last executing test programs: 2.831044187s ago: executing program 0 (id=1216): openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0x40a0ae49, 0x38) 2.38263718s ago: executing program 0 (id=1215): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) flock$auto(r0, 0x6) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) flock$auto(r1, 0x2) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aab4) flock$auto(r2, 0x1) close_range$auto(0x2, 0x8, 0x0) 2.130940653s ago: executing program 0 (id=1219): r0 = open(0x0, 0x40000, 0x31) mmap$auto(0xfffdfffffffffffe, 0x9, 0x8000000000000000, 0x571f, r0, 0xb6) syz_genetlink_get_family_id$auto_ioam6(0x0, 0xffffffffffffffff) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/i8042/serio0/id/proto\x00', 0x0, 0x0) read$auto(r1, 0x0, 0xe8) 2.052769338s ago: executing program 1 (id=1221): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x640, 0x0) read$auto_mon_fops_binary_mon_bin(r0, 0x0, 0x0) poll$auto(0x0, 0x7, 0x100) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) ioctl$auto_MON_IOCG_STATS(r0, 0x80089203, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0xa901, 0x0) 1.661809844s ago: executing program 1 (id=1222): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x1, 0x0) sendmmsg$auto(r0, 0x0, 0x5, 0x20000000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x400053, 0x9) 1.661692267s ago: executing program 3 (id=1223): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x80003, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) sendto$auto(0x3, 0x0, 0x13, 0xfffffff8, &(0x7f0000000440)=@xdp={0x2c, 0xdd86, r1, 0x2f}, 0x22) 1.653354531s ago: executing program 0 (id=1231): bpf$auto(0x11, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x1, 0xffffffffffffffff, 0xa, 0x6}, 0xcf) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/ieee80211/phy11/netdev:wlan1/rc_rateidx_mcs_mask_5ghz\x00', 0x400202, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x2e, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x807}, 0xfffffffd, 0x8) recvmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) 1.514639179s ago: executing program 2 (id=1224): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) close_range$auto(0x2, r0, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000040)={0x7, 0x0, [{0x8c, 0x2, 0x6}]}) 1.500411163s ago: executing program 3 (id=1226): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) lsm_list_modules$auto(0x0, 0x0, 0x0) modify_ldt$auto(0x1, 0x0, 0x10) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0x100000000}, 0x6, 0x0) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000180)=""/190, 0xbe) 1.361648638s ago: executing program 0 (id=1227): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0xa, 0x2, 0x3a) 1.361553126s ago: executing program 1 (id=1228): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r0, 0x4068aea3, &(0x7f0000000080)={0xce}) 1.280665103s ago: executing program 2 (id=1229): rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x4, 0x6, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x2, 0xffffffffffffffff, 0x44eb1, 0x602, 0x300000000000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto_XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, 0x0) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) 1.142480741s ago: executing program 1 (id=1230): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x2, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400008, 0x100000005}}) io_uring_enter$auto(r0, 0x9, 0x820e, 0x9, 0x0, 0x18) 1.075243112s ago: executing program 2 (id=1232): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) setdomainname$auto(0x0, 0xb4) 928.905422ms ago: executing program 1 (id=1233): sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) mmap$auto(0x0, 0xdb3, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r0, 0x89fd, 0x24) 644.787404ms ago: executing program 3 (id=1234): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) pipe2$auto(0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/user\x00') ioctl$auto(0x3, 0xc0383e04, r1) 642.151348ms ago: executing program 2 (id=1235): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0xa, 0x1, 0x84) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0xf92c, 0x4000000000df, 0xeb1, 0x401, 0x2000000000004000) connect$auto(0x3, 0x0, 0x54) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) 491.638215ms ago: executing program 3 (id=1236): mmap$auto(0x0, 0x2020009, 0xb, 0xeb1, 0xfffffffffffffffa, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty58\x00', 0x800, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) mknod$auto(&(0x7f0000000500)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x1, 0x3) lstat$auto(&(0x7f0000000200)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) ioctl$auto(0x3, 0x40104d06, 0x5) 451.228678ms ago: executing program 3 (id=1237): mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) io_uring_setup$auto(0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) futex_wait$auto(0x0, 0x0, 0x7f, 0x2, 0x0, 0x1) futex_wake$auto(0x0, 0x7, 0xfffffffb, 0x2) ioctl$auto(0x3, 0x894b, 0x38) 381.821575ms ago: executing program 2 (id=1238): bpf$auto(0x11, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x1, 0xffffffffffffffff, 0xa, 0x6}, 0xcf) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/ieee80211/phy11/netdev:wlan1/rc_rateidx_mcs_mask_5ghz\x00', 0x400202, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x2e, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x807}, 0xfffffffd, 0x8) recvmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) 381.171429ms ago: executing program 0 (id=1246): sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}}, 0xf7374674b920089e) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r0, 0x89f0, 0x24) 304.698571ms ago: executing program 3 (id=1239): socket(0x2, 0x3, 0x100) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) rseq$auto(0x0, 0xfffffff4, 0x0, 0x7) 185.313757ms ago: executing program 2 (id=1240): mmap$auto(0x2, 0xdf2, 0x5, 0x8a75, 0xffffffffffffffff, 0x8) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) 0s ago: executing program 1 (id=1241): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) write$auto(r0, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) getsockopt$auto_SO_NO_CHECK(r0, 0x7, 0xb, &(0x7f0000000040)=',\x00', &(0x7f00000000c0)=0x6) read$auto(r1, 0x0, 0x1f40) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) kernel console output (not intermixed with test programs): /TASK> [ 146.528826][ T7242] netlink: 'syz.0.511': attribute type 4 has an invalid length. [ 146.569072][ T7242] netlink: 314 bytes leftover after parsing attributes in process `syz.0.511'. [ 146.822181][ T7254] netlink: 338 bytes leftover after parsing attributes in process `syz.1.517'. [ 147.520953][ T7277] netlink: 28 bytes leftover after parsing attributes in process `syz.2.523'. [ 147.586500][ T7277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.616996][ T7277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.685785][ T7277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.719772][ T7277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.182202][ T7285] sctp: [Deprecated]: syz.1.525 (pid 7285) Use of struct sctp_assoc_value in delayed_ack socket option. [ 148.182202][ T7285] Use struct sctp_sack_info instead [ 149.347387][ T7321] : Can't lookup blockdev [ 150.733443][ T7349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.548'. [ 150.773356][ T7349] netlink: 354 bytes leftover after parsing attributes in process `syz.2.548'. [ 150.969893][ T7358] netlink: 330 bytes leftover after parsing attributes in process `syz.0.552'. [ 151.104031][ T7355] zswap: compressor not available [ 151.469100][ T7368] ubi0: attaching mtd0 [ 151.487267][ T7368] ubi0: scanning is finished [ 151.487306][ T7368] ubi0: empty MTD device detected [ 151.645762][ T7368] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 151.656330][ T7368] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 151.663823][ T7368] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 151.671362][ T7368] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 151.678971][ T7368] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 151.699515][ T7368] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 151.719175][ T7368] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3377548721 [ 151.823943][ T7368] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 151.886410][ T7380] ubi0: background thread "ubi_bgt0d" started, PID 7380 [ 152.343704][ T7395] FAULT_INJECTION: forcing a failure. [ 152.343704][ T7395] name failslab, interval 1, probability 0, space 0, times 0 [ 152.373001][ T7395] CPU: 1 UID: 0 PID: 7395 Comm: syz.3.564 Not tainted syzkaller #0 PREEMPT(full) [ 152.373039][ T7395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 152.373055][ T7395] Call Trace: [ 152.373064][ T7395] [ 152.373074][ T7395] dump_stack_lvl+0x16c/0x1f0 [ 152.373112][ T7395] should_fail_ex+0x512/0x640 [ 152.373150][ T7395] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 152.373186][ T7395] should_failslab+0xc2/0x120 [ 152.373220][ T7395] __kvmalloc_node_noprof+0x141/0x9c0 [ 152.373254][ T7395] ? io_alloc_cache_init+0x38/0x170 [ 152.373298][ T7395] ? io_alloc_cache_init+0x38/0x170 [ 152.373331][ T7395] io_alloc_cache_init+0x38/0x170 [ 152.373372][ T7395] io_uring_setup+0x67a/0x20e0 [ 152.373407][ T7395] ? __pfx_io_uring_setup+0x10/0x10 [ 152.373436][ T7395] ? do_futex+0x122/0x350 [ 152.373471][ T7395] ? __pfx_do_futex+0x10/0x10 [ 152.373503][ T7395] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 152.373555][ T7395] ? xfd_validate_state+0x61/0x180 [ 152.373591][ T7395] ? __pfx_do_writev+0x10/0x10 [ 152.373626][ T7395] __x64_sys_io_uring_setup+0xc2/0x170 [ 152.373658][ T7395] do_syscall_64+0xcd/0xfa0 [ 152.373692][ T7395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.373719][ T7395] RIP: 0033:0x7fb15d78f7c9 [ 152.373741][ T7395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.373764][ T7395] RSP: 002b:00007fb15e684038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 152.373796][ T7395] RAX: ffffffffffffffda RBX: 00007fb15d9e5fa0 RCX: 00007fb15d78f7c9 [ 152.373815][ T7395] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 152.373832][ T7395] RBP: 00007fb15d813f91 R08: 0000000000000000 R09: 0000000000000000 [ 152.373849][ T7395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.373864][ T7395] R13: 00007fb15d9e6038 R14: 00007fb15d9e5fa0 R15: 00007fff940882b8 [ 152.373910][ T7395] [ 152.699133][ T7400] FAULT_INJECTION: forcing a failure. [ 152.699133][ T7400] name failslab, interval 1, probability 0, space 0, times 0 [ 152.721109][ T7400] CPU: 1 UID: 0 PID: 7400 Comm: syz.2.574 Not tainted syzkaller #0 PREEMPT(full) [ 152.721147][ T7400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 152.721163][ T7400] Call Trace: [ 152.721171][ T7400] [ 152.721182][ T7400] dump_stack_lvl+0x16c/0x1f0 [ 152.721217][ T7400] should_fail_ex+0x512/0x640 [ 152.721254][ T7400] ? __kmalloc_cache_noprof+0x5f/0x780 [ 152.721284][ T7400] should_failslab+0xc2/0x120 [ 152.721319][ T7400] __kmalloc_cache_noprof+0x72/0x780 [ 152.721343][ T7400] ? do_raw_spin_unlock+0x172/0x230 [ 152.721367][ T7400] ? snd_ctl_open+0x174/0x5f0 [ 152.721406][ T7400] ? snd_card_file_add+0x26e/0x340 [ 152.721445][ T7400] ? snd_ctl_open+0x174/0x5f0 [ 152.721471][ T7400] snd_ctl_open+0x174/0x5f0 [ 152.721500][ T7400] ? __pfx_snd_ctl_open+0x10/0x10 [ 152.721527][ T7400] snd_open+0x22d/0x4c0 [ 152.721558][ T7400] ? __pfx_snd_open+0x10/0x10 [ 152.721587][ T7400] chrdev_open+0x234/0x6a0 [ 152.721616][ T7400] ? __pfx_apparmor_file_open+0x10/0x10 [ 152.721652][ T7400] ? __pfx_chrdev_open+0x10/0x10 [ 152.721683][ T7400] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 152.721718][ T7400] do_dentry_open+0x982/0x1530 [ 152.721748][ T7400] ? __pfx_chrdev_open+0x10/0x10 [ 152.721785][ T7400] vfs_open+0x82/0x3f0 [ 152.721824][ T7400] path_openat+0x1de4/0x2cb0 [ 152.721865][ T7400] ? __pfx_path_openat+0x10/0x10 [ 152.721895][ T7400] ? __lock_acquire+0xb8a/0x1c90 [ 152.721933][ T7400] do_filp_open+0x20b/0x470 [ 152.721963][ T7400] ? __pfx_do_filp_open+0x10/0x10 [ 152.722018][ T7400] ? alloc_fd+0x471/0x7d0 [ 152.722053][ T7400] do_sys_openat2+0x11b/0x1d0 [ 152.722088][ T7400] ? __pfx_do_sys_openat2+0x10/0x10 [ 152.722132][ T7400] __x64_sys_openat+0x174/0x210 [ 152.722163][ T7400] ? __pfx___x64_sys_openat+0x10/0x10 [ 152.722204][ T7400] do_syscall_64+0xcd/0xfa0 [ 152.722251][ T7400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.722277][ T7400] RIP: 0033:0x7f7dea78f7c9 [ 152.722296][ T7400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.722319][ T7400] RSP: 002b:00007f7deb704038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 152.722342][ T7400] RAX: ffffffffffffffda RBX: 00007f7dea9e5fa0 RCX: 00007f7dea78f7c9 [ 152.722356][ T7400] RDX: 0000000000000080 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 152.722377][ T7400] RBP: 00007f7dea813f91 R08: 0000000000000000 R09: 0000000000000000 [ 152.722404][ T7400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.722421][ T7400] R13: 00007f7dea9e6038 R14: 00007f7dea9e5fa0 R15: 00007fff19655ee8 [ 152.722455][ T7400] [ 154.629270][ T7429] Console: switching to colour VGA+ 80x25 [ 154.642103][ T7427] netlink: 342 bytes leftover after parsing attributes in process `syz.1.576'. [ 154.716135][ T7433] netlink: 28 bytes leftover after parsing attributes in process `syz.2.580'. [ 154.792303][ T7435] FAULT_INJECTION: forcing a failure. [ 154.792303][ T7435] name fail_futex, interval 1, probability 0, space 0, times 1 [ 154.792353][ T7435] CPU: 0 UID: 0 PID: 7435 Comm: syz.3.579 Not tainted syzkaller #0 PREEMPT(full) [ 154.792384][ T7435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 154.792403][ T7435] Call Trace: [ 154.792412][ T7435] [ 154.792423][ T7435] dump_stack_lvl+0x16c/0x1f0 [ 154.792472][ T7435] should_fail_ex+0x512/0x640 [ 154.792513][ T7435] should_fail_futex+0x4c/0x60 [ 154.792545][ T7435] __x64_sys_futex+0x25e/0x4c0 [ 154.792583][ T7435] ? __x64_sys_timerfd_gettime+0xee/0x170 [ 154.792621][ T7435] ? __pfx___x64_sys_futex+0x10/0x10 [ 154.792655][ T7435] ? ksys_write+0x1ac/0x250 [ 154.792697][ T7435] do_syscall_64+0xcd/0xfa0 [ 154.792729][ T7435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.792754][ T7435] RIP: 0033:0x7fb15d78f7c9 [ 154.792775][ T7435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.792799][ T7435] RSP: 002b:00007fb15e684038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 154.792823][ T7435] RAX: ffffffffffffffda RBX: 00007fb15d9e5fa0 RCX: 00007fb15d78f7c9 [ 154.792840][ T7435] RDX: 0000000000000004 RSI: 000000000000000d RDI: 0000000000000000 [ 154.792855][ T7435] RBP: 00007fb15d813f91 R08: 0000000000000000 R09: 0000000000000008 [ 154.792870][ T7435] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.792886][ T7435] R13: 00007fb15d9e6038 R14: 00007fb15d9e5fa0 R15: 00007fff940882b8 [ 154.792922][ T7435] [ 154.816376][ T7429] Console: switching to colour frame buffer device 128x48 [ 155.891001][ T7459] netlink: 'syz.1.588': attribute type 21 has an invalid length. [ 155.907417][ T7459] netlink: 334 bytes leftover after parsing attributes in process `syz.1.588'. [ 156.114091][ T7464] netlink: 334 bytes leftover after parsing attributes in process `syz.1.591'. [ 156.443438][ T7469] netlink: 28 bytes leftover after parsing attributes in process `syz.3.593'. [ 156.445579][ T7466] netlink: 74 bytes leftover after parsing attributes in process `syz.1.592'. [ 156.453165][ T7469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.474092][ T7469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.483976][ T7469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.493171][ T7469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.673066][ T7473] zswap: compressor not available [ 156.870915][ T7484] FAULT_INJECTION: forcing a failure. [ 156.870915][ T7484] name failslab, interval 1, probability 0, space 0, times 0 [ 156.896922][ T30] audit: type=1804 audit(1764525665.022:2): pid=7478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.595" name="/newroot/167/file0" dev="tmpfs" ino=869 res=1 errno=0 [ 156.917892][ C1] vkms_vblank_simulate: vblank timer overrun [ 156.947142][ T7484] CPU: 1 UID: 0 PID: 7484 Comm: syz.1.598 Not tainted syzkaller #0 PREEMPT(full) [ 156.947183][ T7484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 156.947201][ T7484] Call Trace: [ 156.947210][ T7484] [ 156.947221][ T7484] dump_stack_lvl+0x16c/0x1f0 [ 156.947260][ T7484] should_fail_ex+0x512/0x640 [ 156.947309][ T7484] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 156.947342][ T7484] should_failslab+0xc2/0x120 [ 156.947380][ T7484] kmem_cache_alloc_noprof+0x75/0x6e0 [ 156.947410][ T7484] ? cred_alloc_blank+0x1c/0xa0 [ 156.947469][ T7484] ? cred_alloc_blank+0x1c/0xa0 [ 156.947511][ T7484] cred_alloc_blank+0x1c/0xa0 [ 156.947549][ T7484] keyctl_session_to_parent+0x55/0xaf0 [ 156.947596][ T7484] __do_sys_keyctl+0x25c/0x590 [ 156.947636][ T7484] do_syscall_64+0xcd/0xfa0 [ 156.947669][ T7484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.947696][ T7484] RIP: 0033:0x7fd6e478f7c9 [ 156.947718][ T7484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.947742][ T7484] RSP: 002b:00007fd6e56fc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 156.947766][ T7484] RAX: ffffffffffffffda RBX: 00007fd6e49e5fa0 RCX: 00007fd6e478f7c9 [ 156.947783][ T7484] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000012 [ 156.947800][ T7484] RBP: 00007fd6e4813f91 R08: 0000000000000001 R09: 0000000000000000 [ 156.947816][ T7484] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 156.947832][ T7484] R13: 00007fd6e49e6038 R14: 00007fd6e49e5fa0 R15: 00007ffdb8ca1608 [ 156.947869][ T7484] [ 156.953008][ T30] audit: type=1804 audit(1764525665.072:3): pid=7481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.595" name="/newroot/167/file0" dev="tmpfs" ino=869 res=1 errno=0 [ 157.066381][ C1] vkms_vblank_simulate: vblank timer overrun [ 157.492634][ T7496] FAULT_INJECTION: forcing a failure. [ 157.492634][ T7496] name failslab, interval 1, probability 0, space 0, times 0 [ 157.527529][ T7496] CPU: 1 UID: 0 PID: 7496 Comm: syz.1.602 Not tainted syzkaller #0 PREEMPT(full) [ 157.527565][ T7496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 157.527581][ T7496] Call Trace: [ 157.527589][ T7496] [ 157.527600][ T7496] dump_stack_lvl+0x16c/0x1f0 [ 157.527638][ T7496] should_fail_ex+0x512/0x640 [ 157.527676][ T7496] ? __kmalloc_cache_node_noprof+0x62/0x7a0 [ 157.527712][ T7496] should_failslab+0xc2/0x120 [ 157.527748][ T7496] __kmalloc_cache_node_noprof+0x75/0x7a0 [ 157.527779][ T7496] ? tracing_mark_open+0x44f/0x6f0 [ 157.527827][ T7496] ? tracing_mark_open+0x44f/0x6f0 [ 157.527864][ T7496] tracing_mark_open+0x44f/0x6f0 [ 157.527911][ T7496] do_dentry_open+0x982/0x1530 [ 157.527943][ T7496] ? __pfx_tracing_mark_open+0x10/0x10 [ 157.527990][ T7496] vfs_open+0x82/0x3f0 [ 157.528040][ T7496] path_openat+0x1de4/0x2cb0 [ 157.528081][ T7496] ? __pfx_path_openat+0x10/0x10 [ 157.528112][ T7496] ? __lock_acquire+0xb8a/0x1c90 [ 157.528144][ T7496] do_filp_open+0x20b/0x470 [ 157.528169][ T7496] ? __pfx_do_filp_open+0x10/0x10 [ 157.528235][ T7496] ? alloc_fd+0x471/0x7d0 [ 157.528270][ T7496] do_sys_openat2+0x11b/0x1d0 [ 157.528315][ T7496] ? __pfx_do_sys_openat2+0x10/0x10 [ 157.528365][ T7496] __x64_sys_openat+0x174/0x210 [ 157.528402][ T7496] ? __pfx___x64_sys_openat+0x10/0x10 [ 157.528454][ T7496] do_syscall_64+0xcd/0xfa0 [ 157.528489][ T7496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.528517][ T7496] RIP: 0033:0x7fd6e478f7c9 [ 157.528540][ T7496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.528568][ T7496] RSP: 002b:00007fd6e56fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 157.528593][ T7496] RAX: ffffffffffffffda RBX: 00007fd6e49e5fa0 RCX: 00007fd6e478f7c9 [ 157.528611][ T7496] RDX: 0000000000000201 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 157.528629][ T7496] RBP: 00007fd6e4813f91 R08: 0000000000000000 R09: 0000000000000000 [ 157.528647][ T7496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.528663][ T7496] R13: 00007fd6e49e6038 R14: 00007fd6e49e5fa0 R15: 00007ffdb8ca1608 [ 157.528703][ T7496] [ 157.752463][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.817338][ T7516] netlink: 20 bytes leftover after parsing attributes in process `syz.2.608'. [ 159.075954][ T7524] netlink: 20 bytes leftover after parsing attributes in process `syz.2.614'. [ 159.756821][ T7544] zswap: compressor not available [ 159.866511][ T7557] Console: switching to colour VGA+ 80x25 [ 159.983418][ T7557] Console: switching to colour frame buffer device 128x48 [ 160.219876][ T7567] ubi: mtd0 is already attached to ubi0 [ 160.811144][ T7579] netlink: 28 bytes leftover after parsing attributes in process `syz.0.631'. [ 160.821229][ T7579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.830108][ T7579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.841530][ T7579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.851153][ T7579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.269094][ T7598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.641'. [ 162.155710][ T7627] netlink: 28 bytes leftover after parsing attributes in process `syz.3.649'. [ 162.312443][ T7634] netlink: 350 bytes leftover after parsing attributes in process `syz.1.655'. [ 162.563015][ T5834] Bluetooth: hci2: unexpected subevent 0x05 length: 123 > 12 [ 162.616051][ T7652] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 162.627513][ T7652] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 162.636069][ T7652] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 162.643706][ T7652] page_type: f5(slab) [ 162.647761][ T7652] raw: 00fff00000000040 ffff88813ffa7140 dead000000000122 0000000000000000 [ 162.657133][ T7652] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 162.665780][ T7652] head: 00fff00000000040 ffff88813ffa7140 dead000000000122 0000000000000000 [ 162.676414][ T7652] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 162.685222][ T7652] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 162.696583][ T7652] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 162.706018][ T7652] page dumped because: unmovable page [ 162.711503][ T7652] page_owner tracks the page as allocated [ 162.712171][ T5185] ERROR: Out of memory at tomoyo_memory_ok. [ 162.717491][ T7652] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3489, tgid 3489 (kworker/u8:12), ts 157763562366, free_ts 155719282664 [ 162.717558][ T7652] post_alloc_hook+0x1af/0x220 [ 162.750470][ T7652] get_page_from_freelist+0x10a3/0x3a30 [ 162.756067][ T7652] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 162.762139][ T7652] alloc_pages_mpol+0x1fb/0x550 [ 162.767154][ T7652] new_slab+0x24a/0x360 [ 162.771364][ T7652] ___slab_alloc+0xd79/0x1a50 [ 162.777784][ T7652] __slab_alloc.constprop.0+0x63/0x110 [ 162.783477][ T7652] __kmalloc_node_track_caller_noprof+0x4db/0x8a0 [ 162.790755][ T7652] kmalloc_reserve+0xef/0x2c0 [ 162.795501][ T7652] __alloc_skb+0x166/0x380 [ 162.800798][ T7652] nsim_dev_trap_report_work+0x2b1/0xcf0 [ 162.807452][ T7652] process_one_work+0x9cf/0x1b70 [ 162.809918][ T7655] netlink: 342 bytes leftover after parsing attributes in process `syz.1.663'. [ 162.812776][ T7652] worker_thread+0x6c8/0xf10 [ 162.827070][ T7652] kthread+0x3c5/0x780 [ 162.831205][ T7652] ret_from_fork+0x675/0x7d0 [ 162.835835][ T7652] ret_from_fork_asm+0x1a/0x30 [ 162.840711][ T7652] page last free pid 7438 tgid 7438 stack trace: [ 162.847102][ T7652] __free_frozen_pages+0x7df/0x1160 [ 162.852347][ T7652] __put_partials+0x130/0x170 [ 162.858386][ T7652] qlist_free_all+0x4d/0x120 [ 162.863241][ T7652] kasan_quarantine_reduce+0x195/0x1e0 [ 162.869395][ T7652] __kasan_slab_alloc+0x69/0x90 [ 162.875142][ T7652] kmem_cache_alloc_noprof+0x250/0x6e0 [ 162.882863][ T7652] jbd2__journal_start+0x193/0x6a0 [ 162.898813][ T7652] __ext4_journal_start_sb+0x195/0x690 [ 162.904618][ T7652] ext4_dirty_inode+0xa1/0x130 [ 162.910177][ T7652] __mark_inode_dirty+0x1ee/0xe40 [ 162.915566][ T7652] generic_update_time+0xcf/0xf0 [ 162.921116][ T7652] file_update_time+0x17d/0x1c0 [ 162.926225][ T7652] ext4_page_mkwrite+0x33d/0x1880 [ 162.932401][ T7652] do_page_mkwrite+0x174/0x380 [ 162.937765][ T7652] do_pte_missing+0x29d/0x3ba0 [ 162.942749][ T7652] __handle_mm_fault+0x1556/0x2aa0 [ 163.994652][ T30] audit: type=1804 audit(1764525672.122:4): pid=7690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.672" name="/newroot/154/file0" dev="tmpfs" ino=801 res=1 errno=0 [ 164.015658][ C1] vkms_vblank_simulate: vblank timer overrun [ 164.055702][ T30] audit: type=1804 audit(1764525672.162:5): pid=7693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.672" name="/newroot/154/file0" dev="tmpfs" ino=801 res=1 errno=0 [ 164.607321][ T5834] Bluetooth: hci2: command tx timeout [ 166.106464][ T7745] netlink: 130 bytes leftover after parsing attributes in process `syz.1.701'. [ 166.376483][ T7753] FAULT_INJECTION: forcing a failure. [ 166.376483][ T7753] name failslab, interval 1, probability 0, space 0, times 0 [ 166.418307][ T7753] CPU: 1 UID: 0 PID: 7753 Comm: syz.2.703 Not tainted syzkaller #0 PREEMPT(full) [ 166.418358][ T7753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 166.418375][ T7753] Call Trace: [ 166.418384][ T7753] [ 166.418395][ T7753] dump_stack_lvl+0x16c/0x1f0 [ 166.418434][ T7753] should_fail_ex+0x512/0x640 [ 166.418473][ T7753] ? __kmalloc_cache_noprof+0x5f/0x780 [ 166.418504][ T7753] should_failslab+0xc2/0x120 [ 166.418540][ T7753] __kmalloc_cache_noprof+0x72/0x780 [ 166.418567][ T7753] ? open_substream+0xec/0x990 [ 166.418612][ T7753] ? open_substream+0xec/0x990 [ 166.418648][ T7753] open_substream+0xec/0x990 [ 166.418691][ T7753] rawmidi_open_priv+0x543/0x6e0 [ 166.418737][ T7753] snd_rawmidi_open+0x4cb/0xbf0 [ 166.418784][ T7753] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 166.418826][ T7753] ? __pfx_default_wake_function+0x10/0x10 [ 166.418859][ T7753] ? do_raw_spin_lock+0x12c/0x2b0 [ 166.418903][ T7753] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 166.418942][ T7753] snd_open+0x22d/0x4c0 [ 166.418975][ T7753] ? __pfx_snd_open+0x10/0x10 [ 166.419006][ T7753] chrdev_open+0x234/0x6a0 [ 166.419040][ T7753] ? __pfx_chrdev_open+0x10/0x10 [ 166.419074][ T7753] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 166.419107][ T7753] do_dentry_open+0x982/0x1530 [ 166.419134][ T7753] ? __pfx_chrdev_open+0x10/0x10 [ 166.419174][ T7753] vfs_open+0x82/0x3f0 [ 166.419215][ T7753] path_openat+0x1de4/0x2cb0 [ 166.419258][ T7753] ? __pfx_path_openat+0x10/0x10 [ 166.419290][ T7753] ? __lock_acquire+0xb8a/0x1c90 [ 166.419329][ T7753] do_filp_open+0x20b/0x470 [ 166.419366][ T7753] ? __pfx_do_filp_open+0x10/0x10 [ 166.419423][ T7753] ? alloc_fd+0x471/0x7d0 [ 166.419459][ T7753] do_sys_openat2+0x11b/0x1d0 [ 166.419495][ T7753] ? __pfx_do_sys_openat2+0x10/0x10 [ 166.419545][ T7753] __x64_sys_openat+0x174/0x210 [ 166.419581][ T7753] ? __pfx___x64_sys_openat+0x10/0x10 [ 166.419631][ T7753] do_syscall_64+0xcd/0xfa0 [ 166.419665][ T7753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.419693][ T7753] RIP: 0033:0x7f7dea78f7c9 [ 166.419716][ T7753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.419740][ T7753] RSP: 002b:00007f7deb704038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 166.419766][ T7753] RAX: ffffffffffffffda RBX: 00007f7dea9e5fa0 RCX: 00007f7dea78f7c9 [ 166.419783][ T7753] RDX: 0000000000000003 RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 166.419800][ T7753] RBP: 00007f7dea813f91 R08: 0000000000000000 R09: 0000000000000000 [ 166.419816][ T7753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.419832][ T7753] R13: 00007f7dea9e6038 R14: 00007f7dea9e5fa0 R15: 00007fff19655ee8 [ 166.419871][ T7753] [ 167.408688][ T7781] FAULT_INJECTION: forcing a failure. [ 167.408688][ T7781] name failslab, interval 1, probability 0, space 0, times 0 [ 167.438935][ T7781] CPU: 0 UID: 0 PID: 7781 Comm: syz.2.715 Not tainted syzkaller #0 PREEMPT(full) [ 167.438970][ T7781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 167.438984][ T7781] Call Trace: [ 167.438993][ T7781] [ 167.439005][ T7781] dump_stack_lvl+0x16c/0x1f0 [ 167.439042][ T7781] should_fail_ex+0x512/0x640 [ 167.439082][ T7781] ? __kmalloc_noprof+0xca/0x880 [ 167.439110][ T7781] should_failslab+0xc2/0x120 [ 167.439143][ T7781] __kmalloc_noprof+0xdd/0x880 [ 167.439167][ T7781] ? __import_iovec+0x1dd/0x650 [ 167.439193][ T7781] ? iovec_from_user+0x108/0x140 [ 167.439228][ T7781] ? iovec_from_user+0x108/0x140 [ 167.439263][ T7781] ? import_iovec+0x86/0xb0 [ 167.439287][ T7781] iovec_from_user+0x108/0x140 [ 167.439318][ T7781] process_vm_rw+0x1d8/0x2c0 [ 167.439351][ T7781] ? __pfx_process_vm_rw+0x10/0x10 [ 167.439430][ T7781] ? xfd_validate_state+0x61/0x180 [ 167.439466][ T7781] ? __pfx_ksys_write+0x10/0x10 [ 167.439499][ T7781] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 167.439531][ T7781] ? do_syscall_64+0x91/0xfa0 [ 167.439561][ T7781] ? lockdep_hardirqs_on+0x7c/0x110 [ 167.439592][ T7781] do_syscall_64+0xcd/0xfa0 [ 167.439622][ T7781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.439646][ T7781] RIP: 0033:0x7f7dea78f7c9 [ 167.439665][ T7781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.439687][ T7781] RSP: 002b:00007f7deb704038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 167.439710][ T7781] RAX: ffffffffffffffda RBX: 00007f7dea9e5fa0 RCX: 00007f7dea78f7c9 [ 167.439727][ T7781] RDX: 0000040000000001 RSI: 0000200000000000 RDI: 0000000000000000 [ 167.439743][ T7781] RBP: 00007f7dea813f91 R08: 000000000000000a R09: 0000000000000000 [ 167.439759][ T7781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.439774][ T7781] R13: 00007f7dea9e6038 R14: 00007f7dea9e5fa0 R15: 00007fff19655ee8 [ 167.439811][ T7781] [ 167.734303][ T7785] netlink: 342 bytes leftover after parsing attributes in process `syz.0.717'. [ 168.063495][ T5834] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 168.063535][ T5834] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 168.078468][ T5834] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 168.078525][ T5834] Bluetooth: hci3: Unknown advertising packet type: 0x14 [ 168.085746][ T5834] Bluetooth: hci3: Unknown advertising packet type: 0x14 [ 168.092980][ T5834] Bluetooth: hci3: Unknown advertising packet type: 0x14 [ 168.106175][ T5834] Bluetooth: hci3: Unknown advertising packet type: 0x72 [ 168.113802][ T5834] Bluetooth: hci3: Unknown advertising packet type: 0x14 [ 168.121058][ T5834] Bluetooth: hci3: Malformed LE Event: 0x0d [ 168.496669][ T7805] netlink: 342 bytes leftover after parsing attributes in process `syz.2.726'. [ 169.744921][ T7844] netlink: 342 bytes leftover after parsing attributes in process `syz.3.741'. [ 170.008677][ T7853] netlink: 342 bytes leftover after parsing attributes in process `syz.0.744'. [ 170.021948][ T7850] zswap: compressor 000 not available [ 171.044282][ T7891] random: crng reseeded on system resumption [ 171.144258][ T7895] Unrecognized hibernate image header format! [ 171.160042][ T7895] PM: hibernation: Image mismatch: architecture specific data [ 171.703300][ T7905] netlink: 130 bytes leftover after parsing attributes in process `syz.3.763'. [ 172.132432][ T7913] netlink: 28 bytes leftover after parsing attributes in process `syz.3.767'. [ 173.140812][ T7948] netlink: 28 bytes leftover after parsing attributes in process `syz.0.779'. [ 173.613236][ T7953] zswap: compressor 000 not available [ 173.775287][ T7966] random: crng reseeded on system resumption [ 173.967964][ T7967] Unrecognized hibernate image header format! [ 173.974513][ T7973] netlink: 342 bytes leftover after parsing attributes in process `syz.2.788'. [ 173.984068][ T7967] PM: hibernation: Image mismatch: architecture specific data [ 174.264230][ T7980] FAULT_INJECTION: forcing a failure. [ 174.264230][ T7980] name failslab, interval 1, probability 0, space 0, times 0 [ 174.312356][ T7980] CPU: 0 UID: 0 PID: 7980 Comm: syz.1.791 Not tainted syzkaller #0 PREEMPT(full) [ 174.312393][ T7980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 174.312409][ T7980] Call Trace: [ 174.312418][ T7980] [ 174.312428][ T7980] dump_stack_lvl+0x16c/0x1f0 [ 174.312466][ T7980] should_fail_ex+0x512/0x640 [ 174.312505][ T7980] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 174.312538][ T7980] should_failslab+0xc2/0x120 [ 174.312572][ T7980] kmem_cache_alloc_node_noprof+0x78/0x770 [ 174.312599][ T7980] ? __alloc_skb+0x2b2/0x380 [ 174.312645][ T7980] ? __alloc_skb+0x2b2/0x380 [ 174.312681][ T7980] ? do_raw_spin_lock+0x12c/0x2b0 [ 174.312718][ T7980] __alloc_skb+0x2b2/0x380 [ 174.312756][ T7980] ? __pfx___alloc_skb+0x10/0x10 [ 174.312799][ T7980] ? __lock_acquire+0x622/0x1c90 [ 174.312838][ T7980] __ip_append_data+0x30b3/0x41a0 [ 174.312877][ T7980] ? __pfx_raw_getfrag+0x10/0x10 [ 174.312911][ T7980] ? find_held_lock+0x2b/0x80 [ 174.312938][ T7980] ? ip_dst_mtu_maybe_forward.constprop.0+0x328/0x750 [ 174.312981][ T7980] ? ip_dst_mtu_maybe_forward.constprop.0+0x332/0x750 [ 174.313019][ T7980] ? __pfx___ip_append_data+0x10/0x10 [ 174.313059][ T7980] ip_append_data+0x10f/0x1a0 [ 174.313092][ T7980] ? __pfx_raw_getfrag+0x10/0x10 [ 174.313131][ T7980] raw_sendmsg+0xeee/0x38b0 [ 174.313182][ T7980] ? __pfx_raw_sendmsg+0x10/0x10 [ 174.313228][ T7980] ? __lock_acquire+0x622/0x1c90 [ 174.313315][ T7980] ? __pfx_raw_sendmsg+0x10/0x10 [ 174.313356][ T7980] inet_sendmsg+0x11c/0x140 [ 174.313396][ T7980] sock_write_iter+0x509/0x610 [ 174.313436][ T7980] ? __pfx_sock_write_iter+0x10/0x10 [ 174.313482][ T7980] ? bpf_lsm_file_permission+0x9/0x10 [ 174.313512][ T7980] ? security_file_permission+0x71/0x210 [ 174.313541][ T7980] ? rw_verify_area+0xcf/0x6c0 [ 174.313569][ T7980] vfs_write+0x7d3/0x11d0 [ 174.313599][ T7980] ? __pfx_sock_write_iter+0x10/0x10 [ 174.313635][ T7980] ? __pfx_vfs_write+0x10/0x10 [ 174.313660][ T7980] ? find_held_lock+0x2b/0x80 [ 174.313710][ T7980] ksys_write+0x1f8/0x250 [ 174.313737][ T7980] ? __pfx_ksys_write+0x10/0x10 [ 174.313777][ T7980] do_syscall_64+0xcd/0xfa0 [ 174.313811][ T7980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.313837][ T7980] RIP: 0033:0x7fd6e478f7c9 [ 174.313859][ T7980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.313884][ T7980] RSP: 002b:00007fd6e56fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 174.313909][ T7980] RAX: ffffffffffffffda RBX: 00007fd6e49e5fa0 RCX: 00007fd6e478f7c9 [ 174.313927][ T7980] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 174.313942][ T7980] RBP: 00007fd6e4813f91 R08: 0000000000000000 R09: 0000000000000000 [ 174.313958][ T7980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.313973][ T7980] R13: 00007fd6e49e6038 R14: 00007fd6e49e5fa0 R15: 00007ffdb8ca1608 [ 174.314010][ T7980] [ 174.756492][ T7989] netlink: 342 bytes leftover after parsing attributes in process `syz.3.794'. [ 175.498183][ T8012] netlink: 16 bytes leftover after parsing attributes in process `syz.3.803'. [ 175.609700][ T8014] random: crng reseeded on system resumption [ 175.688885][ T8012] netlink: 16 bytes leftover after parsing attributes in process `syz.3.803'. [ 175.917313][ T8025] random: crng reseeded on system resumption [ 176.059798][ T8025] hub 1-0:1.0: USB hub found [ 176.077524][ T8025] hub 1-0:1.0: 1 port detected [ 176.112659][ T8031] Restarting kernel threads ... [ 176.138916][ T8031] Done restarting kernel threads. [ 176.546333][ T8041] netlink: 330 bytes leftover after parsing attributes in process `syz.2.812'. [ 176.940498][ T8052] Format for adding new port is "id [perm_addr]" (uint MAC). [ 176.984485][ T5834] block nbd0: Receive control failed (result -107) [ 177.146787][ T5593] ERROR: Out of memory at tomoyo_memory_ok. [ 177.264490][ T8068] misc userio: The device must be registered before sending interrupts [ 177.359751][ T8071] FAULT_INJECTION: forcing a