last executing test programs: 2.276604135s ago: executing program 0 (id=1022): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x10, &(0x7f0000000000)={0x0, 0xd6c6}, 0x2, 0x0, 0xe, 0x4}, 0x3}, 0x200, 0xb07e) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r0 = socket(0x2, 0x80802, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, 0x0, 0x20100, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) setsockopt$auto(r0, 0x11, 0x67, 0x0, 0x8) socket(0x10, 0x2, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2.201306011s ago: executing program 2 (id=1023): mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x0, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x5, 0x0) socket(0x1, 0x3, 0x0) r0 = socket(0xa, 0x1, 0x84) close_range$auto(0x0, 0x5, 0x0) io_uring_setup$auto(0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(r0, 0xc040aed4, r1) close_range$auto(0x2, r3, 0x0) close_range$auto(0x2, 0xa, 0x0) 2.178051236s ago: executing program 3 (id=1024): mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) pipe2$auto(0x0, 0x80) io_uring_setup$auto(0x82, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1a, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptye5\x00', 0x48002, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto(r1, 0x400455c8, r0) 2.121246834s ago: executing program 1 (id=1025): socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) socket(0x2a, 0x2, 0x1) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x108002, 0x0) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, 0x0, 0x8a141, 0x0) openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0) socketpair$auto(0x1, 0x4, 0x10010000, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, 0x0) 2.024951873s ago: executing program 0 (id=1026): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x106) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000380)='\x00', 0x163fdb7e) socketcall$auto_SYS_ACCEPT4(0x12, &(0x7f00000000c0)=0x1) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r0, 0x0, 0xd0) r1 = socket(0x2b, 0x1, 0x0) socket(0x2, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_MPATH(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)={0x14, 0x0, 0x301, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048090) sendmmsg$auto(r1, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x01\x00\xb6', 0x7f) 1.917468217s ago: executing program 3 (id=1027): mmap$auto(0x0, 0x4020008, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x900, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) r0 = open(0x0, 0x261c2, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x2000, 0x0) socket(0x26, 0x80805, 0x0) clone$auto(0x20003b4a, 0x8, 0x0, 0x0, 0x2) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r2, r1, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) bpf$auto(0x1, &(0x7f0000000380)=@raw_tracepoint={0x5, r0, 0x0, 0x6}, 0xc) 1.904855693s ago: executing program 2 (id=1028): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socket(0x2b, 0x1, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.3/usb4/4-0:1.0/bNumEndpoints\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) munmap$auto(0x1, 0x9) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) inotify_init1$auto(0x3000000000000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) setsockopt$auto(0x3, 0x0, 0x30, 0x0, 0x10001) ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x6, 0x50b301a, 0x2c, 0x2c, 0x0, 0x2}) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) 1.754509327s ago: executing program 3 (id=1029): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) geteuid() r0 = socket(0x10, 0x2, 0x4) socket(0x25, 0x1, 0x3) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e", @ANYRES32=r0, @ANYBLOB='\b'], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c001b"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.713731312s ago: executing program 1 (id=1030): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2a, 0x2, 0x1) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x1, 0xfffffffe}, 0x55) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0xa, 0x801, 0x106) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video41\x00', 0xe0a80, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0x4030ae7b, r1) 1.272064767s ago: executing program 0 (id=1031): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = open(&(0x7f0000000040)='.\x00', 0x100, 0x161) ioctl$auto_BCH_IOCTL_DEV_USAGE_V2(r0, 0xc020bc12, &(0x7f0000001340)={0x7fffffffffffffff, 0x7, 0x1, 0x0, '\x00', 0x9, 0x5, [{0x4, 0x492, 0x9}, {0x2, 0x47d, 0x5}, {0xc9a, 0x8, 0x20004}, {0x80000000, 0x1, 0x336f}, {0x2, 0x2, 0xd05c}, {0x8000000000000000, 0x10001, 0x5}]}) socket(0xa, 0x3, 0x3a) getdents64$auto(0x0, 0x0, 0x18) ioctl$auto(0x1, 0x8941, 0x8) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) getpid() syz_clone3(&(0x7f00000012c0)={0x200000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x3f}, &(0x7f0000000200), 0x0, &(0x7f00000002c0)=""/4096, 0x0}, 0x58) ioctl$auto_BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000200)=0x7fffffffffffffff) ioctl$auto_KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xeb) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x8001c01, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x7}, 0x3d55, 0x0) r1 = socketpair$auto(0x6, 0x6b080000, 0x10001, 0x0) ioctl$auto(0xffffffffffffffff, 0x4b72, r1) setsockopt$auto_SO_INCOMING_CPU(0xffffffffffffffff, 0x74c9, 0x31, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/13t\x00', 0x1) 1.19768576s ago: executing program 1 (id=1032): close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x11, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy1/force_tx_status\x00', 0x81300, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x783a06, 0x0) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="9aa2738b", @ANYRES16=0x0, @ANYBLOB="010029bd7000fbdbdf2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_MACSEC_CMD_ADD_RXSA(r2, 0x0, 0x4000) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x64008084}, 0x2000c082) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) 936.168657ms ago: executing program 1 (id=1033): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC0\x00', 0x802, 0x0) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/irq.pressure\x00', 0x101102, 0x0) socket(0xa, 0x801, 0x84) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/tty36\x00', 0x80000, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) open(0x0, 0x161342, 0x100) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r0, 0x0, 0xc3) 921.122096ms ago: executing program 0 (id=1034): mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/pci/00/03.0\x00', 0x181000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) 907.314789ms ago: executing program 2 (id=1035): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/sctp/remaddr\x00', 0xb00, 0x0) r1 = socket(0x2, 0x1, 0x106) setsockopt$auto(r1, 0x1, 0x10, 0x0, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mlock$auto(0x7c89, 0x47fff) r2 = getpgid(0xffffffffffffffff) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) tgkill$auto(r2, r3, 0x100) pread64$auto(r0, 0x0, 0xf469, 0xbc3ab41) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) setfsuid$auto(0x1) rseq$auto(&(0x7f0000000040)={0x1, 0x9, 0xd2c8a8c, 0x8, 0x0, 0xafb7, "5249b83db6d481689c965f1eebbc882263f00aa63eff5a3ed9062facfd290b8828c7e15c2632a54697f07b54bbfe1e3d0ba2be34568b5814da485e9bc5fdcf958047aadad1189f7608a0f56b150385d62c35b778893ee43ac988b46197aeaf1ede650815cb3d7188922e7c639a4f2e50b2708099603b22daef8e7847dad0bd1980c3a415947ca94d262ca53df02e1aa17b1f6430cc9e2c71bc22cdc24aa58b23d954ce6074fdd7d6477eff88c2a1daeb65442e80a8ada89a2cff68ad04a711df2b3772e448ee36e3ce78a4221b205ff2d355489c2f26dd8ef700308f3f62c68fdd48f5988425ed4a75"}, 0x8, 0x0, 0x3) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xc208ae62, 0x38) 805.587263ms ago: executing program 3 (id=1036): sigaltstack$auto(0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_clock\x00', 0xc0002, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYBLOB="01002dbd7000"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) 748.787435ms ago: executing program 1 (id=1037): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/route/flush\x00', 0x80401, 0x0) write$auto(r0, 0x0, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/afs/servers\x00', 0x100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000000c0)=""/99, 0x63) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x8841, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) lseek$auto(r3, 0x5, 0x0) getdents$auto(r3, 0x0, 0x62d4) setsockopt$auto_SO_PASSCRED(r2, 0x401, 0x10, &(0x7f0000000040)='/proc/self/net/afs/servers\x00', 0x7182f2ea) eventfd$auto(0x7fff) 584.647116ms ago: executing program 3 (id=1038): mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x1e, 0x1, 0x0) listen$auto(r0, 0x9) accept$auto(r0, 0x0, 0x0) close_range$auto(0x0, 0x5, 0x0) socket(0xa, 0x2, 0x0) r1 = socket(0x18, 0x5, 0x1) connect$auto(r1, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) close_range$auto(0x0, 0xfffff004, 0x2) socket(0xa, 0x2, 0x0) setitimer$auto(0x1, &(0x7f0000000000)={{0x2, 0x4}, {0x5, 0x6}}, 0x0) r2 = socket(0x18, 0x800, 0x1) connect$auto(r2, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) 472.682264ms ago: executing program 2 (id=1039): r0 = socket(0xa, 0x3, 0x3a) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r1, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) eventfd$auto(0x0) r2 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r2, @new_prog_fd=0x4, 0x4, @old_map_fd=r0}, 0xa3) 345.691263ms ago: executing program 0 (id=1040): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x10, &(0x7f0000000000)={0x0, 0xd6c6}, 0x2, 0x0, 0xe, 0x4}, 0x3}, 0x200, 0xb07e) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r0 = socket(0x2, 0x80802, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, 0x0, 0x20100, 0x0) setsockopt$auto(r0, 0x11, 0x67, 0x0, 0x8) socket(0x10, 0x2, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 253.233747ms ago: executing program 2 (id=1041): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101840, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r0 = open(0x0, 0x261c2, 0x84) r1 = userfaultfd$auto(0x1) statx$auto(r1, 0x0, 0x1000, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000280)=@bpf_attr_5={@target_ifindex=r5, r4, 0x8, 0x1, 0xffffffffffffffff, @relative_fd=r2, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f0000000340)=@raw_tracepoint={0x5, r0, 0x0, 0x2}, 0xc) 117.306563ms ago: executing program 0 (id=1042): accept$auto(0xffffffffffffffff, &(0x7f0000000000)=@sco={0x1f, @none}, &(0x7f0000000080)=0x8) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio1\x00', 0x18000, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bdi/7:10/min_ratio\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000140)='7\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) mmap$auto(0x7fffffffffffffff, 0x400005, 0xdf, 0xfffffffffffffff8, 0x2, 0x400) finit_module$auto(0x3, 0xfffffffffffffffe, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = socket(0x15, 0x5, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto(r1, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) 109.751968ms ago: executing program 3 (id=1043): mmap$auto(0x0, 0x2020009, 0xa4e2, 0xeb2, 0xfffffffffffffffb, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) socket(0xa, 0x1, 0x100) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x2404c000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd12/queue/iosched/async_depth\x00', 0x101102, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x48041, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x101380, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/profiling\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb) 30.659768ms ago: executing program 1 (id=1044): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = io_uring_setup$auto(0x5, 0x0) close_range$auto(0x2, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6d) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x4, 0x0, 0x7fff, 0x1}, 0x80000b}, 0x5, 0x20000000) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x8000fff5) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) dup2$auto(0x5, 0x4) 0s ago: executing program 2 (id=1045): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_score_adj\x00', 0x266481, 0x0) socket(0x24a278c9fa38b27a, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x8, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) dup$auto(r0) ioctl$auto_KVM_CREATE_VM(r1, 0x4048aecb, 0x0) kernel console output (not intermixed with test programs): 2011][ T7407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.572033][ T7407] RSP: 002b:00007fc1490ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.572058][ T7407] RAX: ffffffffffffffda RBX: 00007fc1483e5fa0 RCX: 00007fc14818f749 [ 170.572075][ T7407] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000007 [ 170.572098][ T7407] RBP: 00007fc148213f91 R08: 0000000000000000 R09: 0000000000000000 [ 170.572114][ T7407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.572128][ T7407] R13: 00007fc1483e6038 R14: 00007fc1483e5fa0 R15: 00007ffe7580c078 [ 170.572166][ T7407] [ 170.620065][ T5838] Bluetooth: hci1: unexpected event 0x1d length: 6 > 5 [ 171.289897][ T7430] FAULT_INJECTION: forcing a failure. [ 171.289897][ T7430] name failslab, interval 1, probability 0, space 0, times 0 [ 171.311929][ T7430] CPU: 0 UID: 0 PID: 7430 Comm: syz.1.440 Not tainted syzkaller #0 PREEMPT(full) [ 171.311951][ T7430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 171.311960][ T7430] Call Trace: [ 171.311965][ T7430] [ 171.311971][ T7430] dump_stack_lvl+0x16c/0x1f0 [ 171.311994][ T7430] should_fail_ex+0x512/0x640 [ 171.312023][ T7430] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 171.312044][ T7430] should_failslab+0xc2/0x120 [ 171.312063][ T7430] __kvmalloc_node_noprof+0x141/0x9c0 [ 171.312081][ T7430] ? kvm_recalculate_apic_map+0x220/0x1570 [ 171.312109][ T7430] ? kvm_recalculate_apic_map+0x220/0x1570 [ 171.312129][ T7430] kvm_recalculate_apic_map+0x220/0x1570 [ 171.312158][ T7430] ? find_held_lock+0x2b/0x80 [ 171.312172][ T7430] ? __pfx_kvm_recalculate_apic_map+0x10/0x10 [ 171.312193][ T7430] ? __might_fault+0xe3/0x190 [ 171.312212][ T7430] kvm_apic_set_state+0x411/0xdd0 [ 171.312233][ T7430] kvm_arch_vcpu_ioctl+0x17b7/0x5510 [ 171.312251][ T7430] ? stack_trace_save+0x8e/0xc0 [ 171.312268][ T7430] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 171.312282][ T7430] ? stack_depot_save_flags+0x29/0x9c0 [ 171.312304][ T7430] ? __lock_acquire+0xb8a/0x1c90 [ 171.312323][ T7430] ? kasan_save_stack+0x42/0x60 [ 171.312339][ T7430] ? kasan_save_stack+0x33/0x60 [ 171.312354][ T7430] ? kasan_save_track+0x14/0x30 [ 171.312370][ T7430] ? __kasan_save_free_info+0x3b/0x60 [ 171.312382][ T7430] ? __kasan_slab_free+0x5f/0x80 [ 171.312397][ T7430] ? kfree+0x2b8/0x6d0 [ 171.312407][ T7430] ? tomoyo_path_number_perm+0x470/0x580 [ 171.312421][ T7430] ? security_file_ioctl+0x9b/0x240 [ 171.312434][ T7430] ? do_syscall_64+0xcd/0xfa0 [ 171.312453][ T7430] ? __lock_acquire+0xb8a/0x1c90 [ 171.312477][ T7430] ? __mutex_trylock_common+0xe9/0x250 [ 171.312497][ T7430] ? __pfx___mutex_trylock_common+0x10/0x10 [ 171.312517][ T7430] ? __pfx___might_resched+0x10/0x10 [ 171.312533][ T7430] ? rcu_is_watching+0x12/0xc0 [ 171.312548][ T7430] ? trace_contention_end+0xdd/0x130 [ 171.312566][ T7430] ? __mutex_lock+0x1c5/0x1060 [ 171.312587][ T7430] ? kasan_quarantine_put+0x10a/0x240 [ 171.312604][ T7430] ? __pfx___mutex_lock+0x10/0x10 [ 171.312629][ T7430] ? tomoyo_path_number_perm+0x18d/0x580 [ 171.312646][ T7430] ? kvm_vcpu_ioctl+0x1235/0x1690 [ 171.312663][ T7430] kvm_vcpu_ioctl+0x1235/0x1690 [ 171.312684][ T7430] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 171.312703][ T7430] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 171.312727][ T7430] ? do_vfs_ioctl+0x128/0x14f0 [ 171.312748][ T7430] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 171.312773][ T7430] ? find_held_lock+0x2b/0x80 [ 171.312787][ T7430] ? hook_file_ioctl_common+0x145/0x410 [ 171.312806][ T7430] ? __fget_files+0x20e/0x3c0 [ 171.312823][ T7430] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 171.312842][ T7430] __x64_sys_ioctl+0x18e/0x210 [ 171.312864][ T7430] do_syscall_64+0xcd/0xfa0 [ 171.312882][ T7430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.312896][ T7430] RIP: 0033:0x7fc13898f749 [ 171.312908][ T7430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.312922][ T7430] RSP: 002b:00007fc13984d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 171.312936][ T7430] RAX: ffffffffffffffda RBX: 00007fc138be5fa0 RCX: 00007fc13898f749 [ 171.312945][ T7430] RDX: 00002000000000c0 RSI: 000000004400ae8f RDI: 0000000000000004 [ 171.312953][ T7430] RBP: 00007fc138a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 171.312961][ T7430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.312969][ T7430] R13: 00007fc138be6038 R14: 00007fc138be5fa0 R15: 00007ffebf265d88 [ 171.312990][ T7430] [ 172.478937][ T7446] netlink: 13 bytes leftover after parsing attributes in process `syz.1.447'. [ 172.520381][ T7435] FAULT_INJECTION: forcing a failure. [ 172.520381][ T7435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.550018][ T7435] CPU: 1 UID: 0 PID: 7435 Comm: syz.3.445 Not tainted syzkaller #0 PREEMPT(full) [ 172.550055][ T7435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 172.550070][ T7435] Call Trace: [ 172.550078][ T7435] [ 172.550088][ T7435] dump_stack_lvl+0x16c/0x1f0 [ 172.550133][ T7435] should_fail_ex+0x512/0x640 [ 172.550174][ T7435] strncpy_from_user+0x3b/0x2e0 [ 172.550214][ T7435] keyctl_restrict_keyring+0xeb/0x250 [ 172.550252][ T7435] ? __pfx_keyctl_restrict_keyring+0x10/0x10 [ 172.550300][ T7435] __do_sys_keyctl+0x4c1/0x590 [ 172.550338][ T7435] do_syscall_64+0xcd/0xfa0 [ 172.550371][ T7435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.550397][ T7435] RIP: 0033:0x7f7a0038f749 [ 172.550417][ T7435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.550440][ T7435] RSP: 002b:00007f7a011e5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 172.550464][ T7435] RAX: ffffffffffffffda RBX: 00007f7a005e5fa0 RCX: 00007f7a0038f749 [ 172.550481][ T7435] RDX: 0000000000000002 RSI: fffffffffffffffd RDI: 000000000000001d [ 172.550496][ T7435] RBP: 00007f7a00413f91 R08: fffffffffffffffd R09: 0000000000000000 [ 172.550512][ T7435] R10: 0000000000000628 R11: 0000000000000246 R12: 0000000000000000 [ 172.550526][ T7435] R13: 00007f7a005e6038 R14: 00007f7a005e5fa0 R15: 00007ffca8d948e8 [ 172.550562][ T7435] [ 173.787119][ T7472] FAULT_INJECTION: forcing a failure. [ 173.787119][ T7472] name failslab, interval 1, probability 0, space 0, times 0 [ 173.830248][ T7472] CPU: 1 UID: 0 PID: 7472 Comm: syz.0.454 Not tainted syzkaller #0 PREEMPT(full) [ 173.830286][ T7472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 173.830302][ T7472] Call Trace: [ 173.830311][ T7472] [ 173.830321][ T7472] dump_stack_lvl+0x16c/0x1f0 [ 173.830359][ T7472] should_fail_ex+0x512/0x640 [ 173.830398][ T7472] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 173.830431][ T7472] should_failslab+0xc2/0x120 [ 173.830463][ T7472] __kvmalloc_node_noprof+0x141/0x9c0 [ 173.830494][ T7472] ? kvm_recalculate_apic_map+0x220/0x1570 [ 173.830541][ T7472] ? kvm_recalculate_apic_map+0x220/0x1570 [ 173.830578][ T7472] kvm_recalculate_apic_map+0x220/0x1570 [ 173.830630][ T7472] ? find_held_lock+0x2b/0x80 [ 173.830656][ T7472] ? __pfx_kvm_recalculate_apic_map+0x10/0x10 [ 173.830693][ T7472] ? __might_fault+0xe3/0x190 [ 173.830728][ T7472] kvm_apic_set_state+0x411/0xdd0 [ 173.830765][ T7472] kvm_arch_vcpu_ioctl+0x17b7/0x5510 [ 173.830798][ T7472] ? stack_trace_save+0x8e/0xc0 [ 173.830828][ T7472] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 173.830855][ T7472] ? stack_depot_save_flags+0x29/0x9c0 [ 173.830893][ T7472] ? __lock_acquire+0xb8a/0x1c90 [ 173.830929][ T7472] ? kasan_save_stack+0x42/0x60 [ 173.830957][ T7472] ? kasan_save_stack+0x33/0x60 [ 173.830983][ T7472] ? kasan_save_track+0x14/0x30 [ 173.831010][ T7472] ? __kasan_save_free_info+0x3b/0x60 [ 173.831033][ T7472] ? __kasan_slab_free+0x5f/0x80 [ 173.831061][ T7472] ? kfree+0x2b8/0x6d0 [ 173.831080][ T7472] ? tomoyo_path_number_perm+0x470/0x580 [ 173.831111][ T7472] ? security_file_ioctl+0x9b/0x240 [ 173.831137][ T7472] ? do_syscall_64+0xcd/0xfa0 [ 173.831173][ T7472] ? __lock_acquire+0xb8a/0x1c90 [ 173.831220][ T7472] ? __mutex_trylock_common+0xe9/0x250 [ 173.831255][ T7472] ? __pfx___mutex_trylock_common+0x10/0x10 [ 173.831290][ T7472] ? __pfx___might_resched+0x10/0x10 [ 173.831319][ T7472] ? rcu_is_watching+0x12/0xc0 [ 173.831346][ T7472] ? trace_contention_end+0xdd/0x130 [ 173.831380][ T7472] ? __mutex_lock+0x1c5/0x1060 [ 173.831417][ T7472] ? kasan_quarantine_put+0x10a/0x240 [ 173.831449][ T7472] ? __pfx___mutex_lock+0x10/0x10 [ 173.831495][ T7472] ? tomoyo_path_number_perm+0x18d/0x580 [ 173.831526][ T7472] ? kvm_vcpu_ioctl+0x1235/0x1690 [ 173.831557][ T7472] kvm_vcpu_ioctl+0x1235/0x1690 [ 173.831596][ T7472] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 173.831630][ T7472] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 173.831672][ T7472] ? do_vfs_ioctl+0x128/0x14f0 [ 173.831708][ T7472] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 173.831755][ T7472] ? find_held_lock+0x2b/0x80 [ 173.831780][ T7472] ? hook_file_ioctl_common+0x145/0x410 [ 173.831815][ T7472] ? __fget_files+0x20e/0x3c0 [ 173.831847][ T7472] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 173.831882][ T7472] __x64_sys_ioctl+0x18e/0x210 [ 173.831921][ T7472] do_syscall_64+0xcd/0xfa0 [ 173.831953][ T7472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.831977][ T7472] RIP: 0033:0x7f65cc78f749 [ 173.831999][ T7472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.832022][ T7472] RSP: 002b:00007f65cd635038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 173.832047][ T7472] RAX: ffffffffffffffda RBX: 00007f65cc9e5fa0 RCX: 00007f65cc78f749 [ 173.832065][ T7472] RDX: 00002000000000c0 RSI: 000000004400ae8f RDI: 0000000000000004 [ 173.832081][ T7472] RBP: 00007f65cc813f91 R08: 0000000000000000 R09: 0000000000000000 [ 173.832096][ T7472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.832118][ T7472] R13: 00007f65cc9e6038 R14: 00007f65cc9e5fa0 R15: 00007fffd7036598 [ 173.832154][ T7472] [ 174.677396][ T5838] Bluetooth: hci3: unexpected event 0x20 length: 123 > 7 [ 174.748086][ T7491] sd 0:0:1:0: PR command failed: 1026 [ 174.767519][ T7491] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 174.796627][ T7491] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 175.028147][ T7489] FAULT_INJECTION: forcing a failure. [ 175.028147][ T7489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.046958][ T7489] CPU: 0 UID: 0 PID: 7489 Comm: syz.0.460 Not tainted syzkaller #0 PREEMPT(full) [ 175.046993][ T7489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 175.047008][ T7489] Call Trace: [ 175.047016][ T7489] [ 175.047025][ T7489] dump_stack_lvl+0x16c/0x1f0 [ 175.047060][ T7489] should_fail_ex+0x512/0x640 [ 175.047103][ T7489] strncpy_from_user+0x3b/0x2e0 [ 175.047140][ T7489] keyctl_restrict_keyring+0xeb/0x250 [ 175.047173][ T7489] ? __pfx_keyctl_restrict_keyring+0x10/0x10 [ 175.047208][ T7489] ? xfd_validate_state+0x61/0x180 [ 175.047248][ T7489] __do_sys_keyctl+0x4c1/0x590 [ 175.047288][ T7489] do_syscall_64+0xcd/0xfa0 [ 175.047321][ T7489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.047346][ T7489] RIP: 0033:0x7f65cc78f749 [ 175.047367][ T7489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.047390][ T7489] RSP: 002b:00007f65cd635038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 175.047414][ T7489] RAX: ffffffffffffffda RBX: 00007f65cc9e5fa0 RCX: 00007f65cc78f749 [ 175.047430][ T7489] RDX: 0000000000000002 RSI: fffffffffffffffd RDI: 000000000000001d [ 175.047446][ T7489] RBP: 00007f65cc813f91 R08: fffffffffffffffd R09: 0000000000000000 [ 175.047461][ T7489] R10: 0000000000000628 R11: 0000000000000246 R12: 0000000000000000 [ 175.047476][ T7489] R13: 00007f65cc9e6038 R14: 00007f65cc9e5fa0 R15: 00007fffd7036598 [ 175.047512][ T7489] [ 175.204287][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.228511][ T7507] netlink: 314 bytes leftover after parsing attributes in process `syz.3.467'. [ 176.430328][ T7512] netlink: 252 bytes leftover after parsing attributes in process `syz.0.469'. [ 176.441766][ T7512] netlink: 252 bytes leftover after parsing attributes in process `syz.0.469'. [ 176.533992][ T7515] program syz.2.468 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.372098][ T30] audit: type=1800 audit(1763900791.225:4): pid=7532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.476" name="lu_gp_id" dev="configfs" ino=15696 res=0 errno=0 [ 177.935346][ T7534] FAULT_INJECTION: forcing a failure. [ 177.935346][ T7534] name failslab, interval 1, probability 0, space 0, times 0 [ 177.991662][ T7534] CPU: 1 UID: 0 PID: 7534 Comm: syz.2.475 Not tainted syzkaller #0 PREEMPT(full) [ 177.991702][ T7534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 177.991718][ T7534] Call Trace: [ 177.991727][ T7534] [ 177.991736][ T7534] dump_stack_lvl+0x16c/0x1f0 [ 177.991779][ T7534] should_fail_ex+0x512/0x640 [ 177.991825][ T7534] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 177.991860][ T7534] should_failslab+0xc2/0x120 [ 177.991894][ T7534] kmem_cache_alloc_noprof+0x75/0x6e0 [ 177.991924][ T7534] ? __kernfs_new_node+0xd2/0x8e0 [ 177.991963][ T7534] ? __kernfs_new_node+0xd2/0x8e0 [ 177.991995][ T7534] __kernfs_new_node+0xd2/0x8e0 [ 177.992031][ T7534] ? __pfx___kernfs_new_node+0x10/0x10 [ 177.992076][ T7534] ? find_held_lock+0x2b/0x80 [ 177.992103][ T7534] ? kernfs_root+0xee/0x2a0 [ 177.992145][ T7534] kernfs_new_node+0x13c/0x1e0 [ 177.992188][ T7534] __kernfs_create_file+0x53/0x350 [ 177.992224][ T7534] sysfs_add_file_mode_ns+0x207/0x3c0 [ 177.992264][ T7534] sysfs_merge_group+0x1aa/0x340 [ 177.992303][ T7534] ? __pfx_sysfs_merge_group+0x10/0x10 [ 177.992341][ T7534] ? __pfx_dev_add_physical_location+0x10/0x10 [ 177.992383][ T7534] ? bus_to_subsys+0x131/0x160 [ 177.992414][ T7534] dpm_sysfs_add+0x237/0x280 [ 177.992456][ T7534] device_add+0x9a6/0x1aa0 [ 177.992483][ T7534] ? __pfx_device_add+0x10/0x10 [ 177.992517][ T7534] ? kfree_const+0x55/0x60 [ 177.992549][ T7534] device_create_groups_vargs+0x1f8/0x270 [ 177.992577][ T7534] device_create+0xed/0x130 [ 177.992600][ T7534] ? __pfx_device_create+0x10/0x10 [ 177.992624][ T7534] ? do_init_timer+0xc9/0x110 [ 177.992652][ T7534] ? ieee80211_roc_setup+0x136/0x270 [ 177.992679][ T7534] ? ieee80211_alloc_hw_nm+0x231/0x22b0 [ 177.992718][ T7534] mac80211_hwsim_new_radio+0x36a/0x50b0 [ 177.992765][ T7534] ? __asan_memset+0x23/0x50 [ 177.992802][ T7534] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 177.992847][ T7534] hwsim_new_radio_nl+0xba2/0x1330 [ 177.992880][ T7534] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 177.992923][ T7534] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 177.992958][ T7534] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 177.993003][ T7534] genl_family_rcv_msg_doit+0x209/0x2f0 [ 177.993048][ T7534] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 177.993094][ T7534] ? bpf_lsm_capable+0x9/0x10 [ 177.993129][ T7534] ? security_capable+0x7e/0x260 [ 177.993165][ T7534] ? ns_capable+0xd7/0x110 [ 177.993199][ T7534] genl_rcv_msg+0x55c/0x800 [ 177.993235][ T7534] ? __pfx_genl_rcv_msg+0x10/0x10 [ 177.993271][ T7534] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 177.993304][ T7534] ? __lock_acquire+0x622/0x1c90 [ 177.993347][ T7534] netlink_rcv_skb+0x158/0x420 [ 177.993376][ T7534] ? __pfx_genl_rcv_msg+0x10/0x10 [ 177.993412][ T7534] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 177.993455][ T7534] ? netlink_deliver_tap+0x1ae/0xd30 [ 177.993491][ T7534] genl_rcv+0x28/0x40 [ 177.993518][ T7534] netlink_unicast+0x5aa/0x870 [ 177.993551][ T7534] ? __pfx_netlink_unicast+0x10/0x10 [ 177.993593][ T7534] netlink_sendmsg+0x8c8/0xdd0 [ 177.993629][ T7534] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.993662][ T7534] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 177.993708][ T7534] ____sys_sendmsg+0xa98/0xc70 [ 177.993741][ T7534] ? copy_msghdr_from_user+0x10a/0x160 [ 177.993767][ T7534] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.993809][ T7534] ? preempt_schedule_thunk+0x16/0x30 [ 177.993869][ T7534] ? try_to_wake_up+0xa67/0x1870 [ 177.993903][ T7534] ___sys_sendmsg+0x134/0x1d0 [ 177.993927][ T7534] ? find_held_lock+0x2b/0x80 [ 177.993957][ T7534] ? __pfx____sys_sendmsg+0x10/0x10 [ 177.993981][ T7534] ? __lock_acquire+0x622/0x1c90 [ 177.994107][ T7534] __sys_sendmsg+0x16d/0x220 [ 177.994135][ T7534] ? __pfx___sys_sendmsg+0x10/0x10 [ 177.994194][ T7534] ? __x64_sys_futex+0x1e0/0x4c0 [ 177.994251][ T7534] do_syscall_64+0xcd/0xfa0 [ 177.994307][ T7534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.994332][ T7534] RIP: 0033:0x7fc14818f749 [ 177.994357][ T7534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.994380][ T7534] RSP: 002b:00007fc1490ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.994411][ T7534] RAX: ffffffffffffffda RBX: 00007fc1483e5fa0 RCX: 00007fc14818f749 [ 177.994428][ T7534] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000006 [ 177.994443][ T7534] RBP: 00007fc148213f91 R08: 0000000000000000 R09: 0000000000000000 [ 177.994459][ T7534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.994477][ T7534] R13: 00007fc1483e6038 R14: 00007fc1483e5fa0 R15: 00007ffe7580c078 [ 177.994516][ T7534] [ 179.415817][ T7549] netlink: 'syz.2.480': attribute type 1 has an invalid length. [ 179.785383][ T7555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.481'. [ 179.808029][ T7555] netlink: 25 bytes leftover after parsing attributes in process `syz.1.481'. [ 180.053974][ T7558] input: jJǸ-9%vJ86 as /devices/virtual/input/input10 [ 180.117365][ T7560] usb usb24: usbfs: process 7560 (syz.1.482) did not claim interface 0 before use [ 180.358655][ T7566] program syz.0.483 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.469651][ T7564] FAULT_INJECTION: forcing a failure. [ 180.469651][ T7564] name failslab, interval 1, probability 0, space 0, times 0 [ 180.513187][ T7564] CPU: 0 UID: 0 PID: 7564 Comm: syz.2.484 Not tainted syzkaller #0 PREEMPT(full) [ 180.513224][ T7564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 180.513240][ T7564] Call Trace: [ 180.513249][ T7564] [ 180.513260][ T7564] dump_stack_lvl+0x16c/0x1f0 [ 180.513300][ T7564] should_fail_ex+0x512/0x640 [ 180.513337][ T7564] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 180.513368][ T7564] should_failslab+0xc2/0x120 [ 180.513405][ T7564] kmem_cache_alloc_noprof+0x75/0x6e0 [ 180.513432][ T7564] ? acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 180.513476][ T7564] ? acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 180.513509][ T7564] acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 180.513546][ T7564] acpi_ut_create_internal_object_dbg+0x51/0x270 [ 180.513585][ T7564] acpi_ut_create_integer_object+0x46/0xd0 [ 180.513628][ T7564] acpi_ex_read_data_from_field+0x146/0xd50 [ 180.513654][ T7564] ? acpi_ut_ptr_exit+0xfe/0x180 [ 180.513678][ T7564] ? acpi_ut_value_exit+0xff/0x180 [ 180.513708][ T7564] acpi_ex_resolve_node_to_value+0x767/0x9c0 [ 180.513743][ T7564] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 180.513778][ T7564] ? acpi_ds_create_operand+0x267/0xc30 [ 180.513818][ T7564] acpi_ex_resolve_to_value+0x509/0xcd0 [ 180.513849][ T7564] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 180.513877][ T7564] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 180.513903][ T7564] ? acpi_ut_track_stack_ptr+0x114/0x180 [ 180.513936][ T7564] acpi_ds_evaluate_name_path+0x311/0x4b0 [ 180.513974][ T7564] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 180.514014][ T7564] ? acpi_ps_get_next_namepath+0x202/0xa10 [ 180.514049][ T7564] ? acpi_ut_trace_ptr+0xe1/0x2a0 [ 180.514079][ T7564] acpi_ds_exec_end_op+0xd99/0x1da0 [ 180.514120][ T7564] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 180.514160][ T7564] acpi_ps_parse_loop+0x5a6/0x2470 [ 180.514209][ T7564] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 180.514243][ T7564] ? kmem_cache_alloc_noprof+0x2a1/0x6e0 [ 180.514268][ T7564] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 180.514292][ T7564] ? acpi_ut_create_thread_state+0x6d/0x170 [ 180.514344][ T7564] acpi_ps_parse_aml+0x817/0x1170 [ 180.514390][ T7564] acpi_ps_execute_method+0x5c4/0xe90 [ 180.514425][ T7564] acpi_ns_evaluate+0x98c/0x16d0 [ 180.514462][ T7564] acpi_evaluate_object+0x4ca/0xdf0 [ 180.514506][ T7564] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 180.514542][ T7564] ? __mutex_trylock_common+0xe9/0x250 [ 180.514585][ T7564] acpi_evaluate_integer+0xdd/0x200 [ 180.514620][ T7564] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 180.514668][ T7564] ? __pfx_status_show+0x10/0x10 [ 180.514701][ T7564] status_show+0xa0/0x120 [ 180.514734][ T7564] ? __pfx_status_show+0x10/0x10 [ 180.514780][ T7564] dev_attr_show+0x56/0xe0 [ 180.514818][ T7564] ? __pfx_dev_attr_show+0x10/0x10 [ 180.514852][ T7564] sysfs_kf_seq_show+0x216/0x3e0 [ 180.514889][ T7564] seq_read_iter+0x50e/0x12d0 [ 180.514945][ T7564] kernfs_fop_read_iter+0x46c/0x610 [ 180.514971][ T7564] ? rw_verify_area+0xcf/0x6c0 [ 180.514999][ T7564] vfs_read+0x8bf/0xcf0 [ 180.515032][ T7564] ? __pfx___mutex_lock+0x10/0x10 [ 180.515064][ T7564] ? __pfx_vfs_read+0x10/0x10 [ 180.515117][ T7564] ksys_read+0x12a/0x250 [ 180.515144][ T7564] ? __pfx_ksys_read+0x10/0x10 [ 180.515183][ T7564] do_syscall_64+0xcd/0xfa0 [ 180.515216][ T7564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.515241][ T7564] RIP: 0033:0x7fc14818f749 [ 180.515262][ T7564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.515287][ T7564] RSP: 002b:00007fc1490ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 180.515311][ T7564] RAX: ffffffffffffffda RBX: 00007fc1483e5fa0 RCX: 00007fc14818f749 [ 180.515328][ T7564] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000005 [ 180.515343][ T7564] RBP: 00007fc148213f91 R08: 0000000000000000 R09: 0000000000000000 [ 180.515358][ T7564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.515373][ T7564] R13: 00007fc1483e6038 R14: 00007fc1483e5fa0 R15: 00007ffe7580c078 [ 180.515412][ T7564] [ 180.517792][ T7564] ACPI Error: Could not allocate an object descriptor (20250807/utobject-180) [ 181.006650][ T7564] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20250807/psparse-529) [ 