last executing test programs: 2.892855321s ago: executing program 1 (id=2576): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x1, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6b) bind$auto(0x3, 0x0, 0x6a) 2.765827198s ago: executing program 1 (id=2577): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@generic={0x1e, "bd581a756e3edd8b8d3485580789"}, 0x66) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x6, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) close_range$auto(0x2, r0, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, 0x0, 0x2, 0x0, 0x400}, 0x4}, 0xfff, 0xb07e) 2.607956509s ago: executing program 1 (id=2580): mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) r0 = gettid() futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) kill$auto(r0, 0x11) 2.523738924s ago: executing program 0 (id=2581): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0x4040aea0, 0x0) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) r0 = getpgid(0x0) rt_tgsigqueueinfo$auto(0xffffffffffffffff, r0, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0xe, 0x5, @_sigchld={r0, 0x0, 0x401, 0x5, 0x3}}}) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', 0x0) 1.608352639s ago: executing program 1 (id=2582): ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) close_range$auto(0xffffffffffffffff, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0x2000000000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0x5, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000d80)="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", 0x1ed) 1.601270909s ago: executing program 0 (id=2590): sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) mmap$auto(0x0, 0xdb3, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r0, 0x89fd, 0x24) 1.462555108s ago: executing program 3 (id=2585): sendmsg$auto_TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x198, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NAME_TABLE={0x181, 0x8, 0x0, 0x1, [@generic="4ee3e2228f072f775509c37cd7cecb289e14439e215648c9db21880740644d3881e08835cd40082d24f12f077f8b5ddf776a13f2fff3884f0532bf81c8616b70684282f7ba9b3cd0d345824ebb8a457bc10751506b1b17fa47d59e2a9f8466080e16f7b2739caa149594a6f18206edc6a3ffc337e8430bca88c4b6fe0996ca8aa4739b75041cb8a4c04c470de0e9c576bc49bffe9e6d351131f2", @generic="57440c89bf4ca0c9fe186a252b604605c03b3b37fdcc215336e090873ba894644dc3ba50d2e3da7b064d666e58278ffdba80674353fca24d8989514570b32f89856a7f533e2e4264f46265bd948e4e9ca1447c3a030829a16229686da16a127d8539b81395ef6d1d886f2fee927ee982922475dd421eda37d8a330ce967820316863a3df91a9321231c8ed5f6bb5e8f5c69534e866eb74ee7f618946efc6aade15965caddec732e6cc277a01c6dbd0362f016736cd3536b707628c1f10b8823afffc3be3e29ba2640ee73369", @generic="afd5551217c0a6decce4be24f89a72", @typed={0x8, 0x121, 0x0, 0x0, @fd}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x8010}, 0x4000840) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r1}, 0x6a) sendto$auto(r0, 0x0, 0x6f9, 0xfffffff8, &(0x7f0000000440)=@can={0x1d, r2}, 0x36) 1.342534034s ago: executing program 3 (id=2587): ioctl$auto_TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) mmap$auto(0x0, 0x10000, 0x4000000000df, 0x20000000040eb1, 0x401, 0x300000000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x8000, 0x0) connect$auto(0xffffffffffffffff, 0x0, 0x3a) sysfs$auto(0x2, 0x9, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x3, &(0x7f0000000000)='Q**\x00', &(0x7f0000000040)='+', 0x0) 1.085111001s ago: executing program 3 (id=2588): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x1, 0x0) socket(0xa, 0x1, 0x84) clock_nanosleep$auto(0x2, 0x1000, 0x0, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x2, 0x80000000, 0x3000}, 0x4) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, 0x0, 0x40090) 862.164802ms ago: executing program 2 (id=2589): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/tty/ptyqe/power/control\x00', 0xa0b02, 0x0) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/security/tomoyo/profile\x00', 0x48802, 0x0) read$auto(r0, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0x70) write$auto(0x3, 0x0, 0x5c8) 793.217671ms ago: executing program 3 (id=2591): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x1}}}, 0x66) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x6, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) close_range$auto(0x2, r0, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, 0x0, 0x2, 0x0, 0x400}, 0x4}, 0xfff, 0xb07e) 753.586142ms ago: executing program 1 (id=2592): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x800000002, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendto$auto(0x4, 0x0, 0xff, 0x6, 0x0, 0xe) connect$auto(0x5, 0x0, 0x9) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x6, 0x15, 0x1000, 0x100000001, 0xb, 0xf, 0xffffffffffffffff, 0x0, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x245c]}, 0x0, 0x0) 697.203033ms ago: executing program 2 (id=2593): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x11, 0x2, 0x2) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5) ioctl$auto(r0, 0x4008af03, 0x0) ioctl$auto_VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) 667.555424ms ago: executing program 3 (id=2594): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = open(&(0x7f0000000100)='.\x00', 0x595082, 0x0) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) fsetxattr$auto(r0, &(0x7f0000000180)=':\xbf+<\x8a}\x00\xeb\xfa\xe6\x8d\x02\\VD\x04\x00\x00\x00*\x80\xa4\xf4vql\xa9\x05o\xf7\x9e\xfd\xf7\x00\x00\x00\x00H_/Z>n\xf5F\xbf\xd3\xefi\x91\x88\x1daIu7\xef!\xd0\x04\xdes\xfe`\xf5e;4\xbek\xf9\xec%\xbc\xd4\xfc`\xb9\n\xb5\xa5V\x98\x14]\x8a\x03\xd9', 0x0, 0x7bd, 0x1) mprotect$auto(0x0, 0x8000000000000001, 0x8) 614.948721ms ago: executing program 0 (id=2595): mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r0, 0x0, 0x3f1) close_range$auto(0x2, 0xa, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000080)='/dev/binderfs/binder1\x00', 0x80001, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/v4l-subdev6\x00', 0xc0400, 0x0) ioctl$auto(0x3, 0xc040563e, 0x38) 568.32889ms ago: executing program 2 (id=2596): socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(0x8000000000000001, 0x26, 0x8) fcntl$auto(0x8000000000000001, 0x7, 0x8) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000000140)='\t', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/md_mod/parameters/start_ro\x00', 0x80302, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) 428.292451ms ago: executing program 0 (id=2597): mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) select$auto(0x7, 0x0, &(0x7f0000000200)={[0x9, 0x8, 0x3, 0x2, 0x3, 0x1000000009, 0x9, 0xff, 0x3, 0xffffffffffffffff, 0x2, 0x7, 0x100000001, 0x8000000000000001, 0x3, 0x9]}, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) openat$auto_tracing_saved_cmdlines_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/saved_cmdlines_size\x00', 0x2, 0x0) read$auto(0x3, 0x0, 0xf34) writev$auto(0x3, &(0x7f00000001c0)={0x0, 0x3}, 0x7) 245.772717ms ago: executing program 2 (id=2598): close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) r0 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r1, 0xfd}, 0x6a) bind$auto(0x3, &(0x7f00000001c0)=@can={0x1d, r2}, 0x6b) 242.656422ms ago: executing program 1 (id=2599): openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0xa, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0xa, 0x0) open(0x0, 0xa240, 0x15e) open(0x0, 0x161342, 0x100) 237.598878ms ago: executing program 0 (id=2600): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r0, 0xaec7, 0x0) 91.208821ms ago: executing program 2 (id=2601): timerfd_settime$auto(0xffffffffffffffff, 0x5, 0x0, 0x0) socket(0x2, 0x3, 0x100) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/scsi_mod/parameters/scan\x00', 0x102, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0xffffffffffffffff, 0x300000000000) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/phram/parameters/phram\x00', 0x4a481, 0x0) write$auto(r0, &(0x7f0000000040)='7\x02\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) 55.364888ms ago: executing program 3 (id=2602): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbdf250200000800130001"], 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x890) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='1'], 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' '], 0x1ac}, 0x1, 0x0, 0x0, 0x20000820}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 13.828052ms ago: executing program 2 (id=2603): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r1, &(0x7f00000000c0)={0x0, 0x7}, 0x1) r2 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r2, 0xffffffffffdffe00, &(0x7f0000000140)=';') 0s ago: executing program 0 (id=2604): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty58\x00', 0x800, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(&(0x7f0000000200)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) ioctl$auto(0x3, 0x400c4d06, 0x5) kernel console output (not intermixed with test programs): k+0x20f/0x520 [ 237.310725][ T8256] ? __pfx___inet_listen_sk+0x10/0x10 [ 237.310764][ T8256] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 237.310811][ T8256] ? __local_bh_enable_ip+0xa4/0x120 [ 237.310862][ T8256] inet_listen+0x93/0xd0 [ 237.310900][ T8256] smc_listen+0x5ff/0xbb0 [ 237.310943][ T8256] __sys_listen_socket+0x117/0x160 [ 237.310988][ T8256] __sys_listen+0xa7/0x130 [ 237.311023][ T8256] __x64_sys_listen+0x53/0x80 [ 237.311055][ T8256] do_syscall_64+0xcd/0xf80 [ 237.311109][ T8256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.311140][ T8256] RIP: 0033:0x7f971c78f7c9 [ 237.311166][ T8256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.311198][ T8256] RSP: 002b:00007f971d5a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 237.311230][ T8256] RAX: ffffffffffffffda RBX: 00007f971c9e5fa0 RCX: 00007f971c78f7c9 [ 237.311252][ T8256] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000003 [ 237.311270][ T8256] RBP: 00007f971c813f91 R08: 0000000000000000 R09: 0000000000000000 [ 237.311296][ T8256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.311315][ T8256] R13: 00007f971c9e6038 R14: 00007f971c9e5fa0 R15: 00007ffec5fe9ab8 [ 237.311362][ T8256] [ 238.860658][ T8284] zswap: compressor not available [ 240.070392][ T8310] FAULT_INJECTION: forcing a failure. [ 240.070392][ T8310] name failslab, interval 1, probability 0, space 0, times 0 [ 240.083181][ T8310] CPU: 0 UID: 0 PID: 8310 Comm: syz.0.888 Tainted: G L syzkaller #0 PREEMPT(full) [ 240.083226][ T8310] Tainted: [L]=SOFTLOCKUP [ 240.083236][ T8310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 240.083252][ T8310] Call Trace: [ 240.083262][ T8310] [ 240.083273][ T8310] dump_stack_lvl+0x16c/0x1f0 [ 240.083319][ T8310] should_fail_ex+0x512/0x640 [ 240.083348][ T8310] ? lockdep_hardirqs_on+0x7c/0x110 [ 240.083393][ T8310] should_failslab+0xc2/0x120 [ 240.083435][ T8310] kmem_cache_alloc_noprof+0x83/0x770 [ 240.083468][ T8310] ? do_raw_spin_lock+0x12c/0x2b0 [ 240.083505][ T8310] ? inet_bind_bucket_create+0x2d/0x280 [ 240.083547][ T8310] ? inet_bind_bucket_create+0x2d/0x280 [ 240.083578][ T8310] inet_bind_bucket_create+0x2d/0x280 [ 240.083614][ T8310] inet_csk_get_port+0x117d/0x2890 [ 240.083671][ T8310] ? trace_inet_sock_set_state+0x194/0x1f0 [ 240.083703][ T8310] ? __pfx_inet_csk_get_port+0x10/0x10 [ 240.083747][ T8310] inet_csk_listen_start+0x158/0x380 [ 240.083794][ T8310] __inet_listen_sk+0x20f/0x520 [ 240.083829][ T8310] ? __pfx___inet_listen_sk+0x10/0x10 [ 240.083863][ T8310] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 240.083905][ T8310] ? __local_bh_enable_ip+0xa4/0x120 [ 240.083950][ T8310] inet_listen+0x93/0xd0 [ 240.083982][ T8310] smc_listen+0x5ff/0xbb0 [ 240.084021][ T8310] __sys_listen_socket+0x117/0x160 [ 240.084053][ T8310] __sys_listen+0xa7/0x130 [ 240.084083][ T8310] __x64_sys_listen+0x53/0x80 [ 240.084112][ T8310] do_syscall_64+0xcd/0xf80 [ 240.084158][ T8310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.084186][ T8310] RIP: 0033:0x7ff6b698f7c9 [ 240.084209][ T8310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.084238][ T8310] RSP: 002b:00007ff6b4bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 240.084265][ T8310] RAX: ffffffffffffffda RBX: 00007ff6b6be5fa0 RCX: 00007ff6b698f7c9 [ 240.084284][ T8310] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000003 [ 240.084300][ T8310] RBP: 00007ff6b6a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 240.084317][ T8310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.084333][ T8310] R13: 00007ff6b6be6038 R14: 00007ff6b6be5fa0 R15: 00007ffdb8c83da8 [ 240.084372][ T8310] [ 242.257012][ T8343] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 242.430106][ T8316] kexec: Could not allocate control_code_buffer [ 242.556493][ T8347] sp0: Synchronizing with TNC [ 242.637092][ T8346] [U] [ 244.821005][ T8386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.916'. [ 247.974855][ T8465] zswap: compressor not available [ 248.277859][ T8479] FAULT_INJECTION: forcing a failure. [ 248.277859][ T8479] name failslab, interval 1, probability 0, space 0, times 0 [ 248.322117][ T8479] CPU: 0 UID: 0 PID: 8479 Comm: syz.1.944 Tainted: G L syzkaller #0 PREEMPT(full) [ 248.322169][ T8479] Tainted: [L]=SOFTLOCKUP [ 248.322181][ T8479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 248.322201][ T8479] Call Trace: [ 248.322211][ T8479] [ 248.322229][ T8479] dump_stack_lvl+0x16c/0x1f0 [ 248.322281][ T8479] should_fail_ex+0x512/0x640 [ 248.322315][ T8479] ? kmem_cache_alloc_noprof+0x62/0x770 [ 248.322359][ T8479] should_failslab+0xc2/0x120 [ 248.322409][ T8479] kmem_cache_alloc_noprof+0x83/0x770 [ 248.322446][ T8479] ? seq_open+0x55/0x170 [ 248.322487][ T8479] ? __pfx_tracing_clock_show+0x10/0x10 [ 248.322519][ T8479] ? seq_open+0x55/0x170 [ 248.322550][ T8479] seq_open+0x55/0x170 [ 248.322583][ T8479] ? __pfx_tracing_clock_show+0x10/0x10 [ 248.322616][ T8479] single_open+0xfc/0x1f0 [ 248.322653][ T8479] tracing_clock_open+0xa7/0x110 [ 248.322700][ T8479] do_dentry_open+0x748/0x1590 [ 248.322758][ T8479] ? __pfx_tracing_clock_open+0x10/0x10 [ 248.322813][ T8479] vfs_open+0x82/0x3f0 [ 248.322852][ T8479] path_openat+0x2078/0x3140 [ 248.322913][ T8479] ? __pfx_path_openat+0x10/0x10 [ 248.322975][ T8479] do_filp_open+0x20b/0x470 [ 248.323025][ T8479] ? __pfx_do_filp_open+0x10/0x10 [ 248.323104][ T8479] ? alloc_fd+0x471/0x7d0 [ 248.323167][ T8479] do_sys_openat2+0x121/0x290 [ 248.323195][ T8479] ? __pfx_do_sys_openat2+0x10/0x10 [ 248.323232][ T8479] __x64_sys_openat+0x174/0x210 [ 248.323263][ T8479] ? __pfx___x64_sys_openat+0x10/0x10 [ 248.323301][ T8479] do_syscall_64+0xcd/0xf80 [ 248.323338][ T8479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.323361][ T8479] RIP: 0033:0x7f971c78f7c9 [ 248.323380][ T8479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.323403][ T8479] RSP: 002b:00007f971d5a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 248.323424][ T8479] RAX: ffffffffffffffda RBX: 00007f971c9e5fa0 RCX: 00007f971c78f7c9 [ 248.323439][ T8479] RDX: 0000000000088000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 248.323454][ T8479] RBP: 00007f971c813f91 R08: 0000000000000000 R09: 0000000000000000 [ 248.323468][ T8479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.323481][ T8479] R13: 00007f971c9e6038 R14: 00007f971c9e5fa0 R15: 00007ffec5fe9ab8 [ 248.323511][ T8479] [ 248.853248][ T8484] netlink: 28 bytes leftover after parsing attributes in process `syz.2.935'. [ 249.029505][ T8486] FAULT_INJECTION: forcing a failure. [ 249.029505][ T8486] name failslab, interval 1, probability 0, space 0, times 0 [ 249.064595][ T8486] CPU: 0 UID: 0 PID: 8486 Comm: syz.1.937 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.064646][ T8486] Tainted: [L]=SOFTLOCKUP [ 249.064658][ T8486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 249.064677][ T8486] Call Trace: [ 249.064692][ T8486] [ 249.064705][ T8486] dump_stack_lvl+0x16c/0x1f0 [ 249.064756][ T8486] should_fail_ex+0x512/0x640 [ 249.064793][ T8486] ? kmem_cache_alloc_noprof+0x62/0x770 [ 249.064837][ T8486] should_failslab+0xc2/0x120 [ 249.064885][ T8486] kmem_cache_alloc_noprof+0x83/0x770 [ 249.064932][ T8486] ? __proc_create+0x2c8/0x8d0 [ 249.064984][ T8486] ? __proc_create+0x2c8/0x8d0 [ 249.065021][ T8486] __proc_create+0x2c8/0x8d0 [ 249.065065][ T8486] ? __pfx___proc_create+0x10/0x10 [ 249.065127][ T8486] proc_create_reg+0x7d/0x180 [ 249.065176][ T8486] proc_create_net_data+0x8e/0x1c0 [ 249.065221][ T8486] ? __pfx_proc_create_net_data+0x10/0x10 [ 249.065278][ T8486] ? __pfx_phonet_init_net+0x10/0x10 [ 249.065328][ T8486] phonet_init_net+0x66/0x120 [ 249.065375][ T8486] ops_init+0x1e2/0x5f0 [ 249.065424][ T8486] setup_net+0x11d/0x3a0 [ 249.065467][ T8486] ? __pfx_setup_net+0x10/0x10 [ 249.065508][ T8486] ? lockdep_init_map_type+0x5c/0x270 [ 249.065543][ T8486] ? mutex_init_lockep+0x110/0x150 [ 249.065581][ T8486] copy_net_ns+0x351/0x7c0 [ 249.065633][ T8486] create_new_namespaces+0x3ea/0xab0 [ 249.065688][ T8486] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 249.065737][ T8486] ksys_unshare+0x45b/0xa40 [ 249.065788][ T8486] ? __pfx_ksys_unshare+0x10/0x10 [ 249.065841][ T8486] ? xfd_validate_state+0x61/0x180 [ 249.065883][ T8486] __x64_sys_unshare+0x31/0x40 [ 249.065918][ T8486] do_syscall_64+0xcd/0xf80 [ 249.065971][ T8486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.066005][ T8486] RIP: 0033:0x7f971c78f7c9 [ 249.066030][ T8486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.066064][ T8486] RSP: 002b:00007f971d5a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 249.066095][ T8486] RAX: ffffffffffffffda RBX: 00007f971c9e5fa0 RCX: 00007f971c78f7c9 [ 249.066116][ T8486] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 249.066136][ T8486] RBP: 00007f971c813f91 R08: 0000000000000000 R09: 0000000000000000 [ 249.066156][ T8486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.066176][ T8486] R13: 00007f971c9e6038 R14: 00007f971c9e5fa0 R15: 00007ffec5fe9ab8 [ 249.066221][ T8486] [ 251.454638][ T8475] kexec: Could not allocate control_code_buffer [ 251.976078][ T8519] block nbd8: shutting down sockets [ 252.545249][ T8535] netlink: 330 bytes leftover after parsing attributes in process `syz.2.956'. [ 256.854995][ T30] audit: type=1804 audit(1766094816.968:6): pid=8591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.971" name="/newroot/237/file0" dev="tmpfs" ino=1218 res=1 errno=0 [ 257.200104][ T30] audit: type=1804 audit(1766094817.308:7): pid=8584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.971" name="/newroot/237/file0" dev="tmpfs" ino=1218 res=1 errno=0 [ 260.297432][ T8631] zswap: compressor not available [ 265.962601][ T8703] FAULT_INJECTION: forcing a failure. [ 265.962601][ T8703] name failslab, interval 1, probability 0, space 0, times 0 [ 265.984582][ T8703] CPU: 0 UID: 0 PID: 8703 Comm: syz.2.998 Tainted: G L syzkaller #0 PREEMPT(full) [ 265.984634][ T8703] Tainted: [L]=SOFTLOCKUP [ 265.984645][ T8703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 265.984665][ T8703] Call Trace: [ 265.984675][ T8703] [ 265.984688][ T8703] dump_stack_lvl+0x16c/0x1f0 [ 265.984744][ T8703] should_fail_ex+0x512/0x640 [ 265.984779][ T8703] ? kmem_cache_alloc_noprof+0x62/0x770 [ 265.984821][ T8703] should_failslab+0xc2/0x120 [ 265.984869][ T8703] kmem_cache_alloc_noprof+0x83/0x770 [ 265.984907][ T8703] ? __kernfs_new_node+0xd2/0x990 [ 265.984952][ T8703] ? __kernfs_new_node+0xd2/0x990 [ 265.984985][ T8703] __kernfs_new_node+0xd2/0x990 [ 265.985030][ T8703] ? __pfx___kernfs_new_node+0x10/0x10 [ 265.985078][ T8703] ? find_held_lock+0x2b/0x80 [ 265.985119][ T8703] ? kernfs_root+0xee/0x2a0 [ 265.985164][ T8703] kernfs_new_node+0x13c/0x1e0 [ 265.985222][ T8703] __kernfs_create_file+0x53/0x350 [ 265.985277][ T8703] sysfs_add_file_mode_ns+0x207/0x3c0 [ 265.985324][ T8703] internal_create_group+0x597/0xf70 [ 265.985374][ T8703] ? __pfx_internal_create_group+0x10/0x10 [ 265.985411][ T8703] ? __x64_sys_unshare+0x31/0x40 [ 265.985437][ T8703] ? do_syscall_64+0xcd/0xf80 [ 265.985481][ T8703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.985533][ T8703] netdev_queue_update_kobjects+0x17a/0x710 [ 265.985599][ T8703] netdev_register_kobject+0x2b3/0x3d0 [ 265.985656][ T8703] register_netdevice+0x13ac/0x21d0 [ 265.985711][ T8703] ? __pfx_register_netdevice+0x10/0x10 [ 265.985770][ T8703] __ip_tunnel_create+0x540/0x6b0 [ 265.985824][ T8703] ? __pfx___ip_tunnel_create+0x10/0x10 [ 265.985887][ T8703] ip_tunnel_init_net+0x22f/0x7d0 [ 265.985925][ T8703] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 265.985967][ T8703] ? ops_init+0x77/0x5f0 [ 265.986012][ T8703] ? __pfx_erspan_init_net+0x10/0x10 [ 265.986057][ T8703] ops_init+0x1e2/0x5f0 [ 265.986102][ T8703] setup_net+0x11d/0x3a0 [ 265.986146][ T8703] ? __pfx_setup_net+0x10/0x10 [ 265.986197][ T8703] ? lockdep_init_map_type+0x5c/0x270 [ 265.986232][ T8703] ? mutex_init_lockep+0x110/0x150 [ 265.986271][ T8703] copy_net_ns+0x351/0x7c0 [ 265.986323][ T8703] create_new_namespaces+0x3ea/0xab0 [ 265.986376][ T8703] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 265.986423][ T8703] ksys_unshare+0x45b/0xa40 [ 265.986475][ T8703] ? __pfx_ksys_unshare+0x10/0x10 [ 265.986526][ T8703] ? xfd_validate_state+0x61/0x180 [ 265.986566][ T8703] __x64_sys_unshare+0x31/0x40 [ 265.986591][ T8703] do_syscall_64+0xcd/0xf80 [ 265.986638][ T8703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.986671][ T8703] RIP: 0033:0x7ff49718f7c9 [ 265.986697][ T8703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.986728][ T8703] RSP: 002b:00007ff4953f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 265.986758][ T8703] RAX: ffffffffffffffda RBX: 00007ff4973e5fa0 RCX: 00007ff49718f7c9 [ 265.986780][ T8703] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 265.986799][ T8703] RBP: 00007ff497213f91 R08: 0000000000000000 R09: 0000000000000000 [ 265.986819][ T8703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.986839][ T8703] R13: 00007ff4973e6038 R14: 00007ff4973e5fa0 R15: 00007fff4e81d568 [ 265.986883][ T8703] [ 266.684832][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.694124][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 273.491271][ T8804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1028'. [ 275.347202][ T8825] FAULT_INJECTION: forcing a failure. [ 275.347202][ T8825] name failslab, interval 1, probability 0, space 0, times 0 [ 275.366039][ T8825] CPU: 1 UID: 0 PID: 8825 Comm: syz.0.1033 Tainted: G L syzkaller #0 PREEMPT(full) [ 275.366092][ T8825] Tainted: [L]=SOFTLOCKUP [ 275.366104][ T8825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 275.366122][ T8825] Call Trace: [ 275.366133][ T8825] [ 275.366145][ T8825] dump_stack_lvl+0x16c/0x1f0 [ 275.366202][ T8825] should_fail_ex+0x512/0x640 [ 275.366237][ T8825] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 275.366284][ T8825] should_failslab+0xc2/0x120 [ 275.366337][ T8825] kmem_cache_alloc_node_noprof+0x86/0x800 [ 275.366377][ T8825] ? __alloc_skb+0x156/0x410 [ 275.366418][ T8825] ? __alloc_skb+0x156/0x410 [ 275.366451][ T8825] __alloc_skb+0x156/0x410 [ 275.366482][ T8825] ? __alloc_skb+0x35d/0x410 [ 275.366517][ T8825] ? __pfx___alloc_skb+0x10/0x10 [ 275.366549][ T8825] ? __pfx_add_uevent_var+0x10/0x10 [ 275.366592][ T8825] ? __asan_memcpy+0x3c/0x60 [ 275.366635][ T8825] alloc_uevent_skb+0x7d/0x210 [ 275.366678][ T8825] ? __pfx_device_namespace+0x10/0x10 [ 275.366724][ T8825] kobject_uevent_env+0x1277/0x1920 [ 275.366769][ T8825] ? bus_to_subsys+0x131/0x160 [ 275.366823][ T8825] device_add+0x1103/0x1980 [ 275.366873][ T8825] ? __pfx_device_add+0x10/0x10 [ 275.366917][ T8825] ? lockdep_init_map_type+0x5c/0x270 [ 275.366952][ T8825] ? __init_waitqueue_head+0xca/0x150 [ 275.367000][ T8825] netdev_register_kobject+0x1a9/0x3d0 [ 275.367056][ T8825] register_netdevice+0x13ac/0x21d0 [ 275.367112][ T8825] ? __pfx_register_netdevice+0x10/0x10 [ 275.367169][ T8825] __ip_tunnel_create+0x540/0x6b0 [ 275.367224][ T8825] ? __pfx___ip_tunnel_create+0x10/0x10 [ 275.367298][ T8825] ip_tunnel_init_net+0x22f/0x7d0 [ 275.367336][ T8825] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 275.367380][ T8825] ? ops_init+0x77/0x5f0 [ 275.367425][ T8825] ? __pfx_erspan_init_net+0x10/0x10 [ 275.367469][ T8825] ops_init+0x1e2/0x5f0 [ 275.367514][ T8825] setup_net+0x11d/0x3a0 [ 275.367558][ T8825] ? __pfx_setup_net+0x10/0x10 [ 275.367597][ T8825] ? lockdep_init_map_type+0x5c/0x270 [ 275.367629][ T8825] ? mutex_init_lockep+0x110/0x150 [ 275.367676][ T8825] copy_net_ns+0x351/0x7c0 [ 275.367728][ T8825] create_new_namespaces+0x3ea/0xab0 [ 275.367783][ T8825] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 275.367833][ T8825] ksys_unshare+0x45b/0xa40 [ 275.367885][ T8825] ? __pfx_ksys_unshare+0x10/0x10 [ 275.367937][ T8825] ? xfd_validate_state+0x61/0x180 [ 275.367979][ T8825] __x64_sys_unshare+0x31/0x40 [ 275.368008][ T8825] do_syscall_64+0xcd/0xf80 [ 275.368059][ T8825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.368090][ T8825] RIP: 0033:0x7ff6b698f7c9 [ 275.368116][ T8825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.368148][ T8825] RSP: 002b:00007ff6b4bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 275.368178][ T8825] RAX: ffffffffffffffda RBX: 00007ff6b6be5fa0 RCX: 00007ff6b698f7c9 [ 275.368199][ T8825] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 275.368218][ T8825] RBP: 00007ff6b6a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 275.368237][ T8825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.368257][ T8825] R13: 00007ff6b6be6038 R14: 00007ff6b6be5fa0 R15: 00007ffdb8c83da8 [ 275.368302][ T8825] [ 278.794006][ T8847] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 278.834761][ T8847] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 278.853683][ T8847] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 278.861045][ T8847] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 280.184676][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 280.916029][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 280.916065][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout [ 280.922455][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout [ 283.293998][ T8922] zswap: compressor not available [ 283.491255][ T8930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1060'. [ 287.783465][ T8990] FAULT_INJECTION: forcing a failure. [ 287.783465][ T8990] name failslab, interval 1, probability 0, space 0, times 0 [ 287.858828][ T8990] CPU: 1 UID: 0 PID: 8990 Comm: syz.2.1078 Tainted: G L syzkaller #0 PREEMPT(full) [ 287.858878][ T8990] Tainted: [L]=SOFTLOCKUP [ 287.858890][ T8990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 287.858908][ T8990] Call Trace: [ 287.858919][ T8990] [ 287.858931][ T8990] dump_stack_lvl+0x16c/0x1f0 [ 287.858987][ T8990] should_fail_ex+0x512/0x640 [ 287.859021][ T8990] ? __kmalloc_noprof+0xca/0x910 [ 287.859061][ T8990] should_failslab+0xc2/0x120 [ 287.859109][ T8990] __kmalloc_noprof+0xeb/0x910 [ 287.859144][ T8990] ? __register_sysctl_table+0xe8e/0x1900 [ 287.859190][ T8990] ? __register_sysctl_table+0xea2/0x1900 [ 287.859241][ T8990] ? __register_sysctl_table+0xea2/0x1900 [ 287.859283][ T8990] __register_sysctl_table+0xea2/0x1900 [ 287.859338][ T8990] ? __pfx___register_sysctl_table+0x10/0x10 [ 287.859381][ T8990] ? is_module_address+0x69/0xf0 [ 287.859418][ T8990] ? register_net_sysctl_sz+0x222/0x450 [ 287.859462][ T8990] neigh_sysctl_register+0x31f/0x670 [ 287.859503][ T8990] ? __pfx_ndisc_ifinfo_sysctl_change+0x10/0x10 [ 287.859555][ T8990] ? __pfx_neigh_sysctl_register+0x10/0x10 [ 287.859605][ T8990] ? lockdep_init_map_type+0x5c/0x270 [ 287.859637][ T8990] ? mld_in_v1_mode+0x2b2/0x3a0 [ 287.859677][ T8990] addrconf_sysctl_register+0xb9/0x1f0 [ 287.859732][ T8990] ipv6_add_dev+0xb31/0x15f0 [ 287.859786][ T8990] addrconf_notify+0x53e/0x19f0 [ 287.859822][ T8990] ? ip6mr_device_event+0x1bc/0x230 [ 287.859867][ T8990] notifier_call_chain+0xbc/0x3e0 [ 287.859922][ T8990] ? __pfx_addrconf_notify+0x10/0x10 [ 287.859966][ T8990] call_netdevice_notifiers_info+0xbe/0x110 [ 287.860021][ T8990] register_netdevice+0x1792/0x21d0 [ 287.860076][ T8990] ? __pfx_register_netdevice+0x10/0x10 [ 287.860137][ T8990] __ip_tunnel_create+0x540/0x6b0 [ 287.860191][ T8990] ? __pfx___ip_tunnel_create+0x10/0x10 [ 287.860257][ T8990] ip_tunnel_init_net+0x22f/0x7d0 [ 287.860293][ T8990] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 287.860335][ T8990] ? ops_init+0x77/0x5f0 [ 287.860381][ T8990] ? __pfx_erspan_init_net+0x10/0x10 [ 287.860425][ T8990] ops_init+0x1e2/0x5f0 [ 287.860470][ T8990] setup_net+0x11d/0x3a0 [ 287.860518][ T8990] ? __pfx_setup_net+0x10/0x10 [ 287.860559][ T8990] ? lockdep_init_map_type+0x5c/0x270 [ 287.860592][ T8990] ? mutex_init_lockep+0x110/0x150 [ 287.860631][ T8990] copy_net_ns+0x351/0x7c0 [ 287.860683][ T8990] create_new_namespaces+0x3ea/0xab0 [ 287.860738][ T8990] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 287.860784][ T8990] ksys_unshare+0x45b/0xa40 [ 287.860836][ T8990] ? __pfx_ksys_unshare+0x10/0x10 [ 287.860889][ T8990] ? xfd_validate_state+0x61/0x180 [ 287.860932][ T8990] __x64_sys_unshare+0x31/0x40 [ 287.860960][ T8990] do_syscall_64+0xcd/0xf80 [ 287.861013][ T8990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.861044][ T8990] RIP: 0033:0x7ff49718f7c9 [ 287.861070][ T8990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.861102][ T8990] RSP: 002b:00007ff4953f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 287.861133][ T8990] RAX: ffffffffffffffda RBX: 00007ff4973e5fa0 RCX: 00007ff49718f7c9 [ 287.861155][ T8990] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 287.861175][ T8990] RBP: 00007ff497213f91 R08: 0000000000000000 R09: 0000000000000000 [ 287.861196][ T8990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.861215][ T8990] R13: 00007ff4973e6038 R14: 00007ff4973e5fa0 R15: 00007fff4e81d568 [ 287.861261][ T8990] [ 287.861358][ T8990] sysctl could not get directory: /net/ipv6/neigh/erspan0 -12 [ 291.498816][ T9056] FAULT_INJECTION: forcing a failure. [ 291.498816][ T9056] name failslab, interval 1, probability 0, space 0, times 0 [ 291.511736][ T9056] CPU: 1 UID: 0 PID: 9056 Comm: syz.0.1090 Tainted: G L syzkaller #0 PREEMPT(full) [ 291.511788][ T9056] Tainted: [L]=SOFTLOCKUP [ 291.511800][ T9056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 291.511820][ T9056] Call Trace: [ 291.511830][ T9056] [ 291.511842][ T9056] dump_stack_lvl+0x16c/0x1f0 [ 291.511897][ T9056] should_fail_ex+0x512/0x640 [ 291.511931][ T9056] ? __kmalloc_noprof+0xca/0x910 [ 291.511969][ T9056] should_failslab+0xc2/0x120 [ 291.512018][ T9056] __kmalloc_noprof+0xeb/0x910 [ 291.512053][ T9056] ? __register_sysctl_table+0xea2/0x1900 [ 291.512105][ T9056] ? __register_sysctl_table+0xea2/0x1900 [ 291.512148][ T9056] __register_sysctl_table+0xea2/0x1900 [ 291.512203][ T9056] ? __pfx___register_sysctl_table+0x10/0x10 [ 291.512261][ T9056] ? is_module_address+0x69/0xf0 [ 291.512300][ T9056] ? register_net_sysctl_sz+0x222/0x450 [ 291.512344][ T9056] __devinet_sysctl_register+0x1b9/0x360 [ 291.512380][ T9056] ? __pfx_neigh_sysctl_register+0x10/0x10 [ 291.512421][ T9056] ? inetdev_init+0x245/0x580 [ 291.512450][ T9056] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 291.512487][ T9056] ? copy_net_ns+0x351/0x7c0 [ 291.512529][ T9056] ? create_new_namespaces+0x3ea/0xab0 [ 291.512570][ T9056] ? unshare_nsproxy_namespaces+0xc0/0x1f0 [ 291.512611][ T9056] ? ksys_unshare+0x45b/0xa40 [ 291.512659][ T9056] ? __x64_sys_unshare+0x31/0x40 [ 291.512686][ T9056] ? do_syscall_64+0xcd/0xf80 [ 291.512732][ T9056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.512777][ T9056] devinet_sysctl_register+0x17b/0x200 [ 291.512815][ T9056] inetdev_init+0x2b8/0x580 [ 291.512850][ T9056] inetdev_event+0xc32/0x1870 [ 291.512884][ T9056] ? ib_netdevice_event+0xfc/0x330 [ 291.512921][ T9056] ? __pfx_inetdev_event+0x10/0x10 [ 291.512956][ T9056] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 291.513012][ T9056] notifier_call_chain+0xbc/0x3e0 [ 291.513062][ T9056] ? __pfx_inetdev_event+0x10/0x10 [ 291.513103][ T9056] call_netdevice_notifiers_info+0xbe/0x110 [ 291.513156][ T9056] register_netdevice+0x1792/0x21d0 [ 291.513211][ T9056] ? __pfx_register_netdevice+0x10/0x10 [ 291.513278][ T9056] __ip_tunnel_create+0x540/0x6b0 [ 291.513334][ T9056] ? __pfx___ip_tunnel_create+0x10/0x10 [ 291.513400][ T9056] ip_tunnel_init_net+0x22f/0x7d0 [ 291.513437][ T9056] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 291.513479][ T9056] ? ops_init+0x77/0x5f0 [ 291.513525][ T9056] ? __pfx_erspan_init_net+0x10/0x10 [ 291.513568][ T9056] ops_init+0x1e2/0x5f0 [ 291.513614][ T9056] setup_net+0x11d/0x3a0 [ 291.513658][ T9056] ? __pfx_setup_net+0x10/0x10 [ 291.513696][ T9056] ? lockdep_init_map_type+0x5c/0x270 [ 291.513730][ T9056] ? mutex_init_lockep+0x110/0x150 [ 291.513770][ T9056] copy_net_ns+0x351/0x7c0 [ 291.513822][ T9056] create_new_namespaces+0x3ea/0xab0 [ 291.513875][ T9056] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 291.513923][ T9056] ksys_unshare+0x45b/0xa40 [ 291.514004][ T9056] ? __pfx_ksys_unshare+0x10/0x10 [ 291.514057][ T9056] ? xfd_validate_state+0x61/0x180 [ 291.514099][ T9056] __x64_sys_unshare+0x31/0x40 [ 291.514126][ T9056] do_syscall_64+0xcd/0xf80 [ 291.514175][ T9056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.514205][ T9056] RIP: 0033:0x7ff6b698f7c9 [ 291.514231][ T9056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.514268][ T9056] RSP: 002b:00007ff6b4bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 291.514300][ T9056] RAX: ffffffffffffffda RBX: 00007ff6b6be5fa0 RCX: 00007ff6b698f7c9 [ 291.514320][ T9056] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 291.514338][ T9056] RBP: 00007ff6b6a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 291.514356][ T9056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.514373][ T9056] R13: 00007ff6b6be6038 R14: 00007ff6b6be5fa0 R15: 00007ffdb8c83da8 [ 291.514415][ T9056] [ 291.994661][ T9056] sysctl could not get directory: /net/ipv4/conf/erspan0 -12 [ 291.999838][ T9038] kexec: Could not allocate control_code_buffer [ 299.079225][ T9147] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1114'. [ 303.265484][ T9201] FAULT_INJECTION: forcing a failure. [ 303.265484][ T9201] name failslab, interval 1, probability 0, space 0, times 0 [ 303.315408][ T9201] CPU: 1 UID: 0 PID: 9201 Comm: syz.2.1130 Tainted: G L syzkaller #0 PREEMPT(full) [ 303.315456][ T9201] Tainted: [L]=SOFTLOCKUP [ 303.315464][ T9201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 303.315478][ T9201] Call Trace: [ 303.315486][ T9201] [ 303.315494][ T9201] dump_stack_lvl+0x16c/0x1f0 [ 303.315535][ T9201] should_fail_ex+0x512/0x640 [ 303.315560][ T9201] ? __kmalloc_noprof+0xca/0x910 [ 303.315588][ T9201] should_failslab+0xc2/0x120 [ 303.315624][ T9201] __kmalloc_noprof+0xeb/0x910 [ 303.315649][ T9201] ? lockdep_init_map_type+0x5c/0x270 [ 303.315671][ T9201] ? ops_init+0x77/0x5f0 [ 303.315705][ T9201] ? ops_init+0x77/0x5f0 [ 303.315733][ T9201] ops_init+0x77/0x5f0 [ 303.315766][ T9201] setup_net+0x11d/0x3a0 [ 303.315798][ T9201] ? __pfx_setup_net+0x10/0x10 [ 303.315829][ T9201] ? lockdep_init_map_type+0x5c/0x270 [ 303.315853][ T9201] ? mutex_init_lockep+0x110/0x150 [ 303.315881][ T9201] copy_net_ns+0x351/0x7c0 [ 303.315917][ T9201] create_new_namespaces+0x3ea/0xab0 [ 303.315963][ T9201] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 303.315998][ T9201] ksys_unshare+0x45b/0xa40 [ 303.316035][ T9201] ? __pfx_ksys_unshare+0x10/0x10 [ 303.316084][ T9201] __x64_sys_unshare+0x31/0x40 [ 303.316104][ T9201] do_syscall_64+0xcd/0xf80 [ 303.316141][ T9201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.316165][ T9201] RIP: 0033:0x7ff49718f7c9 [ 303.316183][ T9201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.316207][ T9201] RSP: 002b:00007ff4953f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 303.316229][ T9201] RAX: ffffffffffffffda RBX: 00007ff4973e5fa0 RCX: 00007ff49718f7c9 [ 303.316245][ T9201] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 303.316259][ T9201] RBP: 00007ff497213f91 R08: 0000000000000000 R09: 0000000000000000 [ 303.316273][ T9201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.316287][ T9201] R13: 00007ff4973e6038 R14: 00007ff4973e5fa0 R15: 00007fff4e81d568 [ 303.316317][ T9201] [ 307.495633][ T9260] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1148'. [ 307.522639][ T9260] veth1_macvtap: left promiscuous mode [ 310.353553][ T9294] FAULT_INJECTION: forcing a failure. [ 310.353553][ T9294] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 310.384618][ T9294] CPU: 0 UID: 0 PID: 9294 Comm: syz.1.1167 Tainted: G L syzkaller #0 PREEMPT(full) [ 310.384677][ T9294] Tainted: [L]=SOFTLOCKUP [ 310.384688][ T9294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 310.384725][ T9294] Call Trace: [ 310.384735][ T9294] [ 310.384748][ T9294] dump_stack_lvl+0x16c/0x1f0 [ 310.384801][ T9294] should_fail_ex+0x512/0x640 [ 310.384843][ T9294] should_fail_alloc_page+0xe7/0x130 [ 310.384895][ T9294] prepare_alloc_pages+0x401/0x670 [ 310.384946][ T9294] ? rcu_is_watching+0x12/0xc0 [ 310.384993][ T9294] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 310.385034][ T9294] ? should_fail_alloc_page+0xee/0x130 [ 310.385087][ T9294] ? rcu_is_watching+0x12/0xc0 [ 310.385131][ T9294] ? trace_mm_page_alloc+0x11b/0x180 [ 310.385182][ T9294] ? __alloc_frozen_pages_noprof+0x292/0x2430 [ 310.385228][ T9294] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 310.385276][ T9294] ? ring_buffer_lock_reserve+0x6ca/0x11b0 [ 310.385348][ T9294] alloc_pages_bulk_noprof+0x77a/0x1410 [ 310.385386][ T9294] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 310.385439][ T9294] ? policy_nodemask+0xea/0x4e0 [ 310.385490][ T9294] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 310.385533][ T9294] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 310.385601][ T9294] __kasan_populate_vmalloc+0xfb/0x220 [ 310.385660][ T9294] alloc_vmap_area+0x98d/0x2a50 [ 310.385724][ T9294] ? __pfx_alloc_vmap_area+0x10/0x10 [ 310.385784][ T9294] __get_vm_area_node+0x1ca/0x330 [ 310.385839][ T9294] __vmalloc_node_range_noprof+0x247/0x16b0 [ 310.385874][ T9294] ? __do_sys_listmount+0x27f/0xf40 [ 310.385918][ T9294] ? __pfx___futex_wait+0x10/0x10 [ 310.385966][ T9294] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 310.386016][ T9294] ? policy_nodemask+0xea/0x4e0 [ 310.386064][ T9294] ? __do_sys_listmount+0x27f/0xf40 [ 310.386109][ T9294] ? alloc_pages_mpol+0x25a/0x550 [ 310.386160][ T9294] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 310.386210][ T9294] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 310.386254][ T9294] ? ___kmalloc_large_node+0x10c/0x150 [ 310.386293][ T9294] __kvmalloc_node_noprof+0x42c/0xa40 [ 310.386337][ T9294] ? __do_sys_listmount+0x27f/0xf40 [ 310.386383][ T9294] ? __do_sys_listmount+0x27f/0xf40 [ 310.386425][ T9294] ? _copy_from_user+0x59/0xd0 [ 310.386466][ T9294] ? __do_sys_listmount+0x27f/0xf40 [ 310.386505][ T9294] __do_sys_listmount+0x27f/0xf40 [ 310.386556][ T9294] ? __pfx___do_sys_listmount+0x10/0x10 [ 310.386601][ T9294] ? fput+0x70/0xf0 [ 310.386654][ T9294] do_syscall_64+0xcd/0xf80 [ 310.386704][ T9294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.386736][ T9294] RIP: 0033:0x7f971c78f7c9 [ 310.386760][ T9294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.386792][ T9294] RSP: 002b:00007f971d5a0038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 310.386823][ T9294] RAX: ffffffffffffffda RBX: 00007f971c9e5fa0 RCX: 00007f971c78f7c9 [ 310.386845][ T9294] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 310.386867][ T9294] RBP: 00007f971c813f91 R08: 0000000000000000 R09: 0000000000000000 [ 310.386885][ T9294] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 310.386904][ T9294] R13: 00007f971c9e6038 R14: 00007f971c9e5fa0 R15: 00007ffec5fe9ab8 [ 310.386946][ T9294] [ 310.388273][ T9294] syz.1.1167: vmalloc error: size 8000000, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 310.749506][ T9294] CPU: 1 UID: 0 PID: 9294 Comm: syz.1.1167 Tainted: G L syzkaller #0 PREEMPT(full) [ 310.749552][ T9294] Tainted: [L]=SOFTLOCKUP [ 310.749563][ T9294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 310.749583][ T9294] Call Trace: [ 310.749600][ T9294] [ 310.749612][ T9294] dump_stack_lvl+0x16c/0x1f0 [ 310.749666][ T9294] warn_alloc+0x248/0x3a0 [ 310.749707][ T9294] ? __pfx_warn_alloc+0x10/0x10 [ 310.749749][ T9294] ? __get_vm_area_node+0x2cd/0x330 [ 310.749806][ T9294] ? __get_vm_area_node+0x2cd/0x330 [ 310.749854][ T9294] ? __get_vm_area_node+0x208/0x330 [ 310.749912][ T9294] __vmalloc_node_range_noprof+0xbe0/0x16b0 [ 310.749951][ T9294] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 310.750002][ T9294] ? policy_nodemask+0xea/0x4e0 [ 310.750049][ T9294] ? __do_sys_listmount+0x27f/0xf40 [ 310.750092][ T9294] ? alloc_pages_mpol+0x25a/0x550 [ 310.750144][ T9294] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 310.750193][ T9294] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 310.750236][ T9294] ? ___kmalloc_large_node+0x10c/0x150 [ 310.750275][ T9294] __kvmalloc_node_noprof+0x42c/0xa40 [ 310.750319][ T9294] ? __do_sys_listmount+0x27f/0xf40 [ 310.750366][ T9294] ? __do_sys_listmount+0x27f/0xf40 [ 310.750406][ T9294] ? _copy_from_user+0x59/0xd0 [ 310.750445][ T9294] ? __do_sys_listmount+0x27f/0xf40 [ 310.750488][ T9294] __do_sys_listmount+0x27f/0xf40 [ 310.750548][ T9294] ? __pfx___do_sys_listmount+0x10/0x10 [ 310.750602][ T9294] ? fput+0x70/0xf0 [ 310.750652][ T9294] do_syscall_64+0xcd/0xf80 [ 310.750705][ T9294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.750738][ T9294] RIP: 0033:0x7f971c78f7c9 [ 310.750763][ T9294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.750793][ T9294] RSP: 002b:00007f971d5a0038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 310.750824][ T9294] RAX: ffffffffffffffda RBX: 00007f971c9e5fa0 RCX: 00007f971c78f7c9 [ 310.750844][ T9294] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 310.750864][ T9294] RBP: 00007f971c813f91 R08: 0000000000000000 R09: 0000000000000000 [ 310.750883][ T9294] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 310.750902][ T9294] R13: 00007f971c9e6038 R14: 00007f971c9e5fa0 R15: 00007ffec5fe9ab8 [ 310.750946][ T9294] [ 310.751023][ T9294] Mem-Info: [ 311.014604][ T9294] active_anon:12179 inactive_anon:2 isolated_anon:0 [ 311.014604][ T9294] active_file:13217 inactive_file:40507 isolated_file:0 [ 311.014604][ T9294] unevictable:768 dirty:332 writeback:0 [ 311.014604][ T9294] slab_reclaimable:10783 slab_unreclaimable:92480 [ 311.014604][ T9294] mapped:26592 shmem:1359 pagetables:1153 [ 311.014604][ T9294] sec_pagetables:0 bounce:0 [ 311.014604][ T9294] kernel_misc_reclaimable:0 [ 311.014604][ T9294] free:1321255 free_pcp:16781 free_cma:0 [ 311.148915][ T9294] Node 0 active_anon:48728kB inactive_anon:8kB active_file:45084kB inactive_file:161828kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98120kB dirty:1324kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11808kB pagetables:4496kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 311.255253][ T9294] Node 1 active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 311.360052][ T9294] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 311.442845][ T9294] lowmem_reserve[]: 0 2481 2483 2483 2483 [ 311.492648][ T9294] Node 0 DMA32 free:1387744kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44552kB inactive_anon:8kB active_file:44652kB inactive_file:161828kB unevictable:1536kB writepending:1336kB zspages:368kB present:3129332kB managed:2541028kB mlocked:0kB bounce:0kB free_pcp:53648kB local_pcp:17568kB free_cma:0kB [ 311.599451][ T9294] lowmem_reserve[]: 0 0 1 1 1 [ 311.604284][ T9294] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 311.656522][ T9294] lowmem_reserve[]: 0 0 0 0 0 [ 311.674481][ T9294] Node 1 Normal free:3887684kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19108kB local_pcp:13280kB free_cma:0kB [ 311.724490][ T9294] lowmem_reserve[]: 0 0 0 0 0 [ 311.729483][ T9294] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 311.755759][ T9294] Node 0 DMA32: 3146*4kB (UM) 2185*8kB (UME) 614*16kB (UME) 450*32kB (UME) 406*64kB (UME) 219*128kB (UM) 170*256kB (UM) 96*512kB (UM) 47*1024kB (UME) 12*2048kB (U) 272*4096kB (UM) = 1387792kB [ 311.786735][ T9294] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 311.805370][ T9294] Node 1 Normal: 9*4kB (UME) 41*8kB (UME) 44*16kB (UME) 140*32kB (UME) 42*64kB (UME) 9*128kB (UME) 4*256kB (UM) 3*512kB (UM) 3*1024kB (UME) 3*2048kB (UE) 944*4096kB (UM) = 3887788kB [ 311.844082][ T9294] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 311.857858][ T9294] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 311.884704][ T9294] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 311.904486][ T9294] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 311.922000][ T9294] 52974 total pagecache pages [ 311.927910][ T9294] 18 pages in swap cache [ 311.932302][ T9294] Free swap = 124828kB [ 311.937146][ T9294] Total swap = 124996kB [ 311.941490][ T9294] 2097051 pages RAM [ 311.949873][ T9294] 0 pages HighMem/MovableOnly [ 311.955039][ T9294] 429768 pages reserved [ 311.959266][ T9294] 0 pages cma reserved [ 316.466545][ T9386] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1186'. [ 320.546385][ T9434] kexec: Could not allocate control_code_buffer [ 323.776495][ T9482] kexec: Could not allocate control_code_buffer [ 325.905469][ T9559] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1253'. [ 325.990502][ T9561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1254'. [ 326.025604][ T9561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1254'. [ 327.069931][ T9588] bond0: invalid ARP target specified [ 327.438372][ T30] audit: type=1326 audit(1766094887.548:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9595 comm="syz.1.1268" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f971c78f7c9 code=0x0 [ 327.715132][ T9603] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1271'. [ 327.892864][ T9607] lo: entered allmulticast mode [ 327.918341][ T9607] lo: left allmulticast mode [ 328.108396][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 328.114965][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.306518][ T9617] netlink: 'syz.3.1276': attribute type 15 has an invalid length. [ 328.324518][ T9617] netlink: 186 bytes leftover after parsing attributes in process `syz.3.1276'. [ 328.742509][ T9628] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1282'. [ 330.567916][ T9673] netlink: 'syz.2.1301': attribute type 4 has an invalid length. [ 330.575850][ T9673] netlink: 314 bytes leftover after parsing attributes in process `syz.2.1301'. [ 331.606072][ T9697] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.1311' sets config #0 [ 331.787956][ T9703] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1314'. [ 332.182357][ T9718] netlink: 'syz.3.1320': attribute type 32 has an invalid length. [ 332.488287][ T9729] netlink: 'syz.1.1323': attribute type 1 has an invalid length. [ 332.997506][ T9742] nbd: must specify at least one socket [ 333.214755][ T9746] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1331'. [ 334.005190][ T9764] netlink: 'syz.3.1336': attribute type 4 has an invalid length. [ 334.023305][ T9764] netlink: 314 bytes leftover after parsing attributes in process `syz.3.1336'. [ 335.639891][ T9795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1351'. [ 335.695370][ T9798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1351'. [ 337.193171][ T9831] ACPI: button: Initial lid state set to 'ignore' [ 337.750955][ T9844] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1368'. [ 337.942227][ T9848] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1369'. [ 339.935829][ T9895] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1390'. [ 339.970071][ T9898] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1389'. [ 340.155152][ T9900] netlink: 206 bytes leftover after parsing attributes in process `syz.3.1391'. [ 340.654252][ T9911] block nbd0: Unsupported socket: should be TCP or UNIX. [ 342.893873][ T9956] netlink: 'syz.3.1409': attribute type 1 has an invalid length. [ 344.743438][ T9993] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1422'. [ 344.932104][T10001] netlink: 'syz.0.1424': attribute type 1 has an invalid length. [ 345.212844][T10009] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 345.221920][T10009] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 347.142488][T10018] kexec: Could not allocate control_code_buffer [ 348.293558][T10052] netlink: 'syz.2.1439': attribute type 1 has an invalid length. [ 351.786338][T10101] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1458'. [ 352.270719][T10110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1461'. [ 352.409031][T10113] netlink: 354 bytes leftover after parsing attributes in process `syz.0.1463'. [ 352.503753][T10117] tipc: Trying to set illegal importance in message [ 354.893880][ T5839] Bluetooth: hci1: unexpected subevent 0x05 length: 123 > 12 [ 355.011541][T10165] FAULT_INJECTION: forcing a failure. [ 355.011541][T10165] name failslab, interval 