmsg+0x10/0x10 [ 575.132042][T14988] ? ksys_write+0x190/0x250 [ 575.132082][T14988] ? ksys_write+0x190/0x250 [ 575.132130][T14988] ? __mutex_unlock_slowpath+0x15c/0x790 [ 575.132178][T14988] ? __fget_files+0x21f/0x3d0 [ 575.132230][T14988] __x64_sys_recvmmsg+0x22a/0x280 [ 575.132265][T14988] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 575.132308][T14988] do_syscall_64+0x106/0xf80 [ 575.132338][T14988] ? clear_bhb_loop+0x40/0x90 [ 575.132374][T14988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.132405][T14988] RIP: 0033:0x7faeee59bf79 [ 575.132432][T14988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.132461][T14988] RSP: 002b:00007faeec7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 575.132491][T14988] RAX: ffffffffffffffda RBX: 00007faeee816180 RCX: 00007faeee59bf79 [ 575.132512][T14988] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 575.132531][T14988] RBP: 00007faeec7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 575.132549][T14988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.132576][T14988] R13: 00007faeee816218 R14: 00007faeee816180 R15: 00007ffd2ac66c28 [ 575.132614][T14988] [ 577.441819][T15037] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 577.901202][T15043] zswap: compressor not available [ 578.587770][T15075] FAULT_INJECTION: forcing a failure. [ 578.587770][T15075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 578.703321][T15075] CPU: 1 UID: 0 PID: 15075 Comm: syz.1.1985 Tainted: G L syzkaller #0 PREEMPT(full) [ 578.703368][T15075] Tainted: [L]=SOFTLOCKUP [ 578.703380][T15075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 578.703403][T15075] Call Trace: [ 578.703414][T15075] [ 578.703426][T15075] dump_stack_lvl+0x100/0x190 [ 578.703475][T15075] should_fail_ex.cold+0x5/0xa [ 578.703510][T15075] strncpy_from_user+0x3b/0x2d0 [ 578.703561][T15075] do_getname+0x78/0x390 [ 578.703597][T15075] do_sys_openat2+0xc5/0x1e0 [ 578.703631][T15075] ? __pfx_do_sys_openat2+0x10/0x10 [ 578.703668][T15075] ? __fget_files+0x21f/0x3d0 [ 578.703717][T15075] __x64_sys_open+0xfe/0x1d0 [ 578.703750][T15075] ? __pfx___x64_sys_open+0x10/0x10 [ 578.703781][T15075] ? ksys_write+0x1ac/0x250 [ 578.703843][T15075] do_syscall_64+0x106/0xf80 [ 578.703875][T15075] ? clear_bhb_loop+0x40/0x90 [ 578.703912][T15075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.703942][T15075] RIP: 0033:0x7faeee59bf79 [ 578.703967][T15075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.703996][T15075] RSP: 002b:00007faeef36f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 578.704024][T15075] RAX: ffffffffffffffda RBX: 00007faeee816090 RCX: 00007faeee59bf79 [ 578.704045][T15075] RDX: 0000000000000014 RSI: 0000000000000201 RDI: 00002000000001c0 [ 578.704063][T15075] RBP: 00007faeef36f090 R08: 0000000000000000 R09: 0000000000000000 [ 578.704081][T15075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 578.704100][T15075] R13: 00007faeee816128 R14: 00007faeee816090 R15: 00007ffd2ac66c28 [ 578.704141][T15075] [ 579.228248][T15056] zswap: compressor not available [ 579.464274][T15089] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 580.461760][T15106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 581.035437][T15116] FAULT_INJECTION: forcing a failure. [ 581.035437][T15116] name failslab, interval 1, probability 0, space 0, times 0 [ 581.070524][T15116] CPU: 0 UID: 0 PID: 15116 Comm: syz.1.1993 Tainted: G L syzkaller #0 PREEMPT(full) [ 581.070578][T15116] Tainted: [L]=SOFTLOCKUP [ 581.070588][T15116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 581.070605][T15116] Call Trace: [ 581.070615][T15116] [ 581.070627][T15116] dump_stack_lvl+0x100/0x190 [ 581.070676][T15116] should_fail_ex.cold+0x5/0xa [ 581.070710][T15116] ? tomoyo_realpath_from_path+0xb6/0x690 [ 581.070750][T15116] should_failslab+0xc2/0x120 [ 581.070792][T15116] __kmalloc_noprof+0xe0/0x850 [ 581.070838][T15116] tomoyo_realpath_from_path+0xb6/0x690 [ 581.070881][T15116] tomoyo_path_number_perm+0x23c/0x580 [ 581.070933][T15116] ? tomoyo_path_number_perm+0x22e/0x580 [ 581.070984][T15116] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 581.071071][T15116] ? find_held_lock+0x2b/0x80 [ 581.071116][T15116] ? __fget_files+0x215/0x3d0 [ 581.071153][T15116] ? hook_file_ioctl_common+0x146/0x410 [ 581.071204][T15116] ? __fget_files+0x21f/0x3d0 [ 581.071249][T15116] security_file_ioctl+0xd3/0x230 [ 581.071295][T15116] __x64_sys_ioctl+0xb7/0x210 [ 581.071332][T15116] do_syscall_64+0x106/0xf80 [ 581.071361][T15116] ? clear_bhb_loop+0x40/0x90 [ 581.071398][T15116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.071428][T15116] RIP: 0033:0x7faeee59bf79 [ 581.071452][T15116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 581.071479][T15116] RSP: 002b:00007faeef390028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 581.071507][T15116] RAX: ffffffffffffffda RBX: 00007faeee815fa0 RCX: 00007faeee59bf79 [ 581.071526][T15116] RDX: 0000000000000003 RSI: 000000008030ae7c RDI: 0000000000000003 [ 581.071550][T15116] RBP: 00007faeef390090 R08: 0000000000000000 R09: 0000000000000000 [ 581.071566][T15116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 581.071584][T15116] R13: 00007faeee816038 R14: 00007faeee815fa0 R15: 00007ffd2ac66c28 [ 581.071624][T15116] [ 581.288295][T15116] ERROR: Out of memory at tomoyo_realpath_from_path. [ 581.988225][T15131] tc_dump_action: action bad kind [ 582.072428][T15125] zswap: compressor not available [ 584.254556][T15170] random: crng reseeded on system resumption [ 584.328655][T15179] FAULT_INJECTION: forcing a failure. [ 584.328655][T15179] name failslab, interval 1, probability 0, space 0, times 0 [ 584.364692][T15179] CPU: 1 UID: 0 PID: 15179 Comm: syz.3.2010 Tainted: G L syzkaller #0 PREEMPT(full) [ 584.364743][T15179] Tainted: [L]=SOFTLOCKUP [ 584.364755][T15179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 584.364774][T15179] Call Trace: [ 584.364787][T15179] [ 584.364818][T15179] dump_stack_lvl+0x100/0x190 [ 584.364875][T15179] should_fail_ex.cold+0x5/0xa [ 584.364912][T15179] should_failslab+0xc2/0x120 [ 584.364959][T15179] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 584.365002][T15179] ? __kernfs_new_node+0xd2/0x960 [ 584.365046][T15179] __kernfs_new_node+0xd2/0x960 [ 584.365079][T15179] ? kernfs_add_one+0x583/0x850 [ 584.365122][T15179] ? __pfx___kernfs_new_node+0x10/0x10 [ 584.365166][T15179] ? find_held_lock+0x2b/0x80 [ 584.365215][T15179] ? kernfs_root+0xee/0x2a0 [ 584.365246][T15179] ? kernfs_root+0xee/0x2a0 [ 584.365289][T15179] kernfs_new_node+0x11b/0x1a0 [ 584.365336][T15179] __kernfs_create_file+0x53/0x350 [ 584.365388][T15179] sysfs_add_file_mode_ns+0x207/0x3c0 [ 584.365452][T15179] sysfs_create_file_ns+0x145/0x1e0 [ 584.365501][T15179] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 584.365550][T15179] ? __pfx___up_read+0x10/0x10 [ 584.365583][T15179] ? acpi_device_notify+0x464/0x500 [ 584.365624][T15179] ? kobject_put+0xb9/0x640 [ 584.365670][T15179] device_create_file+0xf2/0x1d0 [ 584.365711][T15179] device_add+0x2cb/0x1950 [ 584.365743][T15179] ? __pfx_dev_set_name+0x10/0x10 [ 584.365782][T15179] ? __pfx_device_add+0x10/0x10 [ 584.365837][T15179] ? lockdep_init_map_type+0x5c/0x250 [ 584.365880][T15179] ? __init_waitqueue_head+0xca/0x150 [ 584.365938][T15179] rfkill_register+0x1ad/0xb30 [ 584.365993][T15179] nfc_register_device+0x11f/0x3e0 [ 584.366033][T15179] nci_register_device+0x7f1/0xb80 [ 584.366084][T15179] ? __pfx_nci_register_device+0x10/0x10 [ 584.366138][T15179] ? lockdep_init_map_type+0x5c/0x250 [ 584.366187][T15179] virtual_ncidev_open+0x141/0x220 [ 584.366226][T15179] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 584.366263][T15179] misc_open+0x26d/0x450 [ 584.366296][T15179] ? __pfx_misc_open+0x10/0x10 [ 584.366326][T15179] chrdev_open+0x234/0x6a0 [ 584.366370][T15179] ? __pfx_apparmor_file_open+0x10/0x10 [ 584.366415][T15179] ? __pfx_chrdev_open+0x10/0x10 [ 584.366467][T15179] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 584.366524][T15179] do_dentry_open+0x6d8/0x1660 [ 584.366602][T15179] ? __pfx_chrdev_open+0x10/0x10 [ 584.366661][T15179] vfs_open+0x82/0x3f0 [ 584.366701][T15179] path_openat+0x208c/0x31a0 [ 584.366765][T15179] ? __pfx_path_openat+0x10/0x10 [ 584.366837][T15179] do_file_open+0x20e/0x430 [ 584.366889][T15179] ? __pfx_do_file_open+0x10/0x10 [ 584.366969][T15179] ? alloc_fd+0x476/0x790 [ 584.367020][T15179] ? do_getname+0x191/0x390 [ 584.367058][T15179] do_sys_openat2+0x10d/0x1e0 [ 584.367095][T15179] ? __pfx_do_sys_openat2+0x10/0x10 [ 584.367148][T15179] __x64_sys_openat+0x12d/0x210 [ 584.367186][T15179] ? __pfx___x64_sys_openat+0x10/0x10 [ 584.367241][T15179] do_syscall_64+0x106/0xf80 [ 584.367274][T15179] ? clear_bhb_loop+0x40/0x90 [ 584.367315][T15179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.367349][T15179] RIP: 0033:0x7f91cf79bf79 [ 584.367377][T15179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.367409][T15179] RSP: 002b:00007f91d0676028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 584.367442][T15179] RAX: ffffffffffffffda RBX: 00007f91cfa15fa0 RCX: 00007f91cf79bf79 [ 584.367463][T15179] RDX: 0000000000000002 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 584.367483][T15179] RBP: 00007f91cf8327e0 R08: 0000000000000000 R09: 0000000000000000 [ 584.367503][T15179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 584.367522][T15179] R13: 00007f91cfa16038 R14: 00007f91cfa15fa0 R15: 00007ffdaf6cdb58 [ 584.367564][T15179] [ 585.128078][T15177] zswap: compressor not available [ 586.005013][T15209] zswap: compressor not available [ 587.387939][T15246] FAULT_INJECTION: forcing a failure. [ 