last executing test programs: 3.318815276s ago: executing program 0 (id=1474): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) 2.949330121s ago: executing program 2 (id=1468): sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x4, 0x0, 0x29, 0x0, 0x0, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r0, 0x89f3, 0x24) 2.928486969s ago: executing program 0 (id=1469): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0x3, 0x541b, 0x38) 2.377928172s ago: executing program 3 (id=1472): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS0\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) 2.093420383s ago: executing program 1 (id=1476): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000040)='/\xc8\xa5\x83\x1c\xe0\x8a\xeb\xce\xfb\xa8\xe3k\xba/>\xa7dev/audio1\x00', 0x100000a3d9) sysfs$auto(0x2, 0x23, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) 2.0933101s ago: executing program 3 (id=1477): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r0, 0x4068aea3, &(0x7f0000000080)={0xd4}) 1.938356419s ago: executing program 3 (id=1478): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0x7, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_udc.2/udc/dummy_udc.2/a_alt_hnp_support\x00', 0x2000, 0x0) prctl$auto(0x1000000003b, 0x1ff, 0x4, 0xfffffffffffffc00, 0xff) mmap$auto(0x0, 0xe883, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) futex$auto(&(0x7f00000000c0)=0x1, 0x8c, 0x1, 0x0, 0x0, 0x1) 1.937858982s ago: executing program 2 (id=1486): rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) socket(0x2, 0x1, 0x106) write$auto(0x3, 0x0, 0xffd8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo$auto(r0, r1, 0x16, &(0x7f0000000400)={@siginfo_0_0={0xfffeffff, 0x0, 0x2, @_sigpoll={0x8}}}) tgkill$auto_SIGCONT(r0, r0, 0x12) 1.885611303s ago: executing program 0 (id=1479): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x13, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x12de82, 0x0) ioctl$auto(0x3, 0x40106f52, r0) 1.770034822s ago: executing program 2 (id=1480): mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000340)="000000000000000008d57137b670548072a564ef92511eb134ea109407e098217afaf01967a2abb4f9f862f8ebd2941bb068", 0xffffffff}, 0x6, 0x0) move_pages$auto(0x0, 0x1001, 0x0, 0x0, 0x0, 0x0) r1 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r2, 0x5393, r1) 1.578775734s ago: executing program 0 (id=1481): mmap$auto(0x0, 0x3, 0x80000000000df, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) open(&(0x7f00000000c0)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) unlink$auto(&(0x7f0000000380)='./file0\x00') 1.291100778s ago: executing program 3 (id=1482): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) close_range$auto(0x2, r0, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000040)={0x7, 0x0, [{0x40000023, 0x2, 0x6}]}) 1.284150903s ago: executing program 2 (id=1483): preadv2$auto(0xffffffffffffffff, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x2f) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4b33, 0x9) 1.024841665s ago: executing program 2 (id=1484): mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r0, 0x891d, 0x24) 928.404577ms ago: executing program 3 (id=1485): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x40900, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(&(0x7f0000000200)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) ioctl$auto(0x3, 0x40104d06, 0x5) 853.899123ms ago: executing program 1 (id=1487): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x400, 0x0) ioctl$auto(r0, 0x4bfa, 0x1) ioctl$auto(0x3, 0xc0a85322, 0x38) 680.221232ms ago: executing program 1 (id=1488): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) close_range$auto(0x0, 0xffffffffffffffff, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyq5\x00', 0x280080, 0x0) io_uring_setup$auto(0x59, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x80, 0x0, 0x7) 678.356601ms ago: executing program 0 (id=1489): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fcdbdf2502cff3291849be3657003c80080019"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {0xa, 0x0, 0xa00}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 623.247066ms ago: executing program 3 (id=1490): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) migrate_pages$auto(0x0, 0x9, 0x0, &(0x7f0000000040)=0x101) modify_ldt$auto(0x8fb, 0x0, 0x11) 620.86982ms ago: executing program 1 (id=1491): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x7, 0xf, 0x1, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) memfd_create$auto(0x0, 0x1) 427.44851ms ago: executing program 0 (id=1492): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0x7, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_udc.2/udc/dummy_udc.2/a_alt_hnp_support\x00', 0x2000, 0x0) prctl$auto(0x1000000003b, 0x1ff, 0x4, 0xfffffffffffffc00, 0xff) mmap$auto(0x0, 0xe883, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) futex$auto(&(0x7f00000000c0)=0x1, 0x8c, 0x1, 0x0, 0x0, 0x1) 208.995592ms ago: executing program 1 (id=1493): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) shmctl$auto(0x691, 0x3, 0x0) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000140), 0x8800, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) mmap$auto(0x0, 0x63, 0x6, 0xfa31, 0xffffffffffffffff, 0x8000) ioctl$auto_IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, 0x0) 73.220592ms ago: executing program 1 (id=1494): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0x345, 0x11}]}) 0s ago: executing program 2 (id=1495): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000040)=""/217, 0xd9) r1 = socket(0x1d, 0x2, 0x6) setsockopt$auto(r1, 0x6a, 0x5, 0x0, 0x3) r2 = syz_genetlink_get_family_id$auto_vdpa(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_VDPA_CMD_DEV_ATTR_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)={0xaac, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@VDPA_ATTR_DEV_NET_CFG_MACADDR={0xa96, 0xa, "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"}]}, 0xaac}, 0x1, 0x0, 0x0, 0x14}, 0x20000810) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.6' (ED25519) to the list of known hosts. [ 80.635831][ T5804] cgroup: Unknown subsys name 'net' [ 80.741980][ T5804] cgroup: Unknown subsys name 'cpuset' [ 80.750691][ T5804] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.263939][ T5804] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.190318][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.199943][ T5818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.209024][ T5818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.210997][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.219103][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.232591][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.241195][ T5820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.241591][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.259846][ T5139] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.267788][ T5818] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.293627][ T5818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.303767][ T5818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.312281][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.322868][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.332763][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.340302][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.349614][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.357485][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.366131][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.366255][ T5818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.844239][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 84.939249][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 84.977834][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 85.041509][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 85.172277][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.179551][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.186998][ T5815] bridge_slave_0: entered allmulticast mode [ 85.194658][ T5815] bridge_slave_0: entered promiscuous mode [ 85.234112][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.241406][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.249043][ T5815] bridge_slave_1: entered allmulticast mode [ 85.255979][ T5815] bridge_slave_1: entered promiscuous mode [ 85.283780][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.290984][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.298131][ T5824] bridge_slave_0: entered allmulticast mode [ 85.305322][ T5824] bridge_slave_0: entered promiscuous mode [ 85.332887][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.340293][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.347461][ T5819] bridge_slave_0: entered allmulticast mode [ 85.354807][ T5819] bridge_slave_0: entered promiscuous mode [ 85.362267][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.369429][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.376682][ T5824] bridge_slave_1: entered allmulticast mode [ 85.383918][ T5824] bridge_slave_1: entered promiscuous mode [ 85.412125][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.419916][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.427060][ T5819] bridge_slave_1: entered allmulticast mode [ 85.434242][ T5819] bridge_slave_1: entered promiscuous mode [ 85.451554][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.458997][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.466184][ T5823] bridge_slave_0: entered allmulticast mode [ 85.473771][ T5823] bridge_slave_0: entered promiscuous mode [ 85.484569][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.513822][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.521323][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.528584][ T5823] bridge_slave_1: entered allmulticast mode [ 85.535685][ T5823] bridge_slave_1: entered promiscuous mode [ 85.545127][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.567201][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.601114][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.612627][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.635616][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.682922][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.705841][ T5815] team0: Port device team_slave_0 added [ 85.725198][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.736556][ T5819] team0: Port device team_slave_0 added [ 85.745018][ T5815] team0: Port device team_slave_1 added [ 85.752994][ T5824] team0: Port device team_slave_0 added [ 85.774912][ T5819] team0: Port device team_slave_1 added [ 85.792059][ T5824] team0: Port device team_slave_1 added [ 85.840914][ T5823] team0: Port device team_slave_0 added [ 85.847390][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.854709][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.880988][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.914036][ T5823] team0: Port device team_slave_1 added [ 85.920990][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.927936][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.953928][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.965529][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.972872][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.999259][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.011037][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.017988][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.044359][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.077452][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.084464][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.110419][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.122096][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.129104][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.155126][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.182632][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.189720][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.215711][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.228934][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.235895][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.262158][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.299246][ T5818] Bluetooth: hci1: command tx timeout [ 86.299248][ T5820] Bluetooth: hci0: command tx timeout [ 86.361584][ T5819] hsr_slave_0: entered promiscuous mode [ 86.368798][ T5819] hsr_slave_1: entered promiscuous mode [ 86.378910][ T5820] Bluetooth: hci3: command tx timeout [ 86.388764][ T5815] hsr_slave_0: entered promiscuous mode [ 86.395064][ T5815] hsr_slave_1: entered promiscuous mode [ 86.401487][ T5815] debugfs: 'hsr0' already exists in 'hsr' [ 86.407269][ T5815] Cannot create hsr debugfs directory [ 86.451493][ T5823] hsr_slave_0: entered promiscuous mode [ 86.458084][ T5823] hsr_slave_1: entered promiscuous mode [ 86.464555][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 86.468663][ T5820] Bluetooth: hci2: command tx timeout [ 86.470353][ T5823] Cannot create hsr debugfs directory [ 86.487372][ T5824] hsr_slave_0: entered promiscuous mode [ 86.494487][ T5824] hsr_slave_1: entered promiscuous mode [ 86.500799][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 86.506631][ T5824] Cannot create hsr debugfs directory [ 87.072800][ T5819] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.113232][ T5819] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.125225][ T5819] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.151330][ T5819] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.204573][ T5815] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.224858][ T5815] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.235869][ T5815] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.256493][ T5815] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.327106][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.338280][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.350713][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.383295][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.490643][ T5824] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.520544][ T5824] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.541605][ T5824] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.553486][ T5824] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.595659][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.628282][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.663592][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.678036][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.690248][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.697622][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.730065][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.737637][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.747296][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.754456][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.779633][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.790648][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.797813][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.900633][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.940810][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.948069][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.965412][ T5819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.987814][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.995009][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.073285][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.173662][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.226249][ T1332] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.233483][ T1332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.286841][ T3437] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.294090][ T3437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.381023][ T5820] Bluetooth: hci1: command tx timeout [ 88.388739][ T5820] Bluetooth: hci0: command tx timeout [ 88.446721][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.460154][ T5820] Bluetooth: hci3: command tx timeout [ 88.481709][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.539555][ T5820] Bluetooth: hci2: command tx timeout [ 88.610980][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.642031][ T5819] veth0_vlan: entered promiscuous mode [ 88.673968][ T5815] veth0_vlan: entered promiscuous mode [ 88.685158][ T5819] veth1_vlan: entered promiscuous mode [ 88.724273][ T5815] veth1_vlan: entered promiscuous mode [ 88.797123][ T5819] veth0_macvtap: entered promiscuous mode [ 88.816819][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.838270][ T5823] veth0_vlan: entered promiscuous mode [ 88.872363][ T5819] veth1_macvtap: entered promiscuous mode [ 88.882666][ T5815] veth0_macvtap: entered promiscuous mode [ 88.893133][ T5823] veth1_vlan: entered promiscuous mode [ 88.908700][ T5815] veth1_macvtap: entered promiscuous mode [ 88.952409][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.975632][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.985758][ T5824] veth0_vlan: entered promiscuous mode [ 88.994746][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.017454][ T3437] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.036070][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.053719][ T5824] veth1_vlan: entered promiscuous mode [ 89.061377][ T3437] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.070879][ T3437] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.096176][ T3437] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.108223][ T3437] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.119671][ T5823] veth0_macvtap: entered promiscuous mode [ 89.130845][ T5823] veth1_macvtap: entered promiscuous mode [ 89.140293][ T3437] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.149368][ T3437] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.186448][ T5824] veth0_macvtap: entered promiscuous mode [ 89.205787][ T3437] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.243032][ T5824] veth1_macvtap: entered promiscuous mode [ 89.270225][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.320278][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.346476][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.372323][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.382393][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.399829][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.411789][ T3468] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.426591][ T3468] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.456538][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.491849][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.495698][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.510919][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.561101][ T3468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.571497][ T3468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.583027][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.612035][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.622477][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.638254][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.662439][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.685720][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.690529][ T5819] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.771871][ T3468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.778962][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.787534][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.790546][ T3468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.896269][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.939393][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.984996][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.004958][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.459382][ T5820] Bluetooth: hci0: command tx timeout [ 90.464826][ T5820] Bluetooth: hci1: command tx timeout [ 90.469078][ T5913] Zero length message leads to an empty skb [ 90.542425][ T5820] Bluetooth: hci3: command tx timeout [ 90.618967][ T5820] Bluetooth: hci2: command tx timeout [ 91.766335][ T5958] FAULT_INJECTION: forcing a failure. [ 91.766335][ T5958] name fail_futex, interval 1, probability 0, space 0, times 1 [ 91.779976][ T5958] CPU: 0 UID: 0 PID: 5958 Comm: syz.2.19 Not tainted syzkaller #0 PREEMPT(full) [ 91.780015][ T5958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 91.780038][ T5958] Call Trace: [ 91.780048][ T5958] [ 91.780059][ T5958] dump_stack_lvl+0x100/0x190 [ 91.780113][ T5958] should_fail_ex.cold+0x5/0xa [ 91.780146][ T5958] should_fail_futex+0x4c/0x60 [ 91.780189][ T5958] futex_lock_pi_atomic+0xe7/0xaf0 [ 91.780231][ T5958] futex_lock_pi+0x246/0x7b0 [ 91.780269][ T5958] ? __pfx_futex_lock_pi+0x10/0x10 [ 91.780297][ T5958] ? preempt_schedule_common+0x42/0xc0 [ 91.780339][ T5958] ? preempt_schedule_thunk+0x16/0x30 [ 91.780385][ T5958] ? __pfx_try_to_wake_up+0x10/0x10 [ 91.780434][ T5958] ? futex_private_hash_put+0x107/0x1c0 [ 91.780482][ T5958] ? __pfx_futex_wake_mark+0x10/0x10 [ 91.780523][ T5958] ? ksys_write+0x190/0x250 [ 91.780549][ T5958] ? ksys_write+0x190/0x250 [ 91.780584][ T5958] do_futex+0x18a/0x350 [ 91.780610][ T5958] ? __pfx_do_futex+0x10/0x10 [ 91.780647][ T5958] __x64_sys_futex+0x34f/0x4d0 [ 91.780676][ T5958] ? fput+0x79/0x100 [ 91.780708][ T5958] ? __pfx___x64_sys_futex+0x10/0x10 [ 91.780734][ T5958] ? xfd_validate_state+0x129/0x190 [ 91.780781][ T5958] do_syscall_64+0x106/0xf80 [ 91.780820][ T5958] ? clear_bhb_loop+0x40/0x90 [ 91.780850][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.780877][ T5958] RIP: 0033:0x7fcad519bf79 [ 91.780907][ T5958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.780941][ T5958] RSP: 002b:00007fcad5fcb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 91.780976][ T5958] RAX: ffffffffffffffda RBX: 00007fcad5416090 RCX: 00007fcad519bf79 [ 91.780995][ T5958] RDX: 0000000000000008 RSI: 0000000000000086 RDI: 0000000000000000 [ 91.781012][ T5958] RBP: 00007fcad52327e0 R08: 0000000000000000 R09: 0000000000000007 [ 91.781028][ T5958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.781044][ T5958] R13: 00007fcad5416128 R14: 00007fcad5416090 R15: 00007fff5b45a738 [ 91.781080][ T5958] [ 91.822231][ T5960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20'. [ 91.824424][ T5951] netlink: 334 bytes leftover after parsing attributes in process `syz.3.17'. [ 92.023750][ T55] cfg80211: failed to load regulatory.db [ 92.145182][ T5964] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.539334][ T5820] Bluetooth: hci1: command tx timeout [ 92.544876][ T5820] Bluetooth: hci0: command tx timeout [ 92.620591][ T5820] Bluetooth: hci3: command tx timeout [ 92.700939][ T5820] Bluetooth: hci2: command tx timeout [ 92.713382][ T5980] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 92.735913][ T29] audit: type=1804 audit(1770901968.985:2): pid=5980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.27" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 93.106858][ T5988] ACPI: button: Initial lid state set to 'ignore' [ 93.289043][ T5993] netlink: 20 bytes leftover after parsing attributes in process `syz.0.32'. [ 93.691893][ T6006] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.028853][ T6010] netlink: 342 bytes leftover after parsing attributes in process `syz.0.40'. [ 94.704768][ T6030] random: crng reseeded on system resumption [ 95.799756][ T6048] netlink: 330 bytes leftover after parsing attributes in process `syz.2.55'. [ 96.000806][ T6057] FAULT_INJECTION: forcing a failure. [ 96.000806][ T6057] name failslab, interval 1, probability 0, space 0, times 0 [ 96.039379][ T6057] CPU: 1 UID: 0 PID: 6057 Comm: syz.2.59 Not tainted syzkaller #0 PREEMPT(full) [ 96.039424][ T6057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 96.039441][ T6057] Call Trace: [ 96.039449][ T6057] [ 96.039459][ T6057] dump_stack_lvl+0x100/0x190 [ 96.039504][ T6057] should_fail_ex.cold+0x5/0xa [ 96.039534][ T6057] should_failslab+0xc2/0x120 [ 96.039565][ T6057] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 96.039589][ T6057] ? security_inode_alloc+0x3b/0x2c0 [ 96.039630][ T6057] ? lockdep_init_map_type+0x5c/0x250 [ 96.039663][ T6057] security_inode_alloc+0x3b/0x2c0 [ 96.039708][ T6057] inode_init_always_gfp+0xced/0x1040 [ 96.039743][ T6057] alloc_inode+0x8e/0x250 [ 96.039779][ T6057] new_inode+0x22/0x1c0 [ 96.039819][ T6057] shmem_get_inode+0x197/0xf30 [ 96.039863][ T6057] shmem_tmpfile+0x58/0x170 [ 96.039902][ T6057] vfs_tmpfile+0x2be/0x9a0 [ 96.039938][ T6057] path_openat+0x164e/0x31a0 [ 96.039966][ T6057] ? kasan_save_stack+0x3f/0x50 [ 96.039991][ T6057] ? kasan_save_stack+0x30/0x50 [ 96.040017][ T6057] ? __kasan_slab_alloc+0x89/0x90 [ 96.040045][ T6057] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 96.040070][ T6057] ? do_getname+0x35/0x390 [ 96.040106][ T6057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.040139][ T6057] ? __pfx_path_openat+0x10/0x10 [ 96.040179][ T6057] do_file_open+0x20e/0x430 [ 96.040212][ T6057] ? __pfx_do_file_open+0x10/0x10 [ 96.040269][ T6057] ? _raw_spin_unlock+0x28/0x50 [ 96.040304][ T6057] ? alloc_fd+0x476/0x790 [ 96.040343][ T6057] do_sys_openat2+0x10d/0x1e0 [ 96.040391][ T6057] ? __pfx_do_sys_openat2+0x10/0x10 [ 96.040431][ T6057] ? __fget_files+0x21f/0x3d0 [ 96.040467][ T6057] __x64_sys_open+0xfe/0x1d0 [ 96.040503][ T6057] ? __pfx___x64_sys_open+0x10/0x10 [ 96.040537][ T6057] ? xfd_validate_state+0x129/0x190 [ 96.040581][ T6057] do_syscall_64+0x106/0xf80 [ 96.040616][ T6057] ? clear_bhb_loop+0x40/0x90 [ 96.040647][ T6057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.040671][ T6057] RIP: 0033:0x7fcad519bf79 [ 96.040692][ T6057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.040716][ T6057] RSP: 002b:00007fcad5fec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 96.040742][ T6057] RAX: ffffffffffffffda RBX: 00007fcad5415fa0 RCX: 00007fcad519bf79 [ 96.040758][ T6057] RDX: 0000000000000408 RSI: 0000000000591002 RDI: 0000200000000100 [ 96.040773][ T6057] RBP: 00007fcad52327e0 R08: 0000000000000000 R09: 0000000000000000 [ 96.040787][ T6057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.040802][ T6057] R13: 00007fcad5416038 R14: 00007fcad5415fa0 R15: 00007fff5b45a738 [ 96.040838][ T6057] [ 96.464774][ T6064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.62'. [ 96.644488][ T6064] FAULT_INJECTION: forcing a failure. [ 96.644488][ T6064] name failslab, interval 1, probability 0, space 0, times 0 [ 96.678434][ T6064] CPU: 0 UID: 0 PID: 6064 Comm: syz.2.62 Not tainted syzkaller #0 PREEMPT(full) [ 96.678470][ T6064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 96.678486][ T6064] Call Trace: [ 96.678494][ T6064] [ 96.678504][ T6064] dump_stack_lvl+0x100/0x190 [ 96.678552][ T6064] should_fail_ex.cold+0x5/0xa [ 96.678583][ T6064] should_failslab+0xc2/0x120 [ 96.678619][ T6064] __kmalloc_cache_noprof+0x7a/0x6f0 [ 96.678659][ T6064] ? call_usermodehelper_setup+0xaf/0x360 [ 96.678695][ T6064] ? trace_kmalloc+0x83/0xb0 [ 96.678730][ T6064] ? __pfx_free_modprobe_argv+0x10/0x10 [ 96.678762][ T6064] call_usermodehelper_setup+0xaf/0x360 [ 96.678802][ T6064] __request_module+0x3c7/0x650 [ 96.678835][ T6064] ? __pfx___request_module+0x10/0x10 [ 96.678868][ T6064] ? lockdep_hardirqs_on+0x78/0x100 [ 96.678909][ T6064] ? irqentry_exit+0x180/0x670 [ 96.678970][ T6064] inet_create+0xd45/0x1060 [ 96.679004][ T6064] ? inet_create+0x94/0x1060 [ 96.679042][ T6064] __sock_create+0x339/0x860 [ 96.679078][ T6064] __sys_socket+0x14d/0x260 [ 96.679108][ T6064] ? fput+0x79/0x100 [ 96.679140][ T6064] ? __pfx___sys_socket+0x10/0x10 [ 96.679170][ T6064] ? xfd_validate_state+0x129/0x190 [ 96.679212][ T6064] __x64_sys_socket+0x72/0xb0 [ 96.679242][ T6064] ? lockdep_hardirqs_on+0x78/0x100 [ 96.679281][ T6064] do_syscall_64+0x106/0xf80 [ 96.679320][ T6064] ? clear_bhb_loop+0x40/0x90 [ 96.679352][ T6064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.679379][ T6064] RIP: 0033:0x7fcad519bf79 [ 96.679408][ T6064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.679435][ T6064] RSP: 002b:00007fcad5fec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 96.679461][ T6064] RAX: ffffffffffffffda RBX: 00007fcad5415fa0 RCX: 00007fcad519bf79 [ 96.679485][ T6064] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000002 [ 96.679501][ T6064] RBP: 00007fcad52327e0 R08: 0000000000000000 R09: 0000000000000000 [ 96.679518][ T6064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.679534][ T6064] R13: 00007fcad5416038 R14: 00007fcad5415fa0 R15: 00007fff5b45a738 [ 96.679571][ T6064] [ 97.748096][ T29] audit: type=1800 audit(1770901973.995:3): pid=6080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.67" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 98.072192][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.080984][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.119625][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.348445][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 98.508896][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.688935][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.855058][ T6102] process 'syz.3.75' launched ':,' with NULL argv: empty string added [ 102.389131][ T6156] netlink: 16 bytes leftover after parsing attributes in process `syz.0.91'. [ 102.405117][ T6162] netlink: 28 bytes leftover after parsing attributes in process `syz.3.93'. [ 104.590006][ T6211] random: crng reseeded on system resumption [ 104.717850][ T6215] Unrecognized hibernate image header format! [ 104.758482][ T6215] PM: hibernation: Image mismatch: architecture specific data [ 105.708543][ T6236] netlink: 338 bytes leftover after parsing attributes in process `syz.1.111'. [ 106.353650][ T6258] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input5 [ 108.276458][ T6290] binder: 6289:6290 ioctl c0306201 2000000000c0 returned -14 [ 108.676937][ T6301] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.962943][ T6310] FAULT_INJECTION: forcing a failure. [ 108.962943][ T6310] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 108.976964][ T6310] CPU: 0 UID: 0 PID: 6310 Comm: syz.0.134 Not tainted syzkaller #0 PREEMPT(full) [ 108.977001][ T6310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 108.977017][ T6310] Call Trace: [ 108.977025][ T6310] [ 108.977035][ T6310] dump_stack_lvl+0x100/0x190 [ 108.977078][ T6310] should_fail_ex.cold+0x5/0xa [ 108.977104][ T6310] ? prepare_alloc_pages+0x16d/0x5f0 [ 108.977143][ T6310] should_fail_alloc_page+0xeb/0x140 [ 108.977179][ T6310] prepare_alloc_pages+0x1f0/0x5f0 [ 108.977221][ T6310] __alloc_frozen_pages_noprof+0x193/0x2410 [ 108.977256][ T6310] ? is_bpf_text_address+0x94/0x1a0 [ 108.977289][ T6310] ? kernel_text_address+0x8d/0x100 [ 108.977322][ T6310] ? __kernel_text_address+0xd/0x30 [ 108.977360][ T6310] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 108.977390][ T6310] ? stack_depot_save_flags+0x479/0x9d0 [ 108.977422][ T6310] ? stack_depot_save_flags+0x479/0x9d0 [ 108.977460][ T6310] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 108.977497][ T6310] ? stack_depot_save_flags+0x479/0x9d0 [ 108.977543][ T6310] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 108.977583][ T6310] ? policy_nodemask+0xed/0x4f0 [ 108.977618][ T6310] alloc_pages_mpol+0x1fb/0x550 [ 108.977654][ T6310] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 108.977697][ T6310] alloc_pages_noprof+0x131/0x390 [ 108.977733][ T6310] kimage_alloc_pages+0x72/0x380 [ 108.977772][ T6310] kimage_alloc_control_pages+0x157/0xa20 [ 108.977820][ T6310] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 108.977861][ T6310] ? kasan_save_track+0x14/0x30 [ 108.977895][ T6310] do_kexec_load+0x275/0x810 [ 108.977937][ T6310] ? __pfx_do_kexec_load+0x10/0x10 [ 108.977980][ T6310] ? _copy_from_user+0x59/0xd0 [ 108.978013][ T6310] __x64_sys_kexec_load+0x1bf/0x230 [ 108.978056][ T6310] do_syscall_64+0x106/0xf80 [ 108.978095][ T6310] ? clear_bhb_loop+0x40/0x90 [ 108.978129][ T6310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.978156][ T6310] RIP: 0033:0x7f738f79bf79 [ 108.978180][ T6310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.978206][ T6310] RSP: 002b:00007f7390623028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 108.978233][ T6310] RAX: ffffffffffffffda RBX: 00007f738fa15fa0 RCX: 00007f738f79bf79 [ 108.978251][ T6310] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000200000000007 [ 108.978269][ T6310] RBP: 00007f738f8327e0 R08: 0000000000000000 R09: 0000000000000000 [ 108.978286][ T6310] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 108.978302][ T6310] R13: 00007f738fa16038 R14: 00007f738fa15fa0 R15: 00007ffe3e3b28c8 [ 108.978341][ T6310] [ 109.245278][ T6310] kexec: Could not allocate control_code_buffer [ 109.514384][ T6317] netlink: 28 bytes leftover after parsing attributes in process `syz.0.135'. [ 110.698583][ T6346] netlink: 'syz.3.147': attribute type 1 has an invalid length. [ 110.706575][ T6346] netlink: 322 bytes leftover after parsing attributes in process `syz.3.147'. [ 110.720638][ T6346] netlink: 'syz.3.147': attribute type 1 has an invalid length. [ 110.728635][ T6346] netlink: 322 bytes leftover after parsing attributes in process `syz.3.147'. [ 110.972404][ T6352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.148'. [ 113.123738][ T6396] random: crng reseeded on system resumption [ 113.219079][ T6399] Unrecognized hibernate image header format! [ 113.236838][ T6399] PM: hibernation: Image mismatch: architecture specific data [ 113.817664][ T6413] zswap: compressor  not available [ 114.030064][ T6426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.169'. [ 116.183645][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 116.192616][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 116.285889][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 116.300462][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 116.527306][ T6471] FAULT_INJECTION: forcing a failure. [ 116.527306][ T6471] name failslab, interval 1, probability 0, space 0, times 0 [ 116.548871][ T6471] CPU: 1 UID: 0 PID: 6471 Comm: syz.2.188 Not tainted syzkaller #0 PREEMPT(full) [ 116.548909][ T6471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 116.548926][ T6471] Call Trace: [ 116.548935][ T6471] [ 116.548945][ T6471] dump_stack_lvl+0x100/0x190 [ 116.548988][ T6471] should_fail_ex.cold+0x5/0xa [ 116.549019][ T6471] should_failslab+0xc2/0x120 [ 116.549053][ T6471] __kmalloc_cache_noprof+0x7a/0x6f0 [ 116.549101][ T6471] ? io_uring_setup.cold+0x6c/0x1cb9 [ 116.549148][ T6471] io_uring_setup.cold+0x6c/0x1cb9 [ 116.549192][ T6471] ? __pfx_io_uring_setup+0x10/0x10 [ 116.549230][ T6471] ? do_futex+0x192/0x350 [ 116.549262][ T6471] ? __pfx_do_futex+0x10/0x10 [ 116.549307][ T6471] ? xfd_validate_state+0x129/0x190 [ 116.549349][ T6471] __x64_sys_io_uring_setup+0xc2/0x170 [ 116.549387][ T6471] do_syscall_64+0x106/0xf80 [ 116.549426][ T6471] ? clear_bhb_loop+0x40/0x90 [ 116.549461][ T6471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.549489][ T6471] RIP: 0033:0x7fcad519bf79 [ 116.549512][ T6471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.549537][ T6471] RSP: 002b:00007fcad5fec028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 116.549563][ T6471] RAX: ffffffffffffffda RBX: 00007fcad5415fa0 RCX: 00007fcad519bf79 [ 116.549582][ T6471] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 116.549598][ T6471] RBP: 00007fcad52327e0 R08: 0000000000000000 R09: 0000000000000000 [ 116.549615][ T6471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.549636][ T6471] R13: 00007fcad5416038 R14: 00007fcad5415fa0 R15: 00007fff5b45a738 [ 116.549673][ T6471] [ 117.697271][ T6503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.197'. [ 119.754722][ T6534] FAULT_INJECTION: forcing a failure. [ 119.754722][ T6534] name failslab, interval 1, probability 0, space 0, times 0 [ 119.799572][ T6534] CPU: 1 UID: 0 PID: 6534 Comm: syz.0.210 Not tainted syzkaller #0 PREEMPT(full) [ 119.799613][ T6534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 119.799629][ T6534] Call Trace: [ 119.799640][ T6534] [ 119.799652][ T6534] dump_stack_lvl+0x100/0x190 [ 119.799703][ T6534] should_fail_ex.cold+0x5/0xa [ 119.799735][ T6534] should_failslab+0xc2/0x120 [ 119.799769][ T6534] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 119.799795][ T6534] ? security_file_alloc+0x34/0x2c0 [ 119.799831][ T6534] security_file_alloc+0x34/0x2c0 [ 119.799862][ T6534] init_file+0x95/0x480 [ 119.799899][ T6534] alloc_empty_file+0x73/0x1c0 [ 119.799938][ T6534] path_openat+0xe8/0x31a0 [ 119.799967][ T6534] ? kasan_save_stack+0x3f/0x50 [ 119.799994][ T6534] ? kasan_save_stack+0x30/0x50 [ 119.800021][ T6534] ? kasan_save_track+0x14/0x30 [ 119.800054][ T6534] ? __kasan_slab_alloc+0x89/0x90 [ 119.800083][ T6534] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 119.800110][ T6534] ? do_getname+0x35/0x390 [ 119.800149][ T6534] ? do_sys_openat2+0xc5/0x1e0 [ 119.800185][ T6534] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.800219][ T6534] ? __pfx_path_openat+0x10/0x10 [ 119.800264][ T6534] do_file_open+0x20e/0x430 [ 119.800298][ T6534] ? __pfx_do_file_open+0x10/0x10 [ 119.800356][ T6534] ? alloc_fd+0x476/0x790 [ 119.800389][ T6534] ? do_getname+0x191/0x390 [ 119.800429][ T6534] do_sys_openat2+0x10d/0x1e0 [ 119.800467][ T6534] ? __pfx_do_sys_openat2+0x10/0x10 [ 119.800507][ T6534] ? __do_sys_kcmp+0x36b/0xd70 [ 119.800552][ T6534] __x64_sys_openat+0x12d/0x210 [ 119.800592][ T6534] ? __pfx___x64_sys_openat+0x10/0x10 [ 119.800630][ T6534] ? xfd_validate_state+0x129/0x190 [ 119.800677][ T6534] do_syscall_64+0x106/0xf80 [ 119.800719][ T6534] ? clear_bhb_loop+0x40/0x90 [ 119.800753][ T6534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.800781][ T6534] RIP: 0033:0x7f738f75c84e [ 119.800816][ T6534] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 119.800844][ T6534] RSP: 002b:00007f7390622ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 119.800873][ T6534] RAX: ffffffffffffffda RBX: 00007f73906236c0 RCX: 00007f738f75c84e [ 119.800893][ T6534] RDX: 0000000000000002 RSI: 00007f7390622f90 RDI: ffffffffffffff9c [ 119.800911][ T6534] RBP: 00007f738f8327e0 R08: 0000000000000000 R09: 0000000000000000 [ 119.800928][ T6534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.800945][ T6534] R13: 00007f738fa16038 R14: 00007f738fa15fa0 R15: 00007ffe3e3b28c8 [ 119.800982][ T6534] [ 120.355700][ T6541] netlink: 350 bytes leftover after parsing attributes in process `syz.0.211'. [ 121.001125][ T6568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.222'. [ 121.317768][ T6576] netlink: 28 bytes leftover after parsing attributes in process `syz.1.225'. [ 121.358908][ T6576] veth0_macvtap: left promiscuous mode [ 123.140942][ T6615] FAULT_INJECTION: forcing a failure. [ 123.140942][ T6615] name failslab, interval 1, probability 0, space 0, times 0 [ 123.166560][ T6615] CPU: 1 UID: 0 PID: 6615 Comm: syz.2.238 Not tainted syzkaller #0 PREEMPT(full) [ 123.166600][ T6615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 123.166618][ T6615] Call Trace: [ 123.166627][ T6615] [ 123.166639][ T6615] dump_stack_lvl+0x100/0x190 [ 123.166691][ T6615] should_fail_ex.cold+0x5/0xa [ 123.166724][ T6615] should_failslab+0xc2/0x120 [ 123.166759][ T6615] __kvmalloc_node_noprof+0xfa/0xa00 [ 123.166789][ T6615] ? seq_read_iter+0x819/0x1270 [ 123.166824][ T6615] seq_read_iter+0x819/0x1270 [ 123.166859][ T6615] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 123.166900][ T6615] kernfs_fop_read_iter+0x46c/0x610 [ 123.166937][ T6615] copy_splice_read+0x4ba/0xb90 [ 123.166976][ T6615] ? __pfx_copy_splice_read+0x10/0x10 [ 123.167008][ T6615] ? look_up_lock_class+0x64/0x120 [ 123.167056][ T6615] ? lockdep_init_map_type+0x5c/0x250 [ 123.167087][ T6615] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 123.167118][ T6615] ? __pfx_copy_splice_read+0x10/0x10 [ 123.167146][ T6615] do_splice_read+0x285/0x370 [ 123.167178][ T6615] splice_direct_to_actor+0x2a1/0xa30 [ 123.167210][ T6615] ? __pfx_direct_splice_actor+0x10/0x10 [ 123.167251][ T6615] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 123.167291][ T6615] do_splice_direct+0x174/0x240 [ 123.167322][ T6615] ? __pfx_do_splice_direct+0x10/0x10 [ 123.167349][ T6615] ? common_file_perm+0x1ab/0x4f0 [ 123.167379][ T6615] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 123.167414][ T6615] ? rw_verify_area+0xce/0x6d0 [ 123.167460][ T6615] do_sendfile+0xadc/0xe20 [ 123.167494][ T6615] ? __pfx_do_sendfile+0x10/0x10 [ 123.167526][ T6615] ? __x64_sys_futex+0x34f/0x4d0 [ 123.167552][ T6615] ? __x64_sys_futex+0x358/0x4d0 [ 123.167583][ T6615] __x64_sys_sendfile64+0x1d8/0x220 [ 123.167615][ T6615] ? xfd_validate_state+0x129/0x190 [ 123.167649][ T6615] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 123.167695][ T6615] do_syscall_64+0x106/0xf80 [ 123.167735][ T6615] ? clear_bhb_loop+0x40/0x90 [ 123.167769][ T6615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.167798][ T6615] RIP: 0033:0x7fcad519bf79 [ 123.167821][ T6615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.167854][ T6615] RSP: 002b:00007fcad5fec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 123.167882][ T6615] RAX: ffffffffffffffda RBX: 00007fcad5415fa0 RCX: 00007fcad519bf79 [ 123.167901][ T6615] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 123.167917][ T6615] RBP: 00007fcad52327e0 R08: 0000000000000000 R09: 0000000000000000 [ 123.167935][ T6615] R10: 0000000002400000 R11: 0000000000000246 R12: 0000000000000000 [ 123.167952][ T6615] R13: 00007fcad5416038 R14: 00007fcad5415fa0 R15: 00007fff5b45a738 [ 123.167991][ T6615] [ 123.800443][ T6620] FAULT_INJECTION: forcing a failure. [ 123.800443][ T6620] name failslab, interval 1, probability 0, space 0, times 0 [ 123.825463][ T6620] CPU: 0 UID: 0 PID: 6620 Comm: syz.0.248 Not tainted syzkaller #0 PREEMPT(full) [ 123.825502][ T6620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 123.825518][ T6620] Call Trace: [ 123.825527][ T6620] [ 123.825538][ T6620] dump_stack_lvl+0x100/0x190 [ 123.825588][ T6620] should_fail_ex.cold+0x5/0xa [ 123.825619][ T6620] should_failslab+0xc2/0x120 [ 123.825654][ T6620] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 123.825679][ T6620] ? mqueue_alloc_inode+0x25/0x50 [ 123.825715][ T6620] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 123.825760][ T6620] ? __pfx_mqueue_alloc_inode+0x10/0x10 [ 123.825798][ T6620] mqueue_alloc_inode+0x25/0x50 [ 123.825837][ T6620] alloc_inode+0x68/0x250 [ 123.825875][ T6620] new_inode+0x22/0x1c0 [ 123.825915][ T6620] mqueue_get_inode+0x2e/0xe00 [ 123.825953][ T6620] ? sget_fc+0x801/0xc70 [ 123.825978][ T6620] ? __pfx_mqueue_fill_super+0x10/0x10 [ 123.826015][ T6620] mqueue_fill_super+0x14d/0x260 [ 123.826054][ T6620] get_tree_nodev+0xdd/0x190 [ 123.826082][ T6620] mqueue_get_tree+0xf1/0x130 [ 123.826116][ T6620] vfs_get_tree+0x92/0x320 [ 123.826155][ T6620] fc_mount_longterm+0x1a/0x270 [ 123.826199][ T6620] mq_init_ns+0x482/0x820 [ 123.826227][ T6620] copy_ipcs+0x3dd/0x7e0 [ 123.826256][ T6620] create_new_namespaces+0x20a/0xac0 [ 123.826295][ T6620] ? security_capable+0x80/0x260 [ 123.826336][ T6620] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 123.826380][ T6620] ksys_unshare+0x455/0xab0 [ 123.826410][ T6620] ? __pfx_ksys_unshare+0x10/0x10 [ 123.826439][ T6620] ? xfd_validate_state+0x129/0x190 [ 123.826485][ T6620] __x64_sys_unshare+0x31/0x40 [ 123.826513][ T6620] do_syscall_64+0x106/0xf80 [ 123.826551][ T6620] ? clear_bhb_loop+0x40/0x90 [ 123.826584][ T6620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.826613][ T6620] RIP: 0033:0x7f738f79bf79 [ 123.826633][ T6620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.826656][ T6620] RSP: 002b:00007f7390623028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 123.826682][ T6620] RAX: ffffffffffffffda RBX: 00007f738fa15fa0 RCX: 00007f738f79bf79 [ 123.826701][ T6620] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 123.826719][ T6620] RBP: 00007f738f8327e0 R08: 0000000000000000 R09: 0000000000000000 [ 123.826736][ T6620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.826752][ T6620] R13: 00007f738fa16038 R14: 00007f738fa15fa0 R15: 00007ffe3e3b28c8 [ 123.826788][ T6620] [ 126.468647][ T6659] netlink: 16 bytes leftover after parsing attributes in process `syz.2.253'. [ 126.793300][ T6664] netlink: 28 bytes leftover after parsing attributes in process `syz.1.255'. [ 126.851665][ T6659] netlink: 16 bytes leftover after parsing attributes in process `syz.2.253'. [ 127.212925][ T6679] netlink: 28 bytes leftover after parsing attributes in process `syz.0.262'. [ 127.479244][ T5820] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 127.479294][ T5820] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 127.494895][ T5820] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 127.494952][ T5820] Bluetooth: hci2: adv larger than maximum supported [ 127.503255][ T5820] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 127.510028][ T5820] Bluetooth: hci2: adv larger than maximum supported [ 127.517114][ T5820] Bluetooth: hci2: adv larger than maximum supported [ 127.523863][ T5820] Bluetooth: hci2: Malformed LE Event: 0x0d [ 127.553448][ T6691] FAULT_INJECTION: forcing a failure. [ 127.553448][ T6691] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 127.614955][ T6691] CPU: 0 UID: 0 PID: 6691 Comm: syz.1.267 Not tainted syzkaller #0 PREEMPT(full) [ 127.614998][ T6691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 127.615016][ T6691] Call Trace: [ 127.615025][ T6691] [ 127.615037][ T6691] dump_stack_lvl+0x100/0x190 [ 127.615082][ T6691] should_fail_ex.cold+0x5/0xa [ 127.615109][ T6691] ? prepare_alloc_pages+0x16d/0x5f0 [ 127.615150][ T6691] should_fail_alloc_page+0xeb/0x140 [ 127.615186][ T6691] prepare_alloc_pages+0x1f0/0x5f0 [ 127.615229][ T6691] __alloc_frozen_pages_noprof+0x193/0x2410 [ 127.615260][ T6691] ? folio_lock_anon_vma_read+0x348/0xe30 [ 127.615308][ T6691] ? folio_lock_anon_vma_read+0x348/0xe30 [ 127.615353][ T6691] ? __up_read+0x2c5/0x700 [ 127.615388][ T6691] ? __pfx___up_read+0x10/0x10 [ 127.615420][ T6691] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 127.615487][ T6691] __folio_alloc_noprof+0x13/0x2f0 [ 127.615515][ T6691] alloc_migration_target+0x1d7/0x640 [ 127.615555][ T6691] migrate_pages_batch+0x4f2/0x4530 [ 127.615603][ T6691] ? __pfx_alloc_migration_target+0x10/0x10 [ 127.615654][ T6691] ? walk_pgd_range+0x1115/0x1eb0 [ 127.615684][ T6691] ? __pfx_migrate_pages_batch+0x10/0x10 [ 127.615749][ T6691] migrate_pages_sync+0x12c/0x880 [ 127.615789][ T6691] ? __pfx_alloc_migration_target+0x10/0x10 [ 127.615831][ T6691] ? __pfx_migrate_pages_sync+0x10/0x10 [ 127.615864][ T6691] ? __pfx_queue_pages_test_walk+0x10/0x10 [ 127.615908][ T6691] ? walk_page_range_mm_unsafe+0x32c/0xad0 [ 127.615945][ T6691] migrate_pages+0x1a5b/0x2810 [ 127.615989][ T6691] ? __pfx_alloc_migration_target+0x10/0x10 [ 127.616035][ T6691] ? __pfx_migrate_pages+0x10/0x10 [ 127.616074][ T6691] ? queue_pages_range+0x11e/0x180 [ 127.616107][ T6691] ? __up_read+0x2c5/0x700 [ 127.616139][ T6691] ? __pfx___up_read+0x10/0x10 [ 127.616168][ T6691] ? do_migrate_pages+0x451/0x740 [ 127.616201][ T6691] ? do_migrate_pages+0x451/0x740 [ 127.616243][ T6691] do_migrate_pages+0x488/0x740 [ 127.616287][ T6691] ? __pfx_do_migrate_pages+0x10/0x10 [ 127.616327][ T6691] ? rcu_is_watching+0x12/0xc0 [ 127.616362][ T6691] ? get_task_mm+0xc2/0xf0 [ 127.616403][ T6691] ? security_capable+0xbd/0x260 [ 127.616448][ T6691] kernel_migrate_pages+0x560/0x700 [ 127.616483][ T6691] ? __pfx_kernel_migrate_pages+0x10/0x10 [ 127.616529][ T6691] __x64_sys_migrate_pages+0x96/0x100 [ 127.616571][ T6691] ? lockdep_hardirqs_on+0x78/0x100 [ 127.616613][ T6691] do_syscall_64+0x106/0xf80 [ 127.616653][ T6691] ? clear_bhb_loop+0x40/0x90 [ 127.616687][ T6691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.616715][ T6691] RIP: 0033:0x7f5ff6f9bf79 [ 127.616738][ T6691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.616764][ T6691] RSP: 002b:00007f5ff7f3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 127.616792][ T6691] RAX: ffffffffffffffda RBX: 00007f5ff7215fa0 RCX: 00007f5ff6f9bf79 [ 127.616811][ T6691] RDX: 0000200000000100 RSI: 000000000000000a RDI: 0000000000000000 [ 127.616829][ T6691] RBP: 00007f5ff70327e0 R08: 0000000000000000 R09: 0000000000000000 [ 127.616847][ T6691] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 127.616864][ T6691] R13: 00007f5ff7216038 R14: 00007f5ff7215fa0 R15: 00007fff1530f128 [ 127.616901][ T6691] [ 128.507153][ T6701] CIFS: VFS: Invalid SecurityFlags: [ 128.831079][ T6709] netlink: 302 bytes leftover after parsing attributes in process `syz.2.275'. [ 129.204270][ T6719] netlink: 342 bytes leftover after parsing attributes in process `syz.0.287'. [ 129.246409][ T6719] netlink: 342 bytes leftover after parsing attributes in process `syz.0.287'. [ 129.771610][ T6735] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 130.522924][ T6757] netlink: 334 bytes leftover after parsing attributes in process `syz.1.294'. [ 131.857359][ T6792] Zero length message leads to an empty skb [ 132.030287][ T6788] FAULT_INJECTION: forcing a failure. [ 132.030287][ T6788] name failslab, interval 1, probability 0, space 0, times 0 [ 132.068407][ T6788] CPU: 1 UID: 0 PID: 6788 Comm: syz.3.307 Not tainted syzkaller #0 PREEMPT(full) [ 132.068443][ T6788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 132.068459][ T6788] Call Trace: [ 132.068468][ T6788] [ 132.068478][ T6788] dump_stack_lvl+0x100/0x190 [ 132.068524][ T6788] should_fail_ex.cold+0x5/0xa [ 132.068555][ T6788] should_failslab+0xc2/0x120 [ 132.068590][ T6788] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 132.068619][ T6788] ? security_inode_alloc+0x3b/0x2c0 [ 132.068664][ T6788] ? lockdep_init_map_type+0x5c/0x250 [ 132.068698][ T6788] security_inode_alloc+0x3b/0x2c0 [ 132.068748][ T6788] inode_init_always_gfp+0xced/0x1040 [ 132.068785][ T6788] alloc_inode+0x8e/0x250 [ 132.068826][ T6788] path_from_stashed+0x25b/0x750 [ 132.068867][ T6788] ns_get_path+0x60/0x80 [ 132.068898][ T6788] proc_ns_get_link+0x121/0x230 [ 132.068934][ T6788] ? __pfx_proc_ns_get_link+0x10/0x10 [ 132.068974][ T6788] ? atime_needs_update+0x8b/0x6b0 [ 132.069017][ T6788] pick_link+0xd17/0x13c0 [ 132.069058][ T6788] ? __pfx_proc_ns_get_link+0x10/0x10 [ 132.069098][ T6788] step_into_slowpath+0x9ba/0xf90 [ 132.069149][ T6788] ? __pfx_step_into_slowpath+0x10/0x10 [ 132.069192][ T6788] ? find_held_lock+0x2b/0x80 [ 132.069241][ T6788] path_openat+0xf95/0x31a0 [ 132.069292][ T6788] ? __pfx_path_openat+0x10/0x10 [ 132.069337][ T6788] do_file_open+0x20e/0x430 [ 132.069371][ T6788] ? __pfx_do_file_open+0x10/0x10 [ 132.069428][ T6788] ? alloc_fd+0x476/0x790 [ 132.069461][ T6788] ? do_getname+0x191/0x390 [ 132.069501][ T6788] do_sys_openat2+0x10d/0x1e0 [ 132.069540][ T6788] ? __pfx_do_sys_openat2+0x10/0x10 [ 132.069582][ T6788] ? __fget_files+0x21f/0x3d0 [ 132.069618][ T6788] __x64_sys_openat+0x12d/0x210 [ 132.069657][ T6788] ? __pfx___x64_sys_openat+0x10/0x10 [ 132.069691][ T6788] ? xfd_validate_state+0x129/0x190 [ 132.069738][ T6788] do_syscall_64+0x106/0xf80 [ 132.069778][ T6788] ? clear_bhb_loop+0x40/0x90 [ 132.069812][ T6788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.069840][ T6788] RIP: 0033:0x7ff5a255c84e [ 132.069865][ T6788] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 132.069891][ T6788] RSP: 002b:00007ff5a33bdec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 132.069940][ T6788] RAX: ffffffffffffffda RBX: 00007ff5a33be6c0 RCX: 00007ff5a255c84e [ 132.069960][ T6788] RDX: 0000000000000002 RSI: 00007ff5a33bdf90 RDI: ffffffffffffff9c [ 132.069978][ T6788] RBP: 00007ff5a26327e0 R08: 0000000000000000 R09: 0000000000000000 [ 132.069996][ T6788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.070012][ T6788] R13: 00007ff5a2816038 R14: 00007ff5a2815fa0 R15: 00007ffef67f1d68 [ 132.070050][ T6788] [ 132.628765][ T6800] netlink: 'syz.1.320': attribute type 19 has an invalid length. [ 132.654420][ T6800] netlink: 334 bytes leftover after parsing attributes in process `syz.1.320'. [ 133.272746][ T6825] nbd: must specify at least one socket [ 133.322755][ T6827] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 135.713806][ T6871] zswap: compressor not available [ 136.127839][ C1] sd 0:0:1:0: [sda] tag#5180 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 136.138411][ C1] sd 0:0:1:0: [sda] tag#5180 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 136.404316][ T6904] netlink: 'syz.2.347': attribute type 11 has an invalid length. [ 136.889305][ T6911] NFSD: Failed to start, no listeners configured. [ 137.521861][ T6930] capability: warning: `syz.2.358' uses 32-bit capabilities (legacy support in use) [ 138.066005][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.072765][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.437899][ T6944] FAULT_INJECTION: forcing a failure. [ 138.437899][ T6944] name failslab, interval 1, probability 0, space 0, times 0 [ 138.484173][ T6944] CPU: 1 UID: 0 PID: 6944 Comm: syz.0.362 Not tainted syzkaller #0 PREEMPT(full) [ 138.484213][ T6944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 138.484230][ T6944] Call Trace: [ 138.484240][ T6944] [ 138.484251][ T6944] dump_stack_lvl+0x100/0x190 [ 138.484297][ T6944] should_fail_ex.cold+0x5/0xa [ 138.484328][ T6944] should_failslab+0xc2/0x120 [ 138.484362][ T6944] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 138.484390][ T6944] ? security_file_alloc+0x34/0x2c0 [ 138.484430][ T6944] security_file_alloc+0x34/0x2c0 [ 138.484462][ T6944] init_file+0x95/0x480 [ 138.484498][ T6944] alloc_empty_file+0x73/0x1c0 [ 138.484536][ T6944] dentry_open+0x46/0xd0 [ 138.484581][ T6944] acct_on+0x189/0x9e0 [ 138.484612][ T6944] ? __pfx_acct_on+0x10/0x10 [ 138.484642][ T6944] ? bpf_lsm_capable+0x9/0x10 [ 138.484677][ T6944] ? security_capable+0x80/0x260 [ 138.484722][ T6944] __x64_sys_acct+0x81/0x1e0 [ 138.484753][ T6944] ? lockdep_hardirqs_on+0x78/0x100 [ 138.484793][ T6944] do_syscall_64+0x106/0xf80 [ 138.484832][ T6944] ? clear_bhb_loop+0x40/0x90 [ 138.484867][ T6944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.484895][ T6944] RIP: 0033:0x7f738f79bf79 [ 138.484918][ T6944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.484945][ T6944] RSP: 002b:00007f7390623028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 138.484972][ T6944] RAX: ffffffffffffffda RBX: 00007f738fa15fa0 RCX: 00007f738f79bf79 [ 138.484991][ T6944] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 138.485008][ T6944] RBP: 00007f738f8327e0 R08: 0000000000000000 R09: 0000000000000000 [ 138.485026][ T6944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.485042][ T6944] R13: 00007f738fa16038 R14: 00007f738fa15fa0 R15: 00007ffe3e3b28c8 [ 138.485081][ T6944] [ 141.081984][ T7015] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 141.122799][ T7005] zswap: compressor not available [ 141.230178][ T7019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.391'. [ 141.239903][ T7017] netlink: 334 bytes leftover after parsing attributes in process `syz.0.390'. [ 141.241682][ T7019] netlink: 354 bytes leftover after parsing attributes in process `syz.1.391'. [ 141.473930][ T7029] futex_wake_op: syz.0.395 tries to shift op by -2048; fix this program [ 141.509295][ T7029] 0x000000000000-0x000000020000 : "" [ 141.538540][ T7029] ftl_cs: FTL header not found. [ 141.596081][ T7033] ERROR: Out of memory at tomoyo_memory_ok. [ 142.530896][ T7054] zswap: compressor not available [ 142.706420][ T7063] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 142.993058][ T7069] netlink: 342 bytes leftover after parsing attributes in process `syz.1.411'. [ 144.160876][ T7099] netlink: 306 bytes leftover after parsing attributes in process `syz.2.421'. [ 146.773285][ T7151] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 146.780063][ T7151] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 147.143128][ T7157] [U]  [ 147.146160][ T7157] [U] [ 147.148882][ T7157] [U] [ 147.151598][ T7157] [U] [ 147.168658][ T7157] [U] [ 147.171412][ T7157] [U] [ 147.174137][ T7157] [U] [ 147.176851][ T7157] [U] [ 147.189400][ T7157] [U] [ 147.192156][ T7157] [U] [ 147.194874][ T7157] [U] [ 147.197594][ T7157] [U] [ 147.221602][ T7157] [U] [ 147.224357][ T7157] [U] [ 147.227076][ T7157] [U] [ 147.229794][ T7157] [U] [ 147.256408][ T7157] [U] [ 147.259163][ T7157] [U] [ 147.261880][ T7157] [U] [ 147.264587][ T7157] [U] [ 147.278685][ T7157] [U] [ 147.281439][ T7157] [U] [ 147.284156][ T7157] [U] [ 147.286870][ T7157] [U] [ 147.290430][ T7157] [U] [ 147.293165][ T7157] [U] [ 147.295881][ T7157] [U] [ 147.298590][ T7157] [U] [ 147.318619][ T7157] [U] [ 147.321379][ T7157] [U] [ 147.324098][ T7157] [U] [ 147.326814][ T7157] [U] [ 147.348780][ T7157] [U] [ 147.351537][ T7157] [U] [ 147.354246][ T7157] [U] [ 147.356950][ T7157] [U] [ 147.368637][ T7157] [U] [ 147.371388][ T7157] [U] [ 147.374105][ T7157] [U] [ 147.376819][ T7157] [U] [ 147.390486][ T7157] [U] [ 147.393241][ T7157] [U] [ 147.395970][ T7157] [U] [ 147.398695][ T7157] [U] [ 147.419872][ T7157] [U] [ 147.422628][ T7157] [U] [ 147.425377][ T7157] [U] [ 147.428097][ T7157] [U] [ 147.448753][ T7157] [U] [ 147.451505][ T7157] [U] [ 147.454231][ T7157] [U] [ 147.456958][ T7157] [U] [ 147.499908][ T7157] [U] [ 147.502677][ T7157] [U] [ 147.505490][ T7157] [U] [ 147.508218][ T7157] [U] [ 147.539134][ T7171] netlink: 28 bytes leftover after parsing attributes in process `syz.3.447'. [ 147.548607][ T7157] [U] [ 147.551364][ T7157] [U] [ 147.554093][ T7157] [U] [ 147.556810][ T7157] [U] [ 147.621072][ T7157] [U] [ 147.623824][ T7157] [U] [ 147.626549][ T7157] [U] [ 147.629279][ T7157] [U] [ 147.648627][ T7157] [U] [ 147.651389][ T7157] [U] [ 147.654114][ T7157] [U] [ 147.656834][ T7157] [U] [ 147.679228][ T7157] [U] [ 147.681992][ T7157] [U] [ 147.684716][ T7157] [U] [ 147.687432][ T7157] [U] [ 147.713589][ T7157] [U] [ 147.716356][ T7157] [U] [ 147.719075][ T7157] [U] [ 147.721798][ T7157] [U] [ 147.821185][ T7157] [U] [ 147.823943][ T7157] [U] [ 147.826659][ T7157] [U] [ 147.829377][ T7157] [U] [ 147.878644][ T7157] [U] [ 147.881408][ T7157] [U] [ 147.884133][ T7157] [U] [ 147.886850][ T7157] [U] [ 147.899563][ T7157] [U] [ 148.131052][ T7177] netlink: 330 bytes leftover after parsing attributes in process `syz.2.449'. [ 148.722718][ T7190] netlink: 350 bytes leftover after parsing attributes in process `syz.1.452'. [ 148.894700][ T7194] netlink: 342 bytes leftover after parsing attributes in process `syz.2.454'. [ 149.450535][ T7217] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 150.547252][ T7240] futex_wake_op: syz.0.472 tries to shift op by -2048; fix this program [ 150.557568][ T7240] 0x9600000000000000-0x9700000000000002 : "" [ 150.565855][ T7240] mtd: partition "" is out of reach -- disabled [ 150.582185][ T7240] ftl_cs: FTL header not found. [ 150.759367][ T7241] ERROR: Out of memory at tomoyo_memory_ok. [ 150.954556][ T7238] Invalid ELF header magic: != ELF [ 151.672093][ T7261] Invalid ELF header magic: != ELF [ 151.827806][ T7265] FAULT_INJECTION: forcing a failure. [ 151.827806][ T7265] name failslab, interval 1, probability 0, space 0, times 0 [ 151.858887][ T7265] CPU: 1 UID: 0 PID: 7265 Comm: syz.2.481 Tainted: G L syzkaller #0 PREEMPT(full) [ 151.858942][ T7265] Tainted: [L]=SOFTLOCKUP [ 151.858953][ T7265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 151.858970][ T7265] Call Trace: [ 151.858979][ T7265] [ 151.858988][ T7265] dump_stack_lvl+0x100/0x190 [ 151.859033][ T7265] should_fail_ex.cold+0x5/0xa [ 151.859063][ T7265] should_failslab+0xc2/0x120 [ 151.859096][ T7265] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 151.859123][ T7265] ? proc_alloc_inode+0x25/0x200 [ 151.859154][ T7265] ? d_alloc_parallel+0x864/0x14e0 [ 151.859193][ T7265] ? __pfx_proc_alloc_inode+0x10/0x10 [ 151.859226][ T7265] proc_alloc_inode+0x25/0x200 [ 151.859257][ T7265] alloc_inode+0x68/0x250 [ 151.859291][ T7265] new_inode+0x22/0x1c0 [ 151.859327][ T7265] proc_get_inode+0x1d/0x780 [ 151.859361][ T7265] proc_lookup_de+0x236/0x360 [ 151.859402][ T7265] proc_lookup+0xcf/0x110 [ 151.859438][ T7265] lookup_open.isra.0+0x631/0x11b0 [ 151.859482][ T7265] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 151.859538][ T7265] ? mnt_get_write_access+0x1e9/0x2f0 [ 151.859577][ T7265] path_openat+0xa98/0x31a0 [ 151.859614][ T7265] ? __pfx_path_openat+0x10/0x10 [ 151.859653][ T7265] do_file_open+0x20e/0x430 [ 151.859682][ T7265] ? __pfx_do_file_open+0x10/0x10 [ 151.859722][ T7265] ? __pfx_kfree_link+0x10/0x10 [ 151.859768][ T7265] ? alloc_fd+0x476/0x790 [ 151.859798][ T7265] ? do_getname+0x191/0x390 [ 151.859834][ T7265] do_sys_openat2+0x10d/0x1e0 [ 151.859869][ T7265] ? __pfx_do_sys_openat2+0x10/0x10 [ 151.859907][ T7265] ? __fget_files+0x21f/0x3d0 [ 151.859945][ T7265] __x64_sys_openat+0x12d/0x210 [ 151.859982][ T7265] ? __pfx___x64_sys_openat+0x10/0x10 [ 151.860017][ T7265] ? xfd_validate_state+0x129/0x190 [ 151.860060][ T7265] do_syscall_64+0x106/0xf80 [ 151.860096][ T7265] ? clear_bhb_loop+0x40/0x90 [ 151.860127][ T7265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.860152][ T7265] RIP: 0033:0x7fcad519bf79 [ 151.860174][ T7265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.860197][ T7265] RSP: 