181.557459][ T7572] netlink: 86 bytes leftover after parsing attributes in process `syz.3.486'. [ 181.642878][ T7578] netlink: 16 bytes leftover after parsing attributes in process `syz.0.487'. [ 182.673357][ T7597] input: jJǸ-9%vJ86 as /devices/virtual/input/input11 [ 182.695654][ T7597] usb usb24: usbfs: process 7597 (syz.2.496) did not claim interface 0 before use [ 182.959612][ T7603] hub 1-0:1.0: USB hub found [ 182.995299][ T7603] hub 1-0:1.0: 1 port detected [ 183.877851][ T7618] FAULT_INJECTION: forcing a failure. [ 183.877851][ T7618] name failslab, interval 1, probability 0, space 0, times 0 [ 183.901029][ T7618] CPU: 0 UID: 0 PID: 7618 Comm: syz.2.501 Not tainted syzkaller #0 PREEMPT(full) [ 183.901065][ T7618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 183.901079][ T7618] Call Trace: [ 183.901088][ T7618] [ 183.901099][ T7618] dump_stack_lvl+0x16c/0x1f0 [ 183.901137][ T7618] should_fail_ex+0x512/0x640 [ 183.901184][ T7618] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 183.901213][ T7618] should_failslab+0xc2/0x120 [ 183.901248][ T7618] kmem_cache_alloc_noprof+0x75/0x6e0 [ 183.901274][ T7618] ? proc_reg_open+0x23f/0x5f0 [ 183.901313][ T7618] ? proc_reg_open+0x23f/0x5f0 [ 183.901342][ T7618] proc_reg_open+0x23f/0x5f0 [ 183.901377][ T7618] do_dentry_open+0x982/0x1530 [ 183.901407][ T7618] ? __pfx_proc_reg_open+0x10/0x10 [ 183.901446][ T7618] vfs_open+0x82/0x3f0 [ 183.901485][ T7618] path_openat+0x1de4/0x2cb0 [ 183.901525][ T7618] ? __pfx_path_openat+0x10/0x10 [ 183.901555][ T7618] ? __lock_acquire+0xb8a/0x1c90 [ 183.901593][ T7618] do_filp_open+0x20b/0x470 [ 183.901621][ T7618] ? __pfx_do_filp_open+0x10/0x10 [ 183.901675][ T7618] ? alloc_fd+0x471/0x7d0 [ 183.901711][ T7618] do_sys_openat2+0x11b/0x1d0 [ 183.901746][ T7618] ? __pfx_do_sys_openat2+0x10/0x10 [ 183.901796][ T7618] __x64_sys_openat+0x174/0x210 [ 183.901827][ T7618] ? __pfx___x64_sys_openat+0x10/0x10 [ 183.901862][ T7618] ? syscall_user_dispatch+0x78/0x140 [ 183.901893][ T7618] do_syscall_64+0xcd/0xfa0 [ 183.901927][ T7618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.901953][ T7618] RIP: 0033:0x7fc14818f749 [ 183.901985][ T7618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.902007][ T7618] RSP: 002b:00007fc1490ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 183.902030][ T7618] RAX: ffffffffffffffda RBX: 00007fc1483e5fa0 RCX: 00007fc14818f749 [ 183.902045][ T7618] RDX: 0000000000008340 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 183.902059][ T7618] RBP: 00007fc148213f91 R08: 0000000000000000 R09: 0000000000000000 [ 183.902072][ T7618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.902084][ T7618] R13: 00007fc1483e6038 R14: 00007fc1483e5fa0 R15: 00007ffe7580c078 [ 183.902117][ T7618] [ 184.735183][ T5838] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 185.251489][ T7641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.507'. [ 185.328506][ T7638] netlink: 354 bytes leftover after parsing attributes in process `syz.3.507'. [ 186.796015][ T5833] Bluetooth: hci0: command 0x0419 tx timeout [ 186.998447][ T7656] FAULT_INJECTION: forcing a failure. [ 186.998447][ T7656] name failslab, interval 1, probability 0, space 0, times 0 [ 187.017151][ T7656] CPU: 1 UID: 0 PID: 7656 Comm: syz.1.511 Not tainted syzkaller #0 PREEMPT(full) [ 187.017196][ T7656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 187.017212][ T7656] Call Trace: [ 187.017220][ T7656] [ 187.017230][ T7656] dump_stack_lvl+0x16c/0x1f0 [ 187.017268][ T7656] should_fail_ex+0x512/0x640 [ 187.017306][ T7656] ? __kmalloc_cache_noprof+0x5f/0x780 [ 187.017335][ T7656] should_failslab+0xc2/0x120 [ 187.017368][ T7656] __kmalloc_cache_noprof+0x72/0x780 [ 187.017394][ T7656] ? kvm_set_irq_routing+0x24f/0x970 [ 187.017437][ T7656] ? kvm_set_irq_routing+0x24f/0x970 [ 187.017473][ T7656] kvm_set_irq_routing+0x24f/0x970 [ 187.017519][ T7656] kvm_arch_vm_ioctl+0x934/0x18b0 [ 187.017549][ T7656] ? __page_table_check_zero+0x346/0x5d0 [ 187.017579][ T7656] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 187.017613][ T7656] ? __lock_acquire+0x622/0x1c90 [ 187.017652][ T7656] ? __lock_acquire+0x622/0x1c90 [ 187.017695][ T7656] ? __lock_acquire+0x622/0x1c90 [ 187.017735][ T7656] ? __lock_acquire+0x622/0x1c90 [ 187.017792][ T7656] ? bpf_ksym_find+0x124/0x1c0 [ 187.017821][ T7656] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 187.017852][ T7656] ? is_bpf_text_address+0x94/0x1a0 [ 187.017886][ T7656] ? kernel_text_address+0x8d/0x100 [ 187.017908][ T7656] ? widen_string+0xdc/0x2d0 [ 187.017942][ T7656] ? __kernel_text_address+0xd/0x40 [ 187.017964][ T7656] ? unwind_get_return_address+0x59/0xa0 [ 187.017992][ T7656] ? arch_stack_walk+0xa6/0x100 [ 187.018032][ T7656] ? stack_trace_save+0x8e/0xc0 [ 187.018059][ T7656] ? __pfx_stack_trace_save+0x10/0x10 [ 187.018088][ T7656] ? stack_depot_save_flags+0x29/0x9c0 [ 187.018127][ T7656] ? __lock_acquire+0xb8a/0x1c90 [ 187.018162][ T7656] ? kasan_save_stack+0x42/0x60 [ 187.018196][ T7656] ? kasan_save_stack+0x33/0x60 [ 187.018223][ T7656] ? kasan_save_track+0x14/0x30 [ 187.018251][ T7656] ? __kasan_save_free_info+0x3b/0x60 [ 187.018275][ T7656] ? __kasan_slab_free+0x5f/0x80 [ 187.018304][ T7656] ? kfree+0x2b8/0x6d0 [ 187.018324][ T7656] ? tomoyo_path_number_perm+0x470/0x580 [ 187.018355][ T7656] kvm_vm_ioctl+0x1a91/0x3fd0 [ 187.018396][ T7656] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 187.018446][ T7656] ? kasan_quarantine_put+0x10a/0x240 [ 187.018474][ T7656] ? lockdep_hardirqs_on+0x7c/0x110 [ 187.018508][ T7656] ? find_held_lock+0x2b/0x80 [ 187.018535][ T7656] ? tomoyo_path_number_perm+0x295/0x580 [ 187.018565][ T7656] ? tomoyo_path_number_perm+0x18d/0x580 [ 187.018593][ T7656] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 187.018616][ T7656] ? futex_wake+0x1ad/0x530 [ 187.018664][ T7656] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 187.018706][ T7656] ? do_vfs_ioctl+0x128/0x14f0 [ 187.018742][ T7656] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 187.018789][ T7656] ? find_held_lock+0x2b/0x80 [ 187.018814][ T7656] ? hook_file_ioctl_common+0x145/0x410 [ 187.018848][ T7656] ? __fget_files+0x20e/0x3c0 [ 187.018879][ T7656] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 187.018905][ T7656] __x64_sys_ioctl+0x18e/0x210 [ 187.018938][ T7656] do_syscall_64+0xcd/0xfa0 [ 187.018967][ T7656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.018988][ T7656] RIP: 0033:0x7fc13898f749 [ 187.019008][ T7656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.019027][ T7656] RSP: 002b:00007fc13984d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 187.019048][ T7656] RAX: ffffffffffffffda RBX: 00007fc138be5fa0 RCX: 00007fc13898f749 [ 187.019063][ T7656] RDX: 0010000000000402 RSI: 000000000000ae60 RDI: 0000000000000003 [ 187.019076][ T7656] RBP: 00007fc138a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 187.019090][ T7656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.019103][ T7656] R13: 00007fc138be6038 R14: 00007fc138be5fa0 R15: 00007ffebf265d88 [ 187.019135][ T7656] [ 187.653221][ T7660] FAULT_INJECTION: forcing a failure. [ 187.653221][ T7660] name failslab, interval 1, probability 0, space 0, times 0 [ 187.666661][ T7660] CPU: 1 UID: 0 PID: 7660 Comm: syz.0.520 Not tainted syzkaller #0 PREEMPT(full) [ 187.666698][ T7660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 187.666713][ T7660] Call Trace: [ 187.666722][ T7660] [ 187.666733][ T7660] dump_stack_lvl+0x16c/0x1f0 [ 187.666769][ T7660] should_fail_ex+0x512/0x640 [ 187.666805][ T7660] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 187.666834][ T7660] should_failslab+0xc2/0x120 [ 187.666867][ T7660] kmem_cache_alloc_noprof+0x75/0x6e0 [ 187.666892][ T7660] ? __kernfs_new_node+0xd2/0x8e0 [ 187.666933][ T7660] ? __kernfs_new_node+0xd2/0x8e0 [ 187.666963][ T7660] __kernfs_new_node+0xd2/0x8e0 [ 187.667003][ T7660] ? __pfx___kernfs_new_node+0x10/0x10 [ 187.667044][ T7660] ? find_held_lock+0x2b/0x80 [ 187.667072][ T7660] ? kernfs_root+0xee/0x2a0 [ 187.667112][ T7660] kernfs_new_node+0x13c/0x1e0 [ 187.667165][ T7660] __kernfs_create_file+0x53/0x350 [ 187.667198][ T7660] sysfs_add_file_mode_ns+0x207/0x3c0 [ 187.667239][ T7660] sysfs_merge_group+0x1aa/0x340 [ 187.667276][ T7660] ? __pfx_sysfs_merge_group+0x10/0x10 [ 187.667315][ T7660] ? __pfx_dev_add_physical_location+0x10/0x10 [ 187.667355][ T7660] ? bus_to_subsys+0x131/0x160 [ 187.667386][ T7660] dpm_sysfs_add+0x237/0x280 [ 187.667426][ T7660] device_add+0x9a6/0x1aa0 [ 187.667453][ T7660] ? __pfx_device_add+0x10/0x10 [ 187.667483][ T7660] ? kfree_const+0x55/0x60 [ 187.667514][ T7660] device_create_groups_vargs+0x1f8/0x270 [ 187.667545][ T7660] device_create+0xed/0x130 [ 187.667571][ T7660] ? __pfx_device_create+0x10/0x10 [ 187.667598][ T7660] ? do_init_timer+0xc9/0x110 [ 187.667631][ T7660] ? ieee80211_roc_setup+0x136/0x270 [ 187.667661][ T7660] ? ieee80211_alloc_hw_nm+0x231/0x22b0 [ 187.667701][ T7660] mac80211_hwsim_new_radio+0x36a/0x50b0 [ 187.667746][ T7660] ? __asan_memset+0x23/0x50 [ 187.667775][ T7660] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 187.667815][ T7660] hwsim_new_radio_nl+0xba2/0x1330 [ 187.667848][ T7660] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 187.667887][ T7660] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 187.667922][ T7660] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 187.667965][ T7660] genl_family_rcv_msg_doit+0x209/0x2f0 [ 187.668001][ T7660] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 187.668048][ T7660] ? bpf_lsm_capable+0x9/0x10 [ 187.668080][ T7660] ? security_capable+0x7e/0x260 [ 187.668116][ T7660] ? ns_capable+0xd7/0x110 [ 187.668155][ T7660] genl_rcv_msg+0x55c/0x800 [ 187.668193][ T7660] ? __pfx_genl_rcv_msg+0x10/0x10 [ 187.668227][ T7660] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 187.668261][ T7660] ? __lock_acquire+0x622/0x1c90 [ 187.668301][ T7660] netlink_rcv_skb+0x158/0x420 [ 187.668328][ T7660] ? __pfx_genl_rcv_msg+0x10/0x10 [ 187.668362][ T7660] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 187.668406][ T7660] ? netlink_deliver_tap+0x1ae/0xd30 [ 187.668438][ T7660] genl_rcv+0x28/0x40 [ 187.668466][ T7660] netlink_unicast+0x5aa/0x870 [ 187.668499][ T7660] ? __pfx_netlink_unicast+0x10/0x10 [ 187.668542][ T7660] netlink_sendmsg+0x8c8/0xdd0 [ 187.668576][ T7660] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.668609][ T7660] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 187.668653][ T7660] ____sys_sendmsg+0xa98/0xc70 [ 187.668687][ T7660] ? copy_msghdr_from_user+0x10a/0x160 [ 187.668736][ T7660] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.668778][ T7660] ? __pfx_futex_wake_mark+0x10/0x10 [ 187.668826][ T7660] ___sys_sendmsg+0x134/0x1d0 [ 187.668849][ T7660] ? find_held_lock+0x2b/0x80 [ 187.668877][ T7660] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.668899][ T7660] ? __lock_acquire+0x622/0x1c90 [ 187.668978][ T7660] __sys_sendmsg+0x16d/0x220 [ 187.669005][ T7660] ? __pfx___sys_sendmsg+0x10/0x10 [ 187.669031][ T7660] ? __x64_sys_futex+0x1e0/0x4c0 [ 187.669087][ T7660] do_syscall_64+0xcd/0xfa0 [ 187.669122][ T7660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.669153][ T7660] RIP: 0033:0x7f65cc78f749 [ 187.669176][ T7660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.669200][ T7660] RSP: 002b:00007f65cd635038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.669225][ T7660] RAX: ffffffffffffffda RBX: 00007f65cc9e5fa0 RCX: 00007f65cc78f749 [ 187.669243][ T7660] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000006 [ 187.669259][ T7660] RBP: 00007f65cc813f91 R08: 0000000000000000 R09: 0000000000000000 [ 187.669275][ T7660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.669290][ T7660] R13: 00007f65cc9e6038 R14: 00007f65cc9e5fa0 R15: 00007fffd7036598 [ 187.669329][ T7660] [ 188.136742][ T7665] input: jJǸ-9%vJ86 as /devices/virtual/input/input12 [ 188.185328][ T7665] usb usb24: usbfs: process 7665 (syz.3.510) did not claim interface 0 before use [ 188.491788][ T7672] hub 1-0:1.0: USB hub found [ 188.562833][ T7672] hub 1-0:1.0: 1 port detected [ 188.927236][ T7683] random: crng reseeded on system resumption [ 189.320107][ T7692] netlink: 246 bytes leftover after parsing attributes in process `syz.2.523'. [ 189.766112][ C1] sd 0:0:1:0: [sda] tag#5205 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 189.776761][ C1] sd 0:0:1:0: [sda] tag#5205 CDB: Write(6) 0a 00 00 00 0b 00 00 00 00 00 00 00 [ 189.836328][ T7699] FAULT_INJECTION: forcing a failure. [ 189.836328][ T7699] name failslab, interval 1, probability 0, space 0, times 0 [ 189.863913][ T7699] CPU: 0 UID: 0 PID: 7699 Comm: syz.0.525 Not tainted syzkaller #0 PREEMPT(full) [ 189.863951][ T7699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 189.863966][ T7699] Call Trace: [ 189.863976][ T7699] [ 189.863986][ T7699] dump_stack_lvl+0x16c/0x1f0 [ 189.864024][ T7699] should_fail_ex+0x512/0x640 [ 189.864063][ T7699] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 189.864101][ T7699] should_failslab+0xc2/0x120 [ 189.864134][ T7699] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 189.864168][ T7699] ? apply_subsystem_event_filter+0x47f/0x17e0 [ 189.864212][ T7699] ? kstrdup+0x53/0x100 [ 189.864237][ T7699] kstrdup+0x53/0x100 [ 189.864265][ T7699] apply_subsystem_event_filter+0x47f/0x17e0 [ 189.864313][ T7699] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 189.864356][ T7699] ? _copy_from_user+0x59/0xd0 [ 189.864398][ T7699] subsystem_filter_write+0x95/0x120 [ 189.864435][ T7699] ? __pfx_subsystem_filter_write+0x10/0x10 [ 189.864469][ T7699] vfs_write+0x2a0/0x11d0 [ 189.864502][ T7699] ? __pfx___mutex_lock+0x10/0x10 [ 189.864533][ T7699] ? __pfx_vfs_write+0x10/0x10 [ 189.864571][ T7699] ? __fget_files+0x20e/0x3c0 [ 189.864608][ T7699] ksys_write+0x12a/0x250 [ 189.864635][ T7699] ? __pfx_ksys_write+0x10/0x10 [ 189.864674][ T7699] do_syscall_64+0xcd/0xfa0 [ 189.864707][ T7699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.864732][ T7699] RIP: 0033:0x7f65cc78f749 [ 189.864762][ T7699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.864786][ T7699] RSP: 002b:00007f65cd635038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 189.864811][ T7699] RAX: ffffffffffffffda RBX: 00007f65cc9e5fa0 RCX: 00007f65cc78f749 [ 189.864828][ T7699] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000006 [ 189.864843][ T7699] RBP: 00007f65cc813f91 R08: 0000000000000000 R09: 0000000000000000 [ 189.864859][ T7699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.864874][ T7699] R13: 00007f65cc9e6038 R14: 00007f65cc9e5fa0 R15: 00007fffd7036598 [ 189.864916][ T7699] [ 190.078624][ C0] vkms_vblank_simulate: vblank timer overrun [ 190.171533][ T7705] FAULT_INJECTION: forcing a failure. [ 190.171533][ T7705] name failslab, interval 1, probability 0, space 0, times 0 [ 190.193365][ T7705] CPU: 1 UID: 0 PID: 7705 Comm: syz.1.526 Not tainted syzkaller #0 PREEMPT(full) [ 190.193401][ T7705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 190.193414][ T7705] Call Trace: [ 190.193421][ T7705] [ 190.193432][ T7705] dump_stack_lvl+0x16c/0x1f0 [ 190.193464][ T7705] should_fail_ex+0x512/0x640 [ 190.193500][ T7705] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 190.193532][ T7705] should_failslab+0xc2/0x120 [ 190.193563][ T7705] __kvmalloc_node_noprof+0x141/0x9c0 [ 190.193588][ T7705] ? __pfx___debug_object_init+0x10/0x10 [ 190.193608][ T7705] ? bucket_table_alloc.isra.0+0x88/0x460 [ 190.193632][ T7705] ? bucket_table_alloc.isra.0+0x88/0x460 [ 190.193650][ T7705] bucket_table_alloc.isra.0+0x88/0x460 [ 190.193671][ T7705] rhashtable_init_noprof+0x41a/0x7e0 [ 190.193691][ T7705] ? __init_waitqueue_head+0xca/0x150 [ 190.193706][ T7705] rhltable_init_noprof+0x20/0x60 [ 190.193726][ T7705] sta_info_init+0x27/0x160 [ 190.193743][ T7705] ieee80211_alloc_hw_nm+0x87b/0x22b0 [ 190.193762][ T7705] ? __local_bh_enable_ip+0xa4/0x120 [ 190.193781][ T7705] mac80211_hwsim_new_radio+0x1d3/0x50b0 [ 190.193806][ T7705] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 190.193831][ T7705] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 190.193852][ T7705] hwsim_new_radio_nl+0xba2/0x1330 [ 190.193870][ T7705] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 190.193891][ T7705] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 190.193910][ T7705] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 190.193942][ T7705] genl_family_rcv_msg_doit+0x209/0x2f0 [ 190.193962][ T7705] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 190.193988][ T7705] ? bpf_lsm_capable+0x9/0x10 [ 190.194007][ T7705] ? security_capable+0x7e/0x260 [ 190.194028][ T7705] ? ns_capable+0xd7/0x110 [ 190.194044][ T7705] genl_rcv_msg+0x55c/0x800 [ 190.194064][ T7705] ? __pfx_genl_rcv_msg+0x10/0x10 [ 190.194082][ T7705] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 190.194104][ T7705] netlink_rcv_skb+0x158/0x420 [ 190.194119][ T7705] ? __pfx_genl_rcv_msg+0x10/0x10 [ 190.194137][ T7705] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 190.194161][ T7705] ? netlink_deliver_tap+0x1ae/0xd30 [ 190.194178][ T7705] genl_rcv+0x28/0x40 [ 190.194193][ T7705] netlink_unicast+0x5aa/0x870 [ 190.194211][ T7705] ? __pfx_netlink_unicast+0x10/0x10 [ 190.194233][ T7705] netlink_sendmsg+0x8c8/0xdd0 [ 190.194252][ T7705] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.194269][ T7705] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 190.194293][ T7705] ____sys_sendmsg+0xa98/0xc70 [ 190.194312][ T7705] ? copy_msghdr_from_user+0x10a/0x160 [ 190.194326][ T7705] ? __pfx_____sys_sendmsg+0x10/0x10 [ 190.194348][ T7705] ? __pfx_futex_wake_mark+0x10/0x10 [ 190.194373][ T7705] ___sys_sendmsg+0x134/0x1d0 [ 190.194385][ T7705] ? find_held_lock+0x2b/0x80 [ 190.194401][ T7705] ? __pfx____sys_sendmsg+0x10/0x10 [ 190.194413][ T7705] ? __lock_acquire+0x622/0x1c90 [ 190.194456][ T7705] __sys_sendmsg+0x16d/0x220 [ 190.194475][ T7705] ? __pfx___sys_sendmsg+0x10/0x10 [ 190.194488][ T7705] ? __x64_sys_futex+0x1e0/0x4c0 [ 190.194520][ T7705] do_syscall_64+0xcd/0xfa0 [ 190.194540][ T7705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.194555][ T7705] RIP: 0033:0x7fc13898f749 [ 190.194568][ T7705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.194581][ T7705] RSP: 002b:00007fc13984d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.194595][ T7705] RAX: ffffffffffffffda RBX: 00007fc138be5fa0 RCX: 00007fc13898f749 [ 190.194604][ T7705] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000006 [ 190.194613][ T7705] RBP: 00007fc138a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 190.194621][ T7705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.194629][ T7705] R13: 00007fc138be6038 R14: 00007fc138be5fa0 R15: 00007ffebf265d88 [ 190.194650][ T7705] [ 190.836281][ T7713] input: jJǸ-9%vJ86 as /devices/virtual/input/input13 [ 191.006231][ T7713] usb usb24: usbfs: process 7713 (syz.0.529) did not claim interface 0 before use [ 191.785399][ T7726] hub 1-0:1.0: USB hub found [ 191.808162][ T7726] hub 1-0:1.0: 1 port detected [ 191.852035][ T7728] netlink: 'syz.1.533': attribute type 4 has an invalid length. [ 191.879618][ T7728] netlink: 'syz.1.533': attribute type 5 has an invalid length. [ 191.904838][ T7728] netlink: 10 bytes leftover after parsing attributes in process `syz.1.533'. [ 193.278162][ T7746] bond0: option all_slaves_active: invalid value () [ 194.042738][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.049205][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.758739][ T7775] netlink: 338 bytes leftover after parsing attributes in process `syz.3.544'. [ 194.768167][ T7775] ipvlan1: entered allmulticast mode [ 194.773576][ T7775] veth0_vlan: entered allmulticast mode [ 194.939407][ T7778] input: f as /devices/virtual/input/input14 [ 195.187879][ T7784] netlink: 'syz.0.549': attribute type 10 has an invalid length. [ 195.203405][ T7784] netlink: 330 bytes leftover after parsing attributes in process `syz.0.549'. [ 195.528923][ T7799] hub 1-0:1.0: USB hub found [ 195.547197][ T7799] hub 1-0:1.0: 1 port detected [ 197.106596][ T7833] FAULT_INJECTION: forcing a failure. [ 197.106596][ T7833] name failslab, interval 1, probability 0, space 0, times 0 [ 197.133615][ T7833] CPU: 0 UID: 0 PID: 7833 Comm: syz.3.563 Not tainted syzkaller #0 PREEMPT(full) [ 197.133654][ T7833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 197.133670][ T7833] Call Trace: [ 197.133680][ T7833] [ 197.133690][ T7833] dump_stack_lvl+0x16c/0x1f0 [ 197.133729][ T7833] should_fail_ex+0x512/0x640 [ 197.133767][ T7833] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 197.133799][ T7833] should_failslab+0xc2/0x120 [ 197.133834][ T7833] kmem_cache_alloc_noprof+0x75/0x6e0 [ 197.133861][ T7833] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 197.133887][ T7833] ? acpi_ps_alloc_op+0x29d/0x360 [ 197.133920][ T7833] ? acpi_ps_alloc_op+0x29d/0x360 [ 197.133943][ T7833] acpi_ps_alloc_op+0x29d/0x360 [ 197.133974][ T7833] acpi_ps_get_next_namepath+0x369/0xa10 [ 197.134016][ T7833] ? __pfx_acpi_ps_get_next_namepath+0x10/0x10 [ 197.134055][ T7833] ? acpi_ut_status_exit+0x103/0x1c0 [ 197.134089][ T7833] acpi_ps_parse_loop+0xd4c/0x2470 [ 197.134140][ T7833] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 197.134176][ T7833] ? kmem_cache_alloc_noprof+0x2a1/0x6e0 [ 197.134201][ T7833] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 197.134225][ T7833] ? acpi_ut_create_thread_state+0x6d/0x170 [ 197.134286][ T7833] acpi_ps_parse_aml+0x817/0x1170 [ 197.134334][ T7833] acpi_ps_execute_method+0x5c4/0xe90 [ 197.134370][ T7833] acpi_ns_evaluate+0x98c/0x16d0 [ 197.134410][ T7833] acpi_evaluate_object+0x4ca/0xdf0 [ 197.134455][ T7833] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 197.134492][ T7833] ? __mutex_trylock_common+0xe9/0x250 [ 197.134536][ T7833] acpi_evaluate_integer+0xdd/0x200 [ 197.134567][ T7833] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 197.134616][ T7833] ? __pfx_status_show+0x10/0x10 [ 197.134648][ T7833] status_show+0xa0/0x120 [ 197.134681][ T7833] ? __pfx_status_show+0x10/0x10 [ 197.134726][ T7833] dev_attr_show+0x56/0xe0 [ 197.134765][ T7833] ? __pfx_dev_attr_show+0x10/0x10 [ 197.134799][ T7833] sysfs_kf_seq_show+0x216/0x3e0 [ 197.134836][ T7833] seq_read_iter+0x50e/0x12d0 [ 197.134892][ T7833] kernfs_fop_read_iter+0x46c/0x610 [ 197.134919][ T7833] ? rw_verify_area+0xcf/0x6c0 [ 197.134948][ T7833] vfs_read+0x8bf/0xcf0 [ 197.134980][ T7833] ? __pfx___mutex_lock+0x10/0x10 [ 197.135013][ T7833] ? __pfx_vfs_read+0x10/0x10 [ 197.135066][ T7833] ksys_read+0x12a/0x250 [ 197.135094][ T7833] ? __pfx_ksys_read+0x10/0x10 [ 197.135134][ T7833] do_syscall_64+0xcd/0xfa0 [ 197.135169][ T7833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.135196][ T7833] RIP: 0033:0x7f7a0038f749 [ 197.135218][ T7833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.135250][ T7833] RSP: 002b:00007f7a011e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 197.135276][ T7833] RAX: ffffffffffffffda RBX: 00007f7a005e5fa0 RCX: 00007f7a0038f749 [ 197.135294][ T7833] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000005 [ 197.135310][ T7833] RBP: 00007f7a00413f91 R08: 0000000000000000 R09: 0000000000000000 [ 197.135326][ T7833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.135341][ T7833] R13: 00007f7a005e6038 R14: 00007f7a005e5fa0 R15: 00007ffca8d948e8 [ 197.135380][ T7833] [ 197.136840][ T7833] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20250807/psparse-529) [ 197.633461][ T7843] netlink: 20 bytes leftover after parsing attributes in process `syz.0.567'. [ 197.703161][ T7843] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 198.699142][ T7864] netlink: 25 bytes leftover after parsing attributes in process `syz.0.574'. [ 198.811751][ T7866] netlink: 342 bytes leftover after parsing attributes in process `syz.3.575'. [ 198.961741][ T7872] netlink: 20 bytes leftover after parsing attributes in process `syz.3.578'. [ 199.013251][ T7872] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 199.046761][ T7874] netlink: 338 bytes leftover after parsing attributes in process `syz.0.579'. [ 199.074687][ T7874] ipvlan1: entered allmulticast mode [ 199.108910][ T7874] veth0_vlan: entered allmulticast mode [ 199.339838][ T7870] FAULT_INJECTION: forcing a failure. [ 199.339838][ T7870] name failslab, interval 1, probability 0, space 0, times 0 [ 199.400851][ T7870] CPU: 0 UID: 0 PID: 7870 Comm: syz.1.577 Not tainted syzkaller #0 PREEMPT(full) [ 199.400889][ T7870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 199.400906][ T7870] Call Trace: [ 199.400915][ T7870] [ 199.400925][ T7870] dump_stack_lvl+0x16c/0x1f0 [ 199.400959][ T7870] should_fail_ex+0x512/0x640 [ 199.400994][ T7870] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 199.401021][ T7870] should_failslab+0xc2/0x120 [ 199.401054][ T7870] kmem_cache_alloc_noprof+0x75/0x6e0 [ 199.401078][ T7870] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 199.401098][ T7870] ? acpi_ps_alloc_op+0x29d/0x360 [ 199.401128][ T7870] ? acpi_ps_alloc_op+0x29d/0x360 [ 199.401152][ T7870] acpi_ps_alloc_op+0x29d/0x360 [ 199.401177][ T7870] ? acpi_ut_status_exit+0x103/0x1c0 [ 199.401204][ T7870] acpi_ps_create_op+0x4bd/0xd30 [ 199.401241][ T7870] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 199.401268][ T7870] ? __pfx_acpi_ps_create_op+0x10/0x10 [ 199.401307][ T7870] ? acpi_ut_status_exit+0x103/0x1c0 [ 199.401350][ T7870] acpi_ps_parse_loop+0xf06/0x2470 [ 199.401400][ T7870] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 199.401437][ T7870] ? kmem_cache_alloc_noprof+0x2a1/0x6e0 [ 199.401458][ T7870] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 199.401480][ T7870] ? acpi_ut_create_thread_state+0x6d/0x170 [ 199.401522][ T7870] acpi_ps_parse_aml+0x817/0x1170 [ 199.401564][ T7870] acpi_ps_execute_method+0x5c4/0xe90 [ 199.401598][ T7870] acpi_ns_evaluate+0x98c/0x16d0 [ 199.401633][ T7870] acpi_evaluate_object+0x4ca/0xdf0 [ 199.401675][ T7870] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 199.401712][ T7870] ? __mutex_trylock_common+0xe9/0x250 [ 199.401754][ T7870] acpi_evaluate_integer+0xdd/0x200 [ 199.401783][ T7870] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 199.401825][ T7870] ? __pfx_status_show+0x10/0x10 [ 199.401854][ T7870] status_show+0xa0/0x120 [ 199.401884][ T7870] ? __pfx_status_show+0x10/0x10 [ 199.401928][ T7870] dev_attr_show+0x56/0xe0 [ 199.401966][ T7870] ? __pfx_dev_attr_show+0x10/0x10 [ 199.402000][ T7870] sysfs_kf_seq_show+0x216/0x3e0 [ 199.402038][ T7870] seq_read_iter+0x50e/0x12d0 [ 199.402093][ T7870] kernfs_fop_read_iter+0x46c/0x610 [ 199.402119][ T7870] ? rw_verify_area+0xcf/0x6c0 [ 199.402147][ T7870] vfs_read+0x8bf/0xcf0 [ 199.402177][ T7870] ? __pfx___mutex_lock+0x10/0x10 [ 199.402209][ T7870] ? __pfx_vfs_read+0x10/0x10 [ 199.402263][ T7870] ksys_read+0x12a/0x250 [ 199.402290][ T7870] ? __pfx_ksys_read+0x10/0x10 [ 199.402336][ T7870] do_syscall_64+0xcd/0xfa0 [ 199.402371][ T7870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.402399][ T7870] RIP: 0033:0x7fc13898f749 [ 199.402421][ T7870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.402446][ T7870] RSP: 002b:00007fc13984d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 199.402471][ T7870] RAX: ffffffffffffffda RBX: 00007fc138be5fa0 RCX: 00007fc13898f749 [ 199.402488][ T7870] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000005 [ 199.402503][ T7870] RBP: 00007fc138a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 199.402519][ T7870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.402534][ T7870] R13: 00007fc138be6038 R14: 00007fc138be5fa0 R15: 00007ffebf265d88 [ 199.402570][ T7870] [ 199.402699][ T7870] ACPI Error: [ 199.575012][ T7884] netlink: 246 bytes leftover after parsing attributes in process `syz.2.582'. [ 199.589629][ T7870] Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20250807/psparse-529) [ 199.968118][ T7837] delete_channel: no stack [ 200.294952][ T7892] FAULT_INJECTION: forcing a failure. [ 200.294952][ T7892] name failslab, interval 1, probability 0, space 0, times 0 [ 200.307967][ T7892] CPU: 1 UID: 0 PID: 7892 Comm: syz.0.584 Not tainted syzkaller #0 PREEMPT(full) [ 200.308003][ T7892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 200.308020][ T7892] Call Trace: [ 200.308029][ T7892] [ 200.308039][ T7892] dump_stack_lvl+0x16c/0x1f0 [ 200.308077][ T7892] should_fail_ex+0x512/0x640 [ 200.308113][ T7892] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 200.308145][ T7892] should_failslab+0xc2/0x120 [ 200.308180][ T7892] kmem_cache_alloc_noprof+0x75/0x6e0 [ 200.308206][ T7892] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 200.308231][ T7892] ? acpi_ut_create_generic_state+0x61/0xc0 [ 200.308284][ T7892] ? acpi_ut_create_generic_state+0x61/0xc0 [ 200.308323][ T7892] acpi_ut_create_generic_state+0x61/0xc0 [ 200.308361][ T7892] acpi_ds_result_push+0x2b7/0x660 [ 200.308396][ T7892] ? acpi_ds_obj_stack_pop+0x105/0x270 [ 200.308436][ T7892] acpi_ds_evaluate_name_path+0x229/0x4b0 [ 200.308473][ T7892] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 200.308508][ T7892] ? acpi_ps_get_next_namepath+0x202/0xa10 [ 200.308541][ T7892] ? acpi_ut_trace_ptr+0xe1/0x2a0 [ 200.308569][ T7892] acpi_ds_exec_end_op+0xd99/0x1da0 [ 200.308609][ T7892] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 200.308646][ T7892] acpi_ps_parse_loop+0x5a6/0x2470 [ 200.308693][ T7892] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 200.308727][ T7892] ? kmem_cache_alloc_noprof+0x2a1/0x6e0 [ 200.308753][ T7892] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 200.308776][ T7892] ? acpi_ut_create_thread_state+0x6d/0x170 [ 200.308827][ T7892] acpi_ps_parse_aml+0x817/0x1170 [ 200.308871][ T7892] acpi_ps_execute_method+0x5c4/0xe90 [ 200.308906][ T7892] acpi_ns_evaluate+0x98c/0x16d0 [ 200.308944][ T7892] acpi_evaluate_object+0x4ca/0xdf0 [ 200.308988][ T7892] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 200.309023][ T7892] ? __mutex_trylock_common+0xe9/0x250 [ 200.309065][ T7892] acpi_evaluate_integer+0xdd/0x200 [ 200.309094][ T7892] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 200.309137][ T7892] ? __pfx_status_show+0x10/0x10 [ 200.309170][ T7892] status_show+0xa0/0x120 [ 200.309203][ T7892] ? __pfx_status_show+0x10/0x10 [ 200.309261][ T7892] dev_attr_show+0x56/0xe0 [ 200.309303][ T7892] ? __pfx_dev_attr_show+0x10/0x10 [ 200.309334][ T7892] sysfs_kf_seq_show+0x216/0x3e0 [ 200.309370][ T7892] seq_read_iter+0x50e/0x12d0 [ 200.309423][ T7892] kernfs_fop_read_iter+0x46c/0x610 [ 200.309447][ T7892] ? rw_verify_area+0xcf/0x6c0 [ 200.309473][ T7892] vfs_read+0x8bf/0xcf0 [ 200.309503][ T7892] ? __pfx___mutex_lock+0x10/0x10 [ 200.309535][ T7892] ? __pfx_vfs_read+0x10/0x10 [ 200.309587][ T7892] ksys_read+0x12a/0x250 [ 200.309615][ T7892] ? __pfx_ksys_read+0x10/0x10 [ 200.309651][ T7892] do_syscall_64+0xcd/0xfa0 [ 200.309681][ T7892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.309706][ T7892] RIP: 0033:0x7f65cc78f749 [ 200.309726][ T7892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.309749][ T7892] RSP: 002b:00007f65cd635038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 200.309773][ T7892] RAX: ffffffffffffffda RBX: 00007f65cc9e5fa0 RCX: 00007f65cc78f749 [ 200.309789][ T7892] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000005 [ 200.309803][ T7892] RBP: 00007f65cc813f91 R08: 0000000000000000 R09: 0000000000000000 [ 200.309817][ T7892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.309831][ T7892] R13: 00007f65cc9e6038 R14: 00007f65cc9e5fa0 R15: 00007fffd7036598 [ 200.309869][ T7892] [ 200.309880][ T7892] ACPI Error: [ 200.592438][ T7903] netlink: 20 bytes leftover after parsing attributes in process `syz.2.589'. [ 200.619534][ T7892] Failed to extend the result stack (20250807/dswstate-130) [ 200.690923][ T7903] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 200.705185][ T7892] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20250807/psparse-529) [ 200.885470][ T7909] random: crng reseeded on system resumption [ 201.045535][ T7915] FAULT_INJECTION: forcing a failure. [ 201.045535][ T7915] name failslab, interval 1, probability 0, space 0, times 0 [ 201.060129][ T7915] CPU: 1 UID: 0 PID: 7915 Comm: syz.2.593 Not tainted syzkaller #0 PREEMPT(full) [ 201.060165][ T7915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 201.060180][ T7915] Call Trace: [ 201.060189][ T7915] [ 201.060200][ T7915] dump_stack_lvl+0x16c/0x1f0 [ 201.060236][ T7915] should_fail_ex+0x512/0x640 [ 201.060274][ T7915] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 201.060306][ T7915] should_failslab+0xc2/0x120 [ 201.060339][ T7915] kmem_cache_alloc_noprof+0x75/0x6e0 [ 201.060366][ T7915] ? ptlock_alloc+0x1f/0x70 [ 201.060411][ T7915] ? ptlock_alloc+0x1f/0x70 [ 201.060445][ T7915] ptlock_alloc+0x1f/0x70 [ 201.060481][ T7915] pte_alloc_one+0x84/0x350 [ 201.060510][ T7915] do_pte_missing+0x1acf/0x3ba0 [ 201.060549][ T7915] ? __thp_vma_allowable_orders+0x1c8/0xcd0 [ 201.060588][ T7915] ? __pmd_alloc+0x64f/0x8b0 [ 201.060625][ T7915] __handle_mm_fault+0x1556/0x2aa0 [ 201.060667][ T7915] ? mt_find+0x3e2/0xa20 [ 201.060701][ T7915] ? __pfx___handle_mm_fault+0x10/0x10 [ 201.060736][ T7915] ? __pfx_mt_find+0x10/0x10 [ 201.060789][ T7915] ? find_vma+0xbf/0x140 [ 201.060817][ T7915] ? __pfx_find_vma+0x10/0x10 [ 201.060850][ T7915] handle_mm_fault+0x589/0xd10 [ 201.060889][ T7915] ? __pkru_allows_pkey+0x21/0xb0 [ 201.060929][ T7915] do_user_addr_fault+0x7a6/0x1370 [ 201.060958][ T7915] ? rcu_is_watching+0x12/0xc0 [ 201.060998][ T7915] exc_page_fault+0x64/0xc0 [ 201.061031][ T7915] asm_exc_page_fault+0x26/0x30 [ 201.061058][ T7915] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 201.061097][ T7915] Code: c4 10 e9 84 3c 04 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 3c 04 00 66 66 [ 201.061121][ T7915] RSP: 0018:ffffc9000b407d60 EFLAGS: 00050202 [ 201.061143][ T7915] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000004 [ 201.061159][ T7915] RDX: fffff52001680fba RSI: 0000000000000000 RDI: ffffc9000b407dd0 [ 201.061176][ T7915] RBP: 0000000000000004 R08: 0000000000000001 R09: fffff52001680fba [ 201.061191][ T7915] R10: 0000000000000003 R11: 0000000000000001 R12: 0000000000000000 [ 201.061206][ T7915] R13: ffffc9000b407dd0 R14: 0000000000000000 R15: 0000000000000000 [ 201.061240][ T7915] _copy_from_user+0x98/0xd0 [ 201.061280][ T7915] do_sock_getsockopt+0x3ca/0x440 [ 201.061316][ T7915] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 201.061346][ T7915] ? __fget_files+0x204/0x3c0 [ 201.061374][ T7915] ? 0xffffffffff600000 [ 201.061408][ T7915] __sys_getsockopt+0x123/0x1b0 [ 201.061433][ T7915] ? 