587.387939][T15246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 587.401449][T15246] CPU: 1 UID: 0 PID: 15246 Comm: syz.2.2024 Tainted: G L syzkaller #0 PREEMPT(full) [ 587.401498][T15246] Tainted: [L]=SOFTLOCKUP [ 587.401511][T15246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 587.401528][T15246] Call Trace: [ 587.401539][T15246] [ 587.401551][T15246] dump_stack_lvl+0x100/0x190 [ 587.401603][T15246] should_fail_ex.cold+0x5/0xa [ 587.401638][T15246] _copy_to_user+0x32/0xd0 [ 587.401672][T15246] simple_read_from_buffer+0xcb/0x170 [ 587.401715][T15246] proc_fail_nth_read+0x1af/0x230 [ 587.401761][T15246] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 587.401806][T15246] ? rw_verify_area+0xce/0x6d0 [ 587.401843][T15246] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 587.401894][T15246] vfs_read+0x1e4/0xb30 [ 587.401940][T15246] ? __pfx_vfs_read+0x10/0x10 [ 587.401979][T15246] ? __fget_files+0x215/0x3d0 [ 587.402029][T15246] ? __fget_files+0x21f/0x3d0 [ 587.402081][T15246] ksys_read+0x12a/0x250 [ 587.402120][T15246] ? __pfx_ksys_read+0x10/0x10 [ 587.402172][T15246] do_syscall_64+0x106/0xf80 [ 587.402203][T15246] ? clear_bhb_loop+0x40/0x90 [ 587.402252][T15246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.402284][T15246] RIP: 0033:0x7fd6f0f5c84e [ 587.402310][T15246] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 587.402340][T15246] RSP: 002b:00007fd6ef1f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 587.402369][T15246] RAX: ffffffffffffffda RBX: 00007fd6ef1f66c0 RCX: 00007fd6f0f5c84e [ 587.402389][T15246] RDX: 000000000000000f RSI: 00007fd6ef1f60a0 RDI: 0000000000000004 [ 587.402408][T15246] RBP: 00007fd6ef1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 587.402426][T15246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.402444][T15246] R13: 00007fd6f1216038 R14: 00007fd6f1215fa0 R15: 00007ffc9a4e9048 [ 587.402486][T15246] [ 591.478091][T15341] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2041'. [ 593.331392][T15363] zswap: compressor not available [ 593.995007][T15392] FAULT_INJECTION: forcing a failure. [ 593.995007][T15392] name failslab, interval 1, probability 0, space 0, times 0 [ 594.038679][T15392] CPU: 1 UID: 0 PID: 15392 Comm: syz.3.2050 Tainted: G L syzkaller #0 PREEMPT(full) [ 594.038730][T15392] Tainted: [L]=SOFTLOCKUP [ 594.038750][T15392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 594.038767][T15392] Call Trace: [ 594.038779][T15392] [ 594.038789][T15392] dump_stack_lvl+0x100/0x190 [ 594.038836][T15392] should_fail_ex.cold+0x5/0xa [ 594.038872][T15392] should_failslab+0xc2/0x120 [ 594.038918][T15392] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 594.038957][T15392] ? __alloc_skb+0x140/0x710 [ 594.038994][T15392] __alloc_skb+0x140/0x710 [ 594.039019][T15392] ? __alloc_skb+0x5b7/0x710 [ 594.039047][T15392] ? __pfx___alloc_skb+0x10/0x10 [ 594.039088][T15392] netlink_alloc_large_skb+0x69/0x150 [ 594.039127][T15392] netlink_sendmsg+0x680/0xda0 [ 594.039169][T15392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 594.039202][T15392] ? __import_iovec+0x1d2/0x640 [ 594.039238][T15392] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 594.039287][T15392] ____sys_sendmsg+0xa54/0xc30 [ 594.039331][T15392] ? __pfx_____sys_sendmsg+0x10/0x10 [ 594.039390][T15392] ___sys_sendmsg+0x190/0x1e0 [ 594.039436][T15392] ? __pfx____sys_sendmsg+0x10/0x10 [ 594.039533][T15392] __sys_sendmsg+0x170/0x220 [ 594.039563][T15392] ? __pfx___sys_sendmsg+0x10/0x10 [ 594.039617][T15392] do_syscall_64+0x106/0xf80 [ 594.039648][T15392] ? clear_bhb_loop+0x40/0x90 [ 594.039684][T15392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.039713][T15392] RIP: 0033:0x7f91cf79bf79 [ 594.039746][T15392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 594.039773][T15392] RSP: 002b:00007f91d0676028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 594.039802][T15392] RAX: ffffffffffffffda RBX: 00007f91cfa15fa0 RCX: 00007f91cf79bf79 [ 594.039821][T15392] RDX: 000000000400c850 RSI: 0000200000000840 RDI: 0000000000000004 [ 594.039840][T15392] RBP: 00007f91d0676090 R08: 0000000000000000 R09: 0000000000000000 [ 594.039858][T15392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.039877][T15392] R13: 00007f91cfa16038 R14: 00007f91cfa15fa0 R15: 00007ffdaf6cdb58 [ 594.039916][T15392] [ 594.829792][T15404] netlink: 146 bytes leftover after parsing attributes in process `syz.0.2051'. [ 596.844348][T15464] netlink: 'syz.3.2061': attribute type 11 has an invalid length. [ 598.162913][T15491] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 598.332372][T15490] zswap: compressor not available [ 599.934195][T15511] zswap: compressor not available [ 601.173526][T15549] zswap: compressor not available [ 601.256403][T15557] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 603.650880][T15586] Process accounting resumed [ 604.391482][T15636] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2093'. [ 606.104290][T15651] zswap: compressor not available [ 606.484938][T15675] zswap: compressor not available [ 608.188689][T15712] zswap: compressor not available [ 608.701617][T15737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.633038][T15774] FAULT_INJECTION: forcing a failure. [ 610.633038][T15774] name failslab, interval 1, probability 0, space 0, times 0 [ 610.701338][T15774] CPU: 1 UID: 0 PID: 15774 Comm: syz.1.2112 Tainted: G L syzkaller #0 PREEMPT(full) [ 610.701388][T15774] Tainted: [L]=SOFTLOCKUP [ 610.701400][T15774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 610.701417][T15774] Call Trace: [ 610.701428][T15774] [ 610.701441][T15774] dump_stack_lvl+0x100/0x190 [ 610.701487][T15774] should_fail_ex.cold+0x5/0xa [ 610.701523][T15774] should_failslab+0xc2/0x120 [ 610.701567][T15774] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 610.701602][T15774] ? __kernfs_new_node+0xd2/0x960 [ 610.701641][T15774] __kernfs_new_node+0xd2/0x960 [ 610.701668][T15774] ? kernfs_add_one+0x583/0x850 [ 610.701716][T15774] ? __pfx___kernfs_new_node+0x10/0x10 [ 610.701754][T15774] ? find_held_lock+0x2b/0x80 [ 610.701799][T15774] ? kernfs_root+0xee/0x2a0 [ 610.701827][T15774] ? kernfs_root+0xee/0x2a0 [ 610.701865][T15774] kernfs_new_node+0x11b/0x1a0 [ 610.701907][T15774] __kernfs_create_file+0x53/0x350 [ 610.701957][T15774] sysfs_add_file_mode_ns+0x207/0x3c0 [ 610.702016][T15774] sysfs_create_file_ns+0x145/0x1e0 [ 610.702064][T15774] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 610.702117][T15774] ? __pfx___up_read+0x10/0x10 [ 610.702158][T15774] ? acpi_device_notify+0x464/0x500 [ 610.702205][T15774] ? kobject_put+0xb9/0x640 [ 610.702249][T15774] device_create_file+0xf2/0x1d0 [ 610.702288][T15774] device_add+0x2cb/0x1950 [ 610.702318][T15774] ? __pfx_dev_set_name+0x10/0x10 [ 610.702353][T15774] ? __pfx_device_add+0x10/0x10 [ 610.702383][T15774] ? lockdep_init_map_type+0x5c/0x250 [ 610.702422][T15774] ? __init_waitqueue_head+0xca/0x150 [ 610.702471][T15774] rfkill_register+0x1ad/0xb30 [ 610.702521][T15774] nfc_register_device+0x11f/0x3e0 [ 610.702558][T15774] nci_register_device+0x7f1/0xb80 [ 610.702605][T15774] ? __pfx_nci_register_device+0x10/0x10 [ 610.702651][T15774] ? lockdep_init_map_type+0x5c/0x250 [ 610.702708][T15774] virtual_ncidev_open+0x141/0x220 [ 610.702746][T15774] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 610.702782][T15774] misc_open+0x26d/0x450 [ 610.702811][T15774] ? __pfx_misc_open+0x10/0x10 [ 610.702839][T15774] chrdev_open+0x234/0x6a0 [ 610.702880][T15774] ? __pfx_apparmor_file_open+0x10/0x10 [ 610.702926][T15774] ? __pfx_chrdev_open+0x10/0x10 [ 610.702975][T15774] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 610.703030][T15774] do_dentry_open+0x6d8/0x1660 [ 610.703075][T15774] ? __pfx_chrdev_open+0x10/0x10 [ 610.703138][T15774] vfs_open+0x82/0x3f0 [ 610.703176][T15774] path_openat+0x208c/0x31a0 [ 610.703230][T15774] ? __pfx_path_openat+0x10/0x10 [ 610.703292][T15774] do_file_open+0x20e/0x430 [ 610.703340][T15774] ? __pfx_do_file_open+0x10/0x10 [ 610.703416][T15774] ? alloc_fd+0x476/0x790 [ 610.703463][T15774] ? do_getname+0x191/0x390 [ 610.703500][T15774] do_sys_openat2+0x10d/0x1e0 [ 610.703536][T15774] ? __pfx_do_sys_openat2+0x10/0x10 [ 610.703588][T15774] __x64_sys_openat+0x12d/0x210 [ 610.703623][T15774] ? __pfx___x64_sys_openat+0x10/0x10 [ 610.703676][T15774] do_syscall_64+0x106/0xf80 [ 610.703718][T15774] ? clear_bhb_loop+0x40/0x90 [ 610.703760][T15774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.703793][T15774] RIP: 0033:0x7faeee59bf79 [ 610.703819][T15774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 610.703851][T15774] RSP: 002b:00007faeef390028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 610.703880][T15774] RAX: ffffffffffffffda RBX: 00007faeee815fa0 RCX: 00007faeee59bf79 [ 610.703902][T15774] RDX: 0000000000000002 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 610.703921][T15774] RBP: 00007faeee6327e0 R08: 0000000000000000 R09: 0000000000000000 [ 610.703939][T15774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 610.703958][T15774] R13: 00007faeee816038 R14: 00007faeee815fa0 R15: 00007ffd2ac66c28 [ 610.703998][T15774] [ 610.982582][T15767] zswap: compressor not available [ 615.661909][T15855] zswap: compressor not available [ 616.144813][T15879] zswap: compressor not available [ 616.435845][T15893] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 617.832712][T15904] zswap: compressor not available [ 618.115698][T15924] zswap: compressor not available [ 619.631313][T15957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 622.300552][T15987] zswap: compressor not available [ 622.686897][T15994] tc_dump_action: action bad kind [ 622.999030][T15999] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2153'. [ 623.048237][T15999] FAULT_INJECTION: forcing a failure. [ 623.048237][T15999] name failslab, interval 1, probability 0, space 0, times 0 [ 623.096990][T15999] CPU: 0 UID: 0 PID: 15999 Comm: syz.2.2153 Tainted: G L syzkaller #0 PREEMPT(full) [ 623.097045][T15999] Tainted: [L]=SOFTLOCKUP [ 623.097057][T15999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 623.097078][T15999] Call Trace: [ 623.097091][T15999] [ 623.097104][T15999] dump_stack_lvl+0x100/0x190 [ 623.097158][T15999] should_fail_ex.cold+0x5/0xa [ 623.097197][T15999] should_failslab+0xc2/0x120 [ 623.097249][T15999] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 623.097287][T15999] ? mas_alloc_nodes+0x280/0x390 [ 623.097346][T15999] mas_alloc_nodes+0x280/0x390 [ 623.097401][T15999] mas_preallocate+0x39c/0xf10 [ 623.097437][T15999] ? __memcg_slab_post_alloc_hook+0x460/0x9a0 [ 623.097505][T15999] ? __pfx_mas_preallocate+0x10/0x10 [ 623.097555][T15999] ? anon_vma_name+0x5a/0x250 [ 623.097601][T15999] __split_vma+0x33d/0xd90 [ 623.097646][T15999] ? __pfx___split_vma+0x10/0x10 [ 623.097693][T15999] ? __pfx_mas_prev+0x10/0x10 [ 623.097740][T15999] vms_gather_munmap_vmas+0x39f/0x1500 [ 623.097778][T15999] ? kasan_save_stack+0x2c/0x50 [ 623.097830][T15999] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 623.097876][T15999] ? mas_walk+0x6ef/0x9b0 [ 623.097921][T15999] __mmap_region+0x46e/0x2760 [ 623.097970][T15999] ? __pfx___mmap_region+0x10/0x10 [ 623.098028][T15999] ? lock_acquire+0x1cf/0x380 [ 623.098067][T15999] ? find_held_lock+0x2b/0x80 [ 623.098115][T15999] ? finish_task_switch.isra.0+0x200/0xb80 [ 623.098147][T15999] ? finish_task_switch.isra.0+0x200/0xb80 [ 623.098182][T15999] ? rcu_is_watching+0x12/0xc0 [ 623.098227][T15999] ? finish_task_switch.isra.0+0x205/0xb80 [ 623.098255][T15999] ? lockdep_hardirqs_on+0x78/0x100 [ 623.098286][T15999] ? finish_task_switch.isra.0+0x205/0xb80 [ 623.098388][T15999] ? rcu_is_watching+0x12/0xc0 [ 623.098425][T15999] ? cap_capable+0x107/0x460 [ 623.098480][T15999] mmap_region+0x180/0x3e0 [ 623.098524][T15999] do_mmap+0xc63/0x12f0 [ 623.098572][T15999] ? __pfx_do_mmap+0x10/0x10 [ 623.098617][T15999] ? __pfx_down_write_killable+0x10/0x10 [ 623.098658][T15999] vm_mmap_pgoff+0x29e/0x470 [ 623.098709][T15999] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 623.098759][T15999] ? __x64_sys_futex+0x34f/0x4d0 [ 623.098791][T15999] ? __x64_sys_futex+0x358/0x4d0 [ 623.098827][T15999] ksys_mmap_pgoff+0x7d/0x5b0 [ 623.098875][T15999] __x64_sys_mmap+0x125/0x190 [ 623.098921][T15999] do_syscall_64+0x106/0xf80 [ 623.098952][T15999] ? clear_bhb_loop+0x40/0x90 [ 623.098993][T15999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.099024][T15999] RIP: 0033:0x7fd6f0f9bf79 [ 623.099052][T15999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 623.099078][T15999] RSP: 002b:00007fd6ef1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 623.099102][T15999] RAX: ffffffffffffffda RBX: 00007fd6f1215fa0 RCX: 00007fd6f0f9bf79 [ 623.099118][T15999] RDX: 00000000000000df RSI: 0000000000000007 RDI: 0000000000000000 [ 623.099133][T15999] RBP: 00007fd6f10327e0 R08: 0000000000000401 R09: 0000000000008000 [ 623.099147][T15999] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 623.099162][T15999] R13: 00007fd6f1216038 R14: 00007fd6f1215fa0 R15: 00007ffc9a4e9048 [ 623.099194][T15999] [ 624.018172][T16013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 624.562086][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.568749][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.996652][T16031] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 627.176034][T16074] tc_dump_action: action bad kind [ 629.205327][T16112] capability: warning: `syz.2.2170' uses 32-bit capabilities (legacy support in use) [ 631.420860][T16132] zswap: compressor not available [ 632.199402][T16144] tc_dump_action: action bad kind [ 632.246450][T16130] zswap: compressor not available [ 632.293799][T16153] netlink: 350 bytes leftover after parsing attributes in process `syz.3.2178'. [ 632.340155][T16153] Zero length message leads to an empty skb [ 633.615454][T16180] FAULT_INJECTION: forcing a failure. [ 633.615454][T16180] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 633.680977][T16180] CPU: 0 UID: 0 PID: 16180 Comm: syz.3.2183 Tainted: G L syzkaller #0 PREEMPT(full) [ 633.681026][T16180] Tainted: [L]=SOFTLOCKUP [ 633.681038][T16180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 633.681056][T16180] Call Trace: [ 633.681067][T16180] [ 633.681079][T16180] dump_stack_lvl+0x100/0x190 [ 633.681129][T16180] should_fail_ex.cold+0x5/0xa [ 633.681159][T16180] ? prepare_alloc_pages+0x16d/0x5f0 [ 633.681209][T16180] should_fail_alloc_page+0xeb/0x140 [ 633.681257][T16180] prepare_alloc_pages+0x1f0/0x5f0 [ 633.681310][T16180] ? rcu_is_watching+0x12/0xc0 [ 633.681427][T16180] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 633.681467][T16180] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 633.681524][T16180] ? find_held_lock+0x2b/0x80 [ 633.681568][T16180] ? is_bpf_text_address+0x8a/0x1a0 [ 633.681607][T16180] ? is_bpf_text_address+0x8a/0x1a0 [ 633.681646][T16180] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 633.681684][T16180] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 633.681723][T16180] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 633.681775][T16180] ? kernel_text_address+0x8d/0x100 [ 633.681818][T16180] ? __kernel_text_address+0xd/0x30 [ 633.681857][T16180] ? look_up_lock_class+0x55/0x120 [ 633.681888][T16180] ? unwind_get_return_address+0x59/0xa0 [ 633.681936][T16180] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 633.681985][T16180] ? policy_nodemask+0xed/0x4f0 [ 633.682034][T16180] alloc_pages_mpol+0x1fb/0x550 [ 633.682082][T16180] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 633.682127][T16180] ? do_raw_spin_lock+0x128/0x260 [ 633.682167][T16180] ? find_held_lock+0x2b/0x80 [ 633.682209][T16180] ? __pud_alloc+0x575/0x760 [ 633.682242][T16180] alloc_pages_noprof+0x131/0x390 [ 633.682291][T16180] __pmd_alloc+0x3b/0x9c0 [ 633.682318][T16180] ? __pud_alloc+0x57a/0x760 [ 633.682358][T16180] __handle_mm_fault+0xa99/0x2b60 [ 633.682399][T16180] ? mt_find+0x45e/0x8e0 [ 633.682436][T16180] ? __pfx___handle_mm_fault+0x10/0x10 [ 633.682469][T16180] ? __pfx_mt_find+0x10/0x10 [ 633.682537][T16180] handle_mm_fault+0x36d/0xa20 [ 633.682579][T16180] __get_user_pages+0xf9c/0x34d0 [ 633.682641][T16180] ? __pfx___get_user_pages+0x10/0x10 [ 633.682697][T16180] get_user_pages_remote+0x3d2/0xb10 [ 633.682747][T16180] ? __pfx_get_user_pages_remote+0x10/0x10 [ 633.682807][T16180] get_arg_page+0xf4/0x310 [ 633.682843][T16180] ? __pfx_get_arg_page+0x10/0x10 [ 633.682891][T16180] copy_string_kernel+0x17d/0x500 [ 633.682929][T16180] ? alloc_bprm+0x420/0x710 [ 633.682971][T16180] do_execveat_common.isra.0+0x2e6/0x580 [ 633.683020][T16180] __x64_sys_execveat+0xdf/0x130 [ 633.683064][T16180] do_syscall_64+0x106/0xf80 [ 633.683096][T16180] ? clear_bhb_loop+0x40/0x90 [ 633.683138][T16180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.683167][T16180] RIP: 0033:0x7f91cf79bf79 [ 633.683193][T16180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 633.683222][T16180] RSP: 002b:00007f91d0655028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 633.683250][T16180] RAX: ffffffffffffffda RBX: 00007f91cfa16090 RCX: 00007f91cf79bf79 [ 633.683269][T16180] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 000000000000000f [ 633.683288][T16180] RBP: 00007f91d0655090 R08: 0000000000011000 R09: 0000000000000000 [ 633.683307][T16180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 633.683324][T16180] R13: 00007f91cfa16128 R14: 00007f91cfa16090 R15: 00007ffdaf6cdb58 [ 633.683371][T16180] [ 634.792720][T16193] zswap: compressor not available [ 636.104859][T16177] Process accounting paused [ 636.179157][T16238] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 637.731950][T16250] zswap: compressor not available [ 637.801709][T16242] zswap: compressor not available [ 638.636821][T16273] zswap: compressor not available [ 640.385762][T16323] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 642.342955][T16357] tc_dump_action: action bad kind [ 643.323757][T16378] process 'syz.2.2212' launched '/dev/fd/13' with NULL argv: empty string added [ 644.017449][T16388] zswap: compressor not available [ 644.989964][T16409] zswap: compressor not available [ 645.320891][T16423] FAULT_INJECTION: forcing a failure. [ 645.320891][T16423] name failslab, interval 1, probability 0, space 0, times 0 [ 645.336769][T16423] CPU: 0 UID: 0 PID: 16423 Comm: syz.0.2222 Tainted: G L syzkaller #0 PREEMPT(full) [ 645.336814][T16423] Tainted: [L]=SOFTLOCKUP [ 645.336824][T16423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 645.336840][T16423] Call Trace: [ 645.336850][T16423] [ 645.336863][T16423] dump_stack_lvl+0x100/0x190 [ 645.336907][T16423] should_fail_ex.cold+0x5/0xa [ 645.336940][T16423] ? copy_splice_read+0x1a3/0xb90 [ 645.336976][T16423] should_failslab+0xc2/0x120 [ 645.337019][T16423] __kmalloc_noprof+0xe0/0x850 [ 645.337054][T16423] ? current_time+0x8a/0x3b0 [ 645.337088][T16423] copy_splice_read+0x1a3/0xb90 [ 645.337154][T16423] ? __pfx_copy_splice_read+0x10/0x10 [ 645.337189][T16423] ? find_held_lock+0x2b/0x80 [ 645.337216][T16423] ? aa_file_perm+0x268/0x1530 [ 645.337237][T16423] ? aa_file_perm+0x268/0x1530 [ 645.337259][T16423] ? __pfx_copy_splice_read+0x10/0x10 [ 645.337283][T16423] do_splice_read+0x285/0x370 [ 645.337317][T16423] splice_direct_to_actor+0x2a1/0xa30 [ 645.337347][T16423] ? __pfx_direct_splice_actor+0x10/0x10 [ 645.337379][T16423] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 645.337410][T16423] do_splice_direct+0x174/0x240 [ 645.337436][T16423] ? __pfx_do_splice_direct+0x10/0x10 [ 645.337459][T16423] ? common_file_perm+0x1ab/0x4f0 [ 645.337477][T16423] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 645.337515][T16423] ? rw_verify_area+0xce/0x6d0 [ 645.337551][T16423] do_sendfile+0xadc/0xe20 [ 645.337604][T16423] ? __pfx_do_sendfile+0x10/0x10 [ 645.337644][T16423] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 645.337688][T16423] __x64_sys_sendfile64+0x1d8/0x220 [ 645.337725][T16423] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 645.337760][T16423] do_syscall_64+0x106/0xf80 [ 645.337779][T16423] ? clear_bhb_loop+0x40/0x90 [ 645.337801][T16423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.337821][T16423] RIP: 0033:0x7f07b959bf79 [ 645.337838][T16423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.337856][T16423] RSP: 002b:00007f07ba4e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 645.337874][T16423] RAX: ffffffffffffffda RBX: 00007f07b9815fa0 RCX: 00007f07b959bf79 [ 645.337886][T16423] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 645.337897][T16423] RBP: 00007f07ba4e9090 R08: 0000000000000000 R09: 0000000000000000 [ 645.337907][T16423] R10: 0000000001000200 R11: 0000000000000246 R12: 0000000000000002 [ 645.337918][T16423] R13: 00007f07b9816038 R14: 00007f07b9815fa0 R15: 00007fff1e852258 [ 645.337941][T16423] [ 645.354270][ T55] Process accounting resumed [ 647.302166][T16460] FAULT_INJECTION: forcing a failure. [ 647.302166][T16460] name failslab, interval 1, probability 0, space 0, times 0 [ 647.346973][T16460] CPU: 0 UID: 0 PID: 16460 Comm: syz.1.2232 Tainted: G L syzkaller #0 PREEMPT(full) [ 647.347023][T16460] Tainted: [L]=SOFTLOCKUP [ 647.347035][T16460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 647.347054][T16460] Call Trace: [ 647.347066][T16460] [ 647.347076][T16460] dump_stack_lvl+0x100/0x190 [ 647.347128][T16460] should_fail_ex.cold+0x5/0xa [ 647.347163][T16460] should_failslab+0xc2/0x120 [ 647.347209][T16460] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 647.347249][T16460] ? __kernfs_new_node+0xd2/0x960 [ 647.347289][T16460] __kernfs_new_node+0xd2/0x960 [ 647.347321][T16460] ? kernfs_add_one+0x583/0x850 [ 647.347362][T16460] ? __pfx___kernfs_new_node+0x10/0x10 [ 647.347405][T16460] ? find_held_lock+0x2b/0x80 [ 647.347452][T16460] ? kernfs_root+0xee/0x2a0 [ 647.347483][T16460] ? kernfs_root+0xee/0x2a0 [ 647.347525][T16460] kernfs_new_node+0x11b/0x1a0 [ 647.347567][T16460] __kernfs_create_file+0x53/0x350 [ 647.347608][T16460] sysfs_add_file_mode_ns+0x207/0x3c0 [ 647.347644][T16460] sysfs_create_file_ns+0x145/0x1e0 [ 647.347675][T16460] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 647.347706][T16460] ? __pfx___up_read+0x10/0x10 [ 647.347731][T16460] ? acpi_device_notify+0x464/0x500 [ 647.347759][T16460] ? kobject_put+0xb9/0x640 [ 647.347784][T16460] device_create_file+0xf2/0x1d0 [ 647.347808][T16460] device_add+0x2cb/0x1950 [ 647.347826][T16460] ? __pfx_dev_set_name+0x10/0x10 [ 647.347848][T16460] ? __pfx_device_add+0x10/0x10 [ 647.347865][T16460] ? lockdep_init_map_type+0x5c/0x250 [ 647.347889][T16460] ? __init_waitqueue_head+0xca/0x150 [ 647.347920][T16460] rfkill_register+0x1ad/0xb30 [ 647.347950][T16460] nfc_register_device+0x11f/0x3e0 [ 647.347972][T16460] nci_register_device+0x7f1/0xb80 [ 647.348000][T16460] ? __pfx_nci_register_device+0x10/0x10 [ 647.348030][T16460] ? lockdep_init_map_type+0x5c/0x250 [ 647.348056][T16460] virtual_ncidev_open+0x141/0x220 [ 647.348078][T16460] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 647.348099][T16460] misc_open+0x26d/0x450 [ 647.348117][T16460] ? __pfx_misc_open+0x10/0x10 [ 647.348134][T16460] chrdev_open+0x234/0x6a0 [ 647.348181][T16460] ? __pfx_apparmor_file_open+0x10/0x10 [ 647.348209][T16460] ? __pfx_chrdev_open+0x10/0x10 [ 647.348238][T16460] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 647.348270][T16460] do_dentry_open+0x6d8/0x1660 [ 647.348296][T16460] ? __pfx_chrdev_open+0x10/0x10 [ 647.348328][T16460] vfs_open+0x82/0x3f0 [ 647.348351][T16460] path_openat+0x208c/0x31a0 [ 647.348385][T16460] ? __pfx_path_openat+0x10/0x10 [ 647.348420][T16460] do_file_open+0x20e/0x430 [ 647.348448][T16460] ? __pfx_do_file_open+0x10/0x10 [ 647.348490][T16460] ? alloc_fd+0x476/0x790 [ 647.348518][T16460] ? do_getname+0x191/0x390 [ 647.348539][T16460] do_sys_openat2+0x10d/0x1e0 [ 647.348559][T16460] ? __pfx_do_sys_openat2+0x10/0x10 [ 647.348594][T16460] __x64_sys_openat+0x12d/0x210 [ 647.348615][T16460] ? __pfx___x64_sys_openat+0x10/0x10 [ 647.348645][T16460] do_syscall_64+0x106/0xf80 [ 647.348664][T16460] ? clear_bhb_loop+0x40/0x90 [ 647.348687][T16460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.348705][T16460] RIP: 0033:0x7faeee59bf79 [ 647.348722][T16460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.348741][T16460] RSP: 002b:00007faeef390028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 647.348759][T16460] RAX: ffffffffffffffda RBX: 00007faeee815fa0 RCX: 00007faeee59bf79 [ 647.348771][T16460] RDX: 0000000000000002 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 647.348783][T16460] RBP: 00007faeee6327e0 R08: 0000000000000000 R09: 0000000000000000 [ 647.348793][T16460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 647.348804][T16460] R13: 00007faeee816038 R14: 00007faeee815fa0 R15: 00007ffd2ac66c28 [ 647.348828][T16460] [ 648.633789][T16477] zswap: compressor not available [ 649.011262][T16502] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 649.087198][T16502] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2238'. [ 649.197743][T16507] FAULT_INJECTION: forcing a failure. [ 649.197743][T16507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 649.211498][T16507] CPU: 1 UID: 0 PID: 16507 Comm: syz.2.2237 Tainted: G L syzkaller #0 PREEMPT(full) [ 649.211538][T16507] Tainted: [L]=SOFTLOCKUP [ 649.211544][T16507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 649.211558][T16507] Call Trace: [ 649.211567][T16507] [ 649.211576][T16507] dump_stack_lvl+0x100/0x190 [ 649.211610][T16507] should_fail_ex.cold+0x5/0xa [ 649.211632][T16507] _copy_from_iter+0x1f4/0x1690 [ 649.211655][T16507] ? policy_nodemask+0xed/0x4f0 [ 649.211682][T16507] ? __pfx__copy_from_iter+0x10/0x10 [ 649.211701][T16507] ? alloc_pages_mpol+0x25a/0x550 [ 649.211728][T16507] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 649.211758][T16507] copy_page_from_iter+0xde/0x180 [ 649.211780][T16507] anon_pipe_write+0xae4/0x1d40 [ 649.211814][T16507] ? __pfx_anon_pipe_write+0x10/0x10 [ 649.211838][T16507] ? common_file_perm+0x1ab/0x4f0 [ 649.211859][T16507] ? bpf_lsm_file_permission+0x9/0x10 [ 649.211883][T16507] ? security_file_permission+0x76/0x210 [ 649.211903][T16507] ? rw_verify_area+0xce/0x6d0 [ 649.211927][T16507] vfs_write+0x6ac/0x1070 [ 649.211952][T16507] ? __pfx_anon_pipe_write+0x10/0x10 [ 649.211979][T16507] ? __pfx_vfs_write+0x10/0x10 [ 649.212002][T16507] ? find_held_lock+0x2b/0x80 [ 649.212042][T16507] ksys_write+0x1f8/0x250 [ 649.212066][T16507] ? __pfx_ksys_write+0x10/0x10 [ 649.212101][T16507] do_syscall_64+0x106/0xf80 [ 649.212121][T16507] ? clear_bhb_loop+0x40/0x90 [ 649.212143][T16507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.212162][T16507] RIP: 0033:0x7fd6f0f9bf79 [ 649.212177][T16507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.212195][T16507] RSP: 002b:00007fd6ef1d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 649.212213][T16507] RAX: ffffffffffffffda RBX: 00007fd6f1216090 RCX: 00007fd6f0f9bf79 [ 649.212225][T16507] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 649.212236][T16507] RBP: 00007fd6ef1d5090 R08: 0000000000000000 R09: 0000000000000000 [ 649.212247][T16507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 649.212258][T16507] R13: 00007fd6f1216128 R14: 00007fd6f1216090 R15: 00007ffc9a4e9048 [ 649.212281][T16507] [ 657.645633][T16673] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 660.901216][T16740] zswap: compressor not available [ 661.864379][T16762] FAULT_INJECTION: forcing a failure. [ 661.864379][T16762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 661.916083][T16762] CPU: 0 UID: 0 PID: 16762 Comm: syz.3.2275 Tainted: G L syzkaller #0 PREEMPT(full) [ 661.916116][T16762] Tainted: [L]=SOFTLOCKUP [ 661.916123][T16762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 661.916135][T16762] Call Trace: [ 661.916142][T16762] [ 661.916150][T16762] dump_stack_lvl+0x100/0x190 [ 661.916181][T16762] should_fail_ex.cold+0x5/0xa [ 661.916203][T16762] __fpu_restore_sig+0x100/0x1360 [ 661.916230][T16762] ? __lock_acquire+0x4a5/0x2630 [ 661.916258][T16762] ? __pfx___fpu_restore_sig+0x10/0x10 [ 661.916293][T16762] ? __might_fault+0xc5/0x140 [ 661.916319][T16762] fpu__restore_sig+0x151/0x190 [ 661.916344][T16762] restore_sigcontext+0x4cb/0x6a0 [ 661.916368][T16762] ? __pfx_restore_sigcontext+0x10/0x10 [ 661.916404][T16762] ? __pfx_restore_altstack+0x10/0x10 [ 661.916429][T16762] ? _raw_spin_unlock_irq+0x23/0x50 [ 661.916458][T16762] ? lockdep_hardirqs_on+0x78/0x100 [ 661.916481][T16762] __do_sys_rt_sigreturn+0x229/0x2c0 [ 661.916503][T16762] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 661.916531][T16762] do_syscall_64+0x106/0xf80 [ 661.916551][T16762] ? clear_bhb_loop+0x40/0x90 [ 661.916574][T16762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.916593][T16762] RIP: 0033:0x7f91cf79bf79 [ 661.916609][T16762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.916627][T16762] RSP: 