1, probability 0, space 0, times 0 [ 355.031524][T10165] CPU: 1 UID: 0 PID: 10165 Comm: syz.1.1484 Tainted: G L syzkaller #0 PREEMPT(full) [ 355.031591][T10165] Tainted: [L]=SOFTLOCKUP [ 355.031604][T10165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 355.031629][T10165] Call Trace: [ 355.031639][T10165] [ 355.031653][T10165] dump_stack_lvl+0x16c/0x1f0 [ 355.031708][T10165] should_fail_ex+0x512/0x640 [ 355.031750][T10165] ? __kvmalloc_node_noprof+0x129/0xa40 [ 355.031800][T10165] should_failslab+0xc2/0x120 [ 355.031851][T10165] __kvmalloc_node_noprof+0x14a/0xa40 [ 355.031903][T10165] ? alloc_fdtable+0x110/0x2d0 [ 355.031955][T10165] ? alloc_fdtable+0x110/0x2d0 [ 355.031995][T10165] alloc_fdtable+0x110/0x2d0 [ 355.032041][T10165] dup_fd+0x803/0xc70 [ 355.032093][T10165] ? apparmor_task_alloc+0x2c1/0x3b0 [ 355.032130][T10165] copy_process+0x255d/0x7430 [ 355.032180][T10165] ? __pfx___futex_wait+0x10/0x10 [ 355.032231][T10165] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 355.032291][T10165] ? __pfx_copy_process+0x10/0x10 [ 355.032337][T10165] ? find_held_lock+0x2b/0x80 [ 355.032391][T10165] ? futex_private_hash_put+0x160/0x1b0 [ 355.032433][T10165] kernel_clone+0xfc/0x910 [ 355.032488][T10165] ? __pfx_kernel_clone+0x10/0x10 [ 355.032559][T10165] __do_sys_clone+0xce/0x120 [ 355.032618][T10165] ? __pfx___do_sys_clone+0x10/0x10 [ 355.032686][T10165] ? xfd_validate_state+0x61/0x180 [ 355.032714][T10165] ? __pfx_do_writev+0x10/0x10 [ 355.032781][T10165] do_syscall_64+0xcd/0xf80 [ 355.032834][T10165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.032867][T10165] RIP: 0033:0x7f971c78f7c9 [ 355.032893][T10165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.032924][T10165] RSP: 002b:00007f971d59ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 355.032956][T10165] RAX: ffffffffffffffda RBX: 00007f971c9e5fa0 RCX: 00007f971c78f7c9 [ 355.032977][T10165] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 355.032996][T10165] RBP: 00007f971c813f91 R08: 0000000000000000 R09: 0000000000000000 [ 355.033017][T10165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.033037][T10165] R13: 00007f971c9e6038 R14: 00007f971c9e5fa0 R15: 00007ffec5fe9ab8 [ 355.033081][T10165] [ 356.913565][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 357.508447][T10213] netlink: 350 bytes leftover after parsing attributes in process `syz.3.1499'. [ 357.874509][ T30] audit: type=1804 audit(1766094917.978:9): pid=10222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1502" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 358.131018][T10224] zswap: compressor not available [ 359.664764][ T5839] block nbd0: Receive control failed (result -32) [ 359.895840][T10260] sctp: [Deprecated]: syz.0.1515 (pid 10260) Use of struct sctp_assoc_value in delayed_ack socket option. [ 359.895840][T10260] Use struct sctp_sack_info instead [ 360.871947][T10275] netlink: 'syz.1.1519': attribute type 1 has an invalid length. [ 362.803701][ T30] audit: type=1804 audit(1766094922.908:10): pid=10317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1535" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 363.410863][T10334] FAULT_INJECTION: forcing a failure. [ 363.410863][T10334] name failslab, interval 1, probability 0, space 0, times 0 [ 363.438071][T10334] CPU: 0 UID: 0 PID: 10334 Comm: syz.0.1541 Tainted: G L syzkaller #0 PREEMPT(full) [ 363.438120][T10334] Tainted: [L]=SOFTLOCKUP [ 363.438131][T10334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 363.438149][T10334] Call Trace: [ 363.438159][T10334] [ 363.438171][T10334] dump_stack_lvl+0x16c/0x1f0 [ 363.438222][T10334] should_fail_ex+0x512/0x640 [ 363.438255][T10334] ? kmem_cache_alloc_noprof+0x62/0x770 [ 363.438296][T10334] ? __pfx_drm_debugfs_entry_open+0x10/0x10 [ 363.438342][T10334] should_failslab+0xc2/0x120 [ 363.438389][T10334] kmem_cache_alloc_noprof+0x83/0x770 [ 363.438426][T10334] ? seq_open+0x55/0x170 [ 363.438465][T10334] ? __pfx_drm_debugfs_entry_open+0x10/0x10 [ 363.438510][T10334] ? __pfx_drm_clients_info+0x10/0x10 [ 363.438537][T10334] ? seq_open+0x55/0x170 [ 363.438566][T10334] seq_open+0x55/0x170 [ 363.438597][T10334] ? __pfx_drm_clients_info+0x10/0x10 [ 363.438626][T10334] single_open+0xfc/0x1f0 [ 363.438662][T10334] drm_debugfs_entry_open+0x127/0x1c0 [ 363.438711][T10334] full_proxy_open_regular+0x1b9/0x350 [ 363.438762][T10334] do_dentry_open+0x748/0x1590 [ 363.438803][T10334] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 363.438857][T10334] vfs_open+0x82/0x3f0 [ 363.438894][T10334] path_openat+0x2078/0x3140 [ 363.438951][T10334] ? __pfx_path_openat+0x10/0x10 [ 363.439020][T10334] do_filp_open+0x20b/0x470 [ 363.439067][T10334] ? __pfx_do_filp_open+0x10/0x10 [ 363.439148][T10334] ? alloc_fd+0x471/0x7d0 [ 363.439203][T10334] do_sys_openat2+0x121/0x290 [ 363.439237][T10334] ? __pfx_do_sys_openat2+0x10/0x10 [ 363.439286][T10334] __x64_sys_openat+0x174/0x210 [ 363.439322][T10334] ? __pfx___x64_sys_openat+0x10/0x10 [ 363.439373][T10334] do_syscall_64+0xcd/0xf80 [ 363.439422][T10334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.439452][T10334] RIP: 0033:0x7ff6b698f7c9 [ 363.439476][T10334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.439506][T10334] RSP: 002b:00007ff6b4bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 363.439536][T10334] RAX: ffffffffffffffda RBX: 00007ff6b6be5fa0 RCX: 00007ff6b698f7c9 [ 363.439556][T10334] RDX: 0000000000002100 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 363.439576][T10334] RBP: 00007ff6b6a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 363.439594][T10334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.439612][T10334] R13: 00007ff6b6be6038 R14: 00007ff6b6be5fa0 R15: 00007ffdb8c83da8 [ 363.439654][T10334] [ 367.225866][T10406] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1570'. [ 367.877796][T10399] kexec: Could not allocate control_code_buffer [ 368.689382][T10439] bond0: option all_slaves_active: invalid value () [ 368.781983][T10444] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1587'. [ 369.473991][T10452] zswap: compressor not available [ 370.768547][T10485] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1600'. [ 370.895458][T10485] veth0_macvtap: left promiscuous mode [ 371.050870][T10494] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1603'. [ 371.706461][T10507] netlink: 'syz.3.1608': attribute type 3 has an invalid length. [ 371.717645][T10507] netlink: 'syz.3.1608': attribute type 3 has an invalid length. [ 373.012973][T10533] sctp: [Deprecated]: syz.3.1617 (pid 10533) Use of struct sctp_assoc_value in delayed_ack socket option. [ 373.012973][T10533] Use struct sctp_sack_info instead [ 373.477920][T10541] netlink: 130 bytes leftover after parsing attributes in process `syz.1.1619'. [ 374.645138][T10552] Process accounting resumed [ 375.627676][T10580] rtc_cmos 00:00: Alarms can be up to one day in the future [ 375.754172][ T5942] rtc_cmos 00:00: Alarms can be up to one day in the future [ 375.764958][ T5942] rtc_cmos 00:00: Alarms can be up to one day in the future [ 375.772723][ T5942] rtc_cmos 00:00: Alarms can be up to one day in the future [ 375.820798][ T5942] rtc_cmos 00:00: Alarms can be up to one day in the future [ 375.846681][ T5942] rtc rtc0: __rtc_set_alarm: err=-22 [ 375.866735][T10588] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1630'. [ 376.015518][ T1340] netdevsim netdevsim1335 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.020819][ T5839] Bluetooth: hci2: unexpected subevent 0x04 length: 122 > 11 [ 380.251826][T10662] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1653'. [ 380.334745][T10664] Format for adding new port is "id [perm_addr]" (uint MAC). [ 380.528230][T10667] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1656'. [ 380.564968][T10667] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1656'. [ 381.337374][T10683] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1662'. [ 383.780833][T10747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1676'. [ 383.813003][T10747] netlink: 354 bytes leftover after parsing attributes in process `syz.1.1676'. [ 383.899221][T10749] netlink: 326 bytes leftover after parsing attributes in process `syz.3.1677'. [ 384.327246][T10768] random: crng reseeded on system resumption [ 384.457494][T10773] Unrecognized hibernate image header format! [ 384.463633][T10773] PM: hibernation: Image mismatch: architecture specific data [ 384.479959][T10772] sg_write: data in/out 4060/39 bytes for SCSI command 0x0-- guessing data in; [ 384.479959][T10772] program syz.3.1685 not setting count and/or reply_len properly [ 384.873283][T10785] FAULT_INJECTION: forcing a failure. [ 384.873283][T10785] name failslab, interval 1, probability 0, space 0, times 0 [ 384.887250][T10785] CPU: 1 UID: 0 PID: 10785 Comm: syz.1.1690 Tainted: G L syzkaller #0 PREEMPT(full) [ 384.887303][T10785] Tainted: [L]=SOFTLOCKUP [ 384.887314][T10785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 384.887333][T10785] Call Trace: [ 384.887344][T10785] [ 384.887357][T10785] dump_stack_lvl+0x16c/0x1f0 [ 384.887411][T10785] should_fail_ex+0x512/0x640 [ 384.887447][T10785] ? fs_reclaim_acquire+0xae/0x150 [ 384.887502][T10785] should_failslab+0xc2/0x120 [ 384.887551][T10785] __kmalloc_noprof+0xeb/0x910 [ 384.887586][T10785] ? __lock_acquire+0x436/0x2890 [ 384.887613][T10785] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 384.887666][T10785] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 384.887710][T10785] tomoyo_realpath_from_path+0xc2/0x6e0 [ 384.887759][T10785] ? tomoyo_profile+0x47/0x60 [ 384.887810][T10785] tomoyo_path_number_perm+0x245/0x580 [ 384.887846][T10785] ? tomoyo_path_number_perm+0x237/0x580 [ 384.887888][T10785] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 384.887929][T10785] ? rcu_read_unlock+0x17/0x60 [ 384.887967][T10785] ? do_raw_spin_lock+0x12c/0x2b0 [ 384.888002][T10785] ? find_held_lock+0x2b/0x80 [ 384.888061][T10785] ? find_held_lock+0x2b/0x80 [ 384.888108][T10785] ? __pfx___d_add+0x10/0x10 [ 384.888141][T10785] ? d_alloc+0x176/0x1e0 [ 384.888166][T10785] ? current_check_access_path+0x33b/0x460 [ 384.888214][T10785] ? __pfx_current_check_access_path+0x10/0x10 [ 384.888261][T10785] ? simple_lookup+0x105/0x1d0 [ 384.888314][T10785] tomoyo_path_mknod+0x10c/0x190 [ 384.888363][T10785] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 384.888414][T10785] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 384.888470][T10785] security_path_mknod+0x161/0x310 [ 384.888511][T10785] do_mknodat+0x24e/0x6f0 [ 384.888560][T10785] ? __pfx_do_mknodat+0x10/0x10 [ 384.888605][T10785] ? getname_flags.part.0+0x1c5/0x550 [ 384.888651][T10785] __x64_sys_mknod+0x87/0xb0 [ 384.888701][T10785] do_syscall_64+0xcd/0xf80 [ 384.888754][T10785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.888788][T10785] RIP: 0033:0x7f971c78f7c9 [ 384.888814][T10785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.888847][T10785] RSP: 002b:00007f971d5a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 384.888879][T10785] RAX: ffffffffffffffda RBX: 00007f971c9e5fa0 RCX: 00007f971c78f7c9 [ 384.888900][T10785] RDX: 0000000000000004 RSI: 0000000000001001 RDI: 0000000000000000 [ 384.888920][T10785] RBP: 00007f971c813f91 R08: 0000000000000000 R09: 0000000000000000 [ 384.888940][T10785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.888961][T10785] R13: 00007f971c9e6038 R14: 00007f971c9e5fa0 R15: 00007ffec5fe9ab8 [ 384.889007][T10785] [ 384.889019][T10785] ERROR: Out of memory at tomoyo_realpath_from_path. [ 386.695849][T10818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1702'. [ 386.708974][T10818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1702'. [ 389.567110][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.567186][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 390.546814][T10907] netlink: 222 bytes leftover after parsing attributes in process `syz.3.1732'. [ 391.062597][T10917] FAULT_INJECTION: forcing a failure. [ 391.062597][T10917] name failslab, interval 1, probability 0, space 0, times 0 [ 391.144548][T10917] CPU: 0 UID: 0 PID: 10917 Comm: syz.0.1734 Tainted: G L syzkaller #0 PREEMPT(full) [ 391.144599][T10917] Tainted: [L]=SOFTLOCKUP [ 391.144610][T10917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 391.144629][T10917] Call Trace: [ 391.144640][T10917] [ 391.144652][T10917] dump_stack_lvl+0x16c/0x1f0 [ 391.144705][T10917] should_fail_ex+0x512/0x640 [ 391.144742][T10917] ? __kmalloc_cache_noprof+0x5f/0x800 [ 391.144783][T10917] should_failslab+0xc2/0x120 [ 391.144834][T10917] __kmalloc_cache_noprof+0x80/0x800 [ 391.144866][T10917] ? fsnotify_alloc_group+0x92/0x330 [ 391.144914][T10917] ? fsnotify_alloc_group+0x92/0x330 [ 391.144957][T10917] fsnotify_alloc_group+0x92/0x330 [ 391.145002][T10917] __do_sys_fanotify_init+0x287/0xed0 [ 391.145038][T10917] ? rcu_is_watching+0x12/0xc0 [ 391.145078][T10917] do_syscall_64+0xcd/0xf80 [ 391.145121][T10917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.145148][T10917] RIP: 0033:0x7ff6b698f7c9 [ 391.145169][T10917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.145195][T10917] RSP: 002b:00007ff6b4bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 391.145220][T10917] RAX: ffffffffffffffda RBX: 00007ff6b6be5fa0 RCX: 00007ff6b698f7c9 [ 391.145238][T10917] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 00000000000006a1 [ 391.145255][T10917] RBP: 00007ff6b6a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 391.145271][T10917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.145286][T10917] R13: 00007ff6b6be6038 R14: 00007ff6b6be5fa0 R15: 00007ffdb8c83da8 [ 391.145356][T10917] [ 391.859073][T10932] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1739'. [ 391.890511][T10932] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1739'. [ 392.500265][T10954] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078000f00 pfn:0x78000 [ 392.544411][T10954] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 392.544506][T10954] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 392.544539][T10954] raw: ffff888078000f00 0000000000000000 00000001ffffffff 0000000000000000 [ 392.544560][T10954] page dumped because: unmovable page [ 392.544577][T10954] page_owner tracks the page as allocated [ 392.544626][T10954] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xcc0(GFP_KERNEL), pid 5841, tgid 5841 (syz-executor), ts 365248247791, free_ts 365229988008 [ 392.544676][T10954] post_alloc_hook+0x1af/0x220 [ 392.544714][T10954] get_page_from_freelist+0xd0b/0x31a0 [ 392.544752][T10954] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 392.544793][T10954] alloc_pages_bulk_noprof+0x77a/0x1410 [ 392.544832][T10954] __kasan_populate_vmalloc+0xfb/0x220 [ 392.544874][T10954] alloc_vmap_area+0x98d/0x2a50 [ 392.544919][T10954] __get_vm_area_node+0x1ca/0x330 [ 392.544968][T10954] __vmalloc_node_range_noprof+0x247/0x16b0 [ 392.545001][T10954] __vmalloc_node_noprof+0xad/0xf0 [ 392.545031][T10954] do_ip6t_get_ctl+0x63f/0xa50 [ 392.545064][T10954] nf_getsockopt+0x7c/0xe0 [ 392.545112][T10954] ipv6_getsockopt+0x1f7/0x280 [ 392.545143][T10954] tcp_getsockopt+0xa1/0x100 [ 392.545214][T10954] do_sock_getsockopt+0x324/0x410 [ 392.545262][T10954] __sys_getsockopt+0x123/0x1b0 [ 392.545300][T10954] __x64_sys_getsockopt+0xbd/0x160 [ 392.545338][T10954] page last free pid 10372 tgid 10372 stack trace: [ 392.641639][ T5181] ERROR: Out of memory at tomoyo_memory_ok. [ 392.737112][T10954] __free_frozen_pages+0x7df/0x1170 [ 392.737160][T10954] tlb_finish_mmu+0x237/0x7c0 [ 392.737197][T10954] exit_mmap+0x3f9/0xb60 [ 392.737246][T10954] __mmput+0x12a/0x410 [ 392.737291][T10954] mmput+0x62/0x70 [ 392.737340][T10954] do_exit+0x7d7/0x2bd0 [ 392.737373][T10954] do_group_exit+0xd3/0x2a0 [ 392.737407][T10954] __x64_sys_exit_group+0x3e/0x50 [ 392.737445][T10954] x64_sys_call+0x151c/0x1740 [ 392.737510][T10954] do_syscall_64+0xcd/0xf80 [ 392.737564][T10954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.551893][ T5839] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 393.551941][ T5839] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 393.567872][ T5839] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 393.567955][ T5839] Bluetooth: hci1: Unknown advertising packet type: 0x14 [ 393.577002][ T5839] Bluetooth: hci1: Unknown advertising packet type: 0x14 [ 393.586632][ T5839] Bluetooth: hci1: Unknown advertising packet type: 0x14 [ 