002b:00007fcad5fec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 151.860222][ T7265] RAX: ffffffffffffffda RBX: 00007fcad5415fa0 RCX: 00007fcad519bf79 [ 151.860239][ T7265] RDX: 000000000004a801 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 151.860255][ T7265] RBP: 00007fcad52327e0 R08: 0000000000000000 R09: 0000000000000000 [ 151.860270][ T7265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.860285][ T7265] R13: 00007fcad5416038 R14: 00007fcad5415fa0 R15: 00007fff5b45a738 [ 151.860319][ T7265] [ 153.194222][ T7294] netlink: 342 bytes leftover after parsing attributes in process `syz.0.492'. [ 154.000864][ T7301] block nbd8: shutting down sockets [ 156.364291][ T7354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.514'. [ 156.940073][ T7370] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 157.536756][ T7381] netlink: 28 bytes leftover after parsing attributes in process `syz.2.520'. [ 157.577258][ T7381] openvswitch: netlink: IP tunnel dst address not specified [ 157.804150][ T7387] netlink: 342 bytes leftover after parsing attributes in process `syz.2.521'. [ 159.601737][ T7439] Invalid ELF header magic: != ELF [ 162.080526][ T7482] zswap: compressor not available [ 162.503805][ T7497] syz.2.557 uses obsolete (PF_INET,SOCK_PACKET) [ 162.527702][ T7498] FAULT_INJECTION: forcing a failure. [ 162.527702][ T7498] name failslab, interval 1, probability 0, space 0, times 0 [ 162.540613][ T7498] CPU: 1 UID: 0 PID: 7498 Comm: syz.1.558 Tainted: G L syzkaller #0 PREEMPT(full) [ 162.540658][ T7498] Tainted: [L]=SOFTLOCKUP [ 162.540667][ T7498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 162.540684][ T7498] Call Trace: [ 162.540693][ T7498] [ 162.540703][ T7498] dump_stack_lvl+0x100/0x190 [ 162.540748][ T7498] should_fail_ex.cold+0x5/0xa [ 162.540781][ T7498] should_failslab+0xc2/0x120 [ 162.540815][ T7498] __kvmalloc_node_noprof+0xfa/0xa00 [ 162.540844][ T7498] ? traverse.part.0.constprop.0+0x397/0x650 [ 162.540882][ T7498] traverse.part.0.constprop.0+0x397/0x650 [ 162.540923][ T7498] ? find_held_lock+0x2b/0x80 [ 162.540962][ T7498] ? aa_file_perm+0x268/0x1530 [ 162.541005][ T7498] seq_read_iter+0x93f/0x1270 [ 162.541047][ T7498] seq_read+0x33b/0x4c0 [ 162.541073][ T7498] ? __pfx_seq_read+0x10/0x10 [ 162.541099][ T7498] ? futex_hash+0x2c5/0x380 [ 162.541159][ T7498] ? __pfx_seq_read+0x10/0x10 [ 162.541184][ T7498] proc_reg_read+0x240/0x330 [ 162.541222][ T7498] ? __pfx_proc_reg_read+0x10/0x10 [ 162.541262][ T7498] vfs_read+0x1e4/0xb30 [ 162.541295][ T7498] ? __pfx_vfs_read+0x10/0x10 [ 162.541319][ T7498] ? find_held_lock+0x2b/0x80 [ 162.541354][ T7498] ? __fget_files+0x215/0x3d0 [ 162.541381][ T7498] ? __fget_files+0x215/0x3d0 [ 162.541415][ T7498] ? __fget_files+0x21f/0x3d0 [ 162.541449][ T7498] __x64_sys_pread64+0x1eb/0x250 [ 162.541478][ T7498] ? __pfx___x64_sys_pread64+0x10/0x10 [ 162.541517][ T7498] do_syscall_64+0x106/0xf80 [ 162.541557][ T7498] ? clear_bhb_loop+0x40/0x90 [ 162.541592][ T7498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.541620][ T7498] RIP: 0033:0x7f5ff6f9bf79 [ 162.541642][ T7498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.541669][ T7498] RSP: 002b:00007f5ff7f3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 162.541695][ T7498] RAX: ffffffffffffffda RBX: 00007f5ff7215fa0 RCX: 00007f5ff6f9bf79 [ 162.541714][ T7498] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 162.541731][ T7498] RBP: 00007f5ff70327e0 R08: 0000000000000000 R09: 0000000000000000 [ 162.541749][ T7498] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000000 [ 162.541766][ T7498] R13: 00007f5ff7216038 R14: 00007f5ff7215fa0 R15: 00007fff1530f128 [ 162.541804][ T7498] [ 163.341994][ T7509] netlink: 342 bytes leftover after parsing attributes in process `syz.3.563'. [ 164.811461][ T7544] netlink: 334 bytes leftover after parsing attributes in process `syz.3.576'. [ 167.158879][ T7599] FAULT_INJECTION: forcing a failure. [ 167.158879][ T7599] name failslab, interval 1, probability 0, space 0, times 0 [ 167.213573][ T7599] CPU: 1 UID: 0 PID: 7599 Comm: syz.1.598 Tainted: G L syzkaller #0 PREEMPT(full) [ 167.213627][ T7599] Tainted: [L]=SOFTLOCKUP [ 167.213637][ T7599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 167.213655][ T7599] Call Trace: [ 167.213666][ T7599] [ 167.213676][ T7599] dump_stack_lvl+0x100/0x190 [ 167.213723][ T7599] should_fail_ex.cold+0x5/0xa [ 167.213755][ T7599] should_failslab+0xc2/0x120 [ 167.213790][ T7599] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 167.213817][ T7599] ? ptlock_alloc+0x1f/0x70 [ 167.213865][ T7599] ptlock_alloc+0x1f/0x70 [ 167.213906][ T7599] pte_alloc_one+0x84/0x3e0 [ 167.213950][ T7599] __pte_alloc+0x6d/0x3f0 [ 167.213983][ T7599] ? __pfx___pte_alloc+0x10/0x10 [ 167.214018][ T7599] ? do_raw_spin_lock+0x128/0x260 [ 167.214050][ T7599] ? find_held_lock+0x2b/0x80 [ 167.214090][ T7599] do_anonymous_page+0x13a2/0x1f40 [ 167.214134][ T7599] ? do_raw_spin_unlock+0x145/0x1e0 [ 167.214168][ T7599] ? _raw_spin_unlock+0x28/0x50 [ 167.214205][ T7599] ? __pmd_alloc+0x6aa/0x9c0 [ 167.214244][ T7599] __handle_mm_fault+0x1d3a/0x2b50 [ 167.214293][ T7599] ? mt_find+0x45e/0x8e0 [ 167.214320][ T7599] ? __pfx___handle_mm_fault+0x10/0x10 [ 167.214361][ T7599] ? __pfx_mt_find+0x10/0x10 [ 167.214415][ T7599] handle_mm_fault+0x36d/0xa20 [ 167.214466][ T7599] __get_user_pages+0xf9c/0x34d0 [ 167.214516][ T7599] ? __pfx___get_user_pages+0x10/0x10 [ 167.214567][ T7599] populate_vma_page_range+0x267/0x3f0 [ 167.214615][ T7599] ? __pfx_populate_vma_page_range+0x10/0x10 [ 167.214653][ T7599] ? __pfx_find_vma_intersection+0x10/0x10 [ 167.214691][ T7599] ? do_mmap+0x93f/0x12f0 [ 167.214731][ T7599] __mm_populate+0x107/0x3a0 [ 167.214771][ T7599] ? __pfx___mm_populate+0x10/0x10 [ 167.214811][ T7599] ? up_write+0x290/0x4f0 [ 167.214846][ T7599] vm_mmap_pgoff+0x37f/0x470 [ 167.214887][ T7599] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 167.214931][ T7599] ? __x64_sys_futex+0x34f/0x4d0 [ 167.214957][ T7599] ? __x64_sys_futex+0x358/0x4d0 [ 167.214989][ T7599] ksys_mmap_pgoff+0x7d/0x5b0 [ 167.215023][ T7599] __x64_sys_mmap+0x125/0x190 [ 167.215060][ T7599] do_syscall_64+0x106/0xf80 [ 167.215093][ T7599] ? clear_bhb_loop+0x40/0x90 [ 167.215122][ T7599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.215146][ T7599] RIP: 0033:0x7f5ff6f9bf79 [ 167.215166][ T7599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.215194][ T7599] RSP: 002b:00007f5ff7f3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 167.215220][ T7599] RAX: ffffffffffffffda RBX: 00007f5ff7215fa0 RCX: 00007f5ff6f9bf79 [ 167.215239][ T7599] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 167.215257][ T7599] RBP: 00007f5ff70327e0 R08: ffffffffffffffff R09: 0000000000008000 [ 167.215274][ T7599] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 167.215291][ T7599] R13: 00007f5ff7216038 R14: 00007f5ff7215fa0 R15: 00007fff1530f128 [ 167.215329][ T7599] [ 167.940275][ T7606] nbd: socks must be embedded in a SOCK_ITEM attr [ 167.952618][ T7606] block nbd0: shutting down sockets [ 171.147174][ T7660] netlink: 28 bytes leftover after parsing attributes in process `syz.3.621'. [ 171.709738][ T7679] mmap: syz.2.626 (7679) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 175.253688][ T7754] netlink: 342 bytes leftover after parsing attributes in process `syz.1.657'. [ 176.616546][ T7788] FAULT_INJECTION: forcing a failure. [ 176.616546][ T7788] name failslab, interval 1, probability 0, space 0, times 0 [ 176.650510][ T7788] CPU: 1 UID: 0 PID: 7788 Comm: syz.3.669 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.650560][ T7788] Tainted: [L]=SOFTLOCKUP [ 176.650571][ T7788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 176.650588][ T7788] Call Trace: [ 176.650597][ T7788] [ 176.650609][ T7788] dump_stack_lvl+0x100/0x190 [ 176.650655][ T7788] should_fail_ex.cold+0x5/0xa [ 176.650687][ T7788] should_failslab+0xc2/0x120 [ 176.650721][ T7788] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 176.650749][ T7788] ? __kernfs_new_node+0xd2/0x960 [ 176.650793][ T7788] __kernfs_new_node+0xd2/0x960 [ 176.650833][ T7788] ? __pfx___kernfs_new_node+0x10/0x10 [ 176.650879][ T7788] ? find_held_lock+0x2b/0x80 [ 176.650915][ T7788] ? kernfs_root+0xee/0x2a0 [ 176.650948][ T7788] ? kernfs_root+0xee/0x2a0 [ 176.650991][ T7788] kernfs_new_node+0x11b/0x1a0 [ 176.651037][ T7788] __kernfs_create_file+0x53/0x350 [ 176.651071][ T7788] sysfs_add_file_mode_ns+0x207/0x3c0 [ 176.651115][ T7788] internal_create_group+0x593/0xf40 [ 176.651162][ T7788] ? __pfx_internal_create_group+0x10/0x10 [ 176.651214][ T7788] ? kernfs_create_link+0x1bd/0x240 [ 176.651250][ T7788] internal_create_groups+0x9d/0x150 [ 176.651293][ T7788] device_add+0x71a/0x1950 [ 176.651323][ T7788] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 176.651361][ T7788] ? __pfx_device_add+0x10/0x10 [ 176.651389][ T7788] ? lockdep_init_map_type+0x5c/0x250 [ 176.651419][ T7788] ? __init_waitqueue_head+0xca/0x150 [ 176.651463][ T7788] netdev_register_kobject+0x1a9/0x3d0 [ 176.651501][ T7788] register_netdevice+0x12e0/0x2210 [ 176.651554][ T7788] ? __pfx_register_netdevice+0x10/0x10 [ 176.651607][ T7788] ? __pfx_loopback_net_init+0x10/0x10 [ 176.651647][ T7788] register_netdev+0x34/0x50 [ 176.651688][ T7788] loopback_net_init+0x7a/0x170 [ 176.651727][ T7788] ? __pfx_loopback_net_init+0x10/0x10 [ 176.651764][ T7788] ops_init+0x1e2/0x5f0 [ 176.651810][ T7788] setup_net+0x118/0x3a0 [ 176.651853][ T7788] ? __pfx_setup_net+0x10/0x10 [ 176.651892][ T7788] ? lockdep_init_map_type+0x5c/0x250 [ 176.651922][ T7788] ? mutex_init_lockep+0x110/0x150 [ 176.651957][ T7788] copy_net_ns+0x46f/0x7c0 [ 176.651988][ T7788] create_new_namespaces+0x3ea/0xac0 [ 176.652037][ T7788] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 176.652082][ T7788] ksys_unshare+0x455/0xab0 [ 176.652115][ T7788] ? __pfx_ksys_unshare+0x10/0x10 [ 176.652143][ T7788] ? xfd_validate_state+0x129/0x190 [ 176.652189][ T7788] __x64_sys_unshare+0x31/0x40 [ 176.652230][ T7788] do_syscall_64+0x106/0xf80 [ 176.652271][ T7788] ? clear_bhb_loop+0x40/0x90 [ 176.652307][ T7788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.652336][ T7788] RIP: 0033:0x7ff5a259bf79 [ 176.652360][ T7788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.652387][ T7788] RSP: 002b:00007ff5a33be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 176.652413][ T7788] RAX: ffffffffffffffda RBX: 00007ff5a2815fa0 RCX: 00007ff5a259bf79 [ 176.652432][ T7788] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 176.652448][ T7788] RBP: 00007ff5a26327e0 R08: 0000000000000000 R09: 0000000000000000 [ 176.652465][ T7788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.652481][ T7788] R13: 00007ff5a2816038 R14: 00007ff5a2815fa0 R15: 00007ffef67f1d68 [ 176.652519][ T7788] [ 177.117452][ T7791] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 177.944396][ T7808] netlink: 'syz.0.675': attribute type 1 has an invalid length. [ 177.970478][ T7810] futex_wake_op: syz.1.677 tries to shift op by -2048; fix this program [ 178.052677][ T7812] size and base must be multiples of 4 kiB [ 178.096340][ T7812] CPU: 1 UID: 0 PID: 7812 Comm: syz.1.677 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.096386][ T7812] Tainted: [L]=SOFTLOCKUP [ 178.096396][ T7812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 178.096410][ T7812] Call Trace: [ 178.096419][ T7812] [ 178.096429][ T7812] dump_stack_lvl+0x100/0x190 [ 178.096471][ T7812] mtrr_add.cold+0x74/0x87 [ 178.096499][ T7812] mtrr_ioctl+0x25a/0xcf0 [ 178.096532][ T7812] ? __pfx_mtrr_ioctl+0x10/0x10 [ 178.096570][ T7812] ? find_held_lock+0x2b/0x80 [ 178.096617][ T7812] ? __fget_files+0x21f/0x3d0 [ 178.096646][ T7812] ? __pfx_mtrr_ioctl+0x10/0x10 [ 178.096677][ T7812] proc_reg_unlocked_ioctl+0x229/0x320 [ 178.096716][ T7812] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 178.096758][ T7812] __x64_sys_ioctl+0x18e/0x210 [ 178.096803][ T7812] do_syscall_64+0x106/0xf80 [ 178.096843][ T7812] ? clear_bhb_loop+0x40/0x90 [ 178.096876][ T7812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.096903][ T7812] RIP: 0033:0x7f5ff6f9bf79 [ 178.096926][ T7812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.096951][ T7812] RSP: 002b:00007f5ff7f1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 178.096977][ T7812] RAX: ffffffffffffffda RBX: 00007f5ff7216090 RCX: 00007f5ff6f9bf79 [ 178.096996][ T7812] RDX: 0000000000000000 RSI: 0000000040104d01 RDI: 0000000000000000 [ 178.097013][ T7812] RBP: 00007f5ff70327e0 R08: 0000000000000000 R09: 0000000000000000 [ 178.097029][ T7812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.097045][ T7812] R13: 00007f5ff7216128 R14: 00007f5ff7216090 R15: 00007fff1530f128 [ 178.097081][ T7812] [ 178.969448][ T7827] netlink: 16 bytes leftover after parsing attributes in process `syz.1.683'. [ 178.995888][ T7827] dummy0: entered promiscuous mode [ 179.001471][ T7827] dummy0: entered allmulticast mode [ 180.095803][ T7844] FAULT_INJECTION: forcing a failure. [ 180.095803][ T7844] name failslab, interval 1, probability 0, space 0, times 0 [ 180.109450][ T7844] CPU: 1 UID: 0 PID: 7844 Comm: syz.0.688 Tainted: G L syzkaller #0 PREEMPT(full) [ 180.109496][ T7844] Tainted: [L]=SOFTLOCKUP [ 180.109506][ T7844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 180.109524][ T7844] Call Trace: [ 180.109533][ T7844] [ 180.109543][ T7844] dump_stack_lvl+0x100/0x190 [ 180.109587][ T7844] should_fail_ex.cold+0x5/0xa [ 180.109619][ T7844] should_failslab+0xc2/0x120 [ 180.109653][ T7844] __kmalloc_cache_noprof+0x7a/0x6f0 [ 180.109695][ T7844] ? snd_pcm_oss_change_params_locked+0x211/0x39f0 [ 180.109738][ T7844] snd_pcm_oss_change_params_locked+0x211/0x39f0 [ 180.109775][ T7844] ? rcu_is_watching+0x12/0xc0 [ 180.109809][ T7844] ? trace_contention_end+0xd6/0x110 [ 180.109841][ T7844] ? __mutex_lock+0x26a/0x1b90 [ 180.109885][ T7844] ? snd_pcm_oss_sync+0x243/0x840 [ 180.109917][ T7844] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 180.109956][ T7844] ? __pfx___mutex_lock+0x10/0x10 [ 180.110011][ T7844] ? __fsnotify_parent+0x2b4/0xca0 [ 180.110053][ T7844] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 180.110090][ T7844] snd_pcm_oss_sync+0x265/0x840 [ 180.110129][ T7844] snd_pcm_oss_release+0x238/0x300 [ 180.110163][ T7844] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 180.110197][ T7844] __fput+0x3ff/0xb40 [ 180.110239][ T7844] task_work_run+0x150/0x240 [ 180.110287][ T7844] ? __pfx_task_work_run+0x10/0x10 [ 180.110334][ T7844] exit_to_user_mode_loop+0x100/0x4a0 [ 180.110363][ T7844] ? rcu_is_watching+0x12/0xc0 [ 180.110403][ T7844] do_syscall_64+0x668/0xf80 [ 180.110442][ T7844] ? clear_bhb_loop+0x40/0x90 [ 180.110477][ T7844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.110505][ T7844] RIP: 0033:0x7f738f79bf79 [ 180.110528][ T7844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.110554][ T7844] RSP: 002b:00007f7390623028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 180.110581][ T7844] RAX: 0000000000000000 RBX: 00007f738fa15fa0 RCX: 00007f738f79bf79 [ 180.110598][ T7844] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 180.110614][ T7844] RBP: 00007f738f8327e0 R08: 0000000000000000 R09: 0000000000000000 [ 180.110630][ T7844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.110646][ T7844] R13: 00007f738fa16038 R14: 00007f738fa15fa0 R15: 00007ffe3e3b28c8 [ 180.110683][ T7844] [ 180.624319][ T7854] netlink: 354 bytes leftover after parsing attributes in process `syz.0.691'. [ 182.512179][ T7891] netlink: 74 bytes leftover after parsing attributes in process `syz.1.705'. [ 182.997450][ T7904] futex_wake_op: syz.0.709 tries to shift op by -2048; fix this program [ 183.101442][ T7907] size and base must be multiples of 4 kiB [ 183.118212][ T7907] CPU: 0 UID: 0 PID: 7907 Comm: syz.0.709 Tainted: G L syzkaller #0 PREEMPT(full) [ 183.118255][ T7907] Tainted: [L]=SOFTLOCKUP [ 183.118265][ T7907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 183.118285][ T7907] Call Trace: [ 183.118294][ T7907] [ 183.118303][ T7907] dump_stack_lvl+0x100/0x190 [ 183.118347][ T7907] mtrr_add.cold+0x74/0x87 [ 183.118378][ T7907] mtrr_ioctl+0x25a/0xcf0 [ 183.118411][ T7907] ? __pfx_mtrr_ioctl+0x10/0x10 [ 183.118450][ T7907] ? find_held_lock+0x2b/0x80 [ 183.118498][ T7907] ? __fget_files+0x21f/0x3d0 [ 183.118526][ T7907] ? __pfx_mtrr_ioctl+0x10/0x10 [ 183.118555][ T7907] proc_reg_unlocked_ioctl+0x229/0x320 [ 183.118593][ T7907] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 183.118634][ T7907] __x64_sys_ioctl+0x18e/0x210 [ 183.118678][ T7907] do_syscall_64+0x106/0xf80 [ 183.118717][ T7907] ? clear_bhb_loop+0x40/0x90 [ 183.118752][ T7907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.118780][ T7907] RIP: 0033:0x7f738f79bf79 [ 183.118816][ T7907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.118843][ T7907] RSP: 002b:00007f7390602028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 183.118870][ T7907] RAX: ffffffffffffffda RBX: 00007f738fa16090 RCX: 00007f738f79bf79 [ 183.118889][ T7907] RDX: 0000000000000000 RSI: 0000000040104d01 RDI: 0000000000000000 [ 183.118905][ T7907] RBP: 00007f738f8327e0 R08: 0000000000000000 R09: 0000000000000000 [ 183.118922][ T7907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.118939][ T7907] R13: 00007f738fa16128 R14: 00007f738fa16090 R15: 00007ffe3e3b28c8 [ 183.118976][ T7907] [ 183.401940][ T7914] netlink: 114 bytes leftover after parsing attributes in process `syz.2.713'. [ 183.551744][ T7918] netlink: 'syz.2.714': attribute type 1 has an invalid length. [ 185.389768][ T7965] netlink: 25 bytes leftover after parsing attributes in process `syz.1.730'. [ 185.399136][ T7954] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 185.435960][ T7954] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 185.439611][ T7967] netlink: 342 bytes leftover after parsing attributes in process `syz.0.729'. [ 185.486269][ T7954] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 185.514204][ T7954] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 185.528483][ T7954] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 185.555753][ T7954] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 185.577431][ T7954] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 185.604439][ T7954] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 185.668225][ T7954] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 185.690687][ T7975] FAULT_INJECTION: forcing a failure. [ 185.690687][ T7975] name failslab, interval 1, probability 0, space 0, times 0 [ 185.725044][ T7954] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 185.740747][ T7954] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 185.741736][ T7975] CPU: 0 UID: 0 PID: 7975 Comm: syz.0.732 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.741778][ T7975] Tainted: [L]=SOFTLOCKUP [ 185.741788][ T7975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 185.741804][ T7975] Call Trace: [ 185.741812][ T7975] [ 185.741822][ T7975] dump_stack_lvl+0x100/0x190 [ 185.741866][ T7975] should_fail_ex.cold+0x5/0xa [ 185.741895][ T7975] ? tomoyo_init_log+0x1224/0x20c0 [ 185.741926][ T7975] should_failslab+0xc2/0x120 [ 185.741958][ T7975] __kmalloc_noprof+0xe0/0x850 [ 185.741993][ T7975] tomoyo_init_log+0x1224/0x20c0 [ 185.742033][ T7975] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 185.742075][ T7975] ? __pfx_tomoyo_init_log+0x10/0x10 [ 185.742117][ T7975] tomoyo_write_log2+0x2ed/0xbc0 [ 185.742156][ T7975] tomoyo_supervisor+0x15e/0x1340 [ 185.742201][ T7975] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 185.742256][ T7975] ? kasan_quarantine_put+0x104/0x240 [ 185.742288][ T7975] ? tomoyo_check_path_acl+0x141/0x210 [ 185.742315][ T7975] ? tomoyo_check_acl+0x1f7/0x410 [ 185.742362][ T7975] tomoyo_path_permission+0x270/0x3b0 [ 185.742410][ T7975] tomoyo_check_open_permission+0x37f/0x3c0 [ 185.742447][ T7975] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 185.742511][ T7975] ? do_raw_spin_lock+0x128/0x260 [ 185.742547][ T7975] ? path_get+0x61/0x80 [ 185.742584][ T7975] tomoyo_file_open+0x6b/0x90 [ 185.742623][ T7975] security_file_open+0xb5/0x1e0 [ 185.742654][ T7975] do_dentry_open+0x5aa/0x1660 [ 185.742685][ T7975] ? security_inode_permission+0xbf/0x250 [ 185.742718][ T7975] vfs_open+0x82/0x3f0 [ 185.742757][ T7975] path_openat+0x208c/0x31a0 [ 185.742800][ T7975] ? __pfx_path_openat+0x10/0x10 [ 185.742843][ T7975] do_file_open+0x20e/0x430 [ 185.742875][ T7975] ? __pfx_do_file_open+0x10/0x10 [ 185.742930][ T7975] ? alloc_fd+0x476/0x790 [ 185.742961][ T7975] ? do_getname+0x191/0x390 [ 185.743000][ T7975] do_sys_openat2+0x10d/0x1e0 [ 185.743036][ T7975] ? __pfx_do_sys_openat2+0x10/0x10 [ 185.743076][ T7975] ? __fget_files+0x21f/0x3d0 [ 185.743110][ T7975] __x64_sys_openat+0x12d/0x210 [ 185.743149][ T7975] ? __pfx___x64_sys_openat+0x10/0x10 [ 185.743185][ T7975] ? xfd_validate_state+0x129/0x190 [ 185.743229][ T7975] do_syscall_64+0x106/0xf80 [ 185.743268][ T7975] ? clear_bhb_loop+0x40/0x90 [ 185.743301][ T7975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.743328][ T7975] RIP: 0033:0x7f738f79bf79 [ 185.743350][ T7975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.743375][ T7975] RSP: 002b:00007f7390623028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 185.743400][ T7975] RAX: ffffffffffffffda RBX: 00007f738fa15fa0 RCX: 00007f738f79bf79 [ 185.743418][ T7975] RDX: 0000000000082802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 185.743440][ T7975] RBP: 00007f738f8327e0 R08: 0000000000000000 R09: 0000000000000000 [ 185.743456][ T7975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.743472][ T7975] R13: 00007f738fa16038 R14: 00007f738fa15fa0 R15: 00007ffe3e3b28c8 [ 185.743508][ T7975] [ 186.067844][ T7954] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 186.586547][ T7996] netlink: 'syz.1.740': attribute type 1 has an invalid length. [ 186.939539][ T5820] Bluetooth: hci0: command 0x0c1a tx timeout [ 187.129144][ T8009] ======================================================= [ 187.129144][ T8009] WARNING: The mand mount option has been deprecated and [ 187.129144][ T8009] and is ignored by this kernel. Remove the mand [ 187.129144][ T8009] option from the mount to silence this warning. [ 187.129144][ T8009] ======================================================= [ 187.413818][ T8016] FAULT_INJECTION: forcing a failure. [ 187.413818][ T8016] name failslab, interval 1, probability 0, space 0, times 0 [ 187.468576][ T8016] CPU: 0 UID: 0 PID: 8016 Comm: syz.2.747 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.468621][ T8016] Tainted: [L]=SOFTLOCKUP [ 187.468631][ T8016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 187.468647][ T8016] Call Trace: [ 187.468656][ T8016] [ 187.468665][ T8016] dump_stack_lvl+0x100/0x190 [ 187.468711][ T8016] should_fail_ex.cold+0x5/0xa [ 187.468744][ T8016] should_failslab+0xc2/0x120 [ 187.468778][ T8016] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 187.468805][ T8016] ? __kernfs_new_node+0xd2/0x960 [ 187.468848][ T8016] __kernfs_new_node+0xd2/0x960 [ 187.468888][ T8016] ? __pfx___kernfs_new_node+0x10/0x10 [ 187.468935][ T8016] ? find_held_lock+0x2b/0x80 [ 187.468971][ T8016] ? kernfs_root+0xee/0x2a0 [ 187.469006][ T8016] ? kernfs_root+0xee/0x2a0 [ 187.469050][ T8016] kernfs_new_node+0x11b/0x1a0 [ 187.469096][ T8016] __kernfs_create_file+0x53/0x350 [ 187.469126][ T8016] sysfs_add_file_mode_ns+0x207/0x3c0 [ 187.469167][ T8016] internal_create_group+0x593/0xf40 [ 187.469209][ T8016] ? __pfx_internal_create_group+0x10/0x10 [ 187.469251][ T8016] ? kernfs_create_link+0x1bd/0x240 [ 187.469284][ T8016] internal_create_groups+0x9d/0x150 [ 187.469326][ T8016] device_add+0x71a/0x1950 [ 187.469355][ T8016] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 187.469392][ T8016] ? __pfx_device_add+0x10/0x10 [ 187.469419][ T8016] ? lockdep_init_map_type+0x5c/0x250 [ 187.469450][ T8016] ? __init_waitqueue_head+0xca/0x150 [ 187.469490][ T8016] netdev_register_kobject+0x1a9/0x3d0 [ 187.469529][ T8016] register_netdevice+0x12e0/0x2210 [ 187.469579][ T8016] ? __pfx_register_netdevice+0x10/0x10 [ 187.469634][ T8016] ? __pfx_loopback_net_init+0x10/0x10 [ 187.469676][ T8016] register_netdev+0x34/0x50 [ 187.469719][ T8016] loopback_net_init+0x7a/0x170 [ 187.469758][ T8016] ? __pfx_loopback_net_init+0x10/0x10 [ 187.469793][ T8016] ops_init+0x1e2/0x5f0 [ 187.469836][ T8016] setup_net+0x118/0x3a0 [ 187.469876][ T8016] ? __pfx_setup_net+0x10/0x10 [ 187.469912][ T8016] ? lockdep_init_map_type+0x5c/0x250 [ 187.469942][ T8016] ? mutex_init_lockep+0x110/0x150 [ 187.469978][ T8016] copy_net_ns+0x46f/0x7c0 [ 187.470009][ T8016] create_new_namespaces+0x3ea/0xac0 [ 187.470064][ T8016] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 187.470109][ T8016] ksys_unshare+0x455/0xab0 [ 187.470142][ T8016] ? __pfx_ksys_unshare+0x10/0x10 [ 187.470170][ T8016] ? xfd_validate_state+0x129/0x190 [ 187.470212][ T8016] __x64_sys_unshare+0x31/0x40 [ 187.470241][ T8016] do_syscall_64+0x106/0xf80 [ 187.470280][ T8016] ? clear_bhb_loop+0x40/0x90 [ 187.470316][ T8016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.470343][ T8016] RIP: 0033:0x7fcad519bf79 [ 187.470367][ T8016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.470393][ T8016] RSP: 002b:00007fcad5fec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 187.470419][ T8016] RAX: ffffffffffffffda RBX: 00007fcad5415fa0 RCX: 00007fcad519bf79 [ 187.470434][ T8016] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 187.470448][ T8016] RBP: 00007fcad52327e0 R08: 0000000000000000 R09: 0000000000000000 [ 187.470462][ T8016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.470477][ T8016] R13: 00007fcad5416038 R14: 00007fcad5415fa0 R15: 00007fff5b45a738 [ 187.470509][ T8016] [ 187.826471][ T5820] Bluetooth: hci2: command 0x0c1a tx timeout [ 187.832664][ T5820] Bluetooth: hci1: command 0x0c1a tx timeout [ 187.838737][ T5820] Bluetooth: hci3: command 0x0c1a tx timeout [ 187.878486][ T8019] futex_wake_op: syz.3.749 tries to shift op by -2048; fix this program [ 187.953566][ T8026] size and base must be multiples of 4 kiB [ 187.959513][ T8026] CPU: 0 UID: 0 PID: 8026 Comm: syz.3.749 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.959560][ T8026] Tainted: [L]=SOFTLOCKUP [ 187.959570][ T8026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 187.959587][ T8026] Call Trace: [ 187.959596][ T8026] [ 187.959606][ T8026] dump_stack_lvl+0x100/0x190 [ 187.959650][ T8026] mtrr_add.cold+0x74/0x87 [ 187.959679][ T8026] mtrr_ioctl+0x25a/0xcf0 [ 187.959710][ T8026] ? __pfx_mtrr_ioctl+0x10/0x10 [ 187.959748][ T8026] ? find_held_lock+0x2b/0x80 [ 187.959793][ T8026] ? __fget_files+0x21f/0x3d0 [ 187.959821][ T8026] ? __pfx_mtrr_ioctl+0x10/0x10 [ 187.959853][ T8026] proc_reg_unlocked_ioctl+0x229/0x320 [ 187.959891][ T8026] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 187.959933][ T8026] __x64_sys_ioctl+0x18e/0x210 [ 187.959977][ T8026] do_syscall_64+0x106/0xf80 [ 187.960015][ T8026] ? clear_bhb_loop+0x40/0x90 [ 187.960048][ T8026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.960074][ T8026] RIP: 0033:0x7ff5a259bf79 [ 187.960095][ T8026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.960121][ T8026] RSP: 002b:00007ff5a339d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 187.960147][ T8026] RAX: ffffffffffffffda RBX: 00007ff5a2816090 RCX: 00007ff5a259bf79 [ 187.960166][ T8026] RDX: 0000000000000000 RSI: 0000000040104d01 RDI: 0000000000000000 [ 187.960201][ T8026] RBP: 00007ff5a26327e0 R08: 0000000000000000 R09: 0000000000000000 [ 187.960218][ T8026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.960235][ T8026] R13: 00007ff5a2816128 R14: 00007ff5a2816090 R15: 00007ffef67f1d68 [ 187.960273][ T8026] [ 188.525152][ T8035] raw_sendmsg: syz.3.754 forgot to set AF_INET. Fix it! [ 189.020758][ T5818] Bluetooth: hci0: command 0x0c1a tx timeout [ 189.307589][ T8052] zswap: compressor not available [ 189.654757][ T8062] FAULT_INJECTION: forcing a failure. [ 189.654757][ T8062] name failslab, interval 1, probability 0, space 0, times 0 [ 189.681298][ T8062] CPU: 0 UID: 0 PID: 8062 Comm: syz.0.761 Tainted: G L syzkaller #0 PREEMPT(full) [ 189.681345][ T8062] Tainted: [L]=SOFTLOCKUP [ 189.681355][ T8062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 189.681372][ T8062] Call Trace: [ 189.681381][ T8062] [ 189.681392][ T8062] dump_stack_lvl+0x100/0x190 [ 189.681436][ T8062] should_fail_ex.cold+0x5/0xa [ 189.681468][ T8062] should_failslab+0xc2/0x120 [ 189.681502][ T8062] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 189.681530][ T8062] ? __kernfs_new_node+0xd2/0x960 [ 189.681571][ T8062] __kernfs_new_node+0xd2/0x960 [ 189.681611][ T8062] ? __pfx___kernfs_new_node+0x10/0x10 [ 189.681650][ T8062] ? find_held_lock+0x2b/0x80 [ 189.681681][ T8062] ? kernfs_root+0xee/0x2a0 [ 189.681710][ T8062] ? kernfs_root+0xee/0x2a0 [ 189.681749][ T8062] kernfs_new_node+0x11b/0x1a0 [ 189.681794][ T8062] __kernfs_create_file+0x53/0x350 [ 189.681826][ T8062] sysfs_add_file_mode_ns+0x207/0x3c0 [ 189.681868][ T8062] internal_create_group+0x593/0xf40 [ 189.681913][ T8062] ? __pfx_internal_create_group+0x10/0x10 [ 189.681953][ T8062] ? kernfs_create_link+0x1bd/0x240 [ 189.681984][ T8062] internal_create_groups+0x9d/0x150 [ 189.682023][ T8062] device_add+0x71a/0x1950 [ 189.682050][ T8062] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 189.682100][ T8062] ? __pfx_device_add+0x10/0x10 [ 189.682126][ T8062] ? lockdep_init_map_type+0x5c/0x250 [ 189.682156][ T8062] ? __init_waitqueue_head+0xca/0x150 [ 189.682199][ T8062] netdev_register_kobject+0x1a9/0x3d0 [ 189.682233][ T8062] register_netdevice+0x12e0/0x2210 [ 189.682285][ T8062] ? __pfx_register_netdevice+0x10/0x10 [ 189.682336][ T8062] ? __pfx_loopback_net_init+0x10/0x10 [ 189.682376][ T8062] register_netdev+0x34/0x50 [ 189.682418][ T8062] loopback_net_init+0x7a/0x170 [ 189.682458][ T8062] ? __pfx_loopback_net_init+0x10/0x10 [ 189.682497][ T8062] ops_init+0x1e2/0x5f0 [ 189.682543][ T8062] setup_net+0x118/0x3a0 [ 189.682585][ T8062] ? __pfx_setup_net+0x10/0x10 [ 189.682623][ T8062] ? lockdep_init_map_type+0x5c/0x250 [ 189.682651][ T8062] ? mutex_init_lockep+0x110/0x150 [ 189.682687][ T8062] copy_net_ns+0x46f/0x7c0 [ 189.682718][ T8062] create_new_namespaces+0x3ea/0xac0 [ 189.682767][ T8062] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 189.682811][ T8062] ksys_unshare+0x455/0xab0 [ 189.682839][ T8062] ? __pfx_ksys_unshare+0x10/0x10 [ 189.682867][ T8062] ? xfd_validate_state+0x129/0x190 [ 189.682914][ T8062] __x64_sys_unshare+0x31/0x40 [ 189.682942][ T8062] do_syscall_64+0x106/0xf80 [ 189.682983][ T8062] ? clear_bhb_loop+0x40/0x90 [ 189.683018][ T8062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.683046][ T8062] RIP: 0033:0x7f738f79bf79 [ 189.683081][ T8062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.683109][ T8062] RSP: 002b:00007f7390623028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 