0xffffffffff600000 [ 201.061458][ T7915] __x64_sys_getsockopt+0xbd/0x160 [ 201.061480][ T7915] ? do_syscall_64+0x91/0xfa0 [ 201.061509][ T7915] ? lockdep_hardirqs_on+0x7c/0x110 [ 201.061543][ T7915] do_syscall_64+0xcd/0xfa0 [ 201.061574][ T7915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.061596][ T7915] RIP: 0033:0x7fc14818f749 [ 201.061613][ T7915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.061635][ T7915] RSP: 002b:00007fc1490ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 201.061657][ T7915] RAX: ffffffffffffffda RBX: 00007fc1483e5fa0 RCX: 00007fc14818f749 [ 201.061672][ T7915] RDX: 0000000000000005 RSI: 0000000000000114 RDI: 0000000000000006 [ 201.061686][ T7915] RBP: 00007fc148213f91 R08: 0000000000000000 R09: 0000000000000000 [ 201.061701][ T7915] R10: ffffffffff600000 R11: 0000000000000246 R12: 0000000000000000 [ 201.061716][ T7915] R13: 00007fc1483e6038 R14: 00007fc1483e5fa0 R15: 00007ffe7580c078 [ 201.061736][ T7915] ? 0xffffffffff600000 [ 201.061762][ T7915] [ 201.790170][ T7919] bond0: option all_slaves_active: invalid value (15) [ 202.917620][ T5833] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 202.917657][ T5833] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 202.933373][ T5833] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 202.933433][ T5833] Bluetooth: hci1: adv larger than maximum supported [ 202.941230][ T5833] Bluetooth: hci1: adv larger than maximum supported [ 202.949109][ T5833] Bluetooth: hci1: Malformed LE Event: 0x0d [ 203.060211][ T7954] netlink: 29 bytes leftover after parsing attributes in process `syz.2.606'. [ 203.068601][ T7950] FAULT_INJECTION: forcing a failure. [ 203.068601][ T7950] name failslab, interval 1, probability 0, space 0, times 0 [ 203.077909][ T5833] Bluetooth: hci3: unexpected event 0x02 length: 726 > 260 [ 203.094416][ T7950] CPU: 1 UID: 0 PID: 7950 Comm: syz.3.604 Not tainted syzkaller #0 PREEMPT(full) [ 203.094460][ T7950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 203.094475][ T7950] Call Trace: [ 203.094483][ T7950] [ 203.094493][ T7950] dump_stack_lvl+0x16c/0x1f0 [ 203.094530][ T7950] should_fail_ex+0x512/0x640 [ 203.094567][ T7950] ? __kmalloc_noprof+0xca/0x880 [ 203.094611][ T7950] should_failslab+0xc2/0x120 [ 203.094646][ T7950] __kmalloc_noprof+0xdd/0x880 [ 203.094686][ T7950] ? ops_init+0x77/0x5f0 [ 203.094717][ T7950] ? ops_init+0x77/0x5f0 [ 203.094741][ T7950] ops_init+0x77/0x5f0 [ 203.094771][ T7950] setup_net+0x100/0x390 [ 203.094806][ T7950] ? __pfx_setup_net+0x10/0x10 [ 203.094835][ T7950] ? debug_mutex_init+0x37/0x70 [ 203.094867][ T7950] copy_net_ns+0x2f8/0x690 [ 203.094902][ T7950] create_new_namespaces+0x3ea/0xa90 [ 203.094945][ T7950] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 203.094980][ T7950] ksys_unshare+0x45b/0xa40 [ 203.095014][ T7950] ? __pfx_ksys_unshare+0x10/0x10 [ 203.095048][ T7950] ? xfd_validate_state+0x61/0x180 [ 203.095092][ T7950] __x64_sys_unshare+0x31/0x40 [ 203.095124][ T7950] do_syscall_64+0xcd/0xfa0 [ 203.095157][ T7950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.095183][ T7950] RIP: 0033:0x7f7a0038f749 [ 203.095204][ T7950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.095230][ T7950] RSP: 002b:00007f7a011e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 203.095254][ T7950] RAX: ffffffffffffffda RBX: 00007f7a005e5fa0 RCX: 00007f7a0038f749 [ 203.095272][ T7950] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 203.095287][ T7950] RBP: 00007f7a00413f91 R08: 0000000000000000 R09: 0000000000000000 [ 203.095303][ T7950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.095316][ T7950] R13: 00007f7a005e6038 R14: 00007f7a005e5fa0 R15: 00007ffca8d948e8 [ 203.095353][ T7950] [ 204.069110][ T7975] netlink: 'syz.2.612': attribute type 29 has an invalid length. [ 204.080880][ T7975] netlink: 'syz.2.612': attribute type 30 has an invalid length. [ 204.088895][ T7975] netlink: 'syz.2.612': attribute type 31 has an invalid length. [ 204.102786][ T7975] netlink: 'syz.2.612': attribute type 32 has an invalid length. [ 204.111417][ T7975] netlink: 'syz.2.612': attribute type 33 has an invalid length. [ 204.121645][ T7975] netlink: 'syz.2.612': attribute type 35 has an invalid length. [ 204.129665][ T7975] netlink: 'syz.2.612': attribute type 37 has an invalid length. [ 204.142204][ T7975] netlink: 18 bytes leftover after parsing attributes in process `syz.2.612'. [ 204.872381][ T7997] FAULT_INJECTION: forcing a failure. [ 204.872381][ T7997] name failslab, interval 1, probability 0, space 0, times 0 [ 204.916161][ T7997] CPU: 0 UID: 0 PID: 7997 Comm: syz.3.620 Not tainted syzkaller #0 PREEMPT(full) [ 204.916198][ T7997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 204.916214][ T7997] Call Trace: [ 204.916223][ T7997] [ 204.916233][ T7997] dump_stack_lvl+0x16c/0x1f0 [ 204.916271][ T7997] should_fail_ex+0x512/0x640 [ 204.916308][ T7997] ? __kmalloc_noprof+0xca/0x880 [ 204.916351][ T7997] should_failslab+0xc2/0x120 [ 204.916384][ T7997] __kmalloc_noprof+0xdd/0x880 [ 204.916425][ T7997] ? create_ruleset+0x21/0x140 [ 204.916468][ T7997] ? create_ruleset+0x21/0x140 [ 204.916503][ T7997] create_ruleset+0x21/0x140 [ 204.916540][ T7997] landlock_merge_ruleset+0xbb/0x870 [ 204.916565][ T7997] ? prepare_creds+0x583/0x7d0 [ 204.916605][ T7997] __do_sys_landlock_restrict_self+0x2a2/0x910 [ 204.916648][ T7997] do_syscall_64+0xcd/0xfa0 [ 204.916681][ T7997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.916707][ T7997] RIP: 0033:0x7f7a0038f749 [ 204.916728][ T7997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.916754][ T7997] RSP: 002b:00007f7a011c4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 204.916779][ T7997] RAX: ffffffffffffffda RBX: 00007f7a005e6090 RCX: 00007f7a0038f749 [ 204.916797][ T7997] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005 [ 204.916812][ T7997] RBP: 00007f7a00413f91 R08: 0000000000000000 R09: 0000000000000000 [ 204.916828][ T7997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.916844][ T7997] R13: 00007f7a005e6128 R14: 00007f7a005e6090 R15: 00007ffca8d948e8 [ 204.916881][ T7997] [ 205.087181][ C0] vkms_vblank_simulate: vblank timer overrun [ 205.627268][ T8004] bond0: option all_slaves_active: invalid value () [ 206.984665][ T8021] ecryptfs_miscdev_write: Invalid packet size [192] [ 208.027920][ T8038] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input15 [ 208.569929][ T7983] delete_channel: no stack [ 209.099810][ T8056] netlink: 330 bytes leftover after parsing attributes in process `syz.1.637'. [ 210.106755][ T8069] netlink: 330 bytes leftover after parsing attributes in process `syz.2.641'. [ 210.135188][ T8073] random: crng reseeded on system resumption [ 210.164399][ T8069] : renamed from hsr0 (while UP) [ 210.205100][ T8069] : entered allmulticast mode [ 210.227632][ T8069] hsr_slave_0: entered allmulticast mode [ 210.253885][ T8069] hsr_slave_1: entered allmulticast mode [ 210.561574][ T8081] FAULT_INJECTION: forcing a failure. [ 210.561574][ T8081] name fail_futex, interval 1, probability 0, space 0, times 1 [ 210.575062][ T8081] CPU: 1 UID: 0 PID: 8081 Comm: syz.1.645 Not tainted syzkaller #0 PREEMPT(full) [ 210.575099][ T8081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 210.575114][ T8081] Call Trace: [ 210.575123][ T8081] [ 210.575133][ T8081] dump_stack_lvl+0x16c/0x1f0 [ 210.575170][ T8081] should_fail_ex+0x512/0x640 [ 210.575213][ T8081] should_fail_futex+0x4c/0x60 [ 210.575245][ T8081] futex_lock_pi_atomic+0x101/0xd50 [ 210.575288][ T8081] futex_lock_pi+0x23f/0x7c0 [ 210.575340][ T8081] ? __pfx_futex_lock_pi+0x10/0x10 [ 210.575377][ T8081] ? __futex_wait+0x24b/0x2f0 [ 210.575429][ T8081] ? futex_private_hash_put+0xd5/0x190 [ 210.575467][ T8081] ? __pfx_futex_wake_mark+0x10/0x10 [ 210.575520][ T8081] ? ksys_write+0x190/0x250 [ 210.575554][ T8081] do_futex+0x11a/0x350 [ 210.575586][ T8081] ? __pfx_do_futex+0x10/0x10 [ 210.575630][ T8081] __x64_sys_futex+0x1e0/0x4c0 [ 210.575664][ T8081] ? fput+0x9b/0xd0 [ 210.575695][ T8081] ? __pfx___x64_sys_futex+0x10/0x10 [ 210.575727][ T8081] ? xfd_validate_state+0x61/0x180 [ 210.575760][ T8081] ? __pfx_ksys_write+0x10/0x10 [ 210.575797][ T8081] do_syscall_64+0xcd/0xfa0 [ 210.575830][ T8081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.575855][ T8081] RIP: 0033:0x7fc13898f749 [ 210.575876][ T8081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.575899][ T8081] RSP: 002b:00007fc13984d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 210.575923][ T8081] RAX: ffffffffffffffda RBX: 00007fc138be5fa0 RCX: 00007fc13898f749 [ 210.575940][ T8081] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 210.575955][ T8081] RBP: 00007fc138a13f91 R08: 0000000000000000 R09: 000000008000fff5 [ 210.575971][ T8081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.575987][ T8081] R13: 00007fc138be6038 R14: 00007fc138be5fa0 R15: 00007ffebf265d88 [ 210.576022][ T8081] [ 211.638001][ T8092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.648'. [ 211.653704][ T8092] netlink: 354 bytes leftover after parsing attributes in process `syz.2.648'. [ 213.213218][ T8118] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16 [ 213.402289][ T8122] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3930829162 (15723316648 ns) > initial count (10539976056 ns). Using initial count to start timer. [ 213.783354][ T8119] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17 [ 214.694731][ T5833] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 214.694769][ T5833] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 214.709916][ T5833] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 214.709965][ T5833] Bluetooth: hci2: adv larger than maximum supported [ 214.717478][ T5833] Bluetooth: hci2: adv larger than maximum supported [ 214.724212][ T5833] Bluetooth: hci2: Malformed LE Event: 0x0d [ 214.872385][ T8159] netlink: 25 bytes leftover after parsing attributes in process `syz.2.666'. [ 214.921576][ T8156] netlink: 'syz.0.665': attribute type 2 has an invalid length. [ 214.929258][ T8156] netlink: 5 bytes leftover after parsing attributes in process `syz.0.665'. [ 215.899713][ T8167] FAULT_INJECTION: forcing a failure. [ 215.899713][ T8167] name failslab, interval 1, probability 0, space 0, times 0 [ 215.917994][ T8167] CPU: 1 UID: 0 PID: 8167 Comm: syz.2.669 Not tainted syzkaller #0 PREEMPT(full) [ 215.918034][ T8167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 215.918051][ T8167] Call Trace: [ 215.918060][ T8167] [ 215.918071][ T8167] dump_stack_lvl+0x16c/0x1f0 [ 215.918109][ T8167] should_fail_ex+0x512/0x640 [ 215.918147][ T8167] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 215.918180][ T8167] should_failslab+0xc2/0x120 [ 215.918222][ T8167] kmem_cache_alloc_noprof+0x75/0x6e0 [ 215.918250][ T8167] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 215.918277][ T8167] ? acpi_ut_create_generic_state+0x61/0xc0 [ 215.918333][ T8167] ? acpi_ut_create_generic_state+0x61/0xc0 [ 215.918372][ T8167] acpi_ut_create_generic_state+0x61/0xc0 [ 215.918412][ T8167] acpi_ds_result_push+0x2b7/0x660 [ 215.918451][ T8167] ? acpi_ds_obj_stack_pop+0x105/0x270 [ 215.918492][ T8167] acpi_ds_evaluate_name_path+0x229/0x4b0 [ 215.918532][ T8167] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 215.918573][ T8167] ? acpi_ps_get_next_namepath+0x202/0xa10 [ 215.918610][ T8167] ? acpi_ut_trace_ptr+0xe1/0x2a0 [ 215.918640][ T8167] acpi_ds_exec_end_op+0xd99/0x1da0 [ 215.918682][ T8167] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 215.918720][ T8167] acpi_ps_parse_loop+0x5a6/0x2470 [ 215.918770][ T8167] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 215.918806][ T8167] ? kmem_cache_alloc_noprof+0x2a1/0x6e0 [ 215.918831][ T8167] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 215.918856][ T8167] ? acpi_ut_create_thread_state+0x6d/0x170 [ 215.918907][ T8167] acpi_ps_parse_aml+0x817/0x1170 [ 215.918949][ T8167] acpi_ps_execute_method+0x5c4/0xe90 [ 215.918985][ T8167] acpi_ns_evaluate+0x98c/0x16d0 [ 215.919023][ T8167] acpi_evaluate_object+0x4ca/0xdf0 [ 215.919068][ T8167] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 215.919105][ T8167] ? __mutex_trylock_common+0xe9/0x250 [ 215.919158][ T8167] acpi_evaluate_integer+0xdd/0x200 [ 215.919240][ T8167] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 215.919297][ T8167] ? __pfx_status_show+0x10/0x10 [ 215.919350][ T8167] status_show+0xa0/0x120 [ 215.919391][ T8167] ? __pfx_status_show+0x10/0x10 [ 215.919437][ T8167] dev_attr_show+0x56/0xe0 [ 215.919478][ T8167] ? __pfx_dev_attr_show+0x10/0x10 [ 215.919513][ T8167] sysfs_kf_seq_show+0x216/0x3e0 [ 215.919555][ T8167] seq_read_iter+0x50e/0x12d0 [ 215.919612][ T8167] kernfs_fop_read_iter+0x46c/0x610 [ 215.919640][ T8167] ? rw_verify_area+0xcf/0x6c0 [ 215.919670][ T8167] vfs_read+0x8bf/0xcf0 [ 215.919703][ T8167] ? __pfx___mutex_lock+0x10/0x10 [ 215.919736][ T8167] ? __pfx_vfs_read+0x10/0x10 [ 215.919789][ T8167] ksys_read+0x12a/0x250 [ 215.919817][ T8167] ? __pfx_ksys_read+0x10/0x10 [ 215.919857][ T8167] do_syscall_64+0xcd/0xfa0 [ 215.919892][ T8167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.919919][ T8167] RIP: 0033:0x7fc14818f749 [ 215.919940][ T8167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.919966][ T8167] RSP: 002b:00007fc1490ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 215.919991][ T8167] RAX: ffffffffffffffda RBX: 00007fc1483e5fa0 RCX: 00007fc14818f749 [ 215.920010][ T8167] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000005 [ 215.920026][ T8167] RBP: 00007fc148213f91 R08: 0000000000000000 R09: 0000000000000000 [ 215.920042][ T8167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.920057][ T8167] R13: 00007fc1483e6038 R14: 00007fc1483e5fa0 R15: 00007ffe7580c078 [ 215.920096][ T8167] [ 215.920109][ T8167] ACPI Error: Failed to extend the result stack (20250807/dswstate-130) [ 216.274120][ T8167] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20250807/psparse-529) [ 216.433823][ T8173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.671'. [ 216.463387][ T8173] netlink: 17 bytes leftover after parsing attributes in process `syz.1.671'. [ 216.472607][ T8173] netlink: 2 bytes leftover after parsing attributes in process `syz.1.671'. [ 217.357725][ T5833] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 217.357764][ T5833] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 217.372738][ T5833] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 217.372766][ T5833] Bluetooth: hci0: adv larger than maximum supported [ 217.380363][ T5833] Bluetooth: hci0: adv larger than maximum supported [ 217.387273][ T5833] Bluetooth: hci0: Malformed LE Event: 0x0d [ 217.590732][ T8193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.679'. [ 219.339926][ T8223] FAULT_INJECTION: forcing a failure. [ 219.339926][ T8223] name failslab, interval 1, probability 0, space 0, times 0 [ 219.387087][ T8223] CPU: 0 UID: 0 PID: 8223 Comm: syz.2.686 Not tainted syzkaller #0 PREEMPT(full) [ 219.387123][ T8223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 219.387139][ T8223] Call Trace: [ 219.387148][ T8223] [ 219.387159][ T8223] dump_stack_lvl+0x16c/0x1f0 [ 219.387195][ T8223] should_fail_ex+0x512/0x640 [ 219.387233][ T8223] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 219.387263][ T8223] should_failslab+0xc2/0x120 [ 219.387295][ T8223] kmem_cache_alloc_noprof+0x75/0x6e0 [ 219.387319][ T8223] ? __pmd_alloc+0xbf/0x8b0 [ 219.387355][ T8223] ? __pmd_alloc+0xbf/0x8b0 [ 219.387386][ T8223] __pmd_alloc+0xbf/0x8b0 [ 219.387415][ T8223] ? find_held_lock+0x2b/0x80 [ 219.387444][ T8223] __handle_mm_fault+0xada/0x2aa0 [ 219.387489][ T8223] ? __pfx___handle_mm_fault+0x10/0x10 [ 219.387558][ T8223] handle_mm_fault+0x589/0xd10 [ 219.387604][ T8223] __get_user_pages+0x54e/0x3530 [ 219.387649][ T8223] ? down_read_killable+0x220/0x4b0 [ 219.387698][ T8223] ? __pfx___get_user_pages+0x10/0x10 [ 219.387745][ T8223] __gup_longterm_locked+0xa92/0x17e0 [ 219.387785][ T8223] ? is_bpf_text_address+0x8a/0x1a0 [ 219.387825][ T8223] ? __pfx___gup_longterm_locked+0x10/0x10 [ 219.387866][ T8223] ? find_held_lock+0x2b/0x80 [ 219.387900][ T8223] gup_fast_fallback+0xee2/0x22a0 [ 219.387939][ T8223] ? stack_trace_save+0x8e/0xc0 [ 219.387986][ T8223] ? __pfx_gup_fast_fallback+0x10/0x10 [ 219.388019][ T8223] ? __x64_sys_futex+0x1e0/0x4c0 [ 219.388053][ T8223] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.388096][ T8223] get_user_pages_fast+0xa7/0xf0 [ 219.388131][ T8223] ? __pfx_get_user_pages_fast+0x10/0x10 [ 219.388176][ T8223] get_futex_key+0x2c6/0x1560 [ 219.388212][ T8223] ? __pfx_get_futex_key+0x10/0x10 [ 219.388248][ T8223] ? kasan_save_track+0x14/0x30 [ 219.388277][ T8223] ? __kasan_kmalloc+0xaa/0xb0 [ 219.388309][ T8223] futex_lock_pi+0x1cc/0x7c0 [ 219.388353][ T8223] ? __pfx_futex_lock_pi+0x10/0x10 [ 219.388386][ T8223] ? lockdep_hardirqs_on+0x7c/0x110 [ 219.388452][ T8223] ? __pfx_futex_wake_mark+0x10/0x10 [ 219.388494][ T8223] ? do_futex+0xda/0x350 [ 219.388521][ T8223] ? write_comp_data+0x3/0x90 [ 219.388556][ T8223] do_futex+0x11a/0x350 [ 219.388588][ T8223] ? __pfx_do_futex+0x10/0x10 [ 219.388623][ T8223] ? rcu_is_watching+0x12/0xc0 [ 219.388658][ T8223] __x64_sys_futex+0x1e0/0x4c0 [ 219.388704][ T8223] ? handle_softirqs+0x5be/0x8e0 [ 219.388735][ T8223] ? __pfx___x64_sys_futex+0x10/0x10 [ 219.388773][ T8223] ? __pfx_handle_softirqs+0x10/0x10 [ 219.388809][ T8223] do_syscall_64+0xcd/0xfa0 [ 219.388843][ T8223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.388868][ T8223] RIP: 0033:0x7fc14818f749 [ 219.388890][ T8223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.388914][ T8223] RSP: 002b:00007fc1490ae038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 219.388939][ T8223] RAX: ffffffffffffffda RBX: 00007fc1483e5fa0 RCX: 00007fc14818f749 [ 219.388955][ T8223] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 219.388970][ T8223] RBP: 00007fc148213f91 R08: 0000000000000000 R09: 000000008000fff5 [ 219.388986][ T8223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.389001][ T8223] R13: 00007fc1483e6038 R14: 00007fc1483e5fa0 R15: 00007ffe7580c078 [ 219.389037][ T8223] [ 220.290451][ T8231] page: refcount:5 mapcount:4 mapping:0000000000000000 index:0x7f1f26046 pfn:0x78000 [ 220.301752][ T8231] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 220.311369][ T8231] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 220.357632][ T8231] raw: 00000007f1f26046 0000000000000000 0000000500000003 0000000000000000 [ 220.385321][ T8231] page dumped because: unmovable page [ 220.398131][ T8231] page_owner tracks the page as allocated [ 220.405747][ T8231] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 5824, tgid 5824 (syz-executor), ts 82438543253, free_ts 78799394038 [ 220.425763][ T8231] post_alloc_hook+0x1af/0x220 [ 220.430595][ T8231] get_page_from_freelist+0x10a3/0x3a30 [ 220.446001][ T8231] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 220.474108][ T8231] alloc_pages_mpol+0x1fb/0x550 [ 220.486981][ T8231] alloc_pages_noprof+0x131/0x390 [ 220.564005][ T8231] __vmalloc_node_range_noprof+0x6f8/0x1480 [ 220.580181][ T8231] vmalloc_user_noprof+0x9e/0xe0 [ 220.621563][ T8231] kcov_ioctl+0x4c/0x730 [ 220.636222][ T8231] __x64_sys_ioctl+0x18e/0x210 [ 220.642034][ T8231] do_syscall_64+0xcd/0xfa0 [ 220.648671][ T8231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.656133][ T8231] page last free pid 5818 tgid 5818 stack trace: [ 220.662762][ T8231] free_unref_folios+0xa31/0x1610 [ 220.673321][ T8231] folios_put_refs+0x4be/0x750 [ 220.682520][ T8231] free_pages_and_swap_cache+0x245/0x4a0 [ 220.689169][ T8231] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 220.706413][ T8231] tlb_finish_mmu+0x168/0x7c0 [ 220.778038][ T8231] vms_clear_ptes+0x55e/0x770 [ 220.784517][ T8231] vms_complete_munmap_vmas+0x1ca/0x970 [ 220.791796][ T8231] do_vmi_align_munmap+0x446/0x7e0 [ 220.797016][ T8231] do_vmi_munmap+0x204/0x3e0 [ 220.808967][ T8231] __vm_munmap+0x196/0x380 [ 220.814045][ T8231] __x64_sys_munmap+0x59/0x80 [ 220.819620][ T8231] do_syscall_64+0xcd/0xfa0 [ 220.826324][ T8231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.459761][ T8254] netlink: 25 bytes leftover after parsing attributes in process `syz.2.695'. [ 221.650052][ T8258] kAFS: unparsable volume name [ 223.286925][ T8286] Process accounting resumed [ 223.656454][ T8302] FAULT_INJECTION: forcing a failure. [ 223.656454][ T8302] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 223.679948][ T8302] CPU: 1 UID: 0 PID: 8302 Comm: syz.2.708 Not tainted syzkaller #0 PREEMPT(full) [ 223.679972][ T8302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 223.679982][ T8302] Call Trace: [ 223.679987][ T8302] [ 223.679993][ T8302] dump_stack_lvl+0x16c/0x1f0 [ 223.680017][ T8302] should_fail_ex+0x512/0x640 [ 223.680043][ T8302] should_fail_alloc_page+0xe7/0x130 [ 223.680065][ T8302] prepare_alloc_pages+0x3c2/0x610 [ 223.680088][ T8302] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 223.680107][ T8302] ? rcu_is_watching+0x12/0xc0 [ 223.680122][ T8302] ? trace_mm_page_alloc+0x11f/0x1a0 [ 223.680141][ T8302] ? __alloc_frozen_pages_noprof+0x292/0x2470 [ 223.680157][ T8302] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 223.680175][ T8302] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 223.680191][ T8302] ? __kernel_text_address+0xd/0x40 [ 223.680204][ T8302] ? unwind_get_return_address+0x59/0xa0 [ 223.680220][ T8302] ? arch_stack_walk+0xa6/0x100 [ 223.680245][ T8302] ? __pfx_stack_trace_save+0x10/0x10 [ 223.680259][ T8302] ? do_syscall_64+0xcd/0xfa0 [ 223.680280][ T8302] alloc_pages_bulk_noprof+0x77a/0x1410 [ 223.680295][ T8302] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 223.680322][ T8302] ? policy_nodemask+0xea/0x4e0 [ 223.680344][ T8302] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 223.680359][ T8302] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 223.680388][ T8302] kasan_populate_vmalloc+0x112/0x2d0 [ 223.680416][ T8302] ? alloc_vmap_area+0x8b5/0x29e0 [ 223.680439][ T8302] alloc_vmap_area+0x960/0x29e0 [ 223.680467][ T8302] ? __pfx_alloc_vmap_area+0x10/0x10 [ 223.680492][ T8302] __get_vm_area_node+0x1ca/0x330 [ 223.680515][ T8302] __vmalloc_node_range_noprof+0x271/0x1480 [ 223.680536][ T8302] ? zcomp_cpu_up_prepare+0x16a/0x360 [ 223.680558][ T8302] ? zcomp_cpu_up_prepare+0x16a/0x360 [ 223.680577][ T8302] ? rcu_read_unlock+0x17/0x60 [ 223.680595][ T8302] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 223.680620][ T8302] ? ___kmalloc_large_node+0x114/0x160 [ 223.680639][ T8302] ? lockdep_hardirqs_on+0x7c/0x110 [ 223.680662][ T8302] ? zcomp_cpu_up_prepare+0x16a/0x360 [ 223.680676][ T8302] __vmalloc_node_noprof+0xad/0xf0 [ 223.680696][ T8302] ? zcomp_cpu_up_prepare+0x16a/0x360 [ 223.680713][ T8302] zcomp_cpu_up_prepare+0x16a/0x360 [ 223.680728][ T8302] ? trace_cpuhp_multi_enter+0x189/0x200 [ 223.680746][ T8302] ? __pfx_zcomp_cpu_up_prepare+0x10/0x10 [ 223.680759][ T8302] cpuhp_invoke_callback+0x20d/0xa10 [ 223.680777][ T8302] ? __pfx_zcomp_cpu_up_prepare+0x10/0x10 [ 223.680795][ T8302] cpuhp_issue_call+0x1c0/0x980 [ 223.680816][ T8302] __cpuhp_state_add_instance_cpuslocked+0x1a4/0x3c0 [ 223.680840][ T8302] __cpuhp_state_add_instance+0xd7/0x2e0 [ 223.680859][ T8302] zcomp_create+0x39c/0x650 [ 223.680877][ T8302] disksize_store+0x2a0/0x670 [ 223.680897][ T8302] ? __pfx_disksize_store+0x10/0x10 [ 223.680912][ T8302] dev_attr_store+0x58/0x80 [ 223.680933][ T8302] ? __pfx_dev_attr_store+0x10/0x10 [ 223.680952][ T8302] sysfs_kf_write+0xf2/0x150 [ 223.680970][ T8302] kernfs_fop_write_iter+0x3af/0x570 [ 223.680983][ T8302] ? __pfx_sysfs_kf_write+0x10/0x10 [ 223.681001][ T8302] vfs_write+0x7d3/0x11d0 [ 223.681017][ T8302] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 223.681032][ T8302] ? __pfx___mutex_lock+0x10/0x10 [ 223.681051][ T8302] ? __pfx_vfs_write+0x10/0x10 [ 223.681080][ T8302] ksys_write+0x12a/0x250 [ 223.681096][ T8302] ? __pfx_ksys_write+0x10/0x10 [ 223.681117][ T8302] do_syscall_64+0xcd/0xfa0 [ 223.681136][ T8302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.681150][ T8302] RIP: 0033:0x7fc14818f749 [ 223.681163][ T8302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.681177][ T8302] RSP: 002b:00007fc1490ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 223.681192][ T8302] RAX: ffffffffffffffda RBX: 00007fc1483e5fa0 RCX: 00007fc14818f749 [ 223.681201][ T8302] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 223.681210][ T8302] RBP: 00007fc148213f91 R08: 0000000000000000 R09: 0000000000000000 [ 223.681225][ T8302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.681233][ T8302] R13: 00007fc1483e6038 R14: 00007fc1483e5fa0 R15: 00007ffe7580c078 [ 223.681255][ T8302] [ 223.681548][ T8302] syz.2.708: vmalloc error: size 8192, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 224.128376][ T8302] CPU: 1 UID: 0 PID: 8302 Comm: syz.2.708 Not tainted syzkaller #0 PREEMPT(full) [ 224.128409][ T8302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 224.128423][ T8302] Call Trace: [ 224.128431][ T8302] [ 224.128449][ T8302] dump_stack_lvl+0x16c/0x1f0 [ 224.128490][ T8302] warn_alloc+0x248/0x3a0 [ 224.128520][ T8302] ? __pfx_warn_alloc+0x10/0x10 [ 224.128543][ T8302] ? __get_vm_area_node+0x2cd/0x330 [ 224.128580][ T8302] ? __get_vm_area_node+0x2cd/0x330 [ 224.128606][ T8302] ? __get_vm_area_node+0x1dc/0x330 [ 224.128636][ T8302] ? __get_vm_area_node+0x208/0x330 [ 224.128676][ T8302] __vmalloc_node_range_noprof+0xaf5/0x1480 [ 224.128722][ T8302] ? zcomp_cpu_up_prepare+0x16a/0x360 [ 224.128758][ T8302] ? rcu_read_unlock+0x17/0x60 [ 224.128790][ T8302] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 224.128830][ T8302] ? ___kmalloc_large_node+0x114/0x160 [ 224.128864][ T8302] ? lockdep_hardirqs_on+0x7c/0x110 [ 224.128898][ T8302] ? zcomp_cpu_up_prepare+0x16a/0x360 [ 224.128923][ T8302] __vmalloc_node_noprof+0xad/0xf0 [ 224.128957][ T8302] ? zcomp_cpu_up_prepare+0x16a/0x360 [ 224.128988][ T8302] zcomp_cpu_up_prepare+0x16a/0x360 [ 224.129014][ T8302] ? trace_cpuhp_multi_enter+0x189/0x200 [ 224.129045][ T8302] ? __pfx_zcomp_cpu_up_prepare+0x10/0x10 [ 224.129070][ T8302] cpuhp_invoke_callback+0x20d/0xa10 [ 224.129100][ T8302] ? __pfx_zcomp_cpu_up_prepare+0x10/0x10 [ 224.129133][ T8302] cpuhp_issue_call+0x1c0/0x980 [ 224.129170][ T8302] __cpuhp_state_add_instance_cpuslocked+0x1a4/0x3c0 [ 224.129209][ T8302] __cpuhp_state_add_instance+0xd7/0x2e0 [ 224.129242][ T8302] zcomp_create+0x39c/0x650 [ 224.129269][ T8302] disksize_store+0x2a0/0x670 [ 224.129305][ T8302] ? __pfx_disksize_store+0x10/0x10 [ 224.129331][ T8302] dev_attr_store+0x58/0x80 [ 224.129366][ T8302] ? __pfx_dev_attr_store+0x10/0x10 [ 224.129398][ T8302] sysfs_kf_write+0xf2/0x150 [ 224.129430][ T8302] kernfs_fop_write_iter+0x3af/0x570 [ 224.129460][ T8302] ? __pfx_sysfs_kf_write+0x10/0x10 [ 224.129491][ T8302] vfs_write+0x7d3/0x11d0 [ 224.129519][ T8302] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 224.129546][ T8302] ? __pfx___mutex_lock+0x10/0x10 [ 224.129577][ T8302] ? __pfx_vfs_write+0x10/0x10 [ 224.129631][ T8302] ksys_write+0x12a/0x250 [ 224.129659][ T8302] ? __pfx_ksys_write+0x10/0x10 [ 224.129695][ T8302] do_syscall_64+0xcd/0xfa0 [ 224.129728][ T8302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.129753][ T8302] RIP: 0033:0x7fc14818f749 [ 224.129773][ T8302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.129796][ T8302] RSP: 002b:00007fc1490ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 224.129820][ T8302] RAX: ffffffffffffffda RBX: 00007fc1483e5fa0 RCX: 00007fc14818f749 [ 224.129836][ T8302] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 224.129850][ T8302] RBP: 00007fc148213f91 R08: 0000000000000000 R09: 0000000000000000 [ 224.129865][ T8302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.129879][ T8302] R13: 00007fc1483e6038 R14: 00007fc1483e5fa0 R15: 00007ffe7580c078 [ 224.129918][ T8302] [ 224.130027][ T8302] Mem-Info: [ 224.602441][ T8302] active_anon:4874 inactive_anon:2478 isolated_anon:0 [ 224.602441][ T8302] active_file:41169 inactive_file:39071 isolated_file:0 [ 224.602441][ T8302] unevictable:768 dirty:608 writeback:0 [ 224.602441][ T8302] slab_reclaimable:10974 slab_unreclaimable:92875 [ 224.602441][ T8302] mapped:25901 shmem:1428 pagetables:1161 [ 224.602441][ T8302] sec_pagetables:0 bounce:0 [ 224.602441][ T8302] kernel_misc_reclaimable:0 [ 224.602441][ T8302] free:1300880 free_pcp:18245 free_cma:0 [ 224.648602][ C1] vkms_vblank_simulate: vblank timer overrun [ 224.734139][ T8302] Node 0 active_anon:19496kB inactive_anon:9712kB active_file:164480kB inactive_file:156280kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:103604kB dirty:2428kB writeback:0kB shmem:4176kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11424kB pagetables:4380kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 224.766440][ C1] vkms_vblank_simulate: vblank timer overrun [ 224.775098][ T8302] Node 1 active_anon:0kB inactive_anon:0kB active_file:196kB inactive_file:4kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 224.804977][ C1] vkms_vblank_simulate: vblank timer overrun [ 224.814077][ T8302] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 224.844025][ C1] vkms_vblank_simulate: vblank timer overrun [ 224.858989][ T8302] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 224.864944][ T8302] Node 0 DMA32 free:1300928kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19496kB inactive_anon:9712kB active_file:164480kB inactive_file:156280kB unevictable:1536kB writepending:2428kB zspages:48kB present:3129332kB managed:2545064kB mlocked:0kB bounce:0kB free_pcp:45656kB local_pcp:24156kB free_cma:0kB [ 224.898852][ C1] vkms_vblank_simulate: vblank timer overrun [ 224.906291][ T8302] lowmem_reserve[]: 0 0 1 1 1 [ 224.911331][ T8302] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 224.941015][ C1] vkms_vblank_simulate: vblank timer overrun [ 224.956764][ T8302] lowmem_reserve[]: 0 0 0 0 0 [ 224.963593][ T8302] Node 1 Normal free:3888572kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:196kB inactive_file:4kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:27212kB local_pcp:12928kB free_cma:0kB [ 224.998450][ T8302] lowmem_reserve[]: 0 0 0 0 0 [ 225.011956][ T8302] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 225.028273][ T8302] Node 0 DMA32: 3989*4kB (UME) 1250*8kB (UM) 721*16kB (UME) 800*32kB (UME) 520*64kB (UME) 250*128kB (UME) 173*256kB (UME) 144*512kB (UME) 77*1024kB (UME) 41*2048kB (UME) 218*4096kB (UM) = 1302132kB [ 225.086741][ T8302] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 225.098928][ T8302] Node 1 Normal: 3*4kB (ME) 4*8kB (ME) 5*16kB (ME) 70*32kB (UME) 26*64kB (UME) 10*128kB (UME) 5*256kB (UM) 2*512kB (ME) 2*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3888572kB [ 225.176741][ T8302] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 225.200248][ T8302] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 225.249572][ T8302] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 225.311122][ T8302] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 225.390583][ T8302] 84591 total pagecache pages [ 225.421982][ T8302] 1 pages in swap cache [ 225.434004][ T8302] Free swap = 124992kB [ 225.439833][ T8302] Total swap = 124996kB [ 225.466400][ T8302] 2097051 pages RAM [ 225.472828][ T8302] 0 pages HighMem/MovableOnly [ 225.524372][ T8302] 428695 pages reserved [ 225.532890][ T8302] 0 pages cma reserved [ 225.545282][ T8302] Can't allocate a compression stream [ 225.575493][ T8302] zram: Cannot initialise lzo compressing backend [ 226.260216][ T8321] netlink: 25 bytes leftover after parsing attributes in process `syz.3.713'. [ 228.092926][ T8362] netlink: 25 bytes leftover after parsing attributes in process `syz.3.725'. [ 228.558694][ T30] audit: type=1800 audit(1763900842.671:5): pid=8369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.728" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 231.189726][ T8413] net_ratelimit: 2 callbacks suppressed [ 231.189746][ T8413] netlink: zone id is out of range [ 231.235949][ T8412] netlink: 28 bytes leftover after parsing attributes in process `syz.0.743'. [ 231.245095][ T8413] netlink: del zone limit has 4 unknown bytes [ 231.264383][ T8408] netlink: set zone limit has 8 unknown bytes [ 231.378946][ T8416] HfR: entered promiscuous mode [ 234.537001][ T8473] bond0: invalid ARP target specified [ 235.213737][ T8497] FAULT_INJECTION: forcing a failure. [ 235.213737][ T8497] name failslab, interval 1, probability 0, space 0, times 0 [ 235.243981][ T8497] CPU: 0 UID: 0 PID: 8497 Comm: syz.0.752 Not tainted syzkaller #0 PREEMPT(full) [ 235.244016][ T8497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 235.244032][ T8497] Call Trace: [ 235.244041][ T8497] [ 235.244052][ T8497] dump_stack_lvl+0x16c/0x1f0 [ 235.244091][ T8497] should_fail_ex+0x512/0x640 [ 235.244128][ T8497] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 235.244160][ T8497] should_failslab+0xc2/0x120 [ 235.244194][ T8497] kmem_cache_alloc_noprof+0x75/0x6e0 [ 235.244220][ T8497] ? mem_cgroup_css_alloc+0x5c/0x1e80 [ 235.244253][ T8497] ? mem_cgroup_css_alloc+0x5c/0x1e80 [ 235.244278][ T8497] mem_cgroup_css_alloc+0x5c/0x1e80 [ 235.244316][ T8497] cgroup_apply_control_enable+0x4b0/0xbb0 [ 235.244371][ T8497] cgroup_mkdir+0x5e0/0x1310 [ 235.244399][ T8497] ? __pfx_cgroup_mkdir+0x10/0x10 [ 235.244423][ T8497] kernfs_iop_mkdir+0x111/0x190 [ 235.244463][ T8497] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 235.244494][ T8497] vfs_mkdir+0x593/0x8c0 [ 235.244536][ T8497] do_mkdirat+0x304/0x3e0 [ 235.244576][ T8497] ? __pfx_do_mkdirat+0x10/0x10 [ 235.244608][ T8497] ? getname_flags.part.0+0x1c5/0x550 [ 235.244649][ T8497] __x64_sys_mkdir+0xef/0x140 [ 235.244679][ T8497] do_syscall_64+0xcd/0xfa0 [ 235.244711][ T8497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.244737][ T8497] RIP: 0033:0x7f65cc78f749 [ 235.244760][ T8497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.244784][ T8497] RSP: 002b:00007f65cd635038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 235.244808][ T8497] RAX: ffffffffffffffda RBX: 00007f65cc9e5fa0 RCX: 00007f65cc78f749 [ 235.244824][ T8497] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 235.244839][ T8497] RBP: 00007f65cc813f91 R08: 0000000000000000 R09: 0000000000000000 [ 235.244855][ T8497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.244869][ T8497] R13: 00007f65cc9e6038 R14: 00007f65cc9e5fa0 R15: 00007fffd7036598 [ 235.244903][ T8497] [ 235.454180][ C0] vkms_vblank_simulate: vblank timer overrun [ 235.497053][ T8480] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 235.518835][ T8480] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 