002b:00007f91d0676028 EFLAGS: 00000246 [ 661.916642][T16762] RAX: 0000000000000000 RBX: 00007f91cfa15fa0 RCX: 00007f91cf79bf79 [ 661.916655][T16762] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 000000000000089e [ 661.916666][T16762] RBP: 00007f91cf8327e0 R08: 0000000000000000 R09: 0000000000000000 [ 661.916676][T16762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 661.916687][T16762] R13: 00007f91cfa16038 R14: 00007f91cfa15fa0 R15: 00007ffdaf6cdb58 [ 661.916710][T16762] [ 662.318629][T16772] zswap: compressor not available [ 662.439158][T16779] FAULT_INJECTION: forcing a failure. [ 662.439158][T16779] name failslab, interval 1, probability 0, space 0, times 0 [ 662.463307][T16779] CPU: 0 UID: 0 PID: 16779 Comm: syz.2.2279 Tainted: G L syzkaller #0 PREEMPT(full) [ 662.463361][T16779] Tainted: [L]=SOFTLOCKUP [ 662.463373][T16779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 662.463392][T16779] Call Trace: [ 662.463403][T16779] [ 662.463417][T16779] dump_stack_lvl+0x100/0x190 [ 662.463470][T16779] should_fail_ex.cold+0x5/0xa [ 662.463508][T16779] should_failslab+0xc2/0x120 [ 662.463557][T16779] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 662.463599][T16779] ? __kernfs_new_node+0xd2/0x960 [ 662.463642][T16779] __kernfs_new_node+0xd2/0x960 [ 662.463681][T16779] ? __pfx___kernfs_new_node+0x10/0x10 [ 662.463726][T16779] ? find_held_lock+0x2b/0x80 [ 662.463774][T16779] ? kernfs_root+0xee/0x2a0 [ 662.463805][T16779] ? kernfs_root+0xee/0x2a0 [ 662.463849][T16779] kernfs_new_node+0x11b/0x1a0 [ 662.463895][T16779] __kernfs_create_file+0x53/0x350 [ 662.463947][T16779] sysfs_add_file_mode_ns+0x207/0x3c0 [ 662.464009][T16779] internal_create_group+0x593/0xf40 [ 662.464056][T16779] ? __pfx_internal_create_group+0x10/0x10 [ 662.464098][T16779] ? kernfs_create_link+0x1bd/0x240 [ 662.464152][T16779] internal_create_groups+0x9d/0x150 [ 662.464191][T16779] device_add+0x71a/0x1950 [ 662.464227][T16779] ? __pfx_device_add+0x10/0x10 [ 662.464258][T16779] ? lockdep_init_map_type+0x5c/0x250 [ 662.464308][T16779] ? __init_waitqueue_head+0xca/0x150 [ 662.464365][T16779] rfkill_register+0x1ad/0xb30 [ 662.464418][T16779] nfc_register_device+0x11f/0x3e0 [ 662.464454][T16779] nci_register_device+0x7f1/0xb80 [ 662.464504][T16779] ? __pfx_nci_register_device+0x10/0x10 [ 662.464556][T16779] ? lockdep_init_map_type+0x5c/0x250 [ 662.464602][T16779] virtual_ncidev_open+0x141/0x220 [ 662.464640][T16779] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 662.464676][T16779] misc_open+0x26d/0x450 [ 662.464707][T16779] ? __pfx_misc_open+0x10/0x10 [ 662.464736][T16779] chrdev_open+0x234/0x6a0 [ 662.464783][T16779] ? __pfx_apparmor_file_open+0x10/0x10 [ 662.464831][T16779] ? __pfx_chrdev_open+0x10/0x10 [ 662.464880][T16779] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 662.464949][T16779] do_dentry_open+0x6d8/0x1660 [ 662.465004][T16779] ? __pfx_chrdev_open+0x10/0x10 [ 662.465063][T16779] vfs_open+0x82/0x3f0 [ 662.465103][T16779] path_openat+0x208c/0x31a0 [ 662.465166][T16779] ? __pfx_path_openat+0x10/0x10 [ 662.465230][T16779] do_file_open+0x20e/0x430 [ 662.465283][T16779] ? __pfx_do_file_open+0x10/0x10 [ 662.465363][T16779] ? alloc_fd+0x476/0x790 [ 662.465412][T16779] ? do_getname+0x191/0x390 [ 662.465450][T16779] do_sys_openat2+0x10d/0x1e0 [ 662.465485][T16779] ? __pfx_do_sys_openat2+0x10/0x10 [ 662.465536][T16779] __x64_sys_openat+0x12d/0x210 [ 662.465572][T16779] ? __pfx___x64_sys_openat+0x10/0x10 [ 662.465624][T16779] do_syscall_64+0x106/0xf80 [ 662.465657][T16779] ? clear_bhb_loop+0x40/0x90 [ 662.465696][T16779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.465729][T16779] RIP: 0033:0x7fd6f0f9bf79 [ 662.465756][T16779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 662.465787][T16779] RSP: 002b:00007fd6ef1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 662.465818][T16779] RAX: ffffffffffffffda RBX: 00007fd6f1215fa0 RCX: 00007fd6f0f9bf79 [ 662.465840][T16779] RDX: 0000000000000002 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 662.465860][T16779] RBP: 00007fd6f10327e0 R08: 0000000000000000 R09: 0000000000000000 [ 662.465876][T16779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 662.465892][T16779] R13: 00007fd6f1216038 R14: 00007fd6f1215fa0 R15: 00007ffc9a4e9048 [ 662.465934][T16779] [ 663.324477][T16795] FAULT_INJECTION: forcing a failure. [ 663.324477][T16795] name failslab, interval 1, probability 0, space 0, times 0 [ 663.410255][T16795] CPU: 0 UID: 0 PID: 16795 Comm: syz.0.2280 Tainted: G L syzkaller #0 PREEMPT(full) [ 663.410288][T16795] Tainted: [L]=SOFTLOCKUP [ 663.410296][T16795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 663.410307][T16795] Call Trace: [ 663.410314][T16795] [ 663.410322][T16795] dump_stack_lvl+0x100/0x190 [ 663.410353][T16795] should_fail_ex.cold+0x5/0xa [ 663.410375][T16795] ? __register_sysctl_table+0xbe4/0x1650 [ 663.410398][T16795] should_failslab+0xc2/0x120 [ 663.410427][T16795] __kmalloc_noprof+0xe0/0x850 [ 663.410456][T16795] __register_sysctl_table+0xbe4/0x1650 [ 663.410484][T16795] ? __pfx___register_sysctl_table+0x10/0x10 [ 663.410507][T16795] ? is_module_address+0x69/0xf0 [ 663.410536][T16795] ? register_net_sysctl_sz+0x222/0x430 [ 663.410565][T16795] __devinet_sysctl_register+0x1b9/0x360 [ 663.410591][T16795] ? trace_kmalloc+0x101/0x130 [ 663.410619][T16795] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 663.410648][T16795] ? __asan_memcpy+0x3c/0x60 [ 663.410672][T16795] devinet_init_net+0x334/0x8d0 [ 663.410697][T16795] ? __pfx_devinet_init_net+0x10/0x10 [ 663.410720][T16795] ops_init+0x1e2/0x5f0 [ 663.410743][T16795] setup_net+0x118/0x3a0 [ 663.410764][T16795] ? __pfx_setup_net+0x10/0x10 [ 663.410783][T16795] ? lockdep_init_map_type+0x5c/0x250 [ 663.410807][T16795] ? mutex_init_lockep+0x110/0x150 [ 663.410834][T16795] copy_net_ns+0x46f/0x7c0 [ 663.410858][T16795] create_new_namespaces+0x3ea/0xac0 [ 663.410893][T16795] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 663.410914][T16795] ksys_unshare+0x455/0xab0 [ 663.410939][T16795] ? __pfx_ksys_unshare+0x10/0x10 [ 663.410969][T16795] __x64_sys_unshare+0x31/0x40 [ 663.410991][T16795] do_syscall_64+0x106/0xf80 [ 663.411010][T16795] ? clear_bhb_loop+0x40/0x90 [ 663.411033][T16795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.411053][T16795] RIP: 0033:0x7f07b959bf79 [ 663.411070][T16795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 663.411089][T16795] RSP: 002b:00007f07ba4c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 663.411108][T16795] RAX: ffffffffffffffda RBX: 00007f07b9816090 RCX: 00007f07b959bf79 [ 663.411120][T16795] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 663.411131][T16795] RBP: 00007f07b96327e0 R08: 0000000000000000 R09: 0000000000000000 [ 663.411142][T16795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 663.411153][T16795] R13: 00007f07b9816128 R14: 00007f07b9816090 R15: 00007fff1e852258 [ 663.411176][T16795] [ 663.411185][T16795] sysctl could not get directory: /net/ipv4/conf/default -12 [ 663.728125][T16800] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 664.955044][T16806] zswap: compressor not available [ 666.200660][T16836] Process accounting resumed [ 666.977181][T16863] zswap: compressor not available [ 667.307957][T16878] FAULT_INJECTION: forcing a failure. [ 667.307957][T16878] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 667.354124][T16878] CPU: 1 UID: 0 PID: 16878 Comm: syz.2.2294 Tainted: G L syzkaller #0 PREEMPT(full) [ 667.354173][T16878] Tainted: [L]=SOFTLOCKUP [ 667.354185][T16878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 667.354204][T16878] Call Trace: [ 667.354214][T16878] [ 667.354228][T16878] dump_stack_lvl+0x100/0x190 [ 667.354278][T16878] should_fail_ex.cold+0x5/0xa [ 667.354308][T16878] ? prepare_alloc_pages+0x16d/0x5f0 [ 667.354360][T16878] should_fail_alloc_page+0xeb/0x140 [ 667.354407][T16878] prepare_alloc_pages+0x1f0/0x5f0 [ 667.354459][T16878] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 667.354506][T16878] ? kasan_save_stack+0x3f/0x50 [ 667.354555][T16878] ? kasan_save_stack+0x30/0x50 [ 667.354595][T16878] ? kasan_save_track+0x14/0x30 [ 667.354634][T16878] ? __kasan_slab_alloc+0x89/0x90 [ 667.354675][T16878] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 667.354713][T16878] ? ptlock_alloc+0x1f/0x70 [ 667.354744][T16878] ? pte_alloc_one+0x84/0x3e0 [ 667.354776][T16878] ? do_anonymous_page+0x13cc/0x1fb0 [ 667.354817][T16878] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 667.354865][T16878] ? __pfx_css_rstat_updated+0x10/0x10 [ 667.354907][T16878] ? lock_acquire+0x1cf/0x380 [ 667.354946][T16878] ? find_held_lock+0x2b/0x80 [ 667.354988][T16878] ? page_table_check_set+0x49a/0xa10 [ 667.355030][T16878] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 667.355078][T16878] ? policy_nodemask+0xed/0x4f0 [ 667.355125][T16878] alloc_pages_mpol+0x1fb/0x550 [ 667.355175][T16878] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 667.355235][T16878] folio_alloc_mpol_noprof+0x36/0x340 [ 667.355271][T16878] vma_alloc_folio_noprof+0xed/0x1d0 [ 667.355303][T16878] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 667.355348][T16878] do_anonymous_page+0xb3a/0x1fb0 [ 667.355400][T16878] __handle_mm_fault+0x1d42/0x2b60 [ 667.355448][T16878] ? __pfx___handle_mm_fault+0x10/0x10 [ 667.355488][T16878] ? pte_offset_map_lock+0x174/0x320 [ 667.355536][T16878] ? find_held_lock+0x2b/0x80 [ 667.355607][T16878] ? follow_page_pte+0x5b3/0x1400 [ 667.355667][T16878] handle_mm_fault+0x36d/0xa20 [ 667.355713][T16878] __get_user_pages+0xf9c/0x34d0 [ 667.355779][T16878] ? __pfx___get_user_pages+0x10/0x10 [ 