189.683137][ T8062] RAX: ffffffffffffffda RBX: 00007f738fa15fa0 RCX: 00007f738f79bf79 [ 189.683156][ T8062] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 189.683172][ T8062] RBP: 00007f738f8327e0 R08: 0000000000000000 R09: 0000000000000000 [ 189.683196][ T8062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.683212][ T8062] R13: 00007f738fa16038 R14: 00007f738fa15fa0 R15: 00007ffe3e3b28c8 [ 189.683249][ T8062] [ 190.089160][ T5818] Bluetooth: hci3: command 0x0c1a tx timeout [ 190.095213][ T5818] Bluetooth: hci1: command 0x0c1a tx timeout [ 190.101351][ T5818] Bluetooth: hci2: command 0x0c1a tx timeout [ 191.098980][ T5820] Bluetooth: hci0: command 0x0c1a tx timeout [ 192.138676][ T5820] Bluetooth: hci2: command 0x0c1a tx timeout [ 192.144800][ T5818] Bluetooth: hci1: command 0x0c1a tx timeout [ 192.150945][ T5818] Bluetooth: hci3: command 0x0c1a tx timeout [ 192.236881][ T8129] netlink: 330 bytes leftover after parsing attributes in process `syz.2.789'. [ 192.379544][ T8132] FAULT_INJECTION: forcing a failure. [ 192.379544][ T8132] name failslab, interval 1, probability 0, space 0, times 0 [ 192.419327][ T8132] CPU: 0 UID: 0 PID: 8132 Comm: syz.2.791 Tainted: G L syzkaller #0 PREEMPT(full) [ 192.419374][ T8132] Tainted: [L]=SOFTLOCKUP [ 192.419385][ T8132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 192.419401][ T8132] Call Trace: [ 192.419412][ T8132] [ 192.419422][ T8132] dump_stack_lvl+0x100/0x190 [ 192.419467][ T8132] should_fail_ex.cold+0x5/0xa [ 192.419497][ T8132] ? tomoyo_init_log+0x1224/0x20c0 [ 192.419528][ T8132] should_failslab+0xc2/0x120 [ 192.419562][ T8132] __kmalloc_noprof+0xe0/0x850 [ 192.419595][ T8132] tomoyo_init_log+0x1224/0x20c0 [ 192.419636][ T8132] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 192.419681][ T8132] ? __pfx_tomoyo_init_log+0x10/0x10 [ 192.419726][ T8132] tomoyo_write_log2+0x2ed/0xbc0 [ 192.419766][ T8132] tomoyo_supervisor+0x15e/0x1340 [ 192.419812][ T8132] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 192.419867][ T8132] ? kasan_quarantine_put+0x104/0x240 [ 192.419916][ T8132] ? tomoyo_check_path_acl+0x141/0x210 [ 192.419944][ T8132] ? tomoyo_check_acl+0x1f7/0x410 [ 192.419990][ T8132] tomoyo_path_permission+0x270/0x3b0 [ 192.420037][ T8132] tomoyo_check_open_permission+0x37f/0x3c0 [ 192.420068][ T8132] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 192.420134][ T8132] ? do_raw_spin_lock+0x128/0x260 [ 192.420176][ T8132] ? path_get+0x61/0x80 [ 192.420214][ T8132] tomoyo_file_open+0x6b/0x90 [ 192.420256][ T8132] security_file_open+0xb5/0x1e0 [ 192.420288][ T8132] do_dentry_open+0x5aa/0x1660 [ 192.420321][ T8132] ? security_inode_permission+0xbf/0x250 [ 192.420358][ T8132] vfs_open+0x82/0x3f0 [ 192.420399][ T8132] path_openat+0x208c/0x31a0 [ 192.420443][ T8132] ? __pfx_path_openat+0x10/0x10 [ 192.420487][ T8132] do_file_open+0x20e/0x430 [ 192.420516][ T8132] ? __pfx_do_file_open+0x10/0x10 [ 192.420573][ T8132] ? alloc_fd+0x476/0x790 [ 192.420607][ T8132] ? do_getname+0x191/0x390 [ 192.420647][ T8132] do_sys_openat2+0x10d/0x1e0 [ 192.420687][ T8132] ? __pfx_do_sys_openat2+0x10/0x10 [ 192.420729][ T8132] ? __fget_files+0x21f/0x3d0 [ 192.420762][ T8132] __x64_sys_openat+0x12d/0x210 [ 192.420798][ T8132] ? __pfx___x64_sys_openat+0x10/0x10 [ 192.420832][ T8132] ? xfd_validate_state+0x129/0x190 [ 192.420876][ T8132] do_syscall_64+0x106/0xf80 [ 192.420915][ T8132] ? clear_bhb_loop+0x40/0x90 [ 192.420949][ T8132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.420974][ T8132] RIP: 0033:0x7fcad519bf79 [ 192.420995][ T8132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.421020][ T8132] RSP: 002b:00007fcad5fec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 192.421044][ T8132] RAX: ffffffffffffffda RBX: 00007fcad5415fa0 RCX: 00007fcad519bf79 [ 192.421061][ T8132] RDX: 0000000000082802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 192.421077][ T8132] RBP: 00007fcad52327e0 R08: 0000000000000000 R09: 0000000000000000 [ 192.421094][ T8132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.421110][ T8132] R13: 00007fcad5416038 R14: 00007fcad5415fa0 R15: 00007fff5b45a738 [ 192.421147][ T8132] [ 193.189099][ T8145] netlink: 330 bytes leftover after parsing attributes in process `syz.1.795'. [ 193.343573][ T8149] netlink: 28 bytes leftover after parsing attributes in process `syz.0.797'. [ 193.369684][ T8149] caif0: entered allmulticast mode [ 193.704899][ T8165] netlink: 330 bytes leftover after parsing attributes in process `syz.2.806'. [ 194.618782][ T8198] netlink: 342 bytes leftover after parsing attributes in process `syz.2.818'. [ 194.642515][ T8198] netlink: 342 bytes leftover after parsing attributes in process `syz.2.818'. [ 196.453525][ T8244] netlink: 20 bytes leftover after parsing attributes in process `syz.0.834'. [ 198.486208][ T5820] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 198.486249][ T5820] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 198.503434][ T5820] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 198.503496][ T5820] Bluetooth: hci0: Unknown advertising packet type: 0x14 [ 198.510826][ T5820] Bluetooth: hci0: Unknown advertising packet type: 0x14 [ 198.520684][ T5820] Bluetooth: hci0: Unknown advertising packet type: 0x14 [ 198.528451][ T5820] Bluetooth: hci0: Unknown advertising packet type: 0x72 [ 198.535553][ T5820] Bluetooth: hci0: Unknown advertising packet type: 0x14 [ 198.542832][ T5820] Bluetooth: hci0: Malformed LE Event: 0x0d [ 198.688243][ T8295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.854'. [ 199.190020][ T8309] __vm_enough_memory: pid: 8309, comm: syz.2.860, bytes: 4398046511104 not enough memory for the allocation [ 199.266080][ T8312] netlink: 334 bytes leftover after parsing attributes in process `syz.1.861'. [ 199.508783][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.515119][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.959562][ T8331] netlink: 334 bytes leftover after parsing attributes in process `syz.0.870'. [ 200.558671][ T8346] zswap: compressor not available [ 201.199206][ T8372] binder: 8369:8372 ioctl c0306201 0 returned -14 [ 201.298249][ T8374] MTRR 1 not used [ 202.074318][ T8393] netlink: 20 bytes leftover after parsing attributes in process `syz.0.895'. [ 205.484592][ T8457] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 4294967295 out of range (51000000..2150000000) [ 205.597125][ T8465] zswap: compressor not available [ 206.142428][ T8482] sock: sock_timestamping_bind_phc: sock not bind to device [ 206.642716][ T8499] netlink: 350 bytes leftover after parsing attributes in process `syz.3.938'. [ 207.205683][ T8515] HfR: entered promiscuous mode [ 207.220488][ T8517] netlink: 12 bytes leftover after parsing attributes in process `syz.2.942'. [ 207.244290][ T8517] HfR: left promiscuous mode [ 207.507469][ T8526] hub 1-0:1.0: USB hub found [ 207.523286][ T8526] hub 1-0:1.0: 1 port detected [ 207.732267][ T8532] netlink: 342 bytes leftover after parsing attributes in process `syz.3.948'. [ 207.780207][ T8532] netlink: 342 bytes leftover after parsing attributes in process `syz.3.948'. [ 208.309211][ T8550] netlink: 342 bytes leftover after parsing attributes in process `syz.2.956'. [ 211.348700][ T8628] netlink: 'syz.0.986': attribute type 15 has an invalid length. [ 211.356470][ T8628] netlink: 186 bytes leftover after parsing attributes in process `syz.0.986'. [ 211.571390][ T8633] HfR: entered promiscuous mode [ 211.611848][ T8633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.989'. [ 211.628887][ T8633] HfR: left promiscuous mode [ 211.766393][ T8638] netlink: 28 bytes leftover after parsing attributes in process `syz.0.991'. [ 212.724402][ T8668] misc userio: The device must be registered before sending interrupts [ 213.823388][ T8703] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1016'. [ 214.221364][ T8711] netlink: 186 bytes leftover after parsing attributes in process `syz.3.1020'. [ 214.251628][ T8711] netlink: 186 bytes leftover after parsing attributes in process `syz.3.1020'. [ 214.531916][ T8723] netlink: 122 bytes leftover after parsing attributes in process `syz.3.1024'. [ 214.969370][ T8733] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1029'. [ 217.285003][ T8776] batman_adv: batadv0: adding TT local entry 00:00:03:00:00:00 to non-existent VLAN 16 [ 217.750361][ T8792] netlink: 326 bytes leftover after parsing attributes in process `syz.3.1052'. [ 219.919760][ T8843] veth1_to_batadv: entered promiscuous mode [ 219.927099][ T8841] veth1_to_batadv: left promiscuous mode [ 220.236555][ T29] audit: type=1804 audit(1770902096.485:4): pid=8845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1071" name="/newroot/261/file0" dev="tmpfs" ino=1347 res=1 errno=0 [ 220.298596][ T29] audit: type=1804 audit(1770902096.535:5): pid=8847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1071" name="/newroot/261/file0" dev="tmpfs" ino=1347 res=1 errno=0 [ 220.761338][ T8866] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1080'. [ 221.034519][ T8866] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1080'. [ 221.054883][ T8871] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1082'. [ 221.218745][ T8876] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1083'. [ 221.589581][ T8882] netlink: 74 bytes leftover after parsing attributes in process `syz.3.1086'. [ 222.173947][ T8903] netlink: 'syz.1.1095': attribute type 4 has an invalid length. [ 222.200190][ T8903] netlink: 314 bytes leftover after parsing attributes in process `syz.1.1095'. [ 222.846168][ T8923] ovs_: entered promiscuous mode [ 223.093846][ T8931] netlink: 'syz.3.1105': attribute type 4 has an invalid length. [ 224.610801][ T8977] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 224.794386][ T8979] zswap: compressor not available [ 226.065197][ T9009] random: crng reseeded on system resumption [ 227.160238][ T9022] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 227.275916][ T9025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1135'. [ 227.330080][ T9026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1135'. [ 227.689885][ T9035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1139'. [ 227.730205][ T9035] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1139'. [ 227.741255][ T9035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1139'. [ 227.862163][ T9041] futex_wake_op: syz.2.1141 tries to shift op by -2048; fix this program [ 227.871509][ T9040] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1142'. [ 227.906620][ T9041] futex_wake_op: syz.2.1141 tries to shift op by -2048; fix this program [ 227.944683][ T9041] 0x000000000001-0x000000020000 : "" [ 227.960766][ T9041] ftl_cs: FTL header corrupt! [ 228.121781][ T9051] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1145'. [ 228.139598][ T9044] ERROR: Out of memory at tomoyo_memory_ok. [ 229.220449][ T9077] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1155'. [ 230.244030][ T9102] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1165'. [ 230.311910][ T9102] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1165'. [ 231.173729][ T9128] FAULT_INJECTION: forcing a failure. [ 231.173729][ T9128] name failslab, interval 1, probability 0, space 0, times 0 [ 231.211196][ T9128] CPU: 1 UID: 0 PID: 9128 Comm: syz.0.1173 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.211245][ T9128] Tainted: [L]=SOFTLOCKUP [ 231.211255][ T9128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 231.211273][ T9128] Call Trace: [ 231.211282][ T9128] [ 231.211293][ T9128] dump_stack_lvl+0x100/0x190 [ 231.211340][ T9128] should_fail_ex.cold+0x5/0xa [ 231.211378][ T9128] should_failslab+0xc2/0x120 [ 231.211413][ T9128] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 231.211441][ T9128] ? __kernfs_new_node+0xd2/0x960 [ 231.211485][ T9128] __kernfs_new_node+0xd2/0x960 [ 231.211526][ T9128] ? __pfx___kernfs_new_node+0x10/0x10 [ 231.211571][ T9128] ? find_held_lock+0x2b/0x80 [ 231.211608][ T9128] ? kernfs_root+0xee/0x2a0 [ 231.211641][ T9128] ? kernfs_root+0xee/0x2a0 [ 231.211686][ T9128] kernfs_new_node+0x11b/0x1a0 [ 231.211733][ T9128] __kernfs_create_file+0x53/0x350 [ 231.211767][ T9128] sysfs_add_file_mode_ns+0x207/0x3c0 [ 231.211811][ T9128] sysfs_merge_group+0x194/0x340 [ 231.211850][ T9128] ? __pfx_sysfs_merge_group+0x10/0x10 [ 231.211893][ T9128] ? __pfx_dev_add_physical_location+0x10/0x10 [ 231.211939][ T9128] ? bus_to_subsys+0x114/0x150 [ 231.211975][ T9128] dpm_sysfs_add+0x237/0x280 [ 231.212020][ T9128] device_add+0x9ef/0x1950 [ 231.212051][ T9128] ? __pfx_device_add+0x10/0x10 [ 231.212075][ T9128] ? __pfx___might_resched+0x10/0x10 [ 231.212106][ T9128] ? lockdep_hardirqs_on+0x78/0x100 [ 231.212161][ T9128] __add_disk+0x518/0xe40 [ 231.212216][ T9128] add_disk_fwnode+0x118/0x5c0 [ 231.212265][ T9128] loop_add+0x90b/0xb60 [ 231.212296][ T9128] ? __pfx_loop_add+0x10/0x10 [ 231.212353][ T9128] ? find_held_lock+0x2b/0x80 [ 231.212395][ T9128] ? __fget_files+0x215/0x3d0 [ 231.212429][ T9128] loop_control_ioctl+0xae/0x620 [ 231.212464][ T9128] ? __pfx_loop_control_ioctl+0x10/0x10 [ 231.212504][ T9128] ? __pfx_loop_control_ioctl+0x10/0x10 [ 231.212540][ T9128] __x64_sys_ioctl+0x18e/0x210 [ 231.212585][ T9128] do_syscall_64+0x106/0xf80 [ 231.212625][ T9128] ? clear_bhb_loop+0x40/0x90 [ 231.212661][ T9128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.212690][ T9128] RIP: 0033:0x7f738f79bf79 [ 231.212714][ T9128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.212741][ T9128] RSP: 002b:00007f7390623028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 231.212769][ T9128] RAX: ffffffffffffffda RBX: 00007f738fa15fa0 RCX: 00007f738f79bf79 [ 231.212789][ T9128] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000005 [ 231.212806][ T9128] RBP: 00007f738f8327e0 R08: 0000000000000000 R09: 0000000000000000 [ 231.212824][ T9128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.212839][ T9128] R13: 00007f738fa16038 R14: 00007f738fa15fa0 R15: 00007ffe3e3b28c8 [ 231.212877][ T9128] [ 232.005479][ T9143] netlink: 'syz.3.1179': attribute type 19 has an invalid length. [ 232.406268][ T9161] __nla_validate_parse: 5 callbacks suppressed [ 232.406299][ T9161] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1186'. [ 234.313561][ T9192] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1198'. [ 235.482288][ T5820] Bluetooth: hci2: Malformed LE Event: 0x0b [ 235.774128][ T9237] netlink: 346 bytes leftover after parsing attributes in process `syz.0.1218'. [ 237.101376][ T9256] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 237.137836][ T9256] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 237.149593][ T9256] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 237.157203][ T9256] page_type: f5(slab) [ 237.164972][ T9256] raw: 00fff00000000040 ffff888140413280 dead000000000100 dead000000000122 [ 237.175520][ T9256] raw: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 237.184539][ T9256] head: 00fff00000000040 ffff888140413280 dead000000000100 dead000000000122 [ 237.193604][ T9256] head: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 237.202773][ T9256] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 237.212961][ T9256] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 237.224193][ T9256] page dumped because: unmovable page [ 237.231939][ T9256] page_owner tracks the page as allocated [ 237.249173][ T5170] ERROR: Out of memory at tomoyo_memory_ok. [ 237.266276][ T9256] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5198, tgid 5198 (udevadm), ts 36109386712, free_ts 30247195998 [ 237.313375][ T9256] post_alloc_hook+0x1e1/0x250 [ 237.318769][ T9256] get_page_from_freelist+0x111d/0x3140 [ 237.336902][ T9256] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 237.344502][ T9256] new_slab+0xa6/0x6e0 [ 237.349613][ T9256] refill_objects+0x26b/0x400 [ 237.358588][ T9256] __pcs_replace_empty_main+0x19f/0x600 [ 237.368718][ T9256] kmem_cache_alloc_lru_noprof+0x485/0x6e0 [ 237.393693][ T9256] alloc_inode+0x183/0x250 [ 237.398186][ T9256] iget_locked+0x1d9/0x6d0 [ 237.420136][ T9256] kernfs_get_inode+0x46/0x470 [ 237.435306][ T9271] zswap: compressor not available [ 237.435327][ T9256] kernfs_iop_lookup+0x1a7/0x2d0 [ 237.446761][ T9256] lookup_open.isra.0+0x631/0x11b0 [ 237.488425][ T9256] path_openat+0xa98/0x31a0 [ 237.493032][ T9256] do_file_open+0x20e/0x430 [ 237.497579][ T9256] do_sys_openat2+0x10d/0x1e0 [ 237.538367][ T9256] __x64_sys_openat+0x12d/0x210 [ 237.543283][ T9256] page last free pid 1 tgid 1 stack trace: [ 237.593585][ T9256] __free_frozen_pages+0x822/0x1130 [ 237.610900][ T9256] free_contig_range+0x1a3/0x520 [ 237.633471][ T9256] destroy_args+0xa8/0x7a0 [ 237.637972][ T9256] debug_vm_pgtable+0x1b66/0x34b0 [ 237.645689][ T9256] do_one_initcall+0x11d/0x690 [ 237.655834][ T9256] kernel_init_freeable+0x6e5/0x790 [ 237.668314][ T9256] kernel_init+0x1f/0x1e0 [ 237.672703][ T9256] ret_from_fork+0x754/0xd80 [ 237.687566][ T9256] ret_from_fork_asm+0x1a/0x30 [ 238.259988][ T9293] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1235'. [ 238.347609][ T9296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1236'. [ 238.410641][ T9296] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1236'. [ 238.940780][ T9314] bond0: Unable to set up delay as MII monitoring is disabled [ 243.347422][ T9427] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 244.444885][ T9448] mkiss: ax0: crc mode is auto. [ 245.823113][ T9476] : renamed from bond0 (while UP) [ 246.626560][ T9497] netlink: 350 bytes leftover after parsing attributes in process `syz.0.1300'. [ 247.984002][ T9534] process 'syz.0.1314' launched '/dev/fd/3' with NULL argv: empty string added [ 248.720354][ T9556] netlink: 146 bytes leftover after parsing attributes in process `syz.0.1321'. [ 249.051266][ T9566] netlink: 302 bytes leftover after parsing attributes in process `syz.0.1326'. [ 249.195995][ T9569] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1327'. [ 249.851351][ T9586] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1333'. [ 250.318220][ T9597] netlink: 'syz.0.1346': attribute type 4 has an invalid length. [ 250.876114][ T9611] netlink: 74 bytes leftover after parsing attributes in process `syz.0.1343'. [ 251.640825][ T9630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1348'. [ 254.809535][ T9689] binder: 9688:9689 ioctl 5309 38 returned -22 [ 254.918640][ T9695] binder: 9688:9695 ioctl ae41 ffffffffffffffff returned -22 [ 255.321708][ T9711] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1376'. [ 255.846288][ T9727] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1382'. [ 257.247469][ T9750] sg_write: data in/out 81/90 bytes for SCSI command 0x0-- guessing data in; [ 257.247469][ T9750] program syz.3.1389 not setting count and/or reply_len properly [ 258.442020][ T9774] FAULT_INJECTION: forcing a failure. [ 258.442020][ T9774] name failslab, interval 1, probability 0, space 0, times 0 [ 258.468370][ T9774] CPU: 1 UID: 0 PID: 9774 Comm: syz.0.1396 Tainted: G L syzkaller #0 PREEMPT(full) [ 258.468419][ T9774] Tainted: [L]=SOFTLOCKUP [ 258.468430][ T9774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 258.468454][ T9774] Call Trace: [ 258.468464][ T9774] [ 258.468475][ T9774] dump_stack_lvl+0x100/0x190 [ 258.468519][ T9774] should_fail_ex.cold+0x5/0xa [ 258.468558][ T9774] ? tomoyo_init_log+0x1224/0x20c0 [ 258.468590][ T9774] should_failslab+0xc2/0x120 [ 258.468622][ T9774] __kmalloc_noprof+0xe0/0x850 [ 258.468659][ T9774] tomoyo_init_log+0x1224/0x20c0 [ 258.468703][ T9774] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 258.468748][ T9774] ? __pfx_tomoyo_init_log+0x10/0x10 [ 258.468793][ T9774] tomoyo_write_log2+0x2ed/0xbc0 [ 258.468833][ T9774] tomoyo_supervisor+0x15e/0x1340 [ 258.468880][ T9774] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 258.468936][ T9774] ? rcu_is_watching+0x12/0xc0 [ 258.468971][ T9774] ? trace_kmalloc+0x83/0xb0 [ 258.469007][ T9774] ? tomoyo_check_mount_acl+0x5c/0x1b0 [ 258.469042][ T9774] ? tomoyo_check_acl+0x1f7/0x410 [ 258.469091][ T9774] tomoyo_mount_acl+0x580/0x8b0 [ 258.469121][ T9774] ? is_bpf_text_address+0x8a/0x1a0 [ 258.469164][ T9774] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 258.469194][ T9774] ? kernel_text_address+0x8d/0x100 [ 258.469230][ T9774] ? unwind_get_return_address+0x59/0xa0 [ 258.469312][ T9774] ? tomoyo_domain+0xb2/0x150 [ 258.469350][ T9774] ? tomoyo_profile+0x47/0x60 [ 258.469392][ T9774] tomoyo_mount_permission+0x214/0x460 [ 258.469424][ T9774] ? tomoyo_mount_permission+0x1f6/0x460 [ 258.469460][ T9774] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 258.469517][ T9774] security_sb_mount+0xdd/0x270 [ 258.469572][ T9774] path_mount+0x158/0x23d0 [ 258.469614][ T9774] ? __pfx_path_mount+0x10/0x10 [ 258.469647][ T9774] ? lockdep_hardirqs_on+0x78/0x100 [ 258.469693][ T9774] ? putname+0xb1/0x110 [ 258.469723][ T9774] ? kmem_cache_free+0x124/0x670 [ 258.469778][ T9774] ? __x64_sys_mount+0x293/0x310 [ 258.469811][ T9774] __x64_sys_mount+0x293/0x310 [ 258.469847][ T9774] ? __pfx___x64_sys_mount+0x10/0x10 [ 258.469890][ T9774] do_syscall_64+0x106/0xf80 [ 258.469931][ T9774] ? clear_bhb_loop+0x40/0x90 [ 258.469965][ T9774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.469993][ T9774] RIP: 0033:0x7f738f79bf79 [ 258.470018][ T9774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.470044][ T9774] RSP: 002b:00007f7390623028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 258.470079][ T9774] RAX: ffffffffffffffda RBX: 00007f738fa15fa0 RCX: 00007f738f79bf79 [ 258.470099][ T9774] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 258.470117][ T9774] RBP: 00007f738f8327e0 R08: 0000000000000000 R09: 0000000000000000 [ 258.470135][ T9774] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000000 [ 258.470152][ T9774] R13: 00007f738fa16038 R14: 00007f738fa15fa0 R15: 00007ffe3e3b28c8 [ 258.470192][ T9774] [ 258.472613][ T9774] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 258.799702][ T9774] CIFS mount error: No usable UNC path provided in device string! [ 258.799702][ T9774] [ 258.859768][ T9774] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 260.944562][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.951008][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.567137][ T9832] zswap: compressor not available [ 261.957202][ T9849] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1424'. [ 263.511809][ T9890] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1437'. [ 263.552202][ T9890] hsr_slave_0: left promiscuous mode [ 263.610273][ T9890] hsr_slave_1: left promiscuous mode [ 264.050950][ T9906] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1444'. [ 264.287669][ T9910] ptp ptp0: new virtual clock ptp1 [ 264.298182][ T9910] ptp ptp0: guarantee physical clock free running [ 264.335713][ T9912] ptp ptp0: delete virtual clock ptp1 [ 264.398580][ T9912] ptp ptp0: only physical clock in use now [ 264.673730][ T9921] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1448'. [ 266.423404][ T9951] netlink: 146 bytes leftover after parsing attributes in process `syz.2.1460'. [ 267.594241][ T9994] mkiss: ax0: crc mode is auto. [ 267.601726][ T5583] ERROR: Out of memory at tomoyo_memory_ok. [ 267.688021][ T9994] mkiss: ax0: crc mode is auto. [ 268.200544][T10010] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 268.834647][T10019] ERROR: Out of memory at tomoyo_memory_ok. [ 269.167355][T10027] base or size exceeds the MTRR width [ 269.396623][T10038] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1489'. [ 270.085652][T10052] ================================================================== [ 270.085675][T10052] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 270.085719][T10052] Write of size 8 at addr ffffc90003849000 by task syz.2.1495/10052 [ 270.085740][T10052] [ 270.085753][T10052] CPU: 0 UID: 0 PID: 10052 Comm: syz.2.1495 Tainted: G L syzkaller #0 PREEMPT(full) [ 270.085791][T10052] Tainted: [L]=SOFTLOCKUP [ 270.085802][T10052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 270.085817][T10052] Call Trace: [ 270.085826][T10052] [ 270.085836][T10052] dump_stack_lvl+0x100/0x190 [ 270.085876][T10052] print_report+0x156/0x4c9 [ 270.085923][T10052] ? __virt_addr_valid+0x81/0x620 [ 270.085957][T10052] ? sys_imageblit+0x19fb/0x1d60 [ 270.085993][T10052] kasan_report+0xdf/0x1a0 [ 270.086026][T10052] ? sys_imageblit+0x19fb/0x1d60 [ 270.086066][T10052] sys_imageblit+0x19fb/0x1d60 [ 270.086105][T10052] ? __pfx_sys_imageblit+0x10/0x10 [ 270.086140][T10052] ? prb_read_valid+0x78/0xa0 [ 270.086168][T10052] ? __pfx_prb_read_valid+0x10/0x10 [ 270.086198][T10052] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 270.086239][T10052] soft_cursor+0x524/0xa10 [ 270.086271][T10052] ? fb_get_color_depth+0x120/0x250 [ 270.086300][T10052] bit_cursor+0xe58/0x16f0 [ 270.086333][T10052] ? __pfx_bit_cursor+0x10/0x10 [ 270.086361][T10052] ? __lock_acquire+0x4a5/0x2630 [ 270.086392][T10052] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 270.086430][T10052] ? get_color+0x1da/0x450 [ 270.086472][T10052] ? __pfx_bit_cursor+0x10/0x10 [ 270.086499][T10052] fbcon_cursor+0x43c/0x5e0 [ 270.086522][T10052] ? add_softcursor+0x150/0x290 [ 270.086553][T10052] set_cursor+0x1db/0x250 [ 270.086578][T10052] con_write+0x89/0xb0 [ 270.086609][T10052] do_output_char+0x63b/0x850 [ 270.086643][T10052] n_tty_write+0x528/0x12d0 [ 270.086689][T10052] ? __pfx_n_tty_write+0x10/0x10 [ 270.086730][T10052] ? __pfx_woken_wake_function+0x10/0x10 [ 270.086761][T10052] ? __pfx___might_resched+0x10/0x10 [ 270.086793][T10052] ? __pfx_n_tty_write+0x10/0x10 [ 270.086834][T10052] file_tty_write.isra.0+0x4d2/0x890 [ 270.086872][T10052] redirected_tty_write+0xd4/0x120 [ 270.086913][T10052] vfs_write+0x6ac/0x1070 [ 270.086941][T10052] ? __pfx_redirected_tty_write+0x10/0x10 [ 270.086979][T10052] ? __pfx_vfs_write+0x10/0x10 [ 270.087005][T10052] ? find_held_lock+0x2b/0x80 [ 270.087053][T10052] ksys_write+0x12a/0x250 [ 270.087080][T10052] ? __pfx_ksys_write+0x10/0x10 [ 270.087112][T10052] do_syscall_64+0x106/0xf80 [ 270.087150][T10052] ? clear_bhb_loop+0x40/0x90 [ 270.087180][T10052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.087207][T10052] RIP: 0033:0x7fcad519bf79 [ 270.087233][T10052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.087262][T10052] RSP: 002b:00007fcad5fec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 270.087291][T10052] RAX: ffffffffffffffda RBX: 00007fcad5415fa0 RCX: 00007fcad519bf79 [ 270.087311][T10052] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000003 [ 270.087329][T10052] RBP: 00007fcad52327e0 R08: 0000000000000000 R09: 0000000000000000 [ 270.087348][T10052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.087365][T10052] R13: 00007fcad5416038 R14: 00007fcad5415fa0 R15: 00007fff5b45a738 [ 270.087394][T10052] [ 270.087404][T10052] [ 270.087411][T10052] The buggy address belongs to a 0-page vmalloc region starting at 0xffffc90003549000 allocated at drm_gem_shmem_vmap_locked+0x54b/0x800 [ 270.087467][T10052] Memory state around the buggy address: [ 270.087482][T10052] ffffc90003848f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 270.087509][T10052] ffffc90003848f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 270.087529][T10052] >ffffc90003849000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 270.087545][T10052] ^ [ 270.087559][T10052] ffffc90003849080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 270.087579][T10052] ffffc90003849100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 270.087592][T10052] ================================================================== [ 270.087634][T10052] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 270.087654][T10052] CPU: 0 UID: 0 PID: 10052 Comm: syz.2.1495 Tainted: G L syzkaller #0 PREEMPT(full) [ 270.087693][T10052] Tainted: [L]=SOFTLOCKUP [ 270.087704][T10052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 270.087718][T10052] Call Trace: [ 270.087726][T10052] [ 270.087736][T10052] dump_stack_lvl+0x100/0x190 [ 270.087770][T10052] vpanic+0x20d/0x630 [ 270.087794][T10052] panic+0xd1/0xd1 [ 270.087816][T10052] ? __pfx_panic+0x10/0x10 [ 270.087848][T10052] check_panic_on_warn.cold+0x19/0x34 [ 270.087879][T10052] end_report.part.0+0x3a/0x90 [ 270.087931][T10052] kasan_report.cold+0xe/0x18 [ 270.088014][T10052] ? sys_imageblit+0x19fb/0x1d60 [ 270.088058][T10052] sys_imageblit+0x19fb/0x1d60 [ 270.088102][T10052] ? __pfx_sys_imageblit+0x10/0x10 [ 270.088141][T10052] ? prb_read_valid+0x78/0xa0 [ 270.088169][T10052] ? __pfx_prb_read_valid+0x10/0x10 [ 270.088202][T10052] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 270.088247][T10052] soft_cursor+0x524/0xa10 [ 270.088275][T10052] ? fb_get_color_depth+0x120/0x250 [ 270.088301][T10052] bit_cursor+0xe58/0x16f0 [ 270.088335][T10052] ? __pfx_bit_cursor+0x10/0x10 [ 270.088364][T10052] ? __lock_acquire+0x4a5/0x2630 [ 270.088394][T10052] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 270.088432][T10052] ? get_color+0x1da/0x450 [ 270.088471][T10052] ? __pfx_bit_cursor+0x10/0x10 [ 270.088498][T10052] fbcon_cursor+0x43c/0x5e0 [ 270.088522][T10052] ? add_softcursor+0x150/0x290 [ 270.088553][T10052] set_cursor+0x1db/0x250 [ 270.088581][T10052] con_write+0x89/0xb0 [ 270.088616][T10052] do_output_char+0x63b/0x850 [ 270.088656][T10052] n_tty_write+0x528/0x12d0 [ 270.088704][T10052] ? __pfx_n_tty_write+0x10/0x10 [ 270.088747][T10052] ? __pfx_woken_wake_function+0x10/0x10 [ 270.088783][T10052] ? __pfx___might_resched+0x10/0x10 [ 270.088813][T10052] ? __pfx_n_tty_write+0x10/0x10 [ 270.088854][T10052] file_tty_write.isra.0+0x4d2/0x890 [ 270.088891][T10052] redirected_tty_write+0xd4/0x120 [ 270.088935][T10052] vfs_write+0x6ac/0x1070 [ 270.088964][T10052] ? __pfx_redirected_tty_write+0x10/0x10 [ 270.089001][T10052] ? __pfx_vfs_write+0x10/0x10 [ 270.089028][T10052] ? find_held_lock+0x2b/0x80 [ 270.089077][T10052] ksys_write+0x12a/0x250 [ 270.089105][T10052] ? __pfx_ksys_write+0x10/0x10 [ 270.089138][T10052] do_syscall_64+0x106/0xf80 [ 270.089178][T10052] ? clear_bhb_loop+0x40/0x90 [ 270.089211][T10052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.089240][T10052] RIP: 0033:0x7fcad519bf79 [ 270.089262][T10052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.089290][T10052] RSP: 002b:00007fcad5fec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 270.089319][T10052] RAX: ffffffffffffffda RBX: 00007fcad5415fa0 RCX: 00007fcad519bf79 [ 270.089339][T10052] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000003 [ 270.089358][T10052] RBP: 00007fcad52327e0 R08: 0000000000000000 R09: 0000000000000000 [ 270.089375][T10052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.089393][T10052] R13: 00007fcad5416038 R14: 00007fcad5415fa0 R15: 00007fff5b45a738 [ 270.089422][T10052] [ 270.089793][T10052] Kernel Offset: disabled