235.561195][ T8480] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 235.588171][ T8480] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 235.602188][ T8480] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 235.611631][ T8480] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 236.295474][ T8506] ubi31: attaching mtd0 [ 236.332006][ T8506] ubi31: scanning is finished [ 236.336842][ T8506] ubi31: empty MTD device detected [ 236.776108][ T5833] Bluetooth: hci0: command 0x0419 tx timeout [ 236.845694][ T8506] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 236.872237][ T8506] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3518 bytes [ 236.895440][ T8506] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 236.902752][ T8506] ubi31: VID header offset: 514 (aligned 514), data offset: 578 [ 236.915319][ T8506] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 236.935157][ T8506] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 20 [ 236.948396][ T8506] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1341410036 [ 236.959036][ T8506] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 236.971297][ T8517] ubi31: background thread "ubi_bgt31d" started, PID 8517 [ 237.221590][ T8525] netlink: 25 bytes leftover after parsing attributes in process `syz.1.761'. [ 237.355874][ T8529] FAULT_INJECTION: forcing a failure. [ 237.355874][ T8529] name failslab, interval 1, probability 0, space 0, times 0 [ 237.368891][ T8529] CPU: 1 UID: 0 PID: 8529 Comm: syz.0.763 Not tainted syzkaller #0 PREEMPT(full) [ 237.368926][ T8529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 237.368942][ T8529] Call Trace: [ 237.368951][ T8529] [ 237.368961][ T8529] dump_stack_lvl+0x116/0x1f0 [ 237.368999][ T8529] should_fail_ex+0x512/0x640 [ 237.369043][ T8529] should_failslab+0xc2/0x120 [ 237.369078][ T8529] kmem_cache_alloc_noprof+0x75/0x6e0 [ 237.369103][ T8529] ? __send_signal_locked+0x159/0x12c0 [ 237.369146][ T8529] ? __send_signal_locked+0x159/0x12c0 [ 237.369180][ T8529] __send_signal_locked+0x159/0x12c0 [ 237.369218][ T8529] ? __lock_task_sighand+0x146/0x340 [ 237.369247][ T8529] do_send_specific+0x1e8/0x370 [ 237.369278][ T8529] ? __pfx_do_send_specific+0x10/0x10 [ 237.369306][ T8529] ? __task_pid_nr_ns+0x1f5/0x500 [ 237.369350][ T8529] do_rt_tgsigqueueinfo+0xa9/0x100 [ 237.369385][ T8529] __x64_sys_rt_tgsigqueueinfo+0x17a/0x210 [ 237.369421][ T8529] ? __pfx___x64_sys_rt_tgsigqueueinfo+0x10/0x10 [ 237.369475][ T8529] do_syscall_64+0xcd/0xfa0 [ 237.369517][ T8529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.369543][ T8529] RIP: 0033:0x7f65cc78f749 [ 237.369564][ T8529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.369589][ T8529] RSP: 002b:00007f65cd635038 EFLAGS: 00000246 ORIG_RAX: 0000000000000129 [ 237.369612][ T8529] RAX: ffffffffffffffda RBX: 00007f65cc9e5fa0 RCX: 00007f65cc78f749 [ 237.369630][ T8529] RDX: 0000000000000021 RSI: 000000000000023f RDI: 000000000000023e [ 237.369646][ T8529] RBP: 00007f65cc813f91 R08: 0000000000000000 R09: 0000000000000000 [ 237.369661][ T8529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.369677][ T8529] R13: 00007f65cc9e6038 R14: 00007f65cc9e5fa0 R15: 00007fffd7036598 [ 237.369710][ T8529] [ 237.585611][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 237.654699][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 237.660825][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 237.707664][ T8536] netlink: 25 bytes leftover after parsing attributes in process `syz.2.765'. [ 237.843300][ T1212] Process accounting resumed [ 238.854145][ T5838] Bluetooth: hci0: command 0x0419 tx timeout [ 239.621256][ T8558] random: crng reseeded on system resumption [ 239.635507][ T8558] Restarting kernel threads ... [ 239.642980][ T8558] Done restarting kernel threads. [ 239.649540][ T8558] FAULT_INJECTION: forcing a failure. [ 239.649540][ T8558] name failslab, interval 1, probability 0, space 0, times 0 [ 239.662533][ T8558] CPU: 1 UID: 0 PID: 8558 Comm: syz.1.774 Not tainted syzkaller #0 PREEMPT(full) [ 239.662566][ T8558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 239.662579][ T8558] Call Trace: [ 239.662588][ T8558] [ 239.662597][ T8558] dump_stack_lvl+0x16c/0x1f0 [ 239.662635][ T8558] should_fail_ex+0x512/0x640 [ 239.662673][ T8558] ? __kmalloc_cache_noprof+0x5f/0x780 [ 239.662702][ T8558] should_failslab+0xc2/0x120 [ 239.662734][ T8558] __kmalloc_cache_noprof+0x72/0x780 [ 239.662759][ T8558] ? do_raw_spin_lock+0x12c/0x2b0 [ 239.662796][ T8558] ? alloc_fdtable+0xbd/0x2d0 [ 239.662831][ T8558] ? alloc_fdtable+0xbd/0x2d0 [ 239.662852][ T8558] alloc_fdtable+0xbd/0x2d0 [ 239.662880][ T8558] dup_fd+0x83b/0xb90 [ 239.662922][ T8558] __do_sys_close_range+0x4ca/0x730 [ 239.662956][ T8558] ? __pfx___do_sys_close_range+0x10/0x10 [ 239.662986][ T8558] ? fput+0x9b/0xd0 [ 239.663026][ T8558] do_syscall_64+0xcd/0xfa0 [ 239.663058][ T8558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.663083][ T8558] RIP: 0033:0x7fc13898f749 [ 239.663104][ T8558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.663128][ T8558] RSP: 002b:00007fc13984d038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 239.663151][ T8558] RAX: ffffffffffffffda RBX: 00007fc138be5fa0 RCX: 00007fc13898f749 [ 239.663169][ T8558] RDX: 0000000000000006 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 239.663185][ T8558] RBP: 00007fc138a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 239.663201][ T8558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.663215][ T8558] R13: 00007fc138be6038 R14: 00007fc138be5fa0 R15: 00007ffebf265d88 [ 239.663251][ T8558] [ 239.720735][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 242.321019][ T8618] FAULT_INJECTION: forcing a failure. [ 242.321019][ T8618] name failslab, interval 1, probability 0, space 0, times 0 [ 242.349856][ T8618] CPU: 1 UID: 0 PID: 8618 Comm: syz.1.788 Not tainted syzkaller #0 PREEMPT(full) [ 242.349892][ T8618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 242.349908][ T8618] Call Trace: [ 242.349917][ T8618] [ 242.349927][ T8618] dump_stack_lvl+0x16c/0x1f0 [ 242.349962][ T8618] should_fail_ex+0x512/0x640 [ 242.350000][ T8618] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 242.350037][ T8618] should_failslab+0xc2/0x120 [ 242.350069][ T8618] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 242.350098][ T8618] ? ipv6_icmp_sysctl_init+0x26/0x190 [ 242.350130][ T8618] ? __kmalloc_node_track_caller_noprof+0x331/0x8a0 [ 242.350165][ T8618] ? kmemdup_noprof+0x29/0x60 [ 242.350198][ T8618] ? kmemdup_noprof+0x49/0x60 [ 242.350223][ T8618] kmemdup_noprof+0x29/0x60 [ 242.350251][ T8618] ipv6_icmp_sysctl_init+0x26/0x190 [ 242.350286][ T8618] ipv6_sysctl_net_init+0xb3/0x2b0 [ 242.350322][ T8618] ? __pfx_ipv6_sysctl_net_init+0x10/0x10 [ 242.350355][ T8618] ops_init+0x1e2/0x5f0 [ 242.350385][ T8618] setup_net+0x100/0x390 [ 242.350411][ T8618] ? __pfx_setup_net+0x10/0x10 [ 242.350440][ T8618] ? debug_mutex_init+0x37/0x70 [ 242.350472][ T8618] copy_net_ns+0x2f8/0x690 [ 242.350505][ T8618] create_new_namespaces+0x3ea/0xa90 [ 242.350543][ T8618] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 242.350574][ T8618] ksys_unshare+0x45b/0xa40 [ 242.350608][ T8618] ? __pfx_ksys_unshare+0x10/0x10 [ 242.350656][ T8618] __x64_sys_unshare+0x31/0x40 [ 242.350687][ T8618] do_syscall_64+0xcd/0xfa0 [ 242.350719][ T8618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.350745][ T8618] RIP: 0033:0x7fc13898f749 [ 242.350767][ T8618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.350791][ T8618] RSP: 002b:00007fc13984d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 242.350815][ T8618] RAX: ffffffffffffffda RBX: 00007fc138be5fa0 RCX: 00007fc13898f749 [ 242.350832][ T8618] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 242.350848][ T8618] RBP: 00007fc138a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 242.350864][ T8618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.350878][ T8618] R13: 00007fc138be6038 R14: 00007fc138be5fa0 R15: 00007ffebf265d88 [ 242.350910][ T8618] [ 242.837170][ T5163] Trying to write to read-only block-device sda1 [ 244.778808][ T8642] [U]  [ 244.781653][ T8642] [U] [ 244.784342][ T8642] [U] [ 244.787047][ T8642] [U] [ 244.790748][ T8642] [U] [ 244.793466][ T8642] [U] [ 244.796154][ T8642] [U] [ 244.798829][ T8642] [U] [ 244.803420][ T8642] [U] [ 244.806156][ T8642] [U] [ 244.808871][ T8642] [U] [ 244.811564][ T8642] [U] [ 244.816050][ T8642] [U] [ 244.818758][ T8642] [U] [ 244.821434][ T8642] [U] [ 244.824111][ T8642] [U] [ 244.875495][ T8642] [U] [ 244.878212][ T8642] [U] [ 244.880887][ T8642] [U] [ 244.883569][ T8642] [U] [ 244.886544][ T8642] [U] [ 244.889263][ T8642] [U] [ 244.891936][ T8642] [U] [ 244.894612][ T8642] [U] [ 244.908726][ T8642] [U] [ 244.911486][ T8642] [U] [ 244.914212][ T8642] [U] [ 244.916926][ T8642] [U] [ 244.963017][ T8642] [U] [ 244.965775][ T8642] [U] [ 244.968497][ T8642] [U] [ 244.971213][ T8642] [U] [ 245.053043][ T8642] [U] [ 245.055807][ T8642] [U] [ 245.058528][ T8642] [U] [ 245.061254][ T8642] [U] [ 245.064978][ T8642] [U] [ 245.067710][ T8642] [U] [ 245.070427][ T8642] [U] [ 245.073143][ T8642] [U] [ 245.331638][ T8642] [U] [ 245.334396][ T8642] [U] [ 245.337124][ T8642] [U] [ 245.339843][ T8642] [U] [ 245.343325][ T8642] [U] [ 245.346056][ T8642] [U] [ 245.348774][ T8642] [U] [ 245.351491][ T8642] [U] [ 245.359188][ T8642] [U] [ 245.860943][ T8666] netlink: 186 bytes leftover after parsing attributes in process `syz.3.802'. [ 245.888897][ T8662] can: request_module (can-proto-5) failed. [ 247.807917][ T8707] could not allocate digest TFM handle [ 248.240547][ T8736] netlink: 186 bytes leftover after parsing attributes in process `syz.1.818'. [ 248.652096][ T5838] Bluetooth: hci2: unexpected event 0x04 length: 435 > 10 [ 248.652417][ T5838] Bluetooth: hci2: connection err: -111 [ 248.744991][ T8748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.823'. [ 250.110001][ T8771] netlink: 28 bytes leftover after parsing attributes in process `syz.0.828'. [ 250.277223][ T8771] bond0: (slave bond_slave_0): Releasing backup interface [ 250.387563][ T8782] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 251.678764][ T8802] random: crng reseeded on system resumption [ 252.367905][ T8816] netlink: 25 bytes leftover after parsing attributes in process `syz.2.841'. [ 252.634088][ T8823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.844'. [ 252.694149][ T8823] netlink: 354 bytes leftover after parsing attributes in process `syz.2.844'. [ 253.161987][ T8827] Process accounting paused [ 253.286719][ T8833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.848'. [ 254.099086][ T8849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.853'. [ 254.117953][ T8849] netlink: 'syz.1.853': attribute type 1 has an invalid length. [ 254.162156][ T8849] netlink: 'syz.1.853': attribute type 6 has an invalid length. [ 254.183936][ T30] audit: type=1800 audit(1763900868.425:6): pid=8851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.852" name="dbroot" dev="configfs" ino=23514 res=0 errno=0 [ 255.174124][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.181962][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.480275][ T30] audit: type=1326 audit(1763900869.751:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8868 comm="syz.2.857" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc14818f749 code=0x0 [ 255.541381][ T8871] FAULT_INJECTION: forcing a failure. [ 255.541381][ T8871] name failslab, interval 1, probability 0, space 0, times 0 [ 255.606149][ T8871] CPU: 0 UID: 0 PID: 8871 Comm: syz.2.857 Not tainted syzkaller #0 PREEMPT(full) [ 255.606187][ T8871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 255.606221][ T8871] Call Trace: [ 255.606231][ T8871] [ 255.606241][ T8871] dump_stack_lvl+0x16c/0x1f0 [ 255.606280][ T8871] should_fail_ex+0x512/0x640 [ 255.606316][ T8871] ? __kmalloc_cache_noprof+0x5f/0x780 [ 255.606345][ T8871] should_failslab+0xc2/0x120 [ 255.606379][ T8871] __kmalloc_cache_noprof+0x72/0x780 [ 255.606405][ T8871] ? snd_pcm_oss_change_params_locked+0x1db/0x3a30 [ 255.606449][ T8871] ? snd_pcm_oss_change_params_locked+0x1db/0x3a30 [ 255.606483][ T8871] snd_pcm_oss_change_params_locked+0x1db/0x3a30 [ 255.606525][ T8871] ? trace_contention_end+0xdd/0x130 [ 255.606560][ T8871] ? __mutex_lock+0x1c5/0x1060 [ 255.606599][ T8871] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 255.606638][ T8871] ? __pfx___mutex_lock+0x10/0x10 [ 255.606679][ T8871] ? __fsnotify_parent+0x24b/0xc40 [ 255.606718][ T8871] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 255.606754][ T8871] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 255.606787][ T8871] snd_pcm_oss_sync+0x1de/0x840 [ 255.606826][ T8871] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 255.606858][ T8871] snd_pcm_oss_release+0x28b/0x310 [ 255.606895][ T8871] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 255.606927][ T8871] __fput+0x402/0xb70 [ 255.606968][ T8871] task_work_run+0x150/0x240 [ 255.607007][ T8871] ? __pfx_task_work_run+0x10/0x10 [ 255.607043][ T8871] ? __pfx___do_sys_close_range+0x10/0x10 [ 255.607079][ T8871] exit_to_user_mode_loop+0xec/0x130 [ 255.607117][ T8871] do_syscall_64+0x426/0xfa0 [ 255.607150][ T8871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.607175][ T8871] RIP: 0033:0x7fc14818f749 [ 255.607194][ T8871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.607226][ T8871] RSP: 002b:00007fc14908d038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 255.607250][ T8871] RAX: 0000000000000000 RBX: 00007fc1483e6090 RCX: 00007fc14818f749 [ 255.607265][ T8871] RDX: 0000000000000000 RSI: fffffffffffff000 RDI: 0000000000000000 [ 255.607281][ T8871] RBP: 00007fc148213f91 R08: 0000000000000000 R09: 0000000000000000 [ 255.607295][ T8871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.607309][ T8871] R13: 00007fc1483e6128 R14: 00007fc1483e6090 R15: 00007ffe7580c078 [ 255.607345][ T8871] [ 255.992080][ T8878] netlink: 146 bytes leftover after parsing attributes in process `syz.3.861'. [ 256.189925][ T8882] netlink: 98 bytes leftover after parsing attributes in process `syz.3.862'. [ 256.606029][ T30] audit: type=1800 audit(1763900870.877:8): pid=8891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.865" name="dbroot" dev="configfs" ino=24688 res=0 errno=0 [ 260.147858][ T8949] binder: 8948:8949 ioctl 5380 2000000000c0 returned -22 [ 260.165313][ T8949] sd 0:0:1:0: PR command failed: 1026 [ 260.170766][ T8949] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 260.178072][ T8949] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 261.217929][ T8968] netlink: 354 bytes leftover after parsing attributes in process `syz.1.887'. [ 261.659974][ T8983] FAULT_INJECTION: forcing a failure. [ 261.659974][ T8983] name failslab, interval 1, probability 0, space 0, times 0 [ 261.719778][ T8983] CPU: 0 UID: 0 PID: 8983 Comm: syz.1.891 Not tainted syzkaller #0 PREEMPT(full) [ 261.719815][ T8983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 261.719831][ T8983] Call Trace: [ 261.719839][ T8983] [ 261.719849][ T8983] dump_stack_lvl+0x16c/0x1f0 [ 261.719886][ T8983] should_fail_ex+0x512/0x640 [ 261.719923][ T8983] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 261.719953][ T8983] should_failslab+0xc2/0x120 [ 261.719987][ T8983] kmem_cache_alloc_noprof+0x75/0x6e0 [ 261.720012][ T8983] ? __kernfs_new_node+0xd2/0x8e0 [ 261.720052][ T8983] ? __kernfs_new_node+0xd2/0x8e0 [ 261.720081][ T8983] __kernfs_new_node+0xd2/0x8e0 [ 261.720118][ T8983] ? __pfx___kernfs_new_node+0x10/0x10 [ 261.720159][ T8983] ? find_held_lock+0x2b/0x80 [ 261.720187][ T8983] ? kernfs_root+0xee/0x2a0 [ 261.720227][ T8983] kernfs_new_node+0x13c/0x1e0 [ 261.720270][ T8983] __kernfs_create_file+0x53/0x350 [ 261.720300][ T8983] sysfs_add_file_mode_ns+0x207/0x3c0 [ 261.720340][ T8983] sysfs_merge_group+0x1aa/0x340 [ 261.720375][ T8983] ? __pfx_sysfs_merge_group+0x10/0x10 [ 261.720413][ T8983] ? __pfx_dev_add_physical_location+0x10/0x10 [ 261.720451][ T8983] ? bus_to_subsys+0x131/0x160 [ 261.720483][ T8983] dpm_sysfs_add+0x237/0x280 [ 261.720522][ T8983] device_add+0x9a6/0x1aa0 [ 261.720549][ T8983] ? __pfx_device_add+0x10/0x10 [ 261.720569][ T8983] ? __pfx___mutex_lock+0x10/0x10 [ 261.720616][ T8983] input_register_device+0x7e8/0x1180 [ 261.720654][ T8983] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 261.720692][ T8983] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 261.720728][ T8983] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 261.720781][ T8983] ? find_held_lock+0x2b/0x80 [ 261.720827][ T8983] ? __pfx_uinput_ioctl+0x10/0x10 [ 261.720865][ T8983] __x64_sys_ioctl+0x18e/0x210 [ 261.720901][ T8983] do_syscall_64+0xcd/0xfa0 [ 261.720931][ T8983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.720955][ T8983] RIP: 0033:0x7fc13898f749 [ 261.720975][ T8983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.720998][ T8983] RSP: 002b:00007fc13984d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 261.721019][ T8983] RAX: ffffffffffffffda RBX: 00007fc138be5fa0 RCX: 00007fc13898f749 [ 261.721037][ T8983] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 261.721052][ T8983] RBP: 00007fc138a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 261.721068][ T8983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.721084][ T8983] R13: 00007fc138be6038 R14: 00007fc138be5fa0 R15: 00007ffebf265d88 [ 261.721121][ T8983] [ 262.111939][ T5838] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 262.153699][ T8987] netlink: set zone limit has 8 unknown bytes [ 262.163509][ T8987] netlink: zone id is out of range [ 262.168886][ T8987] netlink: del zone limit has 4 unknown bytes [ 263.170045][ T9010] input: jJǸ-9%vJ86 as /devices/virtual/input/input19 [ 263.916049][ T5833] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 264.094292][ T9019] netlink: 20 bytes leftover after parsing attributes in process `syz.3.901'. [ 264.153635][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 264.538167][ T9024] netlink: 'syz.3.903': attribute type 2 has an invalid length. [ 264.608030][ T9024] netlink: 'syz.3.903': attribute type 3 has an invalid length. [ 264.661029][ T9024] netlink: 158 bytes leftover after parsing attributes in process `syz.3.903'. [ 264.703180][ T9024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.903'. [ 266.512636][ T9055] netlink: 9 bytes leftover after parsing attributes in process `syz.1.911'. [ 266.910366][ T9065] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4) [ 267.339518][ T9078] bridge0: port 3(bond0) entered blocking state [ 267.350362][ T9078] bridge0: port 3(bond0) entered disabled state [ 267.367196][ T9078] bond0: entered allmulticast mode [ 267.377012][ T9078] bond_slave_1: entered allmulticast mode [ 267.399302][ T9078] bond0: entered promiscuous mode [ 267.417857][ T9078] bond_slave_1: entered promiscuous mode [ 267.433194][ T9078] bridge0: port 3(bond0) entered blocking state [ 267.440262][ T9078] bridge0: port 3(bond0) entered forwarding state [ 267.864319][ T9081] netlink: 28 bytes leftover after parsing attributes in process `syz.3.920'. [ 267.873419][ T9081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.936099][ T9081] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.957897][ T30] audit: type=1800 audit(1763900882.276:9): pid=9089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.923" name="features" dev="configfs" ino=24133 res=0 errno=0 [ 268.350864][ T9096] usb usb15: usbfs: process 9096 (syz.2.926) did not claim interface 0 before use [ 268.571010][ T9102] hub 1-0:1.0: USB hub found [ 268.580246][ T9102] hub 1-0:1.0: 1 port detected [ 268.745182][ T9106] hub 1-0:1.0: USB hub found [ 268.770628][ T9106] hub 1-0:1.0: 1 port detected [ 269.570905][ T9132] FAULT_INJECTION: forcing a failure. [ 269.570905][ T9132] name failslab, interval 1, probability 0, space 0, times 0 [ 269.605355][ T9132] CPU: 1 UID: 0 PID: 9132 Comm: syz.3.931 Not tainted syzkaller #0 PREEMPT(full) [ 269.605391][ T9132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 269.605406][ T9132] Call Trace: [ 269.605416][ T9132] [ 269.605426][ T9132] dump_stack_lvl+0x16c/0x1f0 [ 269.605464][ T9132] should_fail_ex+0x512/0x640 [ 269.605501][ T9132] ? fs_reclaim_acquire+0xae/0x150 [ 269.605535][ T9132] should_failslab+0xc2/0x120 [ 269.605569][ T9132] __kmalloc_noprof+0xdd/0x880 [ 269.605615][ T9132] ? tomoyo_encode2+0x100/0x3e0 [ 269.605652][ T9132] ? tomoyo_encode2+0x100/0x3e0 [ 269.605677][ T9132] tomoyo_encode2+0x100/0x3e0 [ 269.605710][ T9132] tomoyo_encode+0x29/0x50 [ 269.605736][ T9132] tomoyo_realpath_from_path+0x18f/0x6e0 [ 269.605777][ T9132] tomoyo_mkdev_perm+0x22b/0x570 [ 269.605800][ T9132] ? tomoyo_mkdev_perm+0x217/0x570 [ 269.605826][ T9132] ? __pfx_tomoyo_mkdev_perm+0x10/0x10 [ 269.605851][ T9132] ? do_raw_spin_lock+0x12c/0x2b0 [ 269.605898][ T9132] ? do_raw_spin_unlock+0x172/0x230 [ 269.605941][ T9132] ? __pfx_current_check_access_path+0x10/0x10 [ 269.605975][ T9132] ? simple_lookup+0x105/0x1d0 [ 269.606007][ T9132] tomoyo_path_mknod+0x12a/0x190 [ 269.606040][ T9132] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 269.606076][ T9132] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 269.606122][ T9132] security_path_mknod+0x161/0x310 [ 269.606151][ T9132] do_mknodat+0x239/0x5d0 [ 269.606187][ T9132] ? __pfx_do_mknodat+0x10/0x10 [ 269.606214][ T9132] ? getname_flags.part.0+0x1c5/0x550 [ 269.606260][ T9132] __x64_sys_mknod+0x87/0xb0 [ 269.606289][ T9132] do_syscall_64+0xcd/0xfa0 [ 269.606322][ T9132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.606347][ T9132] RIP: 0033:0x7f7a0038f749 [ 269.606367][ T9132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.606391][ T9132] RSP: 002b:00007f7a011e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 269.606415][ T9132] RAX: ffffffffffffffda RBX: 00007f7a005e5fa0 RCX: 00007f7a0038f749 [ 269.606433][ T9132] RDX: 0000000000000103 RSI: 00000000000020e9 RDI: 00002000000003c0 [ 269.606450][ T9132] RBP: 00007f7a00413f91 R08: 0000000000000000 R09: 0000000000000000 [ 269.606466][ T9132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.606481][ T9132] R13: 00007f7a005e6038 R14: 00007f7a005e5fa0 R15: 00007ffca8d948e8 [ 269.606520][ T9132] [ 269.606546][ T9132] ERROR: Out of memory at tomoyo_realpath_from_path. [ 270.002535][ T9147] netlink: 342 bytes leftover after parsing attributes in process `syz.0.934'. [ 270.012464][ T9147] IPv6: NLM_F_CREATE should be specified when creating new route [ 270.021116][ T9147] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 270.028861][ T9147] IPv6: NLM_F_CREATE should be set when creating new route [ 270.036165][ T9147] IPv6: NLM_F_CREATE should be set when creating new route [ 270.065538][ T9149] netlink: 342 bytes leftover after parsing attributes in process `syz.0.934'. [ 273.818309][ T9220] netlink: 25 bytes leftover after parsing attributes in process `syz.1.948'. [ 273.995799][ T9225] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 274.380550][ T9237] netlink: 'syz.0.955': attribute type 4 has an invalid length. [ 274.388378][ T9237] netlink: 314 bytes leftover after parsing attributes in process `syz.0.955'. [ 274.741093][ T9252] : Can't lookup blockdev [ 274.829564][ T9252] vivid-007: ================= START STATUS ================= [ 274.952785][ T9252] vivid-007: Generate PTS: true [ 274.988657][ T9252] vivid-007: Generate SCR: true [ 275.001039][ T9252] tpg source WxH: 320x240 (Y'CbCr) [ 275.016050][ T9252] tpg field: 1 [ 275.028234][ T9252] tpg crop: (0,0)/320x240 [ 275.058350][ T9252] tpg compose: (0,0)/320x240 [ 275.063618][ T9252] tpg colorspace: 8 [ 275.068018][ T9252] tpg transfer function: 0/0 [ 275.073250][ T9252] tpg Y'CbCr encoding: 0/0 [ 275.079656][ T9252] tpg quantization: 0/0 [ 275.098080][ T9252] tpg RGB range: 0/2 [ 275.105482][ T9252] vivid-007: ================== END STATUS ================== [ 275.224556][ T9259] netlink: 342 bytes leftover after parsing attributes in process `syz.3.960'. [ 275.238976][ T9259] netlink: 302 bytes leftover after parsing attributes in process `syz.3.960'. [ 275.250154][ T9259] netlink: 302 bytes leftover after parsing attributes in process `syz.3.960'. [ 276.243412][ T9283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.969'. [ 276.695133][ T9291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.973'. [ 276.720318][ T9296] random: crng reseeded on system resumption [ 276.760117][ T9291] netlink: 'syz.0.973': attribute type 1 has an invalid length. [ 276.789619][ T9291] netlink: 13 bytes leftover after parsing attributes in process `syz.0.973'. [ 277.468709][ T9315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.981'. [ 277.478638][ T9315] netlink: 'syz.3.981': attribute type 1 has an invalid length. [ 277.504808][ T9315] netlink: 5 bytes leftover after parsing attributes in process `syz.3.981'. [ 277.656455][ T9317] netlink: 'syz.0.982': attribute type 1 has an invalid length. [ 278.197229][ T9336] netlink: 'syz.2.989': attribute type 1 has an invalid length. [ 278.807101][ T9354] random: crng reseeded on system resumption [ 279.477116][ T9359] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20 [ 280.228292][ T9381] __nla_validate_parse: 2 callbacks suppressed [ 280.228315][ T9381] netlink: 62 bytes leftover after parsing attributes in process `syz.0.1002'. [ 280.552971][ T9389] netlink: 186 bytes leftover after parsing attributes in process `syz.1.1004'. [ 281.023123][ T9378] delete_channel: no stack [ 281.885880][ T9415] bond0: invalid ARP target specified [ 282.314435][ T9417] FAULT_INJECTION: forcing a failure. [ 282.314435][ T9417] name failslab, interval 1, probability 0, space 0, times 0 [ 282.468545][ T9417] CPU: 1 UID: 0 PID: 9417 Comm: syz.2.1013 Not tainted syzkaller #0 PREEMPT(full) [ 282.468585][ T9417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 282.468610][ T9417] Call Trace: [ 282.468619][ T9417] [ 282.468629][ T9417] dump_stack_lvl+0x16c/0x1f0 [ 282.468668][ T9417] should_fail_ex+0x512/0x640 [ 282.468703][ T9417] ? __kmalloc_node_noprof+0xcd/0x8a0 [ 282.468738][ T9417] should_failslab+0xc2/0x120 [ 282.468771][ T9417] __kmalloc_node_noprof+0xe0/0x8a0 [ 282.468799][ T9417] ? lockdep_init_map_type+0x5c/0x280 [ 282.468833][ T9417] ? blk_mq_alloc_tag_set+0x577/0x12e0 [ 282.468870][ T9417] ? blk_mq_alloc_tag_set+0x577/0x12e0 [ 282.468899][ T9417] blk_mq_alloc_tag_set+0x577/0x12e0 [ 282.468930][ T9417] ? idr_alloc_u32+0x263/0x2f0 [ 282.468969][ T9417] loop_add+0x3b2/0xb70 [ 282.468999][ T9417] ? __pfx_loop_add+0x10/0x10 [ 282.469051][ T9417] ? find_held_lock+0x2b/0x80 [ 282.469082][ T9417] loop_control_ioctl+0x13e/0x630 [ 282.469112][ T9417] ? __pfx_loop_control_ioctl+0x10/0x10 [ 282.469146][ T9417] ? __pfx_loop_control_ioctl+0x10/0x10 [ 282.469176][ T9417] __x64_sys_ioctl+0x18e/0x210 [ 282.469216][ T9417] do_syscall_64+0xcd/0xfa0 [ 282.469257][ T9417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.469284][ T9417] RIP: 0033:0x7fc14818f749 [ 282.469306][ T9417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.469330][ T9417] RSP: 002b:00007fc1490ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 282.469355][ T9417] RAX: ffffffffffffffda RBX: 00007fc1483e5fa0 RCX: 00007fc14818f749 [ 282.469372][ T9417] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000003 [ 282.469388][ T9417] RBP: 00007fc148213f91 R08: 0000000000000000 R09: 0000000000000000 [ 282.469403][ T9417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.469418][ T9417] R13: 00007fc1483e6038 R14: 00007fc1483e5fa0 R15: 00007ffe7580c078 [ 282.469455][ T9417] [ 282.960202][ T9421] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4) [ 284.029259][ T9423] Process accounting resumed [ 284.574699][ T5833] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 285.123613][ T9467] netlink: 504 bytes leftover after parsing attributes in process `syz.3.1029'. [ 285.155142][ T9467] netlink: 350 bytes leftover after parsing attributes in process `syz.3.1029'. [ 285.217838][ T9473] netlink: 'syz.1.1032': attribute type 1 has an invalid length. [ 285.235126][ T9473] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1032'. [ 285.633289][ T9483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1036'. [ 285.643798][ T9483] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1036'. [ 286.381060][ T9501] [ 286.383436][ T9501] ====================================================== [ 286.390464][ T9501] WARNING: possible circular locking dependency detected [ 286.397498][ T9501] syzkaller #0 Not tainted [ 286.401919][ T9501] ------------------------------------------------------ [ 286.408954][ T9501] syz.1.1044/9501 is trying to acquire lock: [ 286.414936][ T9501] ffff88805a97d3c8 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x4d0/0xcc0 [ 286.426435][ T9501] [ 286.426435][ T9501] but task is already holding lock: [ 286.433881][ T9501] ffff88805a97bfa0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 286.442864][ T9501] [ 286.442864][ T9501] which lock already depends on the new lock. [ 286.442864][ T9501] [ 286.453257][ T9501] [ 286.453257][ T9501] the existing dependency chain (in reverse order) is: [ 286.462261][ T9501] [ 286.462261][ T9501] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 286.470007][ T9501] lock_sock_nested+0x41/0xf0 [ 286.475206][ T9501] smc_listen_out+0x202/0x4a0 [ 286.480493][ T9501] smc_listen_work+0x5a3/0x50b0 [ 286.485867][ T9501] process_one_work+0x9cf/0x1b70 [ 286.491332][ T9501] worker_thread+0x6c8/0xf10 [ 286.496434][ T9501] kthread+0x3c5/0x780 [ 286.501027][ T9501] ret_from_fork+0x675/0x7d0 [ 286.506145][ T9501] ret_from_fork_asm+0x1a/0x30 [ 286.511437][ T9501] [ 286.511437][ T9501] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 286.521599][ T9501] __lock_acquire+0x126f/0x1c90 [ 286.526974][ T9501] lock_acquire+0x179/0x350 [ 286.531997][ T9501] __flush_work+0x4e4/0xcc0 [ 286.537015][ T9501] __cancel_work_sync+0x10c/0x130 [ 286.542553][ T9501] smc_clcsock_release+0x5f/0xe0 [ 286.548010][ T9501] __smc_release+0x5c2/0x880 [ 286.553118][ T9501] smc_close_non_accepted+0xda/0x200 [ 286.559023][ T9501] smc_close_active+0xc3c/0x1070 [ 286.564505][ T9501] __smc_release+0x634/0x880 [ 286.569721][ T9501] smc_release+0x1fc/0x620 [ 286.574666][ T9501] __sock_release+0xb3/0x270 [ 286.579787][ T9501] sock_close+0x1c/0x30 [ 286.584474][ T9501] __fput+0x402/0xb70 [ 286.588978][ T9501] task_work_run+0x150/0x240 [ 286.594099][ T9501] get_signal+0x1d0/0x26d0 [ 286.599043][ T9501] arch_do_signal_or_restart+0x8f/0x790 [ 286.605114][ T9501] exit_to_user_mode_loop+0x85/0x130 [ 286.610935][ T9501] do_syscall_64+0x426/0xfa0 [ 286.616044][ T9501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.622455][ T9501] [ 286.622455][ T9501] other info that might help us debug this: [ 286.622455][ T9501] [ 286.632670][ T9501] Possible unsafe locking scenario: [ 286.632670][ T9501] [ 286.640105][ T9501] CPU0 CPU1 [ 286.645455][ T9501] ---- ---- [ 286.650805][ T9501] lock(sk_lock-AF_SMC/1); [ 286.655306][ T9501] lock((work_completion)(&new_smc->smc_listen_work)); [ 286.664774][ T9501] lock(sk_lock-AF_SMC/1); [ 286.671796][ T9501] lock((work_completion)(&new_smc->smc_listen_work)); [ 286.678724][ T9501] [ 286.678724][ T9501] *** DEADLOCK *** [ 286.678724][ T9501] [ 286.686855][ T9501] 3 locks held by syz.1.1044/9501: [ 286.691951][ T9501] #0: ffff8880596dde08 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 286.702495][ T9501] #1: ffff88805a97bfa0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 286.712031][ T9501] #2: ffffffff8e3c45e0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xfb/0xcc0 [ 286.721175][ T9501] [ 286.721175][ T9501] stack backtrace: [ 286.727054][ T9501] CPU: 0 UID: 0 PID: 9501 Comm: syz.1.1044 Not tainted syzkaller #0 PREEMPT(full) [ 286.727080][ T9501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 286.727093][ T9501] Call Trace: [ 286.727101][ T9501] [ 286.727110][ T9501] dump_stack_lvl+0x116/0x1f0 [ 286.727135][ T9501] print_circular_bug+0x275/0x350 [ 286.727163][ T9501] check_noncircular+0x14c/0x170 [ 286.727192][ T9501] __lock_acquire+0x126f/0x1c90 [ 286.727223][ T9501] lock_acquire+0x179/0x350 [ 286.727247][ T9501] ? __flush_work+0x4d0/0xcc0 [ 286.727269][ T9501] ? mark_held_locks+0x49/0x80 [ 286.727294][ T9501] ? __flush_work+0x4d0/0xcc0 [ 286.727313][ T9501] __flush_work+0x4e4/0xcc0 [ 286.727331][ T9501] ? __flush_work+0x4d0/0xcc0 [ 286.727357][ T9501] ? __pfx___flush_work+0x10/0x10 [ 286.727377][ T9501] ? __pfx_wq_barrier_func+0x10/0x10 [ 286.727406][ T9501] ? do_raw_spin_lock+0x12c/0x2b0 [ 286.727435][ T9501] ? __pfx___might_resched+0x10/0x10 [ 286.727459][ T9501] __cancel_work_sync+0x10c/0x130 [ 286.727479][ T9501] smc_clcsock_release+0x5f/0xe0 [ 286.727503][ T9501] __smc_release+0x5c2/0x880 [ 286.727523][ T9501] ? __pfx_sock_def_readable+0x10/0x10 [ 286.727553][ T9501] smc_close_non_accepted+0xda/0x200 [ 286.727576][ T9501] smc_close_active+0xc3c/0x1070 [ 286.727599][ T9501] __smc_release+0x634/0x880 [ 286.727619][ T9501] smc_release+0x1fc/0x620 [ 286.727639][ T9501] __sock_release+0xb3/0x270 [ 286.727661][ T9501] ? __pfx_sock_close+0x10/0x10 [ 286.727681][ T9501] sock_close+0x1c/0x30 [ 286.727699][ T9501] __fput+0x402/0xb70 [ 286.727726][ T9501] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.727749][ T9501] task_work_run+0x150/0x240 [ 286.727780][ T9501] ? __pfx_task_work_run+0x10/0x10 [ 286.727812][ T9501] get_signal+0x1d0/0x26d0 [ 286.727835][ T9501] ? task_work_add+0x1d5/0x360 [ 286.727862][ T9501] ? __pfx_task_work_add+0x10/0x10 [ 286.727894][ T9501] ? __pfx_get_signal+0x10/0x10 [ 286.727915][ T9501] ? __fput_deferred+0x213/0x480 [ 286.727941][ T9501] ? __pfx___fput_deferred+0x10/0x10 [ 286.727969][ T9501] arch_do_signal_or_restart+0x8f/0x790 [ 286.727994][ T9501] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 286.728026][ T9501] exit_to_user_mode_loop+0x85/0x130 [ 286.728057][ T9501] do_syscall_64+0x426/0xfa0 [ 286.728083][ T9501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.728104][ T9501] RIP: 0033:0x7fc13898f749 [ 286.728121][ T9501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.728140][ T9501] RSP: 002b:00007fc13984d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 286.728159][ T9501] RAX: fffffffffffffe00 RBX: 00007fc138be5fa0 RCX: 00007fc13898f749 [ 286.728173][ T9501] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 286.728185][ T9501] RBP: 00007fc138a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 286.728198][ T9501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.728210][ T9501] R13: 00007fc138be6038 R14: 00007fc138be5fa0 R15: 00007ffebf265d88 [ 286.728230][ T9501]