393.593776][ T5839] Bluetooth: hci1: Unknown advertising packet type: 0x72 [ 393.601982][ T5839] Bluetooth: hci1: Unknown advertising packet type: 0x14 [ 393.609158][ T5839] Bluetooth: hci1: Malformed LE Event: 0x0d [ 393.677156][T10985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1756'. [ 393.708541][T10985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1756'. [ 395.075681][ T5839] Bluetooth: hci0: unexpected subevent 0x04 length: 122 > 11 [ 396.580617][T11054] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078000f00 pfn:0x78000 [ 396.615943][T11054] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 396.637573][T11054] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 396.661458][T11054] raw: ffff888078000f00 0000000000000000 00000001ffffffff 0000000000000000 [ 396.688894][T11054] page dumped because: unmovable page [ 396.709230][T11054] page_owner tracks the page as allocated [ 396.726154][T11054] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xcc0(GFP_KERNEL), pid 5841, tgid 5841 (syz-executor), ts 365248247791, free_ts 365229988008 [ 396.770156][T11054] post_alloc_hook+0x1af/0x220 [ 396.780831][T11054] get_page_from_freelist+0xd0b/0x31a0 [ 396.786879][T11054] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 396.793063][T11054] alloc_pages_bulk_noprof+0x77a/0x1410 [ 396.802612][T11054] __kasan_populate_vmalloc+0xfb/0x220 [ 396.808922][T11054] alloc_vmap_area+0x98d/0x2a50 [ 396.814057][T11054] __get_vm_area_node+0x1ca/0x330 [ 396.820874][T11054] __vmalloc_node_range_noprof+0x247/0x16b0 [ 396.827286][T11054] __vmalloc_node_noprof+0xad/0xf0 [ 396.832666][T11054] do_ip6t_get_ctl+0x63f/0xa50 [ 396.839984][T11054] nf_getsockopt+0x7c/0xe0 [ 396.845008][T11054] ipv6_getsockopt+0x1f7/0x280 [ 396.849996][T11054] tcp_getsockopt+0xa1/0x100 [ 396.856765][T11054] do_sock_getsockopt+0x324/0x410 [ 396.862109][T11054] __sys_getsockopt+0x123/0x1b0 [ 396.868457][T11054] __x64_sys_getsockopt+0xbd/0x160 [ 396.873822][T11054] page last free pid 10372 tgid 10372 stack trace: [ 396.883460][T11054] __free_frozen_pages+0x7df/0x1170 [ 396.890240][T11054] tlb_finish_mmu+0x237/0x7c0 [ 396.909687][T11054] exit_mmap+0x3f9/0xb60 [ 396.931984][T11054] __mmput+0x12a/0x410 [ 396.943066][T11054] mmput+0x62/0x70 [ 396.951647][T11054] do_exit+0x7d7/0x2bd0 [ 396.952826][T11059] FAULT_INJECTION: forcing a failure. [ 396.952826][T11059] name failslab, interval 1, probability 0, space 0, times 0 [ 396.962366][T11054] do_group_exit+0xd3/0x2a0 [ 396.969338][T11059] CPU: 1 UID: 0 PID: 11059 Comm: syz.1.1782 Tainted: G L syzkaller #0 PREEMPT(full) [ 396.969459][T11059] Tainted: [L]=SOFTLOCKUP [ 396.969507][T11059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 396.969570][T11059] Call Trace: [ 396.969594][T11059] [ 396.969626][T11059] dump_stack_lvl+0x16c/0x1f0 [ 396.969756][T11059] should_fail_ex+0x512/0x640 [ 396.969860][T11059] ? __kmalloc_cache_noprof+0x5f/0x800 [ 396.969965][T11059] should_failslab+0xc2/0x120 [ 396.970102][T11059] __kmalloc_cache_noprof+0x80/0x800 [ 396.970197][T11059] ? snd_pcm_oss_open+0x5eb/0x1400 [ 396.970342][T11059] ? snd_pcm_oss_open+0x5eb/0x1400 [ 396.970461][T11059] snd_pcm_oss_open+0x5eb/0x1400 [ 396.970627][T11059] ? tomoyo_check_open_permission+0x1d8/0x3c0 [ 396.970729][T11059] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 396.970888][T11059] ? __lock_acquire+0x436/0x2890 [ 396.970992][T11059] ? __pfx_default_wake_function+0x10/0x10 [ 396.971114][T11059] ? __lock_acquire+0x436/0x2890 [ 396.971218][T11059] ? do_raw_spin_lock+0x12c/0x2b0 [ 396.971324][T11059] ? soundcore_open+0x35a/0x580 [ 396.971469][T11059] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 396.971606][T11059] soundcore_open+0x40c/0x580 [ 396.971739][T11059] ? __pfx_soundcore_open+0x10/0x10 [ 396.971891][T11059] chrdev_open+0x234/0x6a0 [ 396.972016][T11059] ? __pfx_apparmor_file_open+0x10/0x10 [ 396.972104][T11059] ? __pfx_chrdev_open+0x10/0x10 [ 396.972245][T11059] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 396.972419][T11059] do_dentry_open+0x748/0x1590 [ 396.972552][T11059] ? __pfx_chrdev_open+0x10/0x10 [ 396.972709][T11059] vfs_open+0x82/0x3f0 [ 396.972813][T11059] path_openat+0x2078/0x3140 [ 396.972979][T11059] ? __pfx_path_openat+0x10/0x10 [ 396.973129][T11059] do_filp_open+0x20b/0x470 [ 396.973255][T11059] ? __pfx_do_filp_open+0x10/0x10 [ 396.973460][T11059] ? alloc_fd+0x471/0x7d0 [ 396.973613][T11059] do_sys_openat2+0x121/0x290 [ 396.973705][T11059] ? __pfx_do_sys_openat2+0x10/0x10 [ 396.973869][T11059] __x64_sys_openat+0x174/0x210 [ 396.973906][T11059] ? __pfx___x64_sys_openat+0x10/0x10 [ 396.974023][T11059] do_syscall_64+0xcd/0xf80 [ 396.974160][T11059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.974245][T11059] RIP: 0033:0x7f971c78f7c9 [ 396.974308][T11059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.974394][T11059] RSP: 002b:00007f971d5a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 396.974468][T11059] RAX: ffffffffffffffda RBX: 00007f971c9e5fa0 RCX: 00007f971c78f7c9 [ 396.974528][T11059] RDX: 0000000000020342 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 396.974574][T11059] RBP: 00007f971c813f91 R08: 0000000000000000 R09: 0000000000000000 [ 396.974612][T11059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.974663][T11059] R13: 00007f971c9e6038 R14: 00007f971c9e5fa0 R15: 00007ffec5fe9ab8 [ 396.974776][T11059] [ 397.270325][T11054] __x64_sys_exit_group+0x3e/0x50 [ 397.276206][T11054] x64_sys_call+0x151c/0x1740 [ 397.281328][T11054] do_syscall_64+0xcd/0xf80 [ 397.285964][T11054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.539251][T11101] netlink: 302 bytes leftover after parsing attributes in process `syz.2.1799'. [ 399.231886][T11120] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1808'. [ 399.357723][T11125] futex_wake_op: syz.0.1809 tries to shift op by -2048; fix this program [ 399.536997][T11130] FAULT_INJECTION: forcing a failure. [ 399.536997][T11130] name failslab, interval 1, probability 0, space 0, times 0 [ 399.550059][T11130] CPU: 0 UID: 0 PID: 11130 Comm: syz.0.1812 Tainted: G L syzkaller #0 PREEMPT(full) [ 399.550110][T11130] Tainted: [L]=SOFTLOCKUP [ 399.550123][T11130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 399.550141][T11130] Call Trace: [ 399.550153][T11130] [ 399.550165][T11130] dump_stack_lvl+0x16c/0x1f0 [ 399.550229][T11130] should_fail_ex+0x512/0x640 [ 399.550265][T11130] ? __kmalloc_cache_noprof+0x5f/0x800 [ 399.550306][T11130] should_failslab+0xc2/0x120 [ 399.550357][T11130] __kmalloc_cache_noprof+0x80/0x800 [ 399.550396][T11130] ? rfkill_fop_open+0x1b6/0x750 [ 399.550442][T11130] ? rfkill_fop_open+0x1b6/0x750 [ 399.550483][T11130] rfkill_fop_open+0x1b6/0x750 [ 399.550530][T11130] ? __pfx_rfkill_fop_open+0x10/0x10 [ 399.550573][T11130] misc_open+0x26d/0x450 [ 399.550619][T11130] ? __pfx_misc_open+0x10/0x10 [ 399.550654][T11130] chrdev_open+0x234/0x6a0 [ 399.550702][T11130] ? __pfx_apparmor_file_open+0x10/0x10 [ 399.550734][T11130] ? __pfx_chrdev_open+0x10/0x10 [ 399.550786][T11130] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 399.550842][T11130] do_dentry_open+0x748/0x1590 [ 399.550885][T11130] ? __pfx_chrdev_open+0x10/0x10 [ 399.550943][T11130] vfs_open+0x82/0x3f0 [ 399.550989][T11130] path_openat+0x2078/0x3140 [ 399.551051][T11130] ? __pfx_path_openat+0x10/0x10 [ 399.551115][T11130] do_filp_open+0x20b/0x470 [ 399.551165][T11130] ? __pfx_do_filp_open+0x10/0x10 [ 399.551246][T11130] ? alloc_fd+0x471/0x7d0 [ 399.551306][T11130] do_sys_openat2+0x121/0x290 [ 399.551341][T11130] ? __pfx_do_sys_openat2+0x10/0x10 [ 399.551395][T11130] __x64_sys_openat+0x174/0x210 [ 399.551431][T11130] ? __pfx___x64_sys_openat+0x10/0x10 [ 399.551487][T11130] do_syscall_64+0xcd/0xf80 [ 399.551539][T11130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.551572][T11130] RIP: 0033:0x7ff6b698f7c9 [ 399.551604][T11130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.551638][T11130] RSP: 002b:00007ff6b4bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 399.551669][T11130] RAX: ffffffffffffffda RBX: 00007ff6b6be5fa0 RCX: 00007ff6b698f7c9 [ 399.551691][T11130] RDX: 0000000000002000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 399.551712][T11130] RBP: 00007ff6b6a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 399.551733][T11130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 399.551753][T11130] R13: 00007ff6b6be6038 R14: 00007ff6b6be5fa0 R15: 00007ffdb8c83da8 [ 399.551795][T11130] [ 400.060406][T11143] random: crng reseeded on system resumption [ 400.447747][T11150] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1819'. [ 401.015608][T11162] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1831'. [ 401.385863][T11169] FAULT_INJECTION: forcing a failure. [ 401.385863][T11169] name fail_futex, interval 1, probability 0, space 0, times 0 [ 401.403851][T11169] CPU: 0 UID: 0 PID: 11169 Comm: syz.1.1827 Tainted: G L syzkaller #0 PREEMPT(full) [ 401.403903][T11169] Tainted: [L]=SOFTLOCKUP [ 401.403915][T11169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 401.403935][T11169] Call Trace: [ 401.403945][T11169] [ 401.403957][T11169] dump_stack_lvl+0x16c/0x1f0 [ 401.404015][T11169] should_fail_ex+0x512/0x640 [ 401.404057][T11169] get_futex_key+0x1d0/0x15f0 [ 401.404099][T11169] ? __pfx_get_futex_key+0x10/0x10 [ 401.404149][T11169] futex_wake+0xea/0x530 [ 401.404192][T11169] ? kasan_quarantine_put+0x10a/0x240 [ 401.404234][T11169] ? __pfx_futex_wake+0x10/0x10 [ 401.404283][T11169] ? putname+0xf5/0x1a0 [ 401.404322][T11169] do_futex+0x1e3/0x350 [ 401.404365][T11169] ? __pfx_do_futex+0x10/0x10 [ 401.404430][T11169] __x64_sys_futex+0x1e0/0x4c0 [ 401.404472][T11169] ? __x64_sys_openat+0x174/0x210 [ 401.404510][T11169] ? __pfx___x64_sys_futex+0x10/0x10 [ 401.404548][T11169] ? xfd_validate_state+0x61/0x180 [ 401.404595][T11169] do_syscall_64+0xcd/0xf80 [ 401.404648][T11169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.404681][T11169] RIP: 0033:0x7f971c78f7c9 [ 401.404712][T11169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.404744][T11169] RSP: 002b:00007f971d5a00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 401.404775][T11169] RAX: ffffffffffffffda RBX: 00007f971c9e5fa8 RCX: 00007f971c78f7c9 [ 401.404797][T11169] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f971c9e5fac [ 401.404817][T11169] RBP: 00007f971c9e5fa0 R08: 00007f971d5a1000 R09: 0000000000000000 [ 401.404838][T11169] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 401.404858][T11169] R13: 00007f971c9e6038 R14: 00007ffec5fe99d0 R15: 00007ffec5fe9ab8 [ 401.404902][T11169] [ 402.842460][ T5839] Bluetooth: hci3: Unable to find connection for big 0xd2 [ 404.726086][T11231] Process accounting paused [ 405.023634][T11258] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input6 [ 405.074911][ T5184] ERROR: Out of memory at tomoyo_memory_ok. [ 407.309521][T11322] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1881'. [ 407.319628][T11322] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 407.334665][T11322] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 407.891696][T11337] FAULT_INJECTION: forcing a failure. [ 407.891696][T11337] name failslab, interval 1, probability 0, space 0, times 0 [ 407.936138][T11337] CPU: 0 UID: 0 PID: 11337 Comm: syz.1.1887 Tainted: G L syzkaller #0 PREEMPT(full) [ 407.936189][T11337] Tainted: [L]=SOFTLOCKUP [ 407.936201][T11337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 407.936220][T11337] Call Trace: [ 407.936231][T11337] [ 407.936244][T11337] dump_stack_lvl+0x16c/0x1f0 [ 407.936300][T11337] should_fail_ex+0x512/0x640 [ 407.936335][T11337] ? __kmalloc_cache_noprof+0x5f/0x800 [ 407.936376][T11337] should_failslab+0xc2/0x120 [ 407.936428][T11337] __kmalloc_cache_noprof+0x80/0x800 [ 407.936487][T11337] ? binder_get_thread+0x225/0x8c0 [ 407.936540][T11337] ? binder_get_thread+0x225/0x8c0 [ 407.936580][T11337] ? __pfx_binder_poll+0x10/0x10 [ 407.936621][T11337] binder_get_thread+0x225/0x8c0 [ 407.936670][T11337] ? __pfx_binder_poll+0x10/0x10 [ 407.936714][T11337] binder_poll+0x3f/0x400 [ 407.936753][T11337] ? __pfx_binder_poll+0x10/0x10 [ 407.936795][T11337] do_select+0xd3d/0x17e0 [ 407.936872][T11337] ? __pfx_do_select+0x10/0x10 [ 407.936925][T11337] ? __pfx___pollwait+0x10/0x10 [ 407.937050][T11337] ? find_held_lock+0x2b/0x80 [ 407.937090][T11337] ? __might_fault+0xe3/0x190 [ 407.937127][T11337] ? __might_fault+0xe3/0x190 [ 407.937161][T11337] ? __might_fault+0x13b/0x190 [ 407.937211][T11337] ? core_sys_select+0x453/0xc20 [ 407.937252][T11337] core_sys_select+0x453/0xc20 [ 407.937303][T11337] ? __pfx_core_sys_select+0x10/0x10 [ 407.937355][T11337] ? futex_wait+0x120/0x380 [ 407.937428][T11337] ? __pfx_do_futex+0x10/0x10 [ 407.937464][T11337] ? fput+0x70/0xf0 [ 407.937492][T11337] ? __sys_connect+0xe0/0x160 [ 407.937529][T11337] kern_select+0x15d/0x1e0 [ 407.937569][T11337] ? __pfx_kern_select+0x10/0x10 [ 407.937615][T11337] ? xfd_validate_state+0x61/0x180 [ 407.937642][T11337] ? __pfx_ksys_write+0x10/0x10 [ 407.937693][T11337] __x64_sys_select+0xbd/0x160 [ 407.937735][T11337] ? do_syscall_64+0x91/0xf80 [ 407.937782][T11337] ? lockdep_hardirqs_on+0x7c/0x110 [ 407.937830][T11337] do_syscall_64+0xcd/0xf80 [ 407.937881][T11337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.937914][T11337] RIP: 0033:0x7f971c78f7c9 [ 407.937939][T11337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.937980][T11337] RSP: 002b:00007f971d5a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 407.938011][T11337] RAX: ffffffffffffffda RBX: 00007f971c9e5fa0 RCX: 00007f971c78f7c9 [ 407.938033][T11337] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 407.938052][T11337] RBP: 00007f971c813f91 R08: 0000000000000000 R09: 0000000000000000 [ 407.938072][T11337] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 407.938092][T11337] R13: 00007f971c9e6038 R14: 00007f971c9e5fa0 R15: 00007ffec5fe9ab8 [ 407.938135][T11337] [ 408.907787][T11361] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 409.369097][T11365] zswap: compressor not available [ 409.578606][T11376] netlink: 'syz.3.1897': attribute type 1 has an invalid length. [ 409.586566][T11376] netlink: 322 bytes leftover after parsing attributes in process `syz.3.1897'. [ 409.598250][T11376] netlink: 'syz.3.1897': attribute type 1 has an invalid length. [ 409.612645][T11376] netlink: 322 bytes leftover after parsing attributes in process `syz.3.1897'. [ 410.856986][T11403] netlink: 130 bytes leftover after parsing attributes in process `syz.2.1908'. [ 411.514003][T11430] HfR: entered promiscuous mode [ 411.547514][T11430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1913'. [ 411.570082][T11430] HfR: left promiscuous mode [ 412.832227][T11454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.880063][T11476] zswap: compressor not available [ 414.073245][T11488] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1934'. [ 416.304056][T11517] zswap: compressor not available [ 416.431594][T11531] netlink: 350 bytes leftover after parsing attributes in process `syz.3.1947'. [ 417.027801][T11544] zswap: compressor not available [ 417.552224][T11560] ERROR: Out of memory at tomoyo_memory_ok. [ 417.574628][T11560] ERROR: Domain ' /sbin/init /etc/init.d/rcS /etc/init.d/S50sshd /sbin/start-stop-daemon /usr/sbin/sshd /usr/libexec/sshd-session /bin/sh /root/syz-executor /root/syz-executor /newroot/478/file0' not defined. [ 417.876830][T11567] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1962'. [ 417.903834][T11571] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1961'. [ 418.070600][T11577] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1965'. [ 418.390458][T11587] ERROR: Out of memory at tomoyo_memory_ok. [ 422.566329][T11705] ERROR: Out of memory at tomoyo_memory_ok. getty: ttyS0: read error: Reso[ 422.838568][ T5587] ERROR: Out of memory at tomoyo_memory_ok. urce temporarily unavailable [ 423.237205][T11739] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2014'. [ 424.061821][T11755] ERROR: Out of memory at tomoyo_memory_ok. [ 425.036259][T11789] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2032'. [ 427.930568][T11855] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2062'. [ 428.703651][T11876] FAULT_INJECTION: forcing a failure. [ 428.703651][T11876] name failslab, interval 1, probability 0, space 0, times 0 [ 428.721899][T11876] CPU: 1 UID: 0 PID: 11876 Comm: syz.0.2064 Tainted: G L syzkaller #0 PREEMPT(full) [ 