667.355842][T16878] populate_vma_page_range+0x267/0x3f0 [ 667.355879][T16878] ? __pfx_populate_vma_page_range+0x10/0x10 [ 667.355912][T16878] ? __pfx_find_vma_intersection+0x10/0x10 [ 667.355963][T16878] ? do_mmap+0x93f/0x12f0 [ 667.356018][T16878] __mm_populate+0x107/0x3a0 [ 667.356052][T16878] ? __pfx___mm_populate+0x10/0x10 [ 667.356087][T16878] ? up_write+0x290/0x4f0 [ 667.356134][T16878] vm_mmap_pgoff+0x37f/0x470 [ 667.356191][T16878] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 667.356252][T16878] ? __x64_sys_futex+0x34f/0x4d0 [ 667.356288][T16878] ? __x64_sys_futex+0x358/0x4d0 [ 667.356329][T16878] ksys_mmap_pgoff+0x7d/0x5b0 [ 667.356385][T16878] __x64_sys_mmap+0x125/0x190 [ 667.356439][T16878] do_syscall_64+0x106/0xf80 [ 667.356475][T16878] ? clear_bhb_loop+0x40/0x90 [ 667.356515][T16878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.356555][T16878] RIP: 0033:0x7fd6f0f9bf79 [ 667.356584][T16878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 667.356615][T16878] RSP: 002b:00007fd6ef1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 667.356646][T16878] RAX: ffffffffffffffda RBX: 00007fd6f1215fa0 RCX: 00007fd6f0f9bf79 [ 667.356666][T16878] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 667.356684][T16878] RBP: 00007fd6f10327e0 R08: 0000000000000002 R09: 0000000000008000 [ 667.356704][T16878] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 667.356722][T16878] R13: 00007fd6f1216038 R14: 00007fd6f1215fa0 R15: 00007ffc9a4e9048 [ 667.356765][T16878] [ 668.143754][T16888] Invalid ELF header magic: != ELF [ 669.094092][T16911] FAULT_INJECTION: forcing a failure. [ 669.094092][T16911] name failslab, interval 1, probability 0, space 0, times 0 [ 669.187349][T16911] CPU: 0 UID: 0 PID: 16911 Comm: syz.1.2300 Tainted: G L syzkaller #0 PREEMPT(full) [ 669.187402][T16911] Tainted: [L]=SOFTLOCKUP [ 669.187414][T16911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 669.187433][T16911] Call Trace: [ 669.187445][T16911] [ 669.187458][T16911] dump_stack_lvl+0x100/0x190 [ 669.187509][T16911] should_fail_ex.cold+0x5/0xa [ 669.187545][T16911] should_failslab+0xc2/0x120 [ 669.187600][T16911] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 669.187639][T16911] ? __kernfs_new_node+0xd2/0x960 [ 669.187681][T16911] __kernfs_new_node+0xd2/0x960 [ 669.187716][T16911] ? wake_up_q+0xae/0x130 [ 669.187764][T16911] ? __pfx___kernfs_new_node+0x10/0x10 [ 669.187807][T16911] ? find_held_lock+0x2b/0x80 [ 669.187855][T16911] ? kernfs_root+0xee/0x2a0 [ 669.187884][T16911] ? kernfs_root+0xee/0x2a0 [ 669.187926][T16911] kernfs_new_node+0x11b/0x1a0 [ 669.187972][T16911] kernfs_create_link+0xcc/0x240 [ 669.188023][T16911] sysfs_do_create_link_sd+0x90/0x140 [ 669.188059][T16911] sysfs_create_link+0x61/0xc0 [ 669.188113][T16911] device_add+0x5da/0x1950 [ 669.188150][T16911] ? __pfx_device_add+0x10/0x10 [ 669.188181][T16911] ? lockdep_init_map_type+0x5c/0x250 [ 669.188223][T16911] ? __init_waitqueue_head+0xca/0x150 [ 669.188278][T16911] rfkill_register+0x1ad/0xb30 [ 669.188329][T16911] nfc_register_device+0x11f/0x3e0 [ 669.188369][T16911] nci_register_device+0x7f1/0xb80 [ 669.188419][T16911] ? __pfx_nci_register_device+0x10/0x10 [ 669.188473][T16911] ? lockdep_init_map_type+0x5c/0x250 [ 669.188521][T16911] virtual_ncidev_open+0x141/0x220 [ 669.188557][T16911] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 669.188602][T16911] misc_open+0x26d/0x450 [ 669.188633][T16911] ? __pfx_misc_open+0x10/0x10 [ 669.188663][T16911] chrdev_open+0x234/0x6a0 [ 669.188710][T16911] ? __pfx_apparmor_file_open+0x10/0x10 [ 669.188758][T16911] ? __pfx_chrdev_open+0x10/0x10 [ 669.188806][T16911] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 669.188864][T16911] do_dentry_open+0x6d8/0x1660 [ 669.188910][T16911] ? __pfx_chrdev_open+0x10/0x10 [ 669.188967][T16911] vfs_open+0x82/0x3f0 [ 669.189022][T16911] path_openat+0x208c/0x31a0 [ 669.189084][T16911] ? __pfx_path_openat+0x10/0x10 [ 669.189148][T16911] do_file_open+0x20e/0x430 [ 669.189198][T16911] ? __pfx_do_file_open+0x10/0x10 [ 669.189271][T16911] ? alloc_fd+0x476/0x790 [ 669.189319][T16911] ? do_getname+0x191/0x390 [ 669.189356][T16911] do_sys_openat2+0x10d/0x1e0 [ 669.189392][T16911] ? __pfx_do_sys_openat2+0x10/0x10 [ 669.189440][T16911] __x64_sys_openat+0x12d/0x210 [ 669.189477][T16911] ? __pfx___x64_sys_openat+0x10/0x10 [ 669.189530][T16911] do_syscall_64+0x106/0xf80 [ 669.189570][T16911] ? clear_bhb_loop+0x40/0x90 [ 669.189609][T16911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.189642][T16911] RIP: 0033:0x7faeee59bf79 [ 669.189671][T16911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.189701][T16911] RSP: 002b:00007faeef390028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 669.189734][T16911] RAX: ffffffffffffffda RBX: 00007faeee815fa0 RCX: 00007faeee59bf79 [ 669.189757][T16911] RDX: 0000000000000002 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 669.189778][T16911] RBP: 00007faeee6327e0 R08: 0000000000000000 R09: 0000000000000000 [ 669.189796][T16911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 669.189814][T16911] R13: 00007faeee816038 R14: 00007faeee815fa0 R15: 00007ffd2ac66c28 [ 669.189855][T16911] [ 669.981531][T16931] tc_dump_action: action bad kind [ 671.566487][T16963] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 673.208965][T17002] tc_dump_action: action bad kind [ 676.133083][T17039] zswap: compressor not available [ 676.707296][T17059] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 682.817305][T17172] zswap: compressor not available [ 684.510423][T17211] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 684.551908][T17211] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 684.563622][T17211] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 684.583369][T17211] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 684.612894][T17211] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 684.889838][T17210] zswap: compressor not available [ 685.033812][T17224] tc_dump_action: action bad kind [ 685.580126][T17208] chnl_net:caif_netlink_parms(): no params data found [ 685.936051][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.942447][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.146965][ T61] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.226522][T17233] zswap: compressor not available [ 686.375155][ T61] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.557736][T17208] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.584659][T17208] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.612297][T17208] bridge_slave_0: entered allmulticast mode [ 686.676566][T17208] bridge_slave_0: entered promiscuous mode [ 686.742603][ T5834] Bluetooth: hci4: command tx timeout [ 686.761017][ T61] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.829735][T17208] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.837401][T17208] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.845309][T17208] bridge_slave_1: entered allmulticast mode [ 686.854862][T17208] bridge_slave_1: entered promiscuous mode [ 686.912689][ T61] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.035038][T17208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 687.079513][T17208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 687.272552][T17208] team0: Port device team_slave_0 added [ 687.297739][T17208] team0: Port device team_slave_1 added [ 687.392647][T17259] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 687.441937][T17208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 687.457309][T17208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 687.518905][T17208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 687.542803][ T61] bridge_slave_1: left allmulticast mode [ 687.551909][ T61] bridge_slave_1: left promiscuous mode [ 687.568899][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.611499][ T61] bridge_slave_0: left allmulticast mode [ 687.618018][ T61] bridge_slave_0: left promiscuous mode [ 687.636095][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.034801][T17271] FAULT_INJECTION: forcing a failure. [ 688.034801][T17271] name failslab, interval 1, probability 0, space 0, times 0 [ 688.065310][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 688.066719][T17271] CPU: 0 UID: 0 PID: 17271 Comm: syz.0.2362 Tainted: G L syzkaller #0 PREEMPT(full) [ 688.066755][T17271] Tainted: [L]=SOFTLOCKUP [ 688.066762][T17271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 688.066774][T17271] Call Trace: [ 688.066781][T17271] [ 688.066789][T17271] dump_stack_lvl+0x100/0x190 [ 688.066821][T17271] should_fail_ex.cold+0x5/0xa [ 688.066843][T17271] should_failslab+0xc2/0x120 [ 688.066871][T17271] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 688.066896][T17271] ? __kernfs_new_node+0xd2/0x960 [ 688.066920][T17271] __kernfs_new_node+0xd2/0x960 [ 688.066940][T17271] ? wake_up_q+0xae/0x130 [ 688.066968][T17271] ? __pfx___kernfs_new_node+0x10/0x10 [ 688.066993][T17271] ? find_held_lock+0x2b/0x80 [ 688.067020][T17271] ? kernfs_root+0xee/0x2a0 [ 688.067037][T17271] ? kernfs_root+0xee/0x2a0 [ 688.067061][T17271] kernfs_new_node+0x11b/0x1a0 [ 688.067087][T17271] kernfs_create_link+0xcc/0x240 [ 688.067115][T17271] sysfs_do_create_link_sd+0x90/0x140 [ 688.067136][T17271] sysfs_create_link+0x61/0xc0 [ 688.067155][T17271] device_add+0x5da/0x1950 [ 688.067176][T17271] ? __pfx_device_add+0x10/0x10 [ 688.067194][T17271] ? lockdep_init_map_type+0x5c/0x250 [ 688.067217][T17271] ? __init_waitqueue_head+0xca/0x150 [ 688.067251][T17271] rfkill_register+0x1ad/0xb30 [ 688.067281][T17271] nfc_register_device+0x11f/0x3e0 [ 