failure. [ 177.359751][ T8071] name failslab, interval 1, probability 0, space 0, times 0 [ 177.378644][ T8071] CPU: 1 UID: 0 PID: 8071 Comm: syz.0.825 Not tainted syzkaller #0 PREEMPT(full) [ 177.378682][ T8071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 177.378698][ T8071] Call Trace: [ 177.378706][ T8071] [ 177.378717][ T8071] dump_stack_lvl+0x16c/0x1f0 [ 177.378761][ T8071] should_fail_ex+0x512/0x640 [ 177.378805][ T8071] should_failslab+0xc2/0x120 [ 177.378835][ T8071] __kmalloc_cache_noprof+0x72/0x780 [ 177.378872][ T8071] ? sctp_add_bind_addr+0xae/0x3f0 [ 177.378901][ T8071] ? sctp_bind_addr_match+0x193/0x300 [ 177.378934][ T8071] ? sctp_add_bind_addr+0xae/0x3f0 [ 177.378959][ T8071] sctp_add_bind_addr+0xae/0x3f0 [ 177.378990][ T8071] sctp_do_bind+0x2d6/0x700 [ 177.379034][ T8071] sctp_connect_new_asoc+0x5e7/0x770 [ 177.379074][ T8071] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 177.379116][ T8071] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 177.379167][ T8071] __sctp_connect+0x3f3/0xc60 [ 177.379207][ T8071] ? do_raw_spin_lock+0x12c/0x2b0 [ 177.379257][ T8071] ? __pfx___sctp_connect+0x10/0x10 [ 177.379299][ T8071] ? __pfx_sctp_inet_connect+0x10/0x10 [ 177.379340][ T8071] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 177.379386][ T8071] ? __pfx_sctp_inet_connect+0x10/0x10 [ 177.379422][ T8071] sctp_inet_connect+0x15f/0x200 [ 177.379465][ T8071] __sys_connect_file+0x141/0x1a0 [ 177.379506][ T8071] __sys_connect+0x13b/0x160 [ 177.379545][ T8071] ? __pfx___sys_connect+0x10/0x10 [ 177.379595][ T8071] ? xfd_validate_state+0x61/0x180 [ 177.379630][ T8071] ? __pfx_ksys_write+0x10/0x10 [ 177.379666][ T8071] __x64_sys_connect+0x72/0xb0 [ 177.379701][ T8071] ? lockdep_hardirqs_on+0x7c/0x110 [ 177.379732][ T8071] do_syscall_64+0xcd/0xfa0 [ 177.379766][ T8071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.379792][ T8071] RIP: 0033:0x7fbd7758f7c9 [ 177.379810][ T8071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.379829][ T8071] RSP: 002b:00007fbd783fa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 177.379851][ T8071] RAX: ffffffffffffffda RBX: 00007fbd777e5fa0 RCX: 00007fbd7758f7c9 [ 177.379866][ T8071] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 177.379880][ T8071] RBP: 00007fbd77613f91 R08: 0000000000000000 R09: 0000000000000000 [ 177.379893][ T8071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.379906][ T8071] R13: 00007fbd777e6038 R14: 00007fbd777e5fa0 R15: 00007ffc2d5e5498 [ 177.379935][ T8071] [ 177.894946][ T8080] FAULT_INJECTION: forcing a failure. [ 177.894946][ T8080] name failslab, interval 1, probability 0, space 0, times 0 [ 177.912708][ T8080] CPU: 1 UID: 0 PID: 8080 Comm: syz.0.829 Not tainted syzkaller #0 PREEMPT(full) [ 177.912745][ T8080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 177.912760][ T8080] Call Trace: [ 177.912769][ T8080] [ 177.912779][ T8080] dump_stack_lvl+0x16c/0x1f0 [ 177.912816][ T8080] should_fail_ex+0x512/0x640 [ 177.912854][ T8080] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 177.912892][ T8080] should_failslab+0xc2/0x120 [ 177.912939][ T8080] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 177.912973][ T8080] ? __kthread_create_on_node+0x186/0x3f0 [ 177.913015][ T8080] ? kvasprintf+0xbc/0x160 [ 177.913037][ T8080] kvasprintf+0xbc/0x160 [ 177.913060][ T8080] ? __pfx_kvasprintf+0x10/0x10 [ 177.913096][ T8080] ? __pfx_tomoyo_gc_thread+0x10/0x10 [ 177.913119][ T8080] __kthread_create_on_node+0x186/0x3f0 [ 177.913153][ T8080] ? __pfx___kthread_create_on_node+0x10/0x10 [ 177.913204][ T8080] ? __pfx_tomoyo_gc_thread+0x10/0x10 [ 177.913228][ T8080] kthread_create_on_node+0xc7/0x100 [ 177.913263][ T8080] ? __pfx_kthread_create_on_node+0x10/0x10 [ 177.913294][ T8080] ? kasan_quarantine_put+0x10a/0x240 [ 177.913326][ T8080] ? find_held_lock+0x2b/0x80 [ 177.913353][ T8080] ? tomoyo_notify_gc+0xc6/0x470 [ 177.913383][ T8080] tomoyo_notify_gc+0xea/0x470 [ 177.913406][ T8080] ? ima_iint_find+0xea/0x130 [ 177.913447][ T8080] ? __pfx_tomoyo_release+0x10/0x10 [ 177.913475][ T8080] tomoyo_release+0x31/0x40 [ 177.913503][ T8080] __fput+0x402/0xb70 [ 177.913543][ T8080] task_work_run+0x150/0x240 [ 177.913581][ T8080] ? __pfx_task_work_run+0x10/0x10 [ 177.913619][ T8080] ? __pfx___do_sys_close_range+0x10/0x10 [ 177.913656][ T8080] exit_to_user_mode_loop+0xec/0x130 [ 177.913694][ T8080] do_syscall_64+0x426/0xfa0 [ 177.913728][ T8080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.913753][ T8080] RIP: 0033:0x7fbd7758f7c9 [ 177.913774][ T8080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.913798][ T8080] RSP: 002b:00007fbd783fa038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 177.913822][ T8080] RAX: 0000000000000000 RBX: 00007fbd777e5fa0 RCX: 00007fbd7758f7c9 [ 177.913838][ T8080] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000002 [ 177.913853][ T8080] RBP: 00007fbd77613f91 R08: 0000000000000000 R09: 0000000000000000 [ 177.913869][ T8080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.913884][ T8080] R13: 00007fbd777e6038 R14: 00007fbd777e5fa0 R15: 00007ffc2d5e5498 [ 177.913926][ T8080] syzkaller syzkaller login: [ 178.492421][ T8091] mkiss: ax0: crc mode is auto. [ 178.991753][ T8083] ERROR: Out of memory at tomoyo_memory_ok. [ 180.153964][ T8127] netlink: 86 bytes leftover after parsing attributes in process `syz.1.847'. syzkaller syzkaller login: [ 180.392700][ T8138] netlink: 326 bytes leftover after parsing attributes in process `syz.1.851'. [ 180.934317][ T8157] FAULT_INJECTION: forcing a failure. [ 180.934317][ T8157] name failslab, interval 1, probability 0, space 0, times 0 [ 180.969823][ T8157] CPU: 0 UID: 0 PID: 8157 Comm: syz.1.858 Not tainted syzkaller #0 PREEMPT(full) [ 180.969867][ T8157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 180.969883][ T8157] Call Trace: [ 180.969891][ T8157] [ 180.969902][ T8157] dump_stack_lvl+0x16c/0x1f0 [ 180.969940][ T8157] should_fail_ex+0x512/0x640 [ 180.969978][ T8157] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 180.970011][ T8157] should_failslab+0xc2/0x120 [ 180.970046][ T8157] kmem_cache_alloc_node_noprof+0x78/0x770 [ 180.970074][ T8157] ? __alloc_skb+0x2b2/0x380 [ 180.970120][ T8157] ? __alloc_skb+0x2b2/0x380 [ 180.970156][ T8157] __alloc_skb+0x2b2/0x380 [ 180.970194][ T8157] ? __pfx___alloc_skb+0x10/0x10 [ 180.970234][ T8157] ? find_held_lock+0x2b/0x80 [ 180.970263][ T8157] ? lockdep_init_map_type+0x5c/0x280 [ 180.970304][ T8157] tipc_buf_acquire+0x26/0xe0 [ 180.970332][ T8157] tipc_msg_build+0x112/0x1150 [ 180.970363][ T8157] ? __pfx_tipc_node_xmit+0x10/0x10 [ 180.970395][ T8157] ? __pfx_tipc_msg_build+0x10/0x10 [ 180.970429][ T8157] ? register_lock_class+0x41/0x4c0 [ 180.970464][ T8157] ? register_lock_class+0x41/0x4c0 [ 180.970507][ T8157] __tipc_sendstream+0x6f9/0x1170 [ 180.970547][ T8157] ? __pfx___tipc_sendstream+0x10/0x10 [ 180.970572][ T8157] ? do_raw_spin_lock+0x12c/0x2b0 [ 180.970619][ T8157] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 180.970658][ T8157] ? __pfx_woken_wake_function+0x10/0x10 [ 180.970688][ T8157] ? __local_bh_enable_ip+0xa4/0x120 [ 180.970726][ T8157] tipc_sendstream+0x4f/0x70 [ 180.970752][ T8157] sock_write_iter+0x566/0x610 [ 180.970785][ T8157] ? __pfx_sock_write_iter+0x10/0x10 [ 180.970830][ T8157] ? bpf_lsm_file_permission+0x9/0x10 [ 180.970866][ T8157] ? security_file_permission+0x71/0x210 [ 180.970898][ T8157] ? rw_verify_area+0xcf/0x6c0 [ 180.970926][ T8157] vfs_write+0x7d3/0x11d0 [ 180.970956][ T8157] ? __pfx_sock_write_iter+0x10/0x10 [ 180.970992][ T8157] ? __pfx_vfs_write+0x10/0x10 [ 180.971018][ T8157] ? find_held_lock+0x2b/0x80 [ 180.971068][ T8157] ksys_write+0x1f8/0x250 [ 180.971097][ T8157] ? __pfx_ksys_write+0x10/0x10 [ 180.971137][ T8157] do_syscall_64+0xcd/0xfa0 [ 180.971170][ T8157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.971198][ T8157] RIP: 0033:0x7fd6e478f7c9 [ 180.971228][ T8157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.971254][ T8157] RSP: 002b:00007fd6e56db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 180.971284][ T8157] RAX: ffffffffffffffda RBX: 00007fd6e49e6090 RCX: 00007fd6e478f7c9 [ 180.971302][ T8157] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 180.971318][ T8157] RBP: 00007fd6e4813f91 R08: 0000000000000000 R09: 0000000000000000 [ 180.971334][ T8157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.971351][ T8157] R13: 00007fd6e49e6128 R14: 00007fd6e49e6090 R15: 00007ffdb8ca1608 [ 180.971386][ T8157] [ 182.582983][ T8193] netlink: 21 bytes leftover after parsing attributes in process `syz.2.874'. [ 182.931267][ T5834] Bluetooth: hci1: unexpected event 0x03 length: 435 > 11 [ 183.026618][ T8210] netlink: 346 bytes leftover after parsing attributes in process `syz.1.881'. [ 183.672379][ T8228] netlink: 330 bytes leftover after parsing attributes in process `syz.2.888'. [ 183.792029][ T8231] ovs_: entered promiscuous mode [ 184.210002][ T8241] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 184.259377][ T8241] FAULT_INJECTION: forcing a failure. [ 184.259377][ T8241] name failslab, interval 1, probability 0, space 0, times 0 [ 184.272972][ T8241] CPU: 0 UID: 0 PID: 8241 Comm: syz.2.894 Not tainted syzkaller #0 PREEMPT(full) [ 184.273006][ T8241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 184.273022][ T8241] Call Trace: [ 184.273030][ T8241] [ 184.273041][ T8241] dump_stack_lvl+0x16c/0x1f0 [ 184.273080][ T8241] should_fail_ex+0x512/0x640 [ 184.273121][ T8241] ? __kmalloc_cache_noprof+0x5f/0x780 [ 184.273151][ T8241] should_failslab+0xc2/0x120 [ 184.273186][ T8241] __kmalloc_cache_noprof+0x72/0x780 [ 184.273214][ T8241] ? trace_pid_list_alloc+0x1b0/0x3f0 [ 184.273271][ T8241] ? trace_pid_list_alloc+0x1b0/0x3f0 [ 184.273307][ T8241] trace_pid_list_alloc+0x1b0/0x3f0 [ 184.273349][ T8241] trace_pid_write+0x10c/0x4b0 [ 184.273378][ T8241] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 184.273414][ T8241] ? __pfx_trace_pid_write+0x10/0x10 [ 184.273445][ T8241] ? __pfx___mutex_lock+0x10/0x10 [ 184.273475][ T8241] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 184.273532][ T8241] event_pid_write.isra.0+0x1e4/0x7f0 [ 184.273574][ T8241] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 184.273623][ T8241] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 184.273671][ T8241] vfs_write+0x2a0/0x11d0 [ 184.273711][ T8241] ? __pfx___mutex_lock+0x10/0x10 [ 184.273853][ T8241] ? __pfx_vfs_write+0x10/0x10 [ 184.273897][ T8241] ? __fget_files+0x20e/0x3c0 [ 184.273947][ T8241] ksys_write+0x12a/0x250 [ 184.273973][ T8241] ? __pfx_ksys_write+0x10/0x10 [ 184.274012][ T8241] do_syscall_64+0xcd/0xfa0 [ 184.274046][ T8241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.274074][ T8241] RIP: 0033:0x7f7dea78f7c9 [ 184.274096][ T8241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.274120][ T8241] RSP: 002b:00007f7deb704038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 184.274146][ T8241] RAX: ffffffffffffffda RBX: 00007f7dea9e5fa0 RCX: 00007f7dea78f7c9 [ 184.274163][ T8241] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 184.274179][ T8241] RBP: 00007f7dea813f91 R08: 0000000000000000 R09: 0000000000000000 [ 184.274195][ T8241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.274210][ T8241] R13: 00007f7dea9e6038 R14: 00007f7dea9e5fa0 R15: 00007fff19655ee8 [ 184.274254][ T8241] [ 185.211208][ T8262] netlink: 322 bytes leftover after parsing attributes in process `syz.0.901'. [ 187.477084][ T8303] netlink: 'syz.3.914': attribute type 19 has an invalid length. [ 187.491756][ T8303] netlink: 334 bytes leftover after parsing attributes in process `syz.3.914'. [ 187.606335][ T8307] netlink: 334 bytes leftover after parsing attributes in process `syz.3.916'. [ 188.518530][ T8329] netlink: 25 bytes leftover after parsing attributes in process `syz.1.925'. [ 188.530708][ T8320] process 'syz.3.920' launched './file0' with NULL argv: empty string added [ 188.548756][ T8320] ERROR: Out of memory at tomoyo_memory_ok. [ 189.328207][ T8337] netlink: 93 bytes leftover after parsing attributes in process `syz.2.927'. [ 189.337858][ T8345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.928'. [ 189.365243][ T8345] netlink: 25 bytes leftover after parsing attributes in process `syz.3.928'. [ 189.379821][ T8347] netlink: 342 bytes leftover after parsing attributes in process `syz.1.929'. [ 190.144590][ T8369] netlink: 334 bytes leftover after parsing attributes in process `syz.2.938'. [ 190.388803][ T8373] netlink: 146 bytes leftover after parsing attributes in process `syz.2.939'. [ 190.418246][ T8370] ERROR: Out of memory at tomoyo_memory_ok. [ 190.715981][ T8375] netlink: 'syz.1.940': attribute type 27 has an invalid length. [ 190.723885][ T8375] netlink: 334 bytes leftover after parsing attributes in process `syz.1.940'. [ 190.885376][ T8380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.941'. [ 190.919801][ T8380] netlink: 25 bytes leftover after parsing attributes in process `syz.2.941'. [ 191.369300][ T8395] FAULT_INJECTION: forcing a failure. [ 191.369300][ T8395] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 191.426957][ T8395] CPU: 0 UID: 0 PID: 8395 Comm: syz.0.946 Not tainted syzkaller #0 PREEMPT(full) [ 191.426992][ T8395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 191.427005][ T8395] Call Trace: [ 191.427013][ T8395] [ 191.427023][ T8395] dump_stack_lvl+0x16c/0x1f0 [ 191.427058][ T8395] should_fail_ex+0x512/0x640 [ 191.427099][ T8395] _copy_from_iter+0x29f/0x1720 [ 191.427142][ T8395] ? __build_skb_around+0x278/0x3b0 [ 191.427181][ T8395] ? __alloc_skb+0x200/0x380 [ 191.427219][ T8395] ? __pfx__copy_from_iter+0x10/0x10 [ 191.427257][ T8395] ? __pfx___alloc_skb+0x10/0x10 [ 191.427299][ T8395] ? find_held_lock+0x2b/0x80 [ 191.427327][ T8395] ? lockdep_init_map_type+0x5c/0x280 [ 191.427364][ T8395] ? skb_put+0x138/0x1b0 [ 191.427398][ T8395] tipc_msg_build+0x311/0x1150 [ 191.427429][ T8395] ? __pfx_tipc_node_xmit+0x10/0x10 [ 191.427462][ T8395] ? __pfx_tipc_msg_build+0x10/0x10 [ 191.427495][ T8395] ? register_lock_class+0x41/0x4c0 [ 191.427541][ T8395] ? register_lock_class+0x41/0x4c0 [ 191.427585][ T8395] __tipc_sendstream+0x6f9/0x1170 [ 191.427621][ T8395] ? __pfx___tipc_sendstream+0x10/0x10 [ 191.427644][ T8395] ? do_raw_spin_lock+0x12c/0x2b0 [ 191.427675][ T8395] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 191.427713][ T8395] ? __pfx_woken_wake_function+0x10/0x10 [ 191.427744][ T8395] ? __local_bh_enable_ip+0xa4/0x120 [ 191.427777][ T8395] tipc_sendstream+0x4f/0x70 [ 191.427803][ T8395] sock_write_iter+0x566/0x610 [ 191.427837][ T8395] ? __pfx_sock_write_iter+0x10/0x10 [ 191.427882][ T8395] ? bpf_lsm_file_permission+0x9/0x10 [ 191.427911][ T8395] ? security_file_permission+0x71/0x210 [ 191.427941][ T8395] ? rw_verify_area+0xcf/0x6c0 [ 191.427970][ T8395] vfs_write+0x7d3/0x11d0 [ 191.427999][ T8395] ? __pfx_sock_write_iter+0x10/0x10 [ 191.428032][ T8395] ? __pfx_vfs_write+0x10/0x10 [ 191.428056][ T8395] ? find_held_lock+0x2b/0x80 [ 191.428098][ T8395] ksys_write+0x1f8/0x250 [ 191.428125][ T8395] ? __pfx_ksys_write+0x10/0x10 [ 191.428163][ T8395] do_syscall_64+0xcd/0xfa0 [ 191.428198][ T8395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.428225][ T8395] RIP: 0033:0x7fbd7758f7c9 [ 191.428243][ T8395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.428267][ T8395] RSP: 002b:00007fbd783d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 191.428289][ T8395] RAX: ffffffffffffffda RBX: 00007fbd777e6090 RCX: 00007fbd7758f7c9 [ 191.428304][ T8395] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 191.428318][ T8395] RBP: 00007fbd77613f91 R08: 0000000000000000 R09: 0000000000000000 [ 191.428331][ T8395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.428345][ T8395] R13: 00007fbd777e6128 R14: 00007fbd777e6090 R15: 00007ffc2d5e5498 [ 191.428381][ T8395] [ 191.955500][ T8398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.557471][ T8406] netlink: 334 bytes leftover after parsing attributes in process `syz.3.951'. [ 192.573257][ T8413] FAULT_INJECTION: forcing a failure. [ 192.573257][ T8413] name failslab, interval 1, probability 0, space 0, times 0 [ 192.598338][ T8413] CPU: 1 UID: 0 PID: 8413 Comm: syz.0.952 Not tainted syzkaller #0 PREEMPT(full) [ 192.598374][ T8413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 192.598390][ T8413] Call Trace: [ 192.598399][ T8413] [ 192.598409][ T8413] dump_stack_lvl+0x16c/0x1f0 [ 192.598449][ T8413] should_fail_ex+0x512/0x640 [ 192.598487][ T8413] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 192.598523][ T8413] should_failslab+0xc2/0x120 [ 192.598555][ T8413] __kvmalloc_node_noprof+0x141/0x9c0 [ 192.598587][ T8413] ? lockdep_init_map_type+0x5c/0x280 [ 192.598623][ T8413] ? open_substream+0x311/0x990 [ 192.598679][ T8413] ? open_substream+0x311/0x990 [ 192.598711][ T8413] ? open_substream+0x19a/0x990 [ 192.598745][ T8413] open_substream+0x311/0x990 [ 192.598787][ T8413] ? lockdep_hardirqs_on+0x7c/0x110 [ 192.598823][ T8413] rawmidi_open_priv+0x543/0x6e0 [ 192.598868][ T8413] snd_rawmidi_open+0x4cb/0xbf0 [ 192.598918][ T8413] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 192.598959][ T8413] ? __pfx_default_wake_function+0x10/0x10 [ 192.599000][ T8413] ? kobject_get_unless_zero+0x156/0x1e0 [ 192.599040][ T8413] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 192.599078][ T8413] snd_open+0x22d/0x4c0 [ 192.599110][ T8413] ? __pfx_snd_open+0x10/0x10 [ 192.599147][ T8413] chrdev_open+0x234/0x6a0 [ 192.599176][ T8413] ? __pfx_apparmor_file_open+0x10/0x10 [ 192.599215][ T8413] ? __pfx_chrdev_open+0x10/0x10 [ 192.599248][ T8413] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 192.599283][ T8413] do_dentry_open+0x982/0x1530 [ 192.599315][ T8413] ? __pfx_chrdev_open+0x10/0x10 [ 192.599353][ T8413] vfs_open+0x82/0x3f0 [ 192.599393][ T8413] path_openat+0x1de4/0x2cb0 [ 192.599432][ T8413] ? __pfx_path_openat+0x10/0x10 [ 192.599460][ T8413] ? __lock_acquire+0xb8a/0x1c90 [ 192.599493][ T8413] do_filp_open+0x20b/0x470 [ 192.599522][ T8413] ? __pfx_do_filp_open+0x10/0x10 [ 192.599571][ T8413] ? alloc_fd+0x471/0x7d0 [ 192.599609][ T8413] do_sys_openat2+0x11b/0x1d0 [ 192.599655][ T8413] ? __pfx_do_sys_openat2+0x10/0x10 [ 192.599697][ T8413] ? find_held_lock+0x2b/0x80 [ 192.599736][ T8413] __x64_sys_openat+0x174/0x210 [ 192.599777][ T8413] ? __pfx___x64_sys_openat+0x10/0x10 [ 192.599832][ T8413] do_syscall_64+0xcd/0xfa0 [ 192.599866][ T8413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.599895][ T8413] RIP: 0033:0x7fbd7758f7c9 [ 192.599918][ T8413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.599944][ T8413] RSP: 002b:00007fbd783fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 192.599971][ T8413] RAX: ffffffffffffffda RBX: 00007fbd777e5fa0 RCX: 00007fbd7758f7c9 [ 192.599989][ T8413] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 192.600008][ T8413] RBP: 00007fbd77613f91 R08: 0000000000000000 R09: 0000000000000000 [ 192.600024][ T8413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.600040][ T8413] R13: 00007fbd777e6038 R14: 00007fbd777e5fa0 R15: 00007ffc2d5e5498 [ 192.600079][ T8413] [ 193.103584][ T8419] FAULT_INJECTION: forcing a failure. [ 193.103584][ T8419] name failslab, interval 1, probability 0, space 0, times 0 [ 193.183545][ T8419] CPU: 0 UID: 0 PID: 8419 Comm: syz.1.955 Not tainted syzkaller #0 PREEMPT(full) [ 193.183583][ T8419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 193.183600][ T8419] Call Trace: [ 193.183609][ T8419] [ 193.183621][ T8419] dump_stack_lvl+0x16c/0x1f0 [ 193.183660][ T8419] should_fail_ex+0x512/0x640 [ 193.183700][ T8419] ? __kmalloc_cache_noprof+0x5f/0x780 [ 193.183731][ T8419] should_failslab+0xc2/0x120 [ 193.183766][ T8419] __kmalloc_cache_noprof+0x72/0x780 [ 193.183794][ T8419] ? snd_seq_pool_new+0x44/0x230 [ 193.183841][ T8419] ? snd_seq_pool_new+0x44/0x230 [ 193.183875][ T8419] ? __pfx_snd_seq_open+0x10/0x10 [ 193.183902][ T8419] snd_seq_pool_new+0x44/0x230 [ 193.183940][ T8419] snd_seq_fifo_new+0x5a/0x260 [ 193.183979][ T8419] snd_seq_open+0x15c/0x590 [ 193.184011][ T8419] ? __pfx_snd_seq_open+0x10/0x10 [ 193.184038][ T8419] snd_open+0x22d/0x4c0 [ 193.184071][ T8419] ? __pfx_snd_open+0x10/0x10 [ 193.184102][ T8419] chrdev_open+0x234/0x6a0 [ 193.184134][ T8419] ? __pfx_chrdev_open+0x10/0x10 [ 193.184168][ T8419] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 193.184205][ T8419] do_dentry_open+0x982/0x1530 [ 193.184236][ T8419] ? __pfx_chrdev_open+0x10/0x10 [ 193.184276][ T8419] vfs_open+0x82/0x3f0 [ 193.184317][ T8419] path_openat+0x1de4/0x2cb0 [ 193.184357][ T8419] ? __pfx_path_openat+0x10/0x10 [ 193.184389][ T8419] ? __lock_acquire+0xb8a/0x1c90 [ 193.184429][ T8419] do_filp_open+0x20b/0x470 [ 193.184459][ T8419] ? __pfx_do_filp_open+0x10/0x10 [ 193.184523][ T8419] ? alloc_fd+0x471/0x7d0 [ 193.184562][ T8419] do_sys_openat2+0x11b/0x1d0 [ 193.184600][ T8419] ? __pfx_do_sys_openat2+0x10/0x10 [ 193.184654][ T8419] __x64_sys_openat+0x174/0x210 [ 193.184693][ T8419] ? __pfx___x64_sys_openat+0x10/0x10 [ 193.184746][ T8419] do_syscall_64+0xcd/0xfa0 [ 193.184781][ T8419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.184809][ T8419] RIP: 0033:0x7fd6e478f7c9 [ 193.184832][ T8419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.184858][ T8419] RSP: 002b:00007fd6e56fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 193.184883][ T8419] RAX: ffffffffffffffda RBX: 00007fd6e49e5fa0 RCX: 00007fd6e478f7c9 [ 193.184901][ T8419] RDX: 00000000001e3800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 193.184919][ T8419] RBP: 00007fd6e4813f91 R08: 0000000000000000 R09: 0000000000000000 [ 193.184936][ T8419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.184951][ T8419] R13: 00007fd6e49e6038 R14: 00007fd6e49e5fa0 R15: 00007ffdb8ca1608 [ 193.184990][ T8419] [ 193.633892][ T8431] netlink: 330 bytes leftover after parsing attributes in process `syz.3.959'. [ 194.480591][ T8456] netlink: 342 bytes leftover after parsing attributes in process `syz.2.965'. [ 195.510258][ T8487] netlink: 'syz.0.971': attribute type 4 has an invalid length. [ 195.691426][ T8472] ERROR: Out of memory at tomoyo_memory_ok. [ 196.119972][ T8501] device-mapper: ioctl: name not supplied when creating device [ 196.526600][ T8515] FAULT_INJECTION: forcing a failure. [ 196.526600][ T8515] name fail_futex, interval 1, probability 0, space 0, times 0 [ 196.583209][ T8515] CPU: 0 UID: 0 PID: 8515 Comm: syz.0.979 Not tainted syzkaller #0 PREEMPT(full) [ 196.583256][ T8515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 196.583281][ T8515] Call Trace: [ 196.583290][ T8515] [ 196.583301][ T8515] dump_stack_lvl+0x16c/0x1f0 [ 196.583341][ T8515] should_fail_ex+0x512/0x640 [ 196.583385][ T8515] get_futex_key+0x1d0/0x1560 [ 196.583421][ T8515] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 196.583455][ T8515] ? __pfx_get_futex_key+0x10/0x10 [ 196.583488][ T8515] ? __kernel_text_address+0xd/0x40 [ 196.583514][ T8515] ? unwind_get_return_address+0x59/0xa0 [ 196.583543][ T8515] ? arch_stack_walk+0xa6/0x100 [ 196.583576][ T8515] futex_wait_setup+0x9d/0x550 [ 196.583610][ T8515] __futex_wait+0x193/0x2f0 [ 196.583636][ T8515] ? __pfx___futex_wait+0x10/0x10 [ 196.583664][ T8515] ? __pfx_futex_wake_mark+0x10/0x10 [ 196.583706][ T8515] ? futex_hash+0x2c5/0x380 [ 196.583739][ T8515] ? futex_private_hash_put+0xd5/0x190 [ 196.583775][ T8515] futex_wait+0xe8/0x380 [ 196.583798][ T8515] ? __pfx_futex_wait+0x10/0x10 [ 196.583832][ T8515] ? __lock_acquire+0x622/0x1c90 [ 196.583871][ T8515] do_futex+0x229/0x350 [ 196.583903][ T8515] ? __pfx_do_futex+0x10/0x10 [ 196.583939][ T8515] ? find_held_lock+0x2b/0x80 [ 196.583971][ T8515] __x64_sys_futex+0x1e0/0x4c0 [ 196.584011][ T8515] ? __pfx___x64_sys_futex+0x10/0x10 [ 196.584046][ T8515] ? safesetid_task_fix_setuid+0x64/0x1e0 [ 196.584091][ T8515] do_syscall_64+0xcd/0xfa0 [ 196.584124][ T8515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.584150][ T8515] RIP: 0033:0x7fbd7758f7c9 [ 196.584171][ T8515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.584195][ T8515] RSP: 002b:00007fbd783fa0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 196.584219][ T8515] RAX: ffffffffffffffda RBX: 00007fbd777e5fa8 RCX: 00007fbd7758f7c9 [ 196.584244][ T8515] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbd777e5fa8 [ 196.584259][ T8515] RBP: 00007fbd777e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 196.584274][ T8515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.584290][ T8515] R13: 00007fbd777e6038 R14: 00007ffc2d5e53b0 R15: 00007ffc2d5e5498 [ 196.584324][ T8515] [ 197.010006][ T8523] netlink: 334 bytes leftover after parsing attributes in process `syz.3.981'. [ 197.236535][ T8528] FAULT_INJECTION: forcing a failure. [ 197.236535][ T8528] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 197.271816][ T8528] CPU: 0 UID: 0 PID: 8528 Comm: syz.1.985 Not tainted syzkaller #0 PREEMPT(full) [ 197.271852][ T8528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 197.271866][ T8528] Call Trace: [ 197.271873][ T8528] [ 197.271884][ T8528] dump_stack_lvl+0x16c/0x1f0 [ 197.271932][ T8528] should_fail_ex+0x512/0x640 [ 197.271975][ T8528] should_fail_alloc_page+0xe7/0x130 [ 197.272011][ T8528] prepare_alloc_pages+0x3c2/0x610 [ 197.272048][ T8528] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 197.272081][ T8528] ? stack_trace_save+0x8e/0xc0 [ 197.272111][ T8528] ? __pfx_stack_trace_save+0x10/0x10 [ 197.272141][ T8528] ? stack_depot_save_flags+0x29/0x9c0 [ 197.272176][ T8528] ? __lock_acquire+0x622/0x1c90 [ 197.272212][ T8528] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 197.272245][ T8528] ? css_rstat_updated+0x1c2/0x510 [ 197.272278][ T8528] ? __lock_acquire+0x622/0x1c90 [ 197.272313][ T8528] ? rcu_is_watching+0x12/0xc0 [ 197.272338][ T8528] ? mod_memcg_lruvec_state+0x389/0x5f0 [ 197.272362][ T8528] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 197.272408][ T8528] ? policy_nodemask+0xea/0x4e0 [ 197.272443][ T8528] alloc_pages_mpol+0x1fb/0x550 [ 197.272476][ T8528] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 197.272509][ T8528] ? __memcg_slab_post_alloc_hook+0x47c/0x940 [ 197.272544][ T8528] alloc_pages_noprof+0x131/0x390 [ 197.272578][ T8528] pgd_alloc+0x4b/0x600 [ 197.272609][ T8528] mm_init+0x726/0x1380 [ 197.272643][ T8528] mm_alloc+0x9f/0xc0 [ 197.272671][ T8528] alloc_bprm+0x2af/0x710 [ 197.272700][ T8528] do_execveat_common.isra.0+0x1ce/0x610 [ 197.272734][ T8528] __x64_sys_execve+0x8e/0xb0 [ 197.272763][ T8528] do_syscall_64+0xcd/0xfa0 [ 197.272796][ T8528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.272825][ T8528] RIP: 0033:0x7fd6e478f7c9 [ 197.272847][ T8528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.272872][ T8528] RSP: 002b:00007fd6e56fc038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 197.272898][ T8528] RAX: ffffffffffffffda RBX: 00007fd6e49e5fa0 RCX: 00007fd6e478f7c9 [ 197.272927][ T8528] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 197.272944][ T8528] RBP: 00007fd6e4813f91 R08: 0000000000000000 R09: 0000000000000000 [ 197.272961][ T8528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.272977][ T8528] R13: 00007fd6e49e6038 R14: 00007fd6e49e5fa0 R15: 00007ffdb8ca1608 [ 197.273013][ T8528] [ 197.951201][ T8547] netlink: 342 bytes leftover after parsing attributes in process `syz.3.991'. [ 198.803694][ T8570] FAULT_INJECTION: forcing a failure. [ 198.803694][ T8570] name failslab, interval 1, probability 0, space 0, times 0 [ 198.816525][ T8570] CPU: 1 UID: 0 PID: 8570 Comm: syz.1.998 Not tainted syzkaller #0 PREEMPT(full) [ 198.816564][ T8570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 198.816581][ T8570] Call Trace: [ 198.816592][ T8570] [ 198.816604][ T8570] dump_stack_lvl+0x16c/0x1f0 [ 198.816642][ T8570] should_fail_ex+0x512/0x640 [ 198.816683][ T8570] ? __kmalloc_cache_noprof+0x5f/0x780 [ 198.816715][ T8570] should_failslab+0xc2/0x120 [ 198.816759][ T8570] __kmalloc_cache_noprof+0x72/0x780 [ 198.816785][ T8570] ? fuse_dev_alloc_install+0x2b/0x40 [ 198.816825][ T8570] ? cuse_channel_open+0x1de/0x7f0 [ 198.816858][ T8570] ? cuse_channel_open+0x1de/0x7f0 [ 198.816885][ T8570] cuse_channel_open+0x1de/0x7f0 [ 198.816914][ T8570] ? __pfx_cuse_channel_open+0x10/0x10 [ 198.816943][ T8570] misc_open+0x26d/0x450 [ 198.816981][ T8570] ? __pfx_misc_open+0x10/0x10 [ 198.817018][ T8570] chrdev_open+0x234/0x6a0 [ 198.817049][ T8570] ? __pfx_apparmor_file_open+0x10/0x10 [ 198.817088][ T8570] ? __pfx_chrdev_open+0x10/0x10 [ 198.817122][ T8570] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 198.817158][ T8570] do_dentry_open+0x982/0x1530 [ 198.817186][ T8570] ? __pfx_chrdev_open+0x10/0x10 [ 198.817224][ T8570] vfs_open+0x82/0x3f0 [ 198.817261][ T8570] path_openat+0x1de4/0x2cb0 [ 198.817304][ T8570] ? __pfx_path_openat+0x10/0x10 [ 198.817335][ T8570] ? __lock_acquire+0xb8a/0x1c90 [ 198.817375][ T8570] do_filp_open+0x20b/0x470 [ 198.817406][ T8570] ? __pfx_do_filp_open+0x10/0x10 [ 198.817462][ T8570] ? alloc_fd+0x471/0x7d0 [ 198.817500][ T8570] do_sys_openat2+0x11b/0x1d0 [ 198.817537][ T8570] ? __pfx_do_sys_openat2+0x10/0x10 [ 198.817589][ T8570] __x64_sys_openat+0x174/0x210 [ 198.817628][ T8570] ? __pfx___x64_sys_openat+0x10/0x10 [ 198.817682][ T8570] do_syscall_64+0xcd/0xfa0 [ 198.817717][ T8570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.817744][ T8570] RIP: 0033:0x7fd6e478f7c9 [ 198.817775][ T8570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.817801][ T8570] RSP: 002b:00007fd6e56fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 198.817828][ T8570] RAX: ffffffffffffffda RBX: 00007fd6e49e5fa0 RCX: 00007fd6e478f7c9 [ 198.817847][ T8570] RDX: 0000000000000000 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 198.817864][ T8570] RBP: 00007fd6e4813f91 R08: 0000000000000000 R09: 0000000000000000 [ 198.817882][ T8570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.817898][ T8570] R13: 00007fd6e49e6038 R14: 00007fd6e49e5fa0 R15: 00007ffdb8ca1608 [ 198.817938][ T8570] [ 199.481141][ T8588] FAULT_INJECTION: forcing a failure. [ 199.481141][ T8588] name failslab, interval 1, probability 0, space 0, times 0 [ 199.496300][ T8588] CPU: 0 UID: 0 PID: 8588 Comm: syz.3.1008 Not tainted syzkaller #0 PREEMPT(full) [ 199.496337][ T8588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 199.496352][ T8588] Call Trace: [ 199.496361][ T8588] [ 199.496371][ T8588] dump_stack_lvl+0x16c/0x1f0 [ 199.496409][ T8588] should_fail_ex+0x512/0x640 [ 199.496447][ T8588] ? __kmalloc_cache_noprof+0x5f/0x780 [ 199.496476][ T8588] should_failslab+0xc2/0x120 [ 199.496510][ T8588] __kmalloc_cache_noprof+0x72/0x780 [ 199.496538][ T8588] ? sw_sync_ioctl+0x548/0xfd0 [ 199.496575][ T8588] ? sw_sync_ioctl+0x548/0xfd0 [ 199.496604][ T8588] sw_sync_ioctl+0x548/0xfd0 [ 199.496644][ T8588] ? find_held_lock+0x2b/0x80 [ 199.496670][ T8588] ? __pfx_sw_sync_ioctl+0x10/0x10 [ 199.496720][ T8588] ? __pfx_sw_sync_ioctl+0x10/0x10 [ 199.496756][ T8588] __x64_sys_ioctl+0x18e/0x210 [ 199.496794][ T8588] do_syscall_64+0xcd/0xfa0 [ 199.496831][ T8588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.496866][ T8588] RIP: 0033:0x7fb15d78f7c9 [ 199.496887][ T8588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.496911][ T8588] RSP: 002b:00007fb15e684038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 199.496934][ T8588] RAX: ffffffffffffffda RBX: 00007fb15d9e5fa0 RCX: 00007fb15d78f7c9 [ 199.496950][ T8588] RDX: 0000000000000000 RSI: 00000000c0285700 RDI: 0000000000000005 [ 199.496963][ T8588] RBP: 00007fb15d813f91 R08: 0000000000000000 R09: 0000000000000000 [ 199.496978][ T8588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.496992][ T8588] R13: 00007fb15d9e6038 R14: 00007fb15d9e5fa0 R15: 00007fff940882b8 [ 199.497029][ T8588] [ 199.812955][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.819595][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.259060][ T8585] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 200.266232][ T8585] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 200.280178][ T8585] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 200.298176][ T8585] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 200.305956][ T8585] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 200.312344][ T8585] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 200.319623][ T8585] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 200.327894][ T8585] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 200.334965][ T8585] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 200.347935][ T8585] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 200.355938][ T8585] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 200.363597][ T8585] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 200.371245][ T8585] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 200.681851][ T8628] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1022'. [ 200.809076][ T8624] FAULT_INJECTION: forcing a failure. [ 200.809076][ T8624] name failslab, interval 1, probability 0, space 0, times 0 [ 200.833083][ T8624] CPU: 0 UID: 0 PID: 8624 Comm: syz.2.1019 Not tainted syzkaller #0 PREEMPT(full) [ 200.833122][ T8624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 200.833137][ T8624] Call Trace: [ 200.833145][ T8624] [ 200.833156][ T8624] dump_stack_lvl+0x16c/0x1f0 [ 200.833196][ T8624] should_fail_ex+0x512/0x640 [ 200.833238][ T8624] ? fs_reclaim_acquire+0xae/0x150 [ 200.833275][ T8624] should_failslab+0xc2/0x120 [ 200.833310][ T8624] kmem_cache_alloc_noprof+0x75/0x6e0 [ 200.833338][ T8624] ? __pfx_map_id_range_down+0x10/0x10 [ 200.833364][ T8624] ? security_inode_alloc+0x3b/0x2b0 [ 200.833409][ T8624] ? security_inode_alloc+0x3b/0x2b0 [ 200.833444][ T8624] security_inode_alloc+0x3b/0x2b0 [ 200.833485][ T8624] inode_init_always_gfp+0xce4/0x1030 [ 200.833519][ T8624] alloc_inode+0x86/0x240 [ 200.833554][ T8624] iget_locked+0x2fa/0x860 [ 200.833587][ T8624] ? lockdep_hardirqs_on+0x7c/0x110 [ 200.833618][ T8624] ? __pfx_iget_locked+0x10/0x10 [ 200.833652][ T8624] ? find_held_lock+0x2b/0x80 [ 200.833681][ T8624] ? kernfs_find_and_get_node_by_id+0x1c3/0x3f0 [ 200.833727][ T8624] kernfs_get_inode+0x48/0x460 [ 200.833758][ T8624] kernfs_fh_to_dentry+0xf3/0x250 [ 200.833799][ T8624] exportfs_decode_fh_raw+0x167/0x7d0 [ 200.833834][ T8624] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 200.833865][ T8624] ? __pfx_kernfs_fh_to_dentry+0x10/0x10 [ 200.833896][ T8624] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 200.833974][ T8624] do_handle_open+0x702/0xc90 [ 200.834004][ T8624] ? __pfx_do_handle_open+0x10/0x10 [ 200.834029][ T8624] ? __x64_sys_futex+0x1e0/0x4c0 [ 200.834072][ T8624] ? xfd_validate_state+0x61/0x180 [ 200.834120][ T8624] ? do_syscall_64+0xcd/0xfa0 [ 200.834150][ T8624] do_syscall_64+0xcd/0xfa0 [ 200.834183][ T8624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.834211][ T8624] RIP: 0033:0x7f7dea78f7c9 [ 200.834233][ T8624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.834258][ T8624] RSP: 002b:00007f7deb704038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 200.834284][ T8624] RAX: ffffffffffffffda RBX: 00007f7dea9e5fa0 RCX: 00007f7dea78f7c9 [ 200.834302][ T8624] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000005 [ 200.834320][ T8624] RBP: 00007f7dea813f91 R08: 0000000000000000 R09: 0000000000000000 [ 200.834336][ T8624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.834353][ T8624] R13: 00007f7dea9e6038 R14: 00007f7dea9e5fa0 R15: 00007fff19655ee8 [ 200.834390][ T8624] [ 201.486973][ T8290] Bluetooth: hci0: command 0x0c1a tx timeout [ 202.367074][ T8290] Bluetooth: hci3: command 0x0c1a tx timeout [ 202.373345][ T8290] Bluetooth: hci2: command 0x0c1a tx timeout [ 202.379998][ T8283] Bluetooth: hci1: command 0x0c1a tx timeout [ 202.430319][ T8681] FAULT_INJECTION: forcing a failure. [ 202.430319][ T8681] name fail_futex, interval 1, probability 0, space 0, times 0 [ 202.486736][ T8681] CPU: 1 UID: 0 PID: 8681 Comm: syz.1.1043 Not tainted syzkaller #0 