428.721967][T11876] Tainted: [L]=SOFTLOCKUP [ 428.721978][T11876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 428.721998][T11876] Call Trace: [ 428.722011][T11876] [ 428.722025][T11876] dump_stack_lvl+0x16c/0x1f0 [ 428.722114][T11876] should_fail_ex+0x512/0x640 [ 428.722150][T11876] ? __kmalloc_cache_noprof+0x5f/0x800 [ 428.722193][T11876] should_failslab+0xc2/0x120 [ 428.722242][T11876] __kmalloc_cache_noprof+0x80/0x800 [ 428.722280][T11876] ? snd_pcm_oss_change_params_locked+0x1db/0x3ab0 [ 428.722345][T11876] ? snd_pcm_oss_change_params_locked+0x1db/0x3ab0 [ 428.722400][T11876] snd_pcm_oss_change_params_locked+0x1db/0x3ab0 [ 428.722456][T11876] ? trace_contention_end+0xd5/0x110 [ 428.722490][T11876] ? __mutex_lock+0x27b/0x1ca0 [ 428.722545][T11876] ? snd_pcm_oss_make_ready+0xc4/0x1b0 [ 428.722582][T11876] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 428.722637][T11876] ? __pfx___mutex_lock+0x10/0x10 [ 428.722701][T11876] ? __fsnotify_parent+0x24b/0xcc0 [ 428.722763][T11876] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 428.722796][T11876] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 428.722828][T11876] snd_pcm_oss_sync+0x1de/0x840 [ 428.722857][T11876] ? kmem_cache_free+0x171/0x770 [ 428.722902][T11876] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 428.722933][T11876] snd_pcm_oss_release+0x28b/0x310 [ 428.722968][T11876] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 428.722999][T11876] __fput+0x402/0xb70 [ 428.723041][T11876] task_work_run+0x150/0x240 [ 428.723085][T11876] ? __pfx_task_work_run+0x10/0x10 [ 428.723118][T11876] ? __do_sys_close_range+0x278/0x730 [ 428.723180][T11876] exit_to_user_mode_loop+0xfb/0x540 [ 428.723226][T11876] do_syscall_64+0x4ee/0xf80 [ 428.723278][T11876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.723311][T11876] RIP: 0033:0x7ff6b698f7c9 [ 428.723337][T11876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.723368][T11876] RSP: 002b:00007ff6b4bf6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 428.723400][T11876] RAX: 0000000000000000 RBX: 00007ff6b6be5fa0 RCX: 00007ff6b698f7c9 [ 428.723420][T11876] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 428.723439][T11876] RBP: 00007ff6b6a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 428.723458][T11876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 428.723491][T11876] R13: 00007ff6b6be6038 R14: 00007ff6b6be5fa0 R15: 00007ffdb8c83da8 [ 428.723534][T11876] [ 429.216942][T11886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2066'. [ 431.687116][ T5839] Bluetooth: hci1: unexpected event 0x03 length: 725 > 11 [ 432.278538][T11970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2095'. [ 432.300424][T11970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2095'. [ 432.519689][T11979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2099'. [ 433.842324][T12015] netlink: 'syz.2.2111': attribute type 4 has an invalid length. [ 433.851245][T12015] netlink: 'syz.2.2111': attribute type 4 has an invalid length. [ 433.943562][T12019] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2113'. [ 434.865264][T12042] FAULT_INJECTION: forcing a failure. [ 434.865264][T12042] name failslab, interval 1, probability 0, space 0, times 0 [ 434.888956][T12020] Process accounting resumed [ 434.902289][T12042] CPU: 0 UID: 0 PID: 12042 Comm: syz.0.2121 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.902344][T12042] Tainted: [L]=SOFTLOCKUP [ 434.902356][T12042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 434.902376][T12042] Call Trace: [ 434.902387][T12042] [ 434.902400][T12042] dump_stack_lvl+0x16c/0x1f0 [ 434.902457][T12042] should_fail_ex+0x512/0x640 [ 434.902493][T12042] ? __kmalloc_cache_noprof+0x5f/0x800 [ 434.902534][T12042] should_failslab+0xc2/0x120 [ 434.902585][T12042] __kmalloc_cache_noprof+0x80/0x800 [ 434.902620][T12042] ? __radix_tree_lookup+0x21f/0x2c0 [ 434.902664][T12042] ? i2cdev_open+0x95/0x190 [ 434.902717][T12042] ? i2cdev_open+0x95/0x190 [ 434.902760][T12042] ? __pfx_i2cdev_open+0x10/0x10 [ 434.902810][T12042] i2cdev_open+0x95/0x190 [ 434.902857][T12042] chrdev_open+0x234/0x6a0 [ 434.902908][T12042] ? __pfx_apparmor_file_open+0x10/0x10 [ 434.902943][T12042] ? __pfx_chrdev_open+0x10/0x10 [ 434.902997][T12042] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 434.903058][T12042] do_dentry_open+0x748/0x1590 [ 434.903105][T12042] ? __pfx_chrdev_open+0x10/0x10 [ 434.903166][T12042] vfs_open+0x82/0x3f0 [ 434.903205][T12042] path_openat+0x2078/0x3140 [ 434.903268][T12042] ? __pfx_path_openat+0x10/0x10 [ 434.903332][T12042] do_filp_open+0x20b/0x470 [ 434.903384][T12042] ? __pfx_do_filp_open+0x10/0x10 [ 434.903462][T12042] ? alloc_fd+0x471/0x7d0 [ 434.903521][T12042] do_sys_openat2+0x121/0x290 [ 434.903558][T12042] ? __pfx_do_sys_openat2+0x10/0x10 [ 434.903610][T12042] __x64_sys_openat+0x174/0x210 [ 434.903648][T12042] ? __pfx___x64_sys_openat+0x10/0x10 [ 434.903704][T12042] do_syscall_64+0xcd/0xf80 [ 434.903756][T12042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.903836][T12042] RIP: 0033:0x7ff6b698f7c9 [ 434.903863][T12042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.903894][T12042] RSP: 002b:00007ff6b4bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 434.903925][T12042] RAX: ffffffffffffffda RBX: 00007ff6b6be5fa0 RCX: 00007ff6b698f7c9 [ 434.903944][T12042] RDX: 0000000000000002 RSI: 0000200000008040 RDI: ffffffffffffff9c [ 434.903964][T12042] RBP: 00007ff6b6a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 434.903984][T12042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.904003][T12042] R13: 00007ff6b6be6038 R14: 00007ff6b6be5fa0 R15: 00007ffdb8c83da8 [ 434.904045][T12042] [ 434.997364][T12044] netlink: 130 bytes leftover after parsing attributes in process `syz.3.2122'. syzkaller syzkaller login: [ 435.871881][T12070] vhci_hcd: pdev 6845824 [ 437.556195][T12110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2148'. [ 437.605846][T12110] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2148'. [ 437.724844][T12116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2149'. [ 437.785666][T12121] ERROR: Out of memory at tomoyo_memory_ok. [ 438.004206][T12125] netlink: 'syz.1.2153': attribute type 4 has an invalid length. [ 441.487271][T12205] [U] [ 441.490728][T12205] [U] [ 441.493503][T12205] [U] [ 441.496255][T12205] [U] [ 441.500836][T12205] [U] [ 441.503612][T12205] [U] [ 441.506366][T12205] [U] [ 441.509126][T12205] [U] [ 441.513209][T12205] [U] [ 441.515976][T12205] [U] [ 441.518721][T12205] [U] [ 441.521470][T12205] [U] [ 441.525247][T12205] [U] [ 441.528014][T12205] [U] [ 441.530771][T12205] [U] [ 441.533529][T12205] [U] [ 441.537432][T12205] [U] [ 441.540200][T12205] [U] [ 441.542954][T12205] [U] [ 441.545710][T12205] [U] [ 441.549621][T12205] [U] [ 441.552398][T12205] [U] [ 441.555154][T12205] [U] [ 441.557911][T12205] [U] [ 441.562950][T12205] [U] [ 441.565722][T12205] [U] [ 441.568486][T12205] [U] [ 441.571246][T12205] [U] [ 441.575795][T12205] [U] [ 441.578563][T12205] [U] [ 441.581311][T12205] [U] [ 441.584075][T12205] [U] [ 441.588579][T12205] [U] [ 441.591359][T12205] [U] [ 441.594118][T12205] [U] [ 441.596887][T12205] [U] [ 441.601964][T12205] [U] [ 441.604737][T12205] [U] [ 441.607494][T12205] [U] [ 441.610256][T12205] [U] [ 441.614224][T12205] [U] [ 441.616989][T12205] [U] [ 441.619738][T12205] [U] [ 441.622584][T12205] [U] [ 441.637676][T12205] [U] [ 441.640474][T12205] [U] [ 441.643236][T12205] [U] [ 441.646002][T12205] [U] [ 441.664911][T12205] [U] [ 441.667715][T12205] [U] [ 441.670497][T12205] [U] [ 441.673256][T12205] [U] [ 441.700760][T12205] [U] [ 441.703564][T12205] [U] [ 441.706331][T12205] [U] [ 441.709093][T12205] [U] [ 441.774890][T12205] [U] [ 441.777698][T12205] [U] [ 441.780462][T12205] [U] [ 441.783218][T12205] [U] [ 441.821757][T12205] [U] [ 441.824557][T12205] [U] [ 441.827322][T12205] [U] [ 441.830080][T12205] [U] [ 441.899128][T12205] [U] [ 441.901918][T12205] [U] [ 441.904674][T12205] [U] [ 441.907431][T12205] [U] [ 441.997517][T12205] [U] [ 442.000316][T12205] [U] [ 442.003078][T12205] [U] [ 442.005928][T12205] [U] [ 442.074820][T12205] [U] [ 442.077625][T12205] [U] [ 442.080384][T12205] [U] [ 442.083139][T12205] [U] [ 442.114871][T12205] [U] [ 442.117683][T12205] [U] [ 442.120451][T12205] [U] [ 442.123209][T12205] [U] [ 442.127168][T12205] [U] [ 442.129943][T12205] [U] [ 442.132703][T12205] [U] [ 442.135454][T12205] [U] [ 442.139340][T12205] [U] [ 442.142120][T12205] [U] [ 442.145071][T12205] [U] [ 442.147822][T12205] [U] [ 442.151806][T12205] [U] [ 442.154574][T12205] [U] [ 442.157327][T12205] [U] [ 442.160182][T12205] [U] [ 442.189641][T12205] [U] [ 442.192451][T12205] [U] [ 442.195300][T12205] [U] [ 442.198070][T12205] [U] [ 442.267379][T12205] [U] [ 442.270192][T12205] [U] [ 442.272948][T12205] [U] [ 442.275707][T12205] [U] [ 442.373062][T12205] [U] [ 442.657316][T12221] FAULT_INJECTION: forcing a failure. [ 442.657316][T12221] name failslab, interval 1, probability 0, space 0, times 0 [ 442.670686][T12221] CPU: 0 UID: 0 PID: 12221 Comm: syz.0.2186 Tainted: G L syzkaller #0 PREEMPT(full) [ 442.670737][T12221] Tainted: [L]=SOFTLOCKUP [ 442.670748][T12221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 442.670767][T12221] Call Trace: [ 442.670777][T12221] [ 442.670790][T12221] dump_stack_lvl+0x16c/0x1f0 [ 442.670844][T12221] should_fail_ex+0x512/0x640 [ 442.670889][T12221] ? __kvmalloc_node_noprof+0x129/0xa40 [ 442.670940][T12221] should_failslab+0xc2/0x120 [ 442.670995][T12221] __kvmalloc_node_noprof+0x14a/0xa40 [ 442.671043][T12221] ? io_alloc_cache_init+0x38/0x170 [ 442.671102][T12221] ? io_alloc_cache_init+0x38/0x170 [ 442.671149][T12221] ? __init_waitqueue_head+0xca/0x150 [ 442.671184][T12221] io_alloc_cache_init+0x38/0x170 [ 442.671238][T12221] io_uring_setup+0x5da/0x1f60 [ 442.671282][T12221] ? __pfx_io_uring_setup+0x10/0x10 [ 442.671328][T12221] ? do_futex+0x122/0x350 [ 442.671366][T12221] ? __pfx_do_futex+0x10/0x10 [ 442.671425][T12221] ? xfd_validate_state+0x61/0x180 [ 442.671466][T12221] __x64_sys_io_uring_setup+0xc2/0x170 [ 442.671512][T12221] do_syscall_64+0xcd/0xf80 [ 442.671564][T12221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.671596][T12221] RIP: 0033:0x7ff6b698f7c9 [ 442.671622][T12221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.671654][T12221] RSP: 002b:00007ff6b4bf6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 442.671685][T12221] RAX: ffffffffffffffda RBX: 00007ff6b6be5fa0 RCX: 00007ff6b698f7c9 [ 442.671706][T12221] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000a [ 442.671725][T12221] RBP: 00007ff6b6a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 442.671744][T12221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.671764][T12221] R13: 00007ff6b6be6038 R14: 00007ff6b6be5fa0 R15: 00007ffdb8c83da8 [ 442.671817][T12221] [ 443.452328][T12237] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2200'. [ 443.526852][T12241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2192'. [ 444.434209][T12259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 446.495421][T12309] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2219'. [ 447.469640][T12333] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2227'. [ 448.893438][T12365] block nbd7: not configured, cannot reconfigure [ 449.344994][T12376] FAULT_INJECTION: forcing a failure. [ 449.344994][T12376] name failslab, interval 1, probability 0, space 0, times 0 [ 449.359496][T12376] CPU: 1 UID: 0 PID: 12376 Comm: syz.1.2245 Tainted: G L syzkaller #0 PREEMPT(full) [ 449.359550][T12376] Tainted: [L]=SOFTLOCKUP [ 449.359561][T12376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 449.359581][T12376] Call Trace: [ 449.359591][T12376] [ 449.359604][T12376] dump_stack_lvl+0x16c/0x1f0 [ 449.359658][T12376] should_fail_ex+0x512/0x640 [ 449.359693][T12376] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 449.359754][T12376] should_failslab+0xc2/0x120 [ 449.359803][T12376] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 449.359851][T12376] ? sctp_sysctl_net_register+0x30/0x200 [ 449.359898][T12376] ? proc_create_reg+0xe3/0x180 [ 449.359950][T12376] ? __pfx_sctp_defaults_init+0x10/0x10 [ 449.359999][T12376] ? kmemdup_noprof+0x29/0x60 [ 449.360033][T12376] ? __pfx_proc_create_net_data+0x10/0x10 [ 449.360076][T12376] kmemdup_noprof+0x29/0x60 [ 449.360114][T12376] sctp_sysctl_net_register+0x30/0x200 [ 449.360175][T12376] ? __pfx_sctp_defaults_init+0x10/0x10 [ 449.360223][T12376] sctp_defaults_init+0x6d2/0xd90 [ 449.360299][T12376] ? __pfx_sctp_defaults_init+0x10/0x10 [ 449.360355][T12376] ops_init+0x1e2/0x5f0 [ 449.360408][T12376] setup_net+0x11d/0x3a0 [ 449.360458][T12376] ? __pfx_setup_net+0x10/0x10 [ 449.360504][T12376] ? lockdep_init_map_type+0x5c/0x270 [ 449.360538][T12376] ? mutex_init_lockep+0x110/0x150 [ 449.360577][T12376] copy_net_ns+0x351/0x7c0 [ 449.360628][T12376] create_new_namespaces+0x3ea/0xab0 [ 449.360681][T12376] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 449.360730][T12376] ksys_unshare+0x45b/0xa40 [ 449.360780][T12376] ? __pfx_ksys_unshare+0x10/0x10 [ 449.360832][T12376] ? xfd_validate_state+0x61/0x180 [ 449.360875][T12376] __x64_sys_unshare+0x31/0x40 [ 449.360902][T12376] do_syscall_64+0xcd/0xf80 [ 449.360953][T12376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.360990][T12376] RIP: 0033:0x7f971c78f7c9 [ 449.361015][T12376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.361047][T12376] RSP: 002b:00007f971d5a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 449.361082][T12376] RAX: ffffffffffffffda RBX: 00007f971c9e5fa0 RCX: 00007f971c78f7c9 [ 449.361104][T12376] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 449.361123][T12376] RBP: 00007f971c813f91 R08: 0000000000000000 R09: 0000000000000000 [ 449.361142][T12376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 449.361162][T12376] R13: 00007f971c9e6038 R14: 00007f971c9e5fa0 R15: 00007ffec5fe9ab8 [ 449.361206][T12376] [ 449.912020][T12390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2248'. [ 450.170109][T12395] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2249'. [ 450.456052][T12400] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 450.465344][T12400] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 450.484672][T12400] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 450.496757][T12400] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 450.992101][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 450.999930][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 451.258633][T12413] FAULT_INJECTION: forcing a failure. [ 451.258633][T12413] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 451.385123][T12413] CPU: 1 UID: 0 PID: 12413 Comm: syz.0.2255 Tainted: G L syzkaller #0 PREEMPT(full) [ 451.385179][T12413] Tainted: [L]=SOFTLOCKUP [ 451.385191][T12413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 451.385217][T12413] Call Trace: [ 451.385228][T12413] [ 451.385241][T12413] dump_stack_lvl+0x16c/0x1f0 [ 451.385303][T12413] should_fail_ex+0x512/0x640 [ 451.385354][T12413] should_fail_alloc_page+0xe7/0x130 [ 451.385414][T12413] prepare_alloc_pages+0x401/0x670 [ 451.385477][T12413] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 451.385519][T12413] ? mas_find+0x156/0x6d0 [ 451.385551][T12413] ? validate_mm+0x403/0x560 [ 451.385597][T12413] ? __pfx_validate_mm+0x10/0x10 [ 451.385635][T12413] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 451.385682][T12413] ? kmem_cache_free+0x171/0x770 [ 451.385723][T12413] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 451.385773][T12413] ? vma_wants_writenotify+0x10b/0x390 [ 451.385825][T12413] ? interleave_nodes+0x164/0x410 [ 451.385878][T12413] ? vma_set_page_prot+0xb1/0x120 [ 451.385927][T12413] ? policy_nodemask+0xea/0x4e0 [ 451.385982][T12413] alloc_pages_mpol+0x1fb/0x550 [ 451.386037][T12413] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 451.386098][T12413] alloc_pages_noprof+0x131/0x390 [ 451.386151][T12413] __pmd_alloc+0x3b/0x9c0 [ 451.386205][T12413] __handle_mm_fault+0xbeb/0x2bb0 [ 451.386251][T12413] ? __pfx___handle_mm_fault+0x10/0x10 [ 451.386325][T12413] handle_mm_fault+0x3fe/0xad0 [ 451.386379][T12413] __get_user_pages+0x54e/0x3590 [ 451.386452][T12413] ? __pfx___get_user_pages+0x10/0x10 [ 451.386518][T12413] populate_vma_page_range+0x267/0x3f0 [ 451.386577][T12413] ? __pfx_populate_vma_page_range+0x10/0x10 [ 