688.067303][T17271] nci_register_device+0x7f1/0xb80 [ 688.067333][T17271] ? __pfx_nci_register_device+0x10/0x10 [ 688.067362][T17271] ? lockdep_init_map_type+0x5c/0x250 [ 688.067389][T17271] virtual_ncidev_open+0x141/0x220 [ 688.067429][T17271] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 688.067451][T17271] misc_open+0x26d/0x450 [ 688.067470][T17271] ? __pfx_misc_open+0x10/0x10 [ 688.067493][T17271] chrdev_open+0x234/0x6a0 [ 688.067521][T17271] ? __pfx_apparmor_file_open+0x10/0x10 [ 688.067548][T17271] ? __pfx_chrdev_open+0x10/0x10 [ 688.067576][T17271] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 688.067609][T17271] do_dentry_open+0x6d8/0x1660 [ 688.067636][T17271] ? __pfx_chrdev_open+0x10/0x10 [ 688.067673][T17271] vfs_open+0x82/0x3f0 [ 688.067696][T17271] path_openat+0x208c/0x31a0 [ 688.067731][T17271] ? __pfx_path_openat+0x10/0x10 [ 688.067767][T17271] do_file_open+0x20e/0x430 [ 688.067795][T17271] ? __pfx_do_file_open+0x10/0x10 [ 688.067839][T17271] ? alloc_fd+0x476/0x790 [ 688.067867][T17271] ? do_getname+0x191/0x390 [ 688.067889][T17271] do_sys_openat2+0x10d/0x1e0 [ 688.067909][T17271] ? __pfx_do_sys_openat2+0x10/0x10 [ 688.067938][T17271] __x64_sys_openat+0x12d/0x210 [ 688.067959][T17271] ? __pfx___x64_sys_openat+0x10/0x10 [ 688.067990][T17271] do_syscall_64+0x106/0xf80 [ 688.068023][T17271] ? clear_bhb_loop+0x40/0x90 [ 688.068046][T17271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.068065][T17271] RIP: 0033:0x7f07b959bf79 [ 688.068083][T17271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 688.068101][T17271] RSP: 002b:00007f07ba4e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 688.068120][T17271] RAX: ffffffffffffffda RBX: 00007f07b9815fa0 RCX: 00007f07b959bf79 [ 688.068132][T17271] RDX: 0000000000000002 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 688.068144][T17271] RBP: 00007f07b96327e0 R08: 0000000000000000 R09: 0000000000000000 [ 688.068156][T17271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 688.068168][T17271] R13: 00007f07b9816038 R14: 00007f07b9815fa0 R15: 00007fff1e852258 [ 688.068192][T17271] [ 688.443701][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 688.455278][ T61] bond0 (unregistering): Released all slaves [ 688.473084][T17208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 688.480201][T17208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 688.508167][T17208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 688.814316][ T5834] Bluetooth: hci4: command tx timeout [ 688.933735][T17208] hsr_slave_0: entered promiscuous mode [ 688.956422][T17208] hsr_slave_1: entered promiscuous mode [ 688.971527][T17208] debugfs: 'hsr0' already exists in 'hsr' [ 688.978945][T17208] Cannot create hsr debugfs directory [ 689.810555][ T61] hsr_slave_0: left promiscuous mode [ 689.843540][ T61] hsr_slave_1: left promiscuous mode [ 689.854786][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 689.862265][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 689.898515][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 689.925041][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.033311][ T61] veth1_macvtap: left promiscuous mode [ 690.045612][ T61] veth0_macvtap: left promiscuous mode [ 690.061644][ T61] veth1_vlan: left promiscuous mode [ 690.071150][ T61] veth0_vlan: left promiscuous mode [ 690.897205][ T5834] Bluetooth: hci4: command tx timeout [ 691.019011][ T61] team0 (unregistering): Port device team_slave_1 removed [ 691.047392][ T61] team0 (unregistering): Port device team_slave_0 removed [ 692.226798][T17208] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 692.293834][T17208] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 692.318245][T17208] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 692.380152][T17208] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 692.797597][T17346] tc_dump_action: action bad kind [ 692.973378][ T5834] Bluetooth: hci4: command tx timeout [ 693.047590][T17357] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 693.263654][T17208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 693.267980][T17363] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 693.327541][T17208] 8021q: adding VLAN 0 to HW filter on device team0 [ 693.359666][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.367016][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 693.441089][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.448478][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 694.211933][T17208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 694.333528][T17208] veth0_vlan: entered promiscuous mode [ 694.372541][T17208] veth1_vlan: entered promiscuous mode [ 694.565753][T17208] veth0_macvtap: entered promiscuous mode [ 694.605126][T17208] veth1_macvtap: entered promiscuous mode [ 694.707361][T17208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 694.761984][T17208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 694.811429][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.866757][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.909894][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.933616][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.496108][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.517559][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.001647][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.020291][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.599440][T17208] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 696.753742][T17446] FAULT_INJECTION: forcing a failure. [ 696.753742][T17446] name failslab, interval 1, probability 0, space 0, times 0 [ 696.773592][T17446] CPU: 0 UID: 0 PID: 17446 Comm: syz.0.2385 Tainted: G L syzkaller #0 PREEMPT(full) [ 696.773642][T17446] Tainted: [L]=SOFTLOCKUP [ 696.773654][T17446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 696.773674][T17446] Call Trace: [ 696.773685][T17446] [ 696.773699][T17446] dump_stack_lvl+0x100/0x190 [ 696.773753][T17446] should_fail_ex.cold+0x5/0xa [ 696.773790][T17446] should_failslab+0xc2/0x120 [ 696.773833][T17446] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 696.773871][T17446] ? __kernfs_new_node+0xd2/0x960 [ 696.773912][T17446] __kernfs_new_node+0xd2/0x960 [ 696.773946][T17446] ? kernfs_add_one+0x214/0x850 [ 696.773984][T17446] ? __pfx___kernfs_new_node+0x10/0x10 [ 696.774029][T17446] ? find_held_lock+0x2b/0x80 [ 696.774077][T17446] ? kernfs_root+0xee/0x2a0 [ 696.774104][T17446] ? kernfs_root+0xee/0x2a0 [ 696.774144][T17446] kernfs_new_node+0x11b/0x1a0 [ 696.774185][T17446] kernfs_create_link+0xcc/0x240 [ 696.774235][T17446] sysfs_do_create_link_sd+0x90/0x140 [ 696.774269][T17446] sysfs_create_link+0x61/0xc0 [ 696.774302][T17446] device_add+0x553/0x1950 [ 696.774338][T17446] ? __pfx_device_add+0x10/0x10 [ 696.774377][T17446] ? lockdep_init_map_type+0x5c/0x250 [ 696.774415][T17446] ? __init_waitqueue_head+0xca/0x150 [ 696.774471][T17446] rfkill_register+0x1ad/0xb30 [ 696.774522][T17446] nfc_register_device+0x11f/0x3e0 [ 696.774559][T17446] nci_register_device+0x7f1/0xb80 [ 696.774606][T17446] ? __pfx_nci_register_device+0x10/0x10 [ 696.774658][T17446] ? lockdep_init_map_type+0x5c/0x250 [ 696.774705][T17446] virtual_ncidev_open+0x141/0x220 [ 696.774742][T17446] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 696.774777][T17446] misc_open+0x26d/0x450 [ 696.774805][T17446] ? __pfx_misc_open+0x10/0x10 [ 696.774835][T17446] chrdev_open+0x234/0x6a0 [ 696.774875][T17446] ? __pfx_apparmor_file_open+0x10/0x10 [ 696.774918][T17446] ? __pfx_chrdev_open+0x10/0x10 [ 696.774961][T17446] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 696.775013][T17446] do_dentry_open+0x6d8/0x1660 [ 696.775057][T17446] ? __pfx_chrdev_open+0x10/0x10 [ 696.775113][T17446] vfs_open+0x82/0x3f0 [ 696.775150][T17446] path_openat+0x208c/0x31a0 [ 696.775206][T17446] ? __pfx_path_openat+0x10/0x10 [ 696.775267][T17446] do_file_open+0x20e/0x430 [ 696.775317][T17446] ? __pfx_do_file_open+0x10/0x10 [ 696.775402][T17446] ? alloc_fd+0x476/0x790 [ 696.775450][T17446] ? do_getname+0x191/0x390 [ 696.775486][T17446] do_sys_openat2+0x10d/0x1e0 [ 696.775520][T17446] ? __pfx_do_sys_openat2+0x10/0x10 [ 696.775570][T17446] __x64_sys_openat+0x12d/0x210 [ 696.775605][T17446] ? __pfx___x64_sys_openat+0x10/0x10 [ 696.775653][T17446] do_syscall_64+0x106/0xf80 [ 696.775686][T17446] ? clear_bhb_loop+0x40/0x90 [ 696.775726][T17446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.775759][T17446] RIP: 0033:0x7f07b959bf79 [ 696.775786][T17446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 696.775817][T17446] RSP: 002b:00007f07ba4e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 696.775847][T17446] RAX: ffffffffffffffda RBX: 00007f07b9815fa0 RCX: 00007f07b959bf79 [ 696.775868][T17446] RDX: 0000000000000002 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 696.775889][T17446] RBP: 00007f07b96327e0 R08: 0000000000000000 R09: 0000000000000000 [ 696.775909][T17446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 696.775928][T17446] R13: 00007f07b9816038 R14: 00007f07b9815fa0 R15: 00007fff1e852258 [ 696.775972][T17446] [ 697.636433][T17428] Process accounting paused [ 699.727014][T17211] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 699.742867][T17211] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 699.761287][T17211] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 699.783862][T17211] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 699.792027][T17211] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 700.471683][T16384] ------------[ cut here ]------------ [ 700.477295][T16384] ODEBUG: free