PREEMPT(full) [ 202.486781][ T8681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 202.486798][ T8681] Call Trace: [ 202.486807][ T8681] [ 202.486822][ T8681] dump_stack_lvl+0x16c/0x1f0 [ 202.486856][ T8681] should_fail_ex+0x512/0x640 [ 202.486900][ T8681] get_futex_key+0x1d0/0x1560 [ 202.486936][ T8681] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 202.486970][ T8681] ? __pfx_get_futex_key+0x10/0x10 [ 202.487003][ T8681] ? __kernel_text_address+0xd/0x40 [ 202.487024][ T8681] ? unwind_get_return_address+0x59/0xa0 [ 202.487052][ T8681] ? arch_stack_walk+0xa6/0x100 [ 202.487082][ T8681] futex_wait_setup+0x9d/0x550 [ 202.487116][ T8681] __futex_wait+0x193/0x2f0 [ 202.487141][ T8681] ? __pfx___futex_wait+0x10/0x10 [ 202.487171][ T8681] ? __pfx_futex_wake_mark+0x10/0x10 [ 202.487214][ T8681] ? futex_hash+0x2c5/0x380 [ 202.487251][ T8681] ? futex_private_hash_put+0xd5/0x190 [ 202.487287][ T8681] futex_wait+0xe8/0x380 [ 202.487312][ T8681] ? __pfx_futex_wait+0x10/0x10 [ 202.487347][ T8681] ? __lock_acquire+0x622/0x1c90 [ 202.487399][ T8681] do_futex+0x229/0x350 [ 202.487437][ T8681] ? __pfx_do_futex+0x10/0x10 [ 202.487476][ T8681] ? find_held_lock+0x2b/0x80 [ 202.487508][ T8681] __x64_sys_futex+0x1e0/0x4c0 [ 202.487550][ T8681] ? __pfx___x64_sys_futex+0x10/0x10 [ 202.487586][ T8681] ? safesetid_task_fix_setuid+0x64/0x1e0 [ 202.487631][ T8681] do_syscall_64+0xcd/0xfa0 [ 202.487665][ T8681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.487690][ T8681] RIP: 0033:0x7fd6e478f7c9 [ 202.487711][ T8681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.487736][ T8681] RSP: 002b:00007fd6e56fc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 202.487763][ T8681] RAX: ffffffffffffffda RBX: 00007fd6e49e5fa8 RCX: 00007fd6e478f7c9 [ 202.487781][ T8681] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd6e49e5fa8 [ 202.487798][ T8681] RBP: 00007fd6e49e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 202.487815][ T8681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.487831][ T8681] R13: 00007fd6e49e6038 R14: 00007ffdb8ca1520 R15: 00007ffdb8ca1608 [ 202.487868][ T8681] [ 202.732013][ T8685] syz.3.1045: vmalloc error: size 16384, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 202.748790][ T8685] CPU: 0 UID: 0 PID: 8685 Comm: syz.3.1045 Not tainted syzkaller #0 PREEMPT(full) [ 202.748830][ T8685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 202.748846][ T8685] Call Trace: [ 202.748858][ T8685] [ 202.748869][ T8685] dump_stack_lvl+0x16c/0x1f0 [ 202.748909][ T8685] warn_alloc+0x248/0x3a0 [ 202.748937][ T8685] ? __pfx_warn_alloc+0x10/0x10 [ 202.748968][ T8685] ? alloc_pages_mpol+0x25a/0x550 [ 202.749006][ T8685] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 202.749040][ T8685] ? __pfx_alloc_pages_bulk_mempolicy_noprof+0x10/0x10 [ 202.749084][ T8685] ? __kmalloc_node_noprof+0x364/0x8a0 [ 202.749115][ T8685] ? __get_vm_area_node+0x208/0x330 [ 202.749159][ T8685] __vmalloc_node_range_noprof+0x119b/0x1480 [ 202.749210][ T8685] ? kernel_clone+0xfc/0x930 [ 202.749264][ T8685] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 202.749311][ T8685] ? rcu_is_watching+0x12/0xc0 [ 202.749344][ T8685] ? kernel_clone+0xfc/0x930 [ 202.749377][ T8685] __vmalloc_node_noprof+0xad/0xf0 [ 202.749415][ T8685] ? kernel_clone+0xfc/0x930 [ 202.749446][ T8685] copy_process+0x2c77/0x76a0 [ 202.749478][ T8685] ? __pfx___futex_wait+0x10/0x10 [ 202.749515][ T8685] ? __pfx_copy_process+0x10/0x10 [ 202.749553][ T8685] ? futex_private_hash_put+0xd5/0x190 [ 202.749594][ T8685] kernel_clone+0xfc/0x930 [ 202.749628][ T8685] ? __pfx_kernel_clone+0x10/0x10 [ 202.749681][ T8685] __do_sys_clone+0xce/0x120 [ 202.749713][ T8685] ? __pfx___do_sys_clone+0x10/0x10 [ 202.749762][ T8685] ? xfd_validate_state+0x61/0x180 [ 202.749798][ T8685] ? __pfx_do_writev+0x10/0x10 [ 202.749837][ T8685] do_syscall_64+0xcd/0xfa0 [ 202.749871][ T8685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.749900][ T8685] RIP: 0033:0x7fb15d78f7c9 [ 202.749922][ T8685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.749948][ T8685] RSP: 002b:00007fb15e683fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 202.749974][ T8685] RAX: ffffffffffffffda RBX: 00007fb15d9e5fa0 RCX: 00007fb15d78f7c9 [ 202.749993][ T8685] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020a08200 [ 202.750010][ T8685] RBP: 00007fb15d813f91 R08: 0000000000000000 R09: 0000000000000000 [ 202.750027][ T8685] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 202.750043][ T8685] R13: 00007fb15d9e6038 R14: 00007fb15d9e5fa0 R15: 00007fff940882b8 [ 202.750081][ T8685] [ 202.750091][ T8685] Mem-Info: [ 203.013813][ T8685] active_anon:16440 inactive_anon:1690 isolated_anon:0 [ 203.013813][ T8685] active_file:16838 inactive_file:39298 isolated_file:0 [ 203.013813][ T8685] unevictable:768 dirty:144 writeback:0 [ 203.013813][ T8685] slab_reclaimable:11339 slab_unreclaimable:90414 [ 203.013813][ T8685] mapped:33865 shmem:10783 pagetables:1189 [ 203.013813][ T8685] sec_pagetables:0 bounce:0 [ 203.013813][ T8685] kernel_misc_reclaimable:0 [ 203.013813][ T8685] free:1315054 free_pcp:16814 free_cma:0 [ 203.076136][ T8685] Node 0 active_anon:65760kB inactive_anon:8560kB active_file:67352kB inactive_file:157264kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:137260kB dirty:576kB writeback:0kB shmem:44696kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11184kB pagetables:4608kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 203.127208][ T8685] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 203.193327][ T8685] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 203.229078][ T8685] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 203.239513][ T8685] Node 0 DMA32 free:1340980kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:65760kB inactive_anon:12544kB active_file:67352kB inactive_file:157264kB unevictable:1536kB writepending:576kB zspages:0kB present:3129332kB managed:2545056kB mlocked:0kB bounce:0kB free_pcp:55476kB local_pcp:26544kB free_cma:0kB [ 203.280585][ T8685] lowmem_reserve[]: 0 0 1 1 1 [ 203.294047][ T8685] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 203.377070][ T8685] lowmem_reserve[]: 0 0 0 0 0 [ 203.393409][ T8685] Node 1 Normal free:3891932kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18016kB local_pcp:7232kB free_cma:0kB [ 203.495402][ T8685] lowmem_reserve[]: 0 0 0 0 0 [ 203.502716][ T8685] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 203.517804][ T8685] Node 0 DMA32: 447*4kB (UM) 110*8kB (UME) 779*16kB (UME) 628*32kB (UME) 412*64kB (UM) 278*128kB (UM) 128*256kB (UM) 63*512kB (UM) 47*1024kB (UME) 12*2048kB (UM) 271*4096kB (UM) = 1344924kB [ 203.538523][ T8685] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 203.554347][ T8685] Node 1 Normal: 149*4kB (UME) 57*8kB (UME) 38*16kB (UME) 166*32kB (UME) 31*64kB (UME) 12*128kB (UME) 8*256kB (UME) 5*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3891964kB [ 203.573289][ T8685] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 203.583551][ T8290] Bluetooth: hci0: command 0x0c1a tx timeout [ 203.628446][ T8685] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 203.640340][ T8685] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 203.654919][ T8685] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 203.664915][ T8685] 69013 total pagecache pages [ 203.670303][ T8685] 29 pages in swap cache [ 203.675151][ T8685] Free swap = 124888kB [ 203.680114][ T8685] Total swap = 124996kB [ 203.684644][ T8685] 2097051 pages RAM [ 203.688547][ T8685] 0 pages HighMem/MovableOnly [ 203.693422][ T8685] 428697 pages reserved [ 203.698115][ T8685] 0 pages cma reserved [ 204.353751][ T8712] FAULT_INJECTION: forcing a failure. [ 204.353751][ T8712] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 204.378328][ T8712] CPU: 0 UID: 0 PID: 8712 Comm: syz.0.1056 Not tainted syzkaller #0 PREEMPT(full) [ 204.378368][ T8712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 204.378385][ T8712] Call Trace: [ 204.378394][ T8712] [ 204.378404][ T8712] dump_stack_lvl+0x16c/0x1f0 [ 204.378443][ T8712] should_fail_ex+0x512/0x640 [ 204.378487][ T8712] should_fail_alloc_page+0xe7/0x130 [ 204.378525][ T8712] prepare_alloc_pages+0x3c2/0x610 [ 204.378560][ T8712] ? rcu_is_watching+0x12/0xc0 [ 204.378592][ T8712] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 204.378624][ T8712] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 204.378657][ T8712] ? is_bpf_text_address+0x94/0x1a0 [ 204.378694][ T8712] ? kernel_text_address+0x8d/0x100 [ 204.378719][ T8712] ? __kernel_text_address+0xd/0x40 [ 204.378741][ T8712] ? unwind_get_return_address+0x59/0xa0 [ 204.378770][ T8712] ? arch_stack_walk+0xa6/0x100 [ 204.378800][ T8712] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 204.378841][ T8712] ? stack_depot_save_flags+0x29/0x9c0 [ 204.378879][ T8712] ? __pfx_stack_trace_save+0x10/0x10 [ 204.378912][ T8712] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 204.378956][ T8712] ? policy_nodemask+0xea/0x4e0 [ 204.378993][ T8712] alloc_pages_mpol+0x1fb/0x550 [ 204.379028][ T8712] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 204.379073][ T8712] alloc_pages_noprof+0x131/0x390 [ 204.379109][ T8712] kimage_alloc_pages+0x74/0x350 [ 204.379140][ T8712] kimage_alloc_control_pages+0x153/0xa00 [ 204.379186][ T8712] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 204.379227][ T8712] do_kexec_load+0x478/0x8a0 [ 204.379258][ T8712] ? __pfx_do_kexec_load+0x10/0x10 [ 204.379287][ T8712] ? _copy_from_user+0x59/0xd0 [ 204.379328][ T8712] __x64_sys_kexec_load+0x1bf/0x230 [ 204.379355][ T8712] do_syscall_64+0xcd/0xfa0 [ 204.379385][ T8712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.379409][ T8712] RIP: 0033:0x7fbd7758f7c9 [ 204.379428][ T8712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.379452][ T8712] RSP: 002b:00007fbd783fa038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 204.379476][ T8712] RAX: ffffffffffffffda RBX: 00007fbd777e5fa0 RCX: 00007fbd7758f7c9 [ 204.379491][ T8712] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000007 [ 204.379505][ T8712] RBP: 00007fbd77613f91 R08: 0000000000000000 R09: 0000000000000000 [ 204.379519][ T8712] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 204.379534][ T8712] R13: 00007fbd777e6038 R14: 00007fbd777e5fa0 R15: 00007ffc2d5e5498 [ 204.379569][ T8712] [ 204.379601][ T8712] kexec: Could not allocate control_code_buffer [ 204.646069][ T8290] Bluetooth: hci2: command 0x0c1a tx timeout [ 204.646137][ T8290] Bluetooth: hci1: command 0x0c1a tx timeout [ 204.646179][ T8290] Bluetooth: hci3: command 0x0c1a tx timeout [ 204.949129][ T8736] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 205.036143][ T8729] nvme_fabrics: missing parameter 'transport=%s' [ 205.045573][ T8729] nvme_fabrics: missing parameter 'nqn=%s' [ 205.109377][ T8738] nvme_fabrics: missing parameter 'transport=%s' [ 205.129343][ T8738] nvme_fabrics: missing parameter 'nqn=%s' [ 205.282769][ T8751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1070'. [ 205.307571][ T8751] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1070'. [ 205.520549][ T8761] mkiss: ax0: crc mode is auto. [ 205.648819][ T8680] Bluetooth: hci0: command 0x0c1a tx timeout [ 206.297715][ T8778] kvm: kvm [8777]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000006) [ 206.687294][ T8680] Bluetooth: hci3: command 0x0c1a tx timeout [ 206.693530][ T8290] Bluetooth: hci1: command 0x0c1a tx timeout [ 206.699962][ T8290] Bluetooth: hci2: command 0x0c1a tx timeout [ 206.805050][ T8797] i2c i2c-0: new_device: Extra parameters [ 207.404982][ T8808] kvm: kvm [8807]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0x1 [ 207.727035][ T8290] Bluetooth: hci0: command 0x0c1a tx timeout [ 208.198602][ T8833] FAULT_INJECTION: forcing a failure. [ 208.198602][ T8833] name failslab, interval 1, probability 0, space 0, times 0 [ 208.275544][ T8833] CPU: 1 UID: 0 PID: 8833 Comm: syz.2.1099 Not tainted syzkaller #0 PREEMPT(full) [ 208.275583][ T8833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 208.275599][ T8833] Call Trace: [ 208.275608][ T8833] [ 208.275619][ T8833] dump_stack_lvl+0x16c/0x1f0 [ 208.275658][ T8833] should_fail_ex+0x512/0x640 [ 208.275698][ T8833] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 208.275730][ T8833] should_failslab+0xc2/0x120 [ 208.275765][ T8833] kmem_cache_alloc_node_noprof+0x78/0x770 [ 208.275800][ T8833] ? reciprocal_value+0x3a/0x90 [ 208.275831][ T8833] ? do_kmem_cache_create+0x25b/0x740 [ 208.275871][ T8833] ? do_kmem_cache_create+0x25b/0x740 [ 208.275901][ T8833] do_kmem_cache_create+0x25b/0x740 [ 208.275938][ T8833] __kmem_cache_create_args+0x202/0x3c0 [ 208.275984][ T8833] mon_text_open+0x333/0x510 [ 208.276015][ T8833] ? __pfx_mon_text_open+0x10/0x10 [ 208.276047][ T8833] ? __pfx_mon_text_ctor+0x10/0x10 [ 208.276076][ T8833] ? __pfx_apparmor_file_open+0x10/0x10 [ 208.276111][ T8833] ? lockdown_is_locked_down+0x3f/0x130 [ 208.276143][ T8833] ? bpf_lsm_locked_down+0x9/0x10 [ 208.276179][ T8833] ? __pfx_mon_text_open+0x10/0x10 [ 208.276204][ T8833] full_proxy_open_regular+0x1b9/0x360 [ 208.276247][ T8833] do_dentry_open+0x982/0x1530 [ 208.276279][ T8833] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 208.276326][ T8833] vfs_open+0x82/0x3f0 [ 208.276368][ T8833] path_openat+0x1de4/0x2cb0 [ 208.276410][ T8833] ? __pfx_path_openat+0x10/0x10 [ 208.276442][ T8833] ? __lock_acquire+0xb8a/0x1c90 [ 208.276477][ T8833] do_filp_open+0x20b/0x470 [ 208.276506][ T8833] ? __pfx_do_filp_open+0x10/0x10 [ 208.276562][ T8833] ? alloc_fd+0x471/0x7d0 [ 208.276598][ T8833] do_sys_openat2+0x11b/0x1d0 [ 208.276635][ T8833] ? __pfx_do_sys_openat2+0x10/0x10 [ 208.276686][ T8833] __x64_sys_openat+0x174/0x210 [ 208.276724][ T8833] ? __pfx___x64_sys_openat+0x10/0x10 [ 208.276786][ T8833] do_syscall_64+0xcd/0xfa0 [ 208.276825][ T8833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.276848][ T8833] RIP: 0033:0x7f7dea78f7c9 [ 208.276869][ T8833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.276894][ T8833] RSP: 002b:00007f7deb704038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 208.276918][ T8833] RAX: ffffffffffffffda RBX: 00007f7dea9e5fa0 RCX: 00007f7dea78f7c9 [ 208.276934][ T8833] RDX: 0000000000000800 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 208.276949][ T8833] RBP: 00007f7dea813f91 R08: 0000000000000000 R09: 0000000000000000 [ 208.276965][ T8833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.276981][ T8833] R13: 00007f7dea9e6038 R14: 00007f7dea9e5fa0 R15: 00007fff19655ee8 [ 208.277019][ T8833] [ 208.630806][ T8833] __kmem_cache_create_args(mon_text_ffff88805d306800) failed with error -22 [ 208.640917][ T8833] CPU: 1 UID: 0 PID: 8833 Comm: syz.2.1099 Not tainted syzkaller #0 PREEMPT(full) [ 208.640953][ T8833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 208.640969][ T8833] Call Trace: [ 208.640978][ T8833] [ 208.640998][ T8833] dump_stack_lvl+0x16c/0x1f0 [ 208.641038][ T8833] __kmem_cache_create_args+0x128/0x3c0 [ 208.641089][ T8833] mon_text_open+0x333/0x510 [ 208.641122][ T8833] ? __pfx_mon_text_open+0x10/0x10 [ 208.641158][ T8833] ? __pfx_mon_text_ctor+0x10/0x10 [ 208.641190][ T8833] ? __pfx_apparmor_file_open+0x10/0x10 [ 208.641226][ T8833] ? lockdown_is_locked_down+0x3f/0x130 [ 208.641262][ T8833] ? bpf_lsm_locked_down+0x9/0x10 [ 208.641301][ T8833] ? __pfx_mon_text_open+0x10/0x10 [ 208.641328][ T8833] full_proxy_open_regular+0x1b9/0x360 [ 208.641371][ T8833] do_dentry_open+0x982/0x1530 [ 208.641403][ T8833] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 208.641446][ T8833] vfs_open+0x82/0x3f0 [ 208.641483][ T8833] path_openat+0x1de4/0x2cb0 [ 208.641524][ T8833] ? __pfx_path_openat+0x10/0x10 [ 208.641555][ T8833] ? __lock_acquire+0xb8a/0x1c90 [ 208.641605][ T8833] do_filp_open+0x20b/0x470 [ 208.641636][ T8833] ? __pfx_do_filp_open+0x10/0x10 [ 208.641695][ T8833] ? alloc_fd+0x471/0x7d0 [ 208.641733][ T8833] do_sys_openat2+0x11b/0x1d0 [ 208.641772][ T8833] ? __pfx_do_sys_openat2+0x10/0x10 [ 208.641822][ T8833] __x64_sys_openat+0x174/0x210 [ 208.641857][ T8833] ? __pfx___x64_sys_openat+0x10/0x10 [ 208.641910][ T8833] do_syscall_64+0xcd/0xfa0 [ 208.641947][ T8833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.641974][ T8833] RIP: 0033:0x7f7dea78f7c9 [ 208.642002][ T8833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.642028][ T8833] RSP: 002b:00007f7deb704038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 208.642059][ T8833] RAX: ffffffffffffffda RBX: 00007f7dea9e5fa0 RCX: 00007f7dea78f7c9 [ 208.642077][ T8833] RDX: 0000000000000800 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 208.642094][ T8833] RBP: 00007f7dea813f91 R08: 0000000000000000 R09: 0000000000000000 [ 208.642110][ T8833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.642126][ T8833] R13: 00007f7dea9e6038 R14: 00007f7dea9e5fa0 R15: 00007fff19655ee8 [ 208.642165][ T8833] [ 208.931149][ T8831] ERROR: Out of memory at tomoyo_memory_ok. [ 209.082786][ T8842] netlink: 'syz.0.1103': attribute type 64 has an invalid length. [ 209.090994][ T8842] netlink: 74 bytes leftover after parsing attributes in process `syz.0.1103'. [ 209.320442][ T8848] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1107'. [ 209.622669][ T8851] virtio-pci 0000:00:04.0: [Firmware Bug]: Overriding NUMA node to 1. Contact your vendor for updates. [ 209.678653][ T5185] ERROR: Out of memory at tomoyo_memory_ok. [ 209.996546][ T8867] zswap: compressor not available [ 210.151262][ T8878] FAULT_INJECTION: forcing a failure. [ 210.151262][ T8878] name failslab, interval 1, probability 0, space 0, times 0 [ 210.167288][ T8878] CPU: 1 UID: 0 PID: 8878 Comm: syz.2.1119 Tainted: G I syzkaller #0 PREEMPT(full) [ 210.167334][ T8878] Tainted: [I]=FIRMWARE_WORKAROUND [ 210.167344][ T8878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 210.167361][ T8878] Call Trace: [ 210.167369][ T8878] [ 210.167380][ T8878] dump_stack_lvl+0x16c/0x1f0 [ 210.167419][ T8878] should_fail_ex+0x512/0x640 [ 