451.386628][T12413] ? __pfx_find_vma_intersection+0x10/0x10 [ 451.386683][T12413] ? do_mmap+0x69c/0x1210 [ 451.386734][T12413] __mm_populate+0x1d8/0x380 [ 451.386792][T12413] ? __pfx___mm_populate+0x10/0x10 [ 451.386849][T12413] ? up_write+0x282/0x4e0 [ 451.386888][T12413] vm_mmap_pgoff+0x37f/0x470 [ 451.386943][T12413] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 451.386987][T12413] ? do_set_mempolicy+0x220/0x480 [ 451.387045][T12413] ? __x64_sys_futex+0x1e0/0x4c0 [ 451.387082][T12413] ? __x64_sys_futex+0x1e9/0x4c0 [ 451.387130][T12413] ksys_mmap_pgoff+0x7d/0x5c0 [ 451.387174][T12413] ? xfd_validate_state+0x61/0x180 [ 451.387206][T12413] ? __pfx_kernel_set_mempolicy+0x10/0x10 [ 451.387262][T12413] __x64_sys_mmap+0x125/0x190 [ 451.387304][T12413] do_syscall_64+0xcd/0xf80 [ 451.387389][T12413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.387422][T12413] RIP: 0033:0x7ff6b698f7c9 [ 451.387449][T12413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.387485][T12413] RSP: 002b:00007ff6b4bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 451.387517][T12413] RAX: ffffffffffffffda RBX: 00007ff6b6be5fa0 RCX: 00007ff6b698f7c9 [ 451.387539][T12413] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000 [ 451.387563][T12413] RBP: 00007ff6b6a13f91 R08: 0000000000000007 R09: 0000000000028000 [ 451.387583][T12413] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 451.387603][T12413] R13: 00007ff6b6be6038 R14: 00007ff6b6be5fa0 R15: 00007ffdb8c83da8 [ 451.387652][T12413] [ 452.047952][T12427] netlink: 93 bytes leftover after parsing attributes in process `syz.1.2267'. [ 452.083022][T12429] netlink: 354 bytes leftover after parsing attributes in process `syz.0.2261'. [ 452.189945][T12420] netlink: 93 bytes leftover after parsing attributes in process `syz.1.2267'. [ 452.516303][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 452.522427][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 452.528609][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout [ 452.535245][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 453.072997][T12454] netlink: 74 bytes leftover after parsing attributes in process `syz.3.2266'. [ 454.500612][T12480] binder: 12479:12480 unknown command 393216 [ 454.535582][T12480] binder: 12479:12480 ioctl c0306201 0 returned -22 [ 454.741408][T12491] vivid-007: ================= START STATUS ================= [ 454.761499][T12491] vivid-007: Generate PTS: true [ 454.771627][T12491] vivid-007: Generate SCR: true [ 454.784122][T12491] tpg source WxH: 320x240 (Y'CbCr) [ 454.799729][T12491] tpg field: 1 [ 454.803195][T12491] tpg crop: (0,0)/320x240 [ 454.824824][T12491] tpg compose: (0,0)/320x240 [ 454.844610][T12491] tpg colorspace: 8 [ 454.848494][T12491] tpg transfer function: 0/0 [ 454.862163][T12491] tpg Y'CbCr encoding: 0/0 [ 454.885931][T12491] tpg quantization: 0/0 [ 454.890175][T12491] tpg RGB range: 0/2 [ 454.894159][T12491] vivid-007: ================== END STATUS ================== [ 455.036174][T12501] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2286'. [ 455.346901][T12508] zswap: compressor not available [ 456.318833][T12537] sg_write: data in/out 220/90 bytes for SCSI command 0x0-- guessing data in; [ 456.318833][T12537] program syz.0.2297 not setting count and/or reply_len properly [ 456.692274][T12547] device-mapper: ioctl: name not supplied when creating device [ 457.519169][T12568] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2311'. [ 457.545793][T12568] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2311'. [ 458.399276][T12586] zswap: compressor not available [ 458.455224][T12595] netlink: 302 bytes leftover after parsing attributes in process `syz.2.2318'. [ 459.699215][T12616] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2327'. [ 460.139653][T12622] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2331'. [ 460.329800][T12631] mkiss: ax0: crc mode is auto. [ 462.611894][T12694] netlink: 334 bytes leftover after parsing attributes in process `syz.0.2357'. [ 463.726140][T12726] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2366'. [ 464.986310][T12770] vivid-003: ================= START STATUS ================= [ 465.004759][T12770] vivid-003: Radio HW Seek Mode: Bounded [ 465.018362][T12770] vivid-003: Radio Programmable HW Seek: false [ 465.034286][T12770] vivid-003: RDS Rx I/O Mode: Block I/O [ 465.043748][T12770] vivid-003: Generate RBDS Instead of RDS: false [ 465.064680][T12770] vivid-003: RDS Reception: true [ 465.069724][T12770] vivid-003: RDS Program Type: 0 inactive [ 465.084809][T12770] vivid-003: RDS PS Name: inactive [ 465.120658][T12770] vivid-003: RDS Radio Text: inactive [ 465.142048][T12770] vivid-003: RDS Traffic Announcement: false inactive [ 465.172173][T12770] vivid-003: RDS Traffic Program: false inactive [ 465.191748][T12770] vivid-003: RDS Music: false inactive [ 465.214479][T12770] vivid-003: ================== END STATUS ================== [ 465.399490][T12775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2381'. [ 465.853512][T12757] Process accounting paused [ 466.796668][T12807] netlink: 334 bytes leftover after parsing attributes in process `syz.1.2393'. [ 467.984587][T12840] zswap: compressor not available [ 468.744414][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 468.747196][T12805] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 468.987512][T12861] FAULT_INJECTION: forcing a failure. [ 468.987512][T12861] name failslab, interval 1, probability 0, space 0, times 0 [ 469.003963][T12861] CPU: 0 UID: 0 PID: 12861 Comm: syz.1.2412 Tainted: G L syzkaller #0 PREEMPT(full) [ 469.004015][T12861] Tainted: [L]=SOFTLOCKUP [ 469.004027][T12861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 469.004046][T12861] Call Trace: [ 469.004057][T12861] [ 469.004069][T12861] dump_stack_lvl+0x16c/0x1f0 [ 469.004124][T12861] should_fail_ex+0x512/0x640 [ 469.004160][T12861] ? kmem_cache_alloc_noprof+0x62/0x770 [ 469.004204][T12861] should_failslab+0xc2/0x120 [ 469.004254][T12861] kmem_cache_alloc_noprof+0x83/0x770 [ 469.004293][T12861] ? rcu_is_watching+0x12/0xc0 [ 469.004340][T12861] ? seq_open+0x55/0x170 [ 469.004382][T12861] ? seq_open+0x55/0x170 [ 469.004414][T12861] seq_open+0x55/0x170 [ 469.004451][T12861] __seq_open_private+0x3e/0xd0 [ 469.004493][T12861] tracing_open+0x255/0xe10 [ 469.004538][T12861] do_dentry_open+0x748/0x1590 [ 469.004594][T12861] ? __pfx_tracing_open+0x10/0x10 [ 469.004643][T12861] vfs_open+0x82/0x3f0 [ 469.004683][T12861] path_openat+0x2078/0x3140 [ 469.004744][T12861] ? __pfx_path_openat+0x10/0x10 [ 469.004809][T12861] do_filp_open+0x20b/0x470 [ 469.004860][T12861] ? __pfx_do_filp_open+0x10/0x10 [ 469.004940][T12861] ? alloc_fd+0x471/0x7d0 [ 469.004998][T12861] do_sys_openat2+0x121/0x290 [ 469.005034][T12861] ? __pfx_do_sys_openat2+0x10/0x10 [ 469.005087][T12861] __x64_sys_openat+0x174/0x210 [ 469.005123][T12861] ? __pfx___x64_sys_openat+0x10/0x10 [ 469.005178][T12861] do_syscall_64+0xcd/0xf80 [ 469.005229][T12861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.005262][T12861] RIP: 0033:0x7f971c78f7c9 [ 469.005286][T12861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.005317][T12861] RSP: 002b:00007f971d5a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 469.005347][T12861] RAX: ffffffffffffffda RBX: 00007f971c9e5fa0 RCX: 00007f971c78f7c9 [ 469.005368][T12861] RDX: 0000000000000002 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 469.005387][T12861] RBP: 00007f971c813f91 R08: 0000000000000000 R09: 0000000000000000 [ 469.005408][T12861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 469.005427][T12861] R13: 00007f971c9e6038 R14: 00007f971c9e5fa0 R15: 00007ffec5fe9ab8 [ 469.005480][T12861] [ 469.620092][T12805] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 469.626539][T12805] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 469.632668][T12805] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 469.740992][T12871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2416'. [ 469.908365][T12880] mkiss: ax0: crc mode is auto. [ 470.826767][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout [ 470.939476][ T4557] netdevsim netdevsim10023895 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.993304][ T50] netdevsim netdevsim10023895 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.158501][ T77] netdevsim netdevsim10023895 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.188024][ T77] netdevsim netdevsim10023895 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.304458][ T77] netdevsim netdevsim10023895 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.397208][ T77] netdevsim netdevsim10023895 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.697227][T12913] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2432'. [ 471.724508][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 471.730727][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout [ 472.199134][T12931] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2439'. [ 472.268091][T12933] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2440'. [ 472.388315][T12937] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2442'. [ 472.729047][T12952] netlink: 322 bytes leftover after parsing attributes in process `syz.3.2449'. [ 473.257378][T12964] zswap: compressor not available [ 473.666559][T12983] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2457'. [ 474.486975][ T12] netdevsim netdevsim10283910 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.721298][T13018] netlink: 'syz.1.2471': attribute type 14 has an invalid length. [ 474.739623][T13018] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2471'. [ 474.888266][T13019] zswap: compressor not available [ 475.467089][T13039] FAULT_INJECTION: forcing a failure. [ 475.467089][T13039] name failslab, interval 1, probability 0, space 0, times 0 [ 475.490135][T13039] CPU: 1 UID: 0 PID: 13039 Comm: syz.0.2478 Tainted: G L syzkaller #0 PREEMPT(full) [ 475.490186][T13039] Tainted: [L]=SOFTLOCKUP [ 475.490198][T13039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 475.490218][T13039] Call Trace: [ 475.490229][T13039] [ 475.490242][T13039] dump_stack_lvl+0x16c/0x1f0 [ 475.490297][T13039] should_fail_ex+0x512/0x640 [ 475.490332][T13039] ? __kmalloc_cache_noprof+0x5f/0x800 [ 475.490375][T13039] should_failslab+0xc2/0x120 [ 475.490426][T13039] __kmalloc_cache_noprof+0x80/0x800 [ 475.490462][T13039] ? rcu_is_watching+0x12/0xc0 [ 475.490506][T13039] ? snd_virmidi_output_open+0xc4/0x670 [ 475.490565][T13039] ? snd_virmidi_output_open+0xc4/0x670 [ 475.490614][T13039] snd_virmidi_output_open+0xc4/0x670 [ 475.490670][T13039] open_substream+0x480/0x9d0 [ 475.490710][T13039] rawmidi_open_priv+0x543/0x6e0 [ 475.490755][T13039] snd_rawmidi_open+0x4cb/0xbf0 [ 475.490801][T13039] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 475.490842][T13039] ? __pfx_default_wake_function+0x10/0x10 [ 475.490890][T13039] ? kobject_get_unless_zero+0x156/0x1e0 [ 475.490950][T13039] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 475.490985][T13039] snd_open+0x22d/0x4c0 [ 475.491043][T13039] ? __pfx_snd_open+0x10/0x10 [ 475.491092][T13039] chrdev_open+0x234/0x6a0 [ 475.491141][T13039] ? __pfx_apparmor_file_open+0x10/0x10 [ 475.491174][T13039] ? __pfx_chrdev_open+0x10/0x10 [ 475.491227][T13039] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 475.491286][T13039] do_dentry_open+0x748/0x1590 [ 475.491332][T13039] ? __pfx_chrdev_open+0x10/0x10 [ 475.491394][T13039] vfs_open+0x82/0x3f0 [ 475.491434][T13039] path_openat+0x2078/0x3140 [ 475.491497][T13039] ? __pfx_path_openat+0x10/0x10 [ 475.491563][T13039] do_filp_open+0x20b/0x470 [ 475.491613][T13039] ? __pfx_do_filp_open+0x10/0x10 [ 475.491693][T13039] ? alloc_fd+0x471/0x7d0 [ 475.491749][T13039] do_sys_openat2+0x121/0x290 [ 475.491785][T13039] ? __pfx_do_sys_openat2+0x10/0x10 [ 475.491824][T13039] ? find_held_lock+0x2b/0x80 [ 475.491877][T13039] __x64_sys_openat+0x174/0x210 [ 475.491915][T13039] ? __pfx___x64_sys_openat+0x10/0x10 [ 475.491972][T13039] do_syscall_64+0xcd/0xf80 [ 475.492041][T13039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.492075][T13039] RIP: 0033:0x7ff6b698f7c9 [ 475.492101][T13039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.492134][T13039] RSP: 002b:00007ff6b4bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 475.492166][T13039] RAX: ffffffffffffffda RBX: 00007ff6b6be5fa0 RCX: 00007ff6b698f7c9 [ 475.492188][T13039] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 475.492209][T13039] RBP: 00007ff6b6a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 475.492228][T13039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 475.492247][T13039] R13: 00007ff6b6be6038 R14: 00007ff6b6be5fa0 R15: 00007ffdb8c83da8 [ 475.492293][T13039] [ 476.424661][ T30] audit: type=1804 audit(1766095036.528:11): pid=13048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2481" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 476.772944][T13054] netlink: 334 bytes leftover after parsing attributes in process `syz.0.2484'. [ 477.359309][T13061] zswap: compressor not available [ 477.827858][T13080] netlink: 'syz.3.2491': attribute type 4 has an invalid length. [ 477.976164][T13083] netlink: 'syz.0.2493': attribute type 28 has an invalid length. [ 477.986552][T13083] netlink: 334 bytes leftover after parsing attributes in process `syz.0.2493'. [ 478.564763][T13093] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 478.572160][T13093] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 478.707475][T13101] [U] [ 478.710366][T13101] [U] [ 478.713121][T13101] [U] [ 478.715880][T13101] [U] [ 478.725317][T13101] [U] [ 478.728110][T13101] [U] [ 478.730867][T13101] [U] [ 478.733629][T13101] [U] [ 478.746869][T13101] [U] [ 478.749678][T13101] [U] [ 478.752446][T13101] [U] [ 478.755215][T13101] [U] [ 478.779315][T13101] [U] [ 478.782210][T13101] [U] [ 478.784971][T13101] [U] [ 478.787722][T13101] [U] [ 478.823298][T13101] [U] [ 478.826155][T13101] [U] [ 478.828916][T13101] [U] [ 478.831678][T13101] [U] [ 478.864652][T13101] [U] [ 478.867468][T13101] [U] [ 478.870227][T13101] [U] [ 478.872986][T13101] [U] [ 478.877397][T13101] [U] [ 478.880273][T13101] [U] [ 478.883039][T13101] [U] [ 478.885793][T13101] [U] [ 478.914732][T13101] [U] [ 478.917534][T13101] [U] [ 478.920290][T13101] [U] [ 478.923057][T13101] [U] [ 478.947874][T13101] [U] [ 478.950708][T13101] [U] [ 478.953460][T13101] [U] [ 478.956213][T13101] [U] [ 479.073678][T13109] netlink: 146 bytes leftover after parsing attributes in process `syz.2.2502'. [ 479.079174][T13101] [U] [ 479.086174][T13101] [U] [ 479.088933][T13101] [U] [ 479.091700][T13101] [U] [ 479.124544][T13101] [U] [ 479.127351][T13101] [U] [ 479.130114][T13101] [U] [ 479.132876][T13101] [U] [ 479.154656][T13101] [U] [ 479.157461][T13101] [U] [ 479.160213][T13101] [U] [ 479.162971][T13101] [U] [ 479.194752][T13101] [U] [ 479.197553][T13101] [U] [ 479.200309][T13101] [U] [ 479.203075][T13101] [U] [ 479.224704][T13101] [U] [ 479.227506][T13101] [U] [ 479.230262][T13101] [U] [ 479.233087][T13101] [U] [ 479.240227][T13111] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2503'. [ 479.254757][T13101] [U] [ 479.257556][T13101] [U] [ 479.260314][T13101] [U] [ 479.263081][T13101] [U] [ 479.286139][T13101] [U] [ 479.288951][T13101] [U] [ 479.291705][T13101] [U] [ 479.294456][T13101] [U] [ 479.304737][T13101] [U] [ 479.307542][T13101] [U] [ 479.310321][T13101] [U] [ 479.313096][T13101] [U] [ 479.326633][T13101] [U] [ 479.329429][T13101] [U] [ 479.332181][T13101] [U] [ 479.334940][T13101] [U] [ 479.362127][T13101] [U] [ 479.364932][T13101] [U] [ 479.367712][T13101] [U] [ 479.370470][T13101] [U] [ 479.379382][T13101] [U] [ 479.382201][T13101] [U] [ 479.384963][T13101] [U] [ 479.387714][T13101] [U] [ 479.391112][T13101] [U] [ 479.393919][T13101] [U] [ 479.396689][T13101] [U] [ 479.399457][T13101] [U] [ 479.408011][T13101] [U] [ 479.410850][T13101] [U] [ 479.413608][T13101] [U] [ 479.416373][T13101] [U] [ 479.423825][T13101] [U] [ 479.426614][T13101] [U] [ 479.429372][T13101] [U] [ 479.432129][T13101] [U] [ 479.470455][T13101] [U] [ 479.473279][T13101] [U] [ 479.476037][T13101] [U] [ 479.478802][T13101] [U] [ 479.490351][T13101] [U] [ 479.493147][T13101] [U] [ 479.495905][T13101] [U] [ 479.498664][T13101] [U] [ 479.507579][T13101] [U] [ 479.510356][T13101] [U] [ 479.513098][T13101] [U] [ 479.515831][T13101] [U] [ 479.545176][T13101] [U] [ 479.547970][T13101] [U] [ 