active (active state 0) object: ffff8880328d5460 object type: timer_list hint: hci_devcd_timeout+0x0/0x2e0 [ 700.490421][T16384] WARNING: lib/debugobjects.c:612 at debug_print_object+0x18e/0x2a0, CPU#0: syz.0.2213/16384 [ 700.500834][T16384] Modules linked in: [ 700.504858][T16384] CPU: 0 UID: 0 PID: 16384 Comm: syz.0.2213 Tainted: G L syzkaller #0 PREEMPT(full) [ 700.515928][T16384] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 700.520525][T16384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 700.532395][T16384] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 700.538839][T16384] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 22 24 ea 0b 41 56 48 8b 14 dd e0 df 1a 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 3c c7 df 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 700.558976][T16384] RSP: 0018:ffffc900044cf708 EFLAGS: 00010246 [ 700.565239][T16384] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 700.575448][T16384] RDX: ffffffff8c1adf20 RSI: ffffffff8c1adb40 RDI: ffffffff90e3bff0 [ 700.584494][T16384] RBP: 0000000000000001 R08: ffff8880328d5460 R09: ffffffff8bb2b840 [ 700.592554][T16384] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1adb40 [ 700.600628][T16384] R13: ffffffff8bb2b880 R14: ffffffff8a93f820 R15: ffffc900044cf808 [ 700.608752][T16384] FS: 0000000000000000(0000) GS:ffff88812435f000(0000) knlGS:0000000000000000 [ 700.617870][T16384] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 700.624699][T16384] CR2: 00005555829ca9e8 CR3: 00000000591e0000 CR4: 00000000003526f0 [ 700.632726][T16384] Call Trace: [ 700.636155][T16384] [ 700.639121][T16384] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 700.645343][T16384] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 700.651374][T16384] debug_check_no_obj_freed+0x4da/0x630 [ 700.657461][T16384] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 700.663649][T16384] ? __page_table_check_zero+0x333/0x410 [ 700.669380][T16384] ? __page_table_check_zero+0x338/0x410 [ 700.675677][T16384] __free_frozen_pages+0x36b/0x10a0 [ 700.680944][T16384] hci_release_dev+0x4ef/0x630 [ 700.686239][T16384] ? __pfx_hci_release_dev+0x10/0x10 [ 700.691593][T16384] ? device_release+0x69/0x240 [ 700.696509][T16384] ? rcu_is_watching+0x12/0xc0 [ 700.701331][T16384] ? device_release+0x69/0x240 [ 700.706337][T16384] ? kfree+0x2ec/0x6b0 [ 700.710573][T16384] bt_host_release+0x6a/0xb0 [ 700.715288][T16384] ? __pfx_bt_host_release+0x10/0x10 [ 700.720744][T16384] device_release+0xa4/0x240 [ 700.725524][T16384] kobject_put+0x1f7/0x640 [ 700.730010][T16384] put_device+0x1f/0x30 [ 700.735022][T16384] vhci_release+0x185/0x230 [ 700.737425][T17510] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 700.739583][T16384] ? __pfx_vhci_release+0x10/0x10 [ 700.739635][T16384] __fput+0x3ff/0xb40 [ 700.757744][T16384] task_work_run+0x150/0x240 [ 700.762396][T16384] ? __pfx_task_work_run+0x10/0x10 [ 700.767644][T16384] do_exit+0x829/0x2a90 [ 700.771880][T16384] ? __pfx_do_exit+0x10/0x10 [ 700.777236][T16384] ? cgroup_update_frozen_flag+0x107/0x210 [ 700.783584][T16384] ? find_held_lock+0x2b/0x80 [ 700.788398][T16384] ? get_signal+0x184f/0x21e0 [ 700.793214][T16384] do_group_exit+0xd5/0x2a0 [ 700.797993][T16384] get_signal+0x1ec7/0x21e0 [ 700.802629][T16384] ? __asan_memset+0x23/0x50 [ 700.807417][T16384] ? __pfx_get_signal+0x10/0x10 [ 700.812354][T16384] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 700.817909][T16384] arch_do_signal_or_restart+0x91/0x770 [ 700.823582][T16384] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 700.829841][T16384] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 700.835863][T16384] exit_to_user_mode_loop+0x86/0x4a0 [ 700.841463][T16384] do_syscall_64+0x668/0xf80 [ 700.846888][T16384] ? clear_bhb_loop+0x40/0x90 [ 700.852151][T16384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.858186][T16384] RIP: 0033:0x7f07b955c84e [ 700.862739][T16384] Code: Unable to access opcode bytes at 0x7f07b955c824. [ 700.869932][T16384] RSP: 002b:00007f07ba4e8f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 700.879181][T16384] RAX: fffffffffffffdfc RBX: 00007f07ba4e96c0 RCX: 00007f07b955c84e [ 700.887691][T16384] RDX: 00007f07ba4e8fb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 700.895766][T16384] RBP: 00007f07b96327e0 R08: 0000000000000000 R09: 0000000000000000 [ 700.903877][T16384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 700.911886][T16384] R13: 00007f07b9816038 R14: 00007f07b9815fa0 R15: 00007fff1e852258 [ 700.920184][T16384] [ 700.923289][T16384] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 700.930631][T16384] CPU: 0 UID: 0 PID: 16384 Comm: syz.0.2213 Tainted: G L syzkaller #0 PREEMPT(full) [ 700.941683][T16384] Tainted: [L]=SOFTLOCKUP [ 700.946199][T16384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 700.956267][T16384] Call Trace: [ 700.959568][T16384] [ 700.962509][T16384] dump_stack_lvl+0x100/0x190 [ 700.967318][T16384] vpanic+0x552/0x970 [ 700.971331][T16384] ? __pfx_vpanic+0x10/0x10 [ 700.975863][T16384] panic+0xd1/0xe0 [ 700.979690][T16384] ? __pfx_panic+0x10/0x10 [ 700.984136][T16384] ? check_panic_on_warn+0x1f/0x90 [ 700.989285][T16384] check_panic_on_warn.cold+0x19/0x34 [ 700.994687][T16384] ? debug_print_object+0x18e/0x2a0 [ 700.999909][T16384] __warn.cold+0x191/0x348 [ 701.004343][T16384] __report_bug+0x296/0x3d0 [ 701.008875][T16384] ? debug_print_object+0x18e/0x2a0 [ 701.014096][T16384] ? __pfx___report_bug+0x10/0x10 [ 701.019143][T16384] ? __lock_acquire+0x4a5/0x2630 [ 701.024278][T16384] ? unwind_next_frame+0x3c8/0x1ea0 [ 701.029615][T16384] report_bug_entry+0xe1/0x290 [ 701.034424][T16384] ? debug_print_object+0x19b/0x2a0 [ 701.039657][T16384] handle_bug+0x1c9/0x2a0 [ 701.044103][T16384] exc_invalid_op+0x17/0x50 [ 701.048632][T16384] asm_exc_invalid_op+0x1a/0x20 [ 701.053682][T16384] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 701.059516][T16384] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 22 24 ea 0b 41 56 48 8b 14 dd e0 df 1a 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 3c c7 df 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 701.079321][T16384] RSP: 0018:ffffc900044cf708 EFLAGS: 00010246 [ 701.085581][T16384] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 701.093581][T16384] RDX: ffffffff8c1adf20 RSI: ffffffff8c1adb40 RDI: ffffffff90e3bff0 [ 701.101590][T16384] RBP: 0000000000000001 R08: ffff8880328d5460 R09: ffffffff8bb2b840 [ 701.109599][T16384] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1adb40 [ 701.117764][T16384] R13: ffffffff8bb2b880 R14: ffffffff8a93f820 R15: ffffc900044cf808 [ 701.125801][T16384] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 701.131443][T16384] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 701.136954][T16384] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 701.142819][T16384] debug_check_no_obj_freed+0x4da/0x630 [ 701.148418][T16384] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 701.154626][T16384] ? __page_table_check_zero+0x333/0x410 [ 701.160413][T16384] ? __page_table_check_zero+0x338/0x410 [ 701.166102][T16384] __free_frozen_pages+0x36b/0x10a0 [ 701.171336][T16384] hci_release_dev+0x4ef/0x630 [ 701.176140][T16384] ? __pfx_hci_release_dev+0x10/0x10 [ 701.181451][T16384] ? device_release+0x69/0x240 [ 701.186237][T16384] ? rcu_is_watching+0x12/0xc0 [ 701.191114][T16384] ? device_release+0x69/0x240 [ 701.195894][T16384] ? kfree+0x2ec/0x6b0 [ 701.199992][T16384] bt_host_release+0x6a/0xb0 [ 701.204684][T16384] ? __pfx_bt_host_release+0x10/0x10 [ 701.209986][T16384] device_release+0xa4/0x240 [ 701.214596][T16384] kobject_put+0x1f7/0x640 [ 701.219039][T16384] put_device+0x1f/0x30 [ 701.223227][T16384] vhci_release+0x185/0x230 [ 701.227755][T16384] ? __pfx_vhci_release+0x10/0x10 [ 701.232800][T16384] __fput+0x3ff/0xb40 [ 701.236806][T16384] task_work_run+0x150/0x240 [ 701.241422][T16384] ? __pfx_task_work_run+0x10/0x10 [ 701.246649][T16384] do_exit+0x829/0x2a90 [ 701.250833][T16384] ? __pfx_do_exit+0x10/0x10 [ 701.255439][T16384] ? cgroup_update_frozen_flag+0x107/0x210 [ 701.261274][T16384] ? find_held_lock+0x2b/0x80 [ 701.265980][T16384] ? get_signal+0x184f/0x21e0 [ 701.270678][T16384] do_group_exit+0xd5/0x2a0 [ 701.275211][T16384] get_signal+0x1ec7/0x21e0 [ 701.279729][T16384] ? __asan_memset+0x23/0x50 [ 701.284348][T16384] ? __pfx_get_signal+0x10/0x10 [ 701.289223][T16384] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 701.294445][T16384] arch_do_signal_or_restart+0x91/0x770 [ 701.300071][T16384] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 701.306340][T16384] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 701.312206][T16384] exit_to_user_mode_loop+0x86/0x4a0 [ 701.317691][T16384] do_syscall_64+0x668/0xf80 [ 701.322320][T16384] ? clear_bhb_loop+0x40/0x90 [ 701.327024][T16384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.332937][T16384] RIP: 0033:0x7f07b955c84e [ 701.337393][T16384] Code: Unable to access opcode bytes at 0x7f07b955c824. [ 701.344414][T16384] RSP: 002b:00007f07ba4e8f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 701.353015][T16384] RAX: fffffffffffffdfc RBX: 00007f07ba4e96c0 RCX: 00007f07b955c84e [ 701.360998][T16384] RDX: 00007f07ba4e8fb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 701.368979][T16384] RBP: 00007f07b96327e0 R08: 0000000000000000 R09: 0000000000000000 [ 701.376962][T16384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 701.384946][T16384] R13: 00007f07b9816038 R14: 00007f07b9815fa0 R15: 00007fff1e852258 [ 701.393039][T16384] [ 701.396463][T16384] Kernel Offset: disabled [ 701.400876][T16384] Rebooting in 86400 seconds..