210.167457][ T8878] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 210.167497][ T8878] should_failslab+0xc2/0x120 [ 210.167532][ T8878] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 210.167575][ T8878] ? drm_stub_open+0x20f/0x380 [ 210.167610][ T8878] ? kasprintf+0xc7/0x100 [ 210.167634][ T8878] ? do_dentry_open+0x982/0x1530 [ 210.167670][ T8878] ? kvasprintf+0xbc/0x160 [ 210.167692][ T8878] kvasprintf+0xbc/0x160 [ 210.167718][ T8878] ? __pfx_kvasprintf+0x10/0x10 [ 210.167757][ T8878] kasprintf+0xc7/0x100 [ 210.167782][ T8878] ? __pfx_kasprintf+0x10/0x10 [ 210.167811][ T8878] ? aa_get_newest_label+0xd2/0x250 [ 210.167849][ T8878] ? lockdep_init_map_type+0x5c/0x280 [ 210.167893][ T8878] drm_debugfs_clients_add+0x48/0x200 [ 210.167929][ T8878] drm_file_alloc+0x5c6/0xb40 [ 210.167970][ T8878] drm_open_helper+0x204/0x550 [ 210.168010][ T8878] drm_open+0x1a0/0x3e0 [ 210.168045][ T8878] ? __pfx_drm_open+0x10/0x10 [ 210.168079][ T8878] drm_stub_open+0x20f/0x380 [ 210.168115][ T8878] ? __pfx_drm_stub_open+0x10/0x10 [ 210.168150][ T8878] chrdev_open+0x234/0x6a0 [ 210.168182][ T8878] ? __pfx_chrdev_open+0x10/0x10 [ 210.168216][ T8878] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 210.168253][ T8878] do_dentry_open+0x982/0x1530 [ 210.168285][ T8878] ? __pfx_chrdev_open+0x10/0x10 [ 210.168323][ T8878] vfs_open+0x82/0x3f0 [ 210.168363][ T8878] path_openat+0x1de4/0x2cb0 [ 210.168404][ T8878] ? __pfx_path_openat+0x10/0x10 [ 210.168435][ T8878] ? __lock_acquire+0xb8a/0x1c90 [ 210.168473][ T8878] do_filp_open+0x20b/0x470 [ 210.168503][ T8878] ? __pfx_do_filp_open+0x10/0x10 [ 210.168565][ T8878] ? alloc_fd+0x471/0x7d0 [ 210.168602][ T8878] do_sys_openat2+0x11b/0x1d0 [ 210.168640][ T8878] ? __pfx_do_sys_openat2+0x10/0x10 [ 210.168694][ T8878] __x64_sys_openat+0x174/0x210 [ 210.168733][ T8878] ? __pfx___x64_sys_openat+0x10/0x10 [ 210.168787][ T8878] do_syscall_64+0xcd/0xfa0 [ 210.168822][ T8878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.168849][ T8878] RIP: 0033:0x7f7dea78f7c9 [ 210.168871][ T8878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.168896][ T8878] RSP: 002b:00007f7deb704038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 210.168922][ T8878] RAX: ffffffffffffffda RBX: 00007f7dea9e5fa0 RCX: 00007f7dea78f7c9 [ 210.168938][ T8878] RDX: 0000000000000040 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 210.168954][ T8878] RBP: 00007f7dea813f91 R08: 0000000000000000 R09: 0000000000000000 [ 210.168971][ T8878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.168986][ T8878] R13: 00007f7dea9e6038 R14: 00007f7dea9e5fa0 R15: 00007fff19655ee8 [ 210.169024][ T8878] [ 211.644336][ T8920] netlink: 'syz.1.1137': attribute type 33 has an invalid length. [ 211.654151][ T8920] netlink: 322 bytes leftover after parsing attributes in process `syz.1.1137'. [ 211.973022][ T8918] ERROR: Out of memory at tomoyo_memory_ok. [ 212.007142][ T8936] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1144'. [ 212.043594][ T8934] FAULT_INJECTION: forcing a failure. [ 212.043594][ T8934] name failslab, interval 1, probability 0, space 0, times 0 [ 212.106477][ T8934] CPU: 0 UID: 0 PID: 8934 Comm: syz.2.1142 Tainted: G I syzkaller #0 PREEMPT(full) [ 212.106521][ T8934] Tainted: [I]=FIRMWARE_WORKAROUND [ 212.106531][ T8934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 212.106547][ T8934] Call Trace: [ 212.106557][ T8934] [ 212.106568][ T8934] dump_stack_lvl+0x16c/0x1f0 [ 212.106605][ T8934] should_fail_ex+0x512/0x640 [ 212.106652][ T8934] ? __kmalloc_cache_noprof+0x5f/0x780 [ 212.106684][ T8934] should_failslab+0xc2/0x120 [ 212.106722][ T8934] __kmalloc_cache_noprof+0x72/0x780 [ 212.106750][ T8934] ? snd_seq_prioq_new+0x3f/0x110 [ 212.106777][ T8934] ? lockdep_init_map_type+0x5c/0x280 [ 212.106820][ T8934] ? snd_seq_prioq_new+0x3f/0x110 [ 212.106841][ T8934] snd_seq_prioq_new+0x3f/0x110 [ 212.106864][ T8934] snd_seq_queue_alloc+0x153/0x5a0 [ 212.106908][ T8934] snd_seq_ioctl_create_queue+0xa9/0x390 [ 212.106944][ T8934] call_seq_client_ctl+0x9f/0x110 [ 212.106977][ T8934] snd_seq_kernel_client_ctl+0x77/0xd0 [ 212.107009][ T8934] alloc_seq_queue+0xda/0x180 [ 212.107040][ T8934] ? __pfx_alloc_seq_queue+0x10/0x10 [ 212.107092][ T8934] ? mark_held_locks+0x49/0x80 [ 212.107125][ T8934] ? _raw_spin_unlock_irq+0x23/0x50 [ 212.107154][ T8934] ? lockdep_hardirqs_on+0x7c/0x110 [ 212.107191][ T8934] snd_seq_oss_open+0x38c/0xa20 [ 212.107232][ T8934] odev_open+0x79/0xc0 [ 212.107260][ T8934] ? __pfx_odev_open+0x10/0x10 [ 212.107290][ T8934] soundcore_open+0x40c/0x580 [ 212.107324][ T8934] ? __pfx_soundcore_open+0x10/0x10 [ 212.107355][ T8934] chrdev_open+0x234/0x6a0 [ 212.107385][ T8934] ? __pfx_apparmor_file_open+0x10/0x10 [ 212.107424][ T8934] ? __pfx_chrdev_open+0x10/0x10 [ 212.107458][ T8934] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 212.107494][ T8934] do_dentry_open+0x982/0x1530 [ 212.107523][ T8934] ? __pfx_chrdev_open+0x10/0x10 [ 212.107561][ T8934] vfs_open+0x82/0x3f0 [ 212.107603][ T8934] path_openat+0x1de4/0x2cb0 [ 212.107654][ T8934] ? __pfx_path_openat+0x10/0x10 [ 212.107688][ T8934] ? __lock_acquire+0xb8a/0x1c90 [ 212.107729][ T8934] do_filp_open+0x20b/0x470 [ 212.107762][ T8934] ? __pfx_do_filp_open+0x10/0x10 [ 212.107821][ T8934] ? alloc_fd+0x471/0x7d0 [ 212.107861][ T8934] do_sys_openat2+0x11b/0x1d0 [ 212.107898][ T8934] ? __pfx_do_sys_openat2+0x10/0x10 [ 212.107951][ T8934] __x64_sys_openat+0x174/0x210 [ 212.107990][ T8934] ? __pfx___x64_sys_openat+0x10/0x10 [ 212.108045][ T8934] do_syscall_64+0xcd/0xfa0 [ 212.108080][ T8934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.108109][ T8934] RIP: 0033:0x7f7dea78f7c9 [ 212.108131][ T8934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.108156][ T8934] RSP: 002b:00007f7deb704038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 212.108183][ T8934] RAX: ffffffffffffffda RBX: 00007f7dea9e5fa0 RCX: 00007f7dea78f7c9 [ 212.108202][ T8934] RDX: 00000000001c8740 RSI: 0000200000000540 RDI: ffffffffffffff9c [ 212.108221][ T8934] RBP: 00007f7dea813f91 R08: 0000000000000000 R09: 0000000000000000 [ 212.108237][ T8934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.108253][ T8934] R13: 00007f7dea9e6038 R14: 00007f7dea9e5fa0 R15: 00007fff19655ee8 [ 212.108292][ T8934] [ 212.871796][ T8953] FAULT_INJECTION: forcing a failure. [ 212.871796][ T8953] name failslab, interval 1, probability 0, space 0, times 0 [ 212.886034][ T8956] FAULT_INJECTION: forcing a failure. [ 212.886034][ T8956] name failslab, interval 1, probability 0, space 0, times 0 [ 212.899852][ T8956] CPU: 1 UID: 0 PID: 8956 Comm: syz.3.1151 Tainted: G I syzkaller #0 PREEMPT(full) [ 212.899897][ T8956] Tainted: [I]=FIRMWARE_WORKAROUND [ 212.899908][ T8956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 212.899924][ T8956] Call Trace: [ 212.899934][ T8956] [ 212.899944][ T8956] dump_stack_lvl+0x16c/0x1f0 [ 212.899981][ T8956] should_fail_ex+0x512/0x640 [ 212.900096][ T8956] ? __kmalloc_cache_noprof+0x5f/0x780 [ 212.900130][ T8956] should_failslab+0xc2/0x120 [ 212.900167][ T8956] __kmalloc_cache_noprof+0x72/0x780 [ 212.900195][ T8956] ? mon_bin_open+0xe6/0x4a0 [ 212.900233][ T8956] ? mon_bin_open+0xe6/0x4a0 [ 212.900266][ T8956] mon_bin_open+0xe6/0x4a0 [ 212.900308][ T8956] ? __pfx_mon_bin_open+0x10/0x10 [ 212.900340][ T8956] chrdev_open+0x234/0x6a0 [ 212.900371][ T8956] ? __pfx_apparmor_file_open+0x10/0x10 [ 212.900410][ T8956] ? __pfx_chrdev_open+0x10/0x10 [ 212.900446][ T8956] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 212.900484][ T8956] do_dentry_open+0x982/0x1530 [ 212.900516][ T8956] ? __pfx_chrdev_open+0x10/0x10 [ 212.900553][ T8956] vfs_open+0x82/0x3f0 [ 212.900594][ T8956] path_openat+0x1de4/0x2cb0 [ 212.900637][ T8956] ? __pfx_path_openat+0x10/0x10 [ 212.900668][ T8956] ? __lock_acquire+0xb8a/0x1c90 [ 212.900708][ T8956] do_filp_open+0x20b/0x470 [ 212.900739][ T8956] ? __pfx_do_filp_open+0x10/0x10 [ 212.900795][ T8956] ? alloc_fd+0x471/0x7d0 [ 212.900833][ T8956] do_sys_openat2+0x11b/0x1d0 [ 212.900871][ T8956] ? __pfx_do_sys_openat2+0x10/0x10 [ 212.900924][ T8956] __x64_sys_openat+0x174/0x210 [ 212.900962][ T8956] ? __pfx___x64_sys_openat+0x10/0x10 [ 212.901017][ T8956] do_syscall_64+0xcd/0xfa0 [ 212.901053][ T8956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.901083][ T8956] RIP: 0033:0x7fb15d78f7c9 [ 212.901104][ T8956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.901130][ T8956] RSP: 002b:00007fb15e684038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 212.901156][ T8956] RAX: ffffffffffffffda RBX: 00007fb15d9e5fa0 RCX: 00007fb15d78f7c9 [ 212.901175][ T8956] RDX: 0000000000002402 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 212.901193][ T8956] RBP: 00007fb15d813f91 R08: 0000000000000000 R09: 0000000000000000 [ 212.901210][ T8956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.901227][ T8956] R13: 00007fb15d9e6038 R14: 00007fb15d9e5fa0 R15: 00007fff940882b8 [ 212.901264][ T8956] [ 213.190448][ T8953] CPU: 1 UID: 0 PID: 8953 Comm: syz.1.1150 Tainted: G I syzkaller #0 PREEMPT(full) [ 213.190498][ T8953] Tainted: [I]=FIRMWARE_WORKAROUND [ 213.190508][ T8953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 213.190525][ T8953] Call Trace: [ 213.190534][ T8953] [ 213.190546][ T8953] dump_stack_lvl+0x16c/0x1f0 [ 213.190583][ T8953] should_fail_ex+0x512/0x640 [ 213.190627][ T8953] ? fs_reclaim_acquire+0xae/0x150 [ 213.190671][ T8953] should_failslab+0xc2/0x120 [ 213.190712][ T8953] kmem_cache_alloc_noprof+0x75/0x6e0 [ 213.190740][ T8953] ? __pfx_map_id_range_down+0x10/0x10 [ 213.190765][ T8953] ? security_inode_alloc+0x3b/0x2b0 [ 213.190809][ T8953] ? security_inode_alloc+0x3b/0x2b0 [ 213.190843][ T8953] security_inode_alloc+0x3b/0x2b0 [ 213.190881][ T8953] inode_init_always_gfp+0xce4/0x1030 [ 213.190915][ T8953] alloc_inode+0x86/0x240 [ 213.190951][ T8953] path_from_stashed+0x25b/0x750 [ 213.190977][ T8953] ? do_raw_spin_unlock+0x172/0x230 [ 213.191006][ T8953] ns_get_path+0x60/0x80 [ 213.191034][ T8953] proc_ns_get_link+0x121/0x230 [ 213.191066][ T8953] ? __pfx_proc_ns_get_link+0x10/0x10 [ 213.191102][ T8953] ? atime_needs_update+0x8b/0x710 [ 213.191140][ T8953] ? __pfx_proc_ns_get_link+0x10/0x10 [ 213.191171][ T8953] step_into+0x196c/0x21a0 [ 213.191201][ T8953] ? __pfx_step_into+0x10/0x10 [ 213.191225][ T8953] ? find_held_lock+0x2b/0x80 [ 213.191261][ T8953] path_openat+0x6db/0x2cb0 [ 213.191314][ T8953] ? __pfx_path_openat+0x10/0x10 [ 213.191346][ T8953] ? __lock_acquire+0xb8a/0x1c90 [ 213.191382][ T8953] do_filp_open+0x20b/0x470 [ 213.191408][ T8953] ? __pfx_do_filp_open+0x10/0x10 [ 213.191458][ T8953] ? alloc_fd+0x471/0x7d0 [ 213.191490][ T8953] do_sys_openat2+0x11b/0x1d0 [ 213.191526][ T8953] ? __pfx_do_sys_openat2+0x10/0x10 [ 213.191576][ T8953] __x64_sys_openat+0x174/0x210 [ 213.191612][ T8953] ? __pfx___x64_sys_openat+0x10/0x10 [ 213.191663][ T8953] do_syscall_64+0xcd/0xfa0 [ 213.191697][ T8953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.191725][ T8953] RIP: 0033:0x7fd6e478e010 [ 213.191746][ T8953] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 213.191772][ T8953] RSP: 002b:00007fd6e56fbf10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 213.191798][ T8953] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fd6e478e010 [ 213.191816][ T8953] RDX: 0000000000000002 RSI: 00007fd6e56fbfa0 RDI: 00000000ffffff9c [ 213.191833][ T8953] RBP: 00007fd6e56fbfa0 R08: 0000000000000000 R09: 0000000000000000 [ 213.191848][ T8953] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 213.191863][ T8953] R13: 00007fd6e49e6038 R14: 00007fd6e49e5fa0 R15: 00007ffdb8ca1608 [ 213.191899][ T8953] [ 214.785730][ T8996] FAULT_INJECTION: forcing a failure. [ 214.785730][ T8996] name failslab, interval 1, probability 0, space 0, times 0 [ 214.827193][ T8996] CPU: 0 UID: 0 PID: 8996 Comm: syz.2.1165 Tainted: G I syzkaller #0 PREEMPT(full) [ 214.827240][ T8996] Tainted: [I]=FIRMWARE_WORKAROUND [ 214.827251][ T8996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 214.827267][ T8996] Call Trace: [ 214.827276][ T8996] [ 214.827287][ T8996] dump_stack_lvl+0x16c/0x1f0 [ 214.827325][ T8996] should_fail_ex+0x512/0x640 [ 214.827363][ T8996] ? fs_reclaim_acquire+0xae/0x150 [ 214.827401][ T8996] should_failslab+0xc2/0x120 [ 214.827435][ T8996] __kmalloc_noprof+0xdd/0x880 [ 214.827461][ T8996] ? usb_alloc_urb+0x66/0xa0 [ 214.827501][ T8996] ? usb_alloc_urb+0x66/0xa0 [ 214.827531][ T8996] usb_alloc_urb+0x66/0xa0 [ 214.827565][ T8996] usb_control_msg+0x1d3/0x4a0 [ 214.827603][ T8996] ? __pfx_usb_control_msg+0x10/0x10 [ 214.827650][ T8996] hub_ext_port_status+0x14e/0x670 [ 214.827698][ T8996] hub_activate+0x6e5/0x1d60 [ 214.827745][ T8996] ? __pfx_hub_activate+0x10/0x10 [ 214.827779][ T8996] ? find_held_lock+0x2b/0x80 [ 214.827808][ T8996] ? do_proc_control+0x3a0/0x10a0 [ 214.827852][ T8996] hub_resume+0xa8/0x3f0 [ 214.827888][ T8996] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 214.827924][ T8996] ? __pfx_hub_resume+0x10/0x10 [ 214.827961][ T8996] ? __pfx_hcd_bus_resume+0x10/0x10 [ 214.828002][ T8996] usb_resume_interface.constprop.0.isra.0+0x2c5/0x3e0 [ 214.828038][ T8996] usb_resume_both+0x237/0x960 [ 214.828069][ T8996] ? __pfx_usb_resume_both+0x10/0x10 [ 214.828099][ T8996] ? __pfx_usb_runtime_resume+0x10/0x10 [ 214.828144][ T8996] ? __pfx_usb_runtime_resume+0x10/0x10 [ 214.828178][ T8996] __rpm_callback+0xc8/0x610 [ 214.828216][ T8996] ? __pfx_usb_runtime_resume+0x10/0x10 [ 214.828249][ T8996] rpm_callback+0x1b7/0x200 [ 214.828282][ T8996] ? __pfx_usb_runtime_resume+0x10/0x10 [ 214.828314][ T8996] rpm_resume+0xd16/0x1320 [ 214.828356][ T8996] ? __pfx_rpm_resume+0x10/0x10 [ 214.828387][ T8996] ? do_raw_spin_lock+0x12c/0x2b0 [ 214.828426][ T8996] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 214.828479][ T8996] __pm_runtime_resume+0xb6/0x170 [ 214.828517][ T8996] usb_autoresume_device+0x23/0xe0 [ 214.828551][ T8996] usbdev_open+0x228/0x8b0 [ 214.828584][ T8996] ? kobject_get_unless_zero+0x156/0x1e0 [ 214.828619][ T8996] ? __pfx_usbdev_open+0x10/0x10 [ 214.828651][ T8996] ? chrdev_open+0x10b/0x6a0 [ 214.828688][ T8996] ? __pfx_usbdev_open+0x10/0x10 [ 214.828719][ T8996] chrdev_open+0x234/0x6a0 [ 214.828749][ T8996] ? __pfx_apparmor_file_open+0x10/0x10 [ 214.828788][ T8996] ? __pfx_chrdev_open+0x10/0x10 [ 214.828821][ T8996] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 214.828860][ T8996] do_dentry_open+0x982/0x1530 [ 214.828893][ T8996] ? __pfx_chrdev_open+0x10/0x10 [ 214.828931][ T8996] vfs_open+0x82/0x3f0 [ 214.828972][ T8996] path_openat+0x1de4/0x2cb0 [ 214.829014][ T8996] ? __pfx_path_openat+0x10/0x10 [ 214.829045][ T8996] ? __lock_acquire+0xb8a/0x1c90 [ 214.829082][ T8996] do_filp_open+0x20b/0x470 [ 214.829106][ T8996] ? __pfx_do_filp_open+0x10/0x10 [ 214.829180][ T8996] ? alloc_fd+0x471/0x7d0 [ 214.829219][ T8996] do_sys_openat2+0x11b/0x1d0 [ 214.829256][ T8996] ? __pfx_do_sys_openat2+0x10/0x10 [ 214.829309][ T8996] __x64_sys_openat+0x174/0x210 [ 214.829348][ T8996] ? __pfx___x64_sys_openat+0x10/0x10 [ 214.829400][ T8996] do_syscall_64+0xcd/0xfa0 [ 214.829434][ T8996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.829461][ T8996] RIP: 0033:0x7f7dea78f7c9 [ 214.829483][ T8996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.829508][ T8996] RSP: 002b:00007f7deb704038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 214.829533][ T8996] RAX: ffffffffffffffda RBX: 00007f7dea9e5fa0 RCX: 00007f7dea78f7c9 [ 214.829551][ T8996] RDX: 0000000000040a02 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 214.829569][ T8996] RBP: 00007f7dea813f91 R08: 0000000000000000 R09: 0000000000000000 [ 214.829585][ T8996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.829601][ T8996] R13: 00007f7dea9e6038 R14: 00007f7dea9e5fa0 R15: 00007fff19655ee8 [ 214.829639][ T8996] [ 214.829930][ T8996] hub 37-0:1.0: hub_ext_port_status failed (err = -12) [ 215.291660][ T9000] FAULT_INJECTION: forcing a failure. [ 215.291660][ T9000] name failslab, interval 1, probability 0, space 0, times 0 [ 215.304415][ T9000] CPU: 1 UID: 0 PID: 9000 Comm: syz.3.1168 Tainted: G I syzkaller #0 PREEMPT(full) [ 215.304455][ T9000] Tainted: [I]=FIRMWARE_WORKAROUND [ 215.304463][ T9000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 215.304479][ T9000] Call Trace: [ 215.304487][ T9000] [ 215.304497][ T9000] dump_stack_lvl+0x16c/0x1f0 [ 215.304532][ T9000] should_fail_ex+0x512/0x640 [ 215.304568][ T9000] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 215.304602][ T9000] should_failslab+0xc2/0x120 [ 215.304635][ T9000] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 215.304665][ T9000] ? drm_stub_open+0x20f/0x380 [ 215.304695][ T9000] ? kasprintf+0xc7/0x100 [ 215.304716][ T9000] ? do_dentry_open+0x982/0x1530 [ 215.304749][ T9000] ? kvasprintf+0xbc/0x160 [ 215.304772][ T9000] kvasprintf+0xbc/0x160 [ 215.304796][ T9000] ? __pfx_kvasprintf+0x10/0x10 [ 215.304832][ T9000] kasprintf+0xc7/0x100 [ 215.304854][ T9000] ? __pfx_kasprintf+0x10/0x10 [ 215.304880][ T9000] ? aa_get_newest_label+0xd2/0x250 [ 215.304914][ T9000] ? lockdep_init_map_type+0x5c/0x280 [ 215.304961][ T9000] drm_debugfs_clients_add+0x48/0x200 [ 215.305007][ T9000] drm_file_alloc+0x5c6/0xb40 [ 215.305048][ T9000] drm_open_helper+0x204/0x550 [ 215.305087][ T9000] drm_open+0x1a0/0x3e0 [ 215.305118][ T9000] ? __pfx_drm_open+0x10/0x10 [ 215.305150][ T9000] drm_stub_open+0x20f/0x380 [ 215.305182][ T9000] ? __pfx_drm_stub_open+0x10/0x10 [ 215.305215][ T9000] chrdev_open+0x234/0x6a0 [ 215.305241][ T9000] ? __pfx_apparmor_file_open+0x10/0x10 [ 215.305275][ T9000] ? __pfx_chrdev_open+0x10/0x10 [ 215.305303][ T9000] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 215.305335][ T9000] do_dentry_open+0x982/0x1530 [ 215.305364][ T9000] ? __pfx_chrdev_open+0x10/0x10 [ 215.305401][ T9000] vfs_open+0x82/0x3f0 [ 215.305439][ T9000] path_openat+0x1de4/0x2cb0 [ 215.305479][ T9000] ? __pfx_path_openat+0x10/0x10 [ 215.305510][ T9000] ? __lock_acquire+0xb8a/0x1c90 [ 215.305549][ T9000] do_filp_open+0x20b/0x470 [ 215.305578][ T9000] ? __pfx_do_filp_open+0x10/0x10 [ 215.305633][ T9000] ? alloc_fd+0x471/0x7d0 [ 215.305679][ T9000] do_sys_openat2+0x11b/0x1d0 [ 215.305724][ T9000] ? __pfx_do_sys_openat2+0x10/0x10 [ 215.305770][ T9000] __x64_sys_openat+0x174/0x210 [ 215.305801][ T9000] ? __pfx___x64_sys_openat+0x10/0x10 [ 215.305843][ T9000] do_syscall_64+0xcd/0xfa0 [ 215.305872][ T9000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.305896][ T9000] RIP: 0033:0x7fb15d78f7c9 [ 215.305915][ T9000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.305938][ T9000] RSP: 002b:00007fb15e684038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 215.305961][ T9000] RAX: ffffffffffffffda RBX: 00007fb15d9e5fa0 RCX: 00007fb15d78f7c9 [ 215.305985][ T9000] RDX: 0000000000000040 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 215.305999][ T9000] RBP: 00007fb15d813f91 R08: 0000000000000000 R09: 0000000000000000 [ 215.306013][ T9000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.306026][ T9000] R13: 00007fb15d9e6038 R14: 00007fb15d9e5fa0 R15: 00007fff940882b8 [ 215.306058][ T9000] [ 215.987169][ T9002] bond0: invalid ARP target specified [ 216.183346][ T9008] FAULT_INJECTION: forcing a failure. [ 216.183346][ T9008] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 216.216986][ T9008] CPU: 1 UID: 0 PID: 9008 Comm: syz.3.1170 Tainted: G I syzkaller #0 PREEMPT(full) [ 216.217033][ T9008] Tainted: [I]=FIRMWARE_WORKAROUND [ 216.217044][ T9008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 216.217061][ T9008] Call Trace: [ 216.217070][ T9008] [ 216.217081][ T9008] dump_stack_lvl+0x16c/0x1f0 [ 216.217120][ T9008] should_fail_ex+0x512/0x640 [ 216.217164][ T9008] should_fail_alloc_page+0xe7/0x130 [ 216.217212][ T9008] prepare_alloc_pages+0x3c2/0x610 [ 216.217249][ T9008] ? rcu_is_watching+0x12/0xc0 [ 216.217283][ T9008] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 216.217312][ T9008] ? kasan_save_stack+0x33/0x60 [ 216.217341][ T9008] ? kasan_save_track+0x14/0x30 [ 216.217381][ T9008] ? __lock_acquire+0x622/0x1c90 [ 216.217420][ T9008] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 216.217463][ T9008] ? __lock_acquire+0x622/0x1c90 [ 216.217503][ T9008] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 216.217549][ T9008] ? policy_nodemask+0xea/0x4e0 [ 216.217586][ T9008] alloc_pages_mpol+0x1fb/0x550 [ 216.217623][ T9008] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 216.217669][ T9008] folio_alloc_mpol_noprof+0x36/0x2f0 [ 216.217711][ T9008] vma_alloc_folio_noprof+0xed/0x1e0 [ 216.217751][ T9008] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 216.217802][ T9008] do_pte_missing+0x2202/0x3ba0 [ 216.217842][ T9008] ? find_held_lock+0x2b/0x80 [ 216.217879][ T9008] __handle_mm_fault+0x1556/0x2aa0 [ 216.217930][ T9008] ? __pfx___handle_mm_fault+0x10/0x10 [ 216.217972][ T9008] ? __pte_offset_map_lock+0x174/0x310 [ 216.218006][ T9008] ? find_held_lock+0x2b/0x80 [ 216.218044][ T9008] ? follow_page_pte+0x5cf/0x1390 [ 216.218086][ T9008] handle_mm_fault+0x589/0xd10 [ 216.218132][ T9008] __get_user_pages+0x54e/0x3530 [ 216.218184][ T9008] ? __pfx___get_user_pages+0x10/0x10 [ 216.218238][ T9008] populate_vma_page_range+0x267/0x3f0 [ 216.218280][ T9008] ? __pfx_populate_vma_page_range+0x10/0x10 [ 216.218317][ T9008] ? __pfx_find_vma_intersection+0x10/0x10 [ 216.218353][ T9008] ? do_mmap+0x69c/0x1210 [ 216.218390][ T9008] __mm_populate+0x1d8/0x380 [ 216.218425][ T9008] ? __pfx___mm_populate+0x10/0x10 [ 216.218459][ T9008] ? up_write+0x1b2/0x520 [ 216.218499][ T9008] vm_mmap_pgoff+0x37f/0x470 [ 216.218538][ T9008] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 216.218576][ T9008] ? __x64_sys_futex+0x1e0/0x4c0 [ 216.218609][ T9008] ? __x64_sys_futex+0x1e9/0x4c0 [ 216.218649][ T9008] ksys_mmap_pgoff+0x7d/0x5c0 [ 216.218676][ T9008] ? xfd_validate_state+0x61/0x180 [ 216.218707][ T9008] ? __pfx_do_writev+0x10/0x10 [ 216.218738][ T9008] __x64_sys_mmap+0x125/0x190 [ 216.218780][ T9008] do_syscall_64+0xcd/0xfa0 [ 216.218815][ T9008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.218843][ T9008] RIP: 0033:0x7fb15d78f7c9 [ 216.218865][ T9008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.218890][ T9008] RSP: 002b:00007fb15e684038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 216.218916][ T9008] RAX: ffffffffffffffda RBX: 00007fb15d9e5fa0 RCX: 00007fb15d78f7c9 [ 216.218935][ T9008] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 216.218951][ T9008] RBP: 00007fb15d813f91 R08: 0000000000000002 R09: 0000000000008000 [ 216.218966][ T9008] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 216.218982][ T9008] R13: 00007fb15d9e6038 R14: 00007fb15d9e5fa0 R15: 00007fff940882b8 [ 216.219017][ T9008] [ 217.052422][ T9013] FAULT_INJECTION: forcing a failure. [ 217.052422][ T9013] name failslab, interval 1, probability 0, space 0, times 0 [ 217.126967][ T9013] CPU: 1 UID: 0 PID: 9013 Comm: syz.3.1173 Tainted: G I syzkaller #0 PREEMPT(full) [ 217.127009][ T9013] Tainted: [I]=FIRMWARE_WORKAROUND [ 217.127020][ T9013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 217.127036][ T9013] Call Trace: [ 217.127045][ T9013] [ 217.127056][ T9013] dump_stack_lvl+0x16c/0x1f0 [ 217.127095][ T9013] should_fail_ex+0x512/0x640 [ 217.127133][ T9013] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 217.127167][ T9013] should_failslab+0xc2/0x120 [ 217.127203][ T9013] kmem_cache_alloc_node_noprof+0x78/0x770 [ 217.127230][ T9013] ? find_held_lock+0x2b/0x80 [ 217.127255][ T9013] ? __alloc_skb+0x2b2/0x380 [ 217.127302][ T9013] ? __alloc_skb+0x2b2/0x380 [ 217.127336][ T9013] __alloc_skb+0x2b2/0x380 [ 217.127376][ T9013] ? __pfx___alloc_skb+0x10/0x10 [ 217.127421][ T9013] ? __pfx___register_sysctl_table+0x10/0x10 [ 217.127458][ T9013] ? is_module_address+0x69/0xf0 [ 217.127499][ T9013] inet_netconf_notify_devconf+0x8b/0x1f0 [ 217.127538][ T9013] __devinet_sysctl_register+0x227/0x360 [ 217.127575][ T9013] ? rcu_is_watching+0x12/0xc0 [ 217.127604][ T9013] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 217.127637][ T9013] ? __kmalloc_node_track_caller_noprof+0x362/0x8a0 [ 217.127684][ T9013] ? __asan_memcpy+0x3c/0x60 [ 217.127715][ T9013] devinet_init_net+0x347/0x910 [ 217.127751][ T9013] ? __pfx_devinet_init_net+0x10/0x10 [ 217.127783][ T9013] ops_init+0x1e2/0x5f0 [ 217.127815][ T9013] setup_net+0x100/0x390 [ 217.127843][ T9013] ? __pfx_setup_net+0x10/0x10 [ 217.127881][ T9013] ? debug_mutex_init+0x37/0x70 [ 217.127915][ T9013] copy_net_ns+0x2f8/0x690 [ 217.127951][ T9013] create_new_namespaces+0x3ea/0xa90 [ 217.127990][ T9013] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 217.128024][ T9013] ksys_unshare+0x45b/0xa40 [ 217.128059][ T9013] ? __pfx_ksys_unshare+0x10/0x10 [ 217.128108][ T9013] __x64_sys_unshare+0x31/0x40 [ 217.128140][ T9013] do_syscall_64+0xcd/0xfa0 [ 217.128175][ T9013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.128202][ T9013] RIP: 0033:0x7fb15d78f7c9 [ 217.128223][ T9013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.128249][ T9013] RSP: 002b:00007fb15e684038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 217.128274][ T9013] RAX: ffffffffffffffda RBX: 00007fb15d9e5fa0 RCX: 00007fb15d78f7c9 [ 217.128292][ T9013] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 217.128309][ T9013] RBP: 00007fb15d813f91 R08: 0000000000000000 R09: 0000000000000000 [ 217.128325][ T9013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.128342][ T9013] R13: 00007fb15d9e6038 R14: 00007fb15d9e5fa0 R15: 00007fff940882b8 [ 217.128380][ T9013] [ 217.911925][ T9026] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1178'. [ 218.063422][ T9031] FAULT_INJECTION: forcing a failure. [ 218.063422][ T9031] name failslab, interval 1, probability 0, space 0, times 0 [ 218.108350][ T9031] CPU: 0 UID: 0 PID: 9031 Comm: syz.0.1177 Tainted: G I syzkaller #0 PREEMPT(full) [ 218.108397][ T9031] Tainted: [I]=FIRMWARE_WORKAROUND [ 218.108407][ T9031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 218.108424][ T9031] Call Trace: [ 218.108433][ T9031] [ 218.108444][ T9031] dump_stack_lvl+0x16c/0x1f0 [ 218.108481][ T9031] should_fail_ex+0x512/0x640 [ 218.108521][ T9031] ? __kmalloc_cache_noprof+0x5f/0x780 [ 218.108552][ T9031] should_failslab+0xc2/0x120 [ 218.108587][ T9031] __kmalloc_cache_noprof+0x72/0x780 [ 218.108613][ T9031] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 218.108646][ T9031] ? shrinker_alloc+0xf5/0xbf0 [ 218.108681][ T9031] ? shrinker_alloc+0xf5/0xbf0 [ 218.108710][ T9031] shrinker_alloc+0xf5/0xbf0 [ 218.108742][ T9031] ? mark_held_locks+0x49/0x80 [ 218.108775][ T9031] ? pcpu_memcg_post_alloc_hook+0x1e/0x690 [ 218.108812][ T9031] ? __pfx_shrinker_alloc+0x10/0x10 [ 218.108848][ T9031] ? lockdep_init_map_type+0x5c/0x280 [ 218.108885][ T9031] ? __raw_spin_lock_init+0x3a/0x110 [ 218.108922][ T9031] ? __init_rwsem+0x12d/0x1b0 [ 218.108962][ T9031] alloc_super+0x776/0xb60 [ 218.108997][ T9031] sget_fc+0x116/0xc20 [ 218.109033][ T9031] ? __pfx_set_anon_super_fc+0x10/0x10 [ 218.109062][ T9031] ? __pfx_mqueue_fill_super+0x10/0x10 [ 218.109098][ T9031] get_tree_nodev+0x28/0x190 [ 218.109129][ T9031] mqueue_get_tree+0xf1/0x130 [ 218.109164][ T9031] vfs_get_tree+0x8e/0x340 [ 218.109203][ T9031] fc_mount_longterm+0x1a/0x270 [ 218.109244][ T9031] mq_init_ns+0x426/0x620 [ 218.109287][ T9031] copy_ipcs+0x2d6/0x550 [ 218.109329][ T9031] create_new_namespaces+0x20a/0xa90 [ 218.109359][ T9031] ? security_capable+0x7e/0x260 [ 218.109401][ T9031] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 218.109435][ T9031] ksys_unshare+0x45b/0xa40 [ 218.109469][ T9031] ? __pfx_ksys_unshare+0x10/0x10 [ 218.109505][ T9031] ? xfd_validate_state+0x61/0x180 [ 218.109553][ T9031] __x64_sys_unshare+0x31/0x40 [ 218.109587][ T9031] do_syscall_64+0xcd/0xfa0 [ 218.109622][ T9031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.109649][ T9031] RIP: 0033:0x7fbd7758f7c9 [ 218.109672][ T9031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.109697][ T9031] RSP: 002b:00007fbd783d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 218.109723][ T9031] RAX: ffffffffffffffda RBX: 00007fbd777e6090 RCX: 00007fbd7758f7c9 [ 218.109742][ T9031] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 218.109757][ T9031] RBP: 00007fbd77613f91 R08: 0000000000000000 R09: 0000000000000000 [ 218.109773][ T9031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.109790][ T9031] R13: 00007fbd777e6128 R14: 00007fbd777e6090 R15: 00007ffc2d5e5498 [ 218.109827][ T9031] [ 219.011034][ T9043] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1183'. [ 219.022769][ T9043] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1183'. [ 220.308662][ T9056] FAULT_INJECTION: forcing a failure. [ 220.308662][ T9056] name failslab, interval 1, probability 0, space 0, times 0 [ 220.384822][ T9056] CPU: 0 UID: 0 PID: 9056 Comm: syz.2.1187 Tainted: G I syzkaller #0 PREEMPT(full) [ 220.384868][ T9056] Tainted: [I]=FIRMWARE_WORKAROUND [ 220.384879][ T9056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 220.384895][ T9056] Call Trace: [ 220.384904][ T9056] [ 220.384914][ T9056] dump_stack_lvl+0x16c/0x1f0 [ 220.384955][ T9056] should_fail_ex+0x512/0x640 [ 220.384990][ T9056] ? __kmalloc_cache_noprof+0x5f/0x780 [ 220.385021][ T9056] should_failslab+0xc2/0x120 [ 220.385054][ T9056] __kmalloc_cache_noprof+0x72/0x780 [ 220.385079][ T9056] ? __debugfs_file_get+0x1fe/0x840 [ 220.385112][ T9056] ? single_open+0x4d/0x1f0 [ 220.385148][ T9056] ? __pfx_tk_debug_sleep_time_open+0x10/0x10 [ 220.385176][ T9056] ? __pfx_tk_debug_sleep_time_show+0x10/0x10 [ 220.385203][ T9056] ? single_open+0x4d/0x1f0 [ 220.385234][ T9056] single_open+0x4d/0x1f0 [ 220.385269][ T9056] full_proxy_open_regular+0x1b9/0x360 [ 220.385307][ T9056] do_dentry_open+0x982/0x1530 [ 220.385338][ T9056] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 220.385382][ T9056] vfs_open+0x82/0x3f0 [ 220.385420][ T9056] path_openat+0x1de4/0x2cb0 [ 220.385460][ T9056] ? __pfx_path_openat+0x10/0x10 [ 220.385491][ T9056] ? __lock_acquire+0xb8a/0x1c90 [ 220.385527][ T9056] do_filp_open+0x20b/0x470 [ 220.385557][ T9056] ? __pfx_do_filp_open+0x10/0x10 [ 220.385610][ T9056] ? alloc_fd+0x471/0x7d0 [ 220.385645][ T9056] do_sys_openat2+0x11b/0x1d0 [ 220.385680][ T9056] ? __pfx_do_sys_openat2+0x10/0x10 [ 220.385726][ T9056] __x64_sys_openat+0x174/0x210 [ 220.385762][ T9056] ? __pfx___x64_sys_openat+0x10/0x10 [ 220.385819][ T9056] do_syscall_64+0xcd/0xfa0 [ 220.385852][ T9056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.385879][ T9056] RIP: 0033:0x7f7dea78f7c9 [ 220.385901][ T9056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.385927][ T9056] RSP: 002b:00007f7deb704038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 220.385953][ T9056] RAX: ffffffffffffffda RBX: 00007f7dea9e5fa0 RCX: 00007f7dea78f7c9 [ 220.385970][ T9056] RDX: 0000000000040000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 220.385987][ T9056] RBP: 00007f7dea813f91 R08: 0000000000000000 R09: 0000000000000000 [ 220.386004][ T9056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.386020][ T9056] R13: 00007f7dea9e6038 R14: 00007f7dea9e5fa0 R15: 00007fff19655ee8 [ 220.386057][ T9056] [ 220.760393][ T9067] netlink: 326 bytes leftover after parsing attributes in process `syz.3.1194'. [ 221.709743][ T9085] FAULT_INJECTION: forcing a failure. [ 221.709743][ T9085] name failslab, interval 1, probability 0, space 0, times 0 [ 221.771395][ T9085] CPU: 1 UID: 0 PID: 9085 Comm: syz.2.1200 Tainted: G I syzkaller #0 PREEMPT(full) [ 221.771442][ T9085] Tainted: [I]=FIRMWARE_WORKAROUND [ 221.771452][ T9085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 221.771469][ T9085] Call Trace: [ 221.771479][ T9085] [ 221.771489][ T9085] dump_stack_lvl+0x16c/0x1f0 [ 221.771528][ T9085] should_fail_ex+0x512/0x640 [ 221.771566][ T9085] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 221.771613][ T9085] should_failslab+0xc2/0x120 [ 221.771654][ T9085] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 221.771689][ T9085] ? __devinet_sysctl_register+0xbc/0x360 [ 221.771721][ T9085] ? nlmsg_notify+0x11e/0x220 [ 221.771750][ T9085] ? kmemdup_noprof+0x29/0x60 [ 221.771764][ T9085] kmemdup_noprof+0x29/0x60 [ 221.771779][ T9085] __devinet_sysctl_register+0xbc/0x360 [ 221.771798][ T9085] ? rcu_is_watching+0x12/0xc0 [ 221.771813][ T9085] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 221.771829][ T9085] ? __kmalloc_node_track_caller_noprof+0x362/0x8a0 [ 221.771850][ T9085] ? __asan_memcpy+0x3c/0x60 [ 221.771865][ T9085] devinet_init_net+0x347/0x910 [ 221.771883][ T9085] ? __pfx_devinet_init_net+0x10/0x10 [ 221.771901][ T9085] ops_init+0x1e2/0x5f0 [ 221.771917][ T9085] setup_net+0x100/0x390 [ 221.771931][ T9085] ? __pfx_setup_net+0x10/0x10 [ 221.771946][ T9085] ? debug_mutex_init+0x37/0x70 [ 221.771962][ T9085] copy_net_ns+0x2f8/0x690 [ 221.771979][ T9085] create_new_namespaces+0x3ea/0xa90 [ 221.771999][ T9085] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 221.772017][ T9085] ksys_unshare+0x45b/0xa40 [ 221.772035][ T9085] ? __pfx_ksys_unshare+0x10/0x10 [ 221.772053][ T9085] ? xfd_validate_state+0x61/0x180 [ 221.772077][ T9085] __x64_sys_unshare+0x31/0x40 [ 221.772094][ T9085] do_syscall_64+0xcd/0xfa0 [ 221.772112][ T9085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.772125][ T9085] RIP: 0033:0x7f7dea78f7c9 [ 221.772137][ T9085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.772150][ T9085] RSP: 002b:00007f7deb704038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 221.772164][ T9085] RAX: ffffffffffffffda RBX: 00007f7dea9e5fa0 RCX: 00007f7dea78f7c9 [ 221.772173][ T9085] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 221.772182][ T9085] RBP: 00007f7dea813f91 R08: 0000000000000000 R09: 0000000000000000 [ 221.772190][ T9085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.772198][ T9085] R13: 00007f7dea9e6038 R14: 00007f7dea9e5fa0 R15: 00007fff19655ee8 [ 221.772216][ T9085] [ 222.312827][ T9089] netlink: 'syz.0.1203': attribute type 1 has an invalid length. [ 222.321042][ T9089] netlink: 318 bytes leftover after parsing attributes in process `syz.0.1203'. [ 222.529615][ T9098] netlink: 'syz.2.1206': attribute type 14 has an invalid length. [ 222.543144][ T9098] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1206'. [ 223.017952][ T9115] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1211'. [ 224.952524][ T9179] base or size exceeds the MTRR width [ 225.581170][ T5846] smpboot: CPU 1 is now offline [ 225.652041][ T9196] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 225.683269][ T9192] ------------[ cut here ]------------ [ 225.683794][ T9192] [ 225.683802][ T9192] ====================================================== [ 225.683812][ T9192] WARNING: possible circular locking dependency detected [ 225.683827][ T9192] syzkaller #0 Tainted: G I [ 225.683842][ T9192] ------------------------------------------------------ [ 225.683851][ T9192] syz.2.1240/9192 is trying to acquire lock: [ 225.683864][ T9192] ffffffff8e2d1820 (console_owner){-...