479.550718][T13101] [U] [ 479.553461][T13101] [U] [ 479.558961][T13101] [U] [ 479.561733][T13101] [U] [ 479.564483][T13101] [U] [ 479.567233][T13101] [U] [ 479.582906][T13101] [U] [ 479.585711][T13101] [U] [ 479.588465][T13101] [U] [ 479.591207][T13101] [U] [ 479.605097][T13101] [U] [ 479.607934][T13101] [U] [ 479.610693][T13101] [U] [ 479.613453][T13101] [U] [ 479.618245][T13101] [U] [ 479.737984][T13120] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2507'. [ 480.910401][T13146] random: crng reseeded on system resumption [ 481.235998][T13150] netlink: 'syz.3.2516': attribute type 21 has an invalid length. [ 481.243946][T13150] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2516'. [ 483.576223][T13194] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2530'. [ 484.297726][T13208] FAULT_INJECTION: forcing a failure. [ 484.297726][T13208] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 484.332470][T13208] CPU: 0 UID: 0 PID: 13208 Comm: syz.1.2535 Tainted: G L syzkaller #0 PREEMPT(full) [ 484.332521][T13208] Tainted: [L]=SOFTLOCKUP [ 484.332541][T13208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 484.332560][T13208] Call Trace: [ 484.332570][T13208] [ 484.332583][T13208] dump_stack_lvl+0x16c/0x1f0 [ 484.332637][T13208] should_fail_ex+0x512/0x640 [ 484.332680][T13208] _copy_to_user+0x32/0xd0 [ 484.332719][T13208] rng_dev_read+0x1ea/0x810 [ 484.332771][T13208] ? __pfx_virtio_read+0x10/0x10 [ 484.332802][T13208] ? __pfx_rng_dev_read+0x10/0x10 [ 484.332860][T13208] ? bpf_lsm_file_permission+0x9/0x10 [ 484.332899][T13208] ? security_file_permission+0x71/0x210 [ 484.332940][T13208] ? rw_verify_area+0xcf/0x6c0 [ 484.332980][T13208] ? __pfx_rng_dev_read+0x10/0x10 [ 484.333031][T13208] vfs_read+0x1e4/0xcf0 [ 484.333081][T13208] ? __pfx_vfs_read+0x10/0x10 [ 484.333121][T13208] ? find_held_lock+0x2b/0x80 [ 484.333162][T13208] ? __fget_files+0x204/0x3c0 [ 484.333212][T13208] ? __fget_files+0x20e/0x3c0 [ 484.333268][T13208] ksys_read+0x12a/0x250 [ 484.333311][T13208] ? __pfx_ksys_read+0x10/0x10 [ 484.333364][T13208] do_syscall_64+0xcd/0xf80 [ 484.333411][T13208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.333441][T13208] RIP: 0033:0x7f971c78f7c9 [ 484.333466][T13208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.333497][T13208] RSP: 002b:00007f971d5a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 484.333528][T13208] RAX: ffffffffffffffda RBX: 00007f971c9e5fa0 RCX: 00007f971c78f7c9 [ 484.333556][T13208] RDX: 00000000fffffe82 RSI: 0000200000000040 RDI: 0000000000000005 [ 484.333575][T13208] RBP: 00007f971c813f91 R08: 0000000000000000 R09: 0000000000000000 [ 484.333594][T13208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 484.333614][T13208] R13: 00007f971c9e6038 R14: 00007f971c9e5fa0 R15: 00007ffec5fe9ab8 [ 484.333657][T13208] [ 484.728820][T13214] ERROR: Out of memory at tomoyo_memory_ok. [ 484.944677][T13221] [U] [ 484.947574][T13221] [U] [ 484.950337][T13221] [U] [ 484.953092][T13221] [U] [ 485.015621][T13221] [U] [ 485.018420][T13221] [U] [ 485.021176][T13221] [U] [ 485.023915][T13221] [U] [ 485.040955][T13221] [U] [ 485.043761][T13221] [U] [ 485.046531][T13221] [U] [ 485.049302][T13221] [U] [ 485.073873][T13221] [U] [ 485.076688][T13221] [U] [ 485.079457][T13221] [U] [ 485.082234][T13221] [U] [ 485.106942][T13221] [U] [ 485.109739][T13221] [U] [ 485.112486][T13221] [U] [ 485.115239][T13221] [U] [ 485.133882][T13221] [U] [ 485.136671][T13221] [U] [ 485.139424][T13221] [U] [ 485.142179][T13221] [U] [ 485.177897][T13221] [U] [ 485.180699][T13221] [U] [ 485.183464][T13221] [U] [ 485.186208][T13221] [U] [ 485.189602][T13221] [U] [ 485.192368][T13221] [U] [ 485.195130][T13221] [U] [ 485.197894][T13221] [U] [ 485.202291][T13221] [U] [ 485.205075][T13221] [U] [ 485.207827][T13221] [U] [ 485.210585][T13221] [U] [ 485.214779][T13221] [U] [ 485.217546][T13221] [U] [ 485.220301][T13221] [U] [ 485.223059][T13221] [U] [ 485.226434][T13221] [U] [ 485.229198][T13221] [U] [ 485.231944][T13221] [U] [ 485.234688][T13221] [U] [ 485.270486][T13221] [U] [ 485.273298][T13221] [U] [ 485.276063][T13221] [U] [ 485.278828][T13221] [U] [ 485.316921][T13221] [U] [ 485.319728][T13221] [U] [ 485.322482][T13221] [U] [ 485.325245][T13221] [U] [ 485.346785][T13221] [U] [ 485.349581][T13221] [U] [ 485.352338][T13221] [U] [ 485.355087][T13221] [U] [ 485.376726][T13221] [U] [ 485.379542][T13221] [U] [ 485.382303][T13221] [U] [ 485.385055][T13221] [U] [ 485.402778][T13221] [U] [ 485.405581][T13221] [U] [ 485.408345][T13221] [U] [ 485.411102][T13221] [U] [ 485.436139][T13221] [U] [ 485.438937][T13221] [U] [ 485.441691][T13221] [U] [ 485.444439][T13221] [U] [ 485.461785][T13221] [U] [ 485.464581][T13221] [U] [ 485.467339][T13221] [U] [ 485.470076][T13221] [U] [ 485.479623][T13221] [U] [ 485.482411][T13221] [U] [ 485.485156][T13221] [U] [ 485.487901][T13221] [U] [ 485.525046][T13225] netlink: 'syz.3.2542': attribute type 33 has an invalid length. [ 485.532948][T13225] netlink: 322 bytes leftover after parsing attributes in process `syz.3.2542'. [ 485.665908][T13221] [U] [ 485.668710][T13221] [U] [ 485.671465][T13221] [U] [ 485.674219][T13221] [U] [ 485.700506][T13221] [U] [ 485.703319][T13221] [U] [ 485.706076][T13221] [U] [ 485.708830][T13221] [U] [ 485.794686][T13221] [U] [ 485.797489][T13221] [U] [ 485.800245][T13221] [U] [ 485.802999][T13221] [U] [ 485.844829][T13221] [U] [ 485.847635][T13221] [U] [ 485.850387][T13221] [U] [ 485.853152][T13221] [U] [ 485.880366][T13221] [U] [ 485.962241][T13231] netlink: 146 bytes leftover after parsing attributes in process `syz.3.2544'. [ 486.099075][T13233] netlink: 'syz.0.2545': attribute type 19 has an invalid length. [ 486.123616][T13233] netlink: 334 bytes leftover after parsing attributes in process `syz.0.2545'. [ 487.004007][T13256] zswap: compressor not available [ 487.049472][T13264] FAULT_INJECTION: forcing a failure. [ 487.049472][T13264] name failslab, interval 1, probability 0, space 0, times 0 [ 487.074643][T13264] CPU: 1 UID: 0 PID: 13264 Comm: syz.1.2554 Tainted: G L syzkaller #0 PREEMPT(full) [ 487.074695][T13264] Tainted: [L]=SOFTLOCKUP [ 487.074708][T13264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 487.074727][T13264] Call Trace: [ 487.074739][T13264] [ 487.074752][T13264] dump_stack_lvl+0x16c/0x1f0 [ 487.074807][T13264] should_fail_ex+0x512/0x640 [ 487.074844][T13264] ? kmem_cache_alloc_noprof+0x62/0x770 [ 487.074889][T13264] should_failslab+0xc2/0x120 [ 487.074941][T13264] kmem_cache_alloc_noprof+0x83/0x770 [ 487.074981][T13264] ? security_file_alloc+0x34/0x2b0 [ 487.075042][T13264] ? security_file_alloc+0x34/0x2b0 [ 487.075081][T13264] security_file_alloc+0x34/0x2b0 [ 487.075124][T13264] init_file+0x93/0x4c0 [ 487.075159][T13264] alloc_empty_file+0x73/0x1e0 [ 487.075195][T13264] dentry_open+0x46/0xd0 [ 487.075230][T13264] acct_on+0x1a5/0xa00 [ 487.075283][T13264] ? __pfx_acct_on+0x10/0x10 [ 487.075329][T13264] ? bpf_lsm_capable+0x9/0x10 [ 487.075382][T13264] __x64_sys_acct+0x81/0x1e0 [ 487.075425][T13264] ? lockdep_hardirqs_on+0x7c/0x110 [ 487.075474][T13264] do_syscall_64+0xcd/0xf80 [ 487.075524][T13264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.075557][T13264] RIP: 0033:0x7f971c78f7c9 [ 487.075582][T13264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.075615][T13264] RSP: 002b:00007f971d57f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 487.075646][T13264] RAX: ffffffffffffffda RBX: 00007f971c9e6090 RCX: 00007f971c78f7c9 [ 487.075667][T13264] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 487.075687][T13264] RBP: 00007f971c813f91 R08: 0000000000000000 R09: 0000000000000000 [ 487.075706][T13264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 487.075725][T13264] R13: 00007f971c9e6128 R14: 00007f971c9e6090 R15: 00007ffec5fe9ab8 [ 487.075770][T13264] [ 488.512379][T13288] vcan0: tx drop: invalid da for name 0x000000000000003f [ 491.299608][T13336] [U] [ 491.302515][T13336] [U] [ 491.305274][T13336] [U] [ 491.308029][T13336] [U] [ 491.312713][T13336] [U] [ 491.315477][T13336] [U] [ 491.318217][T13336] [U] [ 491.320957][T13336] [U] [ 491.339383][T13336] [U] [ 491.342194][T13336] [U] [ 491.344965][T13336] [U] [ 491.347723][T13336] [U] [ 491.366483][T13336] [U] [ 491.369288][T13336] [U] [ 491.372046][T13336] [U] [ 491.374795][T13336] [U] [ 491.401603][T13336] [U] [ 491.401672][T13336] [U] [ 491.401737][T13336] [U] [ 491.401799][T13336] [U] [ 491.401864][T13336] [U] [ 491.401924][T13336] [U] [ 491.401979][T13336] [U] [ 491.402035][T13336] [U] [ 491.402186][T13336] [U] [ 491.402242][T13336] [U] [ 491.402297][T13336] [U] [ 491.402356][T13336] [U] [ 491.402420][T13336] [U] [ 491.402479][T13336] [U] [ 491.402537][T13336] [U] [ 491.402593][T13336] [U] [ 491.402844][T13336] [U] [ 491.402905][T13336] [U] [ 491.402963][T13336] [U] [ 491.403020][T13336] [U] [ 491.403085][T13336] [U] [ 491.403145][T13336] [U] [ 491.403205][T13336] [U] [ 491.403266][T13336] [U] [ 491.403419][T13336] [U] [ 491.403480][T13336] [U] [ 491.403538][T13336] [U] [ 491.403596][T13336] [U] [ 491.403660][T13336] [U] [ 491.403734][T13336] [U] [ 491.403796][T13336] [U] [ 491.403854][T13336] [U] [ 491.404080][T13336] [U] [ 491.404143][T13336] [U] [ 491.404204][T13336] [U] [ 491.404265][T13336] [U] [ 491.404401][T13336] [U] [ 491.404460][T13336] [U] [ 491.404517][T13336] [U] [ 491.404575][T13336] [U] [ 491.404745][T13336] [U] [ 491.404805][T13336] [U] [ 491.404863][T13336] [U] [ 491.404922][T13336] [U] [ 491.404990][T13336] [U] [ 491.405051][T13336] [U] [ 491.405112][T13336] [U] [ 491.405170][T13336] [U] [ 491.405403][T13336] [U] [ 491.405465][T13336] [U] [ 491.405524][T13336] [U] [ 491.405583][T13336] [U] [ 491.405726][T13336] [U] [ 491.405787][T13336] [U] [ 491.405847][T13336] [U] [ 491.405907][T13336] [U] [ 491.406068][T13336] [U] [ 491.406129][T13336] [U] [ 491.406189][T13336] [U] [ 491.406249][T13336] [U] [ 491.406322][T13336] [U] [ 491.406382][T13336] [U] [ 491.406442][T13336] [U] [ 491.406501][T13336] [U] [ 491.409739][T13336] [U] [ 491.409804][T13336] [U] [ 491.409863][T13336] [U] [ 491.409923][T13336] [U] [ 491.409991][T13336] [U] [ 491.410051][T13336] [U] [ 491.410111][T13336] [U] [ 491.410171][T13336] [U] [ 491.410338][T13336] [U] [ 491.410400][T13336] [U] [ 491.410463][T13336] [U] [ 491.410524][T13336] [U] [ 491.410592][T13336] [U] [ 491.410658][T13336] [U] [ 491.410728][T13336] [U] [ 491.410790][T13336] [U] [ 491.414688][T13336] [U] [ 491.414751][T13336] [U] [ 491.414813][T13336] [U] [ 491.414876][T13336] [U] [ 491.414952][T13336] [U] [ 491.415020][T13336] [U] [ 491.415086][T13336] [U] [ 491.415145][T13336] [U] [ 491.415398][T13336] [U] [ 491.415460][T13336] [U] [ 491.415522][T13336] [U] [ 491.415581][T13336] [U] [ 491.415648][T13336] [U] [ 491.415708][T13336] [U] [ 491.415765][T13336] [U] [ 491.415821][T13336] [U] [ 491.416001][T13336] [U] [ 491.416060][T13336] [U] [ 491.416121][T13336] [U] [ 491.416182][T13336] [U] [ 491.416262][T13336] [U] [ 491.416323][T13336] [U] [ 491.416384][T13336] [U] [ 491.416445][T13336] [U] [ 491.416646][T13336] [U] [ 491.416707][T13336] [U] [ 491.416768][T13336] [U] [ 491.416835][T13336] [U] [ 491.416903][T13336] [U] [ 491.416974][T13336] [U] [ 491.417037][T13336] [U] [ 491.437491][T13335] [U] [ 492.111822][T13357] ERROR: Out of memory at tomoyo_memory_ok. [ 492.504204][T13372] zswap: compressor not available [ 492.811752][T13388] phram: not enough arguments [ 492.921447][T13391] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2602'. [ 492.950700][T13395] mtrr: base(0x2c000000000) is not aligned on a size(0xd000) boundary [ 492.969753][T13391] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2602'. [ 492.994985][ T10] ================================================================== [ 492.995006][ T10] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 492.995058][ T10] Write of size 8 at addr ffffc90003b790a0 by task kworker/0:1/10 [ 492.995083][ T10] [ 492.995100][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 492.995142][ T10] Tainted: [L]=SOFTLOCKUP [ 492.995152][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 492.995172][ T10] Workqueue: events_power_efficient fb_flashcursor [ 492.995202][ T10] Call Trace: [ 492.995212][ T10] [ 492.995223][ T10] dump_stack_lvl+0x116/0x1f0 [ 492.995267][ T10] print_report+0xcd/0x630 [ 492.995314][ T10] ? __virt_addr_valid+0x81/0x610 [ 492.995365][ T10] ? sys_imageblit+0x1a6f/0x1e60 [ 492.995407][ T10] kasan_report+0xe0/0x110 [ 492.995454][ T10] ? sys_imageblit+0x1a6f/0x1e60 [ 492.995511][ T10] sys_imageblit+0x1a6f/0x1e60 [ 492.995562][ T10] ? __pfx_sys_imageblit+0x10/0x10 [ 492.995626][ T10] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 492.995677][ T10] soft_cursor+0x524/0xa10 [ 492.995722][ T10] bit_cursor+0xe8c/0x17e0 [ 492.995764][ T10] ? __pfx_bit_cursor+0x10/0x10 [ 492.995806][ T10] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 492.995854][ T10] ? get_color+0x1da/0x450 [ 492.995882][ T10] ? __pfx_bit_cursor+0x10/0x10 [ 492.995917][ T10] fb_flashcursor+0x333/0x420 [ 492.995947][ T10] process_one_work+0x9ba/0x1b20 [ 492.995990][ T10] ? __pfx_process_one_work+0x10/0x10 [ 492.996029][ T10] ? assign_work+0x1a0/0x250 [ 492.996061][ T10] worker_thread+0x6c8/0xf10 [ 492.996102][ T10] ? __pfx_worker_thread+0x10/0x10 [ 492.996137][ T10] kthread+0x3c5/0x780 [ 492.996167][ T10] ? __pfx_kthread+0x10/0x10 [ 492.996196][ T10] ? rcu_is_watching+0x12/0xc0 [ 492.996240][ T10] ? __pfx_kthread+0x10/0x10 [ 492.996271][ T10] ret_from_fork+0x983/0xb10 [ 492.996302][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 492.996335][ T10] ? __switch_to+0x7af/0x10d0 [ 492.996374][ T10] ? __pfx_kthread+0x10/0x10 [ 492.996405][ T10] ret_from_fork_asm+0x1a/0x30 [ 492.996460][ T10] [ 492.996471][ T10] [ 492.996506][ T10] The buggy address belongs to a vmalloc virtual mapping [ 492.996529][ T10] Memory state around the buggy address: [ 492.996545][ T10] ffffc90003b78f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 492.996568][ T10] ffffc90003b79000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 492.996591][ T10] >ffffc90003b79080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 492.996609][ T10] ^ [ 492.996625][ T10] ffffc90003b79100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 492.996648][ T10] ffffc90003b79180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 492.996665][ T10] ================================================================== [ 492.996681][ T10] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 492.996704][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 492.996747][ T10] Tainted: [L]=SOFTLOCKUP [ 492.996758][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 492.996779][ T10] Workqueue: events_power_efficient fb_flashcursor [ 492.996809][ T10] Call Trace: [ 492.996819][ T10] [ 492.996831][ T10] dump_stack_lvl+0x3d/0x1f0 [ 492.996877][ T10] vpanic+0x640/0x6f0 [ 492.996909][ T10] panic+0xca/0xd0 [ 492.996937][ T10] ? __pfx_panic+0x10/0x10 [ 492.996973][ T10] ? check_panic_on_warn+0x1f/0xb0 [ 492.997007][ T10] check_panic_on_warn+0xab/0xb0 [ 492.997041][ T10] end_report+0x107/0x160 [ 492.997084][ T10] kasan_report+0xee/0x110 [ 492.997131][ T10] ? sys_imageblit+0x1a6f/0x1e60 [ 492.997182][ T10] sys_imageblit+0x1a6f/0x1e60 [ 492.997233][ T10] ? __pfx_sys_imageblit+0x10/0x10 [ 492.997296][ T10] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 492.997344][ T10] soft_cursor+0x524/0xa10 [ 492.997388][ T10] bit_cursor+0xe8c/0x17e0 [ 492.997429][ T10] ? __pfx_bit_cursor+0x10/0x10 [ 492.997473][ T10] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 492.997529][ T10] ? get_color+0x1da/0x450 [ 492.997557][ T10] ? __pfx_bit_cursor+0x10/0x10 [ 492.997593][ T10] fb_flashcursor+0x333/0x420 [ 492.997623][ T10] process_one_work+0x9ba/0x1b20 [ 492.997664][ T10] ? __pfx_process_one_work+0x10/0x10 [ 492.997705][ T10] ? assign_work+0x1a0/0x250 [ 492.997739][ T10] worker_thread+0x6c8/0xf10 [ 492.997782][ T10] ? __pfx_worker_thread+0x10/0x10 [ 492.997817][ T10] kthread+0x3c5/0x780 [ 492.997847][ T10] ? __pfx_kthread+0x10/0x10 [ 492.997878][ T10] ? rcu_is_watching+0x12/0xc0 [ 492.997922][ T10] ? __pfx_kthread+0x10/0x10 [ 492.997951][ T10] ret_from_fork+0x983/0xb10 [ 492.997983][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 492.998016][ T10] ? __switch_to+0x7af/0x10d0 [ 492.998055][ T10] ? __pfx_kthread+0x10/0x10 [ 492.998086][ T10] ret_from_fork_asm+0x1a/0x30 [ 492.998142][ T10] [ 492.998750][ T10] Kernel Offset: disabled