last executing test programs: 2.719436594s ago: executing program 1 (id=307): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff2000/0x4000)=nil, 0x4000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x2) mount(0x0, &(0x7f0000000a80)='./proc\x00', &(0x7f0000000ac0)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000006, 0x401d031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 2.419313258s ago: executing program 1 (id=313): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000700)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000740), 0xffffffffffffff94, 0x1, 0x0, 0x55) 2.184500071s ago: executing program 2 (id=316): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000040)=0xce, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x300000b, 0x13, 0xffffffffffffffff, 0x619b4000) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000040)) 1.792815734s ago: executing program 2 (id=320): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1400, 0x0, 0x1) 1.393383989s ago: executing program 1 (id=327): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000440)='27', 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 1.0088533s ago: executing program 1 (id=329): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0xc0) write$P9_RREADLINK(r0, &(0x7f0000000240)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) writev(r0, 0x0, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) 824.747951ms ago: executing program 3 (id=330): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x22a, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x4, 0x24, 0xfd, 0x1000000}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 824.528222ms ago: executing program 2 (id=331): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff2000/0x4000)=nil, 0x4000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x2) mount(0x0, &(0x7f0000000a80)='./proc\x00', &(0x7f0000000ac0)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000006, 0x401d031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 740.473184ms ago: executing program 3 (id=334): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000380)}, 0x22}], 0x2, 0x200c2, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0xffffffffffffffc4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x100000000005, 0x4, 0xe9b, 0x22, 0x20000008, 0x7, 0x911d, 0x7, 0x8, 0x10009c2, 0x5, 0x1006, 0xc, 0x8, 0x8000, 0xffffffffffffffff], 0x1000, 0xc2302}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x7, 0x8, 0x0, 0x9, 0x8, 0x97, 0xbf, 0xc6, 0x81, 0xfe, 0xc, 0x0, 0x5, 0x27e7, 0x0, 0x2, 0x8, 0xff, '\x00', 0x61, 0x10000000000001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 678.591538ms ago: executing program 2 (id=335): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000740), 0xffffffffffffff94, 0x1, 0x0, 0x55) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000780)=0xfffffff4, 0x4) 596.910369ms ago: executing program 0 (id=336): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{0xa000, 0xa000, 0x4, 0x9, 0xfd, 0xe4, 0x40, 0x7, 0x0, 0x2b, 0x16}, {0xd535c1c88a4e070, 0x10000, 0x3, 0x0, 0x40, 0x34, 0x7d, 0x6, 0x5, 0x3, 0x3, 0xb5}, {0xeeef0000, 0xf000, 0x1c, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa8, 0x4, 0x4}, {0x80a0000, 0x80a0000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x8, 0x7, 0x1e}, {0x10000, 0xe000, 0xb, 0x9, 0x3, 0x6, 0xab, 0x7f, 0x7, 0x2, 0xdb}, {0x0, 0xeeee0000, 0x4, 0x7, 0xb1, 0xb, 0x21, 0x4, 0x80, 0x0, 0x1}, {0x3000, 0x2000, 0x4, 0x1, 0x2, 0x5, 0x7, 0x3, 0x5, 0x81, 0x1, 0x70}, {0x100000, 0x1000, 0x9, 0x5, 0x5, 0xb, 0xc, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0x10000, 0x1000}, {0x2000, 0x5}, 0x80000031, 0x0, 0xeeee0000, 0x2024, 0x3, 0x500, 0x3000, [0xf90000000000, 0x4, 0x80, 0xfff]}) 556.21348ms ago: executing program 2 (id=337): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000440)='27', 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 389.060639ms ago: executing program 1 (id=338): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000040)=0xce, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r2 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x300000b, 0x13, r2, 0x619b4000) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000040)) 374.397042ms ago: executing program 3 (id=339): mkdirat(0xffffffffffffff9c, &(0x7f0000001340)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000001580)='./trace\x00', &(0x7f00000015c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r0, &(0x7f0000001640)='traceon', 0x7) 339.515718ms ago: executing program 2 (id=340): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e24, @multicast1}}}, 0x84) 331.818648ms ago: executing program 0 (id=341): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000001400)=@assoc_value={r1, 0x3ff}, 0x8) 294.940112ms ago: executing program 3 (id=342): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x22a, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x4, 0x24, 0xfd, 0x1000000}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 156.489125ms ago: executing program 0 (id=343): capset(&(0x7f0000000b40)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0x4, 0x0, 0x0, 0xfffffffe}) add_key(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 156.323715ms ago: executing program 3 (id=344): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000480)={0x3, 0x100}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 113.095271ms ago: executing program 0 (id=345): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000740), 0xffffffffffffff94, 0x1, 0x0, 0x55) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000780)=0xfffffff4, 0x4) 76.857081ms ago: executing program 0 (id=346): r0 = getpid() mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r2 = syz_open_procfs(r0, &(0x7f00000000c0)='smaps_rollup\x00') lseek(r2, 0x2004, 0x0) 5.248716ms ago: executing program 1 (id=347): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0), 0x8, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='memory.current\x00', 0x275a, 0x0) lseek(r0, 0x7fffffffffffffff, 0x0) 5.024259ms ago: executing program 0 (id=348): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000440)='27', 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 0s ago: executing program 3 (id=349): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000380)}, 0x22}], 0x2, 0x200c2, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0xffffffffffffffc4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x100000000005, 0x4, 0xe9b, 0x22, 0x20000008, 0x7, 0x911d, 0x7, 0x8, 0x10009c2, 0x5, 0x1006, 0xc, 0x8, 0x8000, 0xffffffffffffffff], 0x1000, 0xc2302}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x7, 0x8, 0x0, 0x9, 0x8, 0x97, 0xbf, 0xc6, 0x81, 0xfe, 0xc, 0x0, 0x5, 0x27e7, 0x0, 0x2, 0x8, 0xff, '\x00', 0x61, 0x10000000000001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.189' (ED25519) to the list of known hosts. [ 64.571355][ T5592] cgroup: Unknown subsys name 'net' [ 64.664855][ T5592] cgroup: Unknown subsys name 'cpuset' [ 64.673461][ T5592] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.988337][ T5592] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.072746][ T5605] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.075385][ T5605] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.075899][ T5605] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.076745][ T5605] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.077781][ T5605] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.204302][ T5605] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.206606][ T5605] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.207071][ T5605] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.207884][ T5605] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.208755][ T5605] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.228141][ T5605] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.260794][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.269457][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.270071][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.271506][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.272437][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.280395][ T5617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.295071][ T5619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.295146][ T5617] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.318099][ T5619] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.888089][ T5611] rxe_eth0 speed is unknown, defaulting to 1000 [ 68.889155][ T5604] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 68.896507][ T5611] rxe_eth0 speed is unknown, defaulting to 1000 [ 68.899808][ T5611] rxe_eth0 speed is unknown, defaulting to 1000 [ 69.034640][ T5610] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 69.156937][ T5614] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 69.248320][ T5611] infiniband rxe0: set active [ 69.248338][ T5611] infiniband rxe0: added rxe_eth0 [ 69.277107][ T5611] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 69.277136][ T5611] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 69.277170][ T5611] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 69.283267][ T4939] rxe_eth0 speed is unknown, defaulting to 1000 [ 69.347668][ T5611] RDS/IB: rxe0: added [ 69.347981][ T5611] smc: adding ib device rxe0 with port count 1 [ 69.348067][ T5611] smc: ib device rxe0 port 1 has no pnetid [ 69.396393][ T198] rxe_eth0 speed is unknown, defaulting to 1000 [ 69.415771][ T5611] rxe_eth0 speed is unknown, defaulting to 1000 [ 69.729409][ T5611] rxe_eth0 speed is unknown, defaulting to 1000 [ 69.859696][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.860291][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.860392][ T5604] bridge_slave_0: entered allmulticast mode [ 69.873873][ T5604] bridge_slave_0: entered promiscuous mode [ 69.896087][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.896196][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.896318][ T5610] bridge_slave_0: entered allmulticast mode [ 69.898145][ T5610] bridge_slave_0: entered promiscuous mode [ 69.901029][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.901131][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.901242][ T5610] bridge_slave_1: entered allmulticast mode [ 69.905698][ T5610] bridge_slave_1: entered promiscuous mode [ 69.931949][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.932117][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.932277][ T5604] bridge_slave_1: entered allmulticast mode [ 69.936915][ T5604] bridge_slave_1: entered promiscuous mode [ 70.023954][ T5611] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.027508][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.081603][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.086219][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.089920][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.152562][ T5605] Bluetooth: hci0: command tx timeout [ 70.178479][ T5604] team0: Port device team_slave_0 added [ 70.181500][ T5610] team0: Port device team_slave_0 added [ 70.197980][ T5604] team0: Port device team_slave_1 added [ 70.214337][ T5610] team0: Port device team_slave_1 added [ 70.233950][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.234102][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.234229][ T5614] bridge_slave_0: entered allmulticast mode [ 70.236563][ T5614] bridge_slave_0: entered promiscuous mode [ 70.272049][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.272065][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.272094][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.289039][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.290101][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.291606][ T5614] bridge_slave_1: entered allmulticast mode [ 70.294751][ T5614] bridge_slave_1: entered promiscuous mode [ 70.309613][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.309629][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.309652][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.317639][ T5605] Bluetooth: hci1: command tx timeout [ 70.324837][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.324851][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.324888][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.338069][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.338083][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.338114][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.344520][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.387586][ T5605] Bluetooth: hci3: command tx timeout [ 70.392381][ T5605] Bluetooth: hci2: command tx timeout [ 70.409535][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.464706][ T5604] hsr_slave_0: entered promiscuous mode [ 70.465751][ T5604] hsr_slave_1: entered promiscuous mode [ 70.500329][ T5614] team0: Port device team_slave_0 added [ 70.550481][ T5614] team0: Port device team_slave_1 added [ 70.560416][ T5610] hsr_slave_0: entered promiscuous mode [ 70.561037][ T5610] hsr_slave_1: entered promiscuous mode [ 70.561445][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 70.561512][ T5610] Cannot create hsr debugfs directory [ 70.598389][ T5611] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.636820][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.636836][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.636859][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.661221][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.661237][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.661260][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.801047][ T5614] hsr_slave_0: entered promiscuous mode [ 70.802679][ T5614] hsr_slave_1: entered promiscuous mode [ 70.803386][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 70.803402][ T5614] Cannot create hsr debugfs directory [ 71.107248][ T5604] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.123742][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.139765][ T5604] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.144667][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.147602][ T5604] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.152822][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.179754][ T5604] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.182688][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.266944][ T5610] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.284579][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.285405][ T5610] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.289486][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.325294][ T5610] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.328622][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.329341][ T5610] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.333640][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.428409][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.428475][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.478447][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.478505][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.478598][ T5611] bridge_slave_0: entered allmulticast mode [ 71.479624][ T5611] bridge_slave_0: entered promiscuous mode [ 71.483909][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.484049][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.484170][ T5611] bridge_slave_1: entered allmulticast mode [ 71.485659][ T5611] bridge_slave_1: entered promiscuous mode [ 71.537844][ T5614] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.547726][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.568024][ T5614] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.570537][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.571593][ T5614] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.595395][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.597851][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.600989][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.613851][ T5614] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.623538][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.667502][ T5611] team0: Port device team_slave_0 added [ 71.677507][ T5611] team0: Port device team_slave_1 added [ 71.713835][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.713852][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.713874][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.716456][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.716465][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.716478][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.827218][ T5611] hsr_slave_0: entered promiscuous mode [ 71.827842][ T5611] hsr_slave_1: entered promiscuous mode [ 71.828240][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 71.828252][ T5611] Cannot create hsr debugfs directory [ 71.889302][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.918424][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.933313][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.969794][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.970038][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.013204][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.013304][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.032915][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.072873][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.072975][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.098417][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.098475][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.209218][ T5611] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.220511][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.221232][ T5611] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.222019][ T5605] Bluetooth: hci0: command tx timeout [ 72.236071][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.238402][ T5611] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.246961][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.258141][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.266368][ T5611] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.275081][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.347436][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.384147][ T5605] Bluetooth: hci1: command tx timeout [ 72.391789][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.392476][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.403878][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.403973][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.461959][ T5605] Bluetooth: hci3: command tx timeout [ 72.461990][ T5605] Bluetooth: hci2: command tx timeout [ 72.637704][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.675451][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.691224][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.691335][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.707176][ T3338] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.707288][ T3338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.030775][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.171115][ T5604] veth0_vlan: entered promiscuous mode [ 73.197890][ T5604] veth1_vlan: entered promiscuous mode [ 73.281240][ T5604] veth0_macvtap: entered promiscuous mode [ 73.306965][ T5604] veth1_macvtap: entered promiscuous mode [ 73.366070][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.384829][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.406537][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.526110][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.617941][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.617965][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.619872][ T5610] veth0_vlan: entered promiscuous mode [ 73.669941][ T5610] veth1_vlan: entered promiscuous mode [ 73.727007][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.727026][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.782909][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.823092][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.823864][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.823902][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.823934][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.824650][ T5604] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.826408][ T5614] veth0_vlan: entered promiscuous mode [ 73.867665][ T5610] veth0_macvtap: entered promiscuous mode [ 73.887476][ T5614] veth1_vlan: entered promiscuous mode [ 73.890097][ T5610] veth1_macvtap: entered promiscuous mode [ 73.970339][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.994440][ T5611] veth0_vlan: entered promiscuous mode [ 74.015314][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.021308][ T5753] FAULT_INJECTION: forcing a failure. [ 74.021308][ T5753] name failslab, interval 1, probability 0, space 0, times 1 [ 74.021352][ T5753] CPU: 0 UID: 0 PID: 5753 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) [ 74.021372][ T5753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 74.021389][ T5753] Call Trace: [ 74.021399][ T5753] [ 74.021406][ T5753] dump_stack_lvl+0xe8/0x150 [ 74.021435][ T5753] should_fail_ex+0x3eb/0x540 [ 74.021463][ T5753] should_failslab+0xa8/0x100 [ 74.021482][ T5753] ? __kernfs_new_node+0xe6/0x980 [ 74.021502][ T5753] kmem_cache_alloc_noprof+0x9c/0x600 [ 74.021528][ T5753] ? __kernfs_new_node+0xe6/0x980 [ 74.021554][ T5753] __kernfs_new_node+0xe6/0x980 [ 74.021580][ T5753] ? __pfx___kernfs_new_node+0x10/0x10 [ 74.021598][ T5753] ? lock_acquire+0x115/0x350 [ 74.021615][ T5753] ? kernfs_root+0x1c/0x230 [ 74.021639][ T5753] ? kernfs_root+0x1c/0x230 [ 74.021656][ T5753] ? kernfs_root+0x1c/0x230 [ 74.021672][ T5753] ? kernfs_root+0x1c/0x230 [ 74.021696][ T5753] kernfs_new_node+0xeb/0x140 [ 74.021717][ T5753] __kernfs_create_file+0x4b/0x2e0 [ 74.021744][ T5753] sysfs_add_file_mode_ns+0x237/0x300 [ 74.021776][ T5753] internal_create_group+0x679/0x1180 [ 74.021805][ T5753] ? kobject_init_and_add+0x12b/0x1a0 [ 74.021829][ T5753] ? tun_attach+0x1191/0x1560 [ 74.021854][ T5753] ? tun_set_iff+0x463/0xf20 [ 74.021878][ T5753] ? __pfx_internal_create_group+0x10/0x10 [ 74.021907][ T5753] sysfs_create_groups+0x59/0x120 [ 74.021927][ T5753] netdev_queue_update_kobjects+0x2a0/0x6b0 [ 74.021965][ T5753] netif_set_real_num_tx_queues+0x265/0xa30 [ 74.021997][ T5753] tun_attach+0x1191/0x1560 [ 74.022045][ T5753] ? tun_not_capable+0x148/0x1f0 [ 74.022082][ T5753] tun_set_iff+0x463/0xf20 [ 74.022114][ T5753] __tun_chr_ioctl+0x7e5/0x1e70 [ 74.022147][ T5753] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 74.022186][ T5753] ? bpf_lsm_file_ioctl+0x9/0x20 [ 74.022204][ T5753] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 74.022227][ T5753] __se_sys_ioctl+0xfc/0x170 [ 74.022249][ T5753] do_syscall_64+0x166/0x520 [ 74.022267][ T5753] ? trace_irq_disable+0x3b/0x140 [ 74.022285][ T5753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.022303][ T5753] ? clear_bhb_loop+0x70/0xc0 [ 74.022324][ T5753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.022341][ T5753] RIP: 0033:0x7f556c79e559 [ 74.022364][ T5753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.022378][ T5753] RSP: 002b:00007f556d675028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.022402][ T5753] RAX: ffffffffffffffda RBX: 00007f556ca25fa0 RCX: 00007f556c79e559 [ 74.022415][ T5753] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000005 [ 74.022426][ T5753] RBP: 00007f556c8358b0 R08: 0000000000000000 R09: 0000000000000000 [ 74.022437][ T5753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.022448][ T5753] R13: 00007f556ca26038 R14: 00007f556ca25fa0 R15: 00007ffd3734f4c8 [ 74.022478][ T5753] [ 74.057051][ T5614] veth0_macvtap: entered promiscuous mode [ 74.066759][ T5614] veth1_macvtap: entered promiscuous mode [ 74.074340][ T5611] veth1_vlan: entered promiscuous mode [ 74.214842][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.265930][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.314271][ T5619] Bluetooth: hci0: command tx timeout [ 74.386356][ T51] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.386398][ T51] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.386431][ T51] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.386468][ T51] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.386500][ T51] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.386532][ T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.386564][ T51] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.392880][ T5611] veth0_macvtap: entered promiscuous mode [ 74.403087][ T5756] capability: warning: `syz.0.5' uses deprecated v2 capabilities in a way that may be insecure [ 74.409824][ T5611] veth1_macvtap: entered promiscuous mode [ 74.416637][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.416656][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.472402][ T5619] Bluetooth: hci1: command tx timeout [ 74.532777][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.538392][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.538410][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.543150][ T5605] Bluetooth: hci3: command tx timeout [ 74.543227][ T5619] Bluetooth: hci2: command tx timeout [ 74.587628][ T3338] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.625153][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.660662][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.660684][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.683860][ T172] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.688346][ T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.803905][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.803925][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.889616][ T5764] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.896678][ T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.953812][ T172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.953833][ T172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.003740][ T172] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.087828][ T5764] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 75.108494][ T5767] scsi_strcpy_devinfo: vendor string '¼QTò?