}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 225.683926][ T9192] [ 225.683926][ T9192] but task is already holding lock: [ 225.683934][ T9192] ffff8880b843a4d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 225.683997][ T9192] [ 225.683997][ T9192] which lock already depends on the new lock. [ 225.683997][ T9192] [ 225.684006][ T9192] [ 225.684006][ T9192] the existing dependency chain (in reverse order) is: [ 225.684015][ T9192] [ 225.684015][ T9192] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 225.684048][ T9192] _raw_spin_lock_nested+0x31/0x40 [ 225.684074][ T9192] raw_spin_rq_lock_nested+0x29/0x130 [ 225.684099][ T9192] task_rq_lock+0xcf/0x490 [ 225.684122][ T9192] cgroup_move_task+0x81/0x2a0 [ 225.684149][ T9192] css_set_move_task+0x288/0x5f0 [ 225.684179][ T9192] cgroup_post_fork+0x201/0x9d0 [ 225.684204][ T9192] copy_process+0x602d/0x76a0 [ 225.684231][ T9192] kernel_clone+0xfc/0x930 [ 225.684259][ T9192] user_mode_thread+0xc8/0x110 [ 225.684287][ T9192] rest_init+0x23/0x2b0 [ 225.684321][ T9192] start_kernel+0x3f6/0x4e0 [ 225.684359][ T9192] x86_64_start_reservations+0x18/0x30 [ 225.684382][ T9192] x86_64_start_kernel+0x130/0x190 [ 225.684405][ T9192] common_startup_64+0x13e/0x148 [ 225.684431][ T9192] [ 225.684431][ T9192] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 225.684463][ T9192] _raw_spin_lock_irqsave+0x3a/0x60 [ 225.684488][ T9192] try_to_wake_up+0xb7/0x1870 [ 225.684510][ T9192] __wake_up_common+0x135/0x1f0 [ 225.684542][ T9192] __wake_up+0x31/0x60 [ 225.684568][ T9192] tty_port_default_wakeup+0x47/0x60 [ 225.684599][ T9192] serial8250_tx_chars+0x68e/0x860 [ 225.684628][ T9192] serial8250_handle_irq+0x761/0xcb0 [ 225.684658][ T9192] serial8250_default_handle_irq+0x9e/0x270 [ 225.684690][ T9192] serial8250_interrupt+0xf8/0x1d0 [ 225.684724][ T9192] __handle_irq_event_percpu+0x236/0x920 [ 225.684750][ T9192] handle_irq_event+0xab/0x1e0 [ 225.684773][ T9192] handle_edge_irq+0x3ca/0x9e0 [ 225.684796][ T9192] __common_interrupt+0xd0/0x2f0 [ 225.684827][ T9192] common_interrupt+0xba/0xe0 [ 225.684862][ T9192] asm_common_interrupt+0x26/0x40 [ 225.684887][ T9192] _raw_spin_unlock_irqrestore+0x31/0x80 [ 225.684914][ T9192] sock_def_readable+0x15b/0x600 [ 225.684951][ T9192] unix_dgram_sendmsg+0xd1b/0x17f0 [ 225.684992][ T9192] unix_seqpacket_sendmsg+0x12a/0x1c0 [ 225.685028][ T9192] sock_write_iter+0x566/0x610 [ 225.685056][ T9192] do_iter_readv_writev+0x662/0x9e0 [ 225.685080][ T9192] vfs_writev+0x35f/0xde0 [ 225.685103][ T9192] do_writev+0x28c/0x340 [ 225.685125][ T9192] do_syscall_64+0xcd/0xfa0 [ 225.685154][ T9192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.685178][ T9192] [ 225.685178][ T9192] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 225.685212][ T9192] _raw_spin_lock_irqsave+0x3a/0x60 [ 225.685237][ T9192] __wake_up+0x1c/0x60 [ 225.685262][ T9192] tty_port_default_wakeup+0x47/0x60 [ 225.685290][ T9192] serial8250_tx_chars+0x68e/0x860 [ 225.685319][ T9192] serial8250_handle_irq+0x761/0xcb0 [ 225.685348][ T9192] serial8250_default_handle_irq+0x9e/0x270 [ 225.685380][ T9192] serial8250_interrupt+0xf8/0x1d0 [ 225.685414][ T9192] __handle_irq_event_percpu+0x236/0x920 [ 225.685439][ T9192] handle_irq_event+0xab/0x1e0 [ 225.685462][ T9192] handle_edge_irq+0x3ca/0x9e0 [ 225.685484][ T9192] __common_interrupt+0xd0/0x2f0 [ 225.685514][ T9192] common_interrupt+0xba/0xe0 [ 225.685548][ T9192] asm_common_interrupt+0x26/0x40 [ 225.685572][ T9192] _raw_spin_unlock_irqrestore+0x31/0x80 [ 225.685599][ T9192] uart_write+0x2a4/0xb30 [ 225.685625][ T9192] n_tty_write+0x41e/0x11e0 [ 225.685656][ T9192] file_tty_write.constprop.0+0x503/0x9b0 [ 225.685683][ T9192] redirected_tty_write+0xd4/0x150 [ 225.685709][ T9192] vfs_write+0x7d3/0x11d0 [ 225.685733][ T9192] ksys_write+0x12a/0x250 [ 225.685758][ T9192] do_syscall_64+0xcd/0xfa0 [ 225.685785][ T9192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.685810][ T9192] [ 225.685810][ T9192] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 225.685843][ T9192] _raw_spin_lock_irqsave+0x3a/0x60 [ 225.685868][ T9192] serial8250_console_write+0x181/0x1890 [ 225.685900][ T9192] console_flush_all+0x801/0xc60 [ 225.685923][ T9192] console_unlock+0xd8/0x210 [ 225.685946][ T9192] vprintk_emit+0x3d7/0x680 [ 225.685969][ T9192] _printk+0xc7/0x100 [ 225.686006][ T9192] register_console+0xc2d/0x11b0 [ 225.686030][ T9192] univ8250_console_init+0x5f/0x90 [ 225.686056][ T9192] console_init+0x152/0x680 [ 225.686079][ T9192] start_kernel+0x29f/0x4e0 [ 225.686114][ T9192] x86_64_start_reservations+0x18/0x30 [ 225.686137][ T9192] x86_64_start_kernel+0x130/0x190 [ 225.686160][ T9192] common_startup_64+0x13e/0x148 [ 225.686184][ T9192] [ 225.686184][ T9192] -> #0 (console_owner){-...}-{0:0}: [ 225.686216][ T9192] __lock_acquire+0x126f/0x1c90 [ 225.686247][ T9192] lock_acquire+0x179/0x350 [ 225.686277][ T9192] console_lock_spinning_enable+0x72/0x80 [ 225.686302][ T9192] console_flush_all+0x7aa/0xc60 [ 225.686325][ T9192] console_unlock+0xd8/0x210 [ 225.686348][ T9192] vprintk_emit+0x3d7/0x680 [ 225.686371][ T9192] _printk+0xc7/0x100 [ 225.686400][ T9192] report_bug+0x435/0x580 [ 225.686424][ T9192] handle_bug+0x184/0x210 [ 225.686455][ T9192] exc_invalid_op+0x17/0x50 [ 225.686486][ T9192] asm_exc_invalid_op+0x1a/0x20 [ 225.686509][ T9192] update_rq_clock+0x34a/0xc70 [ 225.686533][ T9192] __schedule+0x27fc/0x5de0 [ 225.686558][ T9192] preempt_schedule_common+0x44/0xc0 [ 225.686586][ T9192] preempt_schedule_thunk+0x16/0x30 [ 225.686624][ T9192] _raw_spin_unlock_irq+0x44/0x50 [ 225.686650][ T9192] snd_rawmidi_write+0x48c/0xc10 [ 225.686685][ T9192] vfs_write+0x2a0/0x11d0 [ 225.686708][ T9192] ksys_write+0x1f8/0x250 [ 225.686733][ T9192] do_syscall_64+0xcd/0xfa0 [ 225.686759][ T9192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.686785][ T9192] [ 225.686785][ T9192] other info that might help us debug this: [ 225.686785][ T9192] [ 225.686792][ T9192] Chain exists of: [ 225.686792][ T9192] console_owner --> &p->pi_lock --> &rq->__lock [ 225.686792][ T9192] [ 225.686832][ T9192] Possible unsafe locking scenario: [ 225.686832][ T9192] [ 225.686839][ T9192] CPU0 CPU1 [ 225.686846][ T9192] ---- ---- [ 225.686854][ T9192] lock(&rq->__lock); [ 225.686875][ T9192] lock(&p->pi_lock); [ 225.686892][ T9192] lock(&rq->__lock); [ 225.686909][ T9192] lock(console_owner); [ 225.686924][ T9192] [ 225.686924][ T9192] *** DEADLOCK *** [ 225.686924][ T9192] [ 225.686930][ T9192] 3 locks held by syz.2.1240/9192: [ 225.686945][ T9192] #0: ffff8880b843a4d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 225.687010][ T9192] #1: ffffffff8e3b1c60 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100 [ 225.687074][ T9192] #2: ffffffff8e3b1cd0 (console_srcu){....}-{0:0}, at: console_flush_all+0x158/0xc60 [ 225.687132][ T9192] [ 225.687132][ T9192] stack backtrace: [ 225.687148][ T9192] CPU: 0 UID: 0 PID: 9192 Comm: syz.2.1240 Tainted: G I syzkaller #0 PREEMPT(full) [ 225.687186][ T9192] Tainted: [I]=FIRMWARE_WORKAROUND [ 225.687196][ T9192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 225.687213][ T9192] Call Trace: [ 225.687222][ T9192] [ 225.687232][ T9192] dump_stack_lvl+0x116/0x1f0 [ 225.687261][ T9192] print_circular_bug+0x275/0x350 [ 225.687303][ T9192] check_noncircular+0x14c/0x170 [ 225.687340][ T9192] __lock_acquire+0x126f/0x1c90 [ 225.687378][ T9192] lock_acquire+0x179/0x350 [ 225.687410][ T9192] ? console_lock_spinning_enable+0x61/0x80 [ 225.687438][ T9192] ? console_lock_spinning_enable+0x4a/0x80 [ 225.687467][ T9192] console_lock_spinning_enable+0x72/0x80 [ 225.687492][ T9192] ? console_lock_spinning_enable+0x61/0x80 [ 225.687518][ T9192] console_flush_all+0x7aa/0xc60 [ 225.687547][ T9192] ? __pfx_console_flush_all+0x10/0x10 [ 225.687578][ T9192] ? is_printk_cpu_sync_owner+0x32/0x40 [ 225.687610][ T9192] console_unlock+0xd8/0x210 [ 225.687634][ T9192] ? __pfx_console_unlock+0x10/0x10 [ 225.687659][ T9192] ? do_raw_spin_unlock+0xe0/0x230 [ 225.687683][ T9192] ? _printk+0xc7/0x100 [ 225.687715][ T9192] ? __down_trylock_console_sem+0xb0/0x140 [ 225.687754][ T9192] vprintk_emit+0x3d7/0x680 [ 225.687781][ T9192] ? __pfx_vprintk_emit+0x10/0x10 [ 225.687808][ T9192] ? __lock_acquire+0xb8a/0x1c90 [ 225.687843][ T9192] _printk+0xc7/0x100 [ 225.687875][ T9192] ? __pfx__printk+0x10/0x10 [ 225.687916][ T9192] ? report_bug+0x429/0x580 [ 225.687943][ T9192] ? update_rq_clock+0x34a/0xc70 [ 225.687971][ T9192] report_bug+0x435/0x580 [ 225.688002][ T9192] ? update_rq_clock+0x34a/0xc70 [ 225.688029][ T9192] handle_bug+0x184/0x210 [ 225.688061][ T9192] exc_invalid_op+0x17/0x50 [ 225.688099][ T9192] asm_exc_invalid_op+0x1a/0x20 [ 225.688123][ T9192] RIP: 0010:update_rq_clock+0x34a/0xc70 [ 225.688152][ T9192] Code: ab 48 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 88 f8 d6 09 a8 04 0f 84 9c fd ff ff 90 0f 0b 90 e9 93 fd ff ff 90 <0f> 0b 90 e9 4f fd ff ff 48 8d bb 18 0e 00 00 48 b8 00 00 00 00 00 [ 225.688177][ T9192] RSP: 0018:ffffc9000b217938 EFLAGS: 00010046 [ 225.688197][ T9192] RAX: 0000000000000000 RBX: ffff8880b853a4c0 RCX: 0000000000000001 [ 225.688215][ T9192] RDX: 0000000000000000 RSI: ffffffff8da03cc9 RDI: ffffffff8bf07940 [ 225.688231][ T9192] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff2104a7a [ 225.688248][ T9192] R10: ffffffff908253d7 R11: 0000000000000001 R12: ffffffff90828434 [ 225.688265][ T9192] R13: ffff88801d2dbc80 R14: ffff8880b853a4c0 R15: ffff8880b843afc8 [ 225.688291][ T9192] ? update_rq_clock+0x99/0xc70 [ 225.688319][ T9192] __schedule+0x27fc/0x5de0 [ 225.688347][ T9192] ? __pfx_try_to_wake_up+0x10/0x10 [ 225.688379][ T9192] ? __pfx___schedule+0x10/0x10 [ 225.688410][ T9192] ? do_raw_spin_lock+0x12c/0x2b0 [ 225.688449][ T9192] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 225.688487][ T9192] ? preempt_schedule_thunk+0x16/0x30 [ 225.688525][ T9192] preempt_schedule_common+0x44/0xc0 [ 225.688556][ T9192] preempt_schedule_thunk+0x16/0x30 [ 225.688596][ T9192] _raw_spin_unlock_irq+0x44/0x50 [ 225.688624][ T9192] snd_rawmidi_write+0x48c/0xc10 [ 225.688663][ T9192] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 225.688700][ T9192] ? __pfx_default_wake_function+0x10/0x10 [ 225.688728][ T9192] ? bpf_lsm_file_permission+0x9/0x10 [ 225.688763][ T9192] ? security_file_permission+0x71/0x210 [ 225.688796][ T9192] ? rw_verify_area+0xcf/0x6c0 [ 225.688821][ T9192] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 225.688856][ T9192] vfs_write+0x2a0/0x11d0 [ 225.688889][ T9192] ? __pfx_vfs_write+0x10/0x10 [ 225.688916][ T9192] ? find_held_lock+0x2b/0x80 [ 225.688941][ T9192] ? __fget_files+0x204/0x3c0 [ 225.688970][ T9192] ? __fget_files+0x20e/0x3c0 [ 225.689005][ T9192] ksys_write+0x1f8/0x250 [ 225.689032][ T9192] ? __pfx_ksys_write+0x10/0x10 [ 225.689064][ T9192] do_syscall_64+0xcd/0xfa0 [ 225.689095][ T9192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.689121][ T9192] RIP: 0033:0x7f7dea78f7c9 [ 225.689142][ T9192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.689166][ T9192] RSP: 002b:00007f7deb704038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 225.689189][ T9192] RAX: ffffffffffffffda RBX: 00007f7dea9e5fa0 RCX: 00007f7dea78f7c9 [ 225.689207][ T9192] RDX: 000000100000a3d9 RSI: 00002000000000c0 RDI: 0000000000000004 [ 225.689224][ T9192] RBP: 00007f7dea813f91 R08: 0000000000000000 R09: 0000000000000000 [ 225.689240][ T9192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.689256][ T9192] R13: 00007f7dea9e6038 R14: 00007f7dea9e5fa0 R15: 00007fff19655ee8 [ 225.689281][ T9192] [ 226.890748][ T9192] WARNING: CPU: 0 PID: 9192 at kernel/sched/sched.h:1538 update_rq_clock+0x34a/0xc70 [ 226.900254][ T9192] Modules linked in: [ 226.904159][ T9192] CPU: 0 UID: 0 PID: 9192 Comm: syz.2.1240 Tainted: G I syzkaller #0 PREEMPT(full) [ 226.915020][ T9192] Tainted: [I]=FIRMWARE_WORKAROUND [ 226.920132][ T9192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 226.930205][ T9192] RIP: 0010:update_rq_clock+0x34a/0xc70 [ 226.935769][ T9192] Code: ab 48 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 88 f8 d6 09 a8 04 0f 84 9c fd ff ff 90 0f 0b 90 e9 93 fd ff ff 90 <0f> 0b 90 e9 4f fd ff ff 48 8d bb 18 0e 00 00 48 b8 00 00 00 00 00 [ 226.955381][ T9192] RSP: 0018:ffffc9000b217938 EFLAGS: 00010046 [ 226.961451][ T9192] RAX: 0000000000000000 RBX: ffff8880b853a4c0 RCX: 0000000000000001 [ 226.969424][ T9192] RDX: 0000000000000000 RSI: ffffffff8da03cc9 RDI: ffffffff8bf07940 [ 226.977397][ T9192] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff2104a7a [ 226.985365][ T9192] R10: ffffffff908253d7 R11: 0000000000000001 R12: ffffffff90828434 [ 226.993336][ T9192] R13: ffff88801d2dbc80 R14: ffff8880b853a4c0 R15: ffff8880b843afc8 [ 227.001307][ T9192] FS: 00007f7deb7046c0(0000) GS:ffff888124a0d000(0000) knlGS:0000000000000000 [ 227.010241][ T9192] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 227.016859][ T9192] CR2: 0000200000430000 CR3: 000000007a180000 CR4: 00000000003526f0 [ 227.024833][ T9192] Call Trace: [ 227.028251][ T9192] [ 227.031184][ T9192] __schedule+0x27fc/0x5de0 [ 227.035701][ T9192] ? __pfx_try_to_wake_up+0x10/0x10 [ 227.041000][ T9192] ? __pfx___schedule+0x10/0x10 [ 227.045879][ T9192] ? do_raw_spin_lock+0x12c/0x2b0 [ 227.050959][ T9192] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 227.056374][ T9192] ? preempt_schedule_thunk+0x16/0x30 [ 227.061774][ T9192] preempt_schedule_common+0x44/0xc0 [ 227.067083][ T9192] preempt_schedule_thunk+0x16/0x30 [ 227.072303][ T9192] _raw_spin_unlock_irq+0x44/0x50 [ 227.077333][ T9192] snd_rawmidi_write+0x48c/0xc10 [ 227.082288][ T9192] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 227.087760][ T9192] ? __pfx_default_wake_function+0x10/0x10 [ 227.093575][ T9192] ? bpf_lsm_file_permission+0x9/0x10 [ 227.098951][ T9192] ? security_file_permission+0x71/0x210 [ 227.104592][ T9192] ? rw_verify_area+0xcf/0x6c0 [ 227.109363][ T9192] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 227.114833][ T9192] vfs_write+0x2a0/0x11d0 [ 227.119171][ T9192] ? __pfx_vfs_write+0x10/0x10 [ 227.124027][ T9192] ? find_held_lock+0x2b/0x80 [ 227.128711][ T9192] ? __fget_files+0x204/0x3c0 [ 227.133394][ T9192] ? __fget_files+0x20e/0x3c0 [ 227.138085][ T9192] ksys_write+0x1f8/0x250 [ 227.142421][ T9192] ? __pfx_ksys_write+0x10/0x10 [ 227.147285][ T9192] do_syscall_64+0xcd/0xfa0 [ 227.151817][ T9192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.157716][ T9192] RIP: 0033:0x7f7dea78f7c9 [ 227.162132][ T9192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.181744][ T9192] RSP: 002b:00007f7deb704038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 227.190169][ T9192] RAX: ffffffffffffffda RBX: 00007f7dea9e5fa0 RCX: 00007f7dea78f7c9 [ 227.198143][ T9192] RDX: 000000100000a3d9 RSI: 00002000000000c0 RDI: 0000000000000004 [ 227.206130][ T9192] RBP: 00007f7dea813f91 R08: 0000000000000000 R09: 0000000000000000 [ 227.214114][ T9192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.222089][ T9192] R13: 00007f7dea9e6038 R14: 00007f7dea9e5fa0 R15: 00007fff19655ee8 [ 227.230072][ T9192] [ 227.233524][ T9192] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 227.240806][ T9192] CPU: 0 UID: 0 PID: 9192 Comm: syz.2.1240 Tainted: G I syzkaller #0 PREEMPT(full) [ 227.251671][ T9192] Tainted: [I]=FIRMWARE_WORKAROUND [ 227.256768][ T9192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 227.266826][ T9192] Call Trace: [ 227.270103][ T9192] [ 227.273034][ T9192] dump_stack_lvl+0x3d/0x1f0 [ 227.277635][ T9192] vpanic+0x640/0x6f0 [ 227.281632][ T9192] ? update_rq_clock+0x34a/0xc70 [ 227.286575][ T9192] panic+0xca/0xd0 [ 227.290311][ T9192] ? __pfx_panic+0x10/0x10 [ 227.294746][ T9192] check_panic_on_warn+0xab/0xb0 [ 227.299703][ T9192] __warn+0xf6/0x3c0 [ 227.303608][ T9192] ? update_rq_clock+0x34a/0xc70 [ 227.308556][ T9192] report_bug+0x3c3/0x580 [ 227.312892][ T9192] ? update_rq_clock+0x34a/0xc70 [ 227.317836][ T9192] handle_bug+0x184/0x210 [ 227.322175][ T9192] exc_invalid_op+0x17/0x50 [ 227.326706][ T9192] asm_exc_invalid_op+0x1a/0x20 [ 227.331582][ T9192] RIP: 0010:update_rq_clock+0x34a/0xc70 [ 227.337145][ T9192] Code: ab 48 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 88 f8 d6 09 a8 04 0f 84 9c fd ff ff 90 0f 0b 90 e9 93 fd ff ff 90 <0f> 0b 90 e9 4f fd ff ff 48 8d bb 18 0e 00 00 48 b8 00 00 00 00 00 [ 227.356762][ T9192] RSP: 0018:ffffc9000b217938 EFLAGS: 00010046 [ 227.362842][ T9192] RAX: 0000000000000000 RBX: ffff8880b853a4c0 RCX: 0000000000000001 [ 227.370902][ T9192] RDX: 0000000000000000 RSI: ffffffff8da03cc9 RDI: ffffffff8bf07940 [ 227.378940][ T9192] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff2104a7a [ 227.386925][ T9192] R10: ffffffff908253d7 R11: 0000000000000001 R12: ffffffff90828434 [ 227.394899][ T9192] R13: ffff88801d2dbc80 R14: ffff8880b853a4c0 R15: ffff8880b843afc8 [ 227.402885][ T9192] ? update_rq_clock+0x99/0xc70 [ 227.407749][ T9192] __schedule+0x27fc/0x5de0 [ 227.412264][ T9192] ? __pfx_try_to_wake_up+0x10/0x10 [ 227.417475][ T9192] ? __pfx___schedule+0x10/0x10 [ 227.422335][ T9192] ? do_raw_spin_lock+0x12c/0x2b0 [ 227.427377][ T9192] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 227.432767][ T9192] ? preempt_schedule_thunk+0x16/0x30 [ 227.438161][ T9192] preempt_schedule_common+0x44/0xc0 [ 227.443454][ T9192] preempt_schedule_thunk+0x16/0x30 [ 227.448671][ T9192] _raw_spin_unlock_irq+0x44/0x50 [ 227.453728][ T9192] snd_rawmidi_write+0x48c/0xc10 [ 227.458694][ T9192] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 227.464168][ T9192] ? __pfx_default_wake_function+0x10/0x10 [ 227.469988][ T9192] ? bpf_lsm_file_permission+0x9/0x10 [ 227.475370][ T9192] ? security_file_permission+0x71/0x210 [ 227.481010][ T9192] ? rw_verify_area+0xcf/0x6c0 [ 227.485779][ T9192] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 227.491270][ T9192] vfs_write+0x2a0/0x11d0 [ 227.495626][ T9192] ? __pfx_vfs_write+0x10/0x10 [ 227.500409][ T9192] ? find_held_lock+0x2b/0x80 [ 227.505112][ T9192] ? __fget_files+0x204/0x3c0 [ 227.509803][ T9192] ? __fget_files+0x20e/0x3c0 [ 227.514507][ T9192] ksys_write+0x1f8/0x250 [ 227.518867][ T9192] ? __pfx_ksys_write+0x10/0x10 [ 227.523744][ T9192] do_syscall_64+0xcd/0xfa0 [ 227.528273][ T9192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.534181][ T9192] RIP: 0033:0x7f7dea78f7c9 [ 227.538602][ T9192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.558389][ T9192] RSP: 002b:00007f7deb704038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 227.566810][ T9192] RAX: ffffffffffffffda RBX: 00007f7dea9e5fa0 RCX: 00007f7dea78f7c9 [ 227.574784][ T9192] RDX: 000000100000a3d9 RSI: 00002000000000c0 RDI: 0000000000000004 [ 227.582758][ T9192] RBP: 00007f7dea813f91 R08: 0000000000000000 R09: 0000000000000000 [ 227.590816][ T9192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.598796][ T9192] R13: 00007f7dea9e6038 R14: 00007f7dea9e5fa0 R15: 00007fff19655ee8 [ 227.606805][ T9192] [ 227.610126][ T9192] Kernel Offset: disabled [ 227.614458][ T9192] Rebooting in 86400 seconds..