¬Ý]Ð+É,r' is too long [ 75.120032][ T172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.120061][ T172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.517013][ T5779] syz.1.12 (5779): /proc/5778/oom_adj is deprecated, please use /proc/5778/oom_score_adj instead. [ 75.587551][ T5781] ======================================================= [ 75.587551][ T5781] WARNING: The mand mount option has been deprecated and [ 75.587551][ T5781] and is ignored by this kernel. Remove the mand [ 75.587551][ T5781] option from the mount to silence this warning. [ 75.587551][ T5781] ======================================================= [ 75.710585][ T5785] fuse: Bad value for 'fd' [ 75.825608][ T5789] bonding: bo is being created... [ 76.358398][ T5813] fuse: Bad value for 'fd' [ 76.382120][ T5619] Bluetooth: hci0: command tx timeout [ 76.543461][ T5619] Bluetooth: hci1: command tx timeout [ 76.634852][ T5605] Bluetooth: hci3: command tx timeout [ 76.634904][ T5619] Bluetooth: hci2: command tx timeout [ 76.747726][ T5831] fuse: Bad value for 'rootmode' [ 76.799084][ T5833] fuse: Invalid rootmode [ 76.887920][ T5841] FAULT_INJECTION: forcing a failure. [ 76.887920][ T5841] name failslab, interval 1, probability 0, space 0, times 0 [ 76.887951][ T5841] CPU: 0 UID: 0 PID: 5841 Comm: syz.3.39 Not tainted syzkaller #0 PREEMPT(full) [ 76.887972][ T5841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 76.887984][ T5841] Call Trace: [ 76.887991][ T5841] [ 76.887999][ T5841] dump_stack_lvl+0xe8/0x150 [ 76.888029][ T5841] should_fail_ex+0x3eb/0x540 [ 76.888057][ T5841] ? alloc_slab_obj_exts+0x5c/0x180 [ 76.888080][ T5841] should_failslab+0xa8/0x100 [ 76.888101][ T5841] ? alloc_slab_obj_exts+0x5c/0x180 [ 76.888122][ T5841] __kmalloc_flags_noprof+0x123/0x790 [ 76.888152][ T5841] ? alloc_slab_obj_exts+0x5c/0x180 [ 76.888181][ T5841] alloc_slab_obj_exts+0x5c/0x180 [ 76.888206][ T5841] __memcg_slab_post_alloc_hook+0x5f0/0xdb0 [ 76.888251][ T5841] ? sk_prot_alloc+0x57/0x210 [ 76.888274][ T5841] kmem_cache_alloc_noprof+0x362/0x600 [ 76.888297][ T5841] ? sk_prot_alloc+0x57/0x210 [ 76.888324][ T5841] ? kmem_cache_alloc_noprof+0x151/0x600 [ 76.888349][ T5841] ? sk_prot_alloc+0x57/0x210 [ 76.888377][ T5841] sk_prot_alloc+0x57/0x210 [ 76.888398][ T5841] ? sk_alloc+0x27/0x390 [ 76.888422][ T5841] sk_alloc+0x3a/0x390 [ 76.888447][ T5841] inet6_create+0x81a/0x1270 [ 76.888470][ T5841] ? inet6_create+0x80/0x1270 [ 76.888499][ T5841] __sock_create+0x4b5/0xac0 [ 76.888534][ T5841] __sys_socket+0xd6/0x1b0 [ 76.888554][ T5841] __x64_sys_socket+0x7a/0x90 [ 76.888573][ T5841] do_syscall_64+0x166/0x520 [ 76.888594][ T5841] ? trace_irq_disable+0x3b/0x140 [ 76.888614][ T5841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.888633][ T5841] ? clear_bhb_loop+0x70/0xc0 [ 76.888656][ T5841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.888675][ T5841] RIP: 0033:0x7fb41c99e559 [ 76.888693][ T5841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.888709][ T5841] RSP: 002b:00007fb41d8b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 76.888730][ T5841] RAX: ffffffffffffffda RBX: 00007fb41cc25fa0 RCX: 00007fb41c99e559 [ 76.888744][ T5841] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 76.888755][ T5841] RBP: 00007fb41ca358b0 R08: 0000000000000000 R09: 0000000000000000 [ 76.888767][ T5841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.888778][ T5841] R13: 00007fb41cc26038 R14: 00007fb41cc25fa0 R15: 00007ffc4ee7e3e8 [ 76.888808][ T5841] [ 77.239984][ T5854] fuse: Bad value for 'rootmode' [ 77.358659][ T5859] fuse: Invalid rootmode [ 77.639686][ T5872] FAULT_INJECTION: forcing a failure. [ 77.639686][ T5872] name failslab, interval 1, probability 0, space 0, times 0 [ 77.639716][ T5872] CPU: 1 UID: 0 PID: 5872 Comm: syz.1.51 Not tainted syzkaller #0 PREEMPT(full) [ 77.639737][ T5872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 77.639748][ T5872] Call Trace: [ 77.639755][ T5872] [ 77.639763][ T5872] dump_stack_lvl+0xe8/0x150 [ 77.639795][ T5872] should_fail_ex+0x3eb/0x540 [ 77.639826][ T5872] should_failslab+0xa8/0x100 [ 77.639848][ T5872] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 77.639876][ T5872] ? __d_alloc+0x37/0x7f0 [ 77.639902][ T5872] ? __d_alloc+0x37/0x7f0 [ 77.639936][ T5872] __d_alloc+0x37/0x7f0 [ 77.639968][ T5872] d_alloc+0x4b/0x190 [ 77.639993][ T5872] ? lookup_one_qstr_excl+0xc4/0x360 [ 77.640024][ T5872] lookup_one_qstr_excl+0xd8/0x360 [ 77.640052][ T5872] ? lookup_noperm_common+0x245/0x430 [ 77.640081][ T5872] start_dirop+0x5c/0x90 [ 77.640107][ T5872] simple_start_creating+0xcc/0x110 [ 77.640137][ T5872] ? __pfx_simple_start_creating+0x10/0x10 [ 77.640166][ T5872] ? do_raw_spin_unlock+0xf5/0x200 [ 77.640192][ T5872] ? mntput+0x65/0xc0 [ 77.640228][ T5872] debugfs_start_creating+0xca/0x1b0 [ 77.640249][ T5872] __debugfs_create_file+0x6f/0x400 [ 77.640273][ T5872] debugfs_create_file_full+0x3f/0x60 [ 77.640296][ T5872] kvm_create_vm_debugfs+0x471/0x8f0 [ 77.640334][ T5872] ? __pfx_kvm_create_vm_debugfs+0x10/0x10 [ 77.640376][ T5872] kvm_dev_ioctl+0x1245/0x1700 [ 77.640413][ T5872] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 77.640443][ T5872] ? bpf_lsm_file_ioctl+0x9/0x20 [ 77.640462][ T5872] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 77.640489][ T5872] __se_sys_ioctl+0xfc/0x170 [ 77.640512][ T5872] do_syscall_64+0x166/0x520 [ 77.640533][ T5872] ? trace_irq_disable+0x3b/0x140 [ 77.640552][ T5872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.640571][ T5872] ? clear_bhb_loop+0x70/0xc0 [ 77.640594][ T5872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.640612][ T5872] RIP: 0033:0x7f18da59e559 [ 77.640629][ T5872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.640645][ T5872] RSP: 002b:00007f18db408028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.640666][ T5872] RAX: ffffffffffffffda RBX: 00007f18da825fa0 RCX: 00007f18da59e559 [ 77.640680][ T5872] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 77.640691][ T5872] RBP: 00007f18da6358b0 R08: 0000000000000000 R09: 0000000000000000 [ 77.640702][ T5872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.640714][ T5872] R13: 00007f18da826038 R14: 00007f18da825fa0 R15: 00007fff7b2aa398 [ 77.640746][ T5872] [ 78.005096][ T5877] fuse: Bad value for 'rootmode' [ 78.158657][ T5884] .: renamed from bond0 (while UP) [ 78.459531][ T5897] fuse: Unknown parameter 'use00000000000000000000' [ 78.827231][ T5913] process 'syz.3.70' launched './file1' with NULL argv: empty string added [ 79.017712][ T5918] fuse: Unknown parameter 'use00000000000000000000' [ 79.144719][ T3372] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.323231][ T3372] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 syzkaller syzkaller login: [ 79.454579][ T3372] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.627291][ T5605] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.628928][ T5605] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.631200][ T5605] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.656103][ T5605] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.656670][ T5605] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.764116][ T3372] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.789738][ T27] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.965207][ T5927] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 80.159933][ T5947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.80'. [ 80.358366][ T3372] bridge_slave_1: left allmulticast mode [ 80.358405][ T3372] bridge_slave_1: left promiscuous mode [ 80.360487][ T3372] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.435327][ T3372] bridge_slave_0: left allmulticast mode [ 80.435352][ T3372] bridge_slave_0: left promiscuous mode [ 80.435565][ T3372] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.633385][ T33] audit: type=1800 audit(1792084465.391:2): pid=5965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.83" name=08 dev="sda1" ino=2044 res=0 errno=-22 [ 80.750347][ T5968] fuse: Unknown parameter 'use00000000000000000000' [ 80.902303][ T5974] FAULT_INJECTION: forcing a failure. [ 80.902303][ T5974] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 80.902332][ T5974] CPU: 1 UID: 0 PID: 5974 Comm: syz.0.86 Not tainted syzkaller #0 PREEMPT(full) [ 80.902354][ T5974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 80.902365][ T5974] Call Trace: [ 80.902372][ T5974] [ 80.902380][ T5974] dump_stack_lvl+0xe8/0x150 [ 80.902411][ T5974] should_fail_ex+0x3eb/0x540 [ 80.902440][ T5974] prepare_alloc_pages+0x21e/0x5f0 [ 80.902475][ T5974] __alloc_frozen_pages_noprof+0x17c/0x410 [ 80.902508][ T5974] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 80.902553][ T5974] ? policy_nodemask+0x2cc/0x8e0 [ 80.902580][ T5974] alloc_pages_mpol+0x21e/0x390 [ 80.902606][ T5974] folio_alloc_mpol_noprof+0x39/0x160 [ 80.902638][ T5974] shmem_alloc_and_add_folio+0x43e/0xf60 [ 80.902668][ T5974] ? filemap_get_entry+0xcd/0x3f0 [ 80.902704][ T5974] ? filemap_get_entry+0xcd/0x3f0 [ 80.902731][ T5974] ? __pfx_filemap_get_entry+0x10/0x10 [ 80.902759][ T5974] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 80.902792][ T5974] ? shmem_allowable_huge_orders+0x34c/0x6c0 [ 80.902826][ T5974] shmem_get_folio_gfp+0x594/0x1330 [ 80.902870][ T5974] shmem_fallocate+0x996/0xf10 [ 80.902909][ T5974] ? __pfx_shmem_fallocate+0x10/0x10 [ 80.902931][ T5974] ? lock_acquire+0x115/0x350 [ 80.902969][ T5974] vfs_fallocate+0x65a/0x7e0 [ 80.902986][ T5974] ? __fget_files+0x2a/0x420 [ 80.903016][ T5974] ? __pfx_vfs_fallocate+0x10/0x10 [ 80.903031][ T5974] ? __fget_files+0x2a/0x420 [ 80.903060][ T5974] ? fdget+0x1ac/0x250 [ 80.903088][ T5974] __x64_sys_fallocate+0xbf/0x110 [ 80.903109][ T5974] do_syscall_64+0x166/0x520 [ 80.903129][ T5974] ? trace_irq_disable+0x3b/0x140 [ 80.903148][ T5974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.903166][ T5974] ? clear_bhb_loop+0x70/0xc0 [ 80.903190][ T5974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.903209][ T5974] RIP: 0033:0x7f556c79e559 [ 80.903229][ T5974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.903244][ T5974] RSP: 002b:00007f556d675028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 80.903266][ T5974] RAX: ffffffffffffffda RBX: 00007f556ca25fa0 RCX: 00007f556c79e559 [ 80.903280][ T5974] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 80.903291][ T5974] RBP: 00007f556c8358b0 R08: 0000000000000000 R09: 0000000000000000 [ 80.903303][ T5974] R10: 000000000008ffff R11: 0000000000000246 R12: 0000000000000000 [ 80.903314][ T5974] R13: 00007f556ca26038 R14: 00007f556ca25fa0 R15: 00007ffd3734f4c8 [ 80.903347][ T5974] [ 81.176772][ T3372] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.199313][ T3372] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.201235][ T3372] bond0 (unregistering): Released all slaves [ 81.260593][ T5979] FAULT_INJECTION: forcing a failure. [ 81.260593][ T5979] name failslab, interval 1, probability 0, space 0, times 0 [ 81.260621][ T5979] CPU: 1 UID: 0 PID: 5979 Comm: syz.1.87 Not tainted syzkaller #0 PREEMPT(full) [ 81.260642][ T5979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 81.260653][ T5979] Call Trace: [ 81.260661][ T5979] [ 81.260668][ T5979] dump_stack_lvl+0xe8/0x150 [ 81.260698][ T5979] should_fail_ex+0x3eb/0x540 [ 81.260727][ T5979] ? __alloc_skb+0x1db/0x7a0 [ 81.260748][ T5979] should_failslab+0xa8/0x100 [ 81.260769][ T5979] ? __alloc_skb+0x1db/0x7a0 [ 81.260787][ T5979] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 81.260813][ T5979] ? __alloc_skb+0x18d/0x7a0 [ 81.260834][ T5979] ? __alloc_skb+0x1db/0x7a0 [ 81.260879][ T5979] __alloc_skb+0x1db/0x7a0 [ 81.260904][ T5979] alloc_uevent_skb+0x7d/0x230 [ 81.260927][ T5979] kobject_uevent_net_broadcast+0x184/0x560 [ 81.260963][ T5979] kobject_uevent_env+0x566/0x9e0 [ 81.261001][ T5979] netdev_queue_update_kobjects+0x340/0x6b0 [ 81.261042][ T5979] netif_set_real_num_tx_queues+0x265/0xa30 [ 81.261076][ T5979] tun_attach+0x1191/0x1560 [ 81.261105][ T5979] ? __mutex_lock+0x5cd/0x15a0 [ 81.261143][ T5979] ? tun_not_capable+0x148/0x1f0 [ 81.261174][ T5979] tun_set_iff+0x463/0xf20 [ 81.261207][ T5979] __tun_chr_ioctl+0x7e5/0x1e70 [ 81.261242][ T5979] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 81.261270][ T5979] ? __fget_files+0x2a/0x420 [ 81.261319][ T5979] ? __fget_files+0x2a/0x420 [ 81.261352][ T5979] ? bpf_lsm_file_ioctl+0x9/0x20 [ 81.261370][ T5979] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 81.261396][ T5979] __se_sys_ioctl+0xfc/0x170 [ 81.261426][ T5979] do_syscall_64+0x166/0x520 [ 81.261460][ T5979] ? trace_irq_disable+0x3b/0x140 [ 81.261481][ T5979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.261501][ T5979] ? clear_bhb_loop+0x70/0xc0 [ 81.261524][ T5979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.261542][ T5979] RIP: 0033:0x7f18da59e559 [ 81.261560][ T5979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.261574][ T5979] RSP: 002b:00007f18db3e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 81.261595][ T5979] RAX: ffffffffffffffda RBX: 00007f18da826090 RCX: 00007f18da59e559 [ 81.261609][ T5979] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000005 [ 81.261621][ T5979] RBP: 00007f18da6358b0 R08: 0000000000000000 R09: 0000000000000000 [ 81.261633][ T5979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.261644][ T5979] R13: 00007f18da826128 R14: 00007f18da826090 R15: 00007fff7b2aa398 [ 81.261675][ T5979] [ 81.369366][ T5933] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.598224][ T5984] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 81.742529][ T5605] Bluetooth: hci2: command tx timeout [ 81.901854][ T5996] FAULT_INJECTION: forcing a failure. [ 81.901854][ T5996] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 81.901884][ T5996] CPU: 1 UID: 0 PID: 5996 Comm: syz.3.94 Not tainted syzkaller #0 PREEMPT(full) [ 81.901906][ T5996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 81.901918][ T5996] Call Trace: [ 81.901925][ T5996] [ 81.901933][ T5996] dump_stack_lvl+0xe8/0x150 [ 81.901969][ T5996] should_fail_ex+0x3eb/0x540 [ 81.902000][ T5996] _copy_from_user+0x2d/0xb0 [ 81.902027][ T5996] ucma_write+0x158/0x2f0 [ 81.902057][ T5996] ? __pfx_ucma_write+0x10/0x10 [ 81.902081][ T5996] ? security_file_permission+0x75/0x260 [ 81.902104][ T5996] ? rw_verify_area+0x203/0x4c0 [ 81.902136][ T5996] ? __pfx_ucma_write+0x10/0x10 [ 81.902161][ T5996] vfs_write+0x296/0xba0 [ 81.902197][ T5996] ? __pfx_vfs_write+0x10/0x10 [ 81.902226][ T5996] ? __fget_files+0x2a/0x420 [ 81.902251][ T5996] ? __fget_files+0x3a2/0x420 [ 81.902276][ T5996] ? __fget_files+0x2a/0x420 [ 81.902305][ T5996] ? fdget+0x1ac/0x250 [ 81.902337][ T5996] ksys_write+0x150/0x270 [ 81.902366][ T5996] ? __pfx_ksys_write+0x10/0x10 [ 81.902404][ T5996] do_syscall_64+0x166/0x520 [ 81.902425][ T5996] ? trace_irq_disable+0x3b/0x140 [ 81.902445][ T5996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.902464][ T5996] ? clear_bhb_loop+0x70/0xc0 [ 81.902487][ T5996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.902506][ T5996] RIP: 0033:0x7fb41c99e559 [ 81.902523][ T5996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.902539][ T5996] RSP: 002b:00007fb41d8b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 81.902559][ T5996] RAX: ffffffffffffffda RBX: 00007fb41cc25fa0 RCX: 00007fb41c99e559 [ 81.902572][ T5996] RDX: 0000000000000020 RSI: 0000200000000100 RDI: 0000000000000004 [ 81.902585][ T5996] RBP: 00007fb41ca358b0 R08: 0000000000000000 R09: 0000000000000000 [ 81.902596][ T5996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.902607][ T5996] R13: 00007fb41cc26038 R14: 00007fb41cc25fa0 R15: 00007ffc4ee7e3e8 [ 81.902638][ T5996] [ 82.005575][ T5999] fuse: Unknown parameter 'user_i00000000000000000000' [ 82.861607][ T3372] hsr_slave_0: left promiscuous mode [ 82.870789][ T3372] hsr_slave_1: left promiscuous mode [ 82.877528][ T3372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.877570][ T3372] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.898619][ T3372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.898638][ T3372] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.939538][ T3372] veth1_macvtap: left promiscuous mode [ 82.939590][ T3372] veth0_macvtap: left promiscuous mode [ 82.939686][ T3372] veth1_vlan: left promiscuous mode [ 82.939765][ T3372] veth0_vlan: left promiscuous mode [ 83.623200][ T3372] team0 (unregistering): Port device team_slave_1 removed [ 83.642734][ T3372] team0 (unregistering): Port device team_slave_0 removed [ 83.673593][ T6047] overlayfs: missing 'lowerdir' [ 83.815976][ T33] audit: type=1804 audit(1792084468.581:3): pid=6049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.111" name="/newroot/31/file0" dev="fuse" ino=1 res=1 errno=0 [ 83.839230][ T5605] Bluetooth: hci2: command tx timeout [ 83.962286][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 84.509664][ T6082] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 84.509700][ T6082] overlayfs: missing 'lowerdir' [ 84.588877][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.589428][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.589581][ T5933] bridge_slave_0: entered allmulticast mode [ 84.618158][ T5933] bridge_slave_0: entered promiscuous mode [ 84.633621][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.633776][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.633900][ T5933] bridge_slave_1: entered allmulticast mode [ 84.635456][ T5933] bridge_slave_1: entered promiscuous mode [ 84.704351][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.707614][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.770687][ T5933] team0: Port device team_slave_0 added [ 84.779357][ T5933] team0: Port device team_slave_1 added [ 84.816045][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.816069][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.816093][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.818093][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.818106][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.818130][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.067245][ T5933] hsr_slave_0: entered promiscuous mode [ 85.070044][ T5933] hsr_slave_1: entered promiscuous mode [ 85.073762][ T5933] debugfs: 'hsr0' already exists in 'hsr' [ 85.073781][ T5933] Cannot create hsr debugfs directory [ 85.174687][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 85.248220][ T33] audit: type=1804 audit(1792084470.011:4): pid=6100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.123" name="/newroot/34/file0" dev="fuse" ino=1 res=1 errno=0 [ 85.432520][ T6110] FAULT_INJECTION: forcing a failure. [ 85.432520][ T6110] name failslab, interval 1, probability 0, space 0, times 0 [ 85.432561][ T6110] CPU: 1 UID: 0 PID: 6110 Comm: syz.0.126 Tainted: G Y syzkaller #0 PREEMPT(full) [ 85.432587][ T6110] Tainted: [Y]=FORCED_BIND [ 85.432594][ T6110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 85.432604][ T6110] Call Trace: [ 85.432612][ T6110] [ 85.432620][ T6110] dump_stack_lvl+0xe8/0x150 [ 85.432651][ T6110] should_fail_ex+0x3eb/0x540 [ 85.432681][ T6110] should_failslab+0xa8/0x100 [ 85.432704][ T6110] __kmalloc_cache_node_noprof+0xa5/0x620 [ 85.432731][ T6110] ? __get_vm_area_node+0x155/0x2f0 [ 85.432750][ T6110] ? __get_vm_area_node+0x155/0x2f0 [ 85.432778][ T6110] __get_vm_area_node+0x155/0x2f0 [ 85.432804][ T6110] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 85.432826][ T6110] ? kvm_arch_prepare_memory_region+0x335/0x1000 [ 85.432853][ T6110] ? __mutex_trylock_common+0x15f/0x270 [ 85.432900][ T6110] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 85.432933][ T6110] ? kvm_arch_prepare_memory_region+0x335/0x1000 [ 85.432951][ T6110] __vmalloc_noprof+0xd2/0x120 [ 85.432975][ T6110] ? kvm_arch_prepare_memory_region+0x335/0x1000 [ 85.432997][ T6110] kvm_arch_prepare_memory_region+0x335/0x1000 [ 85.433027][ T6110] kvm_set_memslot+0x599/0x1410 [ 85.433047][ T6110] ? __kmalloc_cache_noprof+0x148/0x600 [ 85.433067][ T6110] ? kvm_set_memory_region+0x6da/0xb90 [ 85.433101][ T6110] kvm_set_memory_region+0x944/0xb90 [ 85.433136][ T6110] kvm_vm_ioctl_set_memory_region+0x6f/0xa0 [ 85.433163][ T6110] kvm_vm_ioctl+0xb1c/0xcb0 [ 85.433190][ T6110] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 85.433240][ T6110] ? tomoyo_path_number_perm+0x219/0x5f0 [ 85.433268][ T6110] ? do_vfs_ioctl+0x116f/0x1530 [ 85.433290][ T6110] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 85.433311][ T6110] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 85.433333][ T6110] ? mas_walk+0x37e/0x490 [ 85.433360][ T6110] ? do_futex+0x3e7/0x4e0 [ 85.433403][ T6110] ? __fget_files+0x2a/0x420 [ 85.433431][ T6110] ? __fget_files+0x2a/0x420 [ 85.433457][ T6110] ? __fget_files+0x2a/0x420 [ 85.433487][ T6110] ? bpf_lsm_file_ioctl+0x9/0x20 [ 85.433506][ T6110] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 85.433530][ T6110] __se_sys_ioctl+0xfc/0x170 [ 85.433561][ T6110] do_syscall_64+0x166/0x520 [ 85.433582][ T6110] ? trace_irq_disable+0x3b/0x140 [ 85.433600][ T6110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.433619][ T6110] ? clear_bhb_loop+0x70/0xc0 [ 85.433641][ T6110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.433659][ T6110] RIP: 0033:0x7f556c79e559 [ 85.433675][ T6110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.433690][ T6110] RSP: 002b:00007f556d675028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.433709][ T6110] RAX: ffffffffffffffda RBX: 00007f556ca25fa0 RCX: 00007f556c79e559 [ 85.433722][ T6110] RDX: 00002000000001c0 RSI: 000000004020ae46 RDI: 0000000000000004 [ 85.433734][ T6110] RBP: 00007f556c8358b0 R08: 0000000000000000 R09: 0000000000000000 [ 85.433745][ T6110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.433756][ T6110] R13: 00007f556ca26038 R14: 00007f556ca25fa0 R15: 00007ffd3734f4c8 [ 85.433785][ T6110] [ 85.497737][ T6110] syz.0.126: vmalloc error: size 4, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 85.497915][ T6110] CPU: 0 UID: 0 PID: 6110 Comm: syz.0.126 Tainted: G Y syzkaller #0 PREEMPT(full) [ 85.497942][ T6110] Tainted: [Y]=FORCED_BIND [ 85.497949][ T6110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 85.497960][ T6110] Call Trace: [ 85.497968][ T6110] [ 85.497975][ T6110] dump_stack_lvl+0xe8/0x150 [ 85.498007][ T6110] warn_alloc+0x24d/0x270 [ 85.498035][ T6110] ? __kasan_kmalloc+0x22/0xb0 [ 85.498066][ T6110] ? __pfx_warn_alloc+0x10/0x10 [ 85.498091][ T6110] ? __get_vm_area_node+0x155/0x2f0 [ 85.498120][ T6110] ? __get_vm_area_node+0x2a9/0x2f0 [ 85.498150][ T6110] __vmalloc_node_range_noprof+0x396/0x16f0 [ 85.498182][ T6110] ? __mutex_trylock_common+0x15f/0x270 [ 85.498229][ T6110] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 85.498262][ T6110] ? kvm_arch_prepare_memory_region+0x335/0x1000 [ 85.498281][ T6110] __vmalloc_noprof+0xd2/0x120 [ 85.498304][ T6110] ? kvm_arch_prepare_memory_region+0x335/0x1000 [ 85.498327][ T6110] kvm_arch_prepare_memory_region+0x335/0x1000 [ 85.498357][ T6110] kvm_set_memslot+0x599/0x1410 [ 85.498382][ T6110] ? __kmalloc_cache_noprof+0x148/0x600 [ 85.498408][ T6110] ? kvm_set_memory_region+0x6da/0xb90 [ 85.498441][ T6110] kvm_set_memory_region+0x944/0xb90 [ 85.498478][ T6110] kvm_vm_ioctl_set_memory_region+0x6f/0xa0 [ 85.498506][ T6110] kvm_vm_ioctl+0xb1c/0xcb0 [ 85.498533][ T6110] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 85.498585][ T6110] ? tomoyo_path_number_perm+0x219/0x5f0 [ 85.498613][ T6110] ? do_vfs_ioctl+0x116f/0x1530 [ 85.498636][ T6110] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 85.498658][ T6110] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 85.498681][ T6110] ? mas_walk+0x37e/0x490 [ 85.498707][ T6110] ? do_futex+0x3e7/0x4e0 [ 85.498750][ T6110] ? __fget_files+0x2a/0x420 [ 85.498779][ T6110] ? __fget_files+0x2a/0x420 [ 85.498805][ T6110] ? __fget_files+0x2a/0x420 [ 85.498835][ T6110] ? bpf_lsm_file_ioctl+0x9/0x20 [ 85.498853][ T6110] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 85.498877][ T6110] __se_sys_ioctl+0xfc/0x170 [ 85.498900][ T6110] do_syscall_64+0x166/0x520 [ 85.498920][ T6110] ? trace_irq_disable+0x3b/0x140 [ 85.498939][ T6110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.498958][ T6110] ? clear_bhb_loop+0x70/0xc0 [ 85.498980][ T6110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.498999][ T6110] RIP: 0033:0x7f556c79e559 [ 85.499018][ T6110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.499033][ T6110] RSP: 002b:00007f556d675028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.499058][ T6110] RAX: ffffffffffffffda RBX: 00007f556ca25fa0 RCX: 00007f556c79e559 [ 85.499072][ T6110] RDX: 00002000000001c0 RSI: 000000004020ae46 RDI: 0000000000000004 [ 85.499085][ T6110] RBP: 00007f556c8358b0 R08: 0000000000000000 R09: 0000000000000000 [ 85.499097][ T6110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.499108][ T6110] R13: 00007f556ca26038 R14: 00007f556ca25fa0 R15: 00007ffd3734f4c8 [ 85.499140][ T6110] [ 85.499235][ T6110] Mem-Info: [ 85.499245][ T6110] active_anon:22071 inactive_anon:0 isolated_anon:0 [ 85.499245][ T6110] active_file:0 inactive_file:51930 isolated_file:0 [ 85.499245][ T6110] unevictable:0 dirty:1877 writeback:0 [ 85.499245][ T6110] slab_reclaimable:11077 slab_unreclaimable:90204 [ 85.499245][ T6110] mapped:24522 shmem:16983 pagetables:1078 [ 85.499245][ T6110] sec_pagetables:0 bounce:0 [ 85.499245][ T6110] kernel_misc_reclaimable:0 [ 85.499245][ T6110] free:1321904 free_pcp:9445 free_cma:0 [ 85.499297][ T6110] Node 0 active_anon:88284kB inactive_anon:0kB active_file:0kB inactive_file:207512kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:98088kB dirty:7492kB writeback:0kB shmem:67932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11216kB pagetables:4172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 85.499350][ T6110] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 85.499405][ T6110] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 85.499459][ T6110] lowmem_reserve[]: 0 2462 2463 2463 2463 [ 85.499493][ T6110] Node 0 DMA32 free:1340980kB boost:0kB min:33920kB low:42400kB high:50880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:88284kB inactive_anon:0kB active_file:0kB inactive_file:207512kB unevictable:0kB writepending:7492kB zspages:0kB present:3129332kB managed:2521404kB mlocked:0kB bounce:0kB free_pcp:34000kB local_pcp:9272kB free_cma:0kB [ 85.499549][ T6110] lowmem_reserve[]: 0 0 1 1 1 [ 85.499580][ T6110] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 85.499633][ T6110] lowmem_reserve[]: 0 0 0 0 0 [ 85.499664][ T6110] Node 1 Normal free:3931276kB boost:0kB min:55960kB low:69948kB high:83936kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:16kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:3776kB local_pcp:2612kB free_cma:0kB [ 85.499721][ T6110] lowmem_reserve[]: 0 0 0 0 0 [ 85.499752][ T6110] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 85.499881][ T6110] Node 0 DMA32: 35*4kB (UME) 89*8kB (UE) 2*16kB (UM) 1*32kB (M) 2*64kB (UM) 0*128kB 2*256kB (U) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (ME) 325*4096kB (M) = 1340948kB [ 85.500027][ T6110] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 85.500128][ T6110] Node 1 Normal: 1*4kB (U) 1*8kB (M) 2*16kB (UM) 1*32kB (M) 7*64kB (U) 5*128kB (U) 2*256kB (UM) 1*512kB (U) 3*1024kB (UM) 3*2048kB (UM) 957*4096kB (M) = 3931276kB [ 85.500279][ T6110] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 85.500296][ T6110] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 85.500312][ T6110] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 85.500327][ T6110] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 85.500342][ T6110] 68909 total pagecache pages [ 85.500353][ T6110] 0 pages in swap cache [ 85.500360][ T6110] Free swap = 124996kB [ 85.500367][ T6110] Total swap = 124996kB [ 85.500374][ T6110] 2097051 pages RAM [ 85.500380][ T6110] 0 pages HighMem/MovableOnly [ 85.500386][ T6110] 434737 pages reserved [ 85.500393][ T6110] 0 pages cma reserved [ 85.902277][ T5605] Bluetooth: hci2: command tx timeout [ 86.035001][ T6121] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 86.035028][ T6121] overlayfs: missing 'lowerdir' [ 86.429713][ T33] audit: type=1326 audit(1792084471.191:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6129 comm="syz.0.132" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556c79e559 code=0x7ffc0000 [ 86.429763][ T33] audit: type=1326 audit(1792084471.191:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6129 comm="syz.0.132" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556c79e559 code=0x7ffc0000 [ 86.446191][ T33] audit: type=1326 audit(1792084471.211:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6129 comm="syz.0.132" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f556c79e559 code=0x7ffc0000 [ 86.446236][ T33] audit: type=1326 audit(1792084471.211:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6129 comm="syz.0.132" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556c79e559 code=0x7ffc0000 [ 86.446270][ T33] audit: type=1326 audit(1792084471.211:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6129 comm="syz.0.132" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556c79e559 code=0x7ffc0000 [ 86.453706][ T33] audit: type=1326 audit(1792084471.221:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6129 comm="syz.0.132" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f556c79e559 code=0x7ffc0000 [ 86.453749][ T33] audit: type=1326 audit(1792084471.221:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6129 comm="syz.0.132" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556c79e559 code=0x7ffc0000 [ 86.453789][ T33] audit: type=1326 audit(1792084471.221:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6129 comm="syz.0.132" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556c79e559 code=0x7ffc0000 [ 86.455377][ T33] audit: type=1326 audit(1792084471.221:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6129 comm="syz.0.132" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f556c79e559 code=0x7ffc0000 [ 86.641388][ T33] audit: type=1804 audit(1792084471.401:14): pid=6135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.134" name="/newroot/39/file0" dev="fuse" ino=1 res=1 errno=0 [ 86.845485][ T995] cfg80211: failed to load regulatory.db [ 86.914245][ T5933] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.931885][ T5933] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.934205][ T5933] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.944713][ T5933] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.951332][ T5933] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.971443][ T5933] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.977960][ T5933] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.994380][ T5933] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.246188][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.288690][ T5933] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.312225][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.312342][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.337571][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.337673][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.982112][ T5605] Bluetooth: hci2: command tx timeout syzkaller syzkaller login: [ 88.516655][ T6211] fuse: Unknown parameter 'use00000000000000000000' [ 88.547262][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.696594][ T5933] veth0_vlan: entered promiscuous mode [ 88.747265][ T5933] veth1_vlan: entered promiscuous mode [ 88.848468][ T5933] veth0_macvtap: entered promiscuous mode [ 88.868059][ T5933] veth1_macvtap: entered promiscuous mode [ 88.933211][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.974702][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.033583][ T172] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.034465][ T172] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.037947][ T6230] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 89.037974][ T6230] overlayfs: missing 'lowerdir' [ 89.112315][ T3338] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.112632][ T3338] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.251491][ T6245] fuse: Unknown parameter 'use00000000000000000000' [ 89.277729][ T3372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.277750][ T3372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.407781][ T172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.407801][ T172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.986217][ T6268] FAULT_INJECTION: forcing a failure. [ 89.986217][ T6268] name fail_futex, interval 1, probability 0, space 0, times 1 [ 89.986250][ T6268] CPU: 0 UID: 0 PID: 6268 Comm: syz.2.163 Tainted: G Y syzkaller #0 PREEMPT(full) [ 89.986277][ T6268] Tainted: [Y]=FORCED_BIND [ 89.986284][ T6268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 89.986295][ T6268] Call Trace: [ 89.986303][ T6268] [ 89.986312][ T6268] dump_stack_lvl+0xe8/0x150 [ 89.986344][ T6268] should_fail_ex+0x3eb/0x540 [ 89.986373][ T6268] get_futex_key+0x1b4/0x1580 [ 89.986396][ T6268] ? __lock_acquire+0x747/0x2de0 [ 89.986418][ T6268] ? kasan_save_track+0x3e/0x80 [ 89.986445][ T6268] ? __kasan_slab_free+0x5c/0x80 [ 89.986461][ T6268] ? kmem_cache_free+0x182/0x650 [ 89.986498][ T6268] ? __pfx_get_futex_key+0x10/0x10 [ 89.986529][ T6268] futex_wake+0x119/0x5f0 [ 89.986562][ T6268] ? __pfx_futex_wake+0x10/0x10 [ 89.986604][ T6268] do_futex+0x458/0x4e0 [ 89.986633][ T6268] ? __pfx_do_futex+0x10/0x10 [ 89.986654][ T6268] ? kmem_cache_free+0x182/0x650 [ 89.986688][ T6268] __se_sys_futex+0x3a8/0x450 [ 89.986719][ T6268] ? __pfx___se_sys_futex+0x10/0x10 [ 89.986743][ T6268] ? rcu_is_watching+0x16/0xb0 [ 89.986771][ T6268] ? __x64_sys_futex+0x21/0xf0 [ 89.986798][ T6268] do_syscall_64+0x166/0x520 [ 89.986819][ T6268] ? trace_irq_disable+0x3b/0x140 [ 89.986838][ T6268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.986857][ T6268] ? clear_bhb_loop+0x70/0xc0 [ 89.986880][ T6268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.986898][ T6268] RIP: 0033:0x7f74a279e559 [ 89.986916][ T6268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.986931][ T6268] RSP: 002b:00007f74a35d90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 89.986952][ T6268] RAX: ffffffffffffffda RBX: 00007f74a2a25fa8 RCX: 00007f74a279e559 [ 89.986966][ T6268] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f74a2a25fac [ 89.986977][ T6268] RBP: 00007f74a2a25fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 89.986990][ T6268] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 89.987001][ T6268] R13: 00007f74a2a26038 R14: 00007fffa8b0a6c0 R15: 00007fffa8b0a7a8 [ 89.987030][ T6268] [ 90.322045][ T6273] fuse: Unknown parameter 'user_i00000000000000000000' [ 90.948879][ T6302] fuse: Unknown parameter 'user_i00000000000000000000' [ 91.109759][ T6309] program syz.2.180 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.109992][ T6309] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 91.542259][ T5677] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.703109][ T5677] usb 3-1: Using ep0 maxpacket: 8 [ 91.705762][ T5677] usb 3-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 91.711216][ T5677] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 91.711268][ T5677] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 91.711290][ T5677] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 91.711311][ T5677] usb 3-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 91.711329][ T5677] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.711369][ T5677] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.781171][ T5677] usbtmc 3-1:16.0: bulk endpoints not found [ 91.918590][ T6328] fuse: Unknown parameter 'user_i00000000000000000000' [ 92.240162][ T33] kauditd_printk_skb: 6 callbacks suppressed [ 92.240179][ T33] audit: type=1804 audit(1792084477.034:21): pid=6336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.192" name="/newroot/50/file0" dev="fuse" ino=1 res=1 errno=0 [ 92.437661][ T6351] fuse: Unknown parameter 'user_id00000000000000000000' [ 93.185226][ T6370] fuse: Unknown parameter 'user_id00000000000000000000' [ 93.483211][ T33] audit: type=1804 audit(1792084478.284:22): pid=6378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.211" name="/newroot/67/file0" dev="fuse" ino=1 res=1 errno=0 [ 93.939960][ T6393] fuse: Unknown parameter 'user_id00000000000000000000' [ 94.297019][ T995] usb 3-1: USB disconnect, device number 2 [ 94.573000][ T6415] fuse: Bad value for 'fd' [ 94.885234][ T6428] program syz.0.232 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.923114][ T6431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.928394][ T6431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.938248][ T33] audit: type=1804 audit(1792084479.734:23): pid=6424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.230" name="/newroot/71/file0" dev="fuse" ino=1 res=1 errno=0 [ 95.093095][ T198] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 95.149216][ T6441] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 95.243969][ T198] usb 3-1: Using ep0 maxpacket: 8 [ 95.251321][ T198] usb 3-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 95.269573][ T198] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 95.269628][ T198] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 95.269649][ T198] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 95.269670][ T198] usb 3-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 95.269689][ T198] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.269726][ T198] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.356535][ T198] usbtmc 3-1:16.0: bulk endpoints not found [ 95.485235][ T6456] fuse: Bad value for 'fd' [ 95.967228][ T6472] kvm: pic: non byte write [ 96.277403][ T6492] fuse: Bad value for 'fd' [ 96.566265][ T6506] fuse: Unknown parameter 'fd0x0000000000000003' [ 96.645921][ T6509] FAULT_INJECTION: forcing a failure. [ 96.645921][ T6509] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 96.645955][ T6509] CPU: 1 UID: 0 PID: 6509 Comm: syz.1.252 Tainted: G Y syzkaller #0 PREEMPT(full) [ 96.645980][ T6509] Tainted: [Y]=FORCED_BIND [ 96.645987][ T6509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 96.645997][ T6509] Call Trace: [ 96.646006][ T6509] [ 96.646015][ T6509] dump_stack_lvl+0xe8/0x150 [ 96.646046][ T6509] should_fail_ex+0x3eb/0x540 [ 96.646074][ T6509] prepare_alloc_pages+0x21e/0x5f0 [ 96.646112][ T6509] __alloc_frozen_pages_noprof+0x17c/0x410 [ 96.646145][ T6509] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 96.646171][ T6509] ? __alloc_frozen_pages_noprof+0x24c/0x410 [ 96.646201][ T6509] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 96.646238][ T6509] __alloc_pages_noprof+0x10/0x100 [ 96.646267][ T6509] alloc_pages_bulk_noprof+0x67a/0x8a0 [ 96.646305][ T6509] ? alloc_pages_noprof+0x140/0x2b0 [ 96.646330][ T6509] __kasan_populate_vmalloc+0xb7/0x1c0 [ 96.646364][ T6509] alloc_vmap_area+0xd10/0x1410 [ 96.646400][ T6509] ? __pfx_alloc_vmap_area+0x10/0x10 [ 96.646419][ T6509] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 96.646444][ T6509] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 96.646468][ T6509] ? __get_vm_area_node+0x155/0x2f0 [ 96.646491][ T6509] __get_vm_area_node+0x200/0x2f0 [ 96.646532][ T6509] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 96.646555][ T6509] ? kvm_arch_prepare_memory_region+0x823/0x1000 [ 96.646622][ T6509] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 96.646661][ T6509] ? kvm_arch_prepare_memory_region+0x823/0x1000 [ 96.646680][ T6509] __vmalloc_noprof+0xd2/0x120 [ 96.646705][ T6509] ? kvm_arch_prepare_memory_region+0x823/0x1000 [ 96.646727][ T6509] kvm_arch_prepare_memory_region+0x823/0x1000 [ 96.646764][ T6509] kvm_set_memslot+0x599/0x1410 [ 96.646791][ T6509] ? __kmalloc_cache_noprof+0x148/0x600 [ 96.646817][ T6509] ? kvm_set_memory_region+0x6da/0xb90 [ 96.646855][ T6509] kvm_set_memory_region+0x944/0xb90 [ 96.646892][ T6509] kvm_vm_ioctl_set_memory_region+0x6f/0xa0 [ 96.646923][ T6509] kvm_vm_ioctl+0xb1c/0xcb0 [ 96.646953][ T6509] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 96.647010][ T6509] ? tomoyo_path_number_perm+0x219/0x5f0 [ 96.647040][ T6509] ? do_vfs_ioctl+0x116f/0x1530 [ 96.647063][ T6509] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 96.647090][ T6509] ? userfaultfd_unmap_complete+0x292/0x310 [ 96.647126][ T6509] ? do_futex+0x458/0x4e0 [ 96.647179][ T6509] ? __fget_files+0x2a/0x420 [ 96.647209][ T6509] ? __fget_files+0x2a/0x420 [ 96.647234][ T6509] ? __fget_files+0x2a/0x420 [ 96.647268][ T6509] ? bpf_lsm_file_ioctl+0x9/0x20 [ 96.647288][ T6509] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 96.647316][ T6509] __se_sys_ioctl+0xfc/0x170 [ 96.647342][ T6509] do_syscall_64+0x166/0x520 [ 96.647364][ T6509] ? trace_irq_disable+0x3b/0x140 [ 96.647384][ T6509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.647404][ T6509] ? clear_bhb_loop+0x70/0xc0 [ 96.647430][ T6509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.647450][ T6509] RIP: 0033:0x7f18da59e559 [ 96.647470][ T6509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.647486][ T6509] RSP: 002b:00007f18db408028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 96.647514][ T6509] RAX: ffffffffffffffda RBX: 00007f18da825fa0 RCX: 00007f18da59e559 [ 96.647527][ T6509] RDX: 00002000000001c0 RSI: 000000004020ae46 RDI: 0000000000000004 [ 96.647539][ T6509] RBP: 00007f18da6358b0 R08: 0000000000000000 R09: 0000000000000000 [ 96.647550][ T6509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.647562][ T6509] R13: 00007f18da826038 R14: 00007f18da825fa0 R15: 00007fff7b2aa398 [ 96.647594][ T6509] [ 96.647841][ T6509] syz.1.252: vmalloc error: size 4, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 96.647905][ T6509] CPU: 1 UID: 0 PID: 6509 Comm: syz.1.252 Tainted: G Y syzkaller #0 PREEMPT(full) [ 96.647930][ T6509] Tainted: [Y]=FORCED_BIND [ 96.647938][ T6509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 96.647949][ T6509] Call Trace: [ 96.647957][ T6509] [ 96.647965][ T6509] dump_stack_lvl+0xe8/0x150 [ 96.647993][ T6509] warn_alloc+0x24d/0x270 [ 96.648019][ T6509] ? lockdep_hardirqs_on+0x7b/0x110 [ 96.648045][ T6509] ? __pfx_warn_alloc+0x10/0x10 [ 96.648070][ T6509] ? kfree+0x1c5/0x650 [ 96.648100][ T6509] ? __get_vm_area_node+0x219/0x2f0 [ 96.648131][ T6509] __vmalloc_node_range_noprof+0x396/0x16f0 [ 96.648192][ T6509] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 96.648226][ T6509] ? kvm_arch_prepare_memory_region+0x823/0x1000 [ 96.648245][ T6509] __vmalloc_noprof+0xd2/0x120 [ 96.648268][ T6509] ? kvm_arch_prepare_memory_region+0x823/0x1000 [ 96.648292][ T6509] kvm_arch_prepare_memory_region+0x823/0x1000 [ 96.648324][ T6509] kvm_set_memslot+0x599/0x1410 [ 96.648346][ T6509] ? __kmalloc_cache_noprof+0x148/0x600 [ 96.648372][ T6509] ? kvm_set_memory_region+0x6da/0xb90 [ 96.648406][ T6509] kvm_set_memory_region+0x944/0xb90 [ 96.648444][ T6509] kvm_vm_ioctl_set_memory_region+0x6f/0xa0 [ 96.648473][ T6509] kvm_vm_ioctl+0xb1c/0xcb0 [ 96.648511][ T6509] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 96.648566][ T6509] ? tomoyo_path_number_perm+0x219/0x5f0 [ 96.648594][ T6509] ? do_vfs_ioctl+0x116f/0x1530 [ 96.648617][ T6509] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 96.648642][ T6509] ? userfaultfd_unmap_complete+0x292/0x310 [ 96.648674][ T6509] ? do_futex+0x458/0x4e0 [ 96.648718][ T6509] ? __fget_files+0x2a/0x420 [ 96.648747][ T6509] ? __fget_files+0x2a/0x420 [ 96.648774][ T6509] ? __fget_files+0x2a/0x420 [ 96.648801][ T6509] ? bpf_lsm_file_ioctl+0x9/0x20 [ 96.648817][ T6509] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 96.648841][ T6509] __se_sys_ioctl+0xfc/0x170 [ 96.648862][ T6509] do_syscall_64+0x166/0x520 [ 96.648882][ T6509] ? trace_irq_disable+0x3b/0x140 [ 96.648900][ T6509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.648919][ T6509] ? clear_bhb_loop+0x70/0xc0 [ 96.648942][ T6509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.648958][ T6509] RIP: 0033:0x7f18da59e559 [ 96.648975][ T6509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.648989][ T6509] RSP: 002b:00007f18db408028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 96.649008][ T6509] RAX: ffffffffffffffda RBX: 00007f18da825fa0 RCX: 00007f18da59e559 [ 96.649022][ T6509] RDX: 00002000000001c0 RSI: 000000004020ae46 RDI: 0000000000000004 [ 96.649035][ T6509] RBP: 00007f18da6358b0 R08: 0000000000000000 R09: 0000000000000000 [ 96.649047][ T6509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.649058][ T6509] R13: 00007f18da826038 R14: 00007f18da825fa0 R15: 00007fff7b2aa398 [ 96.649090][ T6509] [ 96.649167][ T6509] Mem-Info: [ 96.649177][ T6509] active_anon:21945 inactive_anon:0 isolated_anon:0 [ 96.649177][ T6509] active_file:0 inactive_file:53728 isolated_file:0 [ 96.649177][ T6509] unevictable:0 dirty:176 writeback:0 [ 96.649177][ T6509] slab_reclaimable:11329 slab_unreclaimable:92250 [ 96.649177][ T6509] mapped:24573 shmem:16981 pagetables:1103 [ 96.649177][ T6509] sec_pagetables:0 bounce:0 [ 96.649177][ T6509] kernel_misc_reclaimable:0 [ 96.649177][ T6509] free:1309991 free_pcp:16907 free_cma:0 [ 96.649228][ T6509] Node 0 active_anon:87780kB inactive_anon:0kB active_file:0kB inactive_file:214704kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:98292kB dirty:688kB writeback:0kB shmem:67924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11492kB pagetables:4272kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 96.649282][ T6509] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 96.649332][ T6509] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 96.649389][ T6509] lowmem_reserve[]: 0 2462 2463 2463 2463 [ 96.649425][ T6509] Node 0 DMA32 free:1291364kB boost:0kB min:33920kB low:42400kB high:50880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:87780kB inactive_anon:0kB active_file:0kB inactive_file:214704kB unevictable:0kB writepending:688kB zspages:0kB present:3129332kB managed:2521404kB mlocked:0kB bounce:0kB free_pcp:65864kB local_pcp:23500kB free_cma:0kB [ 96.649482][ T6509] lowmem_reserve[]: 0 0 1 1 1 [ 96.649522][ T6509] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 96.649576][ T6509] lowmem_reserve[]: 0 0 0 0 0 [ 96.649609][ T6509] Node 1 Normal free:3933240kB boost:0kB min:55960kB low:69948kB high:83936kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:16kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:1760kB local_pcp:156kB free_cma:0kB [ 96.649668][ T6509] lowmem_reserve[]: 0 0 0 0 0 [ 96.649699][ T6509] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 96.649803][ T6509] Node 0 DMA32: 1228*4kB (UME) 404*8kB (UM) 184*16kB (UM) 64*32kB (ME) 30*64kB (ME) 34*128kB (UME) 20*256kB (M) 10*512kB (M) 4*1024kB (M) 2*2048kB (UE) 306*4096kB (M) = 1291216kB [ 96.649949][ T6509] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 96.650041][ T6509] Node 1 Normal: 3*4kB (UM) 8*8kB (UM) 10*16kB (UM) 6*32kB (UM) 9*64kB (UM) 7*128kB (UM) 3*256kB (UM) 1*512kB (U) 2*1024kB (U) 2*2048kB (U) 958*4096kB (M) = 3933292kB [ 96.650188][ T6509] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 96.650270][ T6509] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 96.650287][ T6509] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 96.650301][ T6509] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 96.650317][ T6509] 70705 total pagecache pages [ 96.650324][ T6509] 0 pages in swap cache [ 96.650331][ T6509] Free swap = 124996kB [ 96.650338][ T6509] Total swap = 124996kB [ 96.650346][ T6509] 2097051 pages RAM [ 96.650358][ T6509] 0 pages HighMem/MovableOnly [ 96.650365][ T6509] 434737 pages reserved [ 96.650372][ T6509] 0 pages cma reserved [ 96.997676][ T6516] serio: Serial port ttyS3 [ 97.409613][ T6523] fuse: Unknown parameter '0x0000000000000003' [ 97.760910][ T6527] FAULT_INJECTION: forcing a failure. [ 97.760910][ T6527] name failslab, interval 1, probability 0, space 0, times 0 [ 97.760941][ T6527] CPU: 0 UID: 0 PID: 6527 Comm: syz.3.258 Tainted: G Y syzkaller #0 PREEMPT(full) [ 97.760967][ T6527] Tainted: [Y]=FORCED_BIND [ 97.760973][ T6527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 97.760983][ T6527] Call Trace: [ 97.760990][ T6527] [ 97.760997][ T6527] dump_stack_lvl+0xe8/0x150 [ 97.761025][ T6527] should_fail_ex+0x3eb/0x540 [ 97.761055][ T6527] should_failslab+0xa8/0x100 [ 97.761075][ T6527] ? __mpol_dup+0x79/0x330 [ 97.761094][ T6527] kmem_cache_alloc_noprof+0x9c/0x600 [ 97.761118][ T6527] ? lock_acquire+0x115/0x350 [ 97.761134][ T6527] ? __mpol_dup+0x79/0x330 [ 97.761160][ T6527] __mpol_dup+0x79/0x330 [ 97.761179][ T6527] ? __pfx___mpol_dup+0x10/0x10 [ 97.761202][ T6527] ? __asan_memset+0x22/0x50 [ 97.761230][ T6527] copy_process+0x1867/0x44b0 [ 97.761263][ T6527] ? copy_process+0xd17/0x44b0 [ 97.761299][ T6527] ? __pfx_copy_process+0x10/0x10 [ 97.761331][ T6527] kernel_clone+0x2d7/0x940 [ 97.761358][ T6527] ? __pfx_kernel_clone+0x10/0x10 [ 97.761378][ T6527] ? __raw_spin_lock_init+0x45/0x100 [ 97.761411][ T6527] ? do_futex+0x3e7/0x4e0 [ 97.761439][ T6527] __x64_sys_clone+0x1b6/0x230 [ 97.761463][ T6527] ? __pfx___x64_sys_clone+0x10/0x10 [ 97.761496][ T6527] ? rcu_is_watching+0x16/0xb0 [ 97.761532][ T6527] do_syscall_64+0x166/0x520 [ 97.761553][ T6527] ? trace_irq_disable+0x3b/0x140 [ 97.761573][ T6527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.761592][ T6527] ? clear_bhb_loop+0x70/0xc0 [ 97.761615][ T6527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.761634][ T6527] RIP: 0033:0x7fb41c99e559 [ 97.761652][ T6527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.761667][ T6527] RSP: 002b:00007fb41d8b5fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 97.761698][ T6527] RAX: ffffffffffffffda RBX: 00007fb41cc25fa0 RCX: 00007fb41c99e559 [ 97.761711][ T6527] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 97.761721][ T6527] RBP: 00007fb41ca358b0 R08: 0000000000000000 R09: 0000000000000000 [ 97.761732][ T6527] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 97.761743][ T6527] R13: 00007fb41cc26038 R14: 00007fb41cc25fa0 R15: 00007ffc4ee7e3e8 [ 97.761773][ T6527] [ 97.917383][ T5703] usb 3-1: USB disconnect, device number 3 [ 98.074391][ T6536] fuse: Unknown parameter 'fd0x0000000000000003' [ 98.121042][ T6537] FAULT_INJECTION: forcing a failure. [ 98.121042][ T6537] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 98.121075][ T6537] CPU: 1 UID: 0 PID: 6537 Comm: syz.1.262 Tainted: G Y syzkaller #0 PREEMPT(full) [ 98.121099][ T6537] Tainted: [Y]=FORCED_BIND [ 98.121106][ T6537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 98.121117][ T6537] Call Trace: [ 98.121125][ T6537] [ 98.121133][ T6537] dump_stack_lvl+0xe8/0x150 [ 98.121162][ T6537] should_fail_ex+0x3eb/0x540 [ 98.121192][ T6537] prepare_alloc_pages+0x21e/0x5f0 [ 98.121225][ T6537] __alloc_frozen_pages_noprof+0x17c/0x410 [ 98.121254][ T6537] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 98.121278][ T6537] ? __alloc_frozen_pages_noprof+0x24c/0x410 [ 98.121316][ T6537] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 98.121351][ T6537] __alloc_pages_noprof+0x10/0x100 [ 98.121379][ T6537] alloc_pages_bulk_noprof+0x67a/0x8a0 [ 98.121414][ T6537] ? alloc_pages_noprof+0x140/0x2b0 [ 98.121438][ T6537] __kasan_populate_vmalloc+0xb7/0x1c0 [ 98.121471][ T6537] alloc_vmap_area+0xd10/0x1410 [ 98.121513][ T6537] ? __pfx_alloc_vmap_area+0x10/0x10 [ 98.121532][ T6537] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 98.121560][ T6537] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 98.121584][ T6537] ? __get_vm_area_node+0x155/0x2f0 [ 98.121610][ T6537] __get_vm_area_node+0x200/0x2f0 [ 98.121639][ T6537] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 98.121662][ T6537] ? kvm_arch_prepare_memory_region+0x823/0x1000 [ 98.121714][ T6537] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 98.121744][ T6537] ? kvm_arch_prepare_memory_region+0x823/0x1000 [ 98.121761][ T6537] __vmalloc_noprof+0xd2/0x120 [ 98.121782][ T6537] ? kvm_arch_prepare_memory_region+0x823/0x1000 [ 98.121804][ T6537] kvm_arch_prepare_memory_region+0x823/0x1000 [ 98.121834][ T6537] kvm_set_memslot+0x599/0x1410 [ 98.121859][ T6537] ? __kmalloc_cache_noprof+0x148/0x600 [ 98.121884][ T6537] ? kvm_set_memory_region+0x6da/0xb90 [ 98.121918][ T6537] kvm_set_memory_region+0x944/0xb90 [ 98.121960][ T6537] kvm_vm_ioctl_set_memory_region+0x6f/0xa0 [ 98.121989][ T6537] kvm_vm_ioctl+0xb1c/0xcb0 [ 98.122017][ T6537] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 98.122071][ T6537] ? tomoyo_path_number_perm+0x219/0x5f0 [ 98.122098][ T6537] ? do_vfs_ioctl+0x116f/0x1530 [ 98.122121][ T6537] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 98.122145][ T6537] ? userfaultfd_unmap_complete+0x292/0x310 [ 98.122177][ T6537] ? do_futex+0x458/0x4e0 [ 98.122220][ T6537] ? __fget_files+0x2a/0x420 [ 98.122249][ T6537] ? __fget_files+0x2a/0x420 [ 98.122275][ T6537] ? __fget_files+0x2a/0x420 [ 98.122311][ T6537] ? bpf_lsm_file_ioctl+0x9/0x20 [ 98.122330][ T6537] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 98.122355][ T6537] __se_sys_ioctl+0xfc/0x170 [ 98.122379][ T6537] do_syscall_64+0x166/0x520 [ 98.122401][ T6537] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.122420][ T6537] ? clear_bhb_loop+0x70/0xc0 [ 98.122443][ T6537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.122462][ T6537] RIP: 0033:0x7f18da59e559 [ 98.122480][ T6537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.122495][ T6537] RSP: 002b:00007f18db408028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 98.122515][ T6537] RAX: ffffffffffffffda RBX: 00007f18da825fa0 RCX: 00007f18da59e559 [ 98.122529][ T6537] RDX: 00002000000001c0 RSI: 000000004020ae46 RDI: 0000000000000004 [ 98.122541][ T6537] RBP: 00007f18da6358b0 R08: 0000000000000000 R09: 0000000000000000 [ 98.122553][ T6537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.122565][ T6537] R13: 00007f18da826038 R14: 00007f18da825fa0 R15: 00007fff7b2aa398 [ 98.122597][ T6537] [ 98.499490][ T6546] fuse: Unknown parameter '0x0000000000000003' [ 98.857921][ T6562] fuse: Unknown parameter 'fd0x0000000000000003' [ 98.995554][ T6571] fuse: Unknown parameter '0x0000000000000003' [ 99.451802][ T198] kernel read not supported for file /vcsa1 (pid: 198 comm: kworker/0:2) [ 99.594218][ T6598] fuse: Unknown parameter '0x0000000000000003' [ 100.274178][ T6624] fuse: Unknown parameter '0x0000000000000003' [ 100.340720][ T6626] FAULT_INJECTION: forcing a failure. [ 100.340720][ T6626] name failslab, interval 1, probability 0, space 0, times 0 [ 100.340742][ T6626] CPU: 1 UID: 0 PID: 6626 Comm: syz.0.300 Tainted: G Y syzkaller #0 PREEMPT(full) [ 100.340757][ T6626] Tainted: [Y]=FORCED_BIND [ 100.340761][ T6626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 100.340767][ T6626] Call Trace: [ 100.340772][ T6626] [ 100.340777][ T6626] dump_stack_lvl+0xe8/0x150 [ 100.340795][ T6626] should_fail_ex+0x3eb/0x540 [ 100.340811][ T6626] should_failslab+0xa8/0x100 [ 100.340825][ T6626] __kmalloc_cache_noprof+0x9e/0x600 [ 100.340849][ T6626] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 100.340869][ T6626] ? __request_module+0x2d0/0x630 [ 100.340890][ T6626] ? __request_module+0x2d0/0x630 [ 100.340912][ T6626] __request_module+0x2d0/0x630 [ 100.340928][ T6626] ? inet6_create+0x80/0x1270 [ 100.340940][ T6626] ? __pfx___request_module+0x10/0x10 [ 100.340954][ T6626] ? lock_acquire+0x115/0x350 [ 100.340969][ T6626] ? inet6_create+0x80/0x1270 [ 100.340982][ T6626] inet6_create+0x443/0x1270 [ 100.340994][ T6626] ? inet6_create+0x80/0x1270 [ 100.341007][ T6626] __sock_create+0x4b5/0xac0 [ 100.341027][ T6626] __sys_socket+0xd6/0x1b0 [ 100.341046][ T6626] __x64_sys_socket+0x7a/0x90 [ 100.341065][ T6626] do_syscall_64+0x166/0x520 [ 100.341085][ T6626] ? trace_irq_disable+0x3b/0x140 [ 100.341104][ T6626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.341117][ T6626] ? clear_bhb_loop+0x70/0xc0 [ 100.341129][ T6626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.341146][ T6626] RIP: 0033:0x7f556c79e559 [ 100.341157][ T6626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.341165][ T6626] RSP: 002b:00007f556d675028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 100.341177][ T6626] RAX: ffffffffffffffda RBX: 00007f556ca25fa0 RCX: 00007f556c79e559 [ 100.341184][ T6626] RDX: 0000000000000106 RSI: 0000000000000005 RDI: 000000000000000a [ 100.341190][ T6626] RBP: 00007f556c8358b0 R08: 0000000000000000 R09: 0000000000000000 [ 100.341196][ T6626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.341202][ T6626] R13: 00007f556ca26038 R14: 00007f556ca25fa0 R15: 00007ffd3734f4c8 [ 100.341219][ T6626] [ 100.694460][ T6637] FAULT_INJECTION: forcing a failure. [ 100.694460][ T6637] name failslab, interval 1, probability 0, space 0, times 0 [ 100.694492][ T6637] CPU: 0 UID: 0 PID: 6637 Comm: syz.3.305 Tainted: G Y syzkaller #0 PREEMPT(full) [ 100.694517][ T6637] Tainted: [Y]=FORCED_BIND [ 100.694524][ T6637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 100.694535][ T6637] Call Trace: [ 100.694542][ T6637] [ 100.694549][ T6637] dump_stack_lvl+0xe8/0x150 [ 100.694579][ T6637] should_fail_ex+0x3eb/0x540 [ 100.694607][ T6637] should_failslab+0xa8/0x100 [ 100.694631][ T6637] __kmalloc_cache_noprof+0x9e/0x600 [ 100.694658][ T6637] ? netdev_alloc_config+0x4f/0xc0 [ 100.694689][ T6637] ? netdev_alloc_config+0x4f/0xc0 [ 100.694716][ T6637] ? alloc_netdev_mqs+0xc4a/0x1240 [ 100.694748][ T6637] netdev_alloc_config+0x4f/0xc0 [ 100.694778][ T6637] alloc_netdev_mqs+0xc84/0x1240 [ 100.694811][ T6637] tun_set_iff+0x51d/0xf20 [ 100.694846][ T6637] __tun_chr_ioctl+0x7e5/0x1e70 [ 100.694881][ T6637] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 100.694913][ T6637] ? __fget_files+0x2a/0x420 [ 100.694944][ T6637] ? __fget_files+0x2a/0x420 [ 100.694973][ T6637] ? bpf_lsm_file_ioctl+0x9/0x20 [ 100.694991][ T6637] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 100.695016][ T6637] __se_sys_ioctl+0xfc/0x170 [ 100.695040][ T6637] do_syscall_64+0x166/0x520 [ 100.695061][ T6637] ? trace_irq_disable+0x3b/0x140 [ 100.695081][ T6637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.695106][ T6637] ? clear_bhb_loop+0x70/0xc0 [ 100.695129][ T6637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.695152][ T6637] RIP: 0033:0x7fb41c99e559 [ 100.695170][ T6637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.695185][ T6637] RSP: 002b:00007fb41d8b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 100.695205][ T6637] RAX: ffffffffffffffda RBX: 00007fb41cc25fa0 RCX: 00007fb41c99e559 [ 100.695217][ T6637] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000005 [ 100.695230][ T6637] RBP: 00007fb41ca358b0 R08: 0000000000000000 R09: 0000000000000000 [ 100.695242][ T6637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.695253][ T6637] R13: 00007fb41cc26038 R14: 00007fb41cc25fa0 R15: 00007ffc4ee7e3e8 [ 100.695285][ T6637] [ 100.950346][ T6646] fuse: Unknown parameter '0x0000000000000003' [ 101.069416][ T6650] FAULT_INJECTION: forcing a failure. [ 101.069416][ T6650] name failslab, interval 1, probability 0, space 0, times 0 [ 101.069449][ T6650] CPU: 1 UID: 0 PID: 6650 Comm: syz.3.311 Tainted: G Y syzkaller #0 PREEMPT(full) [ 101.069476][ T6650] Tainted: [Y]=FORCED_BIND [ 101.069483][ T6650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 101.069495][ T6650] Call Trace: [ 101.069502][ T6650] [ 101.069510][ T6650] dump_stack_lvl+0xe8/0x150 [ 101.069542][ T6650] should_fail_ex+0x3eb/0x540 [ 101.069571][ T6650] should_failslab+0xa8/0x100 [ 101.069594][ T6650] __kmalloc_noprof+0xf9/0x710 [ 101.069619][ T6650] ? rcu_is_watching+0x16/0xb0 [ 101.069642][ T6650] ? tomoyo_realpath_from_path+0xef/0x640 [ 101.069669][ T6650] ? tomoyo_realpath_from_path+0xef/0x640 [ 101.069703][ T6650] tomoyo_realpath_from_path+0xef/0x640 [ 101.069739][ T6650] ? tomoyo_path_number_perm+0x219/0x5f0 [ 101.069761][ T6650] tomoyo_path_number_perm+0x246/0x5f0 [ 101.069787][ T6650] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 101.069809][ T6650] ? __lock_acquire+0x747/0x2de0 [ 101.069844][ T6650] ? do_futex+0x3e7/0x4e0 [ 101.069889][ T6650] ? __fget_files+0x2a/0x420 [ 101.069916][ T6650] ? __fget_files+0x2a/0x420 [ 101.069936][ T6650] ? __fget_files+0x2a/0x420 [ 101.069962][ T6650] ? _end+0x631d803f/0x0 [ 101.069984][ T6650] security_file_ioctl+0xc3/0x2a0 [ 101.070007][ T6650] ? _end+0x631d803f/0x0 [ 101.070024][ T6650] __se_sys_ioctl+0x47/0x170 [ 101.070047][ T6650] do_syscall_64+0x166/0x520 [ 101.070069][ T6650] ? trace_irq_disable+0x3b/0x140 [ 101.070088][ T6650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.070108][ T6650] ? clear_bhb_loop+0x70/0xc0 [ 101.070133][ T6650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.070152][ T6650] RIP: 0033:0x7fb41c99e559 [ 101.070171][ T6650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.070186][ T6650] RSP: 002b:00007fb41d8b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 101.070207][ T6650] RAX: ffffffffffffffda RBX: 00007fb41cc25fa0 RCX: 00007fb41c99e559 [ 101.070222][ T6650] RDX: ffffffffff60003f RSI: 0000000000004c80 RDI: 0000000000000004 [ 101.070235][ T6650] RBP: 00007fb41ca358b0 R08: 0000000000000000 R09: 0000000000000000 [ 101.070247][ T6650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.070259][ T6650] R13: 00007fb41cc26038 R14: 00007fb41cc25fa0 R15: 00007ffc4ee7e3e8 [ 101.070283][ T6650] ? _end+0x631d803f/0x0 [ 101.070308][ T6650] [ 101.070315][ T6650] ERROR: Out of memory at tomoyo_realpath_from_path. [ 101.359463][ T6663] FAULT_INJECTION: forcing a failure. [ 101.359463][ T6663] name failslab, interval 1, probability 0, space 0, times 0 [ 101.359508][ T6663] CPU: 0 UID: 0 PID: 6663 Comm: syz.0.317 Tainted: G Y syzkaller #0 PREEMPT(full) [ 101.359534][ T6663] Tainted: [Y]=FORCED_BIND [ 101.359541][ T6663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 101.359552][ T6663] Call Trace: [ 101.359559][ T6663] [ 101.359568][ T6663] dump_stack_lvl+0xe8/0x150 [ 101.359598][ T6663] should_fail_ex+0x3eb/0x540 [ 101.359628][ T6663] should_failslab+0xa8/0x100 [ 101.359650][ T6663] __kmalloc_cache_noprof+0x9e/0x600 [ 101.359678][ T6663] ? alloc_netdev_mqs+0xc4a/0x1240 [ 101.359703][ T6663] ? alloc_netdev_mqs+0xc4a/0x1240 [ 101.359730][ T6663] ? __xdp_rxq_info_reg+0x171/0x280 [ 101.359758][ T6663] alloc_netdev_mqs+0xc4a/0x1240 [ 101.359791][ T6663] tun_set_iff+0x51d/0xf20 [ 101.359826][ T6663] __tun_chr_ioctl+0x7e5/0x1e70 [ 101.359862][ T6663] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 101.359886][ T6663] ? __fget_files+0x2a/0x420 [ 101.359918][ T6663] ? __fget_files+0x2a/0x420 [ 101.359947][ T6663] ? bpf_lsm_file_ioctl+0x9/0x20 [ 101.359966][ T6663] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 101.359991][ T6663] __se_sys_ioctl+0xfc/0x170 [ 101.360013][ T6663] do_syscall_64+0x166/0x520 [ 101.360034][ T6663] ? trace_irq_disable+0x3b/0x140 [ 101.360054][ T6663] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.360071][ T6663] ? clear_bhb_loop+0x70/0xc0 [ 101.360093][ T6663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.360111][ T6663] RIP: 0033:0x7f556c79e559 [ 101.360129][ T6663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.360144][ T6663] RSP: 002b:00007f556d675028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 101.360164][ T6663] RAX: ffffffffffffffda RBX: 00007f556ca25fa0 RCX: 00007f556c79e559 [ 101.360177][ T6663] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000005 [ 101.360200][ T6663] RBP: 00007f556c8358b0 R08: 0000000000000000 R09: 0000000000000000 [ 101.360212][ T6663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.360223][ T6663] R13: 00007f556ca26038 R14: 00007f556ca25fa0 R15: 00007ffd3734f4c8 [ 101.360255][ T6663] [ 101.732902][ T6675] fuse: Unknown parameter 'fd0x0000000000000003' [ 101.917323][ T6680] FAULT_INJECTION: forcing a failure. [ 101.917323][ T6680] name failslab, interval 1, probability 0, space 0, times 0 [ 101.917357][ T6680] CPU: 1 UID: 0 PID: 6680 Comm: syz.3.325 Tainted: G Y syzkaller #0 PREEMPT(full) [ 101.917384][ T6680] Tainted: [Y]=FORCED_BIND [ 101.917391][ T6680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 101.917402][ T6680] Call Trace: [ 101.917409][ T6680] [ 101.917418][ T6680] dump_stack_lvl+0xe8/0x150 [ 101.917459][ T6680] should_fail_ex+0x3eb/0x540 [ 101.917490][ T6680] should_failslab+0xa8/0x100 [ 101.917513][ T6680] __kvmalloc_node_noprof+0x171/0x820 [ 101.917545][ T6680] ? do_getxattr+0xec/0x320 [ 101.917571][ T6680] ? do_getxattr+0xec/0x320 [ 101.917604][ T6680] do_getxattr+0xec/0x320 [ 101.917636][ T6680] filename_getxattr+0x11f/0x220 [ 101.917667][ T6680] ? __pfx_filename_getxattr+0x10/0x10 [ 101.917699][ T6680] ? do_getname+0x151/0x250 [ 101.917725][ T6680] __x64_sys_lgetxattr+0x212/0x2b0 [ 101.917758][ T6680] ? __pfx___x64_sys_lgetxattr+0x10/0x10 [ 101.917812][ T6680] ? rcu_is_watching+0x16/0xb0 [ 101.917846][ T6680] do_syscall_64+0x166/0x520 [ 101.917868][ T6680] ? trace_irq_disable+0x3b/0x140 [ 101.917887][ T6680] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.917907][ T6680] ? clear_bhb_loop+0x70/0xc0 [ 101.917929][ T6680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.917947][ T6680] RIP: 0033:0x7fb41c99e559 [ 101.917964][ T6680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.917979][ T6680] RSP: 002b:00007fb41d8b6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0 [ 101.918000][ T6680] RAX: ffffffffffffffda RBX: 00007fb41cc25fa0 RCX: 00007fb41c99e559 [ 101.918014][ T6680] RDX: 0000200000000440 RSI: 0000200000000800 RDI: 00002000000001c0 [ 101.918027][ T6680] RBP: 00007fb41ca358b0 R08: 0000000000000000 R09: 0000000000000000 [ 101.918039][ T6680] R10: 000000000000001a R11: 0000000000000246 R12: 0000000000000000 [ 101.918050][ T6680] R13: 00007fb41cc26038 R14: 00007fb41cc25fa0 R15: 00007ffc4ee7e3e8 [ 101.918080][ T6680] [ 102.119628][ T6684] FAULT_INJECTION: forcing a failure. [ 102.119628][ T6684] name failslab, interval 1, probability 0, space 0, times 0 [ 102.119659][ T6684] CPU: 1 UID: 0 PID: 6684 Comm: syz.3.326 Tainted: G Y syzkaller #0 PREEMPT(full) [ 102.119685][ T6684] Tainted: [Y]=FORCED_BIND [ 102.119692][ T6684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 102.119703][ T6684] Call Trace: [ 102.119710][ T6684] [ 102.119717][ T6684] dump_stack_lvl+0xe8/0x150 [ 102.119748][ T6684] should_fail_ex+0x3eb/0x540 [ 102.119780][ T6684] should_failslab+0xa8/0x100 [ 102.119801][ T6684] __kmalloc_cache_noprof+0x9e/0x600 [ 102.119828][ T6684] ? netdev_alloc_config+0x4f/0xc0 [ 102.119854][ T6684] ? netdev_alloc_config+0x4f/0xc0 [ 102.119881][ T6684] ? alloc_netdev_mqs+0xc4a/0x1240 [ 102.119911][ T6684] netdev_alloc_config+0x4f/0xc0 [ 102.119938][ T6684] alloc_netdev_mqs+0xc84/0x1240 [ 102.119970][ T6684] tun_set_iff+0x51d/0xf20 [ 102.120004][ T6684] __tun_chr_ioctl+0x7e5/0x1e70 [ 102.120039][ T6684] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 102.120062][ T6684] ? __fget_files+0x2a/0x420 [ 102.120093][ T6684] ? __fget_files+0x2a/0x420 [ 102.120122][ T6684] ? bpf_lsm_file_ioctl+0x9/0x20 [ 102.120140][ T6684] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 102.120163][ T6684] __se_sys_ioctl+0xfc/0x170 [ 102.120185][ T6684] do_syscall_64+0x166/0x520 [ 102.120205][ T6684] ? trace_irq_disable+0x3b/0x140 [ 102.120224][ T6684] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.120243][ T6684] ? clear_bhb_loop+0x70/0xc0 [ 102.120265][ T6684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.120283][ T6684] RIP: 0033:0x7fb41c99e559 [ 102.120299][ T6684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.120314][ T6684] RSP: 002b:00007fb41d8b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.120334][ T6684] RAX: ffffffffffffffda RBX: 00007fb41cc25fa0 RCX: 00007fb41c99e559 [ 102.120347][ T6684] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000005 [ 102.120359][ T6684] RBP: 00007fb41ca358b0 R08: 0000000000000000 R09: 0000000000000000 [ 102.120370][ T6684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.120380][ T6684] R13: 00007fb41cc26038 R14: 00007fb41cc25fa0 R15: 00007ffc4ee7e3e8 [ 102.120410][ T6684] [ 102.904311][ T6709] kvm: pic: non byte write [ 103.481051][ T6738] [ 103.483432][ T6738] ====================================================== [ 103.490453][ T6738] WARNING: possible circular locking dependency detected [ 103.497489][ T6738] syzkaller #0 Tainted: G Y [ 103.503564][ T6738] ------------------------------------------------------ [ 103.510581][ T6738] syz.1.347/6738 is trying to acquire lock: [ 103.516484][ T6738] ffff88805373ddf0 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: lookup_slow+0x46/0x80 [ 103.525991][ T6738] [ 103.525991][ T6738] but task is already holding lock: [ 103.526660][ T6740] kvm: pic: non byte write [ 103.537780][ T6738] ffff888058cbd7c0 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700 [ 103.547554][ T6738] [ 103.547554][ T6738] which lock already depends on the new lock. [ 103.547554][ T6738] [ 103.557949][ T6738] [ 103.557949][ T6738] the existing dependency chain (in reverse order) is: [ 103.566950][ T6738] [ 103.566950][ T6738] -> #1 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}: [ 103.574763][ T6738] __d_alloc_parallel+0xc32/0x1700 [ 103.580398][ T6738] __lookup_slow+0x82/0x2f0 [ 103.585420][ T6738] lookup_slow+0x59/0x80 [ 103.590193][ T6738] link_path_walk+0xd22/0x1910 [ 103.595475][ T6738] path_openat+0x1b7/0x20f0 [ 103.600502][ T6738] do_file_open+0x258/0x570 [ 103.605565][ T6738] do_sys_openat2+0x115/0x200 [ 103.610776][ T6738] __x64_sys_openat+0x138/0x170 [ 103.616190][ T6738] do_syscall_64+0x166/0x520 [ 103.621321][ T6738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.628165][ T6738] [ 103.628165][ T6738] -> #0 (&type->i_mutex_dir_key#5){++++}-{4:4}: [ 103.636594][ T6738] __lock_acquire+0x164c/0x2de0 [ 103.642061][ T6738] lock_acquire+0x115/0x350 [ 103.647078][ T6738] down_read+0x45/0x320 [ 103.651755][ T6738] lookup_slow+0x46/0x80 [ 103.656516][ T6738] ovl_lookup_single+0x323/0xe90 [ 103.661969][ T6738] ovl_lookup_layer+0x377/0x440 [ 103.667332][ T6738] ovl_lookup+0x5e5/0x1c80 [ 103.672262][ T6738] lookup_open+0x94b/0x1970 [ 103.677280][ T6738] path_openat+0x70c/0x20f0 [ 103.682292][ T6738] do_file_open+0x258/0x570 [ 103.687311][ T6738] do_sys_openat2+0x115/0x200 [ 103.692505][ T6738] __x64_sys_openat+0x138/0x170 [ 103.697873][ T6738] do_syscall_64+0x166/0x520 [ 103.702985][ T6738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.709394][ T6738] [ 103.709394][ T6738] other info that might help us debug this: [ 103.709394][ T6738] [ 103.719720][ T6738] Possible unsafe locking scenario: [ 103.719720][ T6738] [ 103.727166][ T6738] CPU0 CPU1 [ 103.732524][ T6738] ---- ---- [ 103.737903][ T6738] lock(DCACHE_PAR_LOOKUP); [ 103.742492][ T6738] lock(&type->i_mutex_dir_key#5); [ 103.750208][ T6738] lock(DCACHE_PAR_LOOKUP); [ 103.757316][ T6738] rlock(&type->i_mutex_dir_key#5); [ 103.762612][ T6738] [ 103.762612][ T6738] *** DEADLOCK *** [ 103.762612][ T6738] [ 103.770764][ T6738] locks held by syz.1.347/6738: 3, last CPU#1: [ 103.776914][ T6738] #0: ffff88803050a460 (sb_writers#17){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 103.786153][ T6738] #1: ffff888013628c50 (&ovl_i_mutex_dir_key[depth]#2){+.+.}-{4:4}, at: lookup_open+0x246/0x1970 [ 103.796866][ T6738] #2: ffff888058cbd7c0 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700 [ 103.807042][ T6738] [ 103.807042][ T6738] stack backtrace: [ 103.812945][ T6738] CPU: 1 UID: 0 PID: 6738 Comm: syz.1.347 Tainted: G Y syzkaller #0 PREEMPT(full) [ 103.823794][ T6738] Tainted: [Y]=FORCED_BIND [ 103.828195][ T6738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 103.838244][ T6738] Call Trace: [ 103.841527][ T6738] [ 103.844454][ T6738] dump_stack_lvl+0xe8/0x150 [ 103.849050][ T6738] print_circular_bug+0x2e2/0x300 [ 103.854080][ T6738] check_noncircular+0x12f/0x150 [ 103.859025][ T6738] __lock_acquire+0x164c/0x2de0 [ 103.863881][ T6738] ? lock_acquire+0x115/0x350 [ 103.868554][ T6738] lock_acquire+0x115/0x350 [ 103.873046][ T6738] ? lookup_slow+0x46/0x80 [ 103.877467][ T6738] down_read+0x45/0x320 [ 103.881619][ T6738] ? lookup_slow+0x46/0x80 [ 103.886035][ T6738] ? d_lookup+0x8a/0xa0 [ 103.890180][ T6738] lookup_slow+0x46/0x80 [ 103.894436][ T6738] ovl_lookup_single+0x323/0xe90 [ 103.899376][ T6738] ? __pfx_ovl_lookup_single+0x10/0x10 [ 103.904830][ T6738] ? tomoyo_path_number_perm+0x219/0x5f0 [ 103.910469][ T6738] ? hook_capable+0x1c3/0x5e0 [ 103.915146][ T6738] ? tomoyo_path_number_perm+0x574/0x5f0 [ 103.920776][ T6738] ovl_lookup_layer+0x377/0x440 [ 103.925627][ T6738] ovl_lookup+0x5e5/0x1c80 [ 103.930035][ T6738] ? apparmor_capable+0x126/0x170 [ 103.935054][ T6738] ? generic_permission+0x32e/0x660 [ 103.940264][ T6738] ? __pfx_ovl_lookup+0x10/0x10 [ 103.945114][ T6738] ? __pfx_ovl_permission+0x10/0x10 [ 103.950304][ T6738] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 103.955751][ T6738] ? from_kgid+0x1c6/0x660 [ 103.960165][ T6738] ? bpf_lsm_inode_create+0x9/0x20 [ 103.965275][ T6738] ? security_inode_create+0xc3/0x340 [ 103.970647][ T6738] lookup_open+0x94b/0x1970 [ 103.975156][ T6738] path_openat+0x70c/0x20f0 [ 103.979664][ T6738] do_file_open+0x258/0x570 [ 103.984170][ T6738] ? __pfx_do_file_open+0x10/0x10 [ 103.989215][ T6738] ? _raw_spin_unlock+0x28/0x50 [ 103.994081][ T6738] ? alloc_fd+0x6af/0x760 [ 103.998426][ T6738] do_sys_openat2+0x115/0x200 [ 104.003108][ T6738] ? __se_sys_futex+0x3a8/0x450 [ 104.007959][ T6738] ? __pfx_do_sys_openat2+0x10/0x10 [ 104.013162][ T6738] ? rcu_is_watching+0x16/0xb0 [ 104.017931][ T6738] __x64_sys_openat+0x138/0x170 [ 104.022803][ T6738] do_syscall_64+0x166/0x520 [ 104.027397][ T6738] ? trace_irq_disable+0x3b/0x140 [ 104.032417][ T6738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.038483][ T6738] ? clear_bhb_loop+0x70/0xc0 [ 104.043159][ T6738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.049051][ T6738] RIP: 0033:0x7f18da59e559 [ 104.053463][ T6738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.073072][ T6738] RSP: 002b:00007f18db408028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 104.081489][ T6738] RAX: ffffffffffffffda RBX: 00007f18da825fa0 RCX: 00007f18da59e559 [ 104.089465][ T6738] RDX: 000000000000275a RSI: 0000200000000600 RDI: ffffffffffffff9c [ 104.097443][ T6738] RBP: 00007f18da6358b0 R08: 0000000000000000 R09: 0000000000000000 [ 104.105504][ T6738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.113476][ T6738] R13: 00007f18da826038 R14: 00007f18da825fa0 R15: 00007fff